D:\dbs\sh\ddvsm\0329_205556\cmd\i\out\binaries\x86ret\bin\i386\VC7\VCPackages\VCPkgSrv.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ce3e9060e4c39165ac28fb508c061ae0_NeikiAnalytics.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ce3e9060e4c39165ac28fb508c061ae0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
ce3e9060e4c39165ac28fb508c061ae0_NeikiAnalytics.exe
-
Size
1.8MB
-
MD5
ce3e9060e4c39165ac28fb508c061ae0
-
SHA1
8692cfffc7353ef7e83fd465c76dde3deb30f6d7
-
SHA256
c37afdf63f2bccdcbc111c61f577c8f484e508478425fe85e1045c53f553c041
-
SHA512
99bd815d9b668a82ee7024c5b28660e61c4205b46c990a6d511ae847a557099cfc0151aab196fa2f89053d6bd9f034b4c2353ca7b678900b4c3d46375c5a011c
-
SSDEEP
49152:dfkcVkJdyrAP5RojIw1M+RjHaB0zj0yjoB2:lkcVkJcrAP5RojIhk6B2Yyjl
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3e9060e4c39165ac28fb508c061ae0_NeikiAnalytics.exe
Files
-
ce3e9060e4c39165ac28fb508c061ae0_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
69e9ca1680e62e47ea59260db144e9c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoTaskMemFree
CoCreateGuid
user32
IsCharUpperW
MessageBoxW
GetSystemMetrics
GetMessageA
MapVirtualKeyW
DispatchMessageA
TranslateMessage
LoadStringW
IsCharLowerW
CharUpperBuffW
CharLowerBuffW
oleaut32
SysStringLen
SysFreeString
concrt140
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
??1_StructuredTaskCollection@details@Concurrency@@QAE@XZ
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?Free@Concurrency@@YAXPAX@Z
msvcp140
?_Xinvalid_argument@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
_Cnd_do_broadcast_at_thread_exit
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
_Xtime_get_ticks
_Cnd_timedwait
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_current_owns
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?is@?$ctype@D@std@@QBE_NFD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?uncaught_exception@std@@YA_NXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Strxfrm
_Mtx_trylock
?_Xbad_function_call@std@@YAXXZ
_Query_perf_counter
_Thrd_id
?_Xout_of_range@std@@YAXPBD@Z
_Query_perf_frequency
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Cnd_wait
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
_Cnd_init_in_situ
_Thrd_join
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
_Cnd_signal
kernel32
GetFullPathNameW
FindNextFileW
FindClose
GetFileAttributesW
UnmapViewOfFile
GetLocaleInfoA
GetFileAttributesExW
CompareStringEx
GetSystemInfo
GetCurrentDirectoryW
CreateFileMappingW
MapViewOfFile
SetErrorMode
GetErrorMode
WriteConsoleW
WideCharToMultiByte
WriteFile
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateMutexW
WaitForSingleObject
CreateFileW
HeapValidate
Sleep
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
FlushViewOfFile
CreateFileA
LoadLibraryA
DeleteFileA
DeleteFileW
HeapCompact
UnlockFile
CreateFileMappingA
LocalFree
LockFileEx
GetFileSize
SystemTimeToFileTime
GetSystemTime
FormatMessageA
GetTickCount
FlushFileBuffers
RegisterWaitForSingleObject
UnregisterWait
PostQueuedCompletionStatus
UnregisterWaitEx
GetExitCodeProcess
GetQueuedCompletionStatus
CreateIoCompletionPort
SetNamedPipeHandleState
SetLastError
CreateNamedPipeW
PeekNamedPipe
DuplicateHandle
QueueUserWorkItem
CancelSynchronousIo
GetNamedPipeHandleStateA
GetCurrentThread
FindFirstFileExW
SwitchToThread
CreateEventA
ConnectNamedPipe
FindResourceExW
GetCurrentProcessId
SetUnhandledExceptionFilter
HeapFree
InitializeCriticalSectionEx
HeapSize
MultiByteToWideChar
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
HeapDestroy
GetProcAddress
DeleteCriticalSection
GetProcessHeap
FreeLibrary
SetConsoleTitleW
GetCurrentProcess
TerminateProcess
GetProcessId
OpenProcess
CloseHandle
LoadLibraryW
AllocConsole
CheckRemoteDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
IsProcessorFeaturePresent
OutputDebugStringW
FindResourceW
LoadResource
LockResource
SizeofResource
QueryPerformanceFrequency
SleepConditionVariableCS
GetACP
GetCPInfo
TlsSetValue
ReleaseSemaphore
WakeConditionVariable
InitializeConditionVariable
ResumeThread
TlsAlloc
GetNativeSystemInfo
CancelIoEx
SetHandleInformation
CreateSemaphoreA
CancelIo
DebugBreak
GetEnvironmentVariableW
GetThreadPreferredUILanguages
LoadLibraryExW
GetModuleFileNameW
GetTempPathA
GetTempPathW
WaitNamedPipeW
SetConsoleCtrlHandler
GetModuleHandleA
ReadDirectoryChangesW
GetConsoleScreenBufferInfo
GetLongPathNameW
SetConsoleCursorPosition
SetConsoleTextAttribute
GetNumberOfConsoleInputEvents
GetConsoleCursorInfo
SetConsoleCursorInfo
FillConsoleOutputAttribute
WriteConsoleInputW
ReadConsoleW
ReadConsoleInputW
FillConsoleOutputCharacterW
advapi32
EventWrite
EventRegister
EventUnregister
vcruntime140
_except_handler4_common
__current_exception_context
__current_exception
strchr
_purecall
memcpy
__std_exception_copy
__std_exception_destroy
memchr
strrchr
wcsrchr
__std_terminate
memcmp
__CxxFrameHandler3
memset
memmove
_CxxThrowException
__RTDynamicCast
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_endthreadex
_beginthreadex
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
exit
_exit
__p___argc
_set_invalid_parameter_handler
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_controlfp_s
_invalid_parameter_noinfo
_errno
__p___wargv
abort
api-ms-win-crt-heap-l1-1-0
calloc
realloc
_callnewh
free
_set_new_mode
malloc
api-ms-win-crt-string-l1-1-0
isalnum
_wcsnicmp
wcsncpy
wmemcpy_s
strcspn
wcsnlen
iswxdigit
iswalnum
strncpy_s
wcsncmp
strncmp
iswspace
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-stdio-l1-1-0
feof
fseek
ftell
__stdio_common_vsnprintf_s
__acrt_iob_func
_close
__stdio_common_vfprintf
freopen_s
_wsopen_s
_wfsopen
fread
__stdio_common_vsprintf
_set_fmode
fclose
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__p__commode
_ungetc_nolock
_getc_nolock
api-ms-win-crt-convert-l1-1-0
atoi
strtoul
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdopen
ceil
floor
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
cpfe
?get_errors_for_file@translation_unit@edge@@QBEXPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@PAUisense_error_array@2@@Z
?get_instantiation_errors_for_file@translation_unit@edge@@QBEXPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@PAUinstantiation_error_array@2@@Z
?get_translation_unit_language@translation_unit@edge@@QBE?AW4translation_unit_language_e@2@XZ
?update_range@translation_unit@edge@@QAEXPAUallocator@2@Usnapshot_session_t@snapshot@@Ufile_position@2@2ABUupdate_range_options@2@2PAU?$strong_typedef_t@Uoffset_traits@msvc@@@msvc@@4ABV?$an_array_list@PAUupdate_range_action@edge@@V?$allocator@PAUupdate_range_action@edge@@@std@@@@AAVquery_action_data@2@@Z
?get_semantic_tokens_for_fragments_in_view@translation_unit@edge@@QBE_NPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@PAUsemantic_token_array@2@@Z
?get_macro_tokens_for_fragments_in_view@translation_unit@edge@@QBE_NPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@PAUmacro_token_array@2@@Z
?get_reference_highlights@translation_unit@edge@@QBE_NPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@PAUreference_highlight_array@2@@Z
?get_inactive_regions_for_file@translation_unit@edge@@QBEXPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@_NPAUinactive_region_array@2@@Z
?is_inside_inactive_region@translation_unit@edge@@QBE_NABUfile_position@2@@Z
?get_instantiation_args_pos_for_file@translation_unit@edge@@QBEXPAUallocator@2@Usnapshot_session_t@snapshot@@Ua_canonicalized_file_name@@_NPAUinstantiation_args_pos_array@2@@Z
?type_pointed_to@pointer_type@edge@@QBEPAVtype@2@XZ
?type@constant@edge@@QBEPAV02@XZ
?to_string@type@edge@@UBEXPAU?$buffer@D@msvc@@I@Z
?to_string@type@edge@@QBEXPAU?$buffer@D@msvc@@@Z
?symbol@type@edge@@QBEPAU02@XZ
?get_parameters@function_type@edge@@QBEXPAU?$list@PAVparam_type_entry@edge@@@2@@Z
?has_ellipsis@function_type@edge@@QBE_NXZ
?this_class@function_type@edge@@QBEPAVtype@2@XZ
?form_restrict_specifier@function_type@edge@@QBEXPAU?$buffer@D@msvc@@AAPBD@Z
??0a_get_symbol_operation@edge@@QAE@PAUallocator@1@ABUfile_line_column@1@@Z
??1a_get_symbol_operation@edge@@QAE@XZ
?get_intermediate_symbols@a_get_symbol_operation@edge@@QBE?AW4an_error_code@12@PAVtranslation_unit@2@Usnapshot_session_t@snapshot@@W4symbol_filter_e@2@W4simplify_symbol_options_e@2@_N4PAW4error_code@intellisense_operation@2@PAU?$list@PAUsymbol@edge@@@2@@Z
?release_query_action_data@a_get_symbol_operation@edge@@QAE?AVquery_action_data@2@XZ
?name@source_file@edge@@QBEPBDXZ
?full_name@source_file@edge@@QBEPBDXZ
?type@param_type_entry@edge@@QBEPAV02@XZ
?name@param_type_entry@edge@@QBEPBDPAU?$buffer@D@msvc@@_N@Z
?is_parameter_pack@param_type_entry@edge@@QBE_NXZ
?form_declaration@param_type_entry@edge@@QBEXPAU?$buffer@D@msvc@@I@Z
?physical_position@source_position@edge@@QBE?AUfile_position@2@XZ
?position@source_position@edge@@QBE?AUfile_position@2@XZ
?is_null_position@source_position@edge@@QBE_NXZ
?source_file@source_position@edge@@QBEPAU02@_N@Z
?is_position_in_assembly@source_position@edge@@QBE_NXZ
?fill_in_intermediate@edge@@YAXPAUintermediate_symbol@1@PAUsymbol@1@@Z
?is_class_scope@scope_entry@edge@@QBE_NXZ
?is_namespace_scope@scope_entry@edge@@QBE_NXZ
?get_cli_class_type_kind@class_struct_type@edge@@QBE?AW4cli_class_type_kind@2@XZ
?is_delegate_type@class_struct_type@edge@@QBE_NXZ
??0intellisense_operation@edge@@QAE@PAUallocator@1@PAVtranslation_unit@1@Usnapshot_session_t@snapshot@@ABUfile_position@1@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@U?$strong_typedef_t@Uoffset_traits@msvc@@@msvc@@_N@Z
??0intellisense_operation@edge@@QAE@PAUallocator@1@PAVtranslation_unit@1@Usnapshot_session_t@snapshot@@ABUfile_position@1@_N@Z
??1intellisense_operation@edge@@QAE@XZ
?symbol_at_cursor@intellisense_operation@edge@@QAEPAUsymbol@2@PAU?$list@PAUsymbol@edge@@@2@_NPAU?$buffer@D@msvc@@@Z
?get_derived_and_base_at_cursor@intellisense_operation@edge@@QAEXPAPAUsymbol@2@0@Z
?scope_at_cursor@intellisense_operation@edge@@QAEPAVscope_entry@2@PAPAVmember_selection_entry@2@_N@Z
?function_scope_enclosing_cursor@intellisense_operation@edge@@QAEPAUfunction_symbol@2@XZ
?call_sites_in_enclosing_function_scope@intellisense_operation@edge@@QAEXPAU?$list@Ucall_site@edge@@@2@@Z
?last_error_code@intellisense_operation@edge@@QBE?AW4error_code@12@XZ
?get_auto_complete_members@intellisense_operation@edge@@QAEXAAPAVmember_selection_entry@2@AAPAVscope_entry@2@PAU?$list@PAUsymbol@edge@@@2@222W4member_list_kind@12@@Z
?dynamic_init@new_delete_expr_node_entry@edge@@QBEPAVdynamic_init_entry@2@XZ
?get_errors_for_tu@translation_unit@edge@@QBEXPAUallocator@2@Usnapshot_session_t@snapshot@@PAUisense_error_array@2@@Z
?release_query_action_data@intellisense_operation@edge@@QAE?AVquery_action_data@2@XZ
?is_scope_context_active@intellisense_operation@edge@@QAE_NXZ
?get_trees_in_enclosing_function_scope@intellisense_operation@edge@@QAE_NPAU?$list@PAVil_entry@edge@@@2@PAU?$list@Ufile_position@edge@@@2@1@Z
?get_type_expected_at_position@intellisense_operation@edge@@QAEPAVtype@2@D@Z
?set_compilation_and_indexing_hints@intellisense_operation@edge@@QAEX_NH@Z
??0a_find_def_operation@edge@@QAE@PAUallocator@1@@Z
??1a_find_def_operation@edge@@QAE@XZ
?find_definition@a_find_def_operation@edge@@QAE?AW4an_error_code@12@PBUintermediate_symbol@2@PAU42@PAVtranslation_unit@2@Usnapshot_session_t@snapshot@@@Z
?pgo_sweep@edge@@YAXPBD@Z
?target_of_branch@branch_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?canonicalize@edge@@YA?AUa_canonicalized_file_name@@PBD@Z
?get_delegate_symbol@event_descr@edge@@QBEPAUclass_struct_symbol@2@XZ
?delegate_invocation_type@event_descr@edge@@QBEPAVfunction_type@2@XZ
?to_string@template_arg_entry@edge@@QBEXPAU?$buffer@D@msvc@@I@Z
??0file_line_column@edge@@QAE@Ua_canonicalized_file_name@@U?$strong_typedef_t@Uline1_traits@msvc@@@msvc@@U?$strong_typedef_t@Ucolumn1_traits@msvc@@@4@@Z
?source_range@statement_entry@edge@@QBEXPAUfile_position@2@0@Z
?expression_range@statement_entry@edge@@QBE_NPAUfile_position@2@0@Z
?switch_of_case@case_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?is_toplevel_case@case_statement_entry@edge@@QBE_NXZ
?is_enum@integer_type@edge@@QBE_NXZ
?class_type@pointer_to_member_type@edge@@QBEPAVclass_struct_type@2@XZ
?member_type@pointer_to_member_type@edge@@QBEPAVtype@2@XZ
?is_stub_host@edge@@YA_NXZ
?get_host@edge@@YAPAUhost@1@XZ
??0scoped_query_manager@edge@@QAE@PAUallocator@1@PAVtranslation_unit@1@Usnapshot_session_t@snapshot@@_N@Z
??1scoped_query_manager@edge@@QAE@XZ
?has_errors_in_range@scoped_query_manager@edge@@QBE_NABUfile_position@2@0@Z
?symbol@template_parameter@edge@@QBEPAU02@XZ
?to_string@template_parameter@edge@@QBEXPAU?$buffer@D@msvc@@I@Z
?contains_source_file@translation_unit@edge@@QBE_NUa_canonicalized_file_name@@@Z
install_host
?tag_parse@@YA_NIPAPBDPBDW4parse_lang_e@edge@@Usnapshot_session_t@snapshot@@PAVa_scout_parser_interface@@@Z
?tag_parse_metadata@@YA_NPBDPAVa_scout_parser_interface@@@Z
?tag_parse_shutdown@@YAXXZ
?is_null_position@file_position@edge@@QBE_NXZ
?symbol@scope_entry@edge@@QBEPAU02@XZ
?symbol@constant@edge@@QBEPAU02@XZ
?to_string_with_refs@type@edge@@QBEIPAU?$buffer@D@msvc@@IPBD@Z
?is_const@type@edge@@QBE_NXZ
?get_symbol_from_macro_invocation@intellisense_operation@edge@@SAPAUsymbol@2@PAVmacro_invocation_entry@2@ABUfile_position@2@1@Z
?get_symbol_from_il_entry@intellisense_operation@edge@@QAEPAUsymbol@2@PAVil_entry@2@PAU?$list@PAUsymbol@edge@@@2@_N@Z
?constant@constant_entry@edge@@QBEPAV02@XZ
?kind@il_entry@edge@@QBE?AW4il_entry_kind@2@XZ
?type_referenced@pointer_type@edge@@QBEPAVtype@2@XZ
?is_reference@pointer_type@edge@@QBE_NXZ
?kind@type@edge@@QBE?AW4type_kind@2@XZ
?is_equal_to@type@edge@@QBE_NPBV12@H@Z
?skip_all_typerefs@typeref_type@edge@@QBEPAVtype@2@XZ
?return_type@function_type@edge@@QBEPAVtype@2@XZ
?get_requirements@requires_expr_node_entry@edge@@QBEXPAU?$list@PAVexpr_node_entry@edge@@@2@@Z
?get_preparse_snapshot_session@translation_unit@edge@@QBE?AUsnapshot_session_t@snapshot@@XZ
?get_param_help_overloads@intellisense_operation@edge@@QAEPAUsymbol@2@PAU?$list@PAUsymbol@edge@@@2@PAW4arg_list_entry_kind@2@PA_N2PAUfile_position@2@333@Z
?preparse_successful@translation_unit@edge@@QBE_NXZ
??0file_position@edge@@QAE@Ua_canonicalized_file_name@@U?$strong_typedef_t@Uoffset_traits@msvc@@@msvc@@@Z
?cleanup@microsoft_try_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?filter@microsoft_try_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?body@microsoft_try_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?expr_operand@sizeof_expr_node_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?body@for_loop_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?increment@for_loop_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?condition@for_loop_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?initialization@for_loop_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?source_range@expr_node_entry@edge@@QBE_NPAUfile_position@2@0@Z
?get_handlers@try_statement_entry@edge@@QBEXPAU?$list@PAVhandler_entry@edge@@@2@@Z
?body@try_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?body@handler_entry@edge@@QBEPAVstatement_entry@2@XZ
??0file_position@edge@@QAE@XZ
?dynamic_init@temp_init_expr_node_entry@edge@@QBEPAVdynamic_init_entry@2@XZ
?file@file_range@edge@@QBE?AUa_canonicalized_file_name@@XZ
?length@file_range@edge@@QBEHXZ
?raw@a_canonicalized_file_name@@QBEPBDXZ
?opened_in_editor@file_buffer@edge@@IAEXXZ
??0file_range@edge@@QAE@Ufile_position@1@H@Z
?set_instantiation_args@translation_unit@edge@@QAEXABUfile_position@2@PBD@Z
?initialize@translation_unit@edge@@QAE_NABV?$shared_ptr@Umodule_loader@edge@@@std@@HQAPBDPBD2_N2Usnapshot_session_t@snapshot@@AAVquery_action_data@2@@Z
??1translation_unit@edge@@QAE@XZ
?update@file_buffer@edge@@IAEXU?$strong_typedef_t@Uoffset_traits@msvc@@@msvc@@0H@Z
??1file_buffer@edge@@MAE@XZ
??0file_buffer@edge@@IAE@XZ
??0file_range@edge@@QAE@Ufile_position@1@0@Z
?init_kind@dynamic_init_entry@edge@@QBE?AW4dynamic_init_kind@2@XZ
?constraint@compound_req_expr_node_entry@edge@@QBEPAVconcept_expr_node_entry@2@XZ
?operation_flags@operation_expr_node_entry@edge@@QBE?AUflags@12@XZ
?is_parenthesized@expr_node_entry@edge@@QBE_NXZ
?expression@compound_req_expr_node_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?initialization@decl_init_statement_entry@edge@@QBEPAVdynamic_init_entry@2@XZ
?get_function_scopes_overlapping_span@scoped_query_manager@edge@@QAEXABUfile_position@2@0PAU?$list@PAVfunction_scope_entry@edge@@@2@@Z
?dynamic_init@throw_expr_node_entry@edge@@QBEPAVdynamic_init_entry@2@XZ
?get_children@block_statement_entry@edge@@QBEXPAU?$list@PAVstatement_entry@edge@@@2@@Z
?expr_operand@typeid_expr_node_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?body@range_based_for_loop_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?range_expr@range_based_for_loop_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?constraint@nested_req_expr_node_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?operator_name@operation_expr_node_entry@edge@@QBE?AW4expr_operator_kind@2@XZ
?source_position@expr_node_entry@edge@@QBE_NPAUfile_position@2@@Z
?original_expression@constant@edge@@QBEPAVexpr_node_entry@2@XZ
?constant@constant_dynamic_init_entry@edge@@QBEPAV02@XZ
?get_operands@operation_expr_node_entry@edge@@QBEXPAU?$list@PAVexpr_node_entry@edge@@@2@@Z
?body@switch_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?size@type@edge@@QBEIXZ
?symbol@dynamic_init_entry@edge@@QBEPAUvariable_symbol@2@XZ
?iterator@range_based_for_loop_statement_entry@edge@@QBEPAUvariable_symbol@2@XZ
?condition@condition_expr_node_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?initialization@condition_expr_node_entry@edge@@QBEPAVstatement_entry@2@XZ
?is_copy_for_initialization@constructor_dynamic_init_entry@edge@@QBE_NXZ
??0file_range@edge@@QAE@XZ
?dynamic_init@condition_expr_node_entry@edge@@QBEPAVdynamic_init_entry@2@XZ
?is_lvalue@expr_node_entry@edge@@QBE_NXZ
?type@expr_node_entry@edge@@QBEPAV02@XZ
?is_call@operation_expr_node_entry@edge@@QBE_NXZ
?release_query_action_data@a_find_all_refs_operation@edge@@QAE?AVquery_action_data@2@XZ
?resolve_candidate@a_find_all_refs_operation@edge@@QAE?AUa_far_resolution@2@Usnapshot_session_t@snapshot@@ABUfile_position@2@PAU?$strong_typedef_t@Uoffset_traits@msvc@@@msvc@@222PAV?$basic_buffer@D@8@@Z
??1a_find_all_refs_operation@edge@@QAE@XZ
??0a_find_all_refs_operation@edge@@QAE@PAUallocator@1@PBUintermediate_symbol@1@PAVtranslation_unit@1@W4find_all_refs_filter_mode_e@1@@Z
??0translation_unit@edge@@QAE@XZ
?get_query_manager@intellisense_operation@edge@@QAEABVscoped_query_manager@2@XZ
?is_bool@integer_type@edge@@QBE_NXZ
?symbol_at_cursor@intellisense_operation@edge@@QAEPAUsymbol@2@XZ
?mark_telemetry_consumed@query_action_data@edge@@QAEXXZ
?get_last_preparse_pch_action@query_action_data@edge@@QBE?AW4pch_action_tag_e@2@XZ
?get_num_preparses_done@query_action_data@edge@@QBEHXZ
??1query_action_data@edge@@QAE@XZ
??0query_action_data@edge@@QAE@$$QAV01@@Z
?else_statement@if_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?then_statement@if_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?condition@if_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?body@for_each_loop_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
?entities@decl_statement_entry@edge@@QBEXPAU?$list@PAVil_entry@edge@@@2@@Z
?collection@for_each_loop_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?expression@expression_dynamic_init_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?body@function_scope_entry@edge@@QBEPAVstatement_entry@2@XZ
?body@while_statement_entry@edge@@QBEPAVstatement_entry@2@XZ
??0query_action_data@edge@@QAE@XZ
?uses_pch_file@translation_unit@edge@@QBE_NUa_canonicalized_file_name@@@Z
?scope@member_selection_entry@edge@@QBEPAVscope_entry@2@XZ
?is_in_function@scope_entry@edge@@QBE_NXZ
?selector_expr@member_selection_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?is_in_class_member_function@scope_entry@edge@@QBE_NXZ
?symbol@variable_entry@edge@@QBEPAUvariable_symbol@2@XZ
?is_empty_class@type@edge@@QBE_NXZ
?condition@while_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?expression@expr_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?get_elements@braced_init_list_expr_node_entry@edge@@QBEXPAU?$list@PAVexpr_node_entry@edge@@@2@@Z
?is_end_reachable@statement_entry@edge@@QBE_NXZ
?expression@return_statement_entry@edge@@QBEPAVexpr_node_entry@2@XZ
?get_auto_complete_members@intellisense_operation@edge@@QAEXAAPAVmember_selection_entry@2@AAPAVscope_entry@2@PAU?$list@PAUsymbol@edge@@@2@222W4member_list_kind@12@_NAA_N55@Z
?corresponding_fundamental_type@type@edge@@QBEPAV12@XZ
?get_operands@fold_expr_node_entry@edge@@QBEXPAU?$list@PAVexpr_node_entry@edge@@@2@@Z
shlwapi
PathRemoveFileSpecW
PathAppendW
ws2_32
WSARecv
socket
WSARecvFrom
shutdown
WSASend
WSAIoctl
select
WSAStartup
WSASetLastError
WSASocketW
closesocket
getsockopt
setsockopt
WSAGetLastError
htons
api-ms-win-crt-filesystem-l1-1-0
_wunlink
_waccess_s
_wstat64
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
api-ms-win-crt-multibyte-l1-1-0
_ismbblead
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE