D:\svn\M7.6.7-M7.6.8R2_TD202001090040_Windows客户端通用补丁包\src\windows\src\x86\EasyConnect\build\Release\EasyConnect.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3164e6b6878ffeab826a3897ba971c2934cb9ce2dc4dc909941b2fd5165a60a8_NeikiAnalytics.exe
Resource
win7-20240611-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3164e6b6878ffeab826a3897ba971c2934cb9ce2dc4dc909941b2fd5165a60a8_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
3164e6b6878ffeab826a3897ba971c2934cb9ce2dc4dc909941b2fd5165a60a8_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
c4f30f33500c37c83f742e3571224340
-
SHA1
f30b63b2e7469d58f8bc57ad24f8b1067e188654
-
SHA256
3164e6b6878ffeab826a3897ba971c2934cb9ce2dc4dc909941b2fd5165a60a8
-
SHA512
25679eb187b350a97d233df807d337dcf361d99f80fbc97c2738b5272a1925ec5024c25c4d64286855487e60aefac9906bd9e7e9fa7b73e3c6059f6609430e3c
-
SSDEEP
49152:TE0J+yx4CP9xNnrKKTJg4t7AeRJC+40ySVDD+N7c+bnzRoA7LG:TEhrCVxN8UVw9LG
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3164e6b6878ffeab826a3897ba971c2934cb9ce2dc4dc909941b2fd5165a60a8_NeikiAnalytics.exe
Files
-
3164e6b6878ffeab826a3897ba971c2934cb9ce2dc4dc909941b2fd5165a60a8_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
6d8cb76638b176a238e38fd5b9741e89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
AllocateAndInitializeSid
FreeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegSetValueExW
GetSidIdentifierAuthority
GetSidSubAuthority
GetSidSubAuthorityCount
LookupAccountNameA
GetUserNameA
RegEnumValueA
RegOpenKeyA
RegOpenKeyW
RegQueryValueExA
CryptDestroyHash
CryptHashData
CryptGetHashParam
CryptCreateHash
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
CryptDestroyKey
CryptEncrypt
CryptImportKey
DeregisterEventSource
RegCreateKeyExW
ReportEventA
RegisterEventSourceA
ws2_32
sendto
ntohl
htonl
gethostname
ioctlsocket
listen
accept
htons
getsockopt
getpeername
closesocket
WSACleanup
WSAStartup
WSASetLastError
__WSAFDIsSet
WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
getsockname
ntohs
recvfrom
socket
getaddrinfo
freeaddrinfo
connect
bind
wldap32
ord32
ord200
ord30
ord35
ord50
ord60
ord143
ord211
ord79
ord33
ord301
ord27
ord41
ord46
ord26
ord22
imm32
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContext
kernel32
GetConsoleMode
ExitProcess
SetConsoleCtrlHandler
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ReadConsoleInputA
LoadLibraryExW
InterlockedPushEntrySList
RtlUnwind
CreateWaitableTimerA
GetConsoleCP
GetDateFormatW
ResumeThread
SetWaitableTimer
SetConsoleMode
HeapReAlloc
GetACP
FindFirstFileExW
ReadConsoleW
VerSetConditionMask
FreeLibrary
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
lstrlenW
LoadLibraryW
GetModuleHandleW
ExpandEnvironmentStringsW
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
GetSystemDefaultLangID
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedCompareExchange
LocalFree
GetProcessTimes
GetCurrentProcessId
SwitchToThread
GetLastError
SetLastError
SetEvent
ResetEvent
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
Sleep
GetFileSizeEx
WriteFile
SetEndOfFile
SetFilePointerEx
CloseHandle
DuplicateHandle
GetSystemTimeAsFileTime
GetSystemInfo
GetTickCount
FormatMessageA
UnmapViewOfFile
WaitForSingleObjectEx
GetTimeFormatW
CreateEventA
CreateSemaphoreA
CreateFileMappingA
GetModuleHandleA
ExpandEnvironmentStringsA
CreateFileA
MapViewOfFileEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
SetThreadLocale
CreateEventW
GetCurrentThreadId
OpenMutexA
OpenProcess
TerminateProcess
MapViewOfFile
OpenMutexW
OpenEventW
OpenFileMappingW
CreateProcessA
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetModuleFileNameA
GetModuleFileNameW
GetCurrentDirectoryW
CreateMutexW
GetCommandLineW
SetUnhandledExceptionFilter
GetLocalTime
GetCommandLineA
SetCurrentDirectoryW
DeleteFileA
LoadLibraryA
VerifyVersionInfoA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SleepEx
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
GlobalMemoryStatus
FlushConsoleInputBuffer
OpenEventA
WaitForMultipleObjectsEx
AreFileApisANSI
DeviceIoControl
RemoveDirectoryW
GetFullPathNameW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
GetStartupInfoW
IsDebuggerPresent
IsValidLocale
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeSListHead
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
DecodePointer
EncodePointer
LoadLibraryExA
VirtualQuery
VirtualProtect
RaiseException
FatalAppExitW
CreateThread
lstrcmpiW
AllocConsole
SetConsoleTitleW
GetTempPathW
CreateDirectoryW
CreateFileW
lstrlenA
OutputDebugStringW
CopyFileW
SetFilePointer
GetProfileIntW
DebugBreak
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
CreateMutexA
user32
GetUserObjectInformationW
GetProcessWindowStation
LoadImageA
DestroyIcon
MessageBoxA
PostMessageW
SendMessageTimeoutW
GetForegroundWindow
FindWindowW
LoadStringA
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
RegisterWindowMessageW
GetSystemMetrics
GetMonitorInfoA
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
TranslateAcceleratorW
UpdateWindow
DestroyWindow
keybd_event
AllowSetForegroundWindow
GetWindowRect
SystemParametersInfoW
GetPropW
SetPropW
KillTimer
SetTimer
IsWindow
RegisterClassW
GetClassNameW
SystemParametersInfoA
LoadIconW
LoadCursorW
SetWindowLongW
GetWindowLongW
PtInRect
OffsetRect
CopyRect
ScreenToClient
SetCursor
GetClientRect
ReleaseDC
GetWindowDC
GetDC
ReleaseCapture
SetCapture
SetFocus
IsIconic
IsWindowVisible
SetWindowPos
UpdateLayeredWindow
UnregisterClassW
SendMessageW
TrackMouseEvent
LoadStringW
GetCursorPos
MessageBoxW
PostQuitMessage
SetForegroundWindow
gdi32
GetStockObject
CreateDIBSection
SelectObject
GetDeviceCaps
BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
CommandLineToArgvW
ShellExecuteExW
Shell_NotifyIconW
SHBrowseForFolderA
SHAppBarMessage
SHGetPathFromIDListA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shlwapi
StrStrIW
StrStrIA
PathFileExistsW
dbghelp
MiniDumpWriteDump
MakeSureDirectoryPathExists
sqlite3
sqlite3_backup_finish
sqlite3_backup_step
sqlite3_backup_init
sqlite3_finalize
sqlite3_column_text
sqlite3_step
sqlite3_prepare_v2
sqlite3_errcode
sqlite3_open
sqlite3_free
sqlite3_exec
sqlite3_close
psapi
GetModuleFileNameExW
GetModuleFileNameExA
Exports
Exports
??0?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@boost@@QAE@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UtMsgBackString@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UtMsgJsAction@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UtMsgJsCallback@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UtMsgOpenBrowser@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UtMsgReadConfig@@@serialization@boost@@@serialization@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UtMsgWriteConfig@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UtMsgBackString@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UtMsgJsAction@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UtMsgJsCallback@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UtMsgOpenBrowser@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UtMsgReadConfig@@@serialization@boost@@@serialization@boost@@QAE@XZ
??1?$singleton@V?$extended_type_info_typeid@UtMsgWriteConfig@@@serialization@boost@@@serialization@boost@@QAE@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtMsgBackString@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtMsgBackString@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtMsgJsAction@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtMsgJsAction@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtMsgJsCallback@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtMsgJsCallback@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtMsgOpenBrowser@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtMsgOpenBrowser@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtMsgReadConfig@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtMsgReadConfig@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtMsgWriteConfig@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtMsgWriteConfig@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@CAAA_NXZ
?get_mutable_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@boost@@@serialization@boost@@SAAAV?$iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@@serialization@boost@@SAAAV?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@@serialization@boost@@SAAAV?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@3@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@SA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_ptr@?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgBackString@@@detail@archive@boost@@EBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_ptr@?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@EBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_ptr@?$pointer_iserializer@Vtext_iarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@EBEXAAVbasic_iarchive@234@PAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@CAAA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@SAXXZ
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_ptr@?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgJsAction@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z
?save_object_ptr@?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgJsCallback@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z
?save_object_ptr@?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgOpenBrowser@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z
?save_object_ptr@?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgReadConfig@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z
?save_object_ptr@?$pointer_oserializer@Vtext_oarchive@archive@boost@@UtMsgWriteConfig@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z
?unlock@singleton_module@serialization@boost@@SAXXZ
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 429KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE