mongodb-windows-x86_64-6[.]0[.]4[1][.]zip

Sharing

Copy URL Twitter E-mail

General

Target

mongodb-windows-x86_64-6.0.4[1].zip
Size

501.3MB
MD5

4a7c5affc265dfc791913c93a29afe75
SHA1

836db78157d96e43ce19b618db3ea20e358fa8e1
SHA256

24c812291e535cc03f90bffd2d803c36f7867b1896453d847d881213714bff08
SHA512

af8cde7495644a2387294e7354f3c68ad50ab6c82b9df7faf1839d63e4bcfc1b423ffb6b7e8499b68efd8ec644eb3b97d44f7c417f722d3968440e3d6120fb47
SSDEEP

12582912:df1XU7PzbJQNk+DlVrskSBr+9uWEqlt1+rKxCUZ3ivuwnT5502MlK4435J0bnNkH:df1XEJQNk+3rshr+9uWltkuxCBGGA6T5

Score

10^/10

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper

https://compass.mongodb.com/api/v2/download/latest/compass/stable/windows

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/mongodb-win32-x86_64-windows-6.0.4/bin/mongod.exe
unpack001/mongodb-win32-x86_64-windows-6.0.4/bin/mongos.exe

Files

mongodb-windows-x86_64-6.0.4[1].zip
.zip
mongodb-win32-x86_64-windows-6.0.4/LICENSE-Community.txt
mongodb-win32-x86_64-windows-6.0.4/MPL-2
mongodb-win32-x86_64-windows-6.0.4/README
mongodb-win32-x86_64-windows-6.0.4/THIRD-PARTY-NOTICES
mongodb-win32-x86_64-windows-6.0.4/bin/Install-Compass.ps1
mongodb-win32-x86_64-windows-6.0.4/bin/mongod.exe
.exe windows x64

3943d4074584e46ca7c8b7246e080b2d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winhttp

WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpSendRequest
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpSetOption
WinHttpReadData
WinHttpCrackUrl
WinHttpSetTimeouts

dbghelp

SymCleanup
SymGetOptions
SymInitializeW
SymLoadModule64
SymFromAddr
SymGetLineFromAddr64
StackWalk64
SymSetOptions
SymGetModuleInfo64
EnumerateLoadedModules64
MiniDumpWriteDump
SymInitialize

iphlpapi

GetAdaptersAddresses

advapi32

InitializeSecurityDescriptor
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
SetSecurityDescriptorDacl
RegCloseKey
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
SystemFunction036
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
LookupPrivilegeValueW
PrivilegeCheck
OpenProcessToken

bcrypt

BCryptDestroyHash
BCryptFinishHash
BCryptCreateHash
BCryptGetFipsAlgorithmMode
BCryptHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptEncrypt
BCryptDecrypt
BCryptImportKey
BCryptDestroyKey
BCryptGenRandom
BCryptHashData

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCreateCertificateContext
CertFreeCertificateContext
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertGetCRLFromStore
CertCreateCRLContext
CertFreeCRLContext
CertGetCRLContextProperty
CertAddCertificateContextToStore
CryptDecodeObjectEx
CertFindExtension
CryptAcquireCertificatePrivateKey
CertRDNValueToStrW
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CryptStringToBinaryA
CertAddCRLContextToStore

dnsapi

DnsQuery_UTF8
DnsFree

kernel32

SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
AreFileApisANSI
OpenEventA
CreateDirectoryW
DeviceIoControl
CreateDirectoryExW
MoveFileExW
FindClose
FindFirstFileW
FindNextFileW
GetEnvironmentVariableA
CreateToolhelp32Snapshot
Module32First
Module32Next
GetModuleHandleExW
LockFile
UnlockFile
SleepConditionVariableCS
InitOnceExecuteOnce
FindFirstFileExW
InitOnceBeginInitialize
InitOnceComplete
InitializeSListHead
UnhandledExceptionFilter
IsProcessorFeaturePresent
OutputDebugStringW
InitializeCriticalSection
DeleteCriticalSection
VerSetConditionMask
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
VerifyVersionInfoW
LocalFree
FormatMessageA
FormatMessageW
WideCharToMultiByte
CreateFileW
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetCurrentProcess
TerminateProcess
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
Sleep
GetModuleFileNameA
WaitForSingleObject
CreateEventA
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointerEx
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
AddVectoredExceptionHandler
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
CreateFileMappingW
UnmapViewOfFile
K32GetProcessMemoryInfo
RtlInstallFunctionTableCallback
RemoveVectoredExceptionHandler
QueryPerformanceCounter
QueryPerformanceFrequency
SetCriticalSectionSpinCount
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
IsDebuggerPresent
OutputDebugStringA
GetCurrentThread
GetCurrentThreadId
GetProcessTimes
GetTickCount64
GetSystemTimeAdjustment
FreeLibrary
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
QueryUnbiasedInterruptTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetThreadId
GetThreadContext
TlsFree
TlsGetValue
CreateFileA
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
ResetEvent
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
CreateWaitableTimerW
QueueUserAPC
GetCurrentProcessId
TerminateThread
TlsAlloc
TlsSetValue
MultiByteToWideChar
GetVersionExW
MapViewOfFile
GetThreadLocale
GetLocaleInfoA
SetProcessWorkingSetSizeEx
VirtualLock
VirtualUnlock
GetProcessWorkingSetSize
GlobalMemoryStatusEx
GetLogicalProcessorInformation
GetNativeSystemInfo
QueryInformationJobObject
GetProcessAffinityMask
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleHandleW
DebugBreak
GetSystemTimePreciseAsFileTime
SystemTimeToFileTime
GetStdHandle
WriteConsoleW
GetModuleFileNameW
CreatePipe
SetNamedPipeHandleState
GetExitCodeProcess
CreateProcessW
GetDiskFreeSpaceExW
GetFileSizeEx
SetUnhandledExceptionFilter
VirtualQuery
ReleaseSRWLockShared
AcquireSRWLockShared
GetFileType
WaitForSingleObjectEx
SwitchToThread
ReleaseSemaphore

pdh

PdhAddEnglishCounterW
PdhRemoveCounter
PdhCollectQueryData
PdhCloseQuery
PdhGetFormattedCounterValue
PdhGetRawCounterValue
PdhGetCounterInfoW
PdhExpandCounterPathW
PdhGetCounterTimeBase
PdhOpenQueryW

winmm

timeEndPeriod
timeGetDevCaps
timeBeginPeriod

ws2_32

FreeAddrInfoW
GetAddrInfoW
WSASocketW
WSASend
WSARecv
WSAIoctl
WSACleanup
WSAStartup
gethostname
ntohs
ntohl
listen
htons
htonl
getpeername
bind
GetNameInfoW
shutdown
getsockopt
getsockname
ioctlsocket
connect
send
recv
socket
setsockopt
closesocket
select
__WSAFDIsSet
getnameinfo
freeaddrinfo
getaddrinfo
WSAAddressToStringW
WSAGetLastError
WSASetLastError
inet_ntop
inet_pton
accept

secur32

QueryContextAttributesW
ApplyControlToken
DeleteSecurityContext
FreeContextBuffer
InitializeSecurityContextW
FreeCredentialsHandle
AcquireCredentialsHandleW
EncryptMessage
DecryptMessage
AcceptSecurityContext

msvcp140

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?_Xruntime_error@std@@YAXPEBD@Z
?_Init_ctor@Init@ios_base@std@@CAXPEAV123@@Z
??1Init@ios_base@std@@QEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?length@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
_Mtx_trylock
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?good@ios_base@std@@QEBA_NXZ
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Thrd_yield
?_Xoverflow_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_function_call@std@@YAXXZ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Xtime_get_ticks
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
_Thrd_join
_Thrd_id
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Query_perf_counter
_Query_perf_frequency
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Lock_shared_ptr_spin_lock
_Unlock_shared_ptr_spin_lock
_Thrd_detach
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
_Thrd_sleep
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Random_device@std@@YAIXZ
?fail@ios_base@std@@QEBA_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?exceptions@ios_base@std@@QEAAXH@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Mtx_current_owns
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?toupper@?$ctype@D@std@@QEBADD@Z
??7ios_base@std@@QEBA_NXZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?classic@locale@std@@SAAEBV12@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ

mswsock

GetAcceptExSockaddrs
AcceptEx

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall
__std_terminate
__std_exception_copy
__current_exception_context
__current_exception
wcsrchr
_set_purecall_handler
strrchr
strstr
__std_type_info_hash
__RTtypeid
strchr
__std_type_info_name
__RTDynamicCast
memcmp
memchr
__C_specific_handler
__std_type_info_compare
memset
memmove
memcpy
_CxxThrowException
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

exit
abort
fesetenv
__fpe_flt_rounds
_set_abort_behavior
_invalid_parameter_noinfo
signal
_errno
_exit
strerror
_beginthreadex
set_terminate
terminate
_clearfp
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_set_invalid_parameter_handler
_set_errno
__p___argc
__p___wargv
perror
_getpid
_c_exit
_register_thread_local_exe_atexit_callback
fegetenv
_statusfp

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_callnewh
free
realloc
_msize
_set_new_mode
calloc
malloc

api-ms-win-crt-utility-l1-1-0

bsearch
rand
qsort
srand

api-ms-win-crt-time-l1-1-0

_gmtime64
strftime
_gmtime64_s
_localtime64_s
_mktime64
_localtime64
_get_timezone
_time64
_ctime64_s

api-ms-win-crt-string-l1-1-0

_strdup
wcscpy_s
wmemcpy_s
strnlen
isspace
strncat
isdigit
isalpha
ispunct
isalnum
toupper
tolower
_stricmp
islower
_strnicmp
wcsncmp
strpbrk
isprint
strncmp
strcmp
strncpy

api-ms-win-crt-math-l1-1-0

floorf
log10
_fdopen
fmod
_dsign
_ldsign
sinh
scalbn
_dclass
_fdclass
_ldclass
sin
ceil
log2
exp
cosh
atan2
atan
_fdsign
__setusermatherr
asin
llround
remainder
round
copysignf
copysign
acos
floor
log1p
frexp
sqrt
atanh
pow
roundf
asinh
acosh
ldexp
trunc
fabs
cos
tanh
tan
ceilf
log

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vfprintf
__acrt_iob_func
_write
fputs
_read
__stdio_common_vsprintf_s
__stdio_common_vsscanf
ungetc
_get_osfhandle
_fileno
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vsprintf
_set_fmode
__p__commode
_lseek
_open
_open_osfhandle
_close
_sopen_dispatch
fopen
fgetpos
_setmaxstdio

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_unlink
remove
_lock_file
_unlock_file
_fstat64i32
_stat64i32

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv

api-ms-win-crt-convert-l1-1-0

mbstowcs_s
_atoi64
wcstombs_s
strtoull
strtol
atoi
strtod
strtoul
strtoll

Exports

Exports

??0AutoSuppressStackWalking@@QEAA@XZ
??0AwakeTimeDuration@mozilla@@QEAA@XZ
??0ConditionVariableImpl@detail@mozilla@@QEAA@XZ
??0LZ4FrameCompressionContext@Compression@mozilla@@QEAA@H_K_N1@Z
??0LZ4FrameDecompressionContext@Compression@mozilla@@QEAA@_N@Z
??0MallocExtension@@QEAA@AEBV0@@Z
??0MallocExtension@@QEAA@XZ
??0MutexImpl@detail@mozilla@@QEAA@XZ
??0PageHeap@tcmalloc@@QEAA@$$QEAV01@@Z
??0PageHeap@tcmalloc@@QEAA@AEBV01@@Z
??0PageHeap@tcmalloc@@QEAA@XZ
??0PrintfTarget@mozilla@@IEAA@XZ
??0SHA1Sum@mozilla@@QEAA@XZ
??0Sampler@tcmalloc@@QEAA@XZ
??0StackTraceTable@tcmalloc@@QEAA@AEBV01@@Z
??0StackTraceTable@tcmalloc@@QEAA@XZ
??0SysAllocator@@QEAA@AEBV0@@Z
??0SysAllocator@@QEAA@XZ
??0TimeStampValue@mozilla@@AEAA@_K0_N1@Z
??1AutoSuppressStackWalking@@QEAA@XZ
??1ConditionVariableImpl@detail@mozilla@@QEAA@XZ
??1LZ4FrameCompressionContext@Compression@mozilla@@QEAA@XZ
??1LZ4FrameDecompressionContext@Compression@mozilla@@QEAA@XZ
??1MallocExtension@@UEAA@XZ
??1MutexImpl@detail@mozilla@@QEAA@XZ
??1PageHeap@tcmalloc@@QEAA@XZ
??1StackTraceTable@tcmalloc@@QEAA@XZ
??1SysAllocator@@UEAA@XZ
??4?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AX_J@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AX_J@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4MallocExtension@@QEAAAEAV0@AEBV0@@Z
??4MallocHook@@QEAAAEAV0@$$QEAV0@@Z
??4MallocHook@@QEAAAEAV0@AEBV0@@Z
??4PageHeap@tcmalloc@@QEAAAEAV01@$$QEAV01@@Z
??4PageHeap@tcmalloc@@QEAAAEAV01@AEBV01@@Z
??4Sampler@tcmalloc@@QEAAAEAV01@$$QEAV01@@Z
??4Sampler@tcmalloc@@QEAAAEAV01@AEBV01@@Z
??4StackTraceTable@tcmalloc@@QEAAAEAV01@AEBV01@@Z
??4SysAllocator@@QEAAAEAV0@AEBV0@@Z
??8AwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??8AwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??9AwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??9AwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??GAwakeTimeDuration@mozilla@@QEBA?AV01@AEBV01@@Z
??GAwakeTimeStamp@mozilla@@QEBA?AVAwakeTimeDuration@1@AEBV01@@Z
??GTimeStampValue@mozilla@@QEBA_KAEBV01@@Z
??HAwakeTimeDuration@mozilla@@QEBA?AV01@AEBV01@@Z
??HAwakeTimeStamp@mozilla@@QEBA?AV01@AEBVAwakeTimeDuration@1@@Z
??MAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??MAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??NAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??NAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??OAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??OAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??PAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??PAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??RFileHandleDeleter@detail@mozilla@@QEAAXUFileHandleHelper@12@@Z
??YAwakeTimeDuration@mozilla@@QEAAXAEBV01@@Z
??YAwakeTimeStamp@mozilla@@QEAAXAEBVAwakeTimeDuration@1@@Z
??YTimeStampValue@mozilla@@QEAAAEAV01@_J@Z
??ZAwakeTimeDuration@mozilla@@QEAAXAEBV01@@Z
??ZAwakeTimeStamp@mozilla@@QEAAXAEBVAwakeTimeDuration@1@@Z
??ZTimeStampValue@mozilla@@QEAAAEAV01@_J@Z
??_7MallocExtension@@6B@
??_7SysAllocator@@6B@
??_FLZ4FrameDecompressionContext@Compression@mozilla@@QEAAXXZ
?Add@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?Add@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAA_NP6AHPEBX_KPEAH@Z@Z
?Add@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAA_NP6AXPEBX0_K1H0@Z@Z
?Add@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX0_KHHHJ@Z@Z
?Add@?$HookList@P6AXPEBX@Z@internal@base@@QEAA_NP6AXPEBX@Z@Z
?Add@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAA_NP6AXPEBX_J@Z@Z
?Add@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAA_NP6AXPEBX_K@Z@Z
?Add@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX_KHHHJ@Z@Z
?Add@?$HookList@P6AX_J@Z@internal@base@@QEAA_NP6AX_J@Z@Z
?AddDeleteHook@MallocHook@@SA_NP6AXPEBX@Z@Z
?AddMmapHook@MallocHook@@SA_NP6AXPEBX0_KHHHJ@Z@Z
?AddMremapHook@MallocHook@@SA_NP6AXPEBX0_K1H0@Z@Z
?AddMunmapHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?AddNewHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?AddPreMmapHook@MallocHook@@SA_NP6AXPEBX_KHHHJ@Z@Z
?AddPreSbrkHook@MallocHook@@SA_NP6AX_J@Z@Z
?AddSbrkHook@MallocHook@@SA_NP6AXPEBX_J@Z@Z
?AddTrace@StackTraceTable@tcmalloc@@QEAAXAEBUStackTrace@2@@Z
?AllocLarge@PageHeap@tcmalloc@@AEAAPEAUSpan@2@_K@Z
?BeginCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QEAA?AV?$Result@V?$Span@$$CBD$0?0@mozilla@@_K@3@V?$Span@D$0?0@3@@Z
?Carve@PageHeap@tcmalloc@@AEAAPEAUSpan@2@PEAU32@_K@Z
?Check@PageHeap@tcmalloc@@QEAA_NXZ
?CheckAndHandlePreMerge@PageHeap@tcmalloc@@AEAAPEAUSpan@2@PEAU32@0@Z
?CheckExpensive@PageHeap@tcmalloc@@QEAA_NXZ
?CheckList@PageHeap@tcmalloc@@QEAA_NPEAUSpan@2@_K1H@Z
?CheckQPC@TimeStampValue@mozilla@@AEBA_KAEBV12@@Z
?CheckSet@PageHeap@tcmalloc@@QEAA_NPEAV?$set@USpanPtrWithLength@tcmalloc@@USpanBestFitLess@2@V?$STLPageHeapAllocator@USpanPtrWithLength@tcmalloc@@X@2@@std@@_KH@Z
?CommitSpan@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ
?ContinueCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QEAA?AV?$Result@V?$Span@$$CBD$0?0@mozilla@@_K@3@V?$Span@$$CBD$0?0@3@@Z
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@AEBAXPEBDHHHPEAVStringBuilder@2@@Z
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@AEBAXPEBDHHPEAVStringBuilder@2@@Z
?DecommitSpan@PageHeap@tcmalloc@@AEAA_NPEAUSpan@2@@Z
?Decompress@LZ4FrameDecompressionContext@Compression@mozilla@@QEAA?AV?$Result@ULZ4FrameDecompressionResult@Compression@mozilla@@_K@3@V?$Span@D$0?0@3@V?$Span@$$CBD$0?0@3@@Z
?Delete@PageHeap@tcmalloc@@QEAAXPEAUSpan@2@@Z
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPEADHPEA_NPEAH3@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAAEBV12@XZ
?EndCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QEAA?AV?$Result@V?$Span@$$CBD$0?0@mozilla@@_K@3@XZ
?EnsureLimit@PageHeap@tcmalloc@@AEAA_N_K_N@Z
?ExchangeSingular@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAP6AXPEBX0_K1H0@ZP6AX0011H0@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAP6AXPEBX0_KHHHJ@ZP6AX001HHHJ@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX@Z@internal@base@@QEAAP6AXPEBX@ZP6AX0@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAP6AXPEBX_J@ZP6AX01@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAP6AXPEBX_K@ZP6AX01@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAP6AXPEBX_KHHHJ@ZP6AX01HHHJ@Z@Z
?ExchangeSingular@?$HookList@P6AX_J@Z@internal@base@@QEAAP6AX_J@ZP6AX0@Z@Z
?FLAGS_tcmalloc_heap_limit_mb@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_tcmalloc_large_alloc_report_threshold@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_tcmalloc_release_rate@FLAG__namespace_do_not_use_directly_use_DECLARE_double_instead@@3NA
?FLAGS_tcmalloc_sample_parameter@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_verbose@FLAG__namespace_do_not_use_directly_use_DECLARE_int32_instead@@3HA
?FixupPrivEndLocked@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AX_J@Z@internal@base@@QEAAXXZ
?FramePointerStackWalk@mozilla@@YAXP6AXIPEAX00@ZI0PEAPEAX0@Z
?GetAggressiveDecommit@PageHeap@tcmalloc@@QEAA_NXZ
?GetAllocatedSize@MallocExtension@@UEAA_KPEBX@Z
?GetCallerStackTrace@MallocHook@@SAHPEAPEAXHH@Z
?GetDeleteHook@MallocHook@@SAP6AXPEBX@ZXZ
?GetDescriptor@PageHeap@tcmalloc@@QEBAPEAUSpan@2@_K@Z
?GetEstimatedAllocatedSize@MallocExtension@@UEAA_K_K@Z
?GetFreeListSizes@MallocExtension@@UEAAXPEAV?$vector@UFreeListInfo@MallocExtension@@V?$allocator@UFreeListInfo@MallocExtension@@@std@@@std@@@Z
?GetFuzzyfoxEnabled@TimeStamp@mozilla@@SA_NXZ
?GetHeapGrowthStacks@MallocExtension@@UEAAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetHeapSample@MallocExtension@@UEAAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLargeSpanStats@PageHeap@tcmalloc@@QEAAXPEAULargeSpanStats@12@@Z
?GetMemoryReleaseRate@MallocExtension@@UEAANXZ
?GetMmapHook@MallocHook@@SAP6AXPEBX0_KHHHJ@ZXZ
?GetMremapHook@MallocHook@@SAP6AXPEBX0_K1H0@ZXZ
?GetMunmapHook@MallocHook@@SAP6AXPEBX_K@ZXZ
?GetNewHook@MallocHook@@SAP6AXPEBX_K@ZXZ
?GetNextRange@PageHeap@tcmalloc@@QEAA_N_KPEAUMallocRange@base@@@Z
?GetNumericProperty@MallocExtension@@UEAA_NPEBDPEA_K@Z
?GetOwnership@MallocExtension@@UEAA?AW4Ownership@1@PEBX@Z
?GetPreMmapHook@MallocHook@@SAP6AXPEBX_KHHHJ@ZXZ
?GetPreSbrkHook@MallocHook@@SAP6AX_J@ZXZ
?GetQueryPerformanceFrequencyPerSec@mozilla@@YA_KXZ
?GetSamplePeriod@Sampler@tcmalloc@@SAHXZ
?GetSbrkHook@MallocHook@@SAP6AXPEBX_J@ZXZ
?GetSingular@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEBAP6AXPEBX0_K1H0@ZXZ
?GetSingular@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEBAP6AXPEBX0_KHHHJ@ZXZ
?GetSingular@?$HookList@P6AXPEBX@Z@internal@base@@QEBAP6AXPEBX@ZXZ
?GetSingular@?$HookList@P6AXPEBX_J@Z@internal@base@@QEBAP6AXPEBX_J@ZXZ
?GetSingular@?$HookList@P6AXPEBX_K@Z@internal@base@@QEBAP6AXPEBX_K@ZXZ
?GetSingular@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEBAP6AXPEBX_KHHHJ@ZXZ
?GetSingular@?$HookList@P6AX_J@Z@internal@base@@QEBAP6AX_J@ZXZ
?GetSizeClassOrZero@PageHeap@tcmalloc@@QEBAI_K@Z
?GetSmallSpanStats@PageHeap@tcmalloc@@QEAAXPEAUSmallSpanStats@12@@Z
?GetStackFrames@@YAHPEAPEAXPEAHHH@Z
?GetStackFramesWithContext@@YAHPEAPEAXPEAHHHPEBX@Z
?GetStackTrace@@YAHPEAPEAXHH@Z
?GetStackTraceWithContext@@YAHPEAPEAXHHPEBX@Z
?GetStats@MallocExtension@@UEAAXPEADH@Z
?GetSystemAllocator@MallocExtension@@UEAAPEAVSysAllocator@@XZ
?GetThreadCacheSize@MallocExtension@@UEAA_KXZ
?GrowHeap@PageHeap@tcmalloc@@AEAA_N_K@Z
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@AEBA_NNPEAVStringBuilder@2@@Z
?HashBytes@mozilla@@YAIPEBX_K@Z
?IncrementalScavenge@PageHeap@tcmalloc@@AEAAX_K@Z
?Init@Sampler@tcmalloc@@QEAAX_K@Z
?Initialize@MallocExtension@@SAXXZ
?InitializeUptime@mozilla@@YAXXZ
?InvalidateCachedSizeClass@PageHeap@tcmalloc@@QEAAX_K@Z
?InvokeDeleteHook@MallocHook@@SAXPEBX@Z
?InvokeDeleteHookSlow@MallocHook@@CAXPEBX@Z
?InvokeMmapHook@MallocHook@@SAXPEBX0_KHHHJ@Z
?InvokeMmapHookSlow@MallocHook@@CAXPEBX0_KHHHJ@Z
?InvokeMmapReplacement@MallocHook@@SA_NPEBX_KHHHJPEAPEAX@Z
?InvokeMmapReplacementSlow@MallocHook@@CA_NPEBX_KHHHJPEAPEAX@Z
?InvokeMremapHook@MallocHook@@SAXPEBX0_K1H0@Z
?InvokeMremapHookSlow@MallocHook@@CAXPEBX0_K1H0@Z
?InvokeMunmapHook@MallocHook@@SAXPEBX_K@Z
?InvokeMunmapHookSlow@MallocHook@@CAXPEBX_K@Z
?InvokeMunmapReplacement@MallocHook@@SA_NPEBX_KPEAH@Z
?InvokeMunmapReplacementSlow@MallocHook@@CA_NPEBX_KPEAH@Z
?InvokeNewHook@MallocHook@@SAXPEBX_K@Z
?InvokeNewHookSlow@MallocHook@@CAXPEBX_K@Z
?InvokePreMmapHook@MallocHook@@SAXPEBX_KHHHJ@Z
?InvokePreMmapHookSlow@MallocHook@@CAXPEBX_KHHHJ@Z
?InvokePreSbrkHook@MallocHook@@SAX_J@Z
?InvokePreSbrkHookSlow@MallocHook@@CAX_J@Z
?InvokeSbrkHook@MallocHook@@SAXPEBX_J@Z
?InvokeSbrkHookSlow@MallocHook@@CAXPEBX_J@Z
?IsFloat32Representable@mozilla@@YA_NN@Z
?IsValidUtf8@detail@mozilla@@YA_NPEBX_K@Z
?Log@tcmalloc@@YAXW4LogMode@1@PEBDHVLogItem@1@222@Z
?MallocMemoryStats@MallocExtension@@UEAA_NPEAHPEA_KQEAH@Z
?MarkThreadBusy@MallocExtension@@UEAAXXZ
?MarkThreadIdle@MallocExtension@@UEAAXXZ
?MarkThreadTemporarilyIdle@MallocExtension@@UEAAXXZ
?MergeIntoFreeList@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?MozStackWalkThread@@YAXP6AXIPEAX00@ZI00PEAU_CONTEXT@@@Z
?New@PageHeap@tcmalloc@@QEAAPEAUSpan@2@_K@Z
?NextRandom@Sampler@tcmalloc@@SA_K_K@Z
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
?NowFuzzy@TimeStamp@mozilla@@CA?AV12@VTimeStampValue@2@@Z
?NowFuzzyTime@TimeStamp@mozilla@@SA_JXZ
?NowLoRes@AwakeTimeStamp@mozilla@@SA?AV12@XZ
?NowUnfuzzed@TimeStamp@mozilla@@CA?AV12@_N@Z
?PickNextSamplingPoint@Sampler@tcmalloc@@QEAA_JXZ
?PrependToFreeList@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@PEA_N@Z
?ProcessUptimeExcludingSuspendMs@mozilla@@YA?AV?$Maybe@_K@1@XZ
?ProcessUptimeMs@mozilla@@YA?AV?$Maybe@_K@1@XZ
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ
?RandomUint64OrDie@mozilla@@YA_KXZ
?Ranges@MallocExtension@@UEAAXPEAXP6AX0PEBUMallocRange@base@@@Z@Z
?ReadHeapGrowthStackTraces@MallocExtension@@UEAAPEAPEAXXZ
?ReadStackTraces@MallocExtension@@UEAAPEAPEAXPEAH@Z
?ReadStackTracesAndClear@StackTraceTable@tcmalloc@@QEAAPEAPEAXXZ
?RecordAllocation@Sampler@tcmalloc@@QEAA_N_K@Z
?RecordAllocationSlow@Sampler@tcmalloc@@AEAA_N_K@Z
?RecordProcessRestart@TimeStamp@mozilla@@SAXXZ
?RecordSpan@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?Register@MallocExtension@@SAXPEAV1@@Z
?RegisterJitCodeRegion@@YAXPEAE_K@Z
?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APEAXPEBD0PEAX@ZP6AX1@Z@Z
?RegisterSizeClass@PageHeap@tcmalloc@@QEAAXPEAUSpan@2@I@Z
?ReleaseAtLeastNPages@PageHeap@tcmalloc@@QEAA_K_K@Z
?ReleaseFreeMemory@MallocExtension@@UEAAXXZ
?ReleaseSpan@PageHeap@tcmalloc@@AEAA_KPEAUSpan@2@@Z
?ReleaseToSystem@MallocExtension@@UEAAX_K@Z
?Remove@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?Remove@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAA_NP6AHPEBX_KPEAH@Z@Z
?Remove@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAA_NP6AXPEBX0_K1H0@Z@Z
?Remove@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX0_KHHHJ@Z@Z
?Remove@?$HookList@P6AXPEBX@Z@internal@base@@QEAA_NP6AXPEBX@Z@Z
?Remove@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAA_NP6AXPEBX_J@Z@Z
?Remove@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAA_NP6AXPEBX_K@Z@Z
?Remove@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX_KHHHJ@Z@Z
?Remove@?$HookList@P6AX_J@Z@internal@base@@QEAA_NP6AX_J@Z@Z
?RemoveDeleteHook@MallocHook@@SA_NP6AXPEBX@Z@Z
?RemoveFromFreeList@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?RemoveMmapHook@MallocHook@@SA_NP6AXPEBX0_KHHHJ@Z@Z
?RemoveMmapReplacement@MallocHook@@SA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?RemoveMremapHook@MallocHook@@SA_NP6AXPEBX0_K1H0@Z@Z
?RemoveMunmapHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?RemoveMunmapReplacement@MallocHook@@SA_NP6AHPEBX_KPEAH@Z@Z
?RemoveNewHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?RemovePreMmapHook@MallocHook@@SA_NP6AXPEBX_KHHHJ@Z@Z
?RemovePreSbrkHook@MallocHook@@SA_NP6AX_J@Z@Z
?RemoveSbrkHook@MallocHook@@SA_NP6AXPEBX_J@Z@Z
?ResolutionInTicks@BaseTimeDurationPlatformUtils@mozilla@@SA_JXZ
?SearchFreeAndLargeLists@PageHeap@tcmalloc@@AEAAPEAUSpan@2@_K@Z
?SetAggressiveDecommit@PageHeap@tcmalloc@@QEAAX_N@Z
?SetCachedSizeClass@PageHeap@tcmalloc@@QEAAX_KI@Z
?SetDeleteHook@MallocHook@@SAP6AXPEBX@ZP6AX0@Z@Z
?SetFuzzyfoxEnabled@TimeStamp@mozilla@@SAX_N@Z
?SetMemoryReleaseRate@MallocExtension@@UEAAXN@Z
?SetMmapHook@MallocHook@@SAP6AXPEBX0_KHHHJ@ZP6AX001HHHJ@Z@Z
?SetMmapReplacement@MallocHook@@SA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?SetMremapHook@MallocHook@@SAP6AXPEBX0_K1H0@ZP6AX0011H0@Z@Z
?SetMunmapHook@MallocHook@@SAP6AXPEBX_K@ZP6AX01@Z@Z
?SetMunmapReplacement@MallocHook@@SA_NP6AHPEBX_KPEAH@Z@Z
?SetNewHook@MallocHook@@SAP6AXPEBX_K@ZP6AX01@Z@Z
?SetNumericProperty@MallocExtension@@UEAA_NPEBD_K@Z
?SetPreMmapHook@MallocHook@@SAP6AXPEBX_KHHHJ@ZP6AX01HHHJ@Z@Z
?SetPreSbrkHook@MallocHook@@SAP6AX_J@ZP6AX0@Z@Z
?SetSbrkHook@MallocHook@@SAP6AXPEBX_J@ZP6AX01@Z@Z
?SetSystemAllocator@MallocExtension@@UEAAXPEAVSysAllocator@@@Z
?Shutdown@TimeStamp@mozilla@@SAXXZ
?SizeClasses@MallocExtension@@UEAAXPEAXP6AX0PEBUMallocSizeClass@base@@@ZP6AX0PEBUPageHeapSizeClass@3@@Z@Z
?Split@PageHeap@tcmalloc@@QEAAPEAUSpan@2@PEAU32@_K@Z
?Startup@TimeStamp@mozilla@@SAXXZ
?TCMalloc_SystemAlloc@@YAPEAX_KPEA_K0@Z
?TCMalloc_SystemCommit@@YAXPEAX_K@Z
?TCMalloc_SystemRelease@@YA_NPEAX_K@Z
?TCMalloc_SystemTaken@@3_KA
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z
?ToExponential@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToFixed@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToMicroseconds@AwakeTimeDuration@mozilla@@QEBANXZ
?ToMilliseconds@AwakeTimeDuration@mozilla@@QEBANXZ
?ToPrecision@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToSeconds@AwakeTimeDuration@mozilla@@QEBANXZ
?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToSecondsSigDigits@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@AEBA_NNPEAVStringBuilder@2@W4DtoaMode@12@@Z
?Traverse@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEBAHPEAP6AHPEBX_KHHHJPEAPEAX@ZH@Z
?Traverse@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEBAHPEAP6AHPEBX_KPEAH@ZH@Z
?Traverse@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEBAHPEAP6AXPEBX0_K1H0@ZH@Z
?Traverse@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEBAHPEAP6AXPEBX0_KHHHJ@ZH@Z
?Traverse@?$HookList@P6AXPEBX@Z@internal@base@@QEBAHPEAP6AXPEBX@ZH@Z
?Traverse@?$HookList@P6AXPEBX_J@Z@internal@base@@QEBAHPEAP6AXPEBX_J@ZH@Z
?Traverse@?$HookList@P6AXPEBX_K@Z@internal@base@@QEBAHPEAP6AXPEBX_K@ZH@Z
?Traverse@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEBAHPEAP6AXPEBX_KHHHJ@ZH@Z
?Traverse@?$HookList@P6AX_J@Z@internal@base@@QEBAHPEAP6AX_J@ZH@Z
?TryGetSizeClass@PageHeap@tcmalloc@@QEBA_N_KPEAI@Z
?TryRecordAllocationFast@Sampler@tcmalloc@@QEAA_N_K@Z
?UnhookedMMap@MallocHook@@SAPEAXPEAX_KHHHJ@Z
?UnhookedMUnmap@MallocHook@@SAHPEAX_K@Z
?UnregisterJitCodeRegion@@YAXPEAE_K@Z
?Unused@mozilla@@3Uunused_t@1@B
?UpdateFuzzyTime@TimeStamp@mozilla@@CAX_J@Z
?UpdateFuzzyTimeStamp@TimeStamp@mozilla@@CAXV12@@Z
?VerifyAllMemory@MallocExtension@@UEAA_NXZ
?VerifyArrayNewMemory@MallocExtension@@UEAA_NPEBX@Z
?VerifyMallocMemory@MallocExtension@@UEAA_NPEBX@Z
?VerifyNewMemory@MallocExtension@@UEAA_NPEBX@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_NH@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_NI@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_N_J@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_N_K@Z
?appendIntHex@PrintfTarget@mozilla@@QEAA_NI@Z
?appendIntHex@PrintfTarget@mozilla@@QEAA_N_K@Z
?appendIntOct@PrintfTarget@mozilla@@QEAA_NI@Z
?appendIntOct@PrintfTarget@mozilla@@QEAA_N_K@Z
?bucket_total@StackTraceTable@tcmalloc@@QEBAHXZ
?compress@LZ4@Compression@mozilla@@SA_KPEBD_KPEAD@Z
?compressLimitedOutput@LZ4@Compression@mozilla@@SA_KPEBD_KPEAD1@Z
?decompress@LZ4@Compression@mozilla@@SA_NPEBD_KPEAD1PEA_K@Z
?decompressPartial@LZ4@Compression@mozilla@@SA_NPEBD_KPEAD1PEA_K@Z
?depth_total@StackTraceTable@tcmalloc@@QEBAHXZ
?empty@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX_J@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX_K@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AX_J@Z@internal@base@@QEBA_NXZ
?finish@SHA1Sum@mozilla@@QEAAXAEAY0BE@E@Z
?foo@link_static_warning_inhibit@boost@@YAXXZ
?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
?gTwoCharEscapes@detail@mozilla@@3QBDB
?instance@MallocExtension@@SAPEAV1@XZ
?kDefaultReleaseDelay@PageHeap@tcmalloc@@0HB
?kMaxReleaseDelay@PageHeap@tcmalloc@@0HB
?kMinSystemAlloc@PageHeap@tcmalloc@@0HB
?kPageMapBigAllocationThreshold@PageHeap@tcmalloc@@0_KB
?lock@MutexImpl@detail@mozilla@@IEAAXXZ
?log_message_writer@tcmalloc@@3P6AXPEBDH@ZEA
?notify_all@ConditionVariableImpl@detail@mozilla@@QEAAXXZ
?notify_one@ConditionVariableImpl@detail@mozilla@@QEAAXXZ
?print@PrintfTarget@mozilla@@QEAA_NPEBDZZ
?stats@PageHeap@tcmalloc@@QEBA?AUStats@12@XZ
?tcmalloc_sys_alloc@@3PEAVSysAllocator@@EA
?tryLock@MutexImpl@detail@mozilla@@IEAA_NXZ
?unlock@MutexImpl@detail@mozilla@@IEAAXXZ
?update@SHA1Sum@mozilla@@QEAAXPEBXI@Z
?vprint@PrintfTarget@mozilla@@QEAA_NPEBDPEAD@Z
?wait@ConditionVariableImpl@detail@mozilla@@QEAAXAEAVMutexImpl@23@@Z
?wait_for@ConditionVariableImpl@detail@mozilla@@QEAA?AW4CVStatus@3@AEAVMutexImpl@23@AEBV?$BaseTimeDuration@VTimeDurationValueCalculator@mozilla@@@3@@Z
MOZ_CrashPrintf
MallocExtension_GetAllocatedSize
MallocExtension_GetEstimatedAllocatedSize
MallocExtension_GetNumericProperty
MallocExtension_GetOwnership
MallocExtension_GetStats
MallocExtension_GetThreadCacheSize
MallocExtension_MallocMemoryStats
MallocExtension_MarkThreadBusy
MallocExtension_MarkThreadIdle
MallocExtension_MarkThreadTemporarilyIdle
MallocExtension_ReleaseFreeMemory
MallocExtension_ReleaseToSystem
MallocExtension_SetNumericProperty
MallocExtension_SizeClasses
MallocExtension_VerifyAllMemory
MallocExtension_VerifyArrayNewMemory
MallocExtension_VerifyMallocMemory
MallocExtension_VerifyNewMemory
MallocHook_AddDeleteHook
MallocHook_AddMmapHook
MallocHook_AddMremapHook
MallocHook_AddMunmapHook
MallocHook_AddNewHook
MallocHook_AddPreMmapHook
MallocHook_AddPreSbrkHook
MallocHook_AddSbrkHook
MallocHook_GetCallerStackTrace
MallocHook_RemoveDeleteHook
MallocHook_RemoveMmapHook
MallocHook_RemoveMremapHook
MallocHook_RemoveMunmapHook
MallocHook_RemoveNewHook
MallocHook_RemovePreMmapHook
MallocHook_RemovePreSbrkHook
MallocHook_RemoveSbrkHook
MallocHook_SetDeleteHook
MallocHook_SetMmapHook
MallocHook_SetMremapHook
MallocHook_SetMunmapHook
MallocHook_SetNewHook
MallocHook_SetPreMmapHook
MallocHook_SetPreSbrkHook
MallocHook_SetSbrkHook
MozDescribeCodeAddress
MozFormatCodeAddress
MozFormatCodeAddressDetails
MozStackWalk
MozWalkTheStack
MozWalkTheStackWithWriter
WriteToStderr
__sbrk
gMozCrashReason
gMozillaPoisonBase
gMozillaPoisonSize
gMozillaPoisonValue
getpagesize
nallocx
tc_calloc
tc_cfree
tc_delete
tc_delete_nothrow
tc_delete_sized
tc_deletearray
tc_deletearray_nothrow
tc_deletearray_sized
tc_free
tc_free_sized
tc_malloc
tc_malloc_size
tc_malloc_skip_new_handler
tc_malloc_stats
tc_mallopt
tc_memalign
tc_nallocx
tc_new
tc_new_nothrow
tc_newarray
tc_newarray_nothrow
tc_posix_memalign
tc_pvalloc
tc_query_new_mode
tc_realloc
tc_set_new_mode
tc_valloc
tc_version

Sections

.text
Size: 37.3MB - Virtual size: 37.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12.6MB - Virtual size: 12.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mongodb-win32-x86_64-windows-6.0.4/bin/mongod.pdb
mongodb-win32-x86_64-windows-6.0.4/bin/mongos.exe
.exe windows x64

393a5f3ee981cab3c08ee1726260f22d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winhttp

WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpSendRequest
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpSetOption
WinHttpReadData
WinHttpCrackUrl
WinHttpSetTimeouts

dbghelp

SymFromAddr
SymInitialize
SymCleanup
SymGetLineFromAddr64
SymGetOptions
StackWalk64
SymGetModuleInfo64
MiniDumpWriteDump
SymInitializeW
EnumerateLoadedModules64
SymSetOptions
SymLoadModule64

advapi32

InitializeSecurityDescriptor
RegQueryValueExW
RegOpenKeyExW
AdjustTokenPrivileges
SetSecurityDescriptorDacl
RegCloseKey
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
SystemFunction036
LookupPrivilegeValueW
PrivilegeCheck
OpenProcessToken
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW

bcrypt

BCryptGenRandom
BCryptDestroyKey
BCryptImportKey
BCryptDecrypt
BCryptCreateHash
BCryptCloseAlgorithmProvider
BCryptHash
BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptHashData
BCryptGetFipsAlgorithmMode
BCryptFinishHash
BCryptEncrypt
BCryptDestroyHash

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCreateCertificateContext
CertFreeCertificateContext
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertGetCRLFromStore
CertCreateCRLContext
CertFreeCRLContext
CertGetCRLContextProperty
CertAddCertificateContextToStore
CryptDecodeObjectEx
CertFindExtension
CryptAcquireCertificatePrivateKey
CertRDNValueToStrW
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CryptStringToBinaryA
CertAddCRLContextToStore

dnsapi

DnsQuery_UTF8
DnsFree

kernel32

GetFileAttributesExW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
AreFileApisANSI
GetFileInformationByHandle
SetFilePointer
OpenEventA
ReleaseSemaphore
SwitchToThread
WaitForSingleObjectEx
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
DeviceIoControl
CreateDirectoryExW
MoveFileExW
FindClose
FindFirstFileW
FindNextFileW
GetEnvironmentVariableA
CreateToolhelp32Snapshot
Module32First
Module32Next
FindFirstFileExW
InitOnceBeginInitialize
InitOnceComplete
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
OutputDebugStringW
VerSetConditionMask
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
VerifyVersionInfoW
Sleep
GetModuleFileNameA
LocalFree
FormatMessageW
FormatMessageA
WideCharToMultiByte
CloseHandle
GetCurrentProcess
WaitForSingleObject
CreateEventA
SetConsoleCtrlHandler
LoadLibraryW
TerminateProcess
AddVectoredExceptionHandler
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
CreateFileMappingW
UnmapViewOfFile
K32GetProcessMemoryInfo
RtlInstallFunctionTableCallback
RemoveVectoredExceptionHandler
QueryPerformanceCounter
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetCriticalSectionSpinCount
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
IsDebuggerPresent
OutputDebugStringA
GetCurrentThread
GetCurrentThreadId
GetProcessTimes
GetTickCount64
GetSystemTimeAdjustment
FreeLibrary
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
QueryUnbiasedInterruptTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
InitializeCriticalSection
GetThreadId
GetThreadContext
TryEnterCriticalSection
TlsFree
TlsGetValue
CreateFileA
ReadFile
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
ResetEvent
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
CreateWaitableTimerW
QueueUserAPC
GetCurrentProcessId
TerminateThread
TlsAlloc
TlsSetValue
MultiByteToWideChar
GetVersionExW
MapViewOfFile
GetThreadLocale
GetLocaleInfoA
SetProcessWorkingSetSizeEx
VirtualLock
VirtualUnlock
GetProcessWorkingSetSize
GlobalMemoryStatusEx
GetLogicalProcessorInformation
GetNativeSystemInfo
QueryInformationJobObject
GetProcessAffinityMask
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleHandleW
DebugBreak
GetSystemTimePreciseAsFileTime
SystemTimeToFileTime
GetStdHandle
WriteConsoleW
GetModuleFileNameW
CreatePipe
SetNamedPipeHandleState
GetExitCodeProcess
CreateProcessW
CreateFileW
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
SetUnhandledExceptionFilter
VirtualQuery
ReleaseSRWLockShared
AcquireSRWLockShared
GetFileType

pdh

PdhOpenQueryW
PdhRemoveCounter
PdhCollectQueryData
PdhCloseQuery
PdhGetFormattedCounterValue
PdhGetRawCounterValue
PdhGetCounterInfoW
PdhExpandCounterPathW
PdhGetCounterTimeBase
PdhAddEnglishCounterW

winmm

timeEndPeriod
timeGetDevCaps
timeBeginPeriod

ws2_32

FreeAddrInfoW
GetAddrInfoW
WSASocketW
WSASend
WSARecv
WSAIoctl
WSACleanup
WSAStartup
gethostname
ntohs
ntohl
listen
htons
htonl
getpeername
bind
GetNameInfoW
shutdown
getsockopt
getsockname
ioctlsocket
connect
send
recv
socket
setsockopt
closesocket
select
__WSAFDIsSet
getnameinfo
freeaddrinfo
getaddrinfo
WSAAddressToStringW
WSAGetLastError
WSASetLastError
inet_ntop
inet_pton
accept

secur32

QueryContextAttributesW
ApplyControlToken
DeleteSecurityContext
FreeContextBuffer
InitializeSecurityContextW
FreeCredentialsHandle
AcquireCredentialsHandleW
EncryptMessage
DecryptMessage
AcceptSecurityContext

msvcp140

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?_Xruntime_error@std@@YAXPEBD@Z
?_Init_ctor@Init@ios_base@std@@CAXPEAV123@@Z
??1Init@ios_base@std@@QEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?length@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
_Mtx_trylock
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?good@ios_base@std@@QEBA_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Thrd_yield
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
?_Xoverflow_error@std@@YAXPEBD@Z
_Thrd_sleep
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xbad_function_call@std@@YAXXZ
_Xtime_get_ticks
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
_Thrd_join
_Thrd_id
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_broadcast
?_Random_device@std@@YAIXZ
_Thrd_detach
_Query_perf_counter
_Query_perf_frequency
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Mtx_current_owns
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?toupper@?$ctype@D@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?exceptions@ios_base@std@@QEAAXH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

mswsock

GetAcceptExSockaddrs
AcceptEx

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
__current_exception_context
__current_exception
wcsrchr
_set_purecall_handler
strrchr
__std_type_info_name
strchr
strstr
__std_type_info_hash
__RTtypeid
__RTDynamicCast
memchr
memcmp
__std_type_info_compare
_purecall
memset
__C_specific_handler
memmove
memcpy
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_clearfp
_statusfp
_exit
_initialize_onexit_table
_set_errno
_register_onexit_function
_crt_atexit
_cexit
_set_abort_behavior
_seh_filter_exe
_set_app_type
_errno
_configure_wide_argv
signal
strerror
exit
_invalid_parameter_noinfo
abort
_initialize_wide_environment
_get_initial_wide_environment
_beginthreadex
set_terminate
terminate
_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
__p___argc
__p___wargv
_c_exit
perror
_getpid
__fpe_flt_rounds
fesetenv
fegetenv
_register_thread_local_exe_atexit_callback
_set_invalid_parameter_handler

api-ms-win-crt-heap-l1-1-0

_callnewh
_aligned_malloc
free
_set_new_mode
calloc
malloc
_aligned_free
realloc
_msize

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_fdopen
remainder
llround
_dsign
_ldsign
_fdsign
_fdclass
_ldclass
round
frexp
pow
fabs
ceil
scalbn
trunc
ldexp
atanh
asinh
acosh
tanh
tan
sqrt
sinh
sin
log10
log
copysignf
copysign
fmod
exp
cosh
__setusermatherr
atan2
log2
cos
ceilf
floorf
_dclass
floor
acos
asin
atan

api-ms-win-crt-string-l1-1-0

wcscpy_s
strncpy
strncmp
isdigit
ispunct
isalnum
toupper
tolower
_stricmp
strnlen
isprint
islower
_strnicmp
strcmp
_strdup
wmemcpy_s
isspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
_lseek
ungetc
setvbuf
fputc
fputs
__p__commode
fwrite
_fseeki64
_open
__stdio_common_vsscanf
_read
_fileno
fsetpos
fopen
_get_osfhandle
_set_fmode
__stdio_common_vfprintf
__acrt_iob_func
_write
fgetpos
fgetc
_open_osfhandle
__stdio_common_vsprintf
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
fflush
_close
_sopen_dispatch
fclose
fread
_setmaxstdio

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_unlock_file
_lock_file
_unlink
remove
_stat64i32

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-time-l1-1-0

_gmtime64
_get_timezone
_ctime64_s
_mktime64
_gmtime64_s
strftime
_localtime64_s
_time64
_localtime64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv

api-ms-win-crt-convert-l1-1-0

_atoi64
wcstombs_s
strtol
atoi
mbstowcs_s
strtoll
strtod
strtoul

Exports

Exports

??0AutoSuppressStackWalking@@QEAA@XZ
??0AwakeTimeDuration@mozilla@@QEAA@XZ
??0ConditionVariableImpl@detail@mozilla@@QEAA@XZ
??0LZ4FrameCompressionContext@Compression@mozilla@@QEAA@H_K_N1@Z
??0LZ4FrameDecompressionContext@Compression@mozilla@@QEAA@_N@Z
??0MallocExtension@@QEAA@AEBV0@@Z
??0MallocExtension@@QEAA@XZ
??0MutexImpl@detail@mozilla@@QEAA@XZ
??0PageHeap@tcmalloc@@QEAA@$$QEAV01@@Z
??0PageHeap@tcmalloc@@QEAA@AEBV01@@Z
??0PageHeap@tcmalloc@@QEAA@XZ
??0PrintfTarget@mozilla@@IEAA@XZ
??0SHA1Sum@mozilla@@QEAA@XZ
??0Sampler@tcmalloc@@QEAA@XZ
??0StackTraceTable@tcmalloc@@QEAA@AEBV01@@Z
??0StackTraceTable@tcmalloc@@QEAA@XZ
??0SysAllocator@@QEAA@AEBV0@@Z
??0SysAllocator@@QEAA@XZ
??0TimeStampValue@mozilla@@AEAA@_K0_N1@Z
??1AutoSuppressStackWalking@@QEAA@XZ
??1ConditionVariableImpl@detail@mozilla@@QEAA@XZ
??1LZ4FrameCompressionContext@Compression@mozilla@@QEAA@XZ
??1LZ4FrameDecompressionContext@Compression@mozilla@@QEAA@XZ
??1MallocExtension@@UEAA@XZ
??1MutexImpl@detail@mozilla@@QEAA@XZ
??1PageHeap@tcmalloc@@QEAA@XZ
??1StackTraceTable@tcmalloc@@QEAA@XZ
??1SysAllocator@@UEAA@XZ
??4?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4?$HookList@P6AX_J@Z@internal@base@@QEAAAEAU012@$$QEAU012@@Z
??4?$HookList@P6AX_J@Z@internal@base@@QEAAAEAU012@AEBU012@@Z
??4MallocExtension@@QEAAAEAV0@AEBV0@@Z
??4MallocHook@@QEAAAEAV0@$$QEAV0@@Z
??4MallocHook@@QEAAAEAV0@AEBV0@@Z
??4PageHeap@tcmalloc@@QEAAAEAV01@$$QEAV01@@Z
??4PageHeap@tcmalloc@@QEAAAEAV01@AEBV01@@Z
??4Sampler@tcmalloc@@QEAAAEAV01@$$QEAV01@@Z
??4Sampler@tcmalloc@@QEAAAEAV01@AEBV01@@Z
??4StackTraceTable@tcmalloc@@QEAAAEAV01@AEBV01@@Z
??4SysAllocator@@QEAAAEAV0@AEBV0@@Z
??8AwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??8AwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??9AwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??9AwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??GAwakeTimeDuration@mozilla@@QEBA?AV01@AEBV01@@Z
??GAwakeTimeStamp@mozilla@@QEBA?AVAwakeTimeDuration@1@AEBV01@@Z
??GTimeStampValue@mozilla@@QEBA_KAEBV01@@Z
??HAwakeTimeDuration@mozilla@@QEBA?AV01@AEBV01@@Z
??HAwakeTimeStamp@mozilla@@QEBA?AV01@AEBVAwakeTimeDuration@1@@Z
??MAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??MAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??NAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??NAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??OAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??OAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??PAwakeTimeDuration@mozilla@@QEBA_NAEBV01@@Z
??PAwakeTimeStamp@mozilla@@QEBA_NAEBV01@@Z
??RFileHandleDeleter@detail@mozilla@@QEAAXUFileHandleHelper@12@@Z
??YAwakeTimeDuration@mozilla@@QEAAXAEBV01@@Z
??YAwakeTimeStamp@mozilla@@QEAAXAEBVAwakeTimeDuration@1@@Z
??YTimeStampValue@mozilla@@QEAAAEAV01@_J@Z
??ZAwakeTimeDuration@mozilla@@QEAAXAEBV01@@Z
??ZAwakeTimeStamp@mozilla@@QEAAXAEBVAwakeTimeDuration@1@@Z
??ZTimeStampValue@mozilla@@QEAAAEAV01@_J@Z
??_7MallocExtension@@6B@
??_7SysAllocator@@6B@
??_FLZ4FrameDecompressionContext@Compression@mozilla@@QEAAXXZ
?Add@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?Add@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAA_NP6AHPEBX_KPEAH@Z@Z
?Add@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAA_NP6AXPEBX0_K1H0@Z@Z
?Add@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX0_KHHHJ@Z@Z
?Add@?$HookList@P6AXPEBX@Z@internal@base@@QEAA_NP6AXPEBX@Z@Z
?Add@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAA_NP6AXPEBX_J@Z@Z
?Add@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAA_NP6AXPEBX_K@Z@Z
?Add@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX_KHHHJ@Z@Z
?Add@?$HookList@P6AX_J@Z@internal@base@@QEAA_NP6AX_J@Z@Z
?AddDeleteHook@MallocHook@@SA_NP6AXPEBX@Z@Z
?AddMmapHook@MallocHook@@SA_NP6AXPEBX0_KHHHJ@Z@Z
?AddMremapHook@MallocHook@@SA_NP6AXPEBX0_K1H0@Z@Z
?AddMunmapHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?AddNewHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?AddPreMmapHook@MallocHook@@SA_NP6AXPEBX_KHHHJ@Z@Z
?AddPreSbrkHook@MallocHook@@SA_NP6AX_J@Z@Z
?AddSbrkHook@MallocHook@@SA_NP6AXPEBX_J@Z@Z
?AddTrace@StackTraceTable@tcmalloc@@QEAAXAEBUStackTrace@2@@Z
?AllocLarge@PageHeap@tcmalloc@@AEAAPEAUSpan@2@_K@Z
?BeginCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QEAA?AV?$Result@V?$Span@$$CBD$0?0@mozilla@@_K@3@V?$Span@D$0?0@3@@Z
?Carve@PageHeap@tcmalloc@@AEAAPEAUSpan@2@PEAU32@_K@Z
?Check@PageHeap@tcmalloc@@QEAA_NXZ
?CheckAndHandlePreMerge@PageHeap@tcmalloc@@AEAAPEAUSpan@2@PEAU32@0@Z
?CheckExpensive@PageHeap@tcmalloc@@QEAA_NXZ
?CheckList@PageHeap@tcmalloc@@QEAA_NPEAUSpan@2@_K1H@Z
?CheckQPC@TimeStampValue@mozilla@@AEBA_KAEBV12@@Z
?CheckSet@PageHeap@tcmalloc@@QEAA_NPEAV?$set@USpanPtrWithLength@tcmalloc@@USpanBestFitLess@2@V?$STLPageHeapAllocator@USpanPtrWithLength@tcmalloc@@X@2@@std@@_KH@Z
?CommitSpan@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ
?ContinueCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QEAA?AV?$Result@V?$Span@$$CBD$0?0@mozilla@@_K@3@V?$Span@$$CBD$0?0@3@@Z
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@AEBAXPEBDHHHPEAVStringBuilder@2@@Z
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@AEBAXPEBDHHPEAVStringBuilder@2@@Z
?DecommitSpan@PageHeap@tcmalloc@@AEAA_NPEAUSpan@2@@Z
?Decompress@LZ4FrameDecompressionContext@Compression@mozilla@@QEAA?AV?$Result@ULZ4FrameDecompressionResult@Compression@mozilla@@_K@3@V?$Span@D$0?0@3@V?$Span@$$CBD$0?0@3@@Z
?Delete@PageHeap@tcmalloc@@QEAAXPEAUSpan@2@@Z
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPEADHPEA_NPEAH3@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAAEBV12@XZ
?EndCompressing@LZ4FrameCompressionContext@Compression@mozilla@@QEAA?AV?$Result@V?$Span@$$CBD$0?0@mozilla@@_K@3@XZ
?EnsureLimit@PageHeap@tcmalloc@@AEAA_N_K_N@Z
?ExchangeSingular@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAP6AXPEBX0_K1H0@ZP6AX0011H0@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAP6AXPEBX0_KHHHJ@ZP6AX001HHHJ@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX@Z@internal@base@@QEAAP6AXPEBX@ZP6AX0@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAP6AXPEBX_J@ZP6AX01@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAP6AXPEBX_K@ZP6AX01@Z@Z
?ExchangeSingular@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAP6AXPEBX_KHHHJ@ZP6AX01HHHJ@Z@Z
?ExchangeSingular@?$HookList@P6AX_J@Z@internal@base@@QEAAP6AX_J@ZP6AX0@Z@Z
?FLAGS_tcmalloc_heap_limit_mb@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_tcmalloc_large_alloc_report_threshold@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_tcmalloc_release_rate@FLAG__namespace_do_not_use_directly_use_DECLARE_double_instead@@3NA
?FLAGS_tcmalloc_sample_parameter@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_verbose@FLAG__namespace_do_not_use_directly_use_DECLARE_int32_instead@@3HA
?FixupPrivEndLocked@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAAXXZ
?FixupPrivEndLocked@?$HookList@P6AX_J@Z@internal@base@@QEAAXXZ
?FramePointerStackWalk@mozilla@@YAXP6AXIPEAX00@ZI0PEAPEAX0@Z
?GetAggressiveDecommit@PageHeap@tcmalloc@@QEAA_NXZ
?GetAllocatedSize@MallocExtension@@UEAA_KPEBX@Z
?GetCallerStackTrace@MallocHook@@SAHPEAPEAXHH@Z
?GetDeleteHook@MallocHook@@SAP6AXPEBX@ZXZ
?GetDescriptor@PageHeap@tcmalloc@@QEBAPEAUSpan@2@_K@Z
?GetEstimatedAllocatedSize@MallocExtension@@UEAA_K_K@Z
?GetFreeListSizes@MallocExtension@@UEAAXPEAV?$vector@UFreeListInfo@MallocExtension@@V?$allocator@UFreeListInfo@MallocExtension@@@std@@@std@@@Z
?GetFuzzyfoxEnabled@TimeStamp@mozilla@@SA_NXZ
?GetHeapGrowthStacks@MallocExtension@@UEAAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetHeapSample@MallocExtension@@UEAAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLargeSpanStats@PageHeap@tcmalloc@@QEAAXPEAULargeSpanStats@12@@Z
?GetMemoryReleaseRate@MallocExtension@@UEAANXZ
?GetMmapHook@MallocHook@@SAP6AXPEBX0_KHHHJ@ZXZ
?GetMremapHook@MallocHook@@SAP6AXPEBX0_K1H0@ZXZ
?GetMunmapHook@MallocHook@@SAP6AXPEBX_K@ZXZ
?GetNewHook@MallocHook@@SAP6AXPEBX_K@ZXZ
?GetNextRange@PageHeap@tcmalloc@@QEAA_N_KPEAUMallocRange@base@@@Z
?GetNumericProperty@MallocExtension@@UEAA_NPEBDPEA_K@Z
?GetOwnership@MallocExtension@@UEAA?AW4Ownership@1@PEBX@Z
?GetPreMmapHook@MallocHook@@SAP6AXPEBX_KHHHJ@ZXZ
?GetPreSbrkHook@MallocHook@@SAP6AX_J@ZXZ
?GetQueryPerformanceFrequencyPerSec@mozilla@@YA_KXZ
?GetSamplePeriod@Sampler@tcmalloc@@SAHXZ
?GetSbrkHook@MallocHook@@SAP6AXPEBX_J@ZXZ
?GetSingular@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEBAP6AXPEBX0_K1H0@ZXZ
?GetSingular@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEBAP6AXPEBX0_KHHHJ@ZXZ
?GetSingular@?$HookList@P6AXPEBX@Z@internal@base@@QEBAP6AXPEBX@ZXZ
?GetSingular@?$HookList@P6AXPEBX_J@Z@internal@base@@QEBAP6AXPEBX_J@ZXZ
?GetSingular@?$HookList@P6AXPEBX_K@Z@internal@base@@QEBAP6AXPEBX_K@ZXZ
?GetSingular@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEBAP6AXPEBX_KHHHJ@ZXZ
?GetSingular@?$HookList@P6AX_J@Z@internal@base@@QEBAP6AX_J@ZXZ
?GetSizeClassOrZero@PageHeap@tcmalloc@@QEBAI_K@Z
?GetSmallSpanStats@PageHeap@tcmalloc@@QEAAXPEAUSmallSpanStats@12@@Z
?GetStackFrames@@YAHPEAPEAXPEAHHH@Z
?GetStackFramesWithContext@@YAHPEAPEAXPEAHHHPEBX@Z
?GetStackTrace@@YAHPEAPEAXHH@Z
?GetStackTraceWithContext@@YAHPEAPEAXHHPEBX@Z
?GetStats@MallocExtension@@UEAAXPEADH@Z
?GetSystemAllocator@MallocExtension@@UEAAPEAVSysAllocator@@XZ
?GetThreadCacheSize@MallocExtension@@UEAA_KXZ
?GrowHeap@PageHeap@tcmalloc@@AEAA_N_K@Z
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@AEBA_NNPEAVStringBuilder@2@@Z
?HashBytes@mozilla@@YAIPEBX_K@Z
?IncrementalScavenge@PageHeap@tcmalloc@@AEAAX_K@Z
?Init@Sampler@tcmalloc@@QEAAX_K@Z
?Initialize@MallocExtension@@SAXXZ
?InitializeUptime@mozilla@@YAXXZ
?InvalidateCachedSizeClass@PageHeap@tcmalloc@@QEAAX_K@Z
?InvokeDeleteHook@MallocHook@@SAXPEBX@Z
?InvokeDeleteHookSlow@MallocHook@@CAXPEBX@Z
?InvokeMmapHook@MallocHook@@SAXPEBX0_KHHHJ@Z
?InvokeMmapHookSlow@MallocHook@@CAXPEBX0_KHHHJ@Z
?InvokeMmapReplacement@MallocHook@@SA_NPEBX_KHHHJPEAPEAX@Z
?InvokeMmapReplacementSlow@MallocHook@@CA_NPEBX_KHHHJPEAPEAX@Z
?InvokeMremapHook@MallocHook@@SAXPEBX0_K1H0@Z
?InvokeMremapHookSlow@MallocHook@@CAXPEBX0_K1H0@Z
?InvokeMunmapHook@MallocHook@@SAXPEBX_K@Z
?InvokeMunmapHookSlow@MallocHook@@CAXPEBX_K@Z
?InvokeMunmapReplacement@MallocHook@@SA_NPEBX_KPEAH@Z
?InvokeMunmapReplacementSlow@MallocHook@@CA_NPEBX_KPEAH@Z
?InvokeNewHook@MallocHook@@SAXPEBX_K@Z
?InvokeNewHookSlow@MallocHook@@CAXPEBX_K@Z
?InvokePreMmapHook@MallocHook@@SAXPEBX_KHHHJ@Z
?InvokePreMmapHookSlow@MallocHook@@CAXPEBX_KHHHJ@Z
?InvokePreSbrkHook@MallocHook@@SAX_J@Z
?InvokePreSbrkHookSlow@MallocHook@@CAX_J@Z
?InvokeSbrkHook@MallocHook@@SAXPEBX_J@Z
?InvokeSbrkHookSlow@MallocHook@@CAXPEBX_J@Z
?IsFloat32Representable@mozilla@@YA_NN@Z
?IsValidUtf8@detail@mozilla@@YA_NPEBX_K@Z
?Log@tcmalloc@@YAXW4LogMode@1@PEBDHVLogItem@1@222@Z
?MallocMemoryStats@MallocExtension@@UEAA_NPEAHPEA_KQEAH@Z
?MarkThreadBusy@MallocExtension@@UEAAXXZ
?MarkThreadIdle@MallocExtension@@UEAAXXZ
?MarkThreadTemporarilyIdle@MallocExtension@@UEAAXXZ
?MergeIntoFreeList@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?MozStackWalkThread@@YAXP6AXIPEAX00@ZI00PEAU_CONTEXT@@@Z
?New@PageHeap@tcmalloc@@QEAAPEAUSpan@2@_K@Z
?NextRandom@Sampler@tcmalloc@@SA_K_K@Z
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
?NowFuzzy@TimeStamp@mozilla@@CA?AV12@VTimeStampValue@2@@Z
?NowFuzzyTime@TimeStamp@mozilla@@SA_JXZ
?NowLoRes@AwakeTimeStamp@mozilla@@SA?AV12@XZ
?NowUnfuzzed@TimeStamp@mozilla@@CA?AV12@_N@Z
?PickNextSamplingPoint@Sampler@tcmalloc@@QEAA_JXZ
?PrependToFreeList@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@PEA_N@Z
?ProcessUptimeExcludingSuspendMs@mozilla@@YA?AV?$Maybe@_K@1@XZ
?ProcessUptimeMs@mozilla@@YA?AV?$Maybe@_K@1@XZ
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ
?RandomUint64OrDie@mozilla@@YA_KXZ
?Ranges@MallocExtension@@UEAAXPEAXP6AX0PEBUMallocRange@base@@@Z@Z
?ReadHeapGrowthStackTraces@MallocExtension@@UEAAPEAPEAXXZ
?ReadStackTraces@MallocExtension@@UEAAPEAPEAXPEAH@Z
?ReadStackTracesAndClear@StackTraceTable@tcmalloc@@QEAAPEAPEAXXZ
?RecordAllocation@Sampler@tcmalloc@@QEAA_N_K@Z
?RecordAllocationSlow@Sampler@tcmalloc@@AEAA_N_K@Z
?RecordProcessRestart@TimeStamp@mozilla@@SAXXZ
?RecordSpan@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?Register@MallocExtension@@SAXPEAV1@@Z
?RegisterJitCodeRegion@@YAXPEAE_K@Z
?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APEAXPEBD0PEAX@ZP6AX1@Z@Z
?RegisterSizeClass@PageHeap@tcmalloc@@QEAAXPEAUSpan@2@I@Z
?ReleaseAtLeastNPages@PageHeap@tcmalloc@@QEAA_K_K@Z
?ReleaseFreeMemory@MallocExtension@@UEAAXXZ
?ReleaseSpan@PageHeap@tcmalloc@@AEAA_KPEAUSpan@2@@Z
?ReleaseToSystem@MallocExtension@@UEAAX_K@Z
?Remove@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEAA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?Remove@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEAA_NP6AHPEBX_KPEAH@Z@Z
?Remove@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEAA_NP6AXPEBX0_K1H0@Z@Z
?Remove@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX0_KHHHJ@Z@Z
?Remove@?$HookList@P6AXPEBX@Z@internal@base@@QEAA_NP6AXPEBX@Z@Z
?Remove@?$HookList@P6AXPEBX_J@Z@internal@base@@QEAA_NP6AXPEBX_J@Z@Z
?Remove@?$HookList@P6AXPEBX_K@Z@internal@base@@QEAA_NP6AXPEBX_K@Z@Z
?Remove@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEAA_NP6AXPEBX_KHHHJ@Z@Z
?Remove@?$HookList@P6AX_J@Z@internal@base@@QEAA_NP6AX_J@Z@Z
?RemoveDeleteHook@MallocHook@@SA_NP6AXPEBX@Z@Z
?RemoveFromFreeList@PageHeap@tcmalloc@@AEAAXPEAUSpan@2@@Z
?RemoveMmapHook@MallocHook@@SA_NP6AXPEBX0_KHHHJ@Z@Z
?RemoveMmapReplacement@MallocHook@@SA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?RemoveMremapHook@MallocHook@@SA_NP6AXPEBX0_K1H0@Z@Z
?RemoveMunmapHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?RemoveMunmapReplacement@MallocHook@@SA_NP6AHPEBX_KPEAH@Z@Z
?RemoveNewHook@MallocHook@@SA_NP6AXPEBX_K@Z@Z
?RemovePreMmapHook@MallocHook@@SA_NP6AXPEBX_KHHHJ@Z@Z
?RemovePreSbrkHook@MallocHook@@SA_NP6AX_J@Z@Z
?RemoveSbrkHook@MallocHook@@SA_NP6AXPEBX_J@Z@Z
?ResolutionInTicks@BaseTimeDurationPlatformUtils@mozilla@@SA_JXZ
?SearchFreeAndLargeLists@PageHeap@tcmalloc@@AEAAPEAUSpan@2@_K@Z
?SetAggressiveDecommit@PageHeap@tcmalloc@@QEAAX_N@Z
?SetCachedSizeClass@PageHeap@tcmalloc@@QEAAX_KI@Z
?SetDeleteHook@MallocHook@@SAP6AXPEBX@ZP6AX0@Z@Z
?SetFuzzyfoxEnabled@TimeStamp@mozilla@@SAX_N@Z
?SetMemoryReleaseRate@MallocExtension@@UEAAXN@Z
?SetMmapHook@MallocHook@@SAP6AXPEBX0_KHHHJ@ZP6AX001HHHJ@Z@Z
?SetMmapReplacement@MallocHook@@SA_NP6AHPEBX_KHHHJPEAPEAX@Z@Z
?SetMremapHook@MallocHook@@SAP6AXPEBX0_K1H0@ZP6AX0011H0@Z@Z
?SetMunmapHook@MallocHook@@SAP6AXPEBX_K@ZP6AX01@Z@Z
?SetMunmapReplacement@MallocHook@@SA_NP6AHPEBX_KPEAH@Z@Z
?SetNewHook@MallocHook@@SAP6AXPEBX_K@ZP6AX01@Z@Z
?SetNumericProperty@MallocExtension@@UEAA_NPEBD_K@Z
?SetPreMmapHook@MallocHook@@SAP6AXPEBX_KHHHJ@ZP6AX01HHHJ@Z@Z
?SetPreSbrkHook@MallocHook@@SAP6AX_J@ZP6AX0@Z@Z
?SetSbrkHook@MallocHook@@SAP6AXPEBX_J@ZP6AX01@Z@Z
?SetSystemAllocator@MallocExtension@@UEAAXPEAVSysAllocator@@@Z
?Shutdown@TimeStamp@mozilla@@SAXXZ
?SizeClasses@MallocExtension@@UEAAXPEAXP6AX0PEBUMallocSizeClass@base@@@ZP6AX0PEBUPageHeapSizeClass@3@@Z@Z
?Split@PageHeap@tcmalloc@@QEAAPEAUSpan@2@PEAU32@_K@Z
?Startup@TimeStamp@mozilla@@SAXXZ
?TCMalloc_SystemAlloc@@YAPEAX_KPEA_K0@Z
?TCMalloc_SystemCommit@@YAXPEAX_K@Z
?TCMalloc_SystemRelease@@YA_NPEAX_K@Z
?TCMalloc_SystemTaken@@3_KA
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z
?ToExponential@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToFixed@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToMicroseconds@AwakeTimeDuration@mozilla@@QEBANXZ
?ToMilliseconds@AwakeTimeDuration@mozilla@@QEBANXZ
?ToPrecision@DoubleToStringConverter@double_conversion@@QEBA_NNHPEAVStringBuilder@2@@Z
?ToSeconds@AwakeTimeDuration@mozilla@@QEBANXZ
?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToSecondsSigDigits@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@AEBA_NNPEAVStringBuilder@2@W4DtoaMode@12@@Z
?Traverse@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEBAHPEAP6AHPEBX_KHHHJPEAPEAX@ZH@Z
?Traverse@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEBAHPEAP6AHPEBX_KPEAH@ZH@Z
?Traverse@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEBAHPEAP6AXPEBX0_K1H0@ZH@Z
?Traverse@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEBAHPEAP6AXPEBX0_KHHHJ@ZH@Z
?Traverse@?$HookList@P6AXPEBX@Z@internal@base@@QEBAHPEAP6AXPEBX@ZH@Z
?Traverse@?$HookList@P6AXPEBX_J@Z@internal@base@@QEBAHPEAP6AXPEBX_J@ZH@Z
?Traverse@?$HookList@P6AXPEBX_K@Z@internal@base@@QEBAHPEAP6AXPEBX_K@ZH@Z
?Traverse@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEBAHPEAP6AXPEBX_KHHHJ@ZH@Z
?Traverse@?$HookList@P6AX_J@Z@internal@base@@QEBAHPEAP6AX_J@ZH@Z
?TryGetSizeClass@PageHeap@tcmalloc@@QEBA_N_KPEAI@Z
?TryRecordAllocationFast@Sampler@tcmalloc@@QEAA_N_K@Z
?UnhookedMMap@MallocHook@@SAPEAXPEAX_KHHHJ@Z
?UnhookedMUnmap@MallocHook@@SAHPEAX_K@Z
?UnregisterJitCodeRegion@@YAXPEAE_K@Z
?Unused@mozilla@@3Uunused_t@1@B
?UpdateFuzzyTime@TimeStamp@mozilla@@CAX_J@Z
?UpdateFuzzyTimeStamp@TimeStamp@mozilla@@CAXV12@@Z
?VerifyAllMemory@MallocExtension@@UEAA_NXZ
?VerifyArrayNewMemory@MallocExtension@@UEAA_NPEBX@Z
?VerifyMallocMemory@MallocExtension@@UEAA_NPEBX@Z
?VerifyNewMemory@MallocExtension@@UEAA_NPEBX@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_NH@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_NI@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_N_J@Z
?appendIntDec@PrintfTarget@mozilla@@QEAA_N_K@Z
?appendIntHex@PrintfTarget@mozilla@@QEAA_NI@Z
?appendIntHex@PrintfTarget@mozilla@@QEAA_N_K@Z
?appendIntOct@PrintfTarget@mozilla@@QEAA_NI@Z
?appendIntOct@PrintfTarget@mozilla@@QEAA_N_K@Z
?bucket_total@StackTraceTable@tcmalloc@@QEBAHXZ
?compress@LZ4@Compression@mozilla@@SA_KPEBD_KPEAD@Z
?compressLimitedOutput@LZ4@Compression@mozilla@@SA_KPEBD_KPEAD1@Z
?decompress@LZ4@Compression@mozilla@@SA_NPEBD_KPEAD1PEA_K@Z
?decompressPartial@LZ4@Compression@mozilla@@SA_NPEBD_KPEAD1PEA_K@Z
?depth_total@StackTraceTable@tcmalloc@@QEBAHXZ
?empty@?$HookList@P6AHPEBX_KHHHJPEAPEAX@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AHPEBX_KPEAH@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX0_K1H0@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX0_KHHHJ@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX_J@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX_K@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AXPEBX_KHHHJ@Z@internal@base@@QEBA_NXZ
?empty@?$HookList@P6AX_J@Z@internal@base@@QEBA_NXZ
?finish@SHA1Sum@mozilla@@QEAAXAEAY0BE@E@Z
?foo@link_static_warning_inhibit@boost@@YAXXZ
?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
?gTwoCharEscapes@detail@mozilla@@3QBDB
?instance@MallocExtension@@SAPEAV1@XZ
?kDefaultReleaseDelay@PageHeap@tcmalloc@@0HB
?kMaxReleaseDelay@PageHeap@tcmalloc@@0HB
?kMinSystemAlloc@PageHeap@tcmalloc@@0HB
?kPageMapBigAllocationThreshold@PageHeap@tcmalloc@@0_KB
?lock@MutexImpl@detail@mozilla@@IEAAXXZ
?log_message_writer@tcmalloc@@3P6AXPEBDH@ZEA
?notify_all@ConditionVariableImpl@detail@mozilla@@QEAAXXZ
?notify_one@ConditionVariableImpl@detail@mozilla@@QEAAXXZ
?print@PrintfTarget@mozilla@@QEAA_NPEBDZZ
?stats@PageHeap@tcmalloc@@QEBA?AUStats@12@XZ
?tcmalloc_sys_alloc@@3PEAVSysAllocator@@EA
?tryLock@MutexImpl@detail@mozilla@@IEAA_NXZ
?unlock@MutexImpl@detail@mozilla@@IEAAXXZ
?update@SHA1Sum@mozilla@@QEAAXPEBXI@Z
?vprint@PrintfTarget@mozilla@@QEAA_NPEBDPEAD@Z
?wait@ConditionVariableImpl@detail@mozilla@@QEAAXAEAVMutexImpl@23@@Z
?wait_for@ConditionVariableImpl@detail@mozilla@@QEAA?AW4CVStatus@3@AEAVMutexImpl@23@AEBV?$BaseTimeDuration@VTimeDurationValueCalculator@mozilla@@@3@@Z
MOZ_CrashPrintf
MallocExtension_GetAllocatedSize
MallocExtension_GetEstimatedAllocatedSize
MallocExtension_GetNumericProperty
MallocExtension_GetOwnership
MallocExtension_GetStats
MallocExtension_GetThreadCacheSize
MallocExtension_MallocMemoryStats
MallocExtension_MarkThreadBusy
MallocExtension_MarkThreadIdle
MallocExtension_MarkThreadTemporarilyIdle
MallocExtension_ReleaseFreeMemory
MallocExtension_ReleaseToSystem
MallocExtension_SetNumericProperty
MallocExtension_SizeClasses
MallocExtension_VerifyAllMemory
MallocExtension_VerifyArrayNewMemory
MallocExtension_VerifyMallocMemory
MallocExtension_VerifyNewMemory
MallocHook_AddDeleteHook
MallocHook_AddMmapHook
MallocHook_AddMremapHook
MallocHook_AddMunmapHook
MallocHook_AddNewHook
MallocHook_AddPreMmapHook
MallocHook_AddPreSbrkHook
MallocHook_AddSbrkHook
MallocHook_GetCallerStackTrace
MallocHook_RemoveDeleteHook
MallocHook_RemoveMmapHook
MallocHook_RemoveMremapHook
MallocHook_RemoveMunmapHook
MallocHook_RemoveNewHook
MallocHook_RemovePreMmapHook
MallocHook_RemovePreSbrkHook
MallocHook_RemoveSbrkHook
MallocHook_SetDeleteHook
MallocHook_SetMmapHook
MallocHook_SetMremapHook
MallocHook_SetMunmapHook
MallocHook_SetNewHook
MallocHook_SetPreMmapHook
MallocHook_SetPreSbrkHook
MallocHook_SetSbrkHook
MozDescribeCodeAddress
MozFormatCodeAddress
MozFormatCodeAddressDetails
MozStackWalk
MozWalkTheStack
MozWalkTheStackWithWriter
WriteToStderr
__sbrk
gMozCrashReason
gMozillaPoisonBase
gMozillaPoisonSize
gMozillaPoisonValue
getpagesize
nallocx
tc_calloc
tc_cfree
tc_delete
tc_delete_nothrow
tc_delete_sized
tc_deletearray
tc_deletearray_nothrow
tc_deletearray_sized
tc_free
tc_free_sized
tc_malloc
tc_malloc_size
tc_malloc_skip_new_handler
tc_malloc_stats
tc_mallopt
tc_memalign
tc_nallocx
tc_new
tc_new_nothrow
tc_newarray
tc_newarray_nothrow
tc_posix_memalign
tc_pvalloc
tc_query_new_mode
tc_realloc
tc_set_new_mode
tc_valloc
tc_version

Sections

.text
Size: 21.1MB - Virtual size: 21.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 798KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mongodb-win32-x86_64-windows-6.0.4/bin/mongos.pdb

Sharing

General

Malware Config

Extracted

Signatures

Files

3943d4074584e46ca7c8b7246e080b2d

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

dbghelp

iphlpapi

advapi32

bcrypt

crypt32

dnsapi

kernel32

pdh

winmm

ws2_32

secur32

msvcp140

mswsock

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

Exports

Exports

Sections

.text Size: 37.3MB - Virtual size: 37.3MB

.rdata Size: 12.6MB - Virtual size: 12.6MB

.data Size: 2.2MB - Virtual size: 5.4MB

.pdata Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 53KB - Virtual size: 52KB

.reloc Size: 253KB - Virtual size: 252KB

393a5f3ee981cab3c08ee1726260f22d

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

dbghelp

advapi32

bcrypt

crypt32

dnsapi

kernel32

pdh

winmm

ws2_32

secur32

msvcp140

mswsock

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

Exports

Exports

.text
Size: 37.3MB - Virtual size: 37.3MB

.rdata
Size: 12.6MB - Virtual size: 12.6MB

.data
Size: 2.2MB - Virtual size: 5.4MB

.pdata
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 253KB - Virtual size: 252KB

.text
Size: 21.1MB - Virtual size: 21.1MB

.rdata
Size: 9.5MB - Virtual size: 9.5MB

.data
Size: 1.6MB - Virtual size: 4.6MB

.pdata
Size: 798KB - Virtual size: 798KB

.rsrc
Size: 53KB - Virtual size: 52KB

.reloc
Size: 156KB - Virtual size: 156KB