Closed mr-tz closed 3 years ago
comparing the results to IDA using sig file VS6_10_11_12.sig based on the .pat files added in https://github.com/williballenthin/siglib/tree/main/data
VS6_10_11_12.sig
an entry for each sample looks like this:
va - funcname
$ find ../capa/tests/data/ -iname "*.exe_" -exec venv/Scripts/python get_viv_stats.py -q {} \; ../capa/tests/data/034b7231a49387604e81a5a5d2fe7e08f6982c418a28b719d2faace3c312ebb5.exe_ IDA found 358 lib funcs in vc32rtf found 124 library functions 0x404A80 - __alloca_probe 0x404AB0 - _strlen 0x404C20 - _strrchr 0x404D98 - _free 0x404E90 - _memset 0x404EE8 - _malloc 0x404EFA - __nh_malloc 0x404F26 - __heap_alloc 0x405095 - __errno 0x40509E - ___doserrno 0x4050D8 - __fclose_lk 0x405153 - ? 0x40523B - _fseek 0x4052F4 - _ftell 0x4054A6 - ? 0x4055B0 - ? 0x405974 - _fflush 0x4059D1 - __flush 0x405A36 - _flsall 0x405B70 - _atol 0x405BFB - _atoi 0x405C06 - __cinit 0x405C33 - _exit 0x405C44 - __exit 0x405D03 - __unlockexit 0x405D0C - __initterm 0x405D26 - __XcptFilter 0x405E64 - _xcptlookup 0x405E9E - __wincmdln 0x405EF6 - __setenvp 0x406048 - _parse_cmdline 0x4061FC - ___crtGetEnvironmentStringsA 0x4064EA - __mtinit 0x40653E - __initptd 0x406551 - __getptd 0x4065B8 - __GetLinkerVersion 0x4065E5 - ___heap_select 0x40672D - __heap_init 0x406884 - __except_handler3 0x406AE8 - ___sbh_heap_init 0x406B30 - ___sbh_find_block 0x406B5B - ___sbh_free_block 0x406E84 - ___sbh_alloc_block 0x40723E - ___sbh_alloc_new_group 0x407339 - ___sbh_resize_block 0x407773 - ___old_sbh_release_region 0x4077C9 - ___old_sbh_decommit_pages 0x40788B - ___old_sbh_find_block 0x4078E2 - ___old_sbh_free_block 0x407927 - ___old_sbh_alloc_block 0x407B2F - ___old_sbh_alloc_block_from_page 0x407CFC - __mtinitlocks 0x407D86 - __unlock 0x407D9B - __callnewh 0x407F16 - __close 0x407FF6 - __freebuf 0x408021 - __filbuf 0x4080FD - __read 0x408162 - __read_lk 0x40833B - __lseek 0x4083A0 - __lseek_lk 0x408413 - __flsbuf 0x40852B - __write 0x408590 - __write_lk 0x40871B - __commit 0x4087AE - __openfile 0x40915C - _write_multi_char 0x40918D - _write_string 0x4091C5 - _get_int_arg 0x4091D2 - _get_int64_arg 0x4091E2 - _get_short_arg 0x4091F0 - __isctype 0x4092A4 - __ismbblead 0x4094DD - _CPtoLCID 0x409510 - _setSBCS 0x409539 - _setSBUpLow 0x4096BE - ___initmbctable 0x4096DA - _calloc 0x409A50 - _strchr 0x409B10 - _strstr 0x409B90 - _strncmp 0x409BC8 - ___crtMessageBoxA 0x409C60 - _strncpy 0x409D60 - ? 0x40A239 - __set_osfhnd 0x40A2B5 - __free_osfhnd 0x40A334 - __get_osfhandle 0x40A376 - __lock_fhandle 0x40A3F7 - __getbuf 0x40A800 - __aulldiv 0x40A870 - __aullrem 0x40A8E5 - ___crtGetStringTypeA 0x40AA2E - ___crtLCMapStringA 0x40AC52 - _toupper 0x40ACC1 - ? 0x40AD8D - __chsize_lk 0x40AEBB - __setmode_lk 0x40AF20 - _strcspn 0x40AF60 - _strpbrk 0x40AFA0 - __strcmpi 0x40B070 - __strnicmp 0x40B171 - ___tzset 0x40B426 - __isindst 0x40B447 - ? 0x40B5F3 - _cvtdate 0x40B733 - ? 0x40B87B - __mbsnbicoll 0x40B8BA - ___wtomb_environ 0x40B928 - ___crtCompareStringA 0x40BBA5 - _strncnt 0x40BBD0 - ___crtsetenv 0x40BD57 - _findenv 0x40BDAF - _copy_environ 0x40BE16 - _realloc 0x40C145 - __mbschr 0x40C216 - ___dtoxmode 0x40C589 - _IsRootUNCName 0x40C5F9 - __mbsicmp 0x40C78E - __mbsrchr 0x40C800 - ___loctotime_t 0x40C8C2 - __fullpath 0x40C967 - __getdrive 0x40CA25 - __mbspbrk 0x40CBB6 - __validdrive WARNING:viv_utils:vivisect version mismatch! wanted: 1.0.0, found: None ../capa/tests/data/0731679c5f99e8ee65d8b29a3cabfc6b.exe_ IDA found 783 lib funcs in vc32_14 IDA found 1429 lib funcs in vc32ucrt found 141 library functions 0x407270 - ? 0x40F43C - _atexit 0x40F922 - ? 0x40F92E - ? 0x4104B0 - _ValidateLocalCookies 0x41071C - ? 0x410730 - ? 0x410744 - ? 0x41075A - ? 0x410766 - ? 0x410777 - ? 0x4107CA - ? 0x4107DE - ? 0x4107F2 - ? 0x410D50 - __local_unwind4 0x410F10 - __fileno 0x410FD8 - ? 0x410FEC - ? 0x411925 - ? 0x411BC0 - ??0charNode@@QAE@D@Z 0x411C0C - ??0pairNode@@QAE@PAVDNameNode@@0@Z 0x411C88 - ? 0x4121BE - ?Constructor@_HeapManager@@QAEXP6APAXI@ZP6AXPAX@Z@Z 0x4141DC - ? 0x415152 - ?getDisplacement@UnDecorator@@CA?AVDName@@XZ 0x415D47 - ? 0x416E23 - ?getReferenceType@UnDecorator@@CA?AVDName@@ABV2@0PBD@Z 0x418A9A - ?getVbTableType@UnDecorator@@CA?AVDName@@ABV2@@Z 0x41929B - ?und_strlen@@YAIPBD@Z 0x41969D - ??$atomic_exchange@J@details@Concurrency@@YAJACJJ@Z 0x4196AD - ??$atomic_exchange@J@details@Concurrency@@YAJACJJ@Z 0x4196BD - ??$atomic_exchange@J@details@Concurrency@@YAJACJJ@Z 0x4196CD - ? 0x4196D9 - ? 0x419B0D - ??$atomic_exchange@J@details@Concurrency@@YAJACJJ@Z 0x419B1D - ? 0x419B91 - ? 0x419B9B - ? 0x419E77 - ?CatchGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUCatchGuardRN@@PAX2@Z 0x419FFF - ? 0x41A042 - ? 0x41AC17 - ? 0x41ACCA - ? 0x41B58C - ? 0x41B5A0 - ? 0x41EA32 - __beep 0x41EED5 - __exit 0x426C67 - ?to_char_type@?$char_traits@D@std@@SADABH@Z 0x426C76 - ?to_char_type@?$char_traits@D@std@@SADABH@Z 0x426C85 - ? 0x426C95 - ? 0x426CA5 - ? 0x426CB4 - ? 0x426CC3 - ? 0x426CD2 - ? 0x426CE1 - ? 0x426CF0 - ? 0x426CFF - ? 0x426D0E - ? 0x426D53 - ? 0x426DCF - _get_short_arg 0x426DE6 - _get_short_arg 0x426DFD - _get_int_arg 0x426E13 - _get_int_arg 0x426E29 - _get_int_arg 0x426E3F - _get_int_arg 0x426E55 - _get_int_arg 0x426E6B - _get_int_arg 0x426E81 - _get_int_arg 0x426E97 - _get_int_arg 0x426EAD - _get_int_arg 0x426EC3 - _get_int_arg 0x426ED9 - _get_int_arg 0x426EEF - _get_int_arg 0x426F05 - _get_int_arg 0x426F1B - _get_int_arg 0x426F31 - _get_int_arg 0x426F47 - _get_int_arg 0x426FAC - _get_short_arg 0x43A048 - ? 0x43D099 - ? 0x43D0A9 - ? 0x43D13D - ? 0x43D14F - ? 0x43D3A2 - ? 0x43E02F - __ismbbalnum 0x43E050 - __ismbbalnum_l 0x43E073 - __ismbbalpha 0x43E094 - __ismbbalpha_l 0x43E10F - __ismbbgraph 0x43E130 - __ismbbgraph_l 0x43E153 - __ismbbkalnum 0x43E171 - __ismbbkalnum_l 0x43E209 - __ismbbkprint 0x43E227 - __ismbbkprint_l 0x43E246 - __ismbbkpunct 0x43E264 - __ismbbkpunct_l 0x43E2A1 - __ismbblead_l 0x43E2C0 - __ismbbprint 0x43E2E1 - __ismbbprint_l 0x43E304 - __ismbbpunct 0x43E322 - __ismbbpunct_l 0x43E341 - __ismbbtrail 0x43E35F - __ismbbtrail_l 0x441132 - ? 0x441177 - ? 0x441AAF - __MarkAllocaS 0x44936D - __iswctype_l 0x44CC3D - ___set_statfp_sse2 0x44CD44 - ? 0x44CD73 - ? 0x44CDEA - ? 0x44CE05 - ? 0x44CE44 - ? 0x44CE5B - ? 0x44CE8A - ? 0x44CEB9 - ? 0x44CED0 - ? 0x44CEEB - ? 0x44CF02 - ? 0x44CF34 - ? 0x44CF4B - ? 0x44CF62 - ? 0x44CF94 - ? 0x44CFAF - ? 0x44CFCA - _iswascii 0x44D007 - ? 0x44D01E - ? 0x44D035 - ? 0x44D050 - ? 0x44D067 - ? 0x44D099 - ? 0x44D0B0 - ? 0x44D0C7 - ? 0x4528AF - _mbstowcs 0x454B9A - ___initconout 0x4570A0 - __startTwoArgErrorHandling 0x4580C4 - __raise_excf 0x45872D - ? 0x459BC4 - _cmpBYTE 0x459C70 - _cmpResult WARNING:viv_utils:vivisect version mismatch! wanted: 1.0.0, found: None ../capa/tests/data/0796f1c1ea0a142fc1eb7109a44c86cb.exe_ IDA found 40 lib funcs in vc32_14 IDA found 0 lib funcs in vc32ucrt found 4 library functions 0x407397 - ___report_rangecheckfailure 0x407BB1 - _atexit 0x407D68 - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x407F7B - __except_handler4 WARNING:viv_utils:vivisect version mismatch! wanted: 1.0.0, found: None ../capa/tests/data/07f7846bbcda782e5639292ad93907eb.exe_ IDA found 6 lib funcs in vc32rtf found 1 library functions 0x40218E - __setdefaultprecision WARNING:viv_utils:vivisect version mismatch! wanted: 1.0.0, found: None ../capa/tests/data/08ac667c65d36d6542917655571e61c8.exe_ IDA found 0 lib funcs in vcseh found 4 library functions 0x401000 - __alloca_probe 0x401030 - __aulldiv 0x4048C7 - ? 0x404AC4 - ? WARNING:viv_utils:vivisect version mismatch! wanted: 1.0.0, found: None ../capa/tests/data/112f9f0e8d349858a80dd8c14190e620.exe_ IDA found 945 lib funcs in vc32_14 IDA found 1277 lib funcs in vc32ucrt found 515 library functions 0x408F70 - ?length@?$char_traits@D@std@@SAIPBD@Z 0x40B29A - ? 0x40B2A5 - ? 0x40B2B9 - ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z 0x40B2EB - ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z 0x40B393 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z 0x40B3B9 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z 0x40B429 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z 0x40B6D0 - ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z 0x40B71E - ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0x40B88D - ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0x40BADD - ?_Inside@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE_NPBD@Z 0x40C5D2 - ??0exception_ptr@std@@QAE@ABV01@@Z 0x40CF80 - ? 0x414E05 - ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@V?$_String_val@U?$_Simple_types@D@std@@@std@@@2@XZ 0x414E22 - ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@V?$_String_val@U?$_Simple_types@D@std@@@std@@@2@XZ 0x4151E0 - ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z 0x419CDA - ?_Hash_seq@std@@YAIPBEI@Z 0x419D04 - _wmemset 0x419D5F - ? 0x419D81 - ? 0x419FBF - ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ 0x41A972 - ?_Tidy@?$ctype@D@std@@IAEXXZ 0x41AA4E - ?do_widen@?$ctype@D@std@@MBEDD@Z 0x41AA58 - ?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z 0x41AA77 - ?do_narrow@?$ctype@D@std@@MBEDDD@Z 0x41AA81 - ?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z 0x41ABEB - ? 0x41AC42 - ? 0x41AC5E - ? 0x41AC8C - ? 0x41ACBA - ? 0x41AD17 - ? 0x41AF74 - ?default_error_condition@error_category@std@@UBE?AVerror_condition@2@H@Z 0x41BC83 - ??$_Fgetc@D@std@@YA_NAADPAU_iobuf@@@Z 0x41BCBF - ??$_Ungetc@D@std@@YA_NABDPAU_iobuf@@@Z 0x48F726 - ? 0x4904E3 - ?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z 0x4907F1 - ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z 0x490930 - ? 0x49093B - ?back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WXZ 0x490D18 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z 0x49182D - ? 0x4921BA - ?underflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x4937A4 - ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x494348 - ? 0x495B47 - ? 0x495BE8 - ? 0x49644C - ? 0x4964D1 - ? 0x496C46 - ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x498E3D - ? 0x499142 - ? 0x499186 - ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x499286 - ? 0x499310 - ??4?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@QAEAAV01@D@Z 0x4999FA - ?do_hash@?$collate@D@std@@MBEJPBD0@Z 0x499ED7 - ? 0x499EFB - ?_Inc@?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@AAEXXZ 0x49C49B - ??$_Find_elem@D@std@@YAIPADD@Z 0x49F122 - ? 0x4C97A0 - ? 0x4F9851 - ?_Stringify@regex_error@std@@CAPBDW4error_type@regex_constants@2@@Z 0x4F9911 - ?cancel_current_task@Concurrency@@YAXXZ 0x4F998E - ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z 0x4FA176 - ?_CallCopyCtor@__ExceptionPtr@@ABEXPAX0IQBU_s_CatchableType@@@Z 0x4FA209 - ? 0x4FA415 - ? 0x4FA5C0 - ?__ExceptionPtrCreate@@YAXPAX@Z 0x4FA600 - ?__ExceptionPtrDestroy@@YAXPAX@Z 0x4FA6AA - ?_Throw_C_error@std@@YAXH@Z 0x4FABCF - __Thrd_equal 0x4FAC52 - __Thrd_start 0x4FACB1 - __Xtime_diff_to_millis2 0x4FAD1C - _xtime_diff 0x4FAECB - __Mbrtowc 0x4FB3A4 - ?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z 0x4FBBCF - ?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z 0x4FBBF1 - ?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z 0x4FBC46 - ?_Setgloballocale@locale@std@@CAXPAX@Z 0x4FC084 - __Getwctype 0x4FC0A8 - __Getwctypes 0x4FC0C7 - __Stoullx 0x4FC479 - __Getcoll 0x4FC49A - __Strcoll 0x4FC52D - __Getcvt 0x4FC59A - __Wcrtomb 0x4FD0B4 - __freea 0x4FD0E0 - __Mtxinit 0x4FD177 - ?_Atexit@@YAXP6AXXZ@Z 0x4FD32D - ? 0x4FDA5D - ??$_Getvals@G@?$numpunct@G@std@@IAEXGPBUlconv@@U_Cvtvec@@@Z 0x4FDB2E - ??$_Getvals@_W@?$_Mpunct@_W@std@@IAEX_WPBUlconv@@@Z 0x4FDBF5 - ??$_LStrcoll@G@std@@YAHPBG000PBU_Collvec@@@Z 0x4FDC42 - ??$_LStrxfrm@G@std@@YAIPAG0PBG1PBU_Collvec@@@Z 0x4FDD52 - ? 0x4FDD71 - ? 0x4FEE03 - ??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z 0x4FF0B2 - ? 0x50045E - ?_Getdays@_Locinfo@std@@QBEPBDXZ 0x5040DD - ?_Getmonths@_Locinfo@std@@QBEPBDXZ 0x505706 - ? 0x506472 - ??1AFX_PARSEMAP_ENTRY_PARAMS@@QAE@XZ 0x506492 - ?_W_Getdays@_Locinfo@std@@QBEPBGXZ 0x5064CB - ?_W_Getmonths@_Locinfo@std@@QBEPBGXZ 0x5067CA - ?do_compare@?$collate@G@std@@MBEHPBG000@Z 0x5067FB - ?do_compare@?$collate@_W@std@@MBEHPB_W000@Z 0x50682C - ? 0x50684D - ? 0x5091BB - ? 0x5091D7 - ? 0x509374 - ? 0x5093C1 - ? 0x5093D0 - ? 0x50992E - ? 0x50999B - ? 0x509CA5 - ? 0x509D15 - ? 0x509EEB - ? 0x509F58 - ? 0x50A262 - ? 0x50A2D2 - ? 0x50A8A1 - ? 0x50AD47 - _memcpy_s 0x50C67B - ? 0x50CCB3 - ? 0x50CCCF - ?do_get@?$messages@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z 0x50D872 - ?do_negative_sign@?$_Mpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ 0x50D88E - ? 0x50DF69 - ___crtDownlevelLocaleNameToLCID 0x50E0DF - __Wcscoll 0x50E242 - ___crtCompareStringW 0x524CE0 - ? 0x56B260 - __fileno 0x5FF670 - ? 0x603130 - ??$_FetchAndAdd@I@?$_Subatomic_impl@$03@details@Concurrency@@SAIACII@Z 0x604730 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604750 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604770 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604790 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6047B0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6047D0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6047F0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604810 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604830 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604850 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604870 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604890 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6048B0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6048D0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6048F0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x604910 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6DB830 - ? 0x6E2E10 - ? 0x6E6D30 - ??0_ReaderWriterLock@details@Concurrency@@QAE@XZ 0x6E6DB0 - ? 0x6F73F0 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x6F7410 - ??$_Copy_impl@PAPAXPAPAX@std@@YAPAPAXPAPAX00@Z 0x73451F - ___report_rangecheckfailure 0x734968 - _atexit 0x734C5D - ? 0x734D80 - __alloca_probe_16 0x734DB0 - __aulldvrm 0x734E50 - __allmul 0x734E90 - __aulldiv 0x734F00 - __alldiv 0x734FE0 - __ftoui3 0x735430 - __aullshr 0x735450 - __allshl 0x7357CF - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x7358D7 - ___security_init_cookie 0x735A31 - ??0MultiWaitBlock@details@Concurrency@@QAE@I_N0@Z 0x735B27 - ??0TimedSingleWaitBlock@details@Concurrency@@QAE@_N@Z 0x735B56 - ??0WaitAnyBlock@details@Concurrency@@QAE@I_N0@Z 0x735B7E - ??0WaitBlock@details@Concurrency@@QAE@XZ 0x735BF0 - ??1MultiWaitBlockHolder@details@Concurrency@@QAE@XZ 0x7362F0 - ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z 0x73638B - ?createTimer@TimedSingleWaitBlock@details@Concurrency@@QAE_NI@Z 0x7363EE - ?destroyTimer@TimedSingleWaitBlock@details@Concurrency@@QAEX_N@Z 0x736B3F - __freea 0x736C03 - ? 0x736CE2 - ?Block@LockQueueNode@details@Concurrency@@QAEXI@Z 0x736D6A - ?CurrentContext@SchedulerBase@details@Concurrency@@SAPAVContextBase@23@XZ 0x736F31 - ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ 0x737030 - ?_FlushWriteOwners@_ReaderWriterLock@details@Concurrency@@QAEXXZ 0x73705E - ?_Initialize@_SpinCount@details@Concurrency@@SAXXZ 0x737081 - ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ 0x73708C - ?_Switch_to_active@critical_section@Concurrency@@AAEXPAX@Z 0x7370F8 - ?_WaitEquals@_ReaderWriterLock@details@Concurrency@@CAXADJJJ@Z 0x73720C - ?unlock@critical_section@Concurrency@@QAEXXZ 0x73727D - ??0AllocatorBucket@details@Concurrency@@QAE@XZ 0x7372E6 - ?Alloc@AllocatorBucket@details@Concurrency@@QAEPATAllocationEntry@23@XZ 0x7372FF - ?Alloc@SubAllocator@details@Concurrency@@QAEPAXI@Z 0x73734F - ?Free@AllocatorBucket@details@Concurrency@@QAE_NPATAllocationEntry@23@@Z 0x737379 - ?Free@SubAllocator@details@Concurrency@@QAEXPAX@Z 0x7373B0 - ?GetBucketIndex@SubAllocator@details@Concurrency@@SAHI@Z 0x73745A - ?CurrentContext@Context@Concurrency@@SAPAV12@XZ 0x737491 - ? 0x73749E - ?DeleteAsyncTimerAndUnloadLibrary@details@Concurrency@@YAXPAU_TP_TIMER@@@Z 0x737504 - ?InitializeCookie@Security@details@Concurrency@@SAKXZ 0x7376FE - ?UnRegisterAsyncWaitAndUnloadLibrary@details@Concurrency@@YAXPAU_TP_CALLBACK_INSTANCE@@PAU_TP_WAIT@@@Z 0x737743 - ?_Acquire@_NonReentrantLock@details@Concurrency@@QAEXXZ 0x7377AA - ?_TryAcquire@_NonReentrantLock@details@Concurrency@@QAE_NXZ 0x737821 - ??0SchedulerPolicy@Concurrency@@QAA@IZZ 0x737841 - ??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z 0x7378C4 - ??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z 0x7378E2 - ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z 0x73791A - ?_AreConcurrencyLimitsValid@SchedulerPolicy@Concurrency@@CA_NII@Z 0x737A23 - ?_ResolvePolicyValues@SchedulerPolicy@Concurrency@@AAEXXZ 0x737A6B - ?_StringFromPolicyKey@SchedulerPolicy@Concurrency@@CAPADI@Z 0x737CD2 - ??0QuickBitSet@details@Concurrency@@QAE@I@Z 0x737D18 - ??0SchedulerBase@details@Concurrency@@QAE@ABVSchedulerPolicy@2@@Z 0x73816E - ??1NumaInformation@SchedulerBase@details@Concurrency@@QAE@XZ 0x73818F - ??1ReferenceCountedQuickBitSet@details@Concurrency@@QAE@XZ 0x738634 - ?AddHead@?$List@UBoostedObject@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUBoostedObject@23@@Z 0x73866D - ?AddTail@?$List@VWaitNode@SchedulerBase@details@Concurrency@@VNoCount@CollectionTypes@34@@details@Concurrency@@QAEXPAVWaitNode@SchedulerBase@23@@Z 0x73880E - ?Attach@SchedulerBase@details@Concurrency@@UAEXXZ 0x738856 - ?AttachExternalContext@SchedulerBase@details@Concurrency@@AAEPAVExternalContextBase@23@_N@Z 0x738A1B - ?CheckStaticConstruction@SchedulerBase@details@Concurrency@@CAXXZ 0x738C01 - ?ComputeSafePointCommitVersion@SchedulerBase@details@Concurrency@@AAEKXZ 0x738C8C - ?CopyFrom@QuickBitSet@details@Concurrency@@IAEXABV123@@Z 0x738D1E - ?CreateWithoutInitializing@SchedulerBase@details@Concurrency@@SAPAV123@ABVSchedulerPolicy@3@@Z 0x738E0D - ?DestroySchedulerEventHandlers@SchedulerBase@details@Concurrency@@MAEXXZ 0x738EBF - ?Fill@QuickBitSet@details@Concurrency@@QAEXXZ 0x73909B - ?FindScheduleGroupSegment@SchedulingRing@details@Concurrency@@AAEPAVScheduleGroupSegmentBase@23@HHPAHPAV?$ListArray@VScheduleGroupSegmentBase@details@Concurrency@@@23@@Z 0x7390C6 - ?FindVirtualProcessor@SchedulingNode@details@Concurrency@@QAEPAVVirtualProcessor@23@HHPAH@Z 0x7390F5 - ?FoundAvailableVirtualProcessor@SchedulerBase@details@Concurrency@@QAE_NAAVClaimTicket@VirtualProcessor@23@Vlocation@3@K@Z 0x7391EF - ?FoundBlockedContexts@SchedulerBase@details@Concurrency@@AAE_NXZ 0x7392E2 - ?GetAnonymousScheduleGroupSegment@SchedulerBase@details@Concurrency@@QAEPAVScheduleGroupSegmentBase@23@XZ 0x73943D - ?GetExternalContext@SchedulerBase@details@Concurrency@@AAEPAVExternalContextBase@23@_N@Z 0x7395E4 - ?GetNextPriorityObject@SchedulerBase@details@Concurrency@@QAEPAUBoostedObject@23@XZ 0x739682 - ?GetNextSchedulingRing@SchedulerBase@details@Concurrency@@QAEPAVSchedulingRing@23@XZ 0x7396A3 - ?GetNextValidSchedulingRingIndex@SchedulerBase@details@Concurrency@@AAEHH@Z 0x7396C5 - ?GetNextVirtualProcessor@SchedulingNode@details@Concurrency@@QAEPAVVirtualProcessor@23@PAHH@Z 0x739704 - ?GetPolicy@SchedulerBase@details@Concurrency@@UBE?AVSchedulerPolicy@3@XZ 0x739780 - ?GetReservedContext@SchedulerBase@details@Concurrency@@QAEPAVInternalContextBase@23@XZ 0x73982A - ?GetValidSchedulingRingIndex@SchedulerBase@details@Concurrency@@AAEHH@Z 0x73984D - ?Grow@QuickBitSet@details@Concurrency@@QAEXI@Z 0x739954 - ? 0x739F31 - ?Intersects@QuickBitSet@details@Concurrency@@QBE_NABV123@@Z 0x739FAA - ?InvokeOnSafePoint@SchedulerBase@details@Concurrency@@AAEXPAVSafePointInvocation@23@@Z 0x739FEE - ?IsActive@ExternalStatistics@details@Concurrency@@QAE_NXZ 0x73A041 - ? 0x73A06B - ?MailChore@FairScheduleGroup@details@Concurrency@@UAE?AVSlot@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@23@PAV_UnrealizedChore@23@PAVlocation@3@PAPAVScheduleGroupSegmentBase@23@@Z 0x73A07C - ?MarkSafePoint@SchedulerBase@details@Concurrency@@QAE_NPAVSafePointMarker@23@@Z 0x73A128 - ?OneShotStaticConstruction@SchedulerBase@details@Concurrency@@CAXXZ 0x73A13C - ?OneShotStaticDestruction@SchedulerBase@details@Concurrency@@CAXXZ 0x73A155 - ?PerformServiceScan@SchedulerBase@details@Concurrency@@AAEX_K@Z 0x73A300 - ?PhaseOneShutdown@SchedulerBase@details@Concurrency@@AAEXXZ 0x73A40B - ?PublishNewDataVersion@SchedulerBase@details@Concurrency@@AAEKXZ 0x73A423 - ?Push@?$LockFreePushStack@VContextNode@SchedulerBase@details@Concurrency@@@details@Concurrency@@QAEXPAVContextNode@SchedulerBase@23@@Z 0x73A4A9 - ?Reallocate@QuickBitSet@details@Concurrency@@IAEXI@Z 0x73A637 - ?ReleaseExternalContext@SchedulerBase@details@Concurrency@@AAEXPAVExternalContextBase@23@@Z 0x73A6E0 - ?ReleaseRealizedChore@SchedulerBase@details@Concurrency@@QAEXPAVRealizedChore@23@@Z 0x73A79A - ?ReleaseSuspendedVirtualProcessors@SchedulerBase@details@Concurrency@@AAEXJ@Z 0x73A7B8 - ?Remove@?$List@UBoostedObject@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUBoostedObject@23@@Z 0x73A9F4 - ?RemoveHead@?$List@UBoostedObject@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEPAUBoostedObject@23@XZ 0x73AA1C - ?RemoveHead@?$List@VWaitNode@SchedulerBase@details@Concurrency@@VNoCount@CollectionTypes@34@@details@Concurrency@@QAEPAVWaitNode@SchedulerBase@23@XZ 0x73AA74 - ?RemovePrioritizedObject@SchedulerBase@details@Concurrency@@QAEXPAUBoostedObject@23@@Z 0x73AAB0 - ?RemoveScheduleGroup@SchedulerBase@details@Concurrency@@QAEXPAVScheduleGroupBase@23@@Z 0x73AAC8 - ?RemoveSegments@FairScheduleGroup@details@Concurrency@@MAEXXZ 0x73AC77 - ?SafeReference@SchedulerBase@details@Concurrency@@AAE_NXZ 0x73AC99 - ?ScheduleTask@SchedulerBase@details@Concurrency@@UAEXP6AXPAX@Z0@Z 0x73ACE2 - ?ScheduleTask@SchedulerBase@details@Concurrency@@UAEXP6AXPAX@Z0AAVlocation@3@@Z 0x73AD18 - ?SetNextSchedulingRing@SchedulerBase@details@Concurrency@@QAEXPAVSchedulingRing@23@@Z 0x73AD3D - ?SpinUntilBitsReset@details@Concurrency@@YAJPCJJ@Z 0x73B063 - ?ThrottlerDispatch@SchedulerBase@details@Concurrency@@AAEXXZ 0x73B17A - ?ThrottlerDispatchBridge@SchedulerBase@details@Concurrency@@CGXPAU_TP_CALLBACK_INSTANCE@@PAXPAU_TP_TIMER@@@Z 0x73B189 - ? 0x73B1D5 - ?ThrottlingTime@SchedulerBase@details@Concurrency@@QAEKK@Z 0x73B303 - ?TriggerCommitSafePoints@SchedulerBase@details@Concurrency@@QAEXPAVSafePointMarker@23@@Z 0x73B338 - ?TypeOfWorkPending@SchedulerBase@details@Concurrency@@MAE?AW4PendingWorkType@123@XZ 0x73B366 - ?UpdateCommitVersion@SchedulerBase@details@Concurrency@@AAEKK@Z 0x73B3AE - ?UpdatePendingVersion@SchedulerBase@details@Concurrency@@AAEKXZ 0x73B53B - ?_Assign@location@Concurrency@@QAEXABV12@@Z 0x73B786 - ?AddTail@?$List@UListEntry@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUListEntry@23@@Z 0x73B7E9 - ?Remove@?$List@UListEntry@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUListEntry@23@@Z 0x73B8BA - ?_CancelViaToken@_UnrealizedChore@details@Concurrency@@CAXPAVContextBase@23@@Z 0x73BAC3 - ?_IsValid@_CancellationTokenState@details@Concurrency@@SA_NPAV123@@Z 0x73BC93 - ?_SetDetached@_UnrealizedChore@details@Concurrency@@QAEX_N@Z 0x73BE6C - ??0_TaskCollection@details@Concurrency@@AAE@PAV012@_N@Z 0x73BF6D - ??1TaskStack@details@Concurrency@@QAE@XZ 0x73C0C2 - ?AddArbitraryAlias@ContextBase@details@Concurrency@@QAEXPAV_TaskCollection@23@0@Z 0x73C22B - ?Remove@?$Hash@PAV_TaskCollection@details@Concurrency@@PAV123@@details@Concurrency@@AAEPAUListNode@123@ABQAV_TaskCollection@23@H@Z 0x73C56A - ?_CancelDirectAliases@_TaskCollection@details@Concurrency@@AAEX_NPAV123@@Z 0x73C844 - ?_Initialize@_TaskCollection@details@Concurrency@@AAEXXZ 0x73C879 - ?_IsDirectAlias@_TaskCollection@details@Concurrency@@ABE_NXZ 0x73C88C - ?_IsIndirectAlias@_TaskCollection@details@Concurrency@@ABE_NXZ 0x73C89F - ?_IsMarkedForAbnormalExit@_TaskCollection@details@Concurrency@@QBE_NXZ 0x73C8AD - ?_IsStaleAlias@_TaskCollection@details@Concurrency@@ABE_NXZ 0x73CA42 - ?_SetCancelState@_TaskCollection@details@Concurrency@@AAE_NJ@Z 0x73CA7C - ?_SweepAbortedChore@_TaskCollection@details@Concurrency@@CA_NPAV_UnrealizedChore@23@PAX@Z 0x73CAE9 - ??0CancellationBeaconStack@ContextBase@details@Concurrency@@QAE@XZ 0x73CBD3 - ? 0x73CBEA - ??1?$WorkStealingQueue@V_UnrealizedChore@details@Concurrency@@V_CriticalNonReentrantLock@23@@details@Concurrency@@QAE@XZ 0x73CC44 - ??1ContextBase@details@Concurrency@@UAE@XZ 0x73CC72 - ? 0x73CCC1 - ??8location@Concurrency@@QBE_NABV01@@Z 0x73CFB3 - ?CancelStealers@ContextBase@details@Concurrency@@QAEXPAV_TaskCollectionBase@23@@Z 0x73D07D - ?CheckForDeletion@?$ListArray@VWorkQueue@details@Concurrency@@@details@Concurrency@@AAEXXZ 0x73D126 - ?ClearAliasTable@ContextBase@details@Concurrency@@QAEXXZ 0x73D167 - ?ClearContextTls@ContextBase@details@Concurrency@@AAEXXZ 0x73D177 - ?CreateWorkQueue@ContextBase@details@Concurrency@@QAEXXZ 0x73D1F6 - ?DeleteElements@?$ListArray@VWorkQueue@details@Concurrency@@@details@Concurrency@@AAEXPAU_SINGLE_LIST_ENTRY@@@Z 0x73D408 - ?GetScheduleGroup@ContextBase@details@Concurrency@@QBEPAVScheduleGroupBase@23@XZ 0x73D440 - ?IsCanceledAtDepth@ContextBase@details@Concurrency@@AAE_NPAV_TaskCollectionBase@23@H@Z 0x73D52A - ?LockedSetOwningContext@WorkQueue@details@Concurrency@@QAEXPAVContextBase@23@@Z 0x73D54D - ?NextList@?$Hash@PAV_TaskCollection@details@Concurrency@@PAV123@@details@Concurrency@@AAEPAUListNode@123@PAH@Z 0x73D57E - ?Pop@?$WorkStealingQueue@V_UnrealizedChore@details@Concurrency@@V_CriticalNonReentrantLock@23@@details@Concurrency@@QAEPAV_UnrealizedChore@23@XZ 0x73D5D8 - ?PopContextFromTls@ContextBase@details@Concurrency@@AAEPAV123@XZ 0x73D5F6 - ?PushContextToTls@ContextBase@details@Concurrency@@AAEXPAV123@@Z 0x73D611 - ?RecomputeMaximumCancellationDepth@ContextBase@details@Concurrency@@AAEXXZ 0x73D7F3 - ?RemoveStealer@ContextBase@details@Concurrency@@QAEXPAV123@@Z 0x73D9B9 - ?TraceContextEvent@ContextBase@details@Concurrency@@IAEXW4ConcRT_EventType@3@EKK@Z 0x73DA58 - ?_SafeGetParent@_TaskCollectionBase@details@Concurrency@@IAEPAV123@XZ 0x73DFA8 - ?__CreateTimerQueueTimer@platform@details@Concurrency@@YAHPAPAXPAXP6GX1E@Z1KKK@Z 0x73E159 - ?__GetNumaHighestNodeNumber@platform@details@Concurrency@@YAKXZ 0x73E222 - ?__RegisterWaitForSingleObject@platform@details@Concurrency@@YAPAXPAXP6GX0E@Z0@Z 0x73E32A - ?__TlsAlloc@platform@details@Concurrency@@YAKXZ 0x73E3DB - ?__WaitForThread@platform@details@Concurrency@@YAKPAXK@Z 0x73E422 - ??0HardwareAffinity@details@Concurrency@@QAE@PAX@Z 0x73E743 - ?AddTail@?$List@VSchedulerProxy@details@Concurrency@@VCount@CollectionTypes@23@@details@Concurrency@@QAEXPAVSchedulerProxy@23@@Z 0x73E84E - ?ApplyAffinityLimits@AffinityRestriction@ResourceManager@details@Concurrency@@QAEXPAU_GROUP_AFFINITY@@@Z 0x73E871 - ?ApplyAffinityRestrictions@ResourceManager@details@Concurrency@@CAXPAK@Z 0x73E8A2 - ?ApplyAffinityRestrictions@ResourceManager@details@Concurrency@@CAXPAU_GROUP_AFFINITY@@@Z 0x73E8C9 - ?ApplyTo@HardwareAffinity@details@Concurrency@@QAEXPAX@Z 0x73E9FB - ?CleanupTopologyInformation@ResourceManager@details@Concurrency@@CAXXZ 0x73EB25 - ?ComputeDesiredHWThreadsWithExternalThread@SchedulerProxy@details@Concurrency@@QBEIXZ 0x73EE75 - ?DesiredHWThreads@SchedulerProxy@details@Concurrency@@QBEIXZ 0x73EE8E - ?DestroyAllocatedNodeData@ResourceManager@details@Concurrency@@QAEXPAUSchedulerNode@23@@Z 0x73F249 - ?DistributeCoresToSurvivingScheduler@ResourceManager@details@Concurrency@@AAE_NXZ 0x73F6B6 - ?DoCoreMigration@ResourceManager@details@Concurrency@@AAEXXZ 0x73FAF4 - ?DynamicRMThreadProc@ResourceManager@details@Concurrency@@CGKPAX@Z 0x7401A1 - ?FlushStoreBuffers@ResourceManager@details@Concurrency@@QAEXXZ 0x74022F - ?GetCurrentNodeAndCore@ResourceManager@details@Concurrency@@QAEIPAI@Z 0x74038C - ?GetNextGlobalCore@GlobalNode@details@Concurrency@@QAEPAUGlobalCore@23@PBU423@@Z 0x7403B1 - ?GetNextGlobalNode@ResourceManager@details@Concurrency@@QAEPAUGlobalNode@23@PBU423@@Z 0x74046D - ?HandleBorrowedCores@ResourceManager@details@Concurrency@@AAEXPAVSchedulerProxy@23@PAUAllocationData@23@@Z 0x740588 - ?HandleSharedCores@ResourceManager@details@Concurrency@@AAEXPAVSchedulerProxy@23@PAUDynamicAllocationData@23@@Z 0x740933 - ?InitializeSystemInformation@ResourceManager@details@Concurrency@@CAX_N@Z 0x740B6B - ?MinVprocHWThreads@SchedulerProxy@details@Concurrency@@QBEIXZ 0x740F9F - ?PreProcessStaticAllocationData@ResourceManager@details@Concurrency@@AAEXXZ 0x740FCE - ?PrepareReceiversForCoreTransfer@ResourceManager@details@Concurrency@@AAEII@Z 0x7416AE - ?ReleaseCoresOnExistingSchedulers@ResourceManager@details@Concurrency@@AAEIPAVSchedulerProxy@23@II@Z 0x7417FD - ?Remove@?$List@VSchedulerProxy@details@Concurrency@@VCount@CollectionTypes@23@@details@Concurrency@@QAEXPAVSchedulerProxy@23@@Z 0x741833 - ?RemoveExecutionResource@ResourceManager@details@Concurrency@@QAEXPAVExecutionResource@23@@Z 0x741BCB - ?ResetGlobalAllocationData@ResourceManager@details@Concurrency@@AAEXXZ 0x741C24 - ?RetrieveSystemVersionInformation@ResourceManager@details@Concurrency@@CAXXZ 0x741ED5 - ?SafeReference@ResourceManager@details@Concurrency@@AAE_NXZ 0x741EF4 - ?SendResourceNotifications@ResourceManager@details@Concurrency@@QAEXPAVSchedulerProxy@23@@Z 0x7422BD - ?ToggleRMIdleState@ResourceManager@details@Concurrency@@AAEXPAUSchedulerNode@23@PAUSchedulerCore@23@PAUGlobalNode@23@PAUGlobalCore@23@PAUAllocationData@23@@Z 0x7425B7 - ?AcknowledgedAffinityMessage@SchedulerBase@details@Concurrency@@QAE_NI@Z 0x742636 - ?CheckAffinityNotification@VirtualProcessor@details@Concurrency@@QAE_NXZ 0x742762 - ?ClearQuickCacheSlot@SchedulerBase@details@Concurrency@@QAEXI@Z 0x7428BF - ?GetCurrentSubAllocator@VirtualProcessor@details@Concurrency@@QAEPAVSubAllocator@23@XZ 0x7428D8 - ?GetResourceMaskId@SchedulerBase@details@Concurrency@@QAEII@Z 0x742EA8 - ?SafePoint@VirtualProcessor@details@Concurrency@@QAE_NXZ 0x742EBC - ?SaveRetiredVirtualProcessorStatistics@SchedulerBase@details@Concurrency@@QAEXPAVVirtualProcessor@23@@Z 0x742EF6 - ?SpinUntilClear@QuickBitSet@details@Concurrency@@QBEXI@Z 0x742F40 - ?SpinUntilSet@QuickBitSet@details@Concurrency@@QBEXI@Z 0x7430BB - ? 0x7430C5 - ?TraceVirtualProcessorEvent@VirtualProcessor@details@Concurrency@@AAEXW4ConcRT_EventType@3@EKK@Z 0x7430F2 - ?UpdateWorkState@VirtualProcessor@details@Concurrency@@QAEX_N0@Z 0x743152 - ?Wipe@QuickBitSet@details@Concurrency@@QAEXXZ 0x74316F - ??0SchedulingNode@details@Concurrency@@QAE@ABVQuickBitSet@12@KPAVSchedulingRing@12@@Z 0x743635 - ?Steal@?$StructuredWorkStealingQueue@VInternalContextBase@details@Concurrency@@V_HyperNonReentrantLock@23@@details@Concurrency@@QAEPAVInternalContextBase@23@_N@Z 0x743C1D - ?Cleanup@InternalContextBase@details@Concurrency@@IAEXXZ 0x743FF0 - ?GetAndResetOversubscribedVProc@InternalContextBase@details@Concurrency@@QAEPAVVirtualProcessor@23@PAV423@@Z 0x7441F8 - ?IsVirtualProcessorRetired@InternalContextBase@details@Concurrency@@IAE_NXZ 0x74443A - ?PrepareToRun@InternalContextBase@details@Concurrency@@MAEXPAVVirtualProcessor@23@@Z 0x74451B - ?RemoveFromUse@InternalContextBase@details@Concurrency@@QAEXXZ 0x744D10 - ??0SchedulingRing@details@Concurrency@@QAE@PAVSchedulerBase@12@H@Z 0x744E28 - ?Activate@SchedulingRing@details@Concurrency@@QAEXXZ 0x744F89 - ?RemoveScheduleGroupSegment@SchedulingRing@details@Concurrency@@AAEXPAVScheduleGroupSegmentBase@23@@Z 0x74523B - ??0Segment@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAE@PAVSchedulerBase@23@ABVQuickBitSet@23@II@Z 0x745451 - ??4QuickBitSet@details@Concurrency@@QAEAAV012@$$QAV012@@Z 0x7459E0 - ?ClearQuickCacheSlotIf@SchedulerBase@details@Concurrency@@QAEXIPAVScheduleGroupSegmentBase@23@@Z 0x745AD5 - ?DemandInitialize@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@AAEXXZ 0x745B4B - ?Dequeue@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAE_NPAPAV_UnrealizedChore@23@@Z 0x745C0F - ? 0x745D94 - ?GetInternalContext@ScheduleGroupSegmentBase@details@Concurrency@@IAEPAVInternalContextBase@23@PAU_Chore@23@_N@Z 0x745DD7 - ?Grow@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@AAEPAUSegment@123@PAU4123@@Z 0x745E29 - ?HasUnrealizedChores@ScheduleGroupSegmentBase@details@Concurrency@@IAE_NXZ 0x745E35 - ?Initialize@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAEXABVQuickBitSet@23@@Z 0x745E5E - ?Initialize@ScheduleGroupBase@details@Concurrency@@QAEXPAVlocation@3@@Z 0x745EF5 - ?IsEmpty@WorkQueue@details@Concurrency@@QBE_NXZ 0x745F0B - ?LocateMailboxSegment@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@AAEPAUSegment@123@I_N@Z 0x746038 - ?LocateUnrealizedChores@ScheduleGroupSegmentBase@details@Concurrency@@IAEPAVWorkQueue@23@XZ 0x7460C4 - ?RedetachQueue@ScheduleGroupSegmentBase@details@Concurrency@@QAEXPAVWorkQueue@23@@Z 0x746223 - ?RemoveSegments@ScheduleGroupBase@details@Concurrency@@MAEXXZ 0x746289 - ?SafelyDeleteDetachedWorkQueue@ScheduleGroupSegmentBase@details@Concurrency@@IAE_NPAVWorkQueue@23@@Z 0x74662C - ??IQuickBitSet@details@Concurrency@@QBE?AV012@ABV012@@Z 0x74668D - ?Enqueue@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAE?AVSlot@123@PAV_UnrealizedChore@23@@Z 0x74671C - ?InterlockedSet@QuickBitSet@details@Concurrency@@QAEXABV123@@Z 0x74678B - ?MailChore@CacheLocalScheduleGroupSegment@details@Concurrency@@QAE?AVSlot@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@23@PAV_UnrealizedChore@23@@Z 0x7467A3 - ?NotifyAffinitizedWork@CacheLocalScheduleGroupSegment@details@Concurrency@@UAEXXZ 0x7467D6 - ?PostAffinityMessage@SchedulerBase@details@Concurrency@@QAEXABVQuickBitSet@23@@Z 0x746816 - ?SetQuickCacheSlot@SchedulerBase@details@Concurrency@@QAEXIPAVScheduleGroupSegmentBase@23@@Z 0x7469DD - ?Alloc@ExternalContextBase@details@Concurrency@@UAEPAXI@Z 0x746AC4 - ?GetCurrentSubAllocator@ExternalContextBase@details@Concurrency@@QAEPAVSubAllocator@23@XZ 0x746AE6 - ?ImplicitDetachHandler@ExternalContextBase@details@Concurrency@@CGXPAU_TP_CALLBACK_INSTANCE@@PAXPAU_TP_WAIT@@K@Z 0x746B08 - ?ImplicitDetachHandlerXP@ExternalContextBase@details@Concurrency@@CGXPAXE@Z 0x746B37 - ? 0x746C37 - ?RemoveFromUse@ExternalContextBase@details@Concurrency@@QAEXXZ 0x746E03 - ?Create@ThreadScheduler@details@Concurrency@@SAPAV123@ABVSchedulerPolicy@3@@Z 0x746EC8 - ? 0x746F61 - ?_FinishCancelState@_TaskCollectionBase@details@Concurrency@@IAEXI@Z 0x746FAF - ?_MarkCancellation@_TaskCollectionBase@details@Concurrency@@IAE_NXZ 0x7471C2 - ? 0x74723C - ?Reinitialize@WorkQueue@details@Concurrency@@AAEXXZ 0x74729A - ?StaticRedetachFromScheduleGroup@WorkQueue@details@Concurrency@@CAXPAV123@@Z 0x7472BC - ?Steal@WorkQueue@details@Concurrency@@QAEPAV_UnrealizedChore@23@_N@Z 0x7473BD - ?TryToSteal@WorkQueue@details@Concurrency@@QAEPAV_UnrealizedChore@23@_NAA_N@Z 0x7475F2 - ??0ExecutionResource@details@Concurrency@@QAE@PAVSchedulerProxy@12@PAUSchedulerNode@12@I@Z 0x74772E - ?IncrementUseCounts@ExecutionResource@details@Concurrency@@QAEXXZ 0x7477FB - ?Remove@ExecutionResource@details@Concurrency@@UAEXPAUIScheduler@3@@Z 0x74785C - ?ResetCurrent@ExecutionResource@details@Concurrency@@QAEXXZ 0x747878 - ?SetAsCurrent@ExecutionResource@details@Concurrency@@QAEXXZ 0x74789B - ??$sign@I@details@Concurrency@@YAII@Z 0x74797C - ?Add@MeasuredHistory@HillClimbing@details@Concurrency@@QAEXNI@Z 0x747AD3 - ?EstablishControlSetting@HillClimbing@details@Concurrency@@AAEXI@Z 0x747B5E - ?GetHistory@HillClimbing@details@Concurrency@@AAEPAVMeasuredHistory@123@I@Z 0x747B89 - ? 0x747BD2 - ?Mean@MeasuredHistory@HillClimbing@details@Concurrency@@QAENXZ 0x747BF4 - ?RecommendControlSetting@HillClimbing@details@Concurrency@@AAEII@Z 0x747E88 - ?Variance@MeasuredHistory@HillClimbing@details@Concurrency@@QAENXZ 0x7482AA - ?AddTail@?$List@VExecutionResource@details@Concurrency@@VCount@CollectionTypes@23@@details@Concurrency@@QAEXPAVExecutionResource@23@@Z 0x74839E - ?AdjustAllocationIncrease@SchedulerProxy@details@Concurrency@@QBEII@Z 0x748538 - ?CreateExternalThreadResource@SchedulerProxy@details@Concurrency@@QAEPAVExecutionResource@23@PAUSchedulerNode@23@I@Z 0x74887B - ?GetCurrentThreadExecutionResource@SchedulerProxy@details@Concurrency@@QAEPAVExecutionResource@23@XZ 0x748D93 - ?Remove@?$List@VExecutionResource@details@Concurrency@@VCount@CollectionTypes@23@@details@Concurrency@@QAEXPAVExecutionResource@23@@Z 0x748EDF - ?RequestInitialVirtualProcessors@SchedulerProxy@details@Concurrency@@UAEPAUIExecutionResource@3@_N@Z 0x748FEA - ?ToggleBorrowedState@SchedulerProxy@details@Concurrency@@QAEXPAUSchedulerNode@23@I@Z 0x7493D4 - ?Prepare@?$ThreadProxyFactory@VFreeThreadProxy@details@Concurrency@@@details@Concurrency@@MAEXPAVFreeThreadProxy@23@H@Z 0x7493EC - ?ReclaimProxy@?$ThreadProxyFactory@VFreeThreadProxy@details@Concurrency@@@details@Concurrency@@UAEXPAUIThreadProxy@3@@Z 0x7495A9 - ?Retire@FreeThreadProxyFactory@details@Concurrency@@EAEXPAVFreeThreadProxy@23@@Z 0x749661 - ??0location@Concurrency@@QAE@W4_Type@01@IIPAX@Z 0x749748 - ??0WorkItem@details@Concurrency@@QAE@PAVInternalContextBase@12@@Z 0x74987E - ?GetLocalRunnable@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVVirtualProcessor@23@_N@Z 0x749917 - ?GetNextSchedulingNode@SchedulerBase@details@Concurrency@@QAEPAVSchedulingNode@23@PAHH@Z 0x749966 - ?GetPseudoRRAffineScheduleGroupSegment@SchedulingRing@details@Concurrency@@QAEPAVScheduleGroupSegmentBase@23@PAH@Z 0x7499DF - ?GetRealizedChore@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_N@Z 0x749A31 - ?GetRealizedChoreWithinGroup@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_NW4SearchAffinity@123@2@Z 0x749AF0 - ?GetRunnableContextWithinGroup@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@W4SearchAffinity@123@_N@Z 0x749B6B - ?GetUnrealizedChore@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_N2@Z 0x749C92 - ?PeriodicScan@SchedulerBase@details@Concurrency@@QAEX_K@Z 0x749D0A - ?QuickSearch@WorkSearchContext@details@Concurrency@@AAE_NPAVScheduleGroupSegmentBase@23@PAVWorkItem@23@_NK@Z 0x749D77 - ?QuickSearchYield@WorkSearchContext@details@Concurrency@@AAE_NPAVScheduleGroupSegmentBase@23@PAVWorkItem@23@_NK@Z 0x749DE5 - ?Reset@WorkSearchContext@details@Concurrency@@QAEXPAVVirtualProcessor@23@W4Algorithm@123@@Z 0x749EBF - ?SearchCacheLocal@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_NK@Z 0x74A82B - ?SearchFairYield@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_NK@Z 0x74AAED - ?ServiceMark@ScheduleGroupSegmentBase@details@Concurrency@@QAEX_K@Z 0x74AB13 - ?ServiceMark@VirtualProcessor@details@Concurrency@@QAEX_K@Z 0x74AC7A - ?StealLocalRunnableContext@VirtualProcessor@details@Concurrency@@AAEPAVInternalContextBase@23@XZ 0x74AC91 - ?TransferReferences@WorkItem@details@Concurrency@@QAEXPAVInternalContextBase@23@@Z 0x74AEA2 - ??8HardwareAffinity@details@Concurrency@@QAE_NABU012@@Z 0x74B25B - ?SpinUntilIdle@FreeVirtualProcessorRoot@details@Concurrency@@IAEXXZ 0x74B36B - ?SwitchOut@FreeThreadProxy@details@Concurrency@@UAEXW4SwitchingProxyState@3@@Z 0x74B5EB - ?Cancel@ThreadProxy@details@Concurrency@@QAEXXZ 0x74B60A - ?SetPriority@ThreadProxy@details@Concurrency@@QAEXH@Z 0x74B64F - ?SuspendExecution@ThreadProxy@details@Concurrency@@QAEXXZ 0x74DA90 - _memchr 0x74DB80 - _strstr 0x74DDF0 - _strchr 0x74E20C - ?_CallCatchBlock2@@YAPAXPAUEHRegistrationNode@@PBU_s_FuncInfo@@PAXHK@Z 0x74E448 - ?CatchGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUCatchGuardRN@@PAX2@Z 0x74EEB4 - ___AdjustPointer 0x74F0DB - ? 0x74F360 - _strrchr 0x74F4B0 - __setjmp3 0x74F561 - ?FindCompleteObject@@YAPAXPAPAX@Z 0x74F945 - ?PMDtoOffset@@YAHPAXABUPMD@@@Z 0x74F9A1 - ___RTDynamicCast 0x74FD60 - _ValidateLocalCookies 0x7502F0 - __local_unwind4 0x750500 - _strncpy 0x750A40 - _strlen 0x7543F7 - ??3@YAXPAX@Z 0x754CB6 - __invalid_parameter_noinfo 0x75AA60 - ? 0x75B620 - _strcspn 0x75C727 - __dosmaperr 0x75CA21 - _fgetpos 0x75D3F7 - _wcslen 0x75DA50 - _pow 0x75DCD9 - _fsetpos 0x7606B8 - _free 0x7606F2 - _abort 0x76158F - __ismbblead 0x764210 - _strpbrk 0x764973 - __cexit 0x7649D0 - _exit 0x764B10 - _strspn 0x764B56 - ? 0x764D7C - ? 0x764FBD - ? 0x765D2C - ? 0x76AAF6 - __Stold 0x76C5DE - __fileno 0x76C604 - __get_printf_count_output 0x76D41E - ?HasUnrealizedChores@ScheduleGroupSegmentBase@details@Concurrency@@IAE_NXZ 0x76EAD0 - __clrfp 0x76EB6A - __statfp 0x76FE5B - __isindst 0x770D20 - __trandisp1 0x770D87 - __trandisp1 0x770F20 - __startTwoArgErrorHandling 0x772133 - __msize 0x772170 - ___ascii_strnicmp 0x773DD9 - ___free_lconv_num 0x778B3B - ___initconout 0x77BBF0 - __FindPESection 0x77BD00 - __ValidateImageBase 0x77BDA0 - __alldvrm 0x77BE80 - __allrem ../capa/tests/data/1195d0d18be9362fb8dd9e1738404c9d.exe_ IDA found 0 lib funcs in vcseh found 2 library functions 0x4091C0 - __allmul 0x409240 - __aullshr ../capa/tests/data/152d4c9f63efb332ccb134c6953c0104.exe_ no IDA data for ../capa/tests/data/152d4c9f63efb332ccb134c6953c0104.exe_ found 14 library functions 0x140001260 - _cfltcvt_init 0x1400012A0 - _cfltcvt_init 0x140002550 - ? 0x140004C80 - ?GetRootCollection@ContextBase@details@Concurrency@@QEAAPEAV_TaskCollectionBase@23@XZ 0x14000CCE0 - ? 0x140011EA0 - __CxxQueryExceptionSize 0x14001A538 - ??1InitialThreadParam@UMSFreeVirtualProcessorRoot@details@Concurrency@@QEAA@XZ 0x140036D6C - ??1InitialThreadParam@UMSFreeVirtualProcessorRoot@details@Concurrency@@QEAA@XZ 0x140036D8C - ??1InitialThreadParam@UMSFreeVirtualProcessorRoot@details@Concurrency@@QEAA@XZ 0x14003AA90 - ?add_ref@?$message@W4agent_status@Concurrency@@@Concurrency@@QEAAJXZ 0x1400493F8 - atexit 0x140049470 - __CxxSetUnhandledExceptionFilter 0x1400495A0 - _IsNonwritableInCurrentImage 0x140049DD8 - __GSHandlerCheck WARNING:viv_utils.flirt:conflicting names: 0x4014d0: ['??0DNameNode@@IAE@XZ', '?'] ../capa/tests/data/1d8fd13c890060464019c0f07b928b1a.exe_ IDA found 0 lib funcs in vcseh found 0 library functions ../capa/tests/data/203bd48bcc18434314ad60f4c8bc21e3d3422eb0624b22b827410f9bc63b4082.exe_ IDA found 244 lib funcs in vc32rtf found 95 library functions 0x40137E - ??2@YAPAXI@Z 0x4013FE - _fast_error_exit 0x401594 - ? 0x4016A4 - ??0exception@std@@QAE@ABQBDH@Z 0x40170E - ?_Tidy@exception@std@@AAEXXZ 0x40172C - ??4exception@std@@QAEAAV01@ABV01@@Z 0x401793 - ??0exception@std@@QAE@ABV01@@Z 0x4017F4 - __onexit_nolock 0x4018DB - __onexit 0x401917 - _atexit 0x40192E - _malloc 0x4019D1 - __callnewh 0x4019F9 - __CxxThrowException@8 0x401A45 - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x401AC0 - ___crtExitProcess 0x401AD8 - __lockexit 0x401AE1 - __unlockexit 0x401B1D - __initterm_e 0x401B41 - __cinit 0x401D18 - _exit 0x401D2E - __exit 0x401D44 - __cexit 0x401D62 - __amsg_exit 0x401D80 - __GET_RTERRMSG 0x401F55 - __FF_MSGBANNER 0x401F8E - __XcptFilter 0x402137 - __setenvp 0x402213 - _parse_cmdline 0x4023AD - __setargv 0x402468 - ___crtGetEnvironmentStringsA 0x4024FF - __ioinit 0x4027D6 - __mtterm 0x4028B5 - __unlockexit 0x4028C7 - __getptd_noexit 0x40295A - __freefls@4 0x402A74 - __unlockexit 0x402A89 - __mtinit 0x402C04 - __heap_init 0x402C90 - __except_handler4 0x402E1F - ___security_init_cookie 0x402EC2 - _strcpy_s 0x402F30 - _strlen 0x402FBB - _free 0x4030F8 - __malloc_crt 0x40313D - __calloc_crt 0x403189 - __realloc_crt 0x4031D7 - __msize 0x40320A - __get_errno_from_oserr 0x40324C - __errno 0x40325F - __mtinitlocks 0x403300 - __unlock 0x4033D9 - __lock 0x403456 - __initp_misc_winsig 0x403474 - _siglookup 0x4034B8 - _raise 0x403688 - __call_reportfault 0x4037D6 - __invalid_parameter 0x403803 - __invalid_parameter_noinfo 0x403813 - __initp_misc_cfltcvt_tab 0x403840 - __ValidateImageBase 0x403880 - __FindPESection 0x403B6D - _wcsncpy_s 0x403C3A - _wcslen 0x403CF7 - ??0_LocaleUpdate@@QAE@PAUlocaleinfo_struct@@@Z 0x403D7E - ?x_ismbbtype_l@@YAHPAUlocaleinfo_struct@@IHH@Z 0x403DD1 - __ismbblead 0x403DE9 - ?CPtoLCID@@YAHH@Z 0x403E18 - ?setSBCS@@YAXPAUthreadmbcinfostruct@@@Z 0x403E7C - ?setSBUpLow@@YAXPAUthreadmbcinfostruct@@@Z 0x40400C - ___updatetmbcinfo 0x4040A7 - __unlockexit 0x4040B0 - ?getSystemCP@@YAHH@Z 0x404315 - __setmbcp 0x404476 - __unlockexit 0x4044AF - ___initmbctable 0x4044CD - ___addlocaleref 0x40455C - ___removelocaleref 0x4045F5 - ___freetlocinfo 0x40478D - ___updatetlocinfo 0x404810 - __local_unwind4 0x404962 - __calloc_impl 0x4049E4 - _realloc 0x404A91 - _abort 0x404AD0 - ? 0x404E31 - __freea 0x404E60 - _memset 0x404EE3 - ?__crtLCMapStringA_stat@@YAHPAUlocaleinfo_struct@@KKPBDHPADHHH@Z 0x4050CA - ___crtLCMapStringA 0x405110 - ?__crtGetStringTypeA_stat@@YAHPAUlocaleinfo_struct@@KPBDHPAGHHH@Z 0x4051F7 - ___crtGetStringTypeA 0x4055AE - ___free_lconv_num 0x405A10 - __alloca_probe_16 0x405B70 - _strcspn 0x405BC0 - _strpbrk 0x405C00 - ___ascii_strnicmp ../capa/tests/data/2055994ff75b4309eee3a49c5749d306.exe_ IDA found 0 lib funcs in vcseh found 0 library functions ../capa/tests/data/2a584dfc657348d164274a12bff9bbd8.exe_ IDA found 849 lib funcs in vc32rtf found 341 library functions 0x401DE0 - ?length@?$char_traits@D@std@@SAIPBD@Z 0x401FB1 - ? 0x401FCD - ??1locale@std@@QAE@XZ 0x401FE5 - ?c_str@locale@std@@QBEPBDXZ 0x401FFC - ?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z 0x4020D7 - ?_Tidy@?$ctype@D@std@@IAEXXZ 0x4021B7 - ?do_widen@?$ctype@D@std@@MBEDD@Z 0x4021C1 - ?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z 0x4021E0 - ?do_narrow@?$ctype@D@std@@MBEDDD@Z 0x4021EA - ?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z 0x402254 - ?message@error_code@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ 0x402274 - ??8error_condition@std@@QBE_NABV01@@Z 0x402293 - ?default_error_condition@error_category@std@@UBE?AVerror_condition@2@H@Z 0x4022A5 - ?equivalent@error_category@std@@UBE_NHABVerror_condition@2@@Z 0x4022C6 - ?equivalent@error_category@std@@UBE_NABVerror_code@2@H@Z 0x402497 - ?default_error_condition@_System_error_category@std@@UBE?AVerror_condition@2@H@Z 0x402595 - ? 0x40BE72 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z 0x40BE98 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z 0x40BF3F - ? 0x40BF45 - ? 0x40BF4E - ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x40C19B - ? 0x40C1C1 - ? 0x40C1E7 - ? 0x40C3BC - ? 0x40C3CC - ? 0x40C671 - ?underflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x40CA78 - ?setbuf@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAD_J@Z 0x40CAC6 - ?sync@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x40CBC5 - ?_Assign_rv@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEX$$QAV12@@Z 0x40CD5D - ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z 0x40CE52 - ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z 0x40CED4 - ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEX_NI@Z 0x40D254 - ?_Reset_back@?$basic_filebuf@DU?$char_traits@D@std@@@std@@AAEXXZ 0x40D27A - ? 0x40D294 - ?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z 0x40D2B9 - ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0x40D332 - ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z 0x40D380 - ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@I@Z 0x40D450 - ?_Inside@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE_NPBD@Z 0x40D5D6 - ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXII@Z 0x40DAB7 - ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z 0x40DBFE - ??1_Fac_node@std@@QAE@XZ 0x40DC37 - ??1_Locimp@locale@std@@MAE@XZ 0x40DC62 - ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z 0x40DCB6 - ??_G_Locimp@locale@std@@MAEPAXI@Z 0x40DCD5 - ?_Facet_Register@std@@YAXPAV_Facet_base@1@@Z 0x40DD7F - ?_Locimp_dtor@_Locimp@locale@std@@CAXPAV123@@Z 0x40DE23 - ?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z 0x40DE45 - ?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z 0x40DE64 - ?_Setgloballocale@locale@std@@CAXPAX@Z 0x40DE8C - __Deletegloballocale 0x40DED7 - ?_Callfns@ios_base@std@@AAEXW4event@12@@Z 0x40DEFC - ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z 0x40DF39 - ?_Tidy@ios_base@std@@AAEXXZ 0x40E0A4 - ??0_Init_locks@std@@QAE@XZ 0x40E0D2 - ??0_Lockit@std@@QAE@H@Z 0x40E12D - ??1_Lockit@std@@QAE@XZ 0x40E227 - __Getctype 0x40E4BA - ?_Atexit@@YAXP6AXXZ@Z 0x40E4F6 - __Mtxinit 0x40E5D2 - ??3@YAXPAX@Z 0x40E6E7 - __itoa 0x40E712 - __ultoa 0x40E72A - _xtoa@16 0x40E7AA - ??0exception@std@@QAE@ABQBD@Z 0x40E7CF - ??0exception@std@@QAE@ABQBDH@Z 0x40E7EA - ??0exception@std@@QAE@ABV01@@Z 0x40E870 - ?_Copy_str@exception@std@@AAEXPBD@Z 0x40E8AE - ?_Tidy@exception@std@@AAEXXZ 0x40E8E0 - ? 0x40EF41 - _free 0x40EFEC - ___endstdio 0x40F019 - __lock_file 0x40F058 - __lock_file2 0x40F088 - __unlock_file 0x40F0C2 - __unlock_file2 0x40F2D1 - _wcsncpy 0x40F3EC - __fseeki64_nolock 0x40F5F7 - __flushall 0x40F600 - _fflush 0x40F659 - _flsall 0x40F853 - ??0_LocaleUpdate@@QAE@PAUlocaleinfo_struct@@@Z 0x40F9D1 - _isdigit 0x40F9FC - _islower 0x40FA27 - _isupper 0x40FA52 - ___onexitinit 0x40FB7D - _atexit 0x40FB92 - _fsetpos 0x40FBCB - __get_printf_count_output 0x40FC8F - _setvbuf 0x40FD9A - _rand 0x40FDBB - _srand 0x40FF25 - ___report_rangecheckfailure 0x410001 - __itow 0x41002C - _xtow@16 0x41008D - _memcpy_s 0x410265 - _fwrite 0x41056F - ??8type_info@@QBE_NABV0@@Z 0x4105AC - __fclose_nolock 0x410618 - _fclose 0x41068F - ??2@YAPAXI@Z 0x4106E0 - ? 0x410870 - ? 0x410EC0 - _strlen 0x410F4B - __CxxThrowException@8 0x410FAE - __EH_epilog3 0x410FD1 - __EH_prolog3 0x411004 - __EH_prolog3_GS 0x41103A - __EH_prolog3_catch 0x411070 - ?CatchGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUCatchGuardRN@@PAX2@Z 0x411140 - ?_CallCatchBlock2@@YAPAXPAUEHRegistrationNode@@PBU_s_FuncInfo@@PAXHK@Z 0x4111A0 - ? 0x41127E - ?_GetRangeOfTrysToCheck@@YAPBU_s_TryBlockMapEntry@@PBU_s_FuncInfo@@HHPAI1@Z 0x411383 - __CreateFrameInfo 0x4113FD - __IsExceptionObjectToBeDestroyed 0x41145C - __fpmath 0x4114D3 - _setlocale 0x4117E8 - __mtinitlocks 0x411821 - __unlock 0x411836 - ___DestructExceptionObject 0x411B8D - ?ExFilterRethrow@@YAHPAU_EXCEPTION_POINTERS@@@Z 0x411BDA - ?FindHandler@@YAXPAUEHExceptionRecord@@PAUEHRegistrationNode@@PAU_CONTEXT@@PAXPBU_s_FuncInfo@@EH1@Z 0x411F77 - ?FindHandlerForForeignException@@YAXPAUEHExceptionRecord@@PAUEHRegistrationNode@@PAU_CONTEXT@@PAXPBU_s_FuncInfo@@HH1@Z 0x412093 - ?IsInExceptionSpec@@YAEPAUEHExceptionRecord@@PBU_s_ESTypeList@@@Z 0x41212C - ___AdjustPointer 0x412151 - ___BuildCatchObject 0x4121DF - ___BuildCatchObjectHelper 0x4123A1 - ___FrameUnwindFilter 0x4123EF - ? 0x4124C8 - ___InternalCxxFrameHandler 0x4125A9 - ___TypeMatch 0x412610 - __fseek_nolock 0x412722 - __wfsopen 0x4127EC - ____lc_locale_name_func 0x412868 - ____lc_locale_name_func 0x41288E - ____lc_locale_name_func 0x4128B6 - ___init_ctype 0x412C4E - ?__crtLCMapStringA_stat@@YAHPAUlocaleinfo_struct@@PB_WKPBDHPADHHH@Z 0x412E98 - __freea 0x412EFE - __malloc_crt 0x412F45 - __realloc_crt 0x412F8F - __set_abort_behavior 0x412FAE - _abort 0x413000 - _memset 0x413120 - _strcspn 0x413166 - ___crtFlsAlloc 0x4131E4 - ___crtGetShowWindowMode 0x413207 - ___crtInitializeCriticalSectionEx 0x413235 - ___crtIsPackagedApp 0x41351C - ___crtTerminateProcess 0x413531 - ___crtUnhandledException 0x413547 - ___doserrno 0x41355A - __dosmaperr 0x41357B - __errno 0x41358E - __get_errno_from_oserr 0x4135CF - ?x_ismbbtype_l@@YAHPAUlocaleinfo_struct@@IHH@Z 0x413629 - __ismbblead 0x41363F - _wcslen 0x41379B - _tolower 0x413878 - _memcmp 0x414FF0 - _GetTableIndexFromLcid 0x415073 - ___crtDownlevelLCIDToLocaleName 0x4150EF - ___crtDownlevelLocaleNameToLCID 0x415119 - ___crtEnumLocalesProc@4 0x41512D - ___crtEnumSystemLocalesEx 0x41516A - ___crtGetLocaleInfoEx 0x41523B - ___wcsnicmp_ascii 0x4152A9 - ___crtLCMapStringW 0x4154CC - __invalid_parameter 0x4154F7 - __invalid_parameter_noinfo 0x415532 - __flsbuf 0x415681 - __fileno 0x415710 - __except_handler4 0x4158A4 - __ioinit 0x415B60 - __aulldvrm 0x415C4A - ___isa_available_init 0x415DC3 - ?wcstoxl@@YAKPB_WPAPB_WHH@Z 0x415FA4 - ? 0x415FBC - __heap_init 0x415FD1 - __fcloseall 0x4160A2 - ___crtExitProcess 0x4160B8 - __amsg_exit 0x4160D4 - __c_exit 0x4160E3 - __cexit 0x416176 - __exit 0x4161C2 - __initterm 0x4161F8 - __initterm_e 0x416223 - __unlockexit 0x41622C - ? 0x41635B - _exit 0x41636F - __callnewh 0x4163A2 - __FF_MSGBANNER 0x4165BC - __getbuf 0x416602 - __ftelli64 0x416BC1 - __commit 0x416D99 - __write_nolock 0x4175FE - __filbuf 0x41771F - ___addlocaleref 0x4177B4 - ___freetlocinfo 0x41790E - ___removelocaleref 0x4179AE - ___updatetlocinfo 0x417A79 - ___initmbctable 0x417AD1 - ?getSystemCP@@YAHH@Z 0x417B3F - ?setSBCS@@YAXPAUthreadmbcinfostruct@@@Z 0x417B9E - ?setSBUpLow@@YAXPAUthreadmbcinfostruct@@@Z 0x417D30 - ___updatetmbcinfo 0x417DCD - __unlockexit 0x417DD6 - __setmbcp 0x417F48 - __unlockexit 0x417F7E - __setmbcp_nolock 0x418169 - __isctype_l 0x41821A - __freefls@4 0x41833A - __unlockexit 0x418367 - __getptd_noexit 0x418477 - __unlockexit 0x41856E - ___copy_locale_name 0x4185D2 - ___lc_lctowcs 0x418640 - ___lc_wcstolc 0x41876C - __copytlocinfo_nolock 0x418798 - __expandlocale 0x418ACE - __wsetlocale 0x418C4B - __wsetlocale_get_all 0x419041 - __wsetlocale_set_cat 0x4193EB - __msize 0x41941C - __ftbuf 0x4194F3 - __output_l 0x41A073 - _write_char 0x41A0BB - _write_multi_char 0x41A0E7 - _write_string 0x41A15F - __freebuf 0x41A18F - ___getlocaleinfo 0x41A37D - __decomp 0x41A44F - __set_exp 0x41A47E - __errcode 0x41A756 - __raise_exc 0x41A777 - __raise_exc_ex 0x41AA5C - __set_errno_from_matherr 0x41AB9F - __clrfp 0x41ABB0 - __ctrlfp 0x41AC33 - __statfp 0x41AD8F - __close_nolock 0x41AE29 - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x41AE78 - __XcptFilter 0x41B087 - _parse_cmdline 0x41B331 - ___security_init_cookie 0x41B5B8 - ?unexpected@@YAXXZ 0x41B5DC - __cfltcvt 0x41B5FD - __cfltcvt_l 0x41B683 - __cftoa_l 0x41B9DF - __cftoe 0x41BB4E - __cftoe_l 0x41BC1C - __cftof2_l 0x41BD08 - __cftof_l 0x41BDC9 - __cftog_l 0x41BEC8 - __cropzeros 0x41BED9 - __cropzeros_l 0x41C038 - __positive 0x41C07A - __setdefaultprecision 0x41C0A1 - __initp_misc_cfltcvt_tab 0x41C31D - __wcstombs_l_helper 0x41C584 - __wcstombs_s_l 0x41C64F - ? 0x41C780 - __local_unwind4 0x41C8D2 - __ftell_nolock 0x41CD51 - __lseek_nolock 0x41CDF8 - __wopenfile 0x41D096 - _calloc 0x41D132 - ?__crtGetStringTypeA_stat@@YAHPAUlocaleinfo_struct@@KPBDHPAGHH@Z 0x41D270 - __alloca_probe_16 0x41D29C - _realloc 0x41D347 - __calloc_impl 0x41D3CE - __initp_misc_winsig 0x41D3EA - _raise 0x41D5A5 - _siglookup 0x41D815 - __isleadbyte_l 0x41D84F - _isleadbyte 0x41D860 - _wcsnlen 0x41DA50 - __startTwoArgErrorHandling 0x41DC90 - __FindPESection 0x41DDA0 - __ValidateImageBase 0x41DDD1 - _iswctype 0x41DE27 - __wchartodigit 0x41DFC6 - ___crt_atoflt_l 0x41E0F8 - __atoflt_l 0x41E11D - _wcscat_s 0x41E430 - __alloca_probe 0x41E56F - __read_nolock 0x41ED8E - __alloc_osfhnd 0x41EF37 - __free_osfhnd 0x41EFBD - __get_osfhandle 0x41F024 - __set_osfhnd 0x41F0A6 - __unlock_fhandle 0x41F0CC - __mbtowc_l 0x41F1C1 - _mbtowc 0x41F1D9 - __putwch_nolock 0x41F318 - ___init_monetary 0x41F6B9 - ___free_lconv_num 0x41F926 - ___free_lc_time 0x420515 - _wcscmp 0x420553 - _wcscspn 0x42059E - _wcsncmp 0x4205D4 - _wcspbrk 0x420616 - _GetLocaleNameFromDefault 0x420703 - _GetLocaleNameFromLanguage 0x42074D - _GetPrimaryLen 0x42099F - _LanguageEnumProcEx@12 0x420A52 - _ProcessCodePage 0x420B33 - _TranslateName 0x420B9D - ___get_qualified_locale 0x420D61 - _CountryEnumProc@4 0x420E11 - _GetLcidFromCountry 0x420E51 - _GetLcidFromLangCountry 0x420ECE - _GetLcidFromLanguage 0x420F27 - _GetPrimaryLen 0x421221 - _LcidFromHexString 0x421270 - _ProcessCodePage 0x4212FB - _TestDefaultCountry 0x42131D - _TestDefaultLanguage 0x421387 - ___get_qualified_locale_downlevel 0x421786 - ?__crtGetLocaleInfoA_stat@@YAHPAUlocaleinfo_struct@@PB_WKPADH@Z 0x4219F0 - _strrchr 0x421BD7 - ___dtold 0x421C9F - __fltout2 0x421D30 - __alldvrm 0x421E10 - __aullshr 0x421E2F - __controlfp_s 0x421E95 - ___createFile 0x421FE6 - __wsopen_nolock 0x4235A4 - ___strgtold12_l 0x423D63 - ___initconout 0x423F4C - _$I10_OUTPUT 0x424920 - ___hw_cw_sse2 0x4249C9 - __control87 0x424CCB - __hw_cw 0x424DE8 - __chsize_nolock 0x424FC8 - __setmode_nolock 0x425095 - ___mtold12 0x425280 - ___ascii_strnicmp 0x425430 - __ftoui3 ../capa/tests/data/2a7429d60040465f9bd27bbae2beef88.exe_ IDA found 0 lib funcs in vcseh found 0 library functions ../capa/tests/data/2b8bec5bcb1777eaa155d832f7afc797.exe_ IDA found 0 lib funcs in vcseh found 0 library functions ../capa/tests/data/2d3edc218a90f03089cc01715a9f047f.exe_ IDA found 31 lib funcs in vc32rtf found 9 library functions 0x405B37 - _atexit 0x405E84 - ? 0x405F7C - ??_M@YGXPAXIHP6EX0@Z@Z 0x405FDF - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x406090 - __ValidateImageBase 0x4060D0 - __FindPESection 0x4061E8 - __setdefaultprecision 0x406213 - ___security_init_cookie 0x406400 - __EH_prolog ../capa/tests/data/31600ad0d1a7ea615690df111ae36c73.exe_ IDA found 10 lib funcs in vc32rtf IDA found 10 lib funcs in vc32mfc found 7 library functions 0x401DC0 - ? 0x401F20 - ? 0x402190 - ? 0x402588 - __onexit 0x4025B4 - _atexit 0x4025C6 - _WinMainCRTStartup 0x402736 - __setdefaultprecision ../capa/tests/data/31bd8dd48ac0de3d4da340bf29f4d280.exe_ IDA found 0 lib funcs in vcseh found 0 library functions ../capa/tests/data/321338196a46b600ea330fc5d98d0699.exe_ IDA found 436 lib funcs in vc32_14 IDA found 666 lib funcs in vc32ucrt found 63 library functions 0x40535C - ? 0x40B734 - ? 0x42C010 - ?do_widen@?$ctype@D@std@@MBEDD@Z 0x42C050 - ?do_narrow@?$ctype@D@std@@MBEDDD@Z 0x42C0F0 - ?default_error_condition@error_category@std@@UBE?AVerror_condition@2@H@Z 0x42D460 - _feof 0x42D470 - _ferror 0x42D480 - __fileno 0x42D8B3 - ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z 0x42DAAD - ?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z 0x42DAEA - ?_Setgloballocale@locale@std@@CAXPAX@Z 0x42DB7C - ??$_Fgetc@D@std@@YA_NAADPAU_iobuf@@@Z 0x42E1CA - ? 0x42E3A1 - ? 0x42E3D0 - ?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z 0x42E599 - ? 0x42E824 - ? 0x42E829 - ? 0x42F1F3 - __Mtxinit 0x42F6FA - ?_Atexit@@YAXP6AXXZ@Z 0x42FA04 - __freea 0x42FA70 - ___crtDownlevelLocaleNameToLCID 0x42FE30 - __aullrem 0x42FEB0 - __aulldiv 0x42FF20 - __alldiv 0x42FFD0 - __allrem 0x430307 - _atexit 0x4303F0 - __alloca_probe_16 0x430420 - __allmul 0x430575 - ___report_rangecheckfailure 0x43092F - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x430C9E - ?_CallCatchBlock2@@YAPAXPAUEHRegistrationNode@@PBU_s_FuncInfo@@PAXHK@Z 0x430E5A - ?CatchGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUCatchGuardRN@@PAX2@Z 0x43114D - ___AdjustPointer 0x433030 - _ValidateLocalCookies 0x434140 - __local_unwind4 0x434825 - __invalid_parameter_noinfo 0x436AA5 - __dosmaperr 0x436DE0 - _strlen 0x437B7D - __cexit 0x437BC8 - _exit 0x43FE35 - _fgetpos 0x43FE90 - _fsetpos 0x440540 - _strcspn 0x443D74 - _free 0x44779D - __strnicoll 0x44797D - __initp_misc_winsig 0x448755 - __get_printf_count_output 0x4497FD - __clrfp 0x449897 - __statfp 0x44A8F0 - __startTwoArgErrorHandling 0x44BF27 - __ismbblead 0x44C81F - ___free_lconv_num 0x44EF40 - ___ascii_strnicmp 0x451650 - _strpbrk 0x4517DC - __msize 0x4519C3 - ___initconout 0x4520F0 - __FindPESection 0x452240 - __aulldvrm 0x4522E0 - __allshl 0x452300 - __aullshr 0x452320 - __alldvrm 0x452600 - _strchr ../capa/tests/data/3265b2b0afc6d2ad0bdd55af8edb9b37.exe_ IDA found 679 lib funcs in vc32_14 IDA found 831 lib funcs in vc32ucrt found 336 library functions 0x40112A - ??__E?s_cookie@Security@details@Concurrency@@2KA@@YAXXZ 0x40235E - ? 0x402742 - ??$_Fgetc@D@std@@YA_NAADPAU_iobuf@@@Z 0x403EF9 - ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@$$QAV01@@Z 0x40427B - ? 0x405CE7 - ? 0x406355 - ? 0x406544 - ? 0x40703D - ?_Tidy@?$ctype@D@std@@IAEXXZ 0x408A1F - ?default_error_condition@error_category@std@@UBE?AVerror_condition@2@H@Z 0x408A5E - ? 0x408A8D - ?do_narrow@?$ctype@D@std@@MBEDDD@Z 0x408A97 - ?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z 0x408B68 - ?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z 0x408B79 - ?do_widen@?$ctype@D@std@@MBEDD@Z 0x408B83 - ?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z 0x409D00 - ? 0x40AAF9 - ? 0x40AAFE - ? 0x40ADD1 - ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x40ADF6 - ?underflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x40B35A - _wmemset 0x40C044 - ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x40C1EB - ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x40D91C - ??4?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@QAEAAV01@D@Z 0x40E53F - ? 0x415971 - ?cancel_current_task@Concurrency@@YAXXZ 0x415E13 - ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z 0x416010 - ?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z 0x41604D - ?_Setgloballocale@locale@std@@CAXPAX@Z 0x416588 - __Thrd_equal 0x41665C - __Thrd_start 0x41758B - ?spfun@std@@YAXAAVios_base@1@_J@Z 0x41770C - __Mtxinit 0x417914 - __freea 0x417995 - ?_Atexit@@YAXP6AXXZ@Z 0x418211 - ___crtDownlevelLocaleNameToLCID 0x4185D0 - _atexit 0x418C30 - __alldiv 0x418CE0 - __allmul 0x4191E0 - __aulldvrm 0x419280 - __alloca_probe_16 0x419518 - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x41984A - ___report_rangecheckfailure 0x419A01 - ? 0x419A16 - ??0_ReaderWriterLock@details@Concurrency@@QAE@XZ 0x419A26 - ??0critical_section@Concurrency@@QAE@XZ 0x419AC9 - ?Block@LockQueueNode@details@Concurrency@@QAEXI@Z 0x419B4F - ?CurrentContext@SchedulerBase@details@Concurrency@@SAPAVContextBase@23@XZ 0x419D16 - ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ 0x419E0F - ?_FlushWriteOwners@_ReaderWriterLock@details@Concurrency@@QAEXXZ 0x419E3D - ?_Initialize@_SpinCount@details@Concurrency@@SAXXZ 0x419E60 - ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ 0x419FA8 - ?_Switch_to_active@critical_section@Concurrency@@AAEXPAX@Z 0x41A122 - ?unlock@critical_section@Concurrency@@QAEXXZ 0x41A256 - ??0TimedSingleWaitBlock@details@Concurrency@@QAE@_N@Z 0x41A285 - ??0WaitAnyBlock@details@Concurrency@@QAE@I_N0@Z 0x41A2AD - ??0WaitBlock@details@Concurrency@@QAE@XZ 0x41A623 - ?Reset@WaitAllBlock@details@Concurrency@@UAE_NXZ 0x41B3BE - ?__CreateTimerQueueTimer@platform@details@Concurrency@@YAHPAPAXPAXP6GX1E@Z1KKK@Z 0x41B7D8 - ?__WaitForThread@platform@details@Concurrency@@YAKPAXK@Z 0x41B82D - ? 0x41B83A - ?DeleteAsyncTimerAndUnloadLibrary@details@Concurrency@@YAXPAU_TP_TIMER@@@Z 0x41B8A0 - ?InitializeCookie@Security@details@Concurrency@@SAKXZ 0x41BA94 - ?UnRegisterAsyncWaitAndUnloadLibrary@details@Concurrency@@YAXPAU_TP_CALLBACK_INSTANCE@@PAU_TP_WAIT@@@Z 0x41BAD9 - ?_Acquire@_NonReentrantLock@details@Concurrency@@QAEXXZ 0x41BCBB - ?CurrentContext@Context@Concurrency@@SAPAV12@XZ 0x41BCC0 - ??0HardwareAffinity@details@Concurrency@@QAE@PAX@Z 0x41BDC5 - ??0SchedulerCore@details@Concurrency@@QAE@XZ 0x41C0EE - ?ApplyAffinityLimits@AffinityRestriction@ResourceManager@details@Concurrency@@QAEXPAU_GROUP_AFFINITY@@@Z 0x41C13C - ?ApplyAffinityRestrictions@ResourceManager@details@Concurrency@@CAXPAU_GROUP_AFFINITY@@@Z 0x41C163 - ?ApplyTo@HardwareAffinity@details@Concurrency@@QAEXPAX@Z 0x41C29A - ?CleanupTopologyInformation@ResourceManager@details@Concurrency@@CAXXZ 0x41C3C2 - ?ComputeDesiredHWThreadsWithExternalThread@SchedulerProxy@details@Concurrency@@QBEIXZ 0x41C70F - ?DesiredHWThreads@SchedulerProxy@details@Concurrency@@QBEIXZ 0x41C728 - ?DestroyAllocatedNodeData@ResourceManager@details@Concurrency@@QAEXPAUSchedulerNode@23@@Z 0x41D34F - ?DynamicRMThreadProc@ResourceManager@details@Concurrency@@CGKPAX@Z 0x41DA84 - ?GetCurrentNodeAndCore@ResourceManager@details@Concurrency@@QAEIPAI@Z 0x41DB92 - ? 0x41DB99 - ?GetFirstExecutionResource@TopologyObject@GlobalNode@details@Concurrency@@UBEPAUITopologyExecutionResource@4@XZ 0x41DBA3 - ?GetFirstNode@ResourceManager@details@Concurrency@@UBEPAUITopologyNode@3@XZ 0x41DBAA - ?GetId@TopologyObject@GlobalNode@details@Concurrency@@UBEIXZ 0x41DBB1 - ?GetNext@TopologyObject@GlobalCore@details@Concurrency@@UBEPAUITopologyExecutionResource@4@XZ 0x41DBC8 - ?GetNext@TopologyObject@GlobalNode@details@Concurrency@@UBEPAUITopologyNode@4@XZ 0x41DBDF - ?GetNextGlobalCore@GlobalNode@details@Concurrency@@QAEPAUGlobalCore@23@PBU423@@Z 0x41DC04 - ?GetNextGlobalNode@ResourceManager@details@Concurrency@@QAEPAUGlobalNode@23@PBU423@@Z 0x41DC74 - ?GetNumaNode@TopologyObject@GlobalNode@details@Concurrency@@UBEKXZ 0x41E16D - ?InitializeSystemInformation@ResourceManager@details@Concurrency@@CAX_N@Z 0x41E399 - ?MinVprocHWThreads@SchedulerProxy@details@Concurrency@@QBEIXZ 0x41E7A8 - ?PreProcessStaticAllocationData@ResourceManager@details@Concurrency@@AAEXXZ 0x41EEB6 - ?ReleaseCoresOnExistingSchedulers@ResourceManager@details@Concurrency@@AAEIPAVSchedulerProxy@23@II@Z 0x41EFFF - ?Remove@?$List@VSchedulerProxy@details@Concurrency@@VCount@CollectionTypes@23@@details@Concurrency@@QAEXPAVSchedulerProxy@23@@Z 0x41F035 - ?RemoveExecutionResource@ResourceManager@details@Concurrency@@QAEXPAVExecutionResource@23@@Z 0x41F3D0 - ?ResetGlobalAllocationData@ResourceManager@details@Concurrency@@AAEXXZ 0x41F427 - ?RetrieveSystemVersionInformation@ResourceManager@details@Concurrency@@CAXXZ 0x41F6CD - ?SafeReference@ResourceManager@details@Concurrency@@AAE_NXZ 0x41FA6A - ?SubscribeCurrentThread@ResourceManager@details@Concurrency@@QAEPAVExecutionResource@23@PAVSchedulerProxy@23@@Z 0x41FD98 - ??0QuickBitSet@details@Concurrency@@QAE@I@Z 0x41FDDE - ??0SchedulerBase@details@Concurrency@@QAE@ABVSchedulerPolicy@2@@Z 0x420236 - ??1NumaInformation@SchedulerBase@details@Concurrency@@QAE@XZ 0x420257 - ??1ReferenceCountedQuickBitSet@details@Concurrency@@QAE@XZ 0x420777 - ?AddTail@?$List@VWaitNode@SchedulerBase@details@Concurrency@@VNoCount@CollectionTypes@34@@details@Concurrency@@QAEXPAVWaitNode@SchedulerBase@23@@Z 0x420890 - ?AllocateSegment@CacheLocalScheduleGroup@details@Concurrency@@MAEPAVScheduleGroupSegmentBase@23@PAVSchedulingRing@23@PAVlocation@3@@Z 0x420917 - ?Attach@SchedulerBase@details@Concurrency@@UAEXXZ 0x420B22 - ?CheckStaticConstruction@SchedulerBase@details@Concurrency@@CAXXZ 0x420D14 - ?ComputeSafePointCommitVersion@SchedulerBase@details@Concurrency@@AAEKXZ 0x420E2F - ?CreateWithoutInitializing@SchedulerBase@details@Concurrency@@SAPAV123@ABVSchedulerPolicy@3@@Z 0x420ECB - ?Dequeue@?$SQueue@VInternalContextBase@details@Concurrency@@@details@Concurrency@@QAEPAVInternalContextBase@23@XZ 0x420EE8 - ? 0x420FEA - ?Fill@QuickBitSet@details@Concurrency@@QAEXXZ 0x421201 - ?FindScheduleGroupSegment@SchedulingRing@details@Concurrency@@AAEPAVScheduleGroupSegmentBase@23@HHPAHPAV?$ListArray@VScheduleGroupSegmentBase@details@Concurrency@@@23@@Z 0x42122C - ?FindVirtualProcessor@SchedulingNode@details@Concurrency@@QAEPAVVirtualProcessor@23@HHPAH@Z 0x421363 - ?FoundBlockedContexts@SchedulerBase@details@Concurrency@@AAE_NXZ 0x421454 - ?GetAnonymousScheduleGroupSegment@SchedulerBase@details@Concurrency@@QAEPAVScheduleGroupSegmentBase@23@XZ 0x4215B0 - ?GetExternalContext@SchedulerBase@details@Concurrency@@AAEPAVExternalContextBase@23@_N@Z 0x42175A - ?GetNextPriorityObject@SchedulerBase@details@Concurrency@@QAEPAUBoostedObject@23@XZ 0x4217F6 - ?GetNextSchedulingRing@SchedulerBase@details@Concurrency@@QAEPAVSchedulingRing@23@XZ 0x421817 - ?GetNextValidSchedulingRingIndex@SchedulerBase@details@Concurrency@@AAEHH@Z 0x421839 - ?GetNextVirtualProcessor@SchedulingNode@details@Concurrency@@QAEPAVVirtualProcessor@23@PAHH@Z 0x4218E5 - ?GetReservedContext@SchedulerBase@details@Concurrency@@QAEPAVInternalContextBase@23@XZ 0x4218FC - ? 0x42198F - ?GetValidSchedulingRingIndex@SchedulerBase@details@Concurrency@@AAEHH@Z 0x4219B2 - ?Grow@QuickBitSet@details@Concurrency@@QAEXI@Z 0x421AB5 - ? 0x421AE5 - ?Id@SchedulerBase@details@Concurrency@@UBEIXZ 0x422185 - ?InvokeOnSafePoint@SchedulerBase@details@Concurrency@@AAEXPAVSafePointInvocation@23@@Z 0x422219 - ? 0x422243 - ?MailChore@FairScheduleGroup@details@Concurrency@@UAE?AVSlot@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@23@PAV_UnrealizedChore@23@PAVlocation@3@PAPAVScheduleGroupSegmentBase@23@@Z 0x422254 - ?MarkSafePoint@SchedulerBase@details@Concurrency@@QAE_NPAVSafePointMarker@23@@Z 0x422306 - ?OneShotStaticConstruction@SchedulerBase@details@Concurrency@@CAXXZ 0x42231A - ?OneShotStaticDestruction@SchedulerBase@details@Concurrency@@CAXXZ 0x4224F7 - ?PhaseOneShutdown@SchedulerBase@details@Concurrency@@AAEXXZ 0x42260A - ?PublishNewDataVersion@SchedulerBase@details@Concurrency@@AAEKXZ 0x422622 - ?Push@?$LockFreePushStack@VContextNode@SchedulerBase@details@Concurrency@@@details@Concurrency@@QAEXPAVContextNode@SchedulerBase@23@@Z 0x4226AD - ?Reallocate@QuickBitSet@details@Concurrency@@IAEXI@Z 0x42283D - ?ReleaseExternalContext@SchedulerBase@details@Concurrency@@AAEXPAVExternalContextBase@23@@Z 0x4228E8 - ?ReleaseRealizedChore@SchedulerBase@details@Concurrency@@QAEXPAVRealizedChore@23@@Z 0x4229A2 - ?ReleaseSuspendedVirtualProcessors@SchedulerBase@details@Concurrency@@AAEXJ@Z 0x4229C0 - ?Remove@?$List@UBoostedObject@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUBoostedObject@23@@Z 0x422BE4 - ?RemoveHead@?$List@UBoostedObject@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEPAUBoostedObject@23@XZ 0x422C0C - ?RemoveHead@?$List@VWaitNode@SchedulerBase@details@Concurrency@@VNoCount@CollectionTypes@34@@details@Concurrency@@QAEPAVWaitNode@SchedulerBase@23@XZ 0x422C64 - ?RemovePrioritizedObject@SchedulerBase@details@Concurrency@@QAEXPAUBoostedObject@23@@Z 0x422CA0 - ?RemoveScheduleGroup@SchedulerBase@details@Concurrency@@QAEXPAVScheduleGroupBase@23@@Z 0x422CB8 - ?RemoveSegments@FairScheduleGroup@details@Concurrency@@MAEXXZ 0x422E4A - ?SafeFastCurrentContext@SchedulerBase@details@Concurrency@@SAPAVContextBase@23@XZ 0x422E66 - ?SafeReference@SchedulerBase@details@Concurrency@@AAE_NXZ 0x422F16 - ?SetNextSchedulingRing@SchedulerBase@details@Concurrency@@QAEXPAVSchedulingRing@23@@Z 0x422F3B - ?SpinUntilBitsReset@details@Concurrency@@YAJPCJJ@Z 0x423363 - ?ThrottlerDispatchBridge@SchedulerBase@details@Concurrency@@CGXPAU_TP_CALLBACK_INSTANCE@@PAXPAU_TP_TIMER@@@Z 0x4233BC - ?ThrottlingTime@SchedulerBase@details@Concurrency@@QAEKK@Z 0x4234E8 - ?TriggerCommitSafePoints@SchedulerBase@details@Concurrency@@QAEXPAVSafePointMarker@23@@Z 0x42351D - ?TypeOfWorkPending@SchedulerBase@details@Concurrency@@MAE?AW4PendingWorkType@123@XZ 0x42354B - ?UpdateCommitVersion@SchedulerBase@details@Concurrency@@AAEKK@Z 0x423593 - ?UpdatePendingVersion@SchedulerBase@details@Concurrency@@AAEKXZ 0x423723 - ?_Assign@location@Concurrency@@QAEXABV12@@Z 0x423758 - ??0CancellationBeaconStack@ContextBase@details@Concurrency@@QAE@XZ 0x423843 - ? 0x42385A - ??1?$WorkStealingQueue@V_UnrealizedChore@details@Concurrency@@V_CriticalNonReentrantLock@23@@details@Concurrency@@QAE@XZ 0x4238B4 - ??1ContextBase@details@Concurrency@@UAE@XZ 0x4238E2 - ? 0x423B89 - ?AddTail@?$List@UListEntry@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUListEntry@23@@Z 0x423C83 - ?CancelStealers@ContextBase@details@Concurrency@@QAEXPAV_TaskCollectionBase@23@@Z 0x423DF7 - ?ClearAliasTable@ContextBase@details@Concurrency@@QAEXXZ 0x423E36 - ?ClearContextTls@ContextBase@details@Concurrency@@AAEXXZ 0x423EC6 - ?DeleteElements@?$ListArray@VWorkQueue@details@Concurrency@@@details@Concurrency@@AAEXPAU_SINGLE_LIST_ENTRY@@@Z 0x424045 - ?EnterCriticalRegionHelper@ContextBase@details@Concurrency@@UAEHXZ 0x42404D - ?EnterHyperCriticalRegionHelper@ContextBase@details@Concurrency@@UAEHXZ 0x424058 - ?ExitCriticalRegionHelper@ContextBase@details@Concurrency@@UAEHXZ 0x424060 - ?ExitHyperCriticalRegionHelper@ContextBase@details@Concurrency@@UAEHXZ 0x4240F5 - ?GetCriticalRegionType@ContextBase@details@Concurrency@@UBE?AW4CriticalRegionType@3@XZ 0x424111 - ?GetScheduleGroup@ContextBase@details@Concurrency@@QBEPAVScheduleGroupBase@23@XZ 0x42422A - ?LockedSetOwningContext@WorkQueue@details@Concurrency@@QAEXPAVContextBase@23@@Z 0x42424D - ?NextList@?$Hash@PAV_TaskCollection@details@Concurrency@@PAV123@@details@Concurrency@@AAEPAUListNode@123@PAH@Z 0x4242CF - ?PopContextFromTls@ContextBase@details@Concurrency@@AAEPAV123@XZ 0x4242ED - ?PushContextToTls@ContextBase@details@Concurrency@@AAEXPAV123@@Z 0x424435 - ?Remove@?$List@UListEntry@details@Concurrency@@VNoCount@CollectionTypes@23@@details@Concurrency@@QAEXPAUListEntry@23@@Z 0x424588 - ?RemoveStealer@ContextBase@details@Concurrency@@QAEXPAV123@@Z 0x424769 - ?TraceContextEvent@ContextBase@details@Concurrency@@IAEXW4ConcRT_EventType@3@EKK@Z 0x424808 - ?_SafeGetParent@_TaskCollectionBase@details@Concurrency@@IAEPAV123@XZ 0x4248E1 - ??0_TaskCollection@details@Concurrency@@AAE@PAV012@_N@Z 0x424A61 - ??1TaskStack@details@Concurrency@@QAE@XZ 0x424C80 - ?AddArbitraryAlias@ContextBase@details@Concurrency@@QAEXPAV_TaskCollection@23@0@Z 0x425078 - ?_CancelDirectAliases@_TaskCollection@details@Concurrency@@AAEX_NPAV123@@Z 0x4257B3 - ?_SetCancelState@_TaskCollection@details@Concurrency@@AAE_NJ@Z 0x4257ED - ?_SweepAbortedChore@_TaskCollection@details@Concurrency@@CA_NPAV_UnrealizedChore@23@PAX@Z 0x4258DB - ??0SchedulerPolicy@Concurrency@@QAA@IZZ 0x4258F9 - ??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z 0x42597C - ??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z 0x42599A - ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z 0x4259D0 - ?_AreConcurrencyLimitsValid@SchedulerPolicy@Concurrency@@CA_NII@Z 0x425B23 - ?_StringFromPolicyKey@SchedulerPolicy@Concurrency@@CAPADI@Z 0x425E4A - ?Remove@ExecutionResource@details@Concurrency@@UAEXPAUIScheduler@3@@Z 0x425EA9 - ?ResetCurrent@ExecutionResource@details@Concurrency@@QAEXXZ 0x425EC5 - ?SetAsCurrent@ExecutionResource@details@Concurrency@@QAEXXZ 0x425EE8 - ??$sign@I@details@Concurrency@@YAII@Z 0x425FC5 - ?Add@MeasuredHistory@HillClimbing@details@Concurrency@@QAEXNI@Z 0x426115 - ?EstablishControlSetting@HillClimbing@details@Concurrency@@AAEXI@Z 0x4261A0 - ?GetHistory@HillClimbing@details@Concurrency@@AAEPAVMeasuredHistory@123@I@Z 0x426214 - ?Mean@MeasuredHistory@HillClimbing@details@Concurrency@@QAENXZ 0x426234 - ?RecommendControlSetting@HillClimbing@details@Concurrency@@AAEII@Z 0x4264C4 - ?Variance@MeasuredHistory@HillClimbing@details@Concurrency@@QAENXZ 0x4269D8 - ?AdjustAllocationIncrease@SchedulerProxy@details@Concurrency@@QBEII@Z 0x426B71 - ?CreateExternalThreadResource@SchedulerProxy@details@Concurrency@@QAEPAVExecutionResource@23@PAUSchedulerNode@23@I@Z 0x426C74 - ?CreateVirtualProcessorRoot@SchedulerProxy@details@Concurrency@@UAEPAVVirtualProcessorRoot@23@PAUSchedulerNode@23@I@Z 0x426EB6 - ?GetCurrentThreadExecutionResource@SchedulerProxy@details@Concurrency@@QAEPAVExecutionResource@23@XZ 0x4273C7 - ?Remove@?$List@VExecutionResource@details@Concurrency@@VCount@CollectionTypes@23@@details@Concurrency@@QAEXPAVExecutionResource@23@@Z 0x427513 - ?RequestInitialVirtualProcessors@SchedulerProxy@details@Concurrency@@UAEPAUIExecutionResource@3@_N@Z 0x427614 - ?SubscribeCurrentThread@SchedulerProxy@details@Concurrency@@UAEPAUIExecutionResource@3@XZ 0x427961 - ?Create@FreeThreadProxyFactory@details@Concurrency@@EAEPAVFreeThreadProxy@23@I@Z 0x427A0A - ?Prepare@?$ThreadProxyFactory@VFreeThreadProxy@details@Concurrency@@@details@Concurrency@@MAEXPAVFreeThreadProxy@23@H@Z 0x427A22 - ?ReclaimProxy@?$ThreadProxyFactory@VFreeThreadProxy@details@Concurrency@@@details@Concurrency@@UAEXPAUIThreadProxy@3@@Z 0x427BE3 - ?Retire@FreeThreadProxyFactory@details@Concurrency@@EAEXPAVFreeThreadProxy@23@@Z 0x428107 - ? 0x428359 - ?ClearQuickCacheSlot@SchedulerBase@details@Concurrency@@QAEXI@Z 0x428A98 - ?SaveRetiredVirtualProcessorStatistics@SchedulerBase@details@Concurrency@@QAEXPAVVirtualProcessor@23@@Z 0x428AD2 - ?SpinUntilClear@QuickBitSet@details@Concurrency@@QBEXI@Z 0x428B1A - ?SpinUntilSet@QuickBitSet@details@Concurrency@@QBEXI@Z 0x428C71 - ? 0x428C7B - ?TraceVirtualProcessorEvent@VirtualProcessor@details@Concurrency@@AAEXW4ConcRT_EventType@3@EKK@Z 0x428CA8 - ?UpdateWorkState@VirtualProcessor@details@Concurrency@@QAEX_N0@Z 0x428D06 - ?Wipe@QuickBitSet@details@Concurrency@@QAEXXZ 0x428D23 - ??0SchedulingNode@details@Concurrency@@QAE@ABVQuickBitSet@12@KPAVSchedulingRing@12@@Z 0x429239 - ?Steal@?$StructuredWorkStealingQueue@VInternalContextBase@details@Concurrency@@V_HyperNonReentrantLock@23@@details@Concurrency@@QAEPAVInternalContextBase@23@_N@Z 0x4292FA - ??0AllocatorBucket@details@Concurrency@@QAE@XZ 0x429361 - ?Alloc@AllocatorBucket@details@Concurrency@@QAEPATAllocationEntry@23@XZ 0x42937A - ?Alloc@SubAllocator@details@Concurrency@@QAEPAXI@Z 0x4293CA - ?Free@AllocatorBucket@details@Concurrency@@QAE_NPATAllocationEntry@23@@Z 0x4293F4 - ?Free@SubAllocator@details@Concurrency@@QAEXPAX@Z 0x4299C7 - ?Cleanup@InternalContextBase@details@Concurrency@@IAEXXZ 0x429D89 - ?GetAndResetOversubscribedVProc@InternalContextBase@details@Concurrency@@QAEPAVVirtualProcessor@23@PAV423@@Z 0x429DC3 - ? 0x429DE3 - ?GetVirtualProcessorId@InternalContextBase@details@Concurrency@@UBEIXZ 0x429F92 - ?IsVirtualProcessorRetired@InternalContextBase@details@Concurrency@@IAE_NXZ 0x42A1CE - ?PrepareToRun@InternalContextBase@details@Concurrency@@MAEXPAVVirtualProcessor@23@@Z 0x42A2AE - ?RemoveFromUse@InternalContextBase@details@Concurrency@@QAEXXZ 0x42AA8D - ??0SchedulingRing@details@Concurrency@@QAE@PAVSchedulerBase@12@H@Z 0x42ABA5 - ?Activate@SchedulingRing@details@Concurrency@@QAEXXZ 0x42AEB8 - ??0Segment@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAE@PAVSchedulerBase@23@ABVQuickBitSet@23@II@Z 0x42B0CC - ??4QuickBitSet@details@Concurrency@@QAEAAV012@$$QAV012@@Z 0x42B4F5 - ?ClearQuickCacheSlotIf@SchedulerBase@details@Concurrency@@QAEXIPAVScheduleGroupSegmentBase@23@@Z 0x42B5EC - ?DemandInitialize@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@AAEXXZ 0x42B662 - ?Dequeue@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAE_NPAPAV_UnrealizedChore@23@@Z 0x42B8CE - ?Grow@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@AAEPAUSegment@123@PAU4123@@Z 0x42B92B - ?Initialize@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAEXABVQuickBitSet@23@@Z 0x42B954 - ?Initialize@ScheduleGroupBase@details@Concurrency@@QAEXPAVlocation@3@@Z 0x42BB22 - ?LocateUnrealizedChores@ScheduleGroupSegmentBase@details@Concurrency@@IAEPAVWorkQueue@23@XZ 0x42BBAE - ?RedetachQueue@ScheduleGroupSegmentBase@details@Concurrency@@QAEXPAVWorkQueue@23@@Z 0x42BD01 - ?RemoveSegments@ScheduleGroupBase@details@Concurrency@@MAEXXZ 0x42BD67 - ?SafelyDeleteDetachedWorkQueue@ScheduleGroupSegmentBase@details@Concurrency@@IAE_NPAVWorkQueue@23@@Z 0x42C161 - ?Enqueue@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@details@Concurrency@@QAE?AVSlot@123@PAV_UnrealizedChore@23@@Z 0x42C1EE - ?InterlockedSet@QuickBitSet@details@Concurrency@@QAEXABV123@@Z 0x42C25E - ?MailChore@CacheLocalScheduleGroupSegment@details@Concurrency@@QAE?AVSlot@?$Mailbox@V_UnrealizedChore@details@Concurrency@@@23@PAV_UnrealizedChore@23@@Z 0x42C276 - ?NotifyAffinitizedWork@CacheLocalScheduleGroupSegment@details@Concurrency@@UAEXXZ 0x42C2A9 - ?PostAffinityMessage@SchedulerBase@details@Concurrency@@QAEXABVQuickBitSet@23@@Z 0x42C2E7 - ?SetQuickCacheSlot@SchedulerBase@details@Concurrency@@QAEXIPAVScheduleGroupSegmentBase@23@@Z 0x42C4A8 - ?Alloc@ExternalContextBase@details@Concurrency@@UAEPAXI@Z 0x42C5AD - ?ImplicitDetachHandler@ExternalContextBase@details@Concurrency@@CGXPAU_TP_CALLBACK_INSTANCE@@PAXPAU_TP_WAIT@@K@Z 0x42C5CF - ?ImplicitDetachHandlerXP@ExternalContextBase@details@Concurrency@@CGXPAXE@Z 0x42C6F2 - ?RemoveFromUse@ExternalContextBase@details@Concurrency@@QAEXXZ 0x42C8BB - ?Create@ThreadScheduler@details@Concurrency@@SAPAV123@ABVSchedulerPolicy@3@@Z 0x42C8EE - ?CreateInternalContext@ThreadScheduler@details@Concurrency@@MAEPAVInternalContextBase@23@XZ 0x42C92C - ?CreateVirtualProcessor@ThreadScheduler@details@Concurrency@@UAEPAVVirtualProcessor@23@PAVSchedulingNode@23@PAUIVirtualProcessorRoot@3@@Z 0x42CA9A - ?_FinishCancelState@_TaskCollectionBase@details@Concurrency@@IAEXI@Z 0x42CAE8 - ?_MarkCancellation@_TaskCollectionBase@details@Concurrency@@IAE_NXZ 0x42CCD3 - ?Reinitialize@WorkQueue@details@Concurrency@@AAEXXZ 0x42CD31 - ?StaticRedetachFromScheduleGroup@WorkQueue@details@Concurrency@@CAXPAV123@@Z 0x42CD53 - ?Steal@WorkQueue@details@Concurrency@@QAEPAV_UnrealizedChore@23@_N@Z 0x42CE56 - ?TryToSteal@WorkQueue@details@Concurrency@@QAEPAV_UnrealizedChore@23@_NAA_N@Z 0x42D010 - ?_CancelViaToken@_UnrealizedChore@details@Concurrency@@CAXPAVContextBase@23@@Z 0x42D10B - ?_SetDetached@_UnrealizedChore@details@Concurrency@@QAEX_N@Z 0x42D775 - ?SpinUntilIdle@FreeVirtualProcessorRoot@details@Concurrency@@IAEXXZ 0x42DB10 - ?Cancel@ThreadProxy@details@Concurrency@@QAEXXZ 0x42DB2F - ?SetPriority@ThreadProxy@details@Concurrency@@QAEXH@Z 0x42DB72 - ?SuspendExecution@ThreadProxy@details@Concurrency@@QAEXXZ 0x42DBDE - ??0location@Concurrency@@QAE@W4_Type@01@IIPAX@Z 0x42DCC4 - ??0WorkItem@details@Concurrency@@QAE@PAVInternalContextBase@12@@Z 0x42DDF8 - ?GetLocalRunnable@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVVirtualProcessor@23@_N@Z 0x42DEDC - ?GetPseudoRRAffineScheduleGroupSegment@SchedulingRing@details@Concurrency@@QAEPAVScheduleGroupSegmentBase@23@PAH@Z 0x42DF55 - ?GetRealizedChore@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_N@Z 0x42E0DE - ?GetUnrealizedChore@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_N2@Z 0x42E202 - ?PeriodicScan@SchedulerBase@details@Concurrency@@QAEX_K@Z 0x42E277 - ?QuickSearch@WorkSearchContext@details@Concurrency@@AAE_NPAVScheduleGroupSegmentBase@23@PAVWorkItem@23@_NK@Z 0x42E2E4 - ?QuickSearchYield@WorkSearchContext@details@Concurrency@@AAE_NPAVScheduleGroupSegmentBase@23@PAVWorkItem@23@_NK@Z 0x42E352 - ?Reset@WorkSearchContext@details@Concurrency@@QAEXPAVVirtualProcessor@23@W4Algorithm@123@@Z 0x42E42B - ?SearchCacheLocal@WorkSearchContext@details@Concurrency@@AAE_NPAVWorkItem@23@PAVScheduleGroupSegmentBase@23@_NK@Z 0x42F051 - ?ServiceMark@ScheduleGroupSegmentBase@details@Concurrency@@QAEX_K@Z 0x42F077 - ?ServiceMark@VirtualProcessor@details@Concurrency@@QAEX_K@Z 0x42F1DA - ?StealLocalRunnableContext@VirtualProcessor@details@Concurrency@@AAEPAVInternalContextBase@23@XZ 0x42F250 - ??0ThreadVirtualProcessor@details@Concurrency@@QAE@PAVSchedulingNode@12@PAUIVirtualProcessorRoot@2@@Z 0x42FF96 - ?_CallCatchBlock2@@YAPAXPAUEHRegistrationNode@@PBU_s_FuncInfo@@PAXHK@Z 0x430152 - ?CatchGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUCatchGuardRN@@PAX2@Z 0x4303C3 - ___AdjustPointer 0x430540 - _memchr 0x431870 - _ValidateLocalCookies 0x431DB3 - ?PMDtoOffset@@YAHPAXABUPMD@@@Z 0x433170 - __local_unwind4 0x43387E - __invalid_parameter_noinfo 0x4339FB - ??3@YAXPAX@Z 0x4340A8 - _fgetpos 0x43452D - _fsetpos 0x434F5A - __dosmaperr 0x4351F0 - __strset 0x435F70 - _strcspn 0x435FC0 - _strlen 0x436080 - ? 0x436140 - _pow 0x439453 - _abort 0x43A125 - __cexit 0x43A182 - _exit 0x43D1CC - _free 0x43DBD8 - ?HasUnrealizedChores@ScheduleGroupSegmentBase@details@Concurrency@@IAE_NXZ 0x43E158 - __fileno 0x440AE3 - __clrfp 0x440B7D - __statfp 0x4418D0 - __trandisp1 0x441937 - __trandisp1 0x441AD0 - __startTwoArgErrorHandling 0x442AC8 - __get_printf_count_output 0x444A01 - __ismbblead 0x4458F7 - ___free_lconv_num 0x44B3D0 - _strpbrk 0x44B4C3 - __msize 0x44B620 - ___ascii_strnicmp 0x44B681 - ___initconout 0x44C5DD - ?__ExceptionPtrDestroy@@YAXPAX@Z 0x44C780 - __FindPESection 0x44C930 - __alldvrm 0x44CA10 - __allshl 0x44CA30 - __aullshr 0x44CB90 - _strchr 0x44D042 - ? 0x44D0C8 - ? 0x44D88B - ? 0x44E203 - ? 0x44E456 - __unwindfunclet$?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z$0 0x44EDEA - __unwindfunclet$??0SchedulingRing@details@Concurrency@@QAE@PAVSchedulerBase@12@H@Z$0 ../capa/tests/data/3d760b6fc84571c928bed835863fc302.exe_ IDA found 11 lib funcs in vc32rtf IDA found 5 lib funcs in vc32mfc found 4 library functions 0x40A690 - __alloca_probe 0x40A6D0 - __aullshr 0x40A6EF - _WinMainCRTStartup 0x40A860 - __setdefaultprecision ../capa/tests/data/477743976643213d96b66ed5041a3b12.exe_ IDA found 1039 lib funcs in vc32rtf IDA found 2066 lib funcs in vc32mfc found 246 library functions 0x401440 - ? 0x401460 - ?SetOwningContext@WorkQueue@details@Concurrency@@QAEXPAVContextBase@23@@Z 0x4015A0 - ??2@YAPAXIPAX@Z 0x401E00 - ?GetOwningRing@VirtualProcessor@details@Concurrency@@QAEPAVSchedulingRing@23@XZ 0x4022C0 - ? 0x4027A0 - ? 0x402EB0 - _wmemchr 0x403040 - ?log@@YAMM@Z 0x403060 - ?log@@YAMM@Z 0x403080 - ?log@@YAMM@Z 0x4030A0 - ?log@@YAMM@Z 0x4030C0 - ?log@@YAMM@Z 0x403160 - ? 0x4031C0 - ?getReferenceType@UnDecorator@@CA?AVDName@@ABV2@0PBD@Z 0x403200 - ?getReferenceType@UnDecorator@@CA?AVDName@@ABV2@0PBD@Z 0x403220 - ?assign@?$char_traits@D@std@@SAXAADABD@Z 0x403270 - ?getReferenceType@UnDecorator@@CA?AVDName@@ABV2@0PBD@Z 0x403290 - ?getReferenceType@UnDecorator@@CA?AVDName@@ABV2@0PBD@Z 0x4032B0 - ? 0x403590 - ? 0x4035D0 - ? 0x411280 - ? 0x411570 - ? 0x4123A0 - ? 0x4123B0 - ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0x412F70 - ? 0x413050 - ? 0x413490 - ? 0x4139E0 - ? 0x413A00 - ? 0x414820 - ?max_size@?$allocator@D@std@@QBEIXZ 0x414DC0 - ?max_size@?$allocator@G@std@@QBEIXZ 0x4151B0 - ? 0x415380 - ? 0x415500 - ? 0x415570 - ? 0x415830 - ? 0x415CD0 - ??0CCmdUI@@QAE@XZ 0x416563 - ? 0x41845C - ??1type_info@@UAE@XZ 0x4184A4 - ??_Gtype_info@@UAEPAXI@Z 0x41AAB7 - ? 0x41E217 - ?OnDisplayChange@CWnd@@IAEJIJ@Z 0x4235BC - ??1type_info@@UAE@XZ 0x4235D1 - ??_Gtype_info@@UAEPAXI@Z 0x423A41 - ?OnSize@CStatusBar@@IAEXIHH@Z 0x42A340 - ? 0x42A456 - ??0CException@@QAE@XZ 0x42A460 - ? 0x42A4F6 - ? 0x42A997 - ??0CDC@@QAE@XZ 0x4301AB - ?Unlock@CTypeLibCache@@QAEXXZ 0x4331C1 - ?AfxOleCanExitApp@@YGHXZ 0x4331D1 - ?AfxOleLockApp@@YGXXZ 0x440904 - ??0LockQueueNode@details@Concurrency@@QAE@PAVContext@2@I@Z 0x44300C - ? 0x448FBE - ? 0x44960B - ?FlushClipboard@COleDataSource@@SGXXZ 0x44A207 - ??1type_info@@UAE@XZ 0x44A21C - ??_Gtype_info@@UAEPAXI@Z 0x44B2AC - ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z 0x44D1C1 - ? 0x44D212 - ??8type_info@@QBE_NABV0@@Z 0x44D6DD - ??0exception@@QAE@XZ 0x44D79E - ??1exception@@UAE@XZ 0x44DC9A - __lock_file 0x44DCDB - __lock_file2 0x44DD0D - __unlock_file 0x44DD78 - __flush 0x44DDE0 - __fflush_nolock 0x44DE28 - _flsall 0x44DF02 - _fflush 0x44E1E9 - __onexit 0x44E225 - _atexit 0x44E23C - ??0_LocaleUpdate@@QAE@PAUlocaleinfo_struct@@@Z 0x44E2C3 - __tolower_l 0x44E3D8 - _tolower 0x44E410 - _strncpy 0x44E691 - __invalid_parameter_noinfo 0x44E750 - __get_printf_count_output 0x44EA94 - __cabs 0x44EB24 - _fast_error_exit 0x44ECCB - ? 0x450594 - ? 0x45059B - ?_UnwindNestedFrames@@YGXPAUEHRegistrationNode@@PAUEHExceptionRecord@@@Z 0x450625 - ?CatchGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUCatchGuardRN@@PAX2@Z 0x450658 - ?_CallSETranslator@@YAHPAUEHExceptionRecord@@PAUEHRegistrationNode@@PAX2PBU_s_FuncInfo@@H1@Z 0x45072F - ?TranslatorGuardHandler@@YA?AW4_EXCEPTION_DISPOSITION@@PAUEHExceptionRecord@@PAUTranslatorGuardRN@@PAX2@Z 0x45086F - __IsExceptionObjectToBeDestroyed 0x4508E8 - ?_CallCatchBlock2@@YAPAXPAUEHRegistrationNode@@PBU_s_FuncInfo@@PAXHK@Z 0x450948 - __EH_prolog3 0x45097B - __EH_prolog3_catch 0x4509B1 - __EH_prolog3_GS 0x4509E7 - __EH_prolog3_catch_GS 0x450A20 - __EH_epilog3 0x450BF0 - __except_handler4 0x450DA0 - _strlen 0x450E2B - __CxxThrowException@8 0x450E77 - __get_errno_from_oserr 0x450EB9 - __errno 0x450ECC - ___doserrno 0x450EDF - __dosmaperr 0x450F93 - __mbspbrk_l 0x451060 - __mbspbrk 0x451077 - __mbspbrk_l 0x45113E - __mbspbrk 0x451155 - __mbspbrk_l 0x45121C - __mbspbrk 0x451240 - __allmul 0x4514FD - ??_M@YGXPAXIHP6EX0@Z@Z 0x4515E4 - ___crtExitProcess 0x4515FC - __lockexit 0x451605 - __unlockexit 0x45160E - __initterm 0x45162B - __initterm_e 0x45164F - __cinit 0x451800 - _exit 0x451816 - __exit 0x45182C - __cexit 0x451955 - _calloc 0x451DAB - __resetstkoflw 0x451F00 - __alloca_probe_16 0x452500 - __allshl 0x45251F - ?x_ismbbtype_l@@YAHPAUlocaleinfo_struct@@IHH@Z 0x452572 - __ismbblead_l 0x45258B - __ismbblead 0x4525A3 - __cfltcvt_init 0x4526E0 - __alldiv 0x452790 - __allshr 0x4527D0 - __alloca_probe 0x4527FB - ??_L@YGXPAXIHP6EX0@Z1@Z 0x452CD7 - __ismbcdigit_l 0x452D9E - __ismbcdigit 0x452DB1 - __ismbcspace_l 0x452E75 - __ismbcspace 0x453EB1 - _write_char 0x453EE4 - _write_multi_char 0x454BF1 - __set_abort_behavior 0x454DBD - __FF_MSGBANNER 0x455032 - __unlockexit 0x455044 - __getptd_noexit 0x4550BD - __getptd 0x4550D7 - __freefls@4 0x4551F1 - __unlockexit 0x455EF0 - __unlock 0x455FCA - __lock 0x456B94 - __ftbuf 0x456FB0 - __malloc_crt 0x456FF5 - __calloc_crt 0x457041 - __realloc_crt 0x45708F - __recalloc_crt 0x4570E1 - __fcloseall 0x457A70 - _write_char 0x457A9F - _write_multi_char 0x4586B8 - ?CPtoLCID@@YAHH@Z 0x4586E7 - ?setSBCS@@YAXPAUthreadmbcinfostruct@@@Z 0x45874B - ?setSBUpLow@@YAXPAUthreadmbcinfostruct@@@Z 0x4588DE - ___updatetmbcinfo 0x458979 - __unlockexit 0x458982 - ?getSystemCP@@YAHH@Z 0x458BE3 - __setmbcp 0x458D44 - __unlockexit 0x458D7D - ___initmbctable 0x458D9B - ___freetlocinfo 0x458EE4 - ___addlocaleref 0x458F73 - ___removelocaleref 0x45904A - ___updatetlocinfo 0x4590C0 - __freea 0x4594CA - __isleadbyte_l 0x459502 - _isleadbyte 0x459515 - __isctype_l 0x45989E - __getstream 0x4599D8 - __local_unwind4 0x459B2B - __raise_exc_ex 0x459E07 - __raise_exc 0x459E2A - __handle_exc 0x45A00C - __set_errno_from_matherr 0x45A039 - __errcode 0x45A06D - __umatherr 0x45A10D - __handle_qnan1 0x45A162 - __handle_qnan2 0x45A58A - __statfp 0x45A59A - __clrfp 0x45A5D4 - __set_statfp 0x45A69E - ?__CxxUnhandledExceptionFilter@@YGJPAU_EXCEPTION_POINTERS@@@Z 0x45A98B - _parse_cmdline 0x45AB25 - __setargv 0x45AD63 - ___security_init_cookie 0x45AFFE - ___TypeMatch 0x45B0A6 - ___FrameUnwindToState 0x45B1CC - ___DestructExceptionObject 0x45B221 - ___AdjustPointer 0x45B24A - ?IsInExceptionSpec@@YAEPAUEHExceptionRecord@@PBU_s_ESTypeList@@@Z 0x45B30E - ?CallCatchBlock@@YAPAXPAUEHExceptionRecord@@PAUEHRegistrationNode@@PAU_CONTEXT@@PBU_s_FuncInfo@@PAXHK@Z 0x45B4AA - ___BuildCatchObjectHelper 0x45B629 - ___BuildCatchObject 0x45B6BB - ?CatchIt@@YAXPAUEHExceptionRecord@@PAUEHRegistrationNode@@PAU_CONTEXT@@PAXPBU_s_FuncInfo@@PBU_s_HandlerType@@PBU_s_CatchableType@@PBU_s_TryBlockMapEntry@@H1E@Z 0x45BB81 - ___InternalCxxFrameHandler 0x45BCA0 - ?unexpected@@YAXXZ 0x45BD50 - __ValidateImageBase 0x45C0B0 - _strpbrk 0x45C0F0 - _strspn 0x45C140 - _strcspn 0x45C1A7 - __initp_misc_winsig 0x45C1C5 - _siglookup 0x45C94E - __tzset_nolock 0x45D063 - ___tzset 0x45D100 - __allrem 0x45D225 - __cropzeros_l 0x45D2A7 - __positive 0x45D2C3 - __fassign_l 0x45D305 - __fassign 0x45D31F - __shift 0x45D351 - __cropzeros 0x45D5C3 - __cftoa_l 0x45DBE2 - __cfltcvt_l 0x45DC6A - __cfltcvt 0x45DCF6 - __ms_p5_mp_test_fdiv 0x45DD20 - _strrchr 0x45DD50 - __aulldvrm 0x45DFE1 - __lseeki64_nolock 0x45E17F - __getbuf 0x45E569 - __isdigit_l 0x45E5BA - _isdigit 0x45E811 - __frnd 0x45EA58 - __mbtowc_l 0x45EB6F - _mbtowc 0x45EDA7 - __unlock_fhandle 0x45EF68 - __fputwc_nolock 0x460110 - __trandisp1 0x460177 - __trandisp1 0x4602E0 - __startTwoArgErrorHandling 0x4604CC - ? 0x4604E7 - __getenv_helper_nolock 0x4608D0 - __alldvrm 0x4609B0 - __aullshr 0x460A3B - __close_nolock 0x460BA4 - __freebuf 0x460BD5 - ___initconout 0x460EE5 - __chsize_nolock 0x46165D - __lseek_nolock 0x463549 - __hw_cw 0x4635D7 - ___hw_cw_sse2 0x463990 - ___ascii_strnicmp 0x4639F1 - ?strncnt@@YAHPBDH@Z 0x463EBB - _findenv
comparing the results to IDA using sig file
VS6_10_11_12.sigbased on the .pat files added in https://github.com/williballenthin/siglib/tree/main/dataan entry for each sample looks like this:
va - funcname