Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
699dafba561a4b4703a8a091da4ea9655c3b9dc685d22db7118effbc34eba9de_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
699dafba561a4b4703a8a091da4ea9655c3b9dc685d22db7118effbc34eba9de_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
699dafba561a4b4703a8a091da4ea9655c3b9dc685d22db7118effbc34eba9de_NeikiAnalytics.exe
Size
309KB
MD5
66f2fd4a8c22b0d367da413942cb8580
SHA1
0bdeec30559f89ff34cdabedbe3fb7768988bacc
SHA256
699dafba561a4b4703a8a091da4ea9655c3b9dc685d22db7118effbc34eba9de
SHA512
ed61eb1bc1d09658f6826511094f015bdb1dd48d4d15e9c5623ea52892347d04a78958bd547e4cbc6a3b2da1594352ffc80f30ce15ad43dfce3c2e29abb49f18
SSDEEP
6144:PNOWC9hDil7JKzk6NCaARYQSmOgOgKdmKxySndK2tTCObhIwK:lOWCTDil7JKzk6NCbRYyOgOg4bp1Kv
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
d:\CRS\Matroska_Lib\libebml\make\vc7\dll\x64\Release\libebml.pdb
HeapAlloc
GetLastError
HeapFree
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapReAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
SetEndOfFile
GetProcessHeap
InitializeCriticalSection
??0ADbg@libebml@@QEAA@AEBV01@@Z
??0ADbg@libebml@@QEAA@H@Z
??0CRTError@libebml@@QEAA@AEBV01@@Z
??0CRTError@libebml@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??0CRTError@libebml@@QEAA@HAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0EDocType@libebml@@QEAA@AEBV01@@Z
??0EDocType@libebml@@QEAA@XZ
??0EDocTypeReadVersion@libebml@@QEAA@AEBV01@@Z
??0EDocTypeReadVersion@libebml@@QEAA@XZ
??0EDocTypeVersion@libebml@@QEAA@AEBV01@@Z
??0EDocTypeVersion@libebml@@QEAA@XZ
??0EMaxIdLength@libebml@@QEAA@AEBV01@@Z
??0EMaxIdLength@libebml@@QEAA@XZ
??0EMaxSizeLength@libebml@@QEAA@AEBV01@@Z
??0EMaxSizeLength@libebml@@QEAA@XZ
??0EReadVersion@libebml@@QEAA@AEBV01@@Z
??0EReadVersion@libebml@@QEAA@XZ
??0EVersion@libebml@@QEAA@AEBV01@@Z
??0EVersion@libebml@@QEAA@XZ
??0EbmlBinary@libebml@@QEAA@AEBV01@@Z
??0EbmlBinary@libebml@@QEAA@XZ
??0EbmlCallbacks@libebml@@QEAA@P6AAEAVEbmlElement@1@XZAEBVEbmlId@1@PEBDAEBVEbmlSemanticContext@1@@Z
??0EbmlCrc32@libebml@@QEAA@AEBV01@@Z
??0EbmlCrc32@libebml@@QEAA@XZ
??0EbmlDate@libebml@@QEAA@AEBV01@@Z
??0EbmlDate@libebml@@QEAA@XZ
??0EbmlDummy@libebml@@QEAA@AEBV01@@Z
??0EbmlDummy@libebml@@QEAA@AEBVEbmlId@1@@Z
??0EbmlDummy@libebml@@QEAA@XZ
??0EbmlElement@libebml@@IEAA@AEBV01@@Z
??0EbmlElement@libebml@@QEAA@_K_N@Z
??0EbmlFloat@libebml@@QEAA@AEBV01@@Z
??0EbmlFloat@libebml@@QEAA@NW4Precision@01@@Z
??0EbmlFloat@libebml@@QEAA@W4Precision@01@@Z
??0EbmlHead@libebml@@QEAA@AEBV01@@Z
??0EbmlHead@libebml@@QEAA@XZ
??0EbmlId@libebml@@QEAA@II@Z
??0EbmlId@libebml@@QEAA@QEBEI@Z
??0EbmlMaster@libebml@@QEAA@AEBV01@@Z
??0EbmlMaster@libebml@@QEAA@AEBVEbmlSemanticContext@1@_N@Z
??0EbmlSInteger@libebml@@QEAA@AEBV01@@Z
??0EbmlSInteger@libebml@@QEAA@XZ
??0EbmlSInteger@libebml@@QEAA@_J@Z
??0EbmlSemantic@libebml@@QEAA@_N0AEBVEbmlCallbacks@1@@Z
??0EbmlSemanticContext@libebml@@QEAA@IPEBVEbmlSemantic@1@PEBV01@Q6AAEBV01@XZPEBVEbmlCallbacks@1@@Z
??0EbmlStream@libebml@@QEAA@AEAVIOCallback@1@@Z
??0EbmlString@libebml@@QEAA@AEBV01@@Z
??0EbmlString@libebml@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0EbmlString@libebml@@QEAA@XZ
??0EbmlUInteger@libebml@@QEAA@AEBV01@@Z
??0EbmlUInteger@libebml@@QEAA@XZ
??0EbmlUInteger@libebml@@QEAA@_K@Z
??0EbmlUnicodeString@libebml@@QEAA@AEBV01@@Z
??0EbmlUnicodeString@libebml@@QEAA@AEBVUTFstring@1@@Z
??0EbmlUnicodeString@libebml@@QEAA@XZ
??0EbmlVoid@libebml@@QEAA@AEBV01@@Z
??0EbmlVoid@libebml@@QEAA@XZ
??0IOCallback@libebml@@QEAA@AEBV01@@Z
??0IOCallback@libebml@@QEAA@XZ
??0MemIOCallback@libebml@@QEAA@AEBV01@@Z
??0MemIOCallback@libebml@@QEAA@_K@Z
??0StdIOCallback@libebml@@QEAA@AEBV01@@Z
??0StdIOCallback@libebml@@QEAA@PEBDW4open_mode@@@Z
??0UTFstring@libebml@@QEAA@AEBV01@@Z
??0UTFstring@libebml@@QEAA@PEB_W@Z
??0UTFstring@libebml@@QEAA@XZ
??1ADbg@libebml@@UEAA@XZ
??1CRTError@libebml@@UEAA@XZ
??1EDocType@libebml@@UEAA@XZ
??1EDocTypeReadVersion@libebml@@UEAA@XZ
??1EDocTypeVersion@libebml@@UEAA@XZ
??1EMaxIdLength@libebml@@UEAA@XZ
??1EMaxSizeLength@libebml@@UEAA@XZ
??1EReadVersion@libebml@@UEAA@XZ
??1EVersion@libebml@@UEAA@XZ
??1EbmlBinary@libebml@@UEAA@XZ
??1EbmlCrc32@libebml@@UEAA@XZ
??1EbmlDate@libebml@@UEAA@XZ
??1EbmlDummy@libebml@@UEAA@XZ
??1EbmlElement@libebml@@UEAA@XZ
??1EbmlFloat@libebml@@UEAA@XZ
??1EbmlHead@libebml@@UEAA@XZ
??1EbmlMaster@libebml@@UEAA@XZ
??1EbmlSInteger@libebml@@UEAA@XZ
??1EbmlStream@libebml@@QEAA@XZ
??1EbmlString@libebml@@UEAA@XZ
??1EbmlUInteger@libebml@@UEAA@XZ
??1EbmlUnicodeString@libebml@@UEAA@XZ
??1EbmlVoid@libebml@@UEAA@XZ
??1IOCallback@libebml@@UEAA@XZ
??1MemIOCallback@libebml@@UEAA@XZ
??1StdIOCallback@libebml@@UEAA@XZ
??1UTFstring@libebml@@UEAA@XZ
??4ADbg@libebml@@QEAAAEAV01@AEBV01@@Z
??4CRTError@libebml@@QEAAAEAV01@AEBV01@@Z
??4EDocType@libebml@@QEAAAEAV01@AEBV01@@Z
??4EDocTypeReadVersion@libebml@@QEAAAEAV01@AEBV01@@Z
??4EDocTypeVersion@libebml@@QEAAAEAV01@AEBV01@@Z
??4EMaxIdLength@libebml@@QEAAAEAV01@AEBV01@@Z
??4EMaxSizeLength@libebml@@QEAAAEAV01@AEBV01@@Z
??4EReadVersion@libebml@@QEAAAEAV01@AEBV01@@Z
??4EVersion@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlBinary@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlCrc32@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlDate@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlElement@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlFloat@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlFloat@libebml@@QEAAAEAV01@N@Z
??4EbmlId@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlSInteger@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlSInteger@libebml@@QEAAAEAV01@_J@Z
??4EbmlString@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlString@libebml@@QEAAAEAV01@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4EbmlUInteger@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlUInteger@libebml@@QEAAAEAV01@_K@Z
??4EbmlUnicodeString@libebml@@QEAAAEAV01@AEBV01@@Z
??4EbmlUnicodeString@libebml@@QEAAAEAV01@AEBVUTFstring@1@@Z
??4EbmlVoid@libebml@@QEAAAEAV01@AEBV01@@Z
??4IOCallback@libebml@@QEAAAEAV01@AEBV01@@Z
??4MemIOCallback@libebml@@QEAAAEAV01@AEBV01@@Z
??4StdIOCallback@libebml@@QEAAAEAV01@AEBV01@@Z
??4UTFstring@libebml@@QEAAAEAV01@AEBV01@@Z
??4UTFstring@libebml@@QEAAAEAV01@PEB_W@Z
??4UTFstring@libebml@@QEAAAEAV01@_W@Z
??8EbmlBinary@libebml@@QEBA_NAEBV01@@Z
??8EbmlId@libebml@@QEBA_NAEBV01@@Z
??8UTFstring@libebml@@QEBA_NAEBV01@@Z
??9EbmlId@libebml@@QEBA_NAEBV01@@Z
??9EbmlSemanticContext@libebml@@QEBA_NAEBV01@@Z
??9UTFstring@libebml@@QEBA_NAEBV01@@Z
??AEbmlMaster@libebml@@QEAAPEAVEbmlElement@1@I@Z
??AEbmlMaster@libebml@@QEBAPEBVEbmlElement@1@I@Z
??BEDocType@libebml@@UEBAAEBVEbmlId@1@XZ
??BEDocTypeReadVersion@libebml@@UEBAAEBVEbmlId@1@XZ
??BEDocTypeVersion@libebml@@UEBAAEBVEbmlId@1@XZ
??BEMaxIdLength@libebml@@UEBAAEBVEbmlId@1@XZ
??BEMaxSizeLength@libebml@@UEBAAEBVEbmlId@1@XZ
??BEReadVersion@libebml@@UEBAAEBVEbmlId@1@XZ
??BEVersion@libebml@@UEBAAEBVEbmlId@1@XZ
??BEbmlBinary@libebml@@QEBAAEBEXZ
??BEbmlCrc32@libebml@@UEBAAEBVEbmlId@1@XZ
??BEbmlDummy@libebml@@UEBAAEBVEbmlId@1@XZ
??BEbmlFloat@libebml@@QEBA?BMXZ
??BEbmlFloat@libebml@@QEBA?BNXZ
??BEbmlHead@libebml@@UEBAAEBVEbmlId@1@XZ
??BEbmlSInteger@libebml@@QEAACXZ
??BEbmlSInteger@libebml@@QEAAFXZ
??BEbmlSInteger@libebml@@QEAAHXZ
??BEbmlSInteger@libebml@@QEAA_JXZ
??BEbmlString@libebml@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??BEbmlUInteger@libebml@@QEBAEXZ
??BEbmlUInteger@libebml@@QEBAGXZ
??BEbmlUInteger@libebml@@QEBAIXZ
??BEbmlUInteger@libebml@@QEBA_KXZ
??BEbmlUnicodeString@libebml@@QEBAAEBVUTFstring@1@XZ
??BEbmlVoid@libebml@@UEBAAEBVEbmlId@1@XZ
??BUTFstring@libebml@@QEBAPEB_WXZ
??MEbmlDate@libebml@@QEBA_NAEBV01@@Z
??MEbmlElement@libebml@@UEBA_NAEBV01@@Z
??MEbmlFloat@libebml@@QEBA_NAEBV01@@Z
??MEbmlSInteger@libebml@@QEBA_NAEBV01@@Z
??MEbmlUInteger@libebml@@QEBA_NAEBV01@@Z
??_7ADbg@libebml@@6B@
??_7CRTError@libebml@@6B@
??_7EDocType@libebml@@6B@
??_7EDocTypeReadVersion@libebml@@6B@
??_7EDocTypeVersion@libebml@@6B@
??_7EMaxIdLength@libebml@@6B@
??_7EMaxSizeLength@libebml@@6B@
??_7EReadVersion@libebml@@6B@
??_7EVersion@libebml@@6B@
??_7EbmlBinary@libebml@@6B@
??_7EbmlCrc32@libebml@@6B@
??_7EbmlDate@libebml@@6B@
??_7EbmlDummy@libebml@@6B@
??_7EbmlElement@libebml@@6B@
??_7EbmlFloat@libebml@@6B@
??_7EbmlHead@libebml@@6B@
??_7EbmlMaster@libebml@@6B@
??_7EbmlSInteger@libebml@@6B@
??_7EbmlString@libebml@@6B@
??_7EbmlUInteger@libebml@@6B@
??_7EbmlUnicodeString@libebml@@6B@
??_7EbmlVoid@libebml@@6B@
??_7IOCallback@libebml@@6B@
??_7MemIOCallback@libebml@@6B@
??_7StdIOCallback@libebml@@6B@
??_7UTFstring@libebml@@6B@
??_FADbg@libebml@@QEAAXXZ
??_FEbmlFloat@libebml@@QEAAXXZ
??_FMemIOCallback@libebml@@QEAAXXZ
?AddElementCRC32@EbmlCrc32@libebml@@QEAAXAEAVEbmlElement@2@@Z
?AddNewElt@EbmlMaster@libebml@@QEAAPEAVEbmlElement@2@AEBVEbmlCallbacks@2@@Z
?CheckCRC@EbmlCrc32@libebml@@SA_NIPEBEI@Z
?CheckElementCRC32@EbmlCrc32@libebml@@QEAA_NAEAVEbmlElement@2@@Z
?CheckMandatory@EbmlMaster@libebml@@QEBA_NXZ
?ClassInfos@EDocType@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EDocTypeReadVersion@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EDocTypeVersion@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EMaxIdLength@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EMaxSizeLength@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EReadVersion@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EVersion@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EbmlCrc32@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EbmlDummy@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EbmlHead@libebml@@2VEbmlCallbacks@2@B
?ClassInfos@EbmlVoid@libebml@@2VEbmlCallbacks@2@B
?Clone@EDocType@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EDocTypeReadVersion@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EDocTypeVersion@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EMaxIdLength@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EMaxSizeLength@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EReadVersion@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EVersion@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EbmlCrc32@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EbmlDummy@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EbmlHead@libebml@@UEBAPEAVEbmlElement@2@XZ
?Clone@EbmlVoid@libebml@@UEBAPEAVEbmlElement@2@XZ
?CodedSizeLength@libebml@@YAH_KI_N@Z
?CodedSizeLengthSigned@libebml@@YAH_JI@Z
?CodedValueLength@libebml@@YAH_KHPEAE@Z
?CodedValueLengthSigned@libebml@@YAH_JHPEAE@Z
?CompareElements@EbmlElement@libebml@@SA_NPEBV12@0@Z
?CopyBuffer@EbmlBinary@libebml@@QEAAXPEBEI@Z
?Create@EDocType@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EDocTypeReadVersion@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EDocTypeVersion@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EMaxIdLength@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EMaxSizeLength@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EReadVersion@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EVersion@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EbmlCrc32@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EbmlDummy@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EbmlHead@libebml@@SAAEAVEbmlElement@2@XZ
?Create@EbmlVoid@libebml@@SAAEAVEbmlElement@2@XZ
?CreateElementUsingContext@EbmlElement@libebml@@KAPEAV12@AEBVEbmlId@2@AEBVEbmlSemanticContext@2@AEAH_N3I@Z
?DefaultISset@EbmlElement@libebml@@QEBA_NXZ
?DefaultVal@EbmlFloat@libebml@@QEBA?BNXZ
?DefaultVal@EbmlSInteger@libebml@@QEBA?B_JXZ
?DefaultVal@EbmlString@libebml@@QEBA?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?DefaultVal@EbmlUInteger@libebml@@QEBA?B_KXZ
?DefaultVal@EbmlUnicodeString@libebml@@QEBA?AVUTFstring@2@XZ
?DummyRawId@EbmlDummy@libebml@@1VEbmlId@2@B
?EDocTypeReadVersion_Context@libebml@@3VEbmlSemanticContext@1@B
?EDocTypeVersion_Context@libebml@@3VEbmlSemanticContext@1@B
?EDocType_Context@libebml@@3VEbmlSemanticContext@1@B
?EMaxIdLength_Context@libebml@@3VEbmlSemanticContext@1@B
?EMaxSizeLength_Context@libebml@@3VEbmlSemanticContext@1@B
?EReadVersion_Context@libebml@@3VEbmlSemanticContext@1@B
?EVersion_Context@libebml@@3VEbmlSemanticContext@1@B
?EbmlHead_Context@libebml@@3VEbmlSemanticContext@1@B
?EbmlVoid_Context@libebml@@3VEbmlSemanticContext@1@B
?ElementSize@EbmlElement@libebml@@QEBA_K_N@Z
?EnableChecksum@EbmlMaster@libebml@@QEAAX_N@Z
?Fill@EbmlId@libebml@@QEBAXPEAE@Z
?FillCRC32@EbmlCrc32@libebml@@QEAAXPEBEI@Z
?Finalize@EbmlCrc32@libebml@@QEAAXXZ
?FindAllMissingElements@EbmlMaster@libebml@@QEAA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?FindElt@EbmlMaster@libebml@@QEBAPEAVEbmlElement@2@AEBVEbmlCallbacks@2@@Z
?FindFirstElt@EbmlMaster@libebml@@QEAAPEAVEbmlElement@2@AEBVEbmlCallbacks@2@_N@Z
?FindFirstElt@EbmlMaster@libebml@@QEBAPEAVEbmlElement@2@AEBVEbmlCallbacks@2@@Z
?FindNextElement@EbmlElement@libebml@@SAPEAV12@AEAVIOCallback@2@AEBVEbmlSemanticContext@2@AEAH_K_NI@Z
?FindNextElement@EbmlStream@libebml@@QEAAPEAVEbmlElement@2@AEBVEbmlSemanticContext@2@AEAH_K_NI@Z
?FindNextElt@EbmlMaster@libebml@@QEAAPEAVEbmlElement@2@AEBV32@_N@Z
?FindNextElt@EbmlMaster@libebml@@QEBAPEAVEbmlElement@2@AEBV32@@Z
?FindNextID@EbmlElement@libebml@@SAPEAV12@AEAVIOCallback@2@AEBVEbmlCallbacks@2@_K@Z
?FindNextID@EbmlStream@libebml@@QEAAPEAVEbmlElement@2@AEBVEbmlCallbacks@2@_K@Z
?ForceChecksum@EbmlMaster@libebml@@QEAAXI@Z
?ForceCrc32@EbmlCrc32@libebml@@QEAAXI@Z
?ForceSize@EbmlElement@libebml@@QEAA_N_K@Z
?Generic@EDocType@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EDocTypeReadVersion@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EDocTypeVersion@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EMaxIdLength@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EMaxSizeLength@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EReadVersion@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EVersion@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EbmlCrc32@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EbmlDummy@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EbmlHead@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?Generic@EbmlVoid@libebml@@UEBAAEBVEbmlCallbacks@2@XZ
?GetBuffer@EbmlBinary@libebml@@QEBAPEAEXZ
?GetCrc32@EbmlCrc32@libebml@@QEBAIXZ
?GetCrc32@EbmlMaster@libebml@@QEBAIXZ
?GetDataBuffer@MemIOCallback@libebml@@QEBAPEAEXZ
?GetDataBufferSize@MemIOCallback@libebml@@QEAA_KXZ
?GetDataStart@EbmlMaster@libebml@@QEBA_KXZ
?GetEbmlGlobal_Context@libebml@@YAAEBVEbmlSemanticContext@1@XZ
?GetElementPosition@EbmlElement@libebml@@QEBA_KXZ
?GetEndPosition@EbmlElement@libebml@@QEBA_KXZ
?GetEpochDate@EbmlDate@libebml@@QEBAHXZ
?GetLastErrorStr@MemIOCallback@libebml@@QEAAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetSize@EbmlBinary@libebml@@UEBA_KXZ
?GetSize@EbmlElement@libebml@@UEBA_KXZ
?GetSize@EbmlMaster@libebml@@UEBA_KXZ
?GetSizeLength@EbmlElement@libebml@@QEBAHXZ
?GetUTF8@UTFstring@libebml@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?HasChecksum@EbmlMaster@libebml@@QEBA_NXZ
?HeadSize@EbmlElement@libebml@@QEBAEXZ
?I_O@EbmlStream@libebml@@QEAAAEAVIOCallback@2@XZ
?InsertElement@EbmlMaster@libebml@@QEAA_NAEAVEbmlElement@2@AEBV32@@Z
?InsertElement@EbmlMaster@libebml@@QEAA_NAEAVEbmlElement@2@_K@Z
?IsDefaultValue@EbmlBinary@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlCrc32@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlDate@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlDummy@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlFloat@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlMaster@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlSInteger@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlString@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlUInteger@libebml@@UEBA_NXZ
?IsDefaultValue@EbmlUnicodeString@libebml@@UEBA_NXZ
?IsDummy@EbmlDummy@libebml@@UEBA_NXZ
?IsDummy@EbmlElement@libebml@@UEBA_NXZ
?IsFiniteSize@EbmlElement@libebml@@QEBA_NXZ
?IsLocked@EbmlElement@libebml@@QEBA_NXZ
?IsMaster@EbmlElement@libebml@@UEBA_NXZ
?IsMaster@EbmlMaster@libebml@@UEBA_NXZ
?IsOk@MemIOCallback@libebml@@QEAA_NXZ
?ListSize@EbmlMaster@libebml@@QEBA_KXZ
?Lock@EbmlElement@libebml@@QEAAX_N@Z
?MakeRenderHead@EbmlElement@libebml@@IEAAIAEAVIOCallback@2@_N@Z
?OutPut@ADbg@libebml@@QEBAHHPEBDZZ
?OutPut@ADbg@libebml@@QEBAHPEBDZZ
?Overwrite@EbmlVoid@libebml@@QEAA_KAEBVEbmlElement@2@AEAVIOCallback@2@_N2@Z
?OverwriteHead@EbmlElement@libebml@@QEAAIAEAVIOCallback@2@_N@Z
?ProcessMandatory@EbmlMaster@libebml@@AEAA_NXZ
?PushElement@EbmlMaster@libebml@@QEAA_NAEAVEbmlElement@2@@Z
?Read@EbmlElement@libebml@@UEAAXAEAVEbmlStream@2@AEBVEbmlSemanticContext@2@AEAHAEAPEAV12@_NW4ScopeMode@2@@Z
?Read@EbmlMaster@libebml@@UEAAXAEAVEbmlStream@2@AEBVEbmlSemanticContext@2@AEAHAEAPEAVEbmlElement@2@_NW4ScopeMode@2@@Z
?ReadCodedSizeSignedValue@libebml@@YA_JPEBEAEAIAEA_K@Z
?ReadCodedSizeValue@libebml@@YA_KPEBEAEAIAEA_K@Z
?ReadData@EbmlBinary@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlCrc32@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlDate@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlFloat@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlMaster@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlSInteger@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlString@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlUInteger@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?ReadData@EbmlUnicodeString@libebml@@UEAA_KAEAVIOCallback@2@W4ScopeMode@2@@Z
?Remove@EbmlMaster@libebml@@QEAAX_K@Z
?RemoveAll@EbmlMaster@libebml@@QEAAXXZ
?Render@EbmlElement@libebml@@QEAAIAEAVIOCallback@2@_N11@Z
?RenderData@EbmlBinary@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlCrc32@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlDate@libebml@@MEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlFloat@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlMaster@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlSInteger@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlString@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlUInteger@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlUnicodeString@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderData@EbmlVoid@libebml@@UEAAIAEAVIOCallback@2@_N1@Z
?RenderHead@EbmlElement@libebml@@IEAAIAEAVIOCallback@2@_N11@Z
?ReplaceWith@EbmlVoid@libebml@@QEAA_KAEAVEbmlElement@2@AEAVIOCallback@2@_N2@Z
?ResetCRC@EbmlCrc32@libebml@@IEAAXXZ
?SetBuffer@EbmlBinary@libebml@@QEAAXPEBEI@Z
?SetDataBufferSize@MemIOCallback@libebml@@QEAAX_K@Z
?SetDefaultSize@EbmlElement@libebml@@UEAAX_K@Z
?SetDefaultSize@EbmlSInteger@libebml@@QEAAXH@Z
?SetDefaultSize@EbmlUInteger@libebml@@QEAAXH@Z
?SetDefaultValue@EbmlFloat@libebml@@QEAAXN@Z
?SetDefaultValue@EbmlSInteger@libebml@@QEAAX_J@Z
?SetDefaultValue@EbmlString@libebml@@QEAAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetDefaultValue@EbmlUInteger@libebml@@QEAAX_K@Z
?SetDefaultValue@EbmlUnicodeString@libebml@@QEAAXAEAVUTFstring@2@@Z
?SetEpochDate@EbmlDate@libebml@@QEAAXH@Z
?SetPrecision@EbmlFloat@libebml@@QEAAXW4Precision@12@@Z
?SetSize@EbmlVoid@libebml@@QEAAX_K@Z
?SetSizeInfinite@EbmlElement@libebml@@UEAA_N_N@Z
?SetSizeInfinite@EbmlMaster@libebml@@UEAA_N_N@Z
?SetSizeLength@EbmlElement@libebml@@QEAAXH@Z
?SetUTF8@UTFstring@libebml@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SkipData@EbmlElement@libebml@@QEAAPEAV12@AEAVEbmlStream@2@AEBVEbmlSemanticContext@2@PEAV12@_N@Z
?Sort@EbmlMaster@libebml@@QEAAXXZ
?UnixEpochDelay@EbmlDate@libebml@@1_KB
?Update@EbmlCrc32@libebml@@QEAAXPEBEI@Z
?UpdateByte@EbmlCrc32@libebml@@IEAAXE@Z
?UpdateFromUCS2@UTFstring@libebml@@IEAAXXZ
?UpdateFromUTF8@UTFstring@libebml@@IEAAXXZ
?UpdateSize@EbmlBinary@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlDate@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlFloat@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlMaster@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlSInteger@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlString@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlUInteger@libebml@@UEAA_K_N0@Z
?UpdateSize@EbmlUnicodeString@libebml@@UEAA_K_N0@Z
?ValidateSize@EbmlCrc32@libebml@@UEBA_NXZ
?ValidateSize@EbmlDate@libebml@@UEBA_NXZ
?ValidateSize@EbmlDummy@libebml@@UEBA_NXZ
?ValidateSize@EbmlFloat@libebml@@UEBA_NXZ
?ValidateSize@EbmlMaster@libebml@@UEBA_NXZ
?ValidateSize@EbmlSInteger@libebml@@UEBA_NXZ
?ValidateSize@EbmlString@libebml@@UEBA_NXZ
?ValidateSize@EbmlUInteger@libebml@@UEBA_NXZ
?ValidateSize@EbmlUnicodeString@libebml@@UEBA_NXZ
?ValidateSize@EbmlVoid@libebml@@UEBA_NXZ
?ValueIsSet@EbmlElement@libebml@@QEBA_NXZ
?VerifyChecksum@EbmlMaster@libebml@@QEBA_NXZ
?VoidMe@EbmlElement@libebml@@QEAAIAEAVIOCallback@2@_N@Z
?WriteHead@EbmlMaster@libebml@@QEAAIAEAVIOCallback@2@H_N@Z
?c_str@UTFstring@libebml@@QEBAPEB_WXZ
?close@MemIOCallback@libebml@@UEAAXXZ
?close@StdIOCallback@libebml@@UEAAXXZ
?getError@CRTError@libebml@@QEBAHXZ
?getFilePointer@MemIOCallback@libebml@@UEAA_KXZ
?getFilePointer@StdIOCallback@libebml@@UEAA_KXZ
?length@UTFstring@libebml@@QEBA_KXZ
?m_tab@EbmlCrc32@libebml@@1QBIB
?read@MemIOCallback@libebml@@UEAAIPEAX_K@Z
?read@StdIOCallback@libebml@@UEAAIPEAX_K@Z
?readFully@IOCallback@libebml@@QEAAXPEAX_K@Z
?setDebugFile@ADbg@libebml@@QEAA_NPEBD@Z
?setFilePointer@MemIOCallback@libebml@@UEAAX_JW4seek_mode@2@@Z
?setFilePointer@StdIOCallback@libebml@@UEAAX_JW4seek_mode@2@@Z
?setIncludeTime@ADbg@libebml@@QEAA_N_N@Z
?setLevel@ADbg@libebml@@QEAAHH@Z
?setPrefix@ADbg@libebml@@QEAAPEBDPEBD@Z
?setUseFile@ADbg@libebml@@QEAA_N_N@Z
?unsetDebugFile@ADbg@libebml@@QEAA_NXZ
?wcscmp_internal@UTFstring@libebml@@KA_NPEB_W0@Z
?write@MemIOCallback@libebml@@QEAAIAEAVIOCallback@2@_K@Z
?write@MemIOCallback@libebml@@UEAA_KPEBX_K@Z
?write@StdIOCallback@libebml@@UEAA_KPEBX_K@Z
?writeFully@IOCallback@libebml@@QEAAXPEBX_K@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ