d3ecf059771f323c9b20b908edf1fc90_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

d3ecf059771f323c9b20b908edf1fc90_NeikiAnalytics
Size

2.4MB
MD5

d3ecf059771f323c9b20b908edf1fc90
SHA1

4190096448bc833a9f455d5c403ac6207b39d2c2
SHA256

bc35fdb4dc147d16c23254a89ff515b3cfd273c343ddad74c6a605bf79e25474
SHA512

87d29569b4233b97303ac1a25c17652cdf2a321cc0b8c1bcee3a57a894e817eef9b7bfa75bc340918515111f5dc22ee2993f0e4ad71225f9a20a8b65aa3bf0a9
SSDEEP

49152:x9ZZ+94aJuM9hC/Xu0sFvxtx5Eb4SkuhTzLVJxjazcUJXWciSletc5oGu1GaB6/p:xl4F7SIm+uM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ecf059771f323c9b20b908edf1fc90_NeikiAnalytics

Files

d3ecf059771f323c9b20b908edf1fc90_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

7df70b58fbdfbcab9ee23cabe407de8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetLastError
SetLastError
MultiByteToWideChar
WideCharToMultiByte
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitOnceComplete
InitOnceBeginInitialize
InitializeSListHead

msvcp140

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

vcruntime140

__current_exception
__C_specific_handler
memchr
__std_terminate
memset
strchr
__current_exception_context
memmove
memcpy
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_purecall
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_configure_narrow_argv
terminate
_cexit
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
abort
_initialize_narrow_environment
_seh_filter_dll
strerror

api-ms-win-crt-math-l1-1-0

ceilf
_dclass
_fdclass

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
_setmode
_read
_dup2
_dup
_close
_write
fflush
_wsopen_dispatch
__stdio_common_vsprintf
_wfopen

api-ms-win-crt-string-l1-1-0

isdigit
isxdigit
iswalpha
isalpha
tolower
strpbrk

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_waccess
_wchdir
_stat64i32
_wmkdir

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-convert-l1-1-0

strtod
strtol
strtoull
strtoll
strtoul

api-ms-win-crt-time-l1-1-0

_time64

Exports

Exports

??$CreateMaybeMessage@VAny@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVAny@12@PEAV012@@Z
??$CreateMaybeMessage@VApi@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVApi@12@PEAV012@@Z
??$CreateMaybeMessage@VBoolValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVBoolValue@12@PEAV012@@Z
??$CreateMaybeMessage@VBytesValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVBytesValue@12@PEAV012@@Z
??$CreateMaybeMessage@VDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VDescriptorProto_ExtensionRange@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVDescriptorProto_ExtensionRange@12@PEAV012@@Z
??$CreateMaybeMessage@VDescriptorProto_ReservedRange@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVDescriptorProto_ReservedRange@12@PEAV012@@Z
??$CreateMaybeMessage@VDoubleValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVDoubleValue@12@PEAV012@@Z
??$CreateMaybeMessage@VDuration@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVDuration@12@PEAV012@@Z
??$CreateMaybeMessage@VEmpty@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEmpty@12@PEAV012@@Z
??$CreateMaybeMessage@VEnum@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnum@12@PEAV012@@Z
??$CreateMaybeMessage@VEnumDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnumDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VEnumDescriptorProto_EnumReservedRange@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnumDescriptorProto_EnumReservedRange@12@PEAV012@@Z
??$CreateMaybeMessage@VEnumOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnumOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VEnumValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnumValue@12@PEAV012@@Z
??$CreateMaybeMessage@VEnumValueDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnumValueDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VEnumValueOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVEnumValueOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VExtensionRangeOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVExtensionRangeOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VField@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVField@12@PEAV012@@Z
??$CreateMaybeMessage@VFieldDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFieldDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VFieldMask@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFieldMask@12@PEAV012@@Z
??$CreateMaybeMessage@VFieldOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFieldOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VFileDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFileDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VFileDescriptorSet@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFileDescriptorSet@12@PEAV012@@Z
??$CreateMaybeMessage@VFileOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFileOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VFloatValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVFloatValue@12@PEAV012@@Z
??$CreateMaybeMessage@VGeneratedCodeInfo@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVGeneratedCodeInfo@12@PEAV012@@Z
??$CreateMaybeMessage@VGeneratedCodeInfo_Annotation@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVGeneratedCodeInfo_Annotation@12@PEAV012@@Z
??$CreateMaybeMessage@VInt32Value@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVInt32Value@12@PEAV012@@Z
??$CreateMaybeMessage@VInt64Value@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVInt64Value@12@PEAV012@@Z
??$CreateMaybeMessage@VListValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVListValue@12@PEAV012@@Z
??$CreateMaybeMessage@VMessageOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVMessageOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VMethod@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVMethod@12@PEAV012@@Z
??$CreateMaybeMessage@VMethodDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVMethodDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VMethodOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVMethodOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VMixin@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVMixin@12@PEAV012@@Z
??$CreateMaybeMessage@VOneofDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVOneofDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VOneofOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVOneofOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VOption@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVOption@12@PEAV012@@Z
??$CreateMaybeMessage@VServiceDescriptorProto@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVServiceDescriptorProto@12@PEAV012@@Z
??$CreateMaybeMessage@VServiceOptions@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVServiceOptions@12@PEAV012@@Z
??$CreateMaybeMessage@VSourceCodeInfo@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVSourceCodeInfo@12@PEAV012@@Z
??$CreateMaybeMessage@VSourceCodeInfo_Location@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVSourceCodeInfo_Location@12@PEAV012@@Z
??$CreateMaybeMessage@VSourceContext@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVSourceContext@12@PEAV012@@Z
??$CreateMaybeMessage@VStringValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVStringValue@12@PEAV012@@Z
??$CreateMaybeMessage@VStruct@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVStruct@12@PEAV012@@Z
??$CreateMaybeMessage@VStruct_FieldsEntry_DoNotUse@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVStruct_FieldsEntry_DoNotUse@12@PEAV012@@Z
??$CreateMaybeMessage@VTimestamp@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVTimestamp@12@PEAV012@@Z
??$CreateMaybeMessage@VType@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVType@12@PEAV012@@Z
??$CreateMaybeMessage@VUInt32Value@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVUInt32Value@12@PEAV012@@Z
??$CreateMaybeMessage@VUInt64Value@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVUInt64Value@12@PEAV012@@Z
??$CreateMaybeMessage@VUninterpretedOption@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVUninterpretedOption@12@PEAV012@@Z
??$CreateMaybeMessage@VUninterpretedOption_NamePart@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVUninterpretedOption_NamePart@12@PEAV012@@Z
??$CreateMaybeMessage@VValue@protobuf@google@@$$V@Arena@protobuf@google@@CAPEAVValue@12@PEAV012@@Z
??$DoClear@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AEAAXXZ
??$DoMergeFrom@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??$DoSwap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AEAAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??$GetRepeatedFieldInternal@H@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@H@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$GetRepeatedFieldInternal@I@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@I@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$GetRepeatedFieldInternal@M@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@M@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$GetRepeatedFieldInternal@N@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@N@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$GetRepeatedFieldInternal@_J@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@_J@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$GetRepeatedFieldInternal@_K@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@_K@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$GetRepeatedFieldInternal@_N@Reflection@protobuf@google@@AEBAAEBV?$RepeatedField@_N@12@AEBVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@H@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@H@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@I@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@I@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@M@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@M@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@N@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@N@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@_J@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@_J@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@_K@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@_K@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??$MutableRepeatedFieldInternal@_N@Reflection@protobuf@google@@AEBAPEAV?$RepeatedField@_N@12@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??0?$RepeatedField@H@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@H@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@H@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@H@protobuf@google@@QEAA@XZ
??0?$RepeatedField@I@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@I@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@I@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@I@protobuf@google@@QEAA@XZ
??0?$RepeatedField@M@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@M@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@M@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@M@protobuf@google@@QEAA@XZ
??0?$RepeatedField@N@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@N@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@N@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@N@protobuf@google@@QEAA@XZ
??0?$RepeatedField@_J@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@_J@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@_J@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@_J@protobuf@google@@QEAA@XZ
??0?$RepeatedField@_K@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@_K@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@_K@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@_K@protobuf@google@@QEAA@XZ
??0?$RepeatedField@_N@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedField@_N@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedField@_N@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedField@_N@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@H@internal@protobuf@google@@AEAA@PEAH@Z
??0?$RepeatedIterator@H@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@I@internal@protobuf@google@@AEAA@PEAI@Z
??0?$RepeatedIterator@I@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@M@internal@protobuf@google@@AEAA@PEAM@Z
??0?$RepeatedIterator@M@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@N@internal@protobuf@google@@AEAA@PEAN@Z
??0?$RepeatedIterator@N@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@_J@internal@protobuf@google@@AEAA@PEA_J@Z
??0?$RepeatedIterator@_J@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@_K@internal@protobuf@google@@AEAA@PEA_K@Z
??0?$RepeatedIterator@_K@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedIterator@_N@internal@protobuf@google@@AEAA@PEA_N@Z
??0?$RepeatedIterator@_N@internal@protobuf@google@@QEAA@XZ
??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QEAA@$$QEAV012@@Z
??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QEAA@AEBV012@@Z
??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QEAA@PEAVArena@12@@Z
??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QEAA@XZ
??0?$TypeDefinedMapFieldBase@VMapKey@protobuf@google@@VMapValueRef@23@@internal@protobuf@google@@QEAA@PEAVArena@23@@Z
??0?$TypeDefinedMapFieldBase@VMapKey@protobuf@google@@VMapValueRef@23@@internal@protobuf@google@@QEAA@UArenaInitialized@123@PEAVArena@23@@Z
??0?$TypeDefinedMapFieldBase@VMapKey@protobuf@google@@VMapValueRef@23@@internal@protobuf@google@@QEAA@UConstantInitialized@123@@Z
??0?$TypeDefinedMapFieldBase@VMapKey@protobuf@google@@VMapValueRef@23@@internal@protobuf@google@@QEAA@XZ
??0AddDescriptorsRunner@internal@protobuf@google@@QEAA@PEBUDescriptorTable@123@@Z
??0AlphaNum@strings@protobuf@google@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0AlphaNum@strings@protobuf@google@@QEAA@H@Z
??0AlphaNum@strings@protobuf@google@@QEAA@I@Z
??0AlphaNum@strings@protobuf@google@@QEAA@J@Z
??0AlphaNum@strings@protobuf@google@@QEAA@K@Z
??0AlphaNum@strings@protobuf@google@@QEAA@M@Z
??0AlphaNum@strings@protobuf@google@@QEAA@N@Z
??0AlphaNum@strings@protobuf@google@@QEAA@PEBD@Z
??0AlphaNum@strings@protobuf@google@@QEAA@UHex@123@@Z
??0AlphaNum@strings@protobuf@google@@QEAA@VStringPiece@stringpiece_internal@23@@Z
??0AlphaNum@strings@protobuf@google@@QEAA@_J@Z
??0AlphaNum@strings@protobuf@google@@QEAA@_K@Z
??0AnnotationCollector@io@protobuf@google@@QEAA@AEBV0123@@Z
??0AnnotationCollector@io@protobuf@google@@QEAA@XZ
??0Any@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Any@protobuf@google@@QEAA@$$QEAV012@@Z
??0Any@protobuf@google@@QEAA@AEBV012@@Z
??0Any@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Any@protobuf@google@@QEAA@XZ
??0AnyMetadata@internal@protobuf@google@@QEAA@PEAUArenaStringPtr@123@0@Z
??0AnyWriter@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@PEAV12345@@Z
??0Api@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Api@protobuf@google@@QEAA@$$QEAV012@@Z
??0Api@protobuf@google@@QEAA@AEBV012@@Z
??0Api@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Api@protobuf@google@@QEAA@XZ
??0Arena@protobuf@google@@AEAA@UMessageOwned@internal@12@@Z
??0Arena@protobuf@google@@QEAA@AEBUArenaOptions@12@@Z
??0Arena@protobuf@google@@QEAA@PEAD_K@Z
??0Arena@protobuf@google@@QEAA@XZ
??0ArenaMetricsCollector@internal@protobuf@google@@QEAA@AEBV0123@@Z
??0ArenaMetricsCollector@internal@protobuf@google@@QEAA@_N@Z
??0ArenaStringPtr@internal@protobuf@google@@QEAA@PEAV?$ExplicitlyConstructed@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$07@123@UConstantInitialized@123@@Z
??0ArrayByteSource@strings@protobuf@google@@QEAA@VStringPiece@stringpiece_internal@23@@Z
??0ArrayInputStream@io@protobuf@google@@QEAA@PEBXHH@Z
??0ArrayOutputStream@io@protobuf@google@@QEAA@PEAXHH@Z
??0BaseElement@StructuredObjectWriter@converter@util@protobuf@google@@QEAA@PEAV012345@@Z
??0BaseTextGenerator@TextFormat@protobuf@google@@QEAA@AEBV0123@@Z
??0BaseTextGenerator@TextFormat@protobuf@google@@QEAA@XZ
??0BoolValue@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0BoolValue@protobuf@google@@QEAA@$$QEAV012@@Z
??0BoolValue@protobuf@google@@QEAA@AEBV012@@Z
??0BoolValue@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0BoolValue@protobuf@google@@QEAA@XZ
??0ByteSink@strings@protobuf@google@@QEAA@XZ
??0ByteSinkWrapper@JsonObjectWriter@converter@util@protobuf@google@@QEAA@PEAVCodedOutputStream@io@45@@Z
??0ByteSource@strings@protobuf@google@@QEAA@XZ
??0BytesValue@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0BytesValue@protobuf@google@@QEAA@$$QEAV012@@Z
??0BytesValue@protobuf@google@@QEAA@AEBV012@@Z
??0BytesValue@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0BytesValue@protobuf@google@@QEAA@XZ
??0CachedSize@internal@protobuf@google@@QEAA@XZ
??0CheckedArrayByteSink@strings@protobuf@google@@QEAA@PEAD_K@Z
??0Closure@protobuf@google@@QEAA@XZ
??0CodedInputStream@io@protobuf@google@@QEAA@PEAVZeroCopyInputStream@123@@Z
??0CodedInputStream@io@protobuf@google@@QEAA@PEBEH@Z
??0CodedOutputStreamFieldSkipper@internal@protobuf@google@@QEAA@AEBV0123@@Z
??0CodedOutputStreamFieldSkipper@internal@protobuf@google@@QEAA@PEAVCodedOutputStream@io@23@@Z
??0ConcatenatingInputStream@io@protobuf@google@@QEAA@QEBQEAVZeroCopyInputStream@123@H@Z
??0CopyingFileInputStream@FileInputStream@io@protobuf@google@@QEAA@H@Z
??0CopyingFileOutputStream@FileOutputStream@io@protobuf@google@@QEAA@H@Z
??0CopyingInputStream@io@protobuf@google@@QEAA@AEBV0123@@Z
??0CopyingInputStream@io@protobuf@google@@QEAA@XZ
??0CopyingInputStreamAdaptor@io@protobuf@google@@QEAA@PEAVCopyingInputStream@123@H@Z
??0CopyingIstreamInputStream@IstreamInputStream@io@protobuf@google@@QEAA@PEAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0CopyingOstreamOutputStream@OstreamOutputStream@io@protobuf@google@@QEAA@PEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0CopyingOutputStream@io@protobuf@google@@QEAA@AEBV0123@@Z
??0CopyingOutputStream@io@protobuf@google@@QEAA@XZ
??0CopyingOutputStreamAdaptor@io@protobuf@google@@QEAA@PEAVCopyingOutputStream@123@H@Z
??0DataPiece@converter@util@protobuf@google@@AEAA@W4Type@01234@H@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@AEBV01234@@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@H@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@I@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@M@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@N@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@VStringPiece@stringpiece_internal@34@_N1@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@VStringPiece@stringpiece_internal@34@_N@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@_J@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@_K@Z
??0DataPiece@converter@util@protobuf@google@@QEAA@_N@Z
??0DefaultFieldComparator@util@protobuf@google@@QEAA@XZ
??0DefaultValueObjectWriter@converter@util@protobuf@google@@QEAA@PEAVTypeResolver@234@AEBVType@34@PEAVObjectWriter@1234@@Z
??0Descriptor@protobuf@google@@AEAA@XZ
??0DescriptorDatabase@protobuf@google@@QEAA@XZ
??0DescriptorPool@protobuf@google@@QEAA@PEAVDescriptorDatabase@12@PEAVErrorCollector@012@@Z
??0DescriptorPool@protobuf@google@@QEAA@PEBV012@@Z
??0DescriptorPool@protobuf@google@@QEAA@XZ
??0DescriptorPoolDatabase@protobuf@google@@QEAA@AEBVDescriptorPool@12@@Z
??0DescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0DescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0DescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0DescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0DescriptorProto@protobuf@google@@QEAA@XZ
??0DescriptorProto_ExtensionRange@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0DescriptorProto_ExtensionRange@protobuf@google@@QEAA@$$QEAV012@@Z
??0DescriptorProto_ExtensionRange@protobuf@google@@QEAA@AEBV012@@Z
??0DescriptorProto_ExtensionRange@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0DescriptorProto_ExtensionRange@protobuf@google@@QEAA@XZ
??0DescriptorProto_ReservedRange@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0DescriptorProto_ReservedRange@protobuf@google@@QEAA@$$QEAV012@@Z
??0DescriptorProto_ReservedRange@protobuf@google@@QEAA@AEBV012@@Z
??0DescriptorProto_ReservedRange@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0DescriptorProto_ReservedRange@protobuf@google@@QEAA@XZ
??0DiskSourceTree@compiler@protobuf@google@@QEAA@XZ
??0DoubleValue@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0DoubleValue@protobuf@google@@QEAA@$$QEAV012@@Z
??0DoubleValue@protobuf@google@@QEAA@AEBV012@@Z
??0DoubleValue@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0DoubleValue@protobuf@google@@QEAA@XZ
??0Duration@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Duration@protobuf@google@@QEAA@$$QEAV012@@Z
??0Duration@protobuf@google@@QEAA@AEBV012@@Z
??0Duration@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Duration@protobuf@google@@QEAA@XZ
??0DynamicMapField@internal@protobuf@google@@QEAA@PEBVMessage@23@@Z
??0DynamicMapField@internal@protobuf@google@@QEAA@PEBVMessage@23@PEAVArena@23@@Z
??0DynamicMessageFactory@protobuf@google@@QEAA@PEBVDescriptorPool@12@@Z
??0DynamicMessageFactory@protobuf@google@@QEAA@XZ
??0Element@JsonObjectWriter@converter@util@protobuf@google@@QEAA@PEAV012345@_N@Z
??0Empty@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Empty@protobuf@google@@QEAA@$$QEAV012@@Z
??0Empty@protobuf@google@@QEAA@AEBV012@@Z
??0Empty@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Empty@protobuf@google@@QEAA@XZ
??0EncodedDescriptorDatabase@protobuf@google@@QEAA@XZ
??0Enum@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Enum@protobuf@google@@QEAA@$$QEAV012@@Z
??0Enum@protobuf@google@@QEAA@AEBV012@@Z
??0Enum@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Enum@protobuf@google@@QEAA@XZ
??0EnumDescriptor@protobuf@google@@AEAA@XZ
??0EnumDescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0EnumDescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0EnumDescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0EnumDescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0EnumDescriptorProto@protobuf@google@@QEAA@XZ
??0EnumDescriptorProto_EnumReservedRange@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0EnumDescriptorProto_EnumReservedRange@protobuf@google@@QEAA@$$QEAV012@@Z
??0EnumDescriptorProto_EnumReservedRange@protobuf@google@@QEAA@AEBV012@@Z
??0EnumDescriptorProto_EnumReservedRange@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0EnumDescriptorProto_EnumReservedRange@protobuf@google@@QEAA@XZ
??0EnumOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0EnumOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0EnumOptions@protobuf@google@@QEAA@AEBV012@@Z
??0EnumOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0EnumOptions@protobuf@google@@QEAA@XZ
??0EnumValue@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0EnumValue@protobuf@google@@QEAA@$$QEAV012@@Z
??0EnumValue@protobuf@google@@QEAA@AEBV012@@Z
??0EnumValue@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0EnumValue@protobuf@google@@QEAA@XZ
??0EnumValueDescriptor@protobuf@google@@AEAA@XZ
??0EnumValueDescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0EnumValueDescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0EnumValueDescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0EnumValueDescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0EnumValueDescriptorProto@protobuf@google@@QEAA@XZ
??0EnumValueOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0EnumValueOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0EnumValueOptions@protobuf@google@@QEAA@AEBV012@@Z
??0EnumValueOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0EnumValueOptions@protobuf@google@@QEAA@XZ
??0EpsCopyInputStream@internal@protobuf@google@@QEAA@_N@Z
??0EpsCopyOutputStream@io@protobuf@google@@QEAA@PEAVZeroCopyOutputStream@123@_NPEAPEAE@Z
??0EpsCopyOutputStream@io@protobuf@google@@QEAA@PEAXHPEAVZeroCopyOutputStream@123@_NPEAPEAE@Z
??0EpsCopyOutputStream@io@protobuf@google@@QEAA@PEAXH_N@Z
??0ErrorCollector@DescriptorPool@protobuf@google@@QEAA@XZ
??0ErrorCollector@io@protobuf@google@@QEAA@XZ
??0ErrorListener@converter@util@protobuf@google@@IEAA@XZ
??0Event@AnyWriter@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@AEBV0123456@@Z
??0Event@AnyWriter@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@VStringPiece@stringpiece_internal@56@AEBVDataPiece@3456@@Z
??0Event@AnyWriter@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@W4Type@0123456@@Z
??0Event@AnyWriter@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@W4Type@0123456@VStringPiece@stringpiece_internal@56@@Z
??0ExtensionRangeOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0ExtensionRangeOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0ExtensionRangeOptions@protobuf@google@@QEAA@AEBV012@@Z
??0ExtensionRangeOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0ExtensionRangeOptions@protobuf@google@@QEAA@XZ
??0ExtensionSet@internal@protobuf@google@@QEAA@PEAVArena@23@@Z
??0ExtensionSet@internal@protobuf@google@@QEAA@UArenaInitialized@123@PEAVArena@23@@Z
??0ExtensionSet@internal@protobuf@google@@QEAA@XZ
??0FastFieldValuePrinter@TextFormat@protobuf@google@@QEAA@XZ
??0Field@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Field@protobuf@google@@QEAA@$$QEAV012@@Z
??0Field@protobuf@google@@QEAA@AEBV012@@Z
??0Field@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Field@protobuf@google@@QEAA@XZ
??0FieldComparator@util@protobuf@google@@QEAA@XZ
??0FieldContext@util@protobuf@google@@QEAA@PEAV?$vector@USpecificField@MessageDifferencer@util@protobuf@google@@V?$allocator@USpecificField@MessageDifferencer@util@protobuf@google@@@std@@@std@@@Z
??0FieldDescriptor@protobuf@google@@AEAA@XZ
??0FieldDescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FieldDescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0FieldDescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0FieldDescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FieldDescriptorProto@protobuf@google@@QEAA@XZ
??0FieldMask@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FieldMask@protobuf@google@@QEAA@$$QEAV012@@Z
??0FieldMask@protobuf@google@@QEAA@AEBV012@@Z
??0FieldMask@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FieldMask@protobuf@google@@QEAA@XZ
??0FieldOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FieldOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0FieldOptions@protobuf@google@@QEAA@AEBV012@@Z
??0FieldOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FieldOptions@protobuf@google@@QEAA@XZ
??0FieldSkipper@internal@protobuf@google@@QEAA@AEBV0123@@Z
??0FieldSkipper@internal@protobuf@google@@QEAA@XZ
??0FieldValuePrinter@TextFormat@protobuf@google@@QEAA@XZ
??0FileDescriptor@protobuf@google@@AEAA@XZ
??0FileDescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FileDescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0FileDescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0FileDescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FileDescriptorProto@protobuf@google@@QEAA@XZ
??0FileDescriptorSet@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FileDescriptorSet@protobuf@google@@QEAA@$$QEAV012@@Z
??0FileDescriptorSet@protobuf@google@@QEAA@AEBV012@@Z
??0FileDescriptorSet@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FileDescriptorSet@protobuf@google@@QEAA@XZ
??0FileInputStream@io@protobuf@google@@QEAA@HH@Z
??0FileOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FileOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0FileOptions@protobuf@google@@QEAA@AEBV012@@Z
??0FileOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FileOptions@protobuf@google@@QEAA@XZ
??0FileOutputStream@io@protobuf@google@@QEAA@HH@Z
??0Finder@TextFormat@protobuf@google@@QEAA@AEBV0123@@Z
??0Finder@TextFormat@protobuf@google@@QEAA@XZ
??0FloatValue@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0FloatValue@protobuf@google@@QEAA@$$QEAV012@@Z
??0FloatValue@protobuf@google@@QEAA@AEBV012@@Z
??0FloatValue@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0FloatValue@protobuf@google@@QEAA@XZ
??0FunctionClosure0@internal@protobuf@google@@QEAA@P6AXXZ_N@Z
??0GeneratedCodeInfo@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0GeneratedCodeInfo@protobuf@google@@QEAA@$$QEAV012@@Z
??0GeneratedCodeInfo@protobuf@google@@QEAA@AEBV012@@Z
??0GeneratedCodeInfo@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0GeneratedCodeInfo@protobuf@google@@QEAA@XZ
??0GeneratedCodeInfo_Annotation@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0GeneratedCodeInfo_Annotation@protobuf@google@@QEAA@$$QEAV012@@Z
??0GeneratedCodeInfo_Annotation@protobuf@google@@QEAA@AEBV012@@Z
??0GeneratedCodeInfo_Annotation@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0GeneratedCodeInfo_Annotation@protobuf@google@@QEAA@XZ
??0GeneratedExtensionFinder@internal@protobuf@google@@QEAA@PEBVMessageLite@23@@Z
??0GrowingArrayByteSink@strings@protobuf@google@@QEAA@_K@Z
??0GzipInputStream@io@protobuf@google@@QEAA@PEAVZeroCopyInputStream@123@W4Format@0123@H@Z
??0GzipOutputStream@io@protobuf@google@@QEAA@PEAVZeroCopyOutputStream@123@@Z
??0GzipOutputStream@io@protobuf@google@@QEAA@PEAVZeroCopyOutputStream@123@AEBUOptions@0123@@Z
??0IgnoreCriteria@MessageDifferencer@util@protobuf@google@@QEAA@AEBV01234@@Z
??0IgnoreCriteria@MessageDifferencer@util@protobuf@google@@QEAA@XZ
??0ImplicitWeakMessage@internal@protobuf@google@@QEAA@PEAVArena@23@@Z
??0ImplicitWeakMessage@internal@protobuf@google@@QEAA@UConstantInitialized@123@@Z
??0ImplicitWeakMessage@internal@protobuf@google@@QEAA@XZ
??0Importer@compiler@protobuf@google@@QEAA@PEAVSourceTree@123@PEAVMultiFileErrorCollector@123@@Z
??0InlinedStringField@internal@protobuf@google@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0InlinedStringField@internal@protobuf@google@@QEAA@PEAVArena@23@@Z
??0InlinedStringField@internal@protobuf@google@@QEAA@PEBV?$ExplicitlyConstructed@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$00@123@_N@Z
??0InlinedStringField@internal@protobuf@google@@QEAA@XZ
??0Int32Value@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Int32Value@protobuf@google@@QEAA@$$QEAV012@@Z
??0Int32Value@protobuf@google@@QEAA@AEBV012@@Z
??0Int32Value@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Int32Value@protobuf@google@@QEAA@XZ
??0Int64Value@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Int64Value@protobuf@google@@QEAA@$$QEAV012@@Z
??0Int64Value@protobuf@google@@QEAA@AEBV012@@Z
??0Int64Value@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Int64Value@protobuf@google@@QEAA@XZ
??0InternalMetadata@internal@protobuf@google@@QEAA@PEAVArena@23@_N@Z
??0InternalMetadata@internal@protobuf@google@@QEAA@XZ
??0IstreamInputStream@io@protobuf@google@@QEAA@PEAV?$basic_istream@DU?$char_traits@D@std@@@std@@H@Z
??0Item@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@PEAV012345@W4ItemType@012345@_N2@Z
??0Item@ProtoStreamObjectWriter@converter@util@protobuf@google@@QEAA@PEAV12345@W4ItemType@012345@_N2@Z
??0JsonObjectWriter@converter@util@protobuf@google@@QEAA@VStringPiece@stringpiece_internal@34@PEAVCodedOutputStream@io@34@@Z
??0JsonStreamParser@converter@util@protobuf@google@@QEAA@PEAVObjectWriter@1234@@Z
??0LazyMessageExtension@ExtensionSet@internal@protobuf@google@@QEAA@XZ
??0LazyString@internal@protobuf@google@@QEAA@XZ
??0LimitByteSource@strings@protobuf@google@@QEAA@PEAVByteSource@123@_K@Z
??0LimitingInputStream@io@protobuf@google@@QEAA@PEAVZeroCopyInputStream@123@_J@Z
??0ListValue@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0ListValue@protobuf@google@@QEAA@$$QEAV012@@Z
??0ListValue@protobuf@google@@QEAA@AEBV012@@Z
??0ListValue@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0ListValue@protobuf@google@@QEAA@XZ
??0LiteUnknownFieldSetter@internal@protobuf@google@@QEAA@AEBV0123@@Z
??0LiteUnknownFieldSetter@internal@protobuf@google@@QEAA@PEAVInternalMetadata@123@@Z
??0LocationRecorder@Parser@compiler@protobuf@google@@QEAA@AEBV01234@@Z
??0LocationRecorder@Parser@compiler@protobuf@google@@QEAA@AEBV01234@H@Z
??0LocationRecorder@Parser@compiler@protobuf@google@@QEAA@AEBV01234@HH@Z
??0LocationRecorder@Parser@compiler@protobuf@google@@QEAA@AEBV01234@HPEAVSourceCodeInfo@34@@Z
??0LocationRecorder@Parser@compiler@protobuf@google@@QEAA@PEAV1234@@Z
??0LocationTrackerInterface@converter@util@protobuf@google@@IEAA@XZ
??0LogMessage@internal@protobuf@google@@QEAA@AEBV0123@@Z
??0LogMessage@internal@protobuf@google@@QEAA@W4LogLevel@23@PEBDH@Z
??0LogSilencer@protobuf@google@@QEAA@XZ
??0MapEntryKeyComparator@MessageDifferencer@util@protobuf@google@@QEAA@PEAV1234@@Z
??0MapEntryMessageComparator@DynamicMapSorter@protobuf@google@@QEAA@PEBVDescriptor@23@@Z
??0MapFieldBase@internal@protobuf@google@@QEAA@PEAVArena@23@@Z
??0MapFieldBase@internal@protobuf@google@@QEAA@UConstantInitialized@123@@Z
??0MapFieldBase@internal@protobuf@google@@QEAA@XZ
??0MapIterator@protobuf@google@@QEAA@AEBV012@@Z
??0MapIterator@protobuf@google@@QEAA@PEAVMessage@12@PEBVFieldDescriptor@12@@Z
??0MapKey@protobuf@google@@QEAA@AEBV012@@Z
??0MapKey@protobuf@google@@QEAA@XZ
??0MapKeyComparator@MessageDifferencer@util@protobuf@google@@QEAA@XZ
??0MapValueConstRef@protobuf@google@@QEAA@XZ
??0MapValueRef@protobuf@google@@QEAA@XZ
??0MergeOptions@FieldMaskUtil@util@protobuf@google@@QEAA@XZ
??0MergedDescriptorDatabase@protobuf@google@@QEAA@AEBV?$vector@PEAVDescriptorDatabase@protobuf@google@@V?$allocator@PEAVDescriptorDatabase@protobuf@google@@@std@@@std@@@Z
??0MergedDescriptorDatabase@protobuf@google@@QEAA@PEAVDescriptorDatabase@12@0@Z
??0Message@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Message@protobuf@google@@QEAA@XZ
??0MessageDifferencer@util@protobuf@google@@QEAA@XZ
??0MessageFactory@protobuf@google@@QEAA@XZ
??0MessageLite@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0MessageLite@protobuf@google@@QEAA@XZ
??0MessageOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0MessageOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0MessageOptions@protobuf@google@@QEAA@AEBV012@@Z
??0MessageOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0MessageOptions@protobuf@google@@QEAA@XZ
??0MessagePrinter@TextFormat@protobuf@google@@QEAA@XZ
??0Method@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Method@protobuf@google@@QEAA@$$QEAV012@@Z
??0Method@protobuf@google@@QEAA@AEBV012@@Z
??0Method@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Method@protobuf@google@@QEAA@XZ
??0MethodDescriptor@protobuf@google@@AEAA@XZ
??0MethodDescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0MethodDescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0MethodDescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0MethodDescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0MethodDescriptorProto@protobuf@google@@QEAA@XZ
??0MethodOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0MethodOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0MethodOptions@protobuf@google@@QEAA@AEBV012@@Z
??0MethodOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0MethodOptions@protobuf@google@@QEAA@XZ
??0Mixin@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Mixin@protobuf@google@@QEAA@$$QEAV012@@Z
??0Mixin@protobuf@google@@QEAA@AEBV012@@Z
??0Mixin@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Mixin@protobuf@google@@QEAA@XZ
??0MultiFileErrorCollector@compiler@protobuf@google@@QEAA@XZ
??0MutexLock@internal@protobuf@google@@QEAA@PEAVWrappedMutex@123@@Z
??0MutexLockMaybe@internal@protobuf@google@@QEAA@PEAVWrappedMutex@123@@Z
??0Node@DefaultValueObjectWriter@converter@util@protobuf@google@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBVType@45@W4NodeKind@12345@AEBVDataPiece@2345@_NAEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@7@444V?$function@$$A6A_NAEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@PEBVField@protobuf@google@@@Z@7@@Z
??0NoopErrorListener@converter@util@protobuf@google@@QEAA@XZ
??0NullByteSink@strings@protobuf@google@@QEAA@XZ
??0ObjectSource@converter@util@protobuf@google@@IEAA@XZ
??0ObjectWriter@converter@util@protobuf@google@@IEAA@XZ
??0OneofDescriptor@protobuf@google@@AEAA@XZ
??0OneofDescriptorProto@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0OneofDescriptorProto@protobuf@google@@QEAA@$$QEAV012@@Z
??0OneofDescriptorProto@protobuf@google@@QEAA@AEBV012@@Z
??0OneofDescriptorProto@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0OneofDescriptorProto@protobuf@google@@QEAA@XZ
??0OneofOptions@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0OneofOptions@protobuf@google@@QEAA@$$QEAV012@@Z
??0OneofOptions@protobuf@google@@QEAA@AEBV012@@Z
??0OneofOptions@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0OneofOptions@protobuf@google@@QEAA@XZ
??0Option@protobuf@google@@IEAA@PEAVArena@12@_N@Z
??0Option@protobuf@google@@QEAA@$$QEAV012@@Z
??0Option@protobuf@google@@QEAA@AEBV012@@Z
??0Option@protobuf@google@@QEAA@UConstantInitialized@internal@12@@Z
??0Option@protobuf@google@@QEAA@XZ
??0Options@GzipOutputStream@io@protobuf@google@@QEAA@XZ
??0OstreamOutputStream@io@protobuf@google@@QEAA@PEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@H@Z
??0ParseInfoTree@TextFormat@protobuf@google@@QEAA@XZ
??0Parser@TextFormat@protobuf@google@@QEAA@XZ
??0Parser@compiler@protobuf@google@@QEAA@XZ
??0Printer@TextFormat@protobuf@google@@QEAA@$$QEAV0123@@Z
??0Printer@TextFormat@protobuf@google@@QEAA@XZ
??0Printer@io@protobuf@google@@QEAA@PEAVZeroCopyOutputStream@123@D@Z
??0Printer@io@protobuf@google@@QEAA@PEAVZeroCopyOutputStream@123@DPEAVAnnotationCollector@123@@Z

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 951KB - Virtual size: 951KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7df70b58fbdfbcab9ee23cabe407de8f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 951KB - Virtual size: 951KB

.data Size: 24KB - Virtual size: 28KB

.pdata Size: 73KB - Virtual size: 72KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 951KB - Virtual size: 951KB

.data
Size: 24KB - Virtual size: 28KB

.pdata
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB