E:\elpm\项目封装\Kylin\bin\libKylin.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
06a765cc41f11c7468b66f1654e758d418b440ab53be550eaad4ec88b5010839.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
06a765cc41f11c7468b66f1654e758d418b440ab53be550eaad4ec88b5010839.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
06a765cc41f11c7468b66f1654e758d418b440ab53be550eaad4ec88b5010839
-
Size
1.3MB
-
MD5
d1c03cb10fee4a121a1351994992b3f0
-
SHA1
b5ecf9b0f12be47d37b17d5fa3d2179289bbd342
-
SHA256
06a765cc41f11c7468b66f1654e758d418b440ab53be550eaad4ec88b5010839
-
SHA512
03b6c729a57ff69f6094e355a323829e3d12e64e63fd5f6ea4d4b8ec404b0c4387250f65f7b899d7fef3c5213cd8c08cdc29b09449b7d23ebc72dfe62b0eed75
-
SSDEEP
24576:W+v640LMhyv3kBartwnAzPxtLjXww54ppl1s1N4xrqXc0JUQfnbxgRE2guSzKrRh:zvP0LMh+ShnAzPjjx4xrqXc0JUQfnbxY
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a765cc41f11c7468b66f1654e758d418b440ab53be550eaad4ec88b5010839
Files
-
06a765cc41f11c7468b66f1654e758d418b440ab53be550eaad4ec88b5010839.dll windows:5 windows x86 arch:x86
fca1cac301977d86d5282af94b15b9ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetConsoleScreenBufferInfo
VirtualFree
GetCurrentProcess
GetStdHandle
WriteConsoleA
WriteFile
VirtualAlloc
GetLargePageMinimum
GetEnvironmentVariableA
GetNumaNodeProcessorMask
LoadLibraryA
QueryPerformanceFrequency
CloseHandle
GetSystemInfo
GetCurrentProcessorNumber
GetProcAddress
FreeLibrary
QueryPerformanceCounter
VirtualQuery
GetProcessTimes
GetSystemTime
FindFirstFileExW
GetFullPathNameW
FindNextFileW
SetConsoleMode
FindClose
WaitForSingleObject
Sleep
GetTimeZoneInformation
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReadFile
SetFilePointer
SetEndOfFile
CreateFileW
CreateFileA
FlushFileBuffers
GetNumaHighestNodeNumber
GetLastError
SystemTimeToFileTime
GetFullPathNameA
PeekNamedPipe
AreFileApisANSI
GetFileType
GetFileInformationByHandle
GetDriveTypeW
GetModuleHandleExW
ExitProcess
RtlUnwind
InterlockedFlushSList
DecodePointer
InitializeCriticalSectionEx
WideCharToMultiByte
MultiByteToWideChar
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
msvcrt
_read
fseek
_pclose
fgetc
_unlink
_setmode
_isatty
_close
_write
_fullpath
rename
_open
_fileno
tmpfile
_lseek
atoi
_popen
__p__environ
strspn
feof
signal
strerror
_utime64
atan
sin
log10
cos
sinh
asin
acos
fabs
tan
_fdopen
log
atan2
exp
tanh
sqrt
cosh
qsort
_callnewh
_initterm
_rmdir
_getcwd
_mkdir
_chdir
__pctype_func
___lc_codepage_func
___mb_cur_max_func
isspace
tolower
_lock
_unlock
_iob
_wfopen
_ecvt
fgetpos
fsetpos
_lseeki64
_getdrive
__doserrno
wcspbrk
_wcsicmp
_wfullpath
___lc_handle_func
mbstowcs
_CIexp
_CIlog
_CIsqrt
_hypot
getc
ungetc
?terminate@@YAXXZ
_XcptFilter
__getmainargs
mbtowc
_strtoui64
_CIlog10
ceil
_clearfp
_putenv
fopen
_get_osfhandle
ftell
realloc
malloc
fread
_finite
fclose
strtod
fflush
ferror
_isnan
fputs
strtol
abort
getenv
_wgetenv
_errno
free
pow
_amsg_exit
__CxxFrameHandler
memchr
memmove
__uncaught_exception
memcpy
memset
_CxxThrowException
strrchr
strchr
strstr
clearerr
wcsrchr
_CIfmod
floor
_msize
Exports
Exports
??0xml_attribute@pugi@@QAE@PAUxml_attribute_struct@1@@Z
??0xml_attribute@pugi@@QAE@XZ
??0xml_attribute_iterator@pugi@@AAE@PAUxml_attribute_struct@1@PAUxml_node_struct@1@@Z
??0xml_attribute_iterator@pugi@@QAE@ABVxml_attribute@1@ABVxml_node@1@@Z
??0xml_attribute_iterator@pugi@@QAE@XZ
??0xml_document@pugi@@QAE@$$QAV01@@Z
??0xml_document@pugi@@QAE@XZ
??0xml_named_node_iterator@pugi@@AAE@PAUxml_node_struct@1@0PBD@Z
??0xml_named_node_iterator@pugi@@QAE@ABVxml_node@1@PBD@Z
??0xml_named_node_iterator@pugi@@QAE@XZ
??0xml_node@pugi@@QAE@PAUxml_node_struct@1@@Z
??0xml_node@pugi@@QAE@XZ
??0xml_node_iterator@pugi@@AAE@PAUxml_node_struct@1@0@Z
??0xml_node_iterator@pugi@@QAE@ABVxml_node@1@@Z
??0xml_node_iterator@pugi@@QAE@XZ
??0xml_parse_result@pugi@@QAE@XZ
??0xml_text@pugi@@AAE@PAUxml_node_struct@1@@Z
??0xml_text@pugi@@QAE@XZ
??0xml_tree_walker@pugi@@QAE@ABV01@@Z
??0xml_tree_walker@pugi@@QAE@XZ
??0xml_writer@pugi@@QAE@ABV01@@Z
??0xml_writer@pugi@@QAE@XZ
??0xml_writer_file@pugi@@QAE@$$QAV01@@Z
??0xml_writer_file@pugi@@QAE@ABV01@@Z
??0xml_writer_file@pugi@@QAE@PAX@Z
??0xml_writer_stream@pugi@@QAE@$$QAV01@@Z
??0xml_writer_stream@pugi@@QAE@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0xml_writer_stream@pugi@@QAE@AAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@@Z
??0xml_writer_stream@pugi@@QAE@ABV01@@Z
??0xpath_exception@pugi@@QAE@$$QAV01@@Z
??0xpath_exception@pugi@@QAE@ABUxpath_parse_result@1@@Z
??0xpath_exception@pugi@@QAE@ABV01@@Z
??0xpath_node@pugi@@QAE@ABVxml_attribute@1@ABVxml_node@1@@Z
??0xpath_node@pugi@@QAE@ABVxml_node@1@@Z
??0xpath_node@pugi@@QAE@XZ
??0xpath_node_set@pugi@@QAE@$$QAV01@@Z
??0xpath_node_set@pugi@@QAE@ABV01@@Z
??0xpath_node_set@pugi@@QAE@PBVxpath_node@1@0W4type_t@01@@Z
??0xpath_node_set@pugi@@QAE@XZ
??0xpath_parse_result@pugi@@QAE@XZ
??0xpath_query@pugi@@QAE@$$QAV01@@Z
??0xpath_query@pugi@@QAE@PBDPAVxpath_variable_set@1@@Z
??0xpath_query@pugi@@QAE@XZ
??0xpath_variable@pugi@@IAE@W4xpath_value_type@1@@Z
??0xpath_variable_set@pugi@@QAE@$$QAV01@@Z
??0xpath_variable_set@pugi@@QAE@ABV01@@Z
??0xpath_variable_set@pugi@@QAE@XZ
??1xml_document@pugi@@QAE@XZ
??1xml_tree_walker@pugi@@UAE@XZ
??1xml_writer@pugi@@UAE@XZ
??1xml_writer_file@pugi@@UAE@XZ
??1xml_writer_stream@pugi@@UAE@XZ
??1xpath_exception@pugi@@UAE@XZ
??1xpath_node_set@pugi@@QAE@XZ
??1xpath_query@pugi@@QAE@XZ
??1xpath_variable_set@pugi@@QAE@XZ
??4xml_attribute@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_attribute@pugi@@QAEAAV01@ABV01@@Z
??4xml_attribute@pugi@@QAEAAV01@H@Z
??4xml_attribute@pugi@@QAEAAV01@I@Z
??4xml_attribute@pugi@@QAEAAV01@J@Z
??4xml_attribute@pugi@@QAEAAV01@K@Z
??4xml_attribute@pugi@@QAEAAV01@M@Z
??4xml_attribute@pugi@@QAEAAV01@N@Z
??4xml_attribute@pugi@@QAEAAV01@PBD@Z
??4xml_attribute@pugi@@QAEAAV01@_J@Z
??4xml_attribute@pugi@@QAEAAV01@_K@Z
??4xml_attribute@pugi@@QAEAAV01@_N@Z
??4xml_attribute_iterator@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_attribute_iterator@pugi@@QAEAAV01@ABV01@@Z
??4xml_document@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_named_node_iterator@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_named_node_iterator@pugi@@QAEAAV01@ABV01@@Z
??4xml_node@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_node@pugi@@QAEAAV01@ABV01@@Z
??4xml_node_iterator@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_node_iterator@pugi@@QAEAAV01@ABV01@@Z
??4xml_parse_result@pugi@@QAEAAU01@$$QAU01@@Z
??4xml_parse_result@pugi@@QAEAAU01@ABU01@@Z
??4xml_text@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_text@pugi@@QAEAAV01@ABV01@@Z
??4xml_text@pugi@@QAEAAV01@H@Z
??4xml_text@pugi@@QAEAAV01@I@Z
??4xml_text@pugi@@QAEAAV01@J@Z
??4xml_text@pugi@@QAEAAV01@K@Z
??4xml_text@pugi@@QAEAAV01@M@Z
??4xml_text@pugi@@QAEAAV01@N@Z
??4xml_text@pugi@@QAEAAV01@PBD@Z
??4xml_text@pugi@@QAEAAV01@_J@Z
??4xml_text@pugi@@QAEAAV01@_K@Z
??4xml_text@pugi@@QAEAAV01@_N@Z
??4xml_tree_walker@pugi@@QAEAAV01@ABV01@@Z
??4xml_writer@pugi@@QAEAAV01@ABV01@@Z
??4xml_writer_file@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_writer_file@pugi@@QAEAAV01@ABV01@@Z
??4xml_writer_stream@pugi@@QAEAAV01@$$QAV01@@Z
??4xml_writer_stream@pugi@@QAEAAV01@ABV01@@Z
??4xpath_exception@pugi@@QAEAAV01@$$QAV01@@Z
??4xpath_exception@pugi@@QAEAAV01@ABV01@@Z
??4xpath_node@pugi@@QAEAAV01@$$QAV01@@Z
??4xpath_node@pugi@@QAEAAV01@ABV01@@Z
??4xpath_node_set@pugi@@QAEAAV01@$$QAV01@@Z
??4xpath_node_set@pugi@@QAEAAV01@ABV01@@Z
??4xpath_parse_result@pugi@@QAEAAU01@$$QAU01@@Z
??4xpath_parse_result@pugi@@QAEAAU01@ABU01@@Z
??4xpath_query@pugi@@QAEAAV01@$$QAV01@@Z
??4xpath_variable_set@pugi@@QAEAAV01@$$QAV01@@Z
??4xpath_variable_set@pugi@@QAEAAV01@ABV01@@Z
??7xml_attribute@pugi@@QBE_NXZ
??7xml_node@pugi@@QBE_NXZ
??7xml_text@pugi@@QBE_NXZ
??7xpath_node@pugi@@QBE_NXZ
??7xpath_query@pugi@@QBE_NXZ
??8xml_attribute@pugi@@QBE_NABV01@@Z
??8xml_attribute_iterator@pugi@@QBE_NABV01@@Z
??8xml_named_node_iterator@pugi@@QBE_NABV01@@Z
??8xml_node@pugi@@QBE_NABV01@@Z
??8xml_node_iterator@pugi@@QBE_NABV01@@Z
??8xpath_node@pugi@@QBE_NABV01@@Z
??9xml_attribute@pugi@@QBE_NABV01@@Z
??9xml_attribute_iterator@pugi@@QBE_NABV01@@Z
??9xml_named_node_iterator@pugi@@QBE_NABV01@@Z
??9xml_node@pugi@@QBE_NABV01@@Z
??9xml_node_iterator@pugi@@QBE_NABV01@@Z
??9xpath_node@pugi@@QBE_NABV01@@Z
??Axpath_node_set@pugi@@QBEABVxpath_node@1@I@Z
??Bxml_attribute@pugi@@QBEP6AXPAPAPAV01@@ZXZ
??Bxml_node@pugi@@QBEP6AXPAPAPAV01@@ZXZ
??Bxml_parse_result@pugi@@QBE_NXZ
??Bxml_text@pugi@@QBEP6AXPAPAPAV01@@ZXZ
??Bxpath_node@pugi@@QBEP6AXPAPAPAV01@@ZXZ
??Bxpath_parse_result@pugi@@QBE_NXZ
??Bxpath_query@pugi@@QBEP6AXPAPAPAV01@@ZXZ
??Cxml_attribute_iterator@pugi@@QBEPAVxml_attribute@1@XZ
??Cxml_named_node_iterator@pugi@@QBEPAVxml_node@1@XZ
??Cxml_node_iterator@pugi@@QBEPAVxml_node@1@XZ
??Dxml_attribute_iterator@pugi@@QBEAAVxml_attribute@1@XZ
??Dxml_named_node_iterator@pugi@@QBEAAVxml_node@1@XZ
??Dxml_node_iterator@pugi@@QBEAAVxml_node@1@XZ
??Exml_attribute_iterator@pugi@@QAE?AV01@H@Z
??Exml_attribute_iterator@pugi@@QAEAAV01@XZ
??Exml_named_node_iterator@pugi@@QAE?AV01@H@Z
??Exml_named_node_iterator@pugi@@QAEAAV01@XZ
??Exml_node_iterator@pugi@@QAE?AV01@H@Z
??Exml_node_iterator@pugi@@QAEAAV01@XZ
??Fxml_attribute_iterator@pugi@@QAE?AV01@H@Z
??Fxml_attribute_iterator@pugi@@QAEAAV01@XZ
??Fxml_named_node_iterator@pugi@@QAE?AV01@H@Z
??Fxml_named_node_iterator@pugi@@QAEAAV01@XZ
??Fxml_node_iterator@pugi@@QAE?AV01@H@Z
??Fxml_node_iterator@pugi@@QAEAAV01@XZ
??Mxml_attribute@pugi@@QBE_NABV01@@Z
??Mxml_node@pugi@@QBE_NABV01@@Z
??Nxml_attribute@pugi@@QBE_NABV01@@Z
??Nxml_node@pugi@@QBE_NABV01@@Z
??Oxml_attribute@pugi@@QBE_NABV01@@Z
??Oxml_node@pugi@@QBE_NABV01@@Z
??Pxml_attribute@pugi@@QBE_NABV01@@Z
??Pxml_node@pugi@@QBE_NABV01@@Z
??_7xml_tree_walker@pugi@@6B@
??_7xml_writer@pugi@@6B@
??_7xml_writer_file@pugi@@6B@
??_7xml_writer_stream@pugi@@6B@
??_7xpath_exception@pugi@@6B@
?_Iter_cat@std@@YA?AUbidirectional_iterator_tag@1@ABVxml_attribute_iterator@pugi@@@Z
?_Iter_cat@std@@YA?AUbidirectional_iterator_tag@1@ABVxml_named_node_iterator@pugi@@@Z
?_Iter_cat@std@@YA?AUbidirectional_iterator_tag@1@ABVxml_node_iterator@pugi@@@Z
?_assign@xpath_node_set@pugi@@AAEXPBVxpath_node@2@0W4type_t@12@@Z
?_assign@xpath_variable_set@pugi@@AAEXABV12@@Z
?_clone@xpath_variable_set@pugi@@CA_NPAVxpath_variable@2@PAPAV32@@Z
?_create@xml_document@pugi@@AAEXXZ
?_data@xml_text@pugi@@ABEPAUxml_node_struct@2@XZ
?_data_new@xml_text@pugi@@AAEPAUxml_node_struct@2@XZ
?_destroy@xml_document@pugi@@AAEXXZ
?_destroy@xpath_variable_set@pugi@@CAXPAVxpath_variable@2@@Z
?_find@xpath_variable_set@pugi@@ABEPAVxpath_variable@2@PBD@Z
?_move@xml_document@pugi@@AAEXAAV12@@Z
?_move@xpath_node_set@pugi@@AAEXAAV12@@Z
?_swap@xpath_variable_set@pugi@@AAEXAAV12@@Z
?add@xpath_variable_set@pugi@@QAEPAVxpath_variable@2@PBDW4xpath_value_type@2@@Z
?append_attribute@xml_node@pugi@@QAE?AVxml_attribute@2@PBD@Z
?append_buffer@xml_node@pugi@@QAE?AUxml_parse_result@2@PBXIIW4xml_encoding@2@@Z
?append_child@xml_node@pugi@@QAE?AV12@PBD@Z
?append_child@xml_node@pugi@@QAE?AV12@W4xml_node_type@2@@Z
?append_copy@xml_node@pugi@@QAE?AV12@ABV12@@Z
?append_copy@xml_node@pugi@@QAE?AVxml_attribute@2@ABV32@@Z
?append_move@xml_node@pugi@@QAE?AV12@ABV12@@Z
?as_bool@xml_attribute@pugi@@QBE_N_N@Z
?as_bool@xml_text@pugi@@QBE_N_N@Z
?as_double@xml_attribute@pugi@@QBENN@Z
?as_double@xml_text@pugi@@QBENN@Z
?as_float@xml_attribute@pugi@@QBEMM@Z
?as_float@xml_text@pugi@@QBEMM@Z
?as_int@xml_attribute@pugi@@QBEHH@Z
?as_int@xml_text@pugi@@QBEHH@Z
?as_llong@xml_attribute@pugi@@QBE_J_J@Z
?as_llong@xml_text@pugi@@QBE_J_J@Z
?as_string@xml_attribute@pugi@@QBEPBDPBD@Z
?as_string@xml_text@pugi@@QBEPBDPBD@Z
?as_uint@xml_attribute@pugi@@QBEII@Z
?as_uint@xml_text@pugi@@QBEII@Z
?as_ullong@xml_attribute@pugi@@QBE_K_K@Z
?as_ullong@xml_text@pugi@@QBE_K_K@Z
?as_utf8@pugi@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?as_utf8@pugi@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_W@Z
?as_wide@pugi@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?as_wide@pugi@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBD@Z
?attribute@xml_node@pugi@@QBE?AVxml_attribute@2@PBD@Z
?attribute@xml_node@pugi@@QBE?AVxml_attribute@2@PBDAAV32@@Z
?attribute@xpath_node@pugi@@QBE?AVxml_attribute@2@XZ
?attributes@xml_node@pugi@@QBE?AV?$xml_object_range@Vxml_attribute_iterator@pugi@@@2@XZ
?attributes_begin@xml_node@pugi@@QBE?AVxml_attribute_iterator@2@XZ
?attributes_end@xml_node@pugi@@QBE?AVxml_attribute_iterator@2@XZ
?begin@xml_node@pugi@@QBE?AVxml_node_iterator@2@XZ
?begin@xml_tree_walker@pugi@@UAE_NAAVxml_node@2@@Z
?begin@xpath_node_set@pugi@@QBEPBVxpath_node@2@XZ
?child@xml_node@pugi@@QBE?AV12@PBD@Z
?child_value@xml_node@pugi@@QBEPBDPBD@Z
?child_value@xml_node@pugi@@QBEPBDXZ
?children@xml_node@pugi@@QBE?AV?$xml_object_range@Vxml_named_node_iterator@pugi@@@2@PBD@Z
?children@xml_node@pugi@@QBE?AV?$xml_object_range@Vxml_node_iterator@pugi@@@2@XZ
?data@xml_text@pugi@@QBE?AVxml_node@2@XZ
?depth@xml_tree_walker@pugi@@IBEHXZ
?description@xml_parse_result@pugi@@QBEPBDXZ
?description@xpath_parse_result@pugi@@QBEPBDXZ
?document_element@xml_document@pugi@@QBE?AVxml_node@2@XZ
?empty@xml_attribute@pugi@@QBE_NXZ
?empty@xml_node@pugi@@QBE_NXZ
?empty@xml_text@pugi@@QBE_NXZ
?empty@xpath_node_set@pugi@@QBE_NXZ
?end@xml_node@pugi@@QBE?AVxml_node_iterator@2@XZ
?end@xml_tree_walker@pugi@@UAE_NAAVxml_node@2@@Z
?end@xpath_node_set@pugi@@QBEPBVxpath_node@2@XZ
?evaluate_boolean@xpath_query@pugi@@QBE_NABVxpath_node@2@@Z
?evaluate_node@xpath_query@pugi@@QBE?AVxpath_node@2@ABV32@@Z
?evaluate_node_set@xpath_query@pugi@@QBE?AVxpath_node_set@2@ABVxpath_node@2@@Z
?evaluate_number@xpath_query@pugi@@QBENABVxpath_node@2@@Z
?evaluate_string@xpath_query@pugi@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVxpath_node@2@@Z
?evaluate_string@xpath_query@pugi@@QBEIPADIABVxpath_node@2@@Z
?find_child_by_attribute@xml_node@pugi@@QBE?AV12@PBD00@Z
?find_child_by_attribute@xml_node@pugi@@QBE?AV12@PBD0@Z
?first@xpath_node_set@pugi@@QBE?AVxpath_node@2@XZ
?first_attribute@xml_node@pugi@@QBE?AVxml_attribute@2@XZ
?first_child@xml_node@pugi@@QBE?AV12@XZ
?first_element_by_path@xml_node@pugi@@QBE?AV12@PBDD@Z
?get@xml_text@pugi@@QBEPBDXZ
?get@xpath_variable_set@pugi@@QAEPAVxpath_variable@2@PBD@Z
?get@xpath_variable_set@pugi@@QBEPBVxpath_variable@2@PBD@Z
?get_boolean@xpath_variable@pugi@@QBE_NXZ
?get_memory_allocation_function@pugi@@YAP6APAXI@ZXZ
?get_memory_deallocation_function@pugi@@YAP6AXPAX@ZXZ
?get_node_set@xpath_variable@pugi@@QBEABVxpath_node_set@2@XZ
?get_number@xpath_variable@pugi@@QBENXZ
?get_string@xpath_variable@pugi@@QBEPBDXZ
?hash_value@xml_attribute@pugi@@QBEIXZ
?hash_value@xml_node@pugi@@QBEIXZ
?insert_attribute_after@xml_node@pugi@@QAE?AVxml_attribute@2@PBDABV32@@Z
?insert_attribute_before@xml_node@pugi@@QAE?AVxml_attribute@2@PBDABV32@@Z
?insert_child_after@xml_node@pugi@@QAE?AV12@PBDABV12@@Z
?insert_child_after@xml_node@pugi@@QAE?AV12@W4xml_node_type@2@ABV12@@Z
?insert_child_before@xml_node@pugi@@QAE?AV12@PBDABV12@@Z
?insert_child_before@xml_node@pugi@@QAE?AV12@W4xml_node_type@2@ABV12@@Z
?insert_copy_after@xml_node@pugi@@QAE?AV12@ABV12@0@Z
?insert_copy_after@xml_node@pugi@@QAE?AVxml_attribute@2@ABV32@0@Z
?insert_copy_before@xml_node@pugi@@QAE?AV12@ABV12@0@Z
?insert_copy_before@xml_node@pugi@@QAE?AVxml_attribute@2@ABV32@0@Z
?insert_move_after@xml_node@pugi@@QAE?AV12@ABV12@0@Z
?insert_move_before@xml_node@pugi@@QAE?AV12@ABV12@0@Z
?internal_object@xml_attribute@pugi@@QBEPAUxml_attribute_struct@2@XZ
?internal_object@xml_node@pugi@@QBEPAUxml_node_struct@2@XZ
?last_attribute@xml_node@pugi@@QBE?AVxml_attribute@2@XZ
?last_child@xml_node@pugi@@QBE?AV12@XZ
?load@xml_document@pugi@@QAE?AUxml_parse_result@2@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@IW4xml_encoding@2@@Z
?load@xml_document@pugi@@QAE?AUxml_parse_result@2@AAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@I@Z
?load@xml_document@pugi@@QAE?AUxml_parse_result@2@PBDI@Z
?load_buffer@xml_document@pugi@@QAE?AUxml_parse_result@2@PBXIIW4xml_encoding@2@@Z
?load_buffer_inplace@xml_document@pugi@@QAE?AUxml_parse_result@2@PAXIIW4xml_encoding@2@@Z
?load_buffer_inplace_own@xml_document@pugi@@QAE?AUxml_parse_result@2@PAXIIW4xml_encoding@2@@Z
?load_file@xml_document@pugi@@QAE?AUxml_parse_result@2@PBDIW4xml_encoding@2@@Z
?load_file@xml_document@pugi@@QAE?AUxml_parse_result@2@PB_WIW4xml_encoding@2@@Z
?load_string@xml_document@pugi@@QAE?AUxml_parse_result@2@PBDI@Z
?name@xml_attribute@pugi@@QBEPBDXZ
?name@xml_node@pugi@@QBEPBDXZ
?name@xpath_variable@pugi@@QBEPBDXZ
?next_attribute@xml_attribute@pugi@@QBE?AV12@XZ
?next_sibling@xml_node@pugi@@QBE?AV12@PBD@Z
?next_sibling@xml_node@pugi@@QBE?AV12@XZ
?node@xpath_node@pugi@@QBE?AVxml_node@2@XZ
?offset_debug@xml_node@pugi@@QBEHXZ
?parent@xml_node@pugi@@QBE?AV12@XZ
?parent@xpath_node@pugi@@QBE?AVxml_node@2@XZ
?path@xml_node@pugi@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D@Z
?prepend_attribute@xml_node@pugi@@QAE?AVxml_attribute@2@PBD@Z
?prepend_child@xml_node@pugi@@QAE?AV12@PBD@Z
?prepend_child@xml_node@pugi@@QAE?AV12@W4xml_node_type@2@@Z
?prepend_copy@xml_node@pugi@@QAE?AV12@ABV12@@Z
?prepend_copy@xml_node@pugi@@QAE?AVxml_attribute@2@ABV32@@Z
?prepend_move@xml_node@pugi@@QAE?AV12@ABV12@@Z
?previous_attribute@xml_attribute@pugi@@QBE?AV12@XZ
?previous_sibling@xml_node@pugi@@QBE?AV12@PBD@Z
?previous_sibling@xml_node@pugi@@QBE?AV12@XZ
?print@xml_node@pugi@@QBEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PBDIW4xml_encoding@2@I@Z
?print@xml_node@pugi@@QBEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@PBDII@Z
?print@xml_node@pugi@@QBEXAAVxml_writer@2@PBDIW4xml_encoding@2@I@Z
?remove_attribute@xml_node@pugi@@QAE_NABVxml_attribute@2@@Z
?remove_attribute@xml_node@pugi@@QAE_NPBD@Z
?remove_attributes@xml_node@pugi@@QAE_NXZ
?remove_child@xml_node@pugi@@QAE_NABV12@@Z
?remove_child@xml_node@pugi@@QAE_NPBD@Z
?remove_children@xml_node@pugi@@QAE_NXZ
?reset@xml_document@pugi@@QAEXABV12@@Z
?reset@xml_document@pugi@@QAEXXZ
?result@xpath_exception@pugi@@QBEABUxpath_parse_result@2@XZ
?result@xpath_query@pugi@@QBEABUxpath_parse_result@2@XZ
?return_type@xpath_query@pugi@@QBE?AW4xpath_value_type@2@XZ
?root@xml_node@pugi@@QBE?AV12@XZ
?save@xml_document@pugi@@QBEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PBDIW4xml_encoding@2@@Z
?save@xml_document@pugi@@QBEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@PBDI@Z
?save@xml_document@pugi@@QBEXAAVxml_writer@2@PBDIW4xml_encoding@2@@Z
?save_file@xml_document@pugi@@QBE_NPBD0IW4xml_encoding@2@@Z
?save_file@xml_document@pugi@@QBE_NPB_WPBDIW4xml_encoding@2@@Z
?select_node@xml_node@pugi@@QBE?AVxpath_node@2@ABVxpath_query@2@@Z
?select_node@xml_node@pugi@@QBE?AVxpath_node@2@PBDPAVxpath_variable_set@2@@Z
?select_nodes@xml_node@pugi@@QBE?AVxpath_node_set@2@ABVxpath_query@2@@Z
?select_nodes@xml_node@pugi@@QBE?AVxpath_node_set@2@PBDPAVxpath_variable_set@2@@Z
?select_single_node@xml_node@pugi@@QBE?AVxpath_node@2@ABVxpath_query@2@@Z
?select_single_node@xml_node@pugi@@QBE?AVxpath_node@2@PBDPAVxpath_variable_set@2@@Z
?set@xml_text@pugi@@QAE_NH@Z
?set@xml_text@pugi@@QAE_NI@Z
?set@xml_text@pugi@@QAE_NJ@Z
?set@xml_text@pugi@@QAE_NK@Z
?set@xml_text@pugi@@QAE_NM@Z
?set@xml_text@pugi@@QAE_NMH@Z
?set@xml_text@pugi@@QAE_NN@Z
?set@xml_text@pugi@@QAE_NNH@Z
?set@xml_text@pugi@@QAE_NPBD@Z
?set@xml_text@pugi@@QAE_NPBDI@Z
?set@xml_text@pugi@@QAE_N_J@Z
?set@xml_text@pugi@@QAE_N_K@Z
?set@xml_text@pugi@@QAE_N_N@Z
?set@xpath_variable@pugi@@QAE_NABVxpath_node_set@2@@Z
?set@xpath_variable@pugi@@QAE_NN@Z
?set@xpath_variable@pugi@@QAE_NPBD@Z
?set@xpath_variable@pugi@@QAE_N_N@Z
?set@xpath_variable_set@pugi@@QAE_NPBD0@Z
?set@xpath_variable_set@pugi@@QAE_NPBDABVxpath_node_set@2@@Z
?set@xpath_variable_set@pugi@@QAE_NPBDN@Z
?set@xpath_variable_set@pugi@@QAE_NPBD_N@Z
?set_memory_management_functions@pugi@@YAXP6APAXI@ZP6AXPAX@Z@Z
?set_name@xml_attribute@pugi@@QAE_NPBD@Z
?set_name@xml_node@pugi@@QAE_NPBD@Z
?set_value@xml_attribute@pugi@@QAE_NH@Z
?set_value@xml_attribute@pugi@@QAE_NI@Z
?set_value@xml_attribute@pugi@@QAE_NJ@Z
?set_value@xml_attribute@pugi@@QAE_NK@Z
?set_value@xml_attribute@pugi@@QAE_NM@Z
?set_value@xml_attribute@pugi@@QAE_NMH@Z
?set_value@xml_attribute@pugi@@QAE_NN@Z
?set_value@xml_attribute@pugi@@QAE_NNH@Z
?set_value@xml_attribute@pugi@@QAE_NPBD@Z
?set_value@xml_attribute@pugi@@QAE_NPBDI@Z
?set_value@xml_attribute@pugi@@QAE_N_J@Z
?set_value@xml_attribute@pugi@@QAE_N_K@Z
?set_value@xml_attribute@pugi@@QAE_N_N@Z
?set_value@xml_node@pugi@@QAE_NPBD@Z
?set_value@xml_node@pugi@@QAE_NPBDI@Z
?size@xpath_node_set@pugi@@QBEIXZ
?sort@xpath_node_set@pugi@@QAEX_N@Z
?text@xml_node@pugi@@QBE?AVxml_text@2@XZ
?traverse@xml_node@pugi@@QAE_NAAVxml_tree_walker@2@@Z
?type@xml_node@pugi@@QBE?AW4xml_node_type@2@XZ
?type@xpath_node_set@pugi@@QBE?AW4type_t@12@XZ
?type@xpath_variable@pugi@@QBE?AW4xpath_value_type@2@XZ
?value@xml_attribute@pugi@@QBEPBDXZ
?value@xml_node@pugi@@QBEPBDXZ
?what@xpath_exception@pugi@@UBEPBDXZ
?write@xml_writer_file@pugi@@UAEXPBXI@Z
?write@xml_writer_stream@pugi@@UAEXPBXI@Z
JS_AddIntrinsicBaseObjects
JS_AddIntrinsicBigDecimal
JS_AddIntrinsicBigFloat
JS_AddIntrinsicBigInt
JS_AddIntrinsicDate
JS_AddIntrinsicEval
JS_AddIntrinsicJSON
JS_AddIntrinsicMapSet
JS_AddIntrinsicOperators
JS_AddIntrinsicPromise
JS_AddIntrinsicProxy
JS_AddIntrinsicRegExp
JS_AddIntrinsicRegExpCompiler
JS_AddIntrinsicStringNormalize
JS_AddIntrinsicTypedArrays
JS_AddModuleExport
JS_AddModuleExportList
JS_AreFunctionsOfSameOrigin
JS_AtomGetStr
JS_AtomGetStrRT
JS_AtomIsArrayIndex
JS_AtomToCString
JS_AtomToString
JS_AtomToValue
JS_Call
JS_CallConstructor
JS_CallConstructor2
JS_ComputeMemoryUsage
JS_CopyDataProperties
JS_DefineProperty
JS_DefinePropertyGetSet
JS_DefinePropertyValue
JS_DefinePropertyValueStr
JS_DefinePropertyValueUint32
JS_DeleteProperty
JS_DetachArrayBuffer
JS_DetectModule
JS_DumpMemoryUsage
JS_DupAtom
JS_DupAtomRT
JS_DupContext
JS_EnableBignumExt
JS_EnqueueJob
JS_Eval
JS_Eval2
JS_EvalFunction
JS_EvalThis
JS_ExecutePendingJob
JS_FreeAtom
JS_FreeAtomRT
JS_FreeCString
JS_FreeContext
JS_FreeRuntime
JS_GetArrayBuffer
JS_GetClassID
JS_GetClassName
JS_GetClassProto
JS_GetContextOpaque
JS_GetException
JS_GetFastArray
JS_GetGlobalObject
JS_GetImportMeta
JS_GetModuleExportItem
JS_GetModuleExportItemStr
JS_GetModuleName
JS_GetOpaque
JS_GetOpaque2
JS_GetOwnProperty
JS_GetOwnPropertyNames
JS_GetPropertyInternal
JS_GetPropertyLength
JS_GetPropertyStr
JS_GetPropertyUint32
JS_GetPrototype
JS_GetPrototypeOfDate
JS_GetRuntime
JS_GetRuntimeOpaque
JS_GetScriptOrModuleName
JS_GetTupleTag
JS_GetTypedArrayBuffer
JS_HasProperty
JS_Invoke
JS_IsArray
JS_IsConstructor
JS_IsDate
JS_IsError
JS_IsExtensible
JS_IsFunction
JS_IsFunctionOfThisRealm
JS_IsInstanceOf
JS_IsJobPending
JS_IsLiveObject
JS_IsObjectPlain
JS_IsRegisteredClass
JS_IsTuple
JS_JSONStringify
JS_MarkValue
JS_NewArray
JS_NewArrayBuffer
JS_NewArrayBufferCopy
JS_NewAtom
JS_NewAtomLen
JS_NewAtomLenRT
JS_NewAtomString
JS_NewAtomSymbolLenRT
JS_NewAtomUInt32
JS_NewBigInt64
JS_NewBigUint64
JS_NewCFunction2
JS_NewCFunctionData
JS_NewCModule
JS_NewClass
JS_NewClassID
JS_NewContext
JS_NewContextRaw
JS_NewDate
JS_NewError
JS_NewFastArray
JS_NewObject
JS_NewObjectClass
JS_NewObjectProto
JS_NewObjectProtoClass
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 21.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ