[ { "path": "FrameViewSDK\\etw_fcat\\NVFTVRDLL64.dll", "sha256": "e75c2edcbb5f06c10e5a57afd50bc8c26f9374c3d2a28c8b54db8bc6e30134a8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [], "utc": "2026-11-11T21:40:10.751090+00:00", "instructions": 0, "skipdata_bytes": 0, "calls": 0, "api_reference_counts": {}, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\etw_nv\\ddETWExternal.dll", "sha256": "676db6bd39cd2cf854e768c8da0ec5b01c2eb980f4df95f6409531b5d513f2b3", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [], "utc": "2026-11-11T21:40:10.753357+00:00", "instructions": 0, "skipdata_bytes": 0, "calls": 0, "api_reference_counts": {}, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\NvUIR.dll", "sha256": "0379f2608e9f054266d8cff9e0762cb800dcdcc7b6db2d9280f042401cc32d9b", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [], "utc": "2026-11-11T21:40:10.755953+00:00", "instructions": 0, "skipdata_bytes": 0, "calls": 0, "api_reference_counts": {}, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\bin\\FrameViewKMD.sys", "sha256": "f768f331ecd2ed3eb121ca28569e8c7c52561c6f8b1c40e8c8f1b2185c200e02", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 4608, "processed_bytes": 4608, "instructions": 1497, "skipdata_bytes": 0 }, { "name": "INIT", "raw_bytes": 1024, "processed_bytes": 1024, "instructions": 411, "skipdata_bytes": 42 } ], "utc": "2026-11-11T21:40:10.755686+00:00", "instructions": 1908, "skipdata_bytes": 42, "calls": 74, "api_reference_counts": { "ntoskrnl.exe!ExAllocatePoolWithTag": 1, "ntoskrnl.exe!ExFreePoolWithTag": 1, "HAL.dll!HalSetBusDataByOffset": 1, "HAL.dll!HalGetBusDataByOffset": 1, "ntoskrnl.exe!EtwWriteTransfer": 1, "ntoskrnl.exe!IofCompleteRequest": 1, "ntoskrnl.exe!KeDelayExecutionThread": 1, "ntoskrnl.exe!KeWaitForSingleObject": 1, "ntoskrnl.exe!ObfDereferenceObject": 1, "ntoskrnl.exe!IoDeleteDevice": 2, "ntoskrnl.exe!IoCreateDevice": 1, "ntoskrnl.exe!PsCreateSystemThread": 1, "ntoskrnl.exe!ObReferenceObjectByHandle": 1, "ntoskrnl.exe!ZwClose": 1, "ntoskrnl.exe!EtwRegister": 1, "ntoskrnl.exe!EtwUnregister": 1, "ntoskrnl.exe!_purecall": 1, "ntoskrnl.exe!__C_specific_handler": 1, "ntoskrnl.exe!strncmp": 1, "ntoskrnl.exe!RtlCopyUnicodeString": 1, "WDFLDR.SYS!WdfVersionBind": 1, "WDFLDR.SYS!WdfVersionUnbind": 1, "WDFLDR.SYS!WdfVersionBindClass": 1, "WDFLDR.SYS!WdfVersionUnbindClass": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\\nvvad64v.sys", "sha256": "1635fe7969dabb11902c9906432affd462e595c4b8d81d69fb55f2ff4824bc7b", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 8192, "processed_bytes": 8192, "instructions": 3073, "skipdata_bytes": 11 }, { "name": "PAGE", "raw_bytes": 17920, "processed_bytes": 17920, "instructions": 5093, "skipdata_bytes": 24 }, { "name": "INIT", "raw_bytes": 2048, "processed_bytes": 2048, "instructions": 833, "skipdata_bytes": 69 } ], "utc": "2026-11-11T21:40:10.763528+00:00", "instructions": 8999, "skipdata_bytes": 104, "calls": 330, "api_reference_counts": { "portcls.sys!PcNewRegistryKey": 1, "ntoskrnl.exe!RtlInitUnicodeString": 5, "ntoskrnl.exe!ExAllocatePoolWithTag": 10, "ntoskrnl.exe!ExFreePoolWithTag": 13, "ntoskrnl.exe!ExFreePool": 3, "ntoskrnl.exe!ObfDereferenceObject": 6, "ntoskrnl.exe!KeSetEvent": 5, "ntoskrnl.exe!KeClearEvent": 2, "ntoskrnl.exe!DbgPrintEx": 10, "ntoskrnl.exe!KeInitializeSpinLock": 3, "ntoskrnl.exe!KeInitializeEvent": 5, "ntoskrnl.exe!ExInterlockedInsertTailList": 3, "ntoskrnl.exe!KeAcquireInStackQueuedSpinLock": 4, "ntoskrnl.exe!ExInterlockedRemoveHeadList": 2, "HAL.dll!KeQueryPerformanceCounter": 1, "ntoskrnl.exe!KeResetEvent": 1, "ntoskrnl.exe!KeReleaseInStackQueuedSpinLock": 6, "ntoskrnl.exe!EtwWrite": 1, "ntoskrnl.exe!KeBugCheckEx": 1, "portcls.sys!PcAddAdapterDevice": 1, "ntoskrnl.exe!IofCompleteRequest": 5, "ntoskrnl.exe!RtlCompareUnicodeString": 2, "portcls.sys!PcDispatchIrp": 1, "ntoskrnl.exe!KeWaitForSingleObject": 4, "portcls.sys!PcRegisterAdapterPowerManagement": 1, "ntoskrnl.exe!EtwRegister": 1, "ntoskrnl.exe!IoSetDeviceInterfaceState": 2, "ntoskrnl.exe!RtlFreeUnicodeString": 1, "ntoskrnl.exe!IoRegisterDeviceInterface": 1, "ntoskrnl.exe!PsCreateSystemThread": 1, "ntoskrnl.exe!ObReferenceObjectByHandle": 3, "ntoskrnl.exe!ZwClose": 1, "ntoskrnl.exe!KeSetPriorityThread": 1, "ntoskrnl.exe!PsTerminateSystemThread": 1, "ntoskrnl.exe!ExAcquireFastMutex": 6, "ntoskrnl.exe!ExReleaseFastMutex": 5, "ntoskrnl.exe!IoFreeMdl": 3, "ntoskrnl.exe!IoAllocateMdl": 1, "ntoskrnl.exe!MmBuildMdlForNonPagedPool": 1, "portcls.sys!PcNewPort": 2, "portcls.sys!PcRegisterPhysicalConnection": 2, "portcls.sys!PcRegisterSubdevice": 2, "portcls.sys!PcInitializeAdapterDriver": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\\nvvad32v.sys", "sha256": "bf036afb14ced98ef68a3947230f58b565a14dce8c45367b6229a3b1187ccb22", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 6656, "processed_bytes": 6656, "instructions": 2836, "skipdata_bytes": 0 }, { "name": "PAGE", "raw_bytes": 17408, "processed_bytes": 17408, "instructions": 6316, "skipdata_bytes": 0 }, { "name": "INIT", "raw_bytes": 1536, "processed_bytes": 1536, "instructions": 663, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:10.763010+00:00", "instructions": 9815, "skipdata_bytes": 1, "calls": 512, "api_reference_counts": { "portcls.sys!PcNewRegistryKey": 1, "ntoskrnl.exe!RtlInitUnicodeString": 5, "ntoskrnl.exe!ExAllocatePoolWithTag": 10, "ntoskrnl.exe!ExFreePoolWithTag": 13, "ntoskrnl.exe!ExFreePool": 3, "ntoskrnl.exe!ObfDereferenceObject": 6, "ntoskrnl.exe!KeSetEvent": 5, "ntoskrnl.exe!KeClearEvent": 2, "ntoskrnl.exe!DbgPrintEx": 10, "ntoskrnl.exe!KeInitializeSpinLock": 3, "ntoskrnl.exe!KeInitializeEvent": 5, "ntoskrnl.exe!ExfInterlockedInsertTailList": 3, "HAL.dll!KeAcquireInStackQueuedSpinLock": 4, "ntoskrnl.exe!ExfInterlockedRemoveHeadList": 2, "HAL.dll!KeQueryPerformanceCounter": 1, "ntoskrnl.exe!KeResetEvent": 1, "HAL.dll!KeReleaseInStackQueuedSpinLock": 7, "ntoskrnl.exe!EtwWrite": 1, "ntoskrnl.exe!KeQueryInterruptTime": 2, "ntoskrnl.exe!memset": 1, "ntoskrnl.exe!_aulldiv": 1, "ntoskrnl.exe!_aulldvrm": 1, "ntoskrnl.exe!memcpy": 1, "ntoskrnl.exe!_aullrem": 1, "portcls.sys!PcAddAdapterDevice": 1, "ntoskrnl.exe!IofCompleteRequest": 5, "ntoskrnl.exe!RtlCompareUnicodeString": 2, "portcls.sys!PcDispatchIrp": 1, "ntoskrnl.exe!KeWaitForSingleObject": 4, "portcls.sys!PcRegisterAdapterPowerManagement": 1, "ntoskrnl.exe!EtwRegister": 1, "ntoskrnl.exe!IoSetDeviceInterfaceState": 2, "ntoskrnl.exe!RtlFreeUnicodeString": 1, "ntoskrnl.exe!IoRegisterDeviceInterface": 1, "ntoskrnl.exe!PsCreateSystemThread": 1, "ntoskrnl.exe!ObReferenceObjectByHandle": 3, "ntoskrnl.exe!ZwClose": 1, "ntoskrnl.exe!KeGetCurrentThread": 1, "ntoskrnl.exe!KeSetPriorityThread": 1, "ntoskrnl.exe!PsTerminateSystemThread": 1, "HAL.dll!ExAcquireFastMutex": 6, "HAL.dll!ExReleaseFastMutex": 7, "ntoskrnl.exe!IoFreeMdl": 3, "ntoskrnl.exe!IoAllocateMdl": 1, "ntoskrnl.exe!MmBuildMdlForNonPagedPool": 1, "portcls.sys!PcNewPort": 2, "portcls.sys!PcRegisterPhysicalConnection": 2, "portcls.sys!PcRegisterSubdevice": 2, "portcls.sys!PcInitializeAdapterDriver": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\\nvvad64a.sys", "sha256": "0cdd4404f6878daa2e28dd9ae7ac51974b56c686488fdaba245fc5759cdfb9d2", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 8704, "processed_bytes": 8704, "instructions": 2137, "skipdata_bytes": 156 }, { "name": "PAGE", "raw_bytes": 20992, "processed_bytes": 20992, "instructions": 5169, "skipdata_bytes": 316 }, { "name": "INIT", "raw_bytes": 2048, "processed_bytes": 2048, "instructions": 376, "skipdata_bytes": 544 } ], "utc": "2026-11-11T21:40:10.764393+00:00", "instructions": 7682, "skipdata_bytes": 1016, "calls": 0, "api_reference_counts": {}, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\plugins.system\\FrameViewKMDServiceContainerPlugin_x64.dll", "sha256": "f74d9172acfabcc14e2f91b4ab7ef8ebd789a8bf61fc082c1da96db43a1c3d9d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 58880, "processed_bytes": 58880, "instructions": 15868, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:10.771859+00:00", "instructions": 15868, "skipdata_bytes": 1, "calls": 1425, "api_reference_counts": { "MSVCP140.dll!_Mtx_init_in_situ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 1, "VCRUNTIME140.dll!__std_exception_copy": 10, "VCRUNTIME140.dll!__std_exception_destroy": 5, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 71, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "KERNEL32.dll!GetLastError": 31, "ADVAPI32.dll!SetEntriesInAclW": 1, "KERNEL32.dll!LocalAlloc": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 24, "KERNEL32.dll!LocalFree": 13, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 1, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ": 8, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z": 2, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 2, "KERNEL32.dll!OutputDebugStringW": 7, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 5, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 6, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 16, "MSVCP140.dll!_Thrd_id": 2, "MSVCP140.dll!_Thrd_join": 2, "MSVCP140.dll!_Mtx_destroy_in_situ": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 1, "MSVCP140.dll!_Mtx_lock": 4, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!GetCurrentThreadId": 3, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 3, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!_Mtx_unlock": 6, "KERNEL32.dll!GetCurrentProcess": 2, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CloseHandle": 30, "SHELL32.dll!SHGetKnownFolderPath": 1, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!CreateDirectoryW": 1, "MSVCP140.dll!??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 2, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 2, "KERNEL32.dll!OutputDebugStringA": 18, "MSVCP140.dll!?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 1, "MSVCP140.dll!??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "KERNEL32.dll!GetSystemDirectoryA": 2, "api-ms-win-crt-string-l1-1-0.dll!strcat_s": 2, "SHELL32.dll!SHCreateDirectoryExA": 2, "api-ms-win-crt-convert-l1-1-0.dll!mbstowcs_s": 2, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!SizeofResource": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "SHLWAPI.dll!PathFileExistsA": 3, "KERNEL32.dll!CreateFileA": 2, "KERNEL32.dll!GetFileTime": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fopen_s": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "KERNEL32.dll!DeleteFileA": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "KERNEL32.dll!SetFileTime": 1, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 1, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 1, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 1, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!CreateMutexA": 3, "KERNEL32.dll!WaitForSingleObject": 5, "KERNEL32.dll!CreateFileMappingA": 2, "KERNEL32.dll!MapViewOfFile": 5, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!UnmapViewOfFile": 7, "KERNEL32.dll!ReleaseMutex": 6, "KERNEL32.dll!OpenFileMappingA": 3, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!GetExitCodeProcess": 2, "ADVAPI32.dll!OpenSCManagerA": 3, "ADVAPI32.dll!CreateServiceA": 1, "ADVAPI32.dll!CloseServiceHandle": 10, "ADVAPI32.dll!OpenServiceA": 4, "ADVAPI32.dll!StartServiceW": 1, "ADVAPI32.dll!ControlService": 1, "ADVAPI32.dll!DeleteService": 1, "ADVAPI32.dll!QueryServiceStatus": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "KERNEL32.dll!Process32NextW": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!DisableThreadLibraryCalls": 1, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 1, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 2, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetwc": 1, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fputwc": 1, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 1, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 4, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 2, "MSVCP140.dll!?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ": 1, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 1, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 1, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 2, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z": 1, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 1, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 2, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 1, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 2, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z": 1, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!TerminateProcess": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 2, "KERNEL32.dll!RtlCaptureContext": 2, "KERNEL32.dll!RtlLookupFunctionEntry": 2, "KERNEL32.dll!RtlVirtualUnwind": 2, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!SetFileInformationByHandle": 5, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!WideCharToMultiByte": 2, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 6, "KERNEL32.dll!CreateFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\SDK\\FvSDKTestClient_Public.exe", "sha256": "b7dd66f1674e05fff5f3aed3315f6789698a562f58998b9b2132febc589d5098", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 60416, "processed_bytes": 60416, "instructions": 14752, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:10.798744+00:00", "instructions": 14752, "skipdata_bytes": 0, "calls": 1192, "api_reference_counts": { "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 2, "api-ms-win-crt-runtime-l1-1-0.dll!exit": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 41, "KERNEL32.dll!SetDefaultDllDirectories": 1, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!CreateEventW": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_wassert": 50, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 96, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!Sleep": 4, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!WaitForSingleObject": 6, "KERNEL32.dll!CloseHandle": 4, "KERNEL32.dll!ResetEvent": 2, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 4, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 4, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 3, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 3, "MSVCP140.dll!?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z": 1, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 1, "VCRUNTIME140.dll!__std_exception_copy": 3, "VCRUNTIME140.dll!__std_exception_destroy": 2, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fopen_s": 9, "USER32.dll!GetAsyncKeyState": 1, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 1, "KERNEL32.dll!QueryPerformanceFrequency": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 6, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z": 4, "MSVCP140.dll!_Query_perf_frequency": 4, "MSVCP140.dll!_Query_perf_counter": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 5, "KERNEL32.dll!GetLocalTime": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 28, "KERNEL32.dll!QueryPerformanceCounter": 2, "KERNEL32.dll!PeekNamedPipe": 1, "KERNEL32.dll!ReadFile": 1, "KERNEL32.dll!GetLastError": 14, "KERNEL32.dll!GetSystemDirectoryW": 15, "KERNEL32.dll!LoadLibraryA": 1, "KERNEL32.dll!GetProcAddress": 22, "KERNEL32.dll!FreeLibrary": 2, "KERNEL32.dll!LocalAlloc": 10, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LocalFree": 12, "KERNEL32.dll!LoadLibraryExW": 7, "KERNEL32.dll!SetLastError": 2, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!GetFileAttributesW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!GetCurrentProcess": 1, "KERNEL32.dll!TerminateProcess": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 3, "KERNEL32.dll!RtlCaptureContext": 3, "KERNEL32.dll!RtlLookupFunctionEntry": 3, "KERNEL32.dll!RtlVirtualUnwind": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!GetModuleHandleW": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_exe": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_set_app_type": 1, "api-ms-win-crt-math-l1-1-0.dll!__setusermatherr": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_get_initial_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_exit": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_set_fmode": 1, "api-ms-win-crt-runtime-l1-1-0.dll!__p___argc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!__p___argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_c_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_thread_local_exe_atexit_callback": 1, "api-ms-win-crt-locale-l1-1-0.dll!_configthreadlocale": 1, "api-ms-win-crt-heap-l1-1-0.dll!_set_new_mode": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__p__commode": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1, "VCRUNTIME140.dll!memmove": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvSmartMaxapp64.exe", "sha256": "e72e76aef792b9330eda6ad16ef43514d2c7c1419a1c173cbf03dfee780be8b1", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 64512, "processed_bytes": 64512, "instructions": 17536, "skipdata_bytes": 5 } ], "utc": "2026-11-11T21:40:10.799184+00:00", "instructions": 17536, "skipdata_bytes": 5, "calls": 1257, "api_reference_counts": { "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetLastError": 40, "KERNEL32.dll!LocalFree": 13, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 10, "KERNEL32.dll!GetFileAttributesW": 4, "KERNEL32.dll!CreateFileW": 3, "KERNEL32.dll!CloseHandle": 8, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!LocalAlloc": 5, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!GetProcAddress": 28, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!IsWow64Process": 2, "KERNEL32.dll!Wow64DisableWow64FsRedirection": 2, "KERNEL32.dll!GetEnvironmentVariableW": 4, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!SetDllDirectoryW": 1, "USER32.dll!LoadCursorW": 1, "USER32.dll!RegisterClassExW": 1, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 1, "USER32.dll!GetMessageW": 1, "KERNEL32.dll!FreeLibrary": 6, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 2, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!OpenEventW": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!ShowWindow": 1, "USER32.dll!UpdateWindow": 1, "USER32.dll!FindWindowW": 3, "USER32.dll!IsRectEmpty": 1, "USER32.dll!SendMessageW": 9, "USER32.dll!SetWindowPos": 1, "USER32.dll!GetDC": 1, "USER32.dll!ReleaseDC": 1, "USER32.dll!MonitorFromRect": 1, "USER32.dll!GetMonitorInfoW": 2, "USER32.dll!SubtractRect": 2, "USER32.dll!SystemParametersInfoW": 1, "USER32.dll!InvalidateRect": 1, "USER32.dll!EqualRect": 1, "USER32.dll!GetWindowRect": 2, "USER32.dll!OffsetRect": 1, "USER32.dll!DefWindowProcW": 1, "USER32.dll!EnumDisplayMonitors": 2, "USER32.dll!PostQuitMessage": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!WaitForSingleObject": 1, "NvSmartMax64.dll!NVUnHook": 1, "NvSmartMax64.dll!NvSmartMaxShutdown": 1, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!RtlUnwindEx": 1, "KERNEL32.dll!DeleteCriticalSection": 5, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!EnterCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 3, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!WriteConsoleW": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvSmartMaxapp.exe", "sha256": "08332e1367f23cd1a995804fe8d555de51cd835ad51d5304bdbb48acaf3ab933", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 65024, "processed_bytes": 65024, "instructions": 22138, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:10.807385+00:00", "instructions": 22138, "skipdata_bytes": 0, "calls": 1570, "api_reference_counts": { "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetLastError": 41, "KERNEL32.dll!LocalFree": 14, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 10, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!CloseHandle": 7, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!LocalAlloc": 6, "KERNEL32.dll!GetProcAddress": 28, "KERNEL32.dll!GetFileAttributesW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!lstrcmpW": 3, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!IsWow64Process": 2, "KERNEL32.dll!Wow64DisableWow64FsRedirection": 2, "KERNEL32.dll!GetEnvironmentVariableW": 4, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!SetDllDirectoryW": 1, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 1, "USER32.dll!GetMessageW": 1, "KERNEL32.dll!FreeLibrary": 6, "USER32.dll!LoadCursorW": 1, "USER32.dll!RegisterClassExW": 1, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 2, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!OpenEventW": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!ShowWindow": 1, "USER32.dll!UpdateWindow": 1, "USER32.dll!GetClassNameW": 1, "USER32.dll!GetWindowThreadProcessId": 1, "NvSmartMax.dll!SmartMaxLookupProcessName": 1, "USER32.dll!GetDesktopWindow": 2, "USER32.dll!GetShellWindow": 1, "USER32.dll!FindWindowW": 2, "USER32.dll!GetWindowLongW": 2, "USER32.dll!GetWindowRect": 3, "USER32.dll!GetSystemMetrics": 2, "USER32.dll!FindWindowExW": 2, "USER32.dll!IsRectEmpty": 1, "NvSmartMax.dll!GetMaxToGridRect": 1, "USER32.dll!OffsetRect": 1, "USER32.dll!IntersectRect": 1, "USER32.dll!SetWindowPos": 1, "USER32.dll!DefWindowProcW": 1, "USER32.dll!EnumWindows": 1, "NvSmartMax.dll!NvSmartMax_OnSetWorkArea": 1, "USER32.dll!PostQuitMessage": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!WaitForSingleObject": 1, "NvSmartMax.dll!NVUnHook": 1, "NvSmartMax.dll!NvSmartMaxShutdown": 1, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 6, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DeleteCriticalSection": 5, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!EnterCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 3, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!DecodePointer": 1, "KERNEL32.dll!WriteConsoleW": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\HDAudio.Driver.{091AEA3D-8B36-4AC9-8B5B-5965F73BC7F6}\\nvhda64v.sys", "sha256": "9b6178768f6f4446b3a91c9140d9bc10312c07d6aa94af73559aab462399f766", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 31232, "processed_bytes": 31232, "instructions": 9215, "skipdata_bytes": 12 }, { "name": "CODE", "raw_bytes": 13312, "processed_bytes": 13312, "instructions": 4076, "skipdata_bytes": 4 }, { "name": "PAGE", "raw_bytes": 47616, "processed_bytes": 47616, "instructions": 12321, "skipdata_bytes": 52 }, { "name": "INIT", "raw_bytes": 2048, "processed_bytes": 2048, "instructions": 828, "skipdata_bytes": 66 } ], "utc": "2026-11-11T21:40:10.851731+00:00", "instructions": 26440, "skipdata_bytes": 134, "calls": 1358, "api_reference_counts": { "ntoskrnl.exe!ExFreePoolWithTag": 40, "ntoskrnl.exe!EtwRegister": 1, "ntoskrnl.exe!EtwUnregister": 1, "ntoskrnl.exe!EtwWriteTransfer": 1, "ntoskrnl.exe!KeWaitForSingleObject": 17, "ntoskrnl.exe!ExAcquireFastMutex": 4, "ntoskrnl.exe!KeClearEvent": 3, "ntoskrnl.exe!ExReleaseFastMutex": 6, "ntoskrnl.exe!KeInitializeEvent": 7, "ntoskrnl.exe!KeSetEvent": 11, "ntoskrnl.exe!ExAllocatePoolWithTag": 29, "ntoskrnl.exe!KeGetCurrentIrql": 14, "ntoskrnl.exe!PsCreateSystemThread": 1, "ntoskrnl.exe!ObReferenceObjectByHandle": 2, "ntoskrnl.exe!ZwClose": 14, "ntoskrnl.exe!KeSetPriorityThread": 1, "ntoskrnl.exe!KeDelayExecutionThread": 3, "ntoskrnl.exe!PsTerminateSystemThread": 1, "ntoskrnl.exe!ObfDereferenceObject": 2, "ntoskrnl.exe!RtlInitUnicodeString": 63, "ntoskrnl.exe!RtlCompareUnicodeString": 10, "ntoskrnl.exe!ZwCreateKey": 6, "ntoskrnl.exe!ZwSetValueKey": 8, "portcls.sys!PcNewRegistryKey": 8, "ntoskrnl.exe!ZwOpenKey": 2, "ntoskrnl.exe!ZwQueryValueKey": 2, "ntoskrnl.exe!towupper": 1, "ntoskrnl.exe!wcsstr": 1, "ntoskrnl.exe!RtlIsNtDdiVersionAvailable": 1, "ntoskrnl.exe!_vsnwprintf": 1, "ntoskrnl.exe!KeBugCheckEx": 2, "ntoskrnl.exe!ExFreePool": 1, "ntoskrnl.exe!IoAllocateIrp": 1, "portcls.sys!PcForwardIrpSynchronous": 1, "ntoskrnl.exe!IoFreeIrp": 1, "ntoskrnl.exe!KeAcquireInStackQueuedSpinLock": 1, "ntoskrnl.exe!PoRequestPowerIrp": 1, "ntoskrnl.exe!KeReleaseInStackQueuedSpinLock": 2, "ntoskrnl.exe!KeReleaseMutex": 5, "portcls.sys!PcAddAdapterDevice": 1, "ntoskrnl.exe!IofCompleteRequest": 7, "portcls.sys!PcDispatchIrp": 2, "portcls.sys!PcRegisterAdapterPowerManagement": 1, "portcls.sys!PcInitializeAdapterDriver": 1, "ntoskrnl.exe!IoSetDeviceInterfaceState": 4, "ntoskrnl.exe!RtlFreeUnicodeString": 2, "ntoskrnl.exe!IoOpenDeviceRegistryKey": 1, "ntoskrnl.exe!ObQueryNameString": 1, "ntoskrnl.exe!KeInitializeMutex": 2, "ntoskrnl.exe!IoRegisterDeviceInterface": 2, "ntoskrnl.exe!RtlGetVersion": 1, "portcls.sys!PcNewPort": 2, "portcls.sys!PcRegisterPhysicalConnection": 1, "portcls.sys!PcRegisterSubdevice": 2 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\bin\\amd_ags_x64.dll", "sha256": "6f6eabdb872cc503beace295a349d379625b5c518646af203ec4f71f06a0ca16", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 104448, "processed_bytes": 104448, "instructions": 29748, "skipdata_bytes": 4 } ], "utc": "2026-11-11T21:40:10.857998+00:00", "instructions": 29748, "skipdata_bytes": 4, "calls": 1715, "api_reference_counts": { "USER32.dll!EnumDisplayDevicesA": 4, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryA": 9, "KERNEL32.dll!GetProcAddress": 47, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!RtlUnwindEx": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!GetLastError": 21, "KERNEL32.dll!SetLastError": 3, "KERNEL32.dll!EncodePointer": 1, "KERNEL32.dll!DeleteCriticalSection": 5, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 3, "KERNEL32.dll!GetModuleHandleW": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!EnterCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 3, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!CloseHandle": 3, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!WriteConsoleW": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\NvidiaAppPermissionOc\\NVIDIA App Permission.exe", "sha256": "d9b3fd4f672a1a90698f83c9123ca3832b0a42cd1a6ba51e903f71a8bfd59ce8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 82432, "processed_bytes": 82432, "instructions": 56175, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:10.828280+00:00", "instructions": 56175, "skipdata_bytes": 1, "calls": 771, "api_reference_counts": { "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 15, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 7, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 4, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 5, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 9, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 36, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 2, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 2, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 2, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 12, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 2, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 8, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 2, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 6, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 5, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "SHELL32.dll!SHGetFolderPathW": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 12, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "KERNEL32.dll!WideCharToMultiByte": 3, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 2, "ADVAPI32.dll!RegCloseKey": 4, "ADVAPI32.dll!RegSetValueExW": 2, "ADVAPI32.dll!RegCreateKeyExW": 2, "KERNEL32.dll!SetLastError": 2, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLastError": 3, "KERNEL32.dll!CreateSymbolicLinkW": 2, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_exe": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_set_app_type": 1, "api-ms-win-crt-math-l1-1-0.dll!__setusermatherr": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_wide_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_wide_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_get_initial_wide_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_exit": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_set_fmode": 1, "api-ms-win-crt-runtime-l1-1-0.dll!__p___argc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!__p___wargv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_c_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_thread_local_exe_atexit_callback": 1, "api-ms-win-crt-locale-l1-1-0.dll!_configthreadlocale": 1, "api-ms-win-crt-heap-l1-1-0.dll!_set_new_mode": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__p__commode": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\plugins.system\\AggregatorContainerPlugin_x64.dll", "sha256": "bc832c7e2537e63712dd3f6822331749c67f1d8641c05154a22b9e93893d42b4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 123392, "processed_bytes": 123392, "instructions": 33780, "skipdata_bytes": 82 } ], "utc": "2026-11-11T21:40:10.879549+00:00", "instructions": 33780, "skipdata_bytes": 82, "calls": 2487, "api_reference_counts": { "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!GetModuleFileNameA": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "KERNEL32.dll!GetSystemDirectoryW": 14, "KERNEL32.dll!LocalAlloc": 12, "KERNEL32.dll!LoadLibraryExW": 8, "KERNEL32.dll!GetLastError": 37, "KERNEL32.dll!LocalFree": 23, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 9, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!CloseHandle": 12, "KERNEL32.dll!GetProcAddress": 23, "KERNEL32.dll!GetFullPathNameW": 2, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "VCRUNTIME140.dll!__std_exception_copy": 19, "VCRUNTIME140.dll!__std_exception_destroy": 5, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 4, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Query_perf_counter": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "MSVCP140.dll!_Cnd_destroy_in_situ": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 153, "MSVCP140.dll!_Mtx_init_in_situ": 7, "MSVCP140.dll!_Cnd_init_in_situ": 2, "MSVCP140.dll!_Thrd_id": 3, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!WideCharToMultiByte": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "MSVCP140.dll!_Mtx_destroy_in_situ": 8, "MSVCP140.dll!_Mtx_lock": 39, "MSVCP140.dll!_Mtx_unlock": 41, "MSVCP140.dll!_Cnd_broadcast": 6, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 75, "MSVCP140.dll!_Cnd_wait": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 2, "api-ms-win-crt-heap-l1-1-0.dll!free": 11, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Thrd_join": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 2, "MSVCP140.dll!_Xtime_get_ticks": 2, "MSVCP140.dll!_Mtx_current_owns": 2, "MSVCP140.dll!_Cnd_timedwait": 2, "VCRUNTIME140.dll!__std_type_info_compare": 2, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 2, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 4, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 1, "KERNEL32.dll!GetCurrentThreadId": 2, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 3, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 3, "KERNEL32.dll!OutputDebugStringW": 7, "MSVCP140.dll!?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 1, "KERNEL32.dll!GetLocalTime": 1, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 2, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ": 8, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!WaitForMultipleObjects": 1, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 2, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetwc": 1, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fputwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 1, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 2, "MSVCP140.dll!?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ": 1, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 1, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 1, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 2, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 12, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!GetCurrentProcess": 2, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CreateDirectoryW": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z": 1, "KERNEL32.dll!OutputDebugStringA": 18, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z": 1, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!WaitForSingleObject": 1, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!TerminateProcess": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 2, "KERNEL32.dll!RtlCaptureContext": 2, "KERNEL32.dll!RtlLookupFunctionEntry": 2, "KERNEL32.dll!RtlVirtualUnwind": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!DisableThreadLibraryCalls": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!SetFileInformationByHandle": 5, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 6, "KERNEL32.dll!MoveFileExW": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvSmartMax.dll", "sha256": "b2253edcb7220b0e101b96ff5c05285f4721ff4a780bea9590bbfef837d967a3", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 126976, "processed_bytes": 126976, "instructions": 40873, "skipdata_bytes": 254 } ], "utc": "2026-11-11T21:40:10.959623+00:00", "instructions": 40873, "skipdata_bytes": 254, "calls": 2929, "api_reference_counts": { "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!GetLastError": 47, "KERNEL32.dll!SetLastError": 15, "KERNEL32.dll!DeleteCriticalSection": 6, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!GetProcAddress": 30, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleW": 2, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!EnterCriticalSection": 4, "KERNEL32.dll!LeaveCriticalSection": 6, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetModuleFileNameW": 4, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!MultiByteToWideChar": 3, "KERNEL32.dll!WideCharToMultiByte": 3, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetProcessHeap": 3, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!DecodePointer": 1, "KERNEL32.dll!CloseHandle": 18, "KERNEL32.dll!CreateFileW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RaiseException": 2, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!LocalFree": 22, "KERNEL32.dll!LocalAlloc": 8, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!lstrcmpW": 25, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!CreateProcessW": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "USER32.dll!MonitorFromRect": 1, "USER32.dll!GetMonitorInfoW": 6, "USER32.dll!IntersectRect": 10, "USER32.dll!IsRectEmpty": 8, "USER32.dll!PtInRect": 3, "USER32.dll!MonitorFromPoint": 3, "USER32.dll!FindWindowW": 15, "USER32.dll!ClientToScreen": 1, "USER32.dll!GetWindowRect": 9, "USER32.dll!GetCursorPos": 7, "USER32.dll!GetAsyncKeyState": 1, "USER32.dll!IsWindowVisible": 2, "USER32.dll!GetWindowPlacement": 4, "USER32.dll!SetWindowPos": 2, "USER32.dll!SetWindowPlacement": 1, "USER32.dll!CallNextHookEx": 3, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!WaitForSingleObject": 6, "USER32.dll!UnhookWindowsHookEx": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!GetNativeSystemInfo": 1, "KERNEL32.dll!OpenEventW": 7, "KERNEL32.dll!SetEvent": 6, "USER32.dll!SetWindowsHookExW": 3, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!MapViewOfFileEx": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "KERNEL32.dll!CreateFileMappingW": 1, "ADVAPI32.dll!FreeSid": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "ADVAPI32.dll!GetSecurityDescriptorSacl": 1, "ADVAPI32.dll!SetSecurityInfo": 1, "USER32.dll!UnionRect": 1, "USER32.dll!SystemParametersInfoW": 1, "KERNEL32.dll!CreateThread": 2, "USER32.dll!PostMessageW": 2, "KERNEL32.dll!IsWow64Process": 1, "KERNEL32.dll!Wow64DisableWow64FsRedirection": 1, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!Wow64RevertWow64FsRedirection": 1, "USER32.dll!EnumDisplaySettingsW": 1, "USER32.dll!EnumWindows": 1, "USER32.dll!GetClassNameW": 16, "USER32.dll!EqualRect": 5, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!TryEnterCriticalSection": 2, "USER32.dll!InflateRect": 2, "USER32.dll!GetWindowLongW": 6, "USER32.dll!OffsetRect": 3, "USER32.dll!EnumChildWindows": 1, "USER32.dll!GetParent": 1, "USER32.dll!GetForegroundWindow": 1, "USER32.dll!GetWindowTextW": 1, "USER32.dll!CallWindowProcW": 9, "USER32.dll!IsWindowUnicode": 4, "USER32.dll!GetWindowLongA": 2, "USER32.dll!SetWindowLongW": 2, "USER32.dll!SetWindowLongA": 2, "USER32.dll!InvalidateRect": 1, "USER32.dll!GetWindow": 2, "USER32.dll!MonitorFromWindow": 2, "USER32.dll!CopyRect": 1, "USER32.dll!IsWindow": 2, "USER32.dll!CharLowerW": 1, "USER32.dll!IsMenu": 1, "KERNEL32.dll!lstrlenW": 1, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegQueryValueExW": 3, "ADVAPI32.dll!RegCloseKey": 3, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!VirtualQuery": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvSmartMax64.dll", "sha256": "c9e3f66e8827874042abdbc574a350762dcf17bdc01000bd23d70f4035e0dca7", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 132608, "processed_bytes": 132608, "instructions": 32291, "skipdata_bytes": 13 } ], "utc": "2026-11-11T21:40:11.002708+00:00", "instructions": 32291, "skipdata_bytes": 13, "calls": 1946, "api_reference_counts": { "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!RtlUnwindEx": 1, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!GetLastError": 46, "KERNEL32.dll!SetLastError": 15, "KERNEL32.dll!DeleteCriticalSection": 6, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!GetProcAddress": 30, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!GetModuleHandleW": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!EnterCriticalSection": 4, "KERNEL32.dll!LeaveCriticalSection": 6, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetModuleFileNameW": 4, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!MultiByteToWideChar": 3, "KERNEL32.dll!WideCharToMultiByte": 3, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetProcessHeap": 3, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!CloseHandle": 19, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RaiseException": 2, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!LocalFree": 21, "KERNEL32.dll!LocalAlloc": 7, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!CreateProcessW": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "USER32.dll!MonitorFromRect": 1, "USER32.dll!GetMonitorInfoW": 6, "USER32.dll!IntersectRect": 10, "USER32.dll!IsRectEmpty": 8, "USER32.dll!PtInRect": 3, "USER32.dll!MonitorFromPoint": 3, "KERNEL32.dll!lstrcmpW": 24, "USER32.dll!FindWindowW": 15, "USER32.dll!ClientToScreen": 1, "USER32.dll!GetWindowRect": 9, "USER32.dll!GetCursorPos": 7, "USER32.dll!GetAsyncKeyState": 1, "USER32.dll!IsWindowVisible": 2, "USER32.dll!GetWindowPlacement": 4, "USER32.dll!SetWindowPos": 2, "USER32.dll!SetWindowPlacement": 1, "USER32.dll!CallNextHookEx": 3, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!WaitForSingleObject": 4, "USER32.dll!UnhookWindowsHookEx": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!GetNativeSystemInfo": 1, "KERNEL32.dll!OpenEventW": 7, "KERNEL32.dll!SetEvent": 6, "USER32.dll!SetWindowsHookExW": 3, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!MapViewOfFileEx": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "KERNEL32.dll!CreateFileMappingW": 1, "ADVAPI32.dll!FreeSid": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "ADVAPI32.dll!GetSecurityDescriptorSacl": 1, "ADVAPI32.dll!SetSecurityInfo": 1, "USER32.dll!UnionRect": 1, "USER32.dll!SystemParametersInfoW": 1, "KERNEL32.dll!CreateThread": 2, "USER32.dll!PostMessageW": 2, "KERNEL32.dll!IsWow64Process": 1, "KERNEL32.dll!Wow64DisableWow64FsRedirection": 1, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!Wow64RevertWow64FsRedirection": 1, "USER32.dll!EnumDisplaySettingsW": 1, "USER32.dll!EnumWindows": 1, "USER32.dll!GetClassNameW": 16, "USER32.dll!EqualRect": 5, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!TryEnterCriticalSection": 2, "USER32.dll!InflateRect": 2, "USER32.dll!GetWindowLongW": 1, "USER32.dll!GetWindowLongPtrW": 5, "USER32.dll!OffsetRect": 3, "USER32.dll!EnumChildWindows": 1, "USER32.dll!GetParent": 1, "USER32.dll!GetForegroundWindow": 1, "USER32.dll!GetWindowTextW": 1, "USER32.dll!CallWindowProcW": 9, "USER32.dll!IsWindowUnicode": 4, "USER32.dll!GetWindowLongPtrA": 2, "USER32.dll!SetWindowLongPtrW": 2, "USER32.dll!SetWindowLongPtrA": 2, "USER32.dll!InvalidateRect": 1, "USER32.dll!GetWindow": 2, "USER32.dll!MonitorFromWindow": 2, "USER32.dll!CopyRect": 1, "USER32.dll!IsWindow": 2, "USER32.dll!CharLowerW": 1, "USER32.dll!IsMenu": 1, "KERNEL32.dll!lstrlenW": 1, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegQueryValueExW": 3, "ADVAPI32.dll!RegCloseKey": 3, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!VirtualQuery": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\\nvaudcap32v.dll", "sha256": "d41f77ca62e406125bb165450ef99d16ced0fac9a574058ca3cd31b6a3b58ca8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 132096, "processed_bytes": 132096, "instructions": 49162, "skipdata_bytes": 3 } ], "utc": "2026-11-11T21:40:10.972235+00:00", "instructions": 49162, "skipdata_bytes": 3, "calls": 2644, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 7, "ADVAPI32.dll!RegOpenKeyExA": 2, "ADVAPI32.dll!RegQueryValueExA": 2, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!CreateEventA": 5, "KERNEL32.dll!DeleteCriticalSection": 8, "KERNEL32.dll!CloseHandle": 46, "KERNEL32.dll!SetEvent": 19, "ole32.dll!CoInitialize": 24, "ole32.dll!CoUninitialize": 24, "KERNEL32.dll!CreateWaitableTimerA": 3, "KERNEL32.dll!SetWaitableTimer": 5, "KERNEL32.dll!GetCurrentThread": 5, "KERNEL32.dll!SetThreadPriority": 5, "KERNEL32.dll!GetLastError": 21, "ole32.dll!CoTaskMemFree": 41, "KERNEL32.dll!WaitForSingleObject": 30, "KERNEL32.dll!CancelWaitableTimer": 11, "KERNEL32.dll!EnterCriticalSection": 25, "KERNEL32.dll!LeaveCriticalSection": 34, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!CreateThread": 5, "ole32.dll!PropVariantClear": 31, "KERNEL32.dll!ReleaseMutex": 10, "ole32.dll!CoCreateInstance": 17, "KERNEL32.dll!Sleep": 9, "ole32.dll!CoTaskMemAlloc": 8, "WINMM.dll!waveOutGetNumDevs": 2, "WINMM.dll!waveOutOpen": 1, "WINMM.dll!waveOutPrepareHeader": 2, "WINMM.dll!waveOutWrite": 1, "WINMM.dll!waveOutUnprepareHeader": 1, "WINMM.dll!waveOutReset": 1, "WINMM.dll!waveOutClose": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetProcAddress": 3, "KERNEL32.dll!GetSystemDefaultUILanguage": 2, "WINMM.dll!waveOutMessage": 2, "KERNEL32.dll!lstrcmpiW": 1, "WINMM.dll!waveOutGetDevCapsA": 1, "KERNEL32.dll!GetSystemDirectoryA": 2, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!FreeLibrary": 4, "SHELL32.dll!SHGetFolderPathA": 2, "KERNEL32.dll!CreateDirectoryA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!GetLocalTime": 2, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!FindFirstFileA": 1, "KERNEL32.dll!FindNextFileA": 2, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!CreateMutexA": 3, "KERNEL32.dll!DeviceIoControl": 12, "ADVAPI32.dll!RegGetValueA": 2, "SETUPAPI.dll!SetupDiGetClassDevsA": 3, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 3, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailA": 6, "KERNEL32.dll!LocalAlloc": 3, "SETUPAPI.dll!CM_Get_DevNode_Status_Ex": 3, "KERNEL32.dll!LocalFree": 10, "KERNEL32.dll!CreateFileA": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!SystemTimeToFileTime": 2, "KERNEL32.dll!CompareFileTime": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!GetModuleHandleW": 2, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 3, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!GetCurrentProcess": 1, "KERNEL32.dll!TerminateProcess": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!_except_handler4_common": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!__CxxFrameHandler3": 1, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 1, "api-ms-win-crt-string-l1-1-0.dll!tolower": 1, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 1, "api-ms-win-crt-string-l1-1-0.dll!strcat_s": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fseek": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ftell": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 1, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 1, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 1, "api-ms-win-crt-time-l1-1-0.dll!strftime": 1, "api-ms-win-crt-time-l1-1-0.dll!_time64": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf": 1, "api-ms-win-crt-string-l1-1-0.dll!wmemcpy_s": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\McpServer\\NvAppMcpServer.exe", "sha256": "1a8f14df4d2d1070f56d1307ecef35765ea9a7ceba6197cdca3bc5ae27ac0a6c", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 126976, "processed_bytes": 126976, "instructions": 81934, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:10.940044+00:00", "instructions": 81934, "skipdata_bytes": 1, "calls": 1413, "api_reference_counts": { "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 3, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 14, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 61, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 15, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 7, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 4, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 5, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 6, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 6, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 4, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnprintf_s": 4, "MSVCP140.dll!?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 2, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 2, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 2, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 12, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 9, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 2, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 6, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 4, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 5, "KERNEL32.dll!CreateFileA": 2, "KERNEL32.dll!GetLastError": 67, "KERNEL32.dll!WaitNamedPipeA": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!SetNamedPipeHandleState": 2, "KERNEL32.dll!GetNamedPipeHandleStateA": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 11, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 4, "KERNEL32.dll!CloseHandle": 46, "KERNEL32.dll!LocalFree": 3, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!WideCharToMultiByte": 7, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!WaitForSingleObject": 2, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 4, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "KERNEL32.dll!GetCurrentThreadId": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 4, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!ResetEvent": 3, "KERNEL32.dll!ReadFile": 3, "KERNEL32.dll!GetOverlappedResult": 4, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!WriteFile": 4, "KERNEL32.dll!FlushFileBuffers": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fileno": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_setmode": 3, "KERNEL32.dll!GetEnvironmentVariableA": 2, "KERNEL32.dll!WaitForMultipleObjects": 2, "KERNEL32.dll!CancelIoEx": 2, "KERNEL32.dll!CancelSynchronousIo": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 5, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 2, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 12, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 3, "USER32.dll!MessageBoxA": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 13, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 19, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!GetProcAddress": 2, "KERNEL32.dll!GetFileAttributesW": 3, "KERNEL32.dll!SetFileAttributesW": 2, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!CreateFileW": 4, "KERNEL32.dll!CreateDirectoryW": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!FindClose": 4, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 3, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_exe": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_set_app_type": 1, "api-ms-win-crt-math-l1-1-0.dll!__setusermatherr": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_get_initial_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_exit": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_set_fmode": 1, "api-ms-win-crt-runtime-l1-1-0.dll!__p___argc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!__p___argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_c_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_thread_local_exe_atexit_callback": 1, "api-ms-win-crt-locale-l1-1-0.dll!_configthreadlocale": 1, "api-ms-win-crt-heap-l1-1-0.dll!_set_new_mode": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__p__commode": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\\nvaudcap64v.dll", "sha256": "cfaffaea819a28bc1c837a8da021afe8da3cc22b787a2ecca8ec90e04109ebcc", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 145920, "processed_bytes": 145920, "instructions": 42550, "skipdata_bytes": 2491 } ], "utc": "2026-11-11T21:40:11.095346+00:00", "instructions": 42550, "skipdata_bytes": 2491, "calls": 2128, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 7, "ADVAPI32.dll!RegOpenKeyExA": 2, "ADVAPI32.dll!RegQueryValueExA": 2, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!CreateEventA": 5, "KERNEL32.dll!SetEvent": 24, "KERNEL32.dll!CloseHandle": 48, "KERNEL32.dll!DeleteCriticalSection": 8, "ole32.dll!CoInitialize": 24, "ole32.dll!CoUninitialize": 23, "KERNEL32.dll!CreateWaitableTimerA": 3, "KERNEL32.dll!SetWaitableTimer": 5, "KERNEL32.dll!GetCurrentThread": 5, "KERNEL32.dll!SetThreadPriority": 5, "KERNEL32.dll!GetLastError": 21, "ole32.dll!CoTaskMemFree": 43, "KERNEL32.dll!WaitForSingleObject": 30, "KERNEL32.dll!CancelWaitableTimer": 10, "KERNEL32.dll!EnterCriticalSection": 26, "KERNEL32.dll!LeaveCriticalSection": 35, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!CreateThread": 5, "ole32.dll!PropVariantClear": 31, "KERNEL32.dll!ReleaseMutex": 8, "ole32.dll!CoCreateInstance": 21, "KERNEL32.dll!Sleep": 9, "ole32.dll!CoTaskMemAlloc": 8, "WINMM.dll!waveOutGetNumDevs": 2, "WINMM.dll!waveOutOpen": 1, "WINMM.dll!waveOutPrepareHeader": 2, "WINMM.dll!waveOutWrite": 1, "WINMM.dll!waveOutUnprepareHeader": 1, "WINMM.dll!waveOutReset": 1, "WINMM.dll!waveOutClose": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetProcAddress": 3, "KERNEL32.dll!GetSystemDefaultUILanguage": 2, "WINMM.dll!waveOutMessage": 2, "KERNEL32.dll!lstrcmpiW": 1, "WINMM.dll!waveOutGetDevCapsA": 1, "KERNEL32.dll!GetSystemDirectoryA": 2, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!FreeLibrary": 3, "SHELL32.dll!SHGetFolderPathA": 2, "KERNEL32.dll!CreateDirectoryA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!GetLocalTime": 2, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!FindFirstFileA": 1, "KERNEL32.dll!FindNextFileA": 2, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!CreateMutexA": 3, "KERNEL32.dll!DeviceIoControl": 11, "ADVAPI32.dll!RegGetValueA": 2, "SETUPAPI.dll!SetupDiGetClassDevsA": 3, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 3, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailA": 6, "KERNEL32.dll!LocalAlloc": 3, "SETUPAPI.dll!CM_Get_DevNode_Status_Ex": 3, "KERNEL32.dll!LocalFree": 8, "KERNEL32.dll!CreateFileA": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!SystemTimeToFileTime": 2, "KERNEL32.dll!CompareFileTime": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!GetModuleHandleW": 2, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 2, "KERNEL32.dll!RtlCaptureContext": 2, "KERNEL32.dll!RtlLookupFunctionEntry": 2, "KERNEL32.dll!RtlVirtualUnwind": 2, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!GetCurrentProcess": 1, "KERNEL32.dll!TerminateProcess": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 1, "api-ms-win-crt-string-l1-1-0.dll!tolower": 1, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 1, "api-ms-win-crt-string-l1-1-0.dll!strcat_s": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fseek": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ftell": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 1, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 1, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 1, "api-ms-win-crt-time-l1-1-0.dll!strftime": 1, "api-ms-win-crt-time-l1-1-0.dll!_time64": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf": 1, "api-ms-win-crt-string-l1-1-0.dll!wmemcpy_s": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\VirtualAudio.Driver.{7C43349F-A7F0-4D47-8E5D-C03E063D8955}\\nvaudcap64a.dll", "sha256": "e92db4d1b75fb4669eb320c1a33d656bb439c8211589f482b1dbc403df871de8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 147968, "processed_bytes": 147968, "instructions": 31086, "skipdata_bytes": 23624 } ], "utc": "2026-11-11T21:40:11.105436+00:00", "instructions": 31086, "skipdata_bytes": 23624, "calls": 0, "api_reference_counts": {}, "complete_linear_sweep": true }, { "path": "NVIDIA App\\DarkModeCheck.exe", "sha256": "9c0863c1872266fd4700d303e866fb2ed8321862800b0f0de9cd05c6addb887c", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 154112, "processed_bytes": 154112, "instructions": 42587, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:11.119128+00:00", "instructions": 42587, "skipdata_bytes": 0, "calls": 2955, "api_reference_counts": { "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!GetSystemDirectoryW": 14, "KERNEL32.dll!LocalAlloc": 11, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetLastError": 51, "KERNEL32.dll!LocalFree": 17, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 14, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 6, "KERNEL32.dll!CloseHandle": 12, "KERNEL32.dll!GetProcAddress": 65, "KERNEL32.dll!GetFullPathNameW": 2, "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!InitializeSRWLock": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!AcquireSRWLockExclusive": 1, "KERNEL32.dll!TryEnterCriticalSection": 1, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!ReleaseSRWLockExclusive": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!WideCharToMultiByte": 13, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 3, "KERNEL32.dll!SetFileInformationByHandle": 2, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!MultiByteToWideChar": 12, "KERNEL32.dll!LCMapStringEx": 3, "KERNEL32.dll!RtlUnwindEx": 2, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!FreeLibrary": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!WriteConsoleW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvBackend\\ApplicationOntology\\NvOAWrapperCache.exe", "sha256": "0d26ce0ad86cfa671425fe7de2b762c62e148597092fe0edcf5ff84a584fdbb9", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 174080, "processed_bytes": 174080, "instructions": 49235, "skipdata_bytes": 8 } ], "utc": "2026-11-11T21:40:11.150544+00:00", "instructions": 49235, "skipdata_bytes": 8, "calls": 3258, "api_reference_counts": { "KERNEL32.dll!CreateNamedPipeW": 1, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!ConnectNamedPipe": 1, "KERNEL32.dll!GetLastError": 43, "KERNEL32.dll!WaitForMultipleObjects": 1, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!ReadFile": 1, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!DisconnectNamedPipe": 1, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!CloseHandle": 5, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!MultiByteToWideChar": 5, "KERNEL32.dll!DeleteCriticalSection": 8, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!GetProcAddress": 34, "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!LocalAlloc": 20, "KERNEL32.dll!LocalFree": 40, "KERNEL32.dll!GetSystemDirectoryW": 4, "KERNEL32.dll!SetLastError": 26, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!GetFileAttributesW": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 3, "KERNEL32.dll!WideCharToMultiByte": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 2, "KERNEL32.dll!WakeAllConditionVariable": 1, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\SDK\\Public_Release\\FvSDK_x64.dll", "sha256": "3d7fc2f6badbf9ba3796ef324638526e0438bf090cbc419654294ac7fc6bc513", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 201728, "processed_bytes": 201728, "instructions": 53580, "skipdata_bytes": 82 } ], "utc": "2026-11-11T21:40:11.247059+00:00", "instructions": 53580, "skipdata_bytes": 82, "calls": 3739, "api_reference_counts": { "ADVAPI32.dll!EventWriteTransfer": 1, "VCRUNTIME140.dll!__std_exception_copy": 19, "VCRUNTIME140.dll!__std_exception_destroy": 5, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 6, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Query_perf_counter": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "MSVCP140.dll!_Cnd_destroy_in_situ": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 200, "MSVCP140.dll!_Mtx_init_in_situ": 14, "MSVCP140.dll!_Cnd_init_in_situ": 2, "MSVCP140.dll!_Thrd_id": 3, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!WideCharToMultiByte": 4, "KERNEL32.dll!GetLastError": 48, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!GetProcAddress": 23, "MSVCP140.dll!_Mtx_destroy_in_situ": 15, "MSVCP140.dll!_Mtx_lock": 73, "MSVCP140.dll!_Mtx_unlock": 75, "MSVCP140.dll!_Cnd_broadcast": 6, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 137, "MSVCP140.dll!_Cnd_wait": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 2, "api-ms-win-crt-heap-l1-1-0.dll!free": 11, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Thrd_join": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 2, "MSVCP140.dll!_Xtime_get_ticks": 2, "MSVCP140.dll!_Mtx_current_owns": 2, "MSVCP140.dll!_Cnd_timedwait": 2, "VCRUNTIME140.dll!__std_type_info_compare": 2, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 2, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 4, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 2, "KERNEL32.dll!GetCurrentThreadId": 2, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 3, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 3, "KERNEL32.dll!OutputDebugStringW": 7, "MSVCP140.dll!?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 1, "KERNEL32.dll!GetLocalTime": 1, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 2, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ": 8, "KERNEL32.dll!CloseHandle": 33, "KERNEL32.dll!ResetEvent": 6, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!WaitForMultipleObjects": 1, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 2, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetwc": 1, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fputwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 1, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 2, "MSVCP140.dll!?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ": 1, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 1, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 1, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 2, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "KERNEL32.dll!GetSystemDirectoryW": 14, "KERNEL32.dll!LocalAlloc": 11, "KERNEL32.dll!LoadLibraryExW": 8, "KERNEL32.dll!LocalFree": 19, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 8, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!GetFullPathNameW": 2, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "KERNEL32.dll!DisableThreadLibraryCalls": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventSetInformation": 1, "ADVAPI32.dll!EventUnregister": 1, "KERNEL32.dll!OpenFileMappingA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA": 1, "KERNEL32.dll!CreateFileMappingA": 1, "KERNEL32.dll!MapViewOfFile": 3, "KERNEL32.dll!GetCurrentDirectoryA": 1, "api-ms-win-crt-string-l1-1-0.dll!strnlen": 1, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 1, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!WaitForSingleObject": 7, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!Sleep": 5, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 1, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 1, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 1, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z": 1, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!OpenMutexW": 1, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 12, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!GetCurrentProcess": 2, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CreateDirectoryW": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z": 1, "KERNEL32.dll!OutputDebugStringA": 18, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetCurrentProcessId": 2, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!UnregisterWaitEx": 2, "KERNEL32.dll!OpenEventW": 1, "KERNEL32.dll!QueryPerformanceCounter": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z": 1, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 1, "KERNEL32.dll!WriteFile": 2, "KERNEL32.dll!CreatePipe": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!SetFileInformationByHandle": 5, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 6, "KERNEL32.dll!MoveFileExW": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!TerminateProcess": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 2, "KERNEL32.dll!RtlCaptureContext": 2, "KERNEL32.dll!RtlLookupFunctionEntry": 2, "KERNEL32.dll!RtlVirtualUnwind": 2, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!InitializeSListHead": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!sqrt": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\SDK\\Public_Release\\FvSDK_x86.dll", "sha256": "1bb621f941782a3038ba01faa979849d9050f3796f1654de7ebe7491d152bf43", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 193024, "processed_bytes": 193024, "instructions": 62935, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:11.238687+00:00", "instructions": 62935, "skipdata_bytes": 0, "calls": 4263, "api_reference_counts": { "ADVAPI32.dll!EventWriteTransfer": 1, "VCRUNTIME140.dll!__std_exception_copy": 19, "VCRUNTIME140.dll!__std_exception_destroy": 5, "MSVCP140.dll!?_Xlength_error@std@@YAXPBD@Z": 6, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Query_perf_counter": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 125, "MSVCP140.dll!_Thrd_id": 2, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 134, "MSVCP140.dll!_Mtx_init_in_situ": 14, "MSVCP140.dll!_Cnd_init_in_situ": 2, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 16, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!WideCharToMultiByte": 4, "KERNEL32.dll!GetLastError": 44, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!GetProcAddress": 23, "MSVCP140.dll!_Mtx_destroy_in_situ": 15, "MSVCP140.dll!_Mtx_lock": 74, "MSVCP140.dll!_Mtx_unlock": 78, "MSVCP140.dll!_Cnd_broadcast": 6, "MSVCP140.dll!_Cnd_wait": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 2, "api-ms-win-crt-heap-l1-1-0.dll!free": 13, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPBD@Z": 2, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 3, "MSVCP140.dll!_Xtime_get_ticks": 2, "MSVCP140.dll!_Mtx_current_owns": 2, "MSVCP140.dll!_Cnd_timedwait": 2, "VCRUNTIME140.dll!__std_type_info_compare": 2, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 2, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!OutputDebugStringA": 20, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z": 10, "MSVCP140.dll!??Bios_base@std@@QBE_NXZ": 2, "KERNEL32.dll!GetLocalTime": 2, "KERNEL32.dll!GetCurrentThreadId": 3, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 2, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z": 3, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ": 4, "MSVCP140.dll!?good@ios_base@std@@QBE_NXZ": 4, "KERNEL32.dll!OutputDebugStringW": 9, "MSVCP140.dll!?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z": 1, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ": 4, "MSVCP140.dll!??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ": 3, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ": 5, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ": 3, "MSVCP140.dll!??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 2, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ": 3, "MSVCP140.dll!?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ": 8, "KERNEL32.dll!CloseHandle": 28, "KERNEL32.dll!ResetEvent": 6, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!WaitForMultipleObjects": 1, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QBE_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 2, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fputwc": 1, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 1, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ": 2, "MSVCP140.dll!?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z": 1, "MSVCP140.dll!?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ": 1, "MSVCP140.dll!??0_Lockit@std@@QAE@H@Z": 1, "MSVCP140.dll!??Bid@locale@std@@QAEIXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z": 1, "MSVCP140.dll!??1_Lockit@std@@QAE@XZ": 2, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z": 2, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z": 1, "MSVCP140.dll!?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "KERNEL32.dll!LoadLibraryExW": 8, "KERNEL32.dll!LocalFree": 20, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 8, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!LocalAlloc": 6, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!lstrcmpW": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "KERNEL32.dll!DisableThreadLibraryCalls": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventSetInformation": 1, "ADVAPI32.dll!EventUnregister": 1, "KERNEL32.dll!OpenFileMappingA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA": 1, "KERNEL32.dll!CreateFileMappingA": 1, "KERNEL32.dll!MapViewOfFile": 3, "KERNEL32.dll!GetCurrentDirectoryA": 1, "api-ms-win-crt-string-l1-1-0.dll!strnlen": 1, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 1, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!WaitForSingleObject": 7, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!Sleep": 5, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ": 1, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 1, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ": 1, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z": 1, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ": 4, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ": 4, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!OpenMutexW": 1, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 12, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPBD@Z": 1, "KERNEL32.dll!GetCurrentProcess": 2, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CreateDirectoryW": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z": 1, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ": 2, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetCurrentProcessId": 2, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!UnregisterWaitEx": 2, "KERNEL32.dll!OpenEventW": 1, "KERNEL32.dll!QueryPerformanceCounter": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z": 1, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ": 1, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ": 1, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 1, "KERNEL32.dll!WriteFile": 2, "KERNEL32.dll!CreatePipe": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!SetFileInformationByHandle": 5, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 1, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "KERNEL32.dll!MoveFileExW": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!TerminateProcess": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 3, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!InitializeSListHead": 1, "VCRUNTIME140.dll!__CxxFrameHandler3": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!_except_handler4_common": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "api-ms-win-crt-math-l1-1-0.dll!_libm_sse2_sqrt_precise": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\bin\\FvSDK_x64.dll", "sha256": "e1a209218a6edd6c01f3ca107765faa44ee24539b3df8fbfc675e7bbc67b05ac", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 201728, "processed_bytes": 201728, "instructions": 53580, "skipdata_bytes": 82 } ], "utc": "2026-11-11T21:40:11.269621+00:00", "instructions": 53580, "skipdata_bytes": 82, "calls": 3739, "api_reference_counts": { "ADVAPI32.dll!EventWriteTransfer": 1, "VCRUNTIME140.dll!__std_exception_copy": 19, "VCRUNTIME140.dll!__std_exception_destroy": 5, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 6, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Query_perf_counter": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "MSVCP140.dll!_Cnd_destroy_in_situ": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 200, "MSVCP140.dll!_Mtx_init_in_situ": 14, "MSVCP140.dll!_Cnd_init_in_situ": 2, "MSVCP140.dll!_Thrd_id": 3, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!WideCharToMultiByte": 4, "KERNEL32.dll!GetLastError": 48, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!GetProcAddress": 23, "MSVCP140.dll!_Mtx_destroy_in_situ": 15, "MSVCP140.dll!_Mtx_lock": 73, "MSVCP140.dll!_Mtx_unlock": 75, "MSVCP140.dll!_Cnd_broadcast": 6, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 137, "MSVCP140.dll!_Cnd_wait": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 2, "api-ms-win-crt-heap-l1-1-0.dll!free": 11, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Thrd_join": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 2, "MSVCP140.dll!_Xtime_get_ticks": 2, "MSVCP140.dll!_Mtx_current_owns": 2, "MSVCP140.dll!_Cnd_timedwait": 2, "VCRUNTIME140.dll!__std_type_info_compare": 2, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 2, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 4, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 2, "KERNEL32.dll!GetCurrentThreadId": 2, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 3, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 3, "KERNEL32.dll!OutputDebugStringW": 7, "MSVCP140.dll!?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 1, "KERNEL32.dll!GetLocalTime": 1, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 2, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ": 8, "KERNEL32.dll!CloseHandle": 33, "KERNEL32.dll!ResetEvent": 6, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!WaitForMultipleObjects": 1, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 1, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 2, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!ungetwc": 1, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fputwc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 1, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 2, "MSVCP140.dll!?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ": 1, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 1, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 1, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 2, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "KERNEL32.dll!GetSystemDirectoryW": 14, "KERNEL32.dll!LocalAlloc": 11, "KERNEL32.dll!LoadLibraryExW": 8, "KERNEL32.dll!LocalFree": 19, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 8, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!GetFullPathNameW": 2, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "KERNEL32.dll!DisableThreadLibraryCalls": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventSetInformation": 1, "ADVAPI32.dll!EventUnregister": 1, "KERNEL32.dll!OpenFileMappingA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA": 1, "KERNEL32.dll!CreateFileMappingA": 1, "KERNEL32.dll!MapViewOfFile": 3, "KERNEL32.dll!GetCurrentDirectoryA": 1, "api-ms-win-crt-string-l1-1-0.dll!strnlen": 1, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 1, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!WaitForSingleObject": 7, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!Sleep": 5, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 1, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 1, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 1, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z": 1, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!OpenMutexW": 1, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 12, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!GetCurrentProcess": 2, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CreateDirectoryW": 1, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z": 1, "KERNEL32.dll!OutputDebugStringA": 18, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetCurrentProcessId": 2, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!UnregisterWaitEx": 2, "KERNEL32.dll!OpenEventW": 1, "KERNEL32.dll!QueryPerformanceCounter": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z": 1, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 1, "KERNEL32.dll!WriteFile": 2, "KERNEL32.dll!CreatePipe": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!SetFileInformationByHandle": 5, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 6, "KERNEL32.dll!MoveFileExW": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 2, "KERNEL32.dll!UnhandledExceptionFilter": 2, "KERNEL32.dll!TerminateProcess": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 2, "KERNEL32.dll!RtlCaptureContext": 2, "KERNEL32.dll!RtlLookupFunctionEntry": 2, "KERNEL32.dll!RtlVirtualUnwind": 2, "KERNEL32.dll!IsDebuggerPresent": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!InitializeSListHead": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!sqrt": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvBackend\\ApplicationOntology\\OAWrapper.exe", "sha256": "64ece426504fc9f057e8ce36a70659d6811f08f7117affb79b5765e8a67c88fe", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 242176, "processed_bytes": 242176, "instructions": 67216, "skipdata_bytes": 86 } ], "utc": "2026-11-11T21:40:11.311982+00:00", "instructions": 67216, "skipdata_bytes": 86, "calls": 4197, "api_reference_counts": { "KERNEL32.dll!GetProcAddress": 46, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!GetLastError": 55, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!GetModuleFileNameW": 3, "KERNEL32.dll!WideCharToMultiByte": 4, "KERNEL32.dll!MultiByteToWideChar": 5, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!GetSystemDirectoryW": 16, "KERNEL32.dll!LocalAlloc": 42, "KERNEL32.dll!LoadLibraryExW": 13, "KERNEL32.dll!LocalFree": 70, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 35, "KERNEL32.dll!GetFileAttributesW": 5, "KERNEL32.dll!CreateFileW": 3, "KERNEL32.dll!CloseHandle": 4, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpA": 4, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!DeleteCriticalSection": 6, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EnterCriticalSection": 5, "KERNEL32.dll!LeaveCriticalSection": 5, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!ReadFile": 3, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\InstallerCore\\SETUP.EXE", "sha256": "19e9c11f18e2ee08d601475ed92110c786700467cb5ed67f85feaec380e77e3f", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 256000, "processed_bytes": 256000, "instructions": 88207, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:11.442759+00:00", "instructions": 88207, "skipdata_bytes": 1, "calls": 6355, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 10, "KERNEL32.dll!GetLastError": 52, "OLEAUT32.dll!VariantInit": 65, "OLEAUT32.dll!VariantClear": 104, "OLEAUT32.dll!SysStringLen": 7, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!LocalFree": 4, "USER32.dll!MessageBoxW": 1, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!DeleteCriticalSection": 37, "OLEAUT32.dll!SysAllocString": 4, "OLEAUT32.dll!SysFreeString": 4, "OLEAUT32.dll!SysAllocStringLen": 6, "KERNEL32.dll!IsDebuggerPresent": 5, "KERNEL32.dll!Sleep": 1, "KERNEL32.dll!DebugBreak": 1, "OLEAUT32.dll!VariantChangeType": 12, "KERNEL32.dll!GetCurrentProcess": 12, "KERNEL32.dll!CloseHandle": 11, "KERNEL32.dll!SetLastError": 25, "KERNEL32.dll!SetDefaultDllDirectories": 1, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!SetErrorMode": 1, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoInitializeSecurity": 1, "ole32.dll!CoUninitialize": 1, "KERNEL32.dll!EnterCriticalSection": 10, "KERNEL32.dll!LeaveCriticalSection": 12, "ADVAPI32.dll!RegCloseKey": 6, "KERNEL32.dll!WideCharToMultiByte": 5, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!FreeLibrary": 5, "KERNEL32.dll!GetFileAttributesW": 4, "KERNEL32.dll!SetCurrentDirectoryW": 1, "OLEAUT32.dll!SafeArrayUnlock": 3, "OLEAUT32.dll!SafeArrayDestroy": 2, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetLBound": 2, "OLEAUT32.dll!SafeArrayGetUBound": 2, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegQueryValueExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!VerSetConditionMask": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 6, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!EncodePointer": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!DecodePointer": 1, "KERNEL32.dll!WriteConsoleW": 2, "ADVAPI32.dll!LsaNtStatusToWinError": 1 }, "complete_linear_sweep": true }, { "path": "NvTelemetry\\NvTelemetryBridge64.dll", "sha256": "e7ca48239c18ffb6e2fc2b645eef8cc843c23fd3fcd6b90569c6bf4660af97df", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 293888, "processed_bytes": 293888, "instructions": 82606, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:11.465246+00:00", "instructions": 82606, "skipdata_bytes": 1, "calls": 5884, "api_reference_counts": { "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!WaitNamedPipeW": 1, "KERNEL32.dll!GetLastError": 53, "KERNEL32.dll!CreateFileW": 7, "KERNEL32.dll!SetNamedPipeHandleState": 1, "KERNEL32.dll!TransactNamedPipe": 1, "KERNEL32.dll!CloseHandle": 8, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!MultiByteToWideChar": 8, "KERNEL32.dll!WideCharToMultiByte": 10, "RPCRT4.dll!UuidCreate": 1, "RPCRT4.dll!UuidToStringA": 1, "RPCRT4.dll!RpcStringFreeA": 1, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!LocalFree": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFinalPathNameByHandleW": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!DeleteCriticalSection": 6, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EnterCriticalSection": 6, "KERNEL32.dll!LeaveCriticalSection": 6, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetModuleHandleW": 2, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!SetLastError": 7, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!FreeLibrary": 4, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\libEGL.dll", "sha256": "4206dead23c7224f3fc3863c80861d0e9da1b2a91084e0454d84b427f944ccbb", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 356352, "processed_bytes": 356352, "instructions": 100185, "skipdata_bytes": 4 } ], "utc": "2026-11-11T21:40:11.473673+00:00", "instructions": 100185, "skipdata_bytes": 4, "calls": 6149, "api_reference_counts": { "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!EnterCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 3, "KERNEL32.dll!DeleteCriticalSection": 5, "KERNEL32.dll!GetLastError": 31, "KERNEL32.dll!SetLastError": 7, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!CloseHandle": 3, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!LoadLibraryExW": 5, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!ReadFile": 3, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!LoadLibraryW": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\7z.exe", "sha256": "3a48b1cb3d10cb76271625913c64ced4fa91f62c5c430af36fb567704b01b12f", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 408064, "processed_bytes": 408064, "instructions": 114572, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:11.575715+00:00", "instructions": 114572, "skipdata_bytes": 0, "calls": 10956, "api_reference_counts": { "KERNEL32.dll!GetLastError": 92, "USER32.dll!CharUpperW": 10, "OLEAUT32.dll!SysStringLen": 1, "KERNEL32.dll!MultiByteToWideChar": 3, "KERNEL32.dll!WideCharToMultiByte": 3, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!LoadLibraryExW": 5, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!LocalFree": 1, "KERNEL32.dll!CreateDirectoryW": 4, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!GetTickCount": 8, "KERNEL32.dll!GetCurrentProcessId": 2, "KERNEL32.dll!SetLastError": 17, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!GetTempPathW": 1, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!MoveFileWithProgressW": 2, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 6, "KERNEL32.dll!SetFileTime": 4, "KERNEL32.dll!CloseHandle": 14, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetFileInformationByHandle": 4, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindFirstStreamW": 2, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!FindNextStreamW": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!GetLogicalDriveStringsW": 2, "KERNEL32.dll!GetStdHandle": 6, "KERNEL32.dll!DeviceIoControl": 6, "KERNEL32.dll!GetFileSize": 1, "KERNEL32.dll!SetFilePointer": 2, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!WriteFile": 8, "KERNEL32.dll!GetDiskFreeSpaceExW": 1, "KERNEL32.dll!GetDiskFreeSpaceW": 1, "KERNEL32.dll!GetCurrentProcess": 11, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!LookupPrivilegeValueW": 2, "ADVAPI32.dll!AdjustTokenPrivileges": 2, "KERNEL32.dll!GetModuleHandleW": 7, "KERNEL32.dll!GetProcAddress": 29, "OLEAUT32.dll!VariantClear": 2, "OLEAUT32.dll!SysAllocStringLen": 2, "OLEAUT32.dll!VariantCopy": 1, "KERNEL32.dll!FileTimeToLocalFileTime": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "ADVAPI32.dll!RegCloseKey": 1, "ADVAPI32.dll!RegQueryValueExW": 3, "ADVAPI32.dll!RegOpenKeyExW": 1, "KERNEL32.dll!GetProcessAffinityMask": 1, "KERNEL32.dll!GlobalMemoryStatusEx": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!FileTimeToDosDateTime": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!CompareFileTime": 10, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetProcessAffinityMask": 1, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "ADVAPI32.dll!SetFileSecurityW": 1, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!LeaveCriticalSection": 26, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!EnterCriticalSection": 24, "KERNEL32.dll!GetProcessTimes": 2, "ADVAPI32.dll!GetFileSecurityW": 2, "OLEAUT32.dll!SysStringByteLen": 3, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "OLEAUT32.dll!SysFreeString": 8, "KERNEL32.dll!SetFileApisToOEM": 1, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!GetConsoleScreenBufferInfo": 1, "OLEAUT32.dll!SysAllocString": 3, "KERNEL32.dll!SetConsoleMode": 2, "KERNEL32.dll!VirtualAlloc": 4, "KERNEL32.dll!VirtualFree": 2, "KERNEL32.dll!GetLargePageMinimum": 1, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetVersion": 1, "KERNEL32.dll!RtlCaptureContext": 3, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 3, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\plugins\\SystemDataCollectorsContainerPlugin_x64.dll", "sha256": "0fefcd9d1b06470cf19c304f33514f6ed65ca19d85d6a3637b68135cbd87a5d2", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 444416, "processed_bytes": 444416, "instructions": 121985, "skipdata_bytes": 140 } ], "utc": "2026-11-11T21:40:11.756127+00:00", "instructions": 121985, "skipdata_bytes": 140, "calls": 8542, "api_reference_counts": { "KERNEL32.dll!OutputDebugStringW": 8, "KERNEL32.dll!DeleteCriticalSection": 8, "KERNEL32.dll!GetProcAddress": 168, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!FreeLibrary": 10, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!InitializeCriticalSection": 4, "KERNEL32.dll!EnterCriticalSection": 8, "KERNEL32.dll!LeaveCriticalSection": 8, "KERNEL32.dll!GetSystemDirectoryW": 18, "KERNEL32.dll!LocalAlloc": 32, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!SetLastError": 36, "KERNEL32.dll!LocalFree": 61, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!LoadLibraryExW": 20, "KERNEL32.dll!GetLastError": 90, "KERNEL32.dll!VerSetConditionMask": 10, "KERNEL32.dll!VerifyVersionInfoW": 6, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!GetFileAttributesW": 5, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!ResetEvent": 8, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 12, "KERNEL32.dll!GetCurrentThreadId": 6, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CloseHandle": 23, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!OutputDebugStringA": 18, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "KERNEL32.dll!SetEvent": 9, "ADVAPI32.dll!EventWriteTransfer": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventUnregister": 1, "pdh.dll!PdhCloseQuery": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 1, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!LoadLibraryExA": 3, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 1, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 2, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!WaitForMultipleObjects": 1, "KERNEL32.dll!GetLogicalProcessorInformationEx": 2, "pdh.dll!PdhOpenQueryW": 1, "KERNEL32.dll!GetModuleHandleA": 1, "pdh.dll!PdhRemoveCounter": 1, "ADVAPI32.dll!RegOpenKeyExW": 1, "ADVAPI32.dll!RegQueryValueExW": 1, "ADVAPI32.dll!RegCloseKey": 1, "KERNEL32.dll!MultiByteToWideChar": 7, "KERNEL32.dll!WideCharToMultiByte": 7, "KERNEL32.dll!LoadLibraryW": 1, "pdh.dll!PdhAddEnglishCounterW": 1, "pdh.dll!PdhCollectQueryData": 1, "pdh.dll!PdhGetFormattedCounterValue": 1, "KERNEL32.dll!GetTickCount64": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!GetNativeSystemInfo": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!QueryPerformanceFrequency": 1, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\nvfvsdksvc_x64.exe", "sha256": "e2ca40523ce7cd0c1f3b4beab6d9adf897a119c52d3c54a9e77784705c1c98e8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 583168, "processed_bytes": 583168, "instructions": 161085, "skipdata_bytes": 258 } ], "utc": "2026-11-11T21:40:11.759760+00:00", "instructions": 161085, "skipdata_bytes": 258, "calls": 11230, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!GetSystemDirectoryW": 14, "KERNEL32.dll!LocalAlloc": 11, "KERNEL32.dll!LoadLibraryExW": 11, "KERNEL32.dll!GetLastError": 97, "KERNEL32.dll!LocalFree": 22, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!GetProcAddress": 34, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!SetLastError": 9, "KERNEL32.dll!GetFileAttributesW": 1, "USER32.dll!CopyRect": 2, "USER32.dll!GetDlgItemTextW": 7, "GDI32.dll!CreateSolidBrush": 6, "GDI32.dll!SetBkMode": 7, "USER32.dll!FillRect": 2, "GDI32.dll!SetTextColor": 9, "USER32.dll!DrawTextW": 3, "USER32.dll!DrawFocusRect": 2, "ADVAPI32.dll!AllocateAndInitializeSid": 5, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 17, "KERNEL32.dll!OutputDebugStringW": 7, "KERNEL32.dll!GetCurrentThreadId": 6, "KERNEL32.dll!GetCurrentProcess": 7, "ADVAPI32.dll!OpenProcessToken": 5, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!CloseHandle": 48, "SHELL32.dll!SHGetKnownFolderPath": 4, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!OutputDebugStringA": 18, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!Sleep": 8, "ADVAPI32.dll!RegisterServiceCtrlHandlerExW": 1, "ADVAPI32.dll!SetServiceStatus": 5, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!RegisterWaitForSingleObject": 1, "KERNEL32.dll!ResetEvent": 2, "WTSAPI32.dll!WTSEnumerateSessionsW": 1, "KERNEL32.dll!EnterCriticalSection": 10, "KERNEL32.dll!LeaveCriticalSection": 10, "WTSAPI32.dll!WTSFreeMemory": 1, "ADVAPI32.dll!OpenSCManagerW": 4, "ADVAPI32.dll!OpenServiceW": 3, "ADVAPI32.dll!CloseServiceHandle": 12, "KERNEL32.dll!GetModuleFileNameW": 4, "ADVAPI32.dll!CreateServiceW": 1, "ADVAPI32.dll!ChangeServiceConfig2W": 1, "ADVAPI32.dll!StartServiceW": 1, "ADVAPI32.dll!ControlService": 1, "ADVAPI32.dll!QueryServiceStatus": 1, "ADVAPI32.dll!DeleteService": 1, "KERNEL32.dll!UnregisterWait": 1, "USER32.dll!UnregisterDeviceNotification": 2, "KERNEL32.dll!SetEvent": 6, "KERNEL32.dll!GetCommandLineW": 3, "SHELL32.dll!CommandLineToArgvW": 2, "KERNEL32.dll!lstrcmpiW": 5, "ADVAPI32.dll!StartServiceCtrlDispatcherW": 1, "KERNEL32.dll!AllocConsole": 1, "KERNEL32.dll!GetCurrentProcessId": 8, "KERNEL32.dll!AttachConsole": 1, "KERNEL32.dll!SetConsoleTitleA": 1, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!QueryPerformanceCounter": 8, "KERNEL32.dll!QueryPerformanceFrequency": 5, "USER32.dll!RegisterDeviceNotificationW": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!WaitForSingleObject": 5, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "KERNEL32.dll!OpenFileMappingA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA": 1, "KERNEL32.dll!CreateFileMappingA": 1, "KERNEL32.dll!MapViewOfFile": 1, "KERNEL32.dll!GetCurrentDirectoryA": 1, "KERNEL32.dll!lstrcpyW": 2, "USER32.dll!IsDlgButtonChecked": 10, "USER32.dll!GetWindowRect": 3, "USER32.dll!GetSystemMetrics": 8, "GDI32.dll!CreateDCW": 1, "GDI32.dll!GetDeviceCaps": 1, "KERNEL32.dll!MulDiv": 1, "GDI32.dll!DeleteDC": 2, "GDI32.dll!CreateFontW": 2, "GDI32.dll!SelectObject": 9, "GDI32.dll!TextOutW": 4, "GDI32.dll!SetBkColor": 3, "GDI32.dll!GetTextAlign": 1, "GDI32.dll!SetTextAlign": 2, "KERNEL32.dll!GetModuleHandleW": 6, "USER32.dll!LoadIconW": 3, "USER32.dll!DrawIconEx": 1, "USER32.dll!GetWindowDC": 4, "GDI32.dll!ExtCreatePen": 4, "GDI32.dll!MoveToEx": 11, "GDI32.dll!LineTo": 11, "GDI32.dll!DeleteObject": 8, "USER32.dll!ReleaseDC": 1, "USER32.dll!SendMessageW": 17, "SHELL32.dll!SHBrowseForFolderW": 1, "SHELL32.dll!SHGetPathFromIDListW": 1, "SHELL32.dll!SHGetMalloc": 1, "USER32.dll!GetDlgItem": 30, "USER32.dll!SetWindowTextW": 4, "USER32.dll!GetWindowLongPtrW": 4, "SHELL32.dll!ShellExecuteW": 1, "KERNEL32.dll!GetProcessHeap": 4, "KERNEL32.dll!HeapFree": 3, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!CreateThread": 3, "USER32.dll!RedrawWindow": 2, "USER32.dll!SendDlgItemMessageW": 8, "USER32.dll!EnableWindow": 1, "USER32.dll!ShowWindow": 11, "USER32.dll!GetClientRect": 1, "USER32.dll!GetParent": 2, "USER32.dll!SetWindowPos": 1, "GDI32.dll!Polygon": 1, "USER32.dll!LoadBitmapW": 1, "GDI32.dll!CreateCompatibleDC": 1, "GDI32.dll!BitBlt": 1, "USER32.dll!DefWindowProcW": 2, "USER32.dll!GetAsyncKeyState": 1, "USER32.dll!PostMessageW": 4, "USER32.dll!PostQuitMessage": 1, "USER32.dll!CreateDialogParamW": 1, "USER32.dll!MessageBoxW": 4, "USER32.dll!ScreenToClient": 1, "USER32.dll!PtInRect": 2, "USER32.dll!LoadStringW": 2, "USER32.dll!LoadCursorW": 1, "USER32.dll!RegisterClassExW": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!UpdateWindow": 1, "USER32.dll!SetWindowLongPtrW": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!LoadLibraryExA": 4, "KERNEL32.dll!FreeLibrary": 9, "USER32.dll!GetMessageW": 2, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 1, "KERNEL32.dll!SetDefaultDllDirectories": 1, "KERNEL32.dll!SetProcessMitigationPolicy": 1, "VERSION.dll!GetFileVersionInfoSizeA": 1, "VERSION.dll!GetFileVersionInfoA": 1, "VERSION.dll!VerQueryValueW": 1, "SHELL32.dll!SHCreateDirectoryExW": 1, "KERNEL32.dll!GetPrivateProfileIntW": 1, "KERNEL32.dll!GetPrivateProfileStringW": 2, "KERNEL32.dll!WritePrivateProfileStringW": 3, "KERNEL32.dll!FormatMessageA": 2, "ADVAPI32.dll!EqualSid": 1, "KERNEL32.dll!CreateEventA": 2, "KERNEL32.dll!WaitForMultipleObjects": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "USER32.dll!GetShellWindow": 2, "USER32.dll!GetWindowThreadProcessId": 3, "KERNEL32.dll!OpenProcess": 2, "ADVAPI32.dll!DuplicateTokenEx": 1, "ADVAPI32.dll!CreateProcessWithTokenW": 1, "WTSAPI32.dll!WTSQueryUserToken": 2, "USERENV.dll!CreateEnvironmentBlock": 1, "ADVAPI32.dll!CreateProcessAsUserW": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "USER32.dll!EnumWindows": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!SHGetSpecialFolderPathW": 1, "SHLWAPI.dll!PathFileExistsW": 1, "KERNEL32.dll!CopyFileW": 1, "bcrypt.dll!BCryptOpenAlgorithmProvider": 2, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptGetProperty": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 2, "bcrypt.dll!BCryptCloseAlgorithmProvider": 4, "bcrypt.dll!BCryptImportKeyPair": 1, "bcrypt.dll!BCryptVerifySignature": 1, "bcrypt.dll!BCryptDestroyKey": 2, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!MultiByteToWideChar": 9, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!WideCharToMultiByte": 5, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "KERNEL32.dll!CreateFileW": 7, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!GetNumberOfConsoleInputEvents": 2, "KERNEL32.dll!PeekConsoleInputA": 2, "KERNEL32.dll!ReadConsoleInputW": 2, "KERNEL32.dll!SetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvDriverUpdateCheck\\NvDriverUpdateCheck64.dll", "sha256": "514dcf5234b7ddd5bdd1bca1d07e5062f8217e970a8e8a21e8098fd7dac8b26c", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 639488, "processed_bytes": 639488, "instructions": 171901, "skipdata_bytes": 47 } ], "utc": "2026-11-11T21:40:11.817262+00:00", "instructions": 171901, "skipdata_bytes": 47, "calls": 12455, "api_reference_counts": { "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 13, "KERNEL32.dll!GetLastError": 106, "KERNEL32.dll!LocalFree": 57, "KERNEL32.dll!VerSetConditionMask": 11, "KERNEL32.dll!VerifyVersionInfoW": 5, "KERNEL32.dll!SetLastError": 32, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!CloseHandle": 14, "KERNEL32.dll!GetSystemDirectoryW": 4, "KERNEL32.dll!LocalAlloc": 36, "KERNEL32.dll!GetProcAddress": 56, "KERNEL32.dll!GetFullPathNameW": 5, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!GetNativeSystemInfo": 3, "KERNEL32.dll!GetVersionExW": 5, "KERNEL32.dll!GlobalMemoryStatusEx": 1, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "KERNEL32.dll!FreeLibrary": 15, "ADVAPI32.dll!CloseServiceHandle": 3, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!QueryServiceStatus": 1, "ADVAPI32.dll!QueryServiceConfigW": 2, "SHELL32.dll!SHGetFolderPathW": 1, "OLEAUT32.dll!SysFreeString": 3, "OLEAUT32.dll!SysAllocString": 3, "OLEAUT32.dll!VariantClear": 7, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitialize": 1, "OLEAUT32.dll!VariantInit": 4, "ole32.dll!CoCreateInstance": 1, "ole32.dll!CoSetProxyBlanket": 1, "OLEAUT32.dll!SysStringLen": 1, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetElement": 1, "OLEAUT32.dll!VariantChangeType": 2, "KERNEL32.dll!lstrlenW": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "USER32.dll!GetSystemMetrics": 1, "USER32.dll!EnumDisplaySettingsW": 3, "USER32.dll!EnumDisplayDevicesW": 4, "ADVAPI32.dll!RegOpenKeyExW": 6, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 7, "ADVAPI32.dll!RegEnumKeyExW": 2, "KERNEL32.dll!lstrcmpiW": 1, "USER32.dll!EnumDisplaySettingsExW": 2, "VERSION.dll!GetFileVersionInfoSizeA": 1, "VERSION.dll!GetFileVersionInfoA": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!GetSystemDirectoryA": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 2, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 2, "ole32.dll!StringFromGUID2": 2, "KERNEL32.dll!DeleteCriticalSection": 9, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!Sleep": 1, "KERNEL32.dll!EnterCriticalSection": 8, "KERNEL32.dll!LeaveCriticalSection": 8, "KERNEL32.dll!WideCharToMultiByte": 7, "KERNEL32.dll!MultiByteToWideChar": 8, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetComputerNameW": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "WINHTTP.dll!WinHttpOpen": 1, "WINHTTP.dll!WinHttpCloseHandle": 8, "WINHTTP.dll!WinHttpSetOption": 3, "WINHTTP.dll!WinHttpSetStatusCallback": 1, "WINHTTP.dll!WinHttpConnect": 1, "WINHTTP.dll!WinHttpOpenRequest": 1, "WINHTTP.dll!WinHttpSendRequest": 1, "WINHTTP.dll!WinHttpReceiveResponse": 1, "WINHTTP.dll!WinHttpQueryDataAvailable": 1, "WINHTTP.dll!WinHttpReadData": 1, "WINHTTP.dll!WinHttpAddRequestHeaders": 1, "WINHTTP.dll!WinHttpQueryOption": 1, "WINHTTP.dll!WinHttpQueryHeaders": 2, "WINHTTP.dll!WinHttpCrackUrl": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!GetFileAttributesExW": 2, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "WS2_32.dll!ntohl": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 1, "ADVAPI32.dll!RegEnumValueW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "KERNEL32.dll!WaitForSingleObject": 1, "KERNEL32.dll!FindClose": 5, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 1, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!GetFileType": 4, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!PeekNamedPipe": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "WS2_32.dll!InetNtopW": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvDLISR\\nvngx_dlisr.dll", "sha256": "81e90273502d7f6d00f5fbd191bf9e68f2cc05851b54359458f6c6e2b30a9dad", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 700416, "processed_bytes": 700416, "instructions": 158052, "skipdata_bytes": 25 } ], "utc": "2026-11-11T21:40:12.339393+00:00", "instructions": 158052, "skipdata_bytes": 25, "calls": 12544, "api_reference_counts": { "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!GetProcAddress": 487, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!FreeLibrary": 7, "KERNEL32.dll!Sleep": 1, "KERNEL32.dll!GetSystemDirectoryW": 4, "KERNEL32.dll!LocalAlloc": 20, "KERNEL32.dll!GetModuleFileNameW": 4, "KERNEL32.dll!SetLastError": 28, "KERNEL32.dll!LocalFree": 41, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetLastError": 51, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!GetFileAttributesW": 3, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 4, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!GetModuleHandleExA": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetStdHandle": 2, "KERNEL32.dll!WriteConsoleA": 1, "KERNEL32.dll!GetConsoleWindow": 1, "USER32.dll!GetWindowThreadProcessId": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "nvcuda.dll!cuModuleLoadData": 1, "nvcuda.dll!cuModuleUnload": 1, "nvcuda.dll!cuModuleGetFunction": 1, "nvcuda.dll!cuModuleGetGlobal_v2": 1, "nvcuda.dll!cuLaunchKernel": 1, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!HeapCreate": 1, "KERNEL32.dll!InitializeCriticalSection": 2, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!EnterCriticalSection": 14, "KERNEL32.dll!HeapAlloc": 4, "KERNEL32.dll!LeaveCriticalSection": 14, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!GetCurrentThreadId": 9, "KERNEL32.dll!GetEnvironmentVariableA": 1, "KERNEL32.dll!TryEnterCriticalSection": 3, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!InitializeSRWLock": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 1, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!MultiByteToWideChar": 3, "KERNEL32.dll!LCMapStringEx": 3, "KERNEL32.dll!WideCharToMultiByte": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!CloseHandle": 6, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!CreateFileW": 5, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvAppApi.dll", "sha256": "25fc3ecc6208e61cd08d09c8b35ebd6aa510f4d8bdfa6750bd7fca89407ec25d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 658944, "processed_bytes": 658944, "instructions": 377736, "skipdata_bytes": 357 } ], "utc": "2026-11-11T21:40:11.957722+00:00", "instructions": 377736, "skipdata_bytes": 357, "calls": 6734, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 58, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 184, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "api-ms-win-crt-heap-l1-1-0.dll!free": 125, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 24, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 7, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 4, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 4, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 5, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 8, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 4, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 25, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 11, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 8, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 12, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 17, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 25, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 19, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 4, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 23, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 6, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 6, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 3, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 6, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 12, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 4, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 8, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 5, "KERNEL32.dll!WideCharToMultiByte": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!GetProcAddress": 51, "KERNEL32.dll!FreeLibrary": 20, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 3, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 66, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 3, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!GetModuleFileNameW": 2, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 17, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 25, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 11, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 11, "api-ms-win-crt-string-l1-1-0.dll!iswspace": 4, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 1, "OLEAUT32.dll!SetErrorInfo": 1, "OLEAUT32.dll!GetErrorInfo": 1, "OLEAUT32.dll!SysAllocString": 1, "OLEAUT32.dll!SysFreeString": 1, "OLEAUT32.dll!SysStringLen": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\installer.{414B0123-8E6B-417D-9D7B-F3F765532B2B}\\presentations.dll", "sha256": "695eaac161c28662e7ddbf04efe611713e8798e026ea57b192226f5beed77c43", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 698368, "processed_bytes": 698368, "instructions": 246500, "skipdata_bytes": 12 } ], "utc": "2026-11-11T21:40:12.235353+00:00", "instructions": 246500, "skipdata_bytes": 12, "calls": 16559, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 11, "KERNEL32.dll!GetLastError": 86, "ole32.dll!CoCreateInstance": 4, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!DeleteCriticalSection": 26, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!GetUserGeoID": 2, "KERNEL32.dll!GetGeoInfoW": 2, "KERNEL32.dll!GetLocaleInfoW": 13, "OLEAUT32.dll!VariantInit": 49, "OLEAUT32.dll!VariantClear": 75, "KERNEL32.dll!EnterCriticalSection": 22, "KERNEL32.dll!LeaveCriticalSection": 24, "OLEAUT32.dll!SafeArrayGetLBound": 4, "OLEAUT32.dll!SafeArrayGetUBound": 4, "OLEAUT32.dll!SafeArrayUnlock": 4, "OLEAUT32.dll!SafeArrayDestroy": 2, "OLEAUT32.dll!SafeArrayGetVartype": 2, "OLEAUT32.dll!SafeArrayCopy": 2, "OLEAUT32.dll!SafeArrayLock": 4, "OLEAUT32.dll!SysFreeString": 9, "OLEAUT32.dll!SysStringByteLen": 1, "OLEAUT32.dll!SysAllocStringByteLen": 1, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 5, "KERNEL32.dll!SetLastError": 36, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "OLEAUT32.dll!VariantChangeType": 14, "OLEAUT32.dll!SysAllocStringLen": 2, "OLEAUT32.dll!SysStringLen": 7, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 8, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!CloseHandle": 28, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegCloseKey": 26, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!GetModuleFileNameW": 4, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 5, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!DecodePointer": 4, "OLEAUT32.dll!SysAllocString": 4, "OLEAUT32.dll!VariantCopy": 1, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!GetVersionExW": 2, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!MultiByteToWideChar": 10, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvsphelper64.exe", "sha256": "5637754cefd4962bb01a1508d0efcab513b4ea71d5fc923f4103cf1673218d9a", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 685056, "processed_bytes": 685056, "instructions": 361248, "skipdata_bytes": 26 } ], "utc": "2026-11-11T21:40:12.124555+00:00", "instructions": 361248, "skipdata_bytes": 26, "calls": 6764, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!FreeLibrary": 45, "KERNEL32.dll!GetSystemDirectoryW": 31, "KERNEL32.dll!LocalAlloc": 66, "KERNEL32.dll!VerSetConditionMask": 7, "KERNEL32.dll!VerifyVersionInfoW": 5, "KERNEL32.dll!LoadLibraryExW": 37, "KERNEL32.dll!GetLastError": 132, "KERNEL32.dll!LocalFree": 106, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetProcAddress": 70, "KERNEL32.dll!Sleep": 2, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!CloseHandle": 32, "KERNEL32.dll!EnterCriticalSection": 16, "KERNEL32.dll!DeleteCriticalSection": 9, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileW": 3, "KERNEL32.dll!CreateFileW": 12, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathW": 4, "KERNEL32.dll!CreateDirectoryW": 5, "KERNEL32.dll!GetModuleFileNameW": 11, "KERNEL32.dll!WideCharToMultiByte": 4, "KERNEL32.dll!GetCurrentProcessId": 4, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 12, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!OutputDebugStringW": 6, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExW": 3, "KERNEL32.dll!GetFileAttributesW": 12, "KERNEL32.dll!GetFinalPathNameByHandleW": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!SetLastError": 97, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetFileType": 4, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\Display.PhysX.{5A50652D-B45C-4D25-84CD-19B69879382B}\\PhysXExt.dll", "sha256": "56e11e85b9e6a3dafb6f8c57e4a4e1f3dd5c1632553c88ad0d0f32b216c6fac7", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 709120, "processed_bytes": 709120, "instructions": 250869, "skipdata_bytes": 14 } ], "utc": "2026-11-11T21:40:12.828787+00:00", "instructions": 250869, "skipdata_bytes": 14, "calls": 16817, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 10, "KERNEL32.dll!GetLastError": 88, "ole32.dll!CoCreateInstance": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!DeleteCriticalSection": 39, "KERNEL32.dll!EnterCriticalSection": 19, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LeaveCriticalSection": 21, "KERNEL32.dll!DecodePointer": 4, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!CloseHandle": 36, "KERNEL32.dll!SetLastError": 38, "msi.dll!#141": 1, "msi.dll!#190": 1, "OLEAUT32.dll!SafeArrayDestroy": 6, "OLEAUT32.dll!VariantClear": 32, "OLEAUT32.dll!VariantInit": 33, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysFreeString": 4, "OLEAUT32.dll!SysStringLen": 9, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!SysAllocStringLen": 2, "KERNEL32.dll!MultiByteToWideChar": 12, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 9, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegCloseKey": 26, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateFileW": 12, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 8, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 4, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!FindClose": 3, "USERENV.dll!UnloadUserProfile": 3, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetDim": 1, "OLEAUT32.dll!SafeArrayUnlock": 3, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetUBound": 1, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetVersionExW": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\InstallerCore\\NVPrxy32.DLL", "sha256": "6dcbb489b70913c73a890691b54b5d5ac494dc43f717c29d1d74d714ccfeb501", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 777216, "processed_bytes": 777216, "instructions": 269822, "skipdata_bytes": 18 } ], "utc": "2026-11-11T21:40:12.956076+00:00", "instructions": 269822, "skipdata_bytes": 18, "calls": 18626, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 12, "KERNEL32.dll!GetLastError": 110, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!DeleteCriticalSection": 54, "KERNEL32.dll!EnterCriticalSection": 44, "KERNEL32.dll!LeaveCriticalSection": 46, "SETUPAPI.dll!CM_Get_DevNode_Status": 5, "KERNEL32.dll!ResumeThread": 1, "OLEAUT32.dll!VariantInit": 37, "OLEAUT32.dll!VariantClear": 43, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 10, "OLEAUT32.dll!VariantChangeType": 5, "OLEAUT32.dll!SysAllocStringLen": 2, "OLEAUT32.dll!SysStringLen": 10, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "KERNEL32.dll!SetLastError": 47, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 2, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 15, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!CloseHandle": 40, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegCloseKey": 26, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!GetModuleFileNameW": 2, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "RPCRT4.dll!RpcServerUseProtseqEpW": 1, "RPCRT4.dll!RpcServerRegisterIfEx": 1, "RPCRT4.dll!RpcServerListen": 1, "USER32.dll!SetTimer": 1, "USER32.dll!GetMessageW": 2, "USER32.dll!PostQuitMessage": 1, "RPCRT4.dll!RpcMgmtStopServerListening": 2, "RPCRT4.dll!RpcMgmtWaitServerListen": 1, "RPCRT4.dll!RpcServerUnregisterIf": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "ole32.dll!CoInitialize": 7, "ole32.dll!CoCreateInstance": 7, "OLEAUT32.dll!SysFreeString": 1, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 5, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 2, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 4, "SETUPAPI.dll!SetupDiCallClassInstaller": 2, "SETUPAPI.dll!SetupDiGetClassInstallParamsW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoW": 1, "SETUPAPI.dll!SetupDiSetDeviceRegistryPropertyW": 4, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupDiGetSelectedDriverW": 1, "SETUPAPI.dll!SetupDiInstallDevice": 1, "SETUPAPI.dll!SetupDiOpenDevRegKey": 2, "SETUPAPI.dll!SetupCopyOEMInfW": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 4, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!FreeLibrary": 6, "ole32.dll!CoTaskMemAlloc": 1, "ole32.dll!PropVariantClear": 1, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "KERNEL32.dll!GetProcessId": 3, "OLEAUT32.dll!SafeArrayUnlock": 3, "OLEAUT32.dll!SafeArrayDestroy": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayLock": 2, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetUBound": 1, "OLEAUT32.dll!SysAllocString": 1, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "PSAPI.DLL!GetProcessImageFileNameW": 1, "KERNEL32.dll!MultiByteToWideChar": 10, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!DecodePointer": 2, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!RaiseException": 3, "RPCRT4.dll!NdrServerCall2": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvovapi64.dll", "sha256": "0827392efec1368d1ba6ec18225614e5cce17d53954a7f28a2bf8245429995ab", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 724992, "processed_bytes": 724992, "instructions": 380806, "skipdata_bytes": 8 } ], "utc": "2026-11-11T21:40:12.863281+00:00", "instructions": 380806, "skipdata_bytes": 8, "calls": 7207, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 5, "KERNEL32.dll!EnterCriticalSection": 32, "KERNEL32.dll!LeaveCriticalSection": 33, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 7, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!FreeLibrary": 32, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!GetLastError": 139, "KERNEL32.dll!GetProcAddress": 70, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!LocalAlloc": 60, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!CloseHandle": 34, "KERNEL32.dll!LocalFree": 102, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileA": 3, "KERNEL32.dll!CreateFileA": 4, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathA": 4, "KERNEL32.dll!CreateDirectoryA": 5, "KERNEL32.dll!GetModuleFileNameW": 15, "KERNEL32.dll!WideCharToMultiByte": 6, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclA": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 12, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!GetSystemDirectoryW": 18, "KERNEL32.dll!GetModuleHandleExW": 8, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!SetLastError": 97, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CRYPT32.dll!CertGetNameStringW": 5, "CRYPT32.dll!CryptQueryObject": 2, "CRYPT32.dll!CryptMsgGetParam": 3, "CRYPT32.dll!CertFindCertificateInStore": 2, "CRYPT32.dll!CertFreeCertificateContext": 2, "CRYPT32.dll!CryptMsgClose": 2, "CRYPT32.dll!CertCloseStore": 2, "KERNEL32.dll!GetCurrentProcess": 8, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!QueryFullProcessImageNameW": 3, "SHLWAPI.dll!PathFindFileNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!RtlCaptureStackBackTrace": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!K32GetModuleFileNameExW": 1, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetFileType": 4, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\installer.{EE6BEEBC-9431-4428-8DDB-EB839185C877}\\DynamicBillboardPresentations.dll", "sha256": "c7b342b4b9f063726575d2e0ac54371c02a95ad2a82d5ebe4c6c31a21c02a65c", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 779264, "processed_bytes": 779264, "instructions": 275273, "skipdata_bytes": 22 } ], "utc": "2026-11-11T21:40:13.001583+00:00", "instructions": 275273, "skipdata_bytes": 22, "calls": 20239, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 22, "KERNEL32.dll!GetLastError": 120, "KERNEL32.dll!DeleteCriticalSection": 43, "KERNEL32.dll!InitializeSListHead": 9, "ole32.dll!CoCreateInstance": 2, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!EnterCriticalSection": 26, "KERNEL32.dll!EncodePointer": 11, "KERNEL32.dll!LeaveCriticalSection": 28, "KERNEL32.dll!DecodePointer": 6, "KERNEL32.dll!FindResourceW": 3, "KERNEL32.dll!WideCharToMultiByte": 25, "KERNEL32.dll!HeapAlloc": 6, "KERNEL32.dll!HeapFree": 10, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "OLEAUT32.dll!VariantInit": 61, "OLEAUT32.dll!VariantChangeType": 15, "OLEAUT32.dll!VariantClear": 72, "OLEAUT32.dll!SysFreeString": 22, "KERNEL32.dll!MultiByteToWideChar": 28, "OLEAUT32.dll!SysStringLen": 7, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "OLEAUT32.dll!SysAllocString": 36, "OLEAUT32.dll!SysStringByteLen": 8, "OLEAUT32.dll!SysAllocStringByteLen": 8, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "KERNEL32.dll!SetLastError": 38, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "OLEAUT32.dll!SysAllocStringLen": 3, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 14, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!CloseHandle": 34, "ADVAPI32.dll!RegQueryValueExW": 7, "ADVAPI32.dll!RegCloseKey": 24, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!GetModuleFileNameW": 4, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 5, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 12, "KERNEL32.dll!WaitForSingleObjectEx": 9, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "OLEAUT32.dll!VariantCopy": 1, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!GetUserDefaultUILanguage": 1, "KERNEL32.dll!GetSystemDefaultLangID": 1, "KERNEL32.dll!GetVersionExW": 3, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayDestroy": 3, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetLBound": 3, "OLEAUT32.dll!SafeArrayGetUBound": 3, "KERNEL32.dll!GetProcAddress": 61, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 8, "KERNEL32.dll!LoadLibraryW": 2, "OLEAUT32.dll!SafeArrayUnlock": 3, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "KERNEL32.dll!LocalAlloc": 5, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!GetModuleFileNameA": 2, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryEnterCriticalSection": 2, "KERNEL32.dll!GetModuleHandleW": 11, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!GetTickCount": 1, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!ChangeTimerQueueTimer": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!CreateTimerQueueTimer": 1, "KERNEL32.dll!DeleteTimerQueueTimer": 1, "KERNEL32.dll!GetLogicalProcessorInformation": 2, "KERNEL32.dll!GetNumaHighestNodeNumber": 1, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!GetThreadPriority": 1, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!SignalObjectAndWait": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!TlsAlloc": 5, "KERNEL32.dll!TlsFree": 5, "KERNEL32.dll!TlsGetValue": 4, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!UnregisterWait": 1, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetCurrentThread": 6, "KERNEL32.dll!GetThreadTimes": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!InterlockedFlushSList": 23, "KERNEL32.dll!UnregisterWaitEx": 1, "KERNEL32.dll!InterlockedPopEntrySList": 13, "KERNEL32.dll!InterlockedPushEntrySList": 21, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!QueryDepthSList": 17, "KERNEL32.dll!CreateTimerQueue": 1, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 3, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetACP": 6, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableA": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!GlobalMemoryStatusEx": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\bin\\PresentMon_x64.exe", "sha256": "045a5c1465886bd8435ceab20805b119367e2d71ba02a635547c81c91e791b01", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 788992, "processed_bytes": 788992, "instructions": 208720, "skipdata_bytes": 221 } ], "utc": "2026-11-11T21:40:13.785858+00:00", "instructions": 208720, "skipdata_bytes": 221, "calls": 13180, "api_reference_counts": { "KERNEL32.dll!OutputDebugStringW": 8, "KERNEL32.dll!DeleteCriticalSection": 9, "KERNEL32.dll!GetProcAddress": 177, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!Sleep": 6, "KERNEL32.dll!InitializeCriticalSection": 5, "KERNEL32.dll!EnterCriticalSection": 11, "KERNEL32.dll!LeaveCriticalSection": 12, "KERNEL32.dll!GetSystemDirectoryW": 18, "KERNEL32.dll!LocalAlloc": 33, "KERNEL32.dll!GetModuleFileNameW": 4, "KERNEL32.dll!SetLastError": 36, "KERNEL32.dll!LocalFree": 65, "KERNEL32.dll!GetModuleFileNameA": 3, "KERNEL32.dll!LoadLibraryExW": 20, "KERNEL32.dll!GetLastError": 98, "KERNEL32.dll!VerSetConditionMask": 10, "KERNEL32.dll!VerifyVersionInfoW": 6, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!GetFileAttributesW": 5, "KERNEL32.dll!CreateEventW": 6, "KERNEL32.dll!ResetEvent": 8, "KERNEL32.dll!GetCurrentThreadId": 6, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!GetConsoleScreenBufferInfo": 2, "KERNEL32.dll!QueryPerformanceCounter": 11, "KERNEL32.dll!SetConsoleTextAttribute": 2, "KERNEL32.dll!GetCurrentThread": 4, "KERNEL32.dll!SetThreadDescription": 3, "KERNEL32.dll!SetThreadPriority": 1, "ADVAPI32.dll!ProcessTrace": 1, "USER32.dll!PostThreadMessageW": 6, "SHLWAPI.dll!PathFileExistsW": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 5, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!FreeSid": 13, "KERNEL32.dll!GetCurrentProcess": 6, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "KERNEL32.dll!CloseHandle": 33, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!OutputDebugStringA": 21, "KERNEL32.dll!OpenFileMappingA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA": 1, "KERNEL32.dll!CreateFileMappingA": 1, "KERNEL32.dll!MapViewOfFile": 1, "KERNEL32.dll!GetCurrentDirectoryA": 1, "KERNEL32.dll!WaitForSingleObject": 8, "USER32.dll!GetAsyncKeyState": 1, "USER32.dll!PostMessageW": 2, "USER32.dll!GetKeyState": 1, "USER32.dll!GetMessageExtraInfo": 1, "USER32.dll!SendInput": 1, "USER32.dll!KillTimer": 5, "USER32.dll!SetTimer": 3, "USER32.dll!SetUserObjectInformationA": 1, "USER32.dll!DefWindowProcW": 2, "tdh.dll!TdhLoadManifestFromBinary": 1, "KERNEL32.dll!SetDefaultDllDirectories": 1, "KERNEL32.dll!LoadLibraryExA": 10, "KERNEL32.dll!SetEvent": 16, "USER32.dll!RegisterClassExW": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!UnregisterClassW": 4, "USER32.dll!GetWindowThreadProcessId": 1, "KERNEL32.dll!CreateEventA": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!QueryPerformanceFrequency": 3, "USER32.dll!RegisterHotKey": 1, "USER32.dll!DestroyWindow": 3, "ADVAPI32.dll!ControlTraceW": 3, "ADVAPI32.dll!CheckTokenMembership": 1, "USER32.dll!GetMessageW": 2, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 1, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!SetProcessMitigationPolicy": 1, "SHELL32.dll!CommandLineToArgvW": 1, "KERNEL32.dll!FindFirstChangeNotificationW": 1, "KERNEL32.dll!FindNextChangeNotification": 1, "KERNEL32.dll!FindCloseChangeNotification": 1, "KERNEL32.dll!GetExitCodeProcess": 2, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!QueryFullProcessImageNameW": 1, "KERNEL32.dll!OpenEventW": 1, "SHELL32.dll!ShellExecuteExW": 1, "OLEAUT32.dll!SysFreeString": 5, "OLEAUT32.dll!SafeArrayGetLBound": 2, "OLEAUT32.dll!SafeArrayGetUBound": 2, "OLEAUT32.dll!SafeArrayGetElement": 1, "OLEAUT32.dll!VariantClear": 2, "OLEAUT32.dll!SafeArrayDestroy": 1, "ole32.dll!CoCreateInstance": 1, "ole32.dll!CoSetProxyBlanket": 1, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 2, "ole32.dll!CoUninitialize": 2, "KERNEL32.dll!LoadLibraryA": 1, "ole32.dll!CoInitialize": 1, "ADVAPI32.dll!EnableTraceEx2": 37, "ADVAPI32.dll!StartTraceW": 1, "ADVAPI32.dll!OpenTraceW": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!FileTimeToLocalFileTime": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "ADVAPI32.dll!CloseTrace": 1, "tdh.dll!TdhGetEventInformation": 4, "tdh.dll!TdhGetProperty": 2, "tdh.dll!TdhGetPropertySize": 1, "KERNEL32.dll!WaitForMultipleObjects": 1, "KERNEL32.dll!MultiByteToWideChar": 9, "KERNEL32.dll!WideCharToMultiByte": 7, "KERNEL32.dll!CreateFileW": 8, "ADVAPI32.dll!EventWriteTransfer": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventUnregister": 1, "pdh.dll!PdhCloseQuery": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 1, "KERNEL32.dll!DeviceIoControl": 3, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 1, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 2, "KERNEL32.dll!GetLogicalProcessorInformationEx": 2, "pdh.dll!PdhOpenQueryW": 1, "KERNEL32.dll!GetModuleHandleA": 1, "pdh.dll!PdhRemoveCounter": 1, "ADVAPI32.dll!RegCloseKey": 1, "KERNEL32.dll!LoadLibraryW": 1, "pdh.dll!PdhAddEnglishCounterW": 1, "pdh.dll!PdhCollectQueryData": 1, "pdh.dll!PdhGetFormattedCounterValue": 1, "KERNEL32.dll!GetTickCount64": 1, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFileAttributesExW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetNativeSystemInfo": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "OLEAUT32.dll!SysAllocString": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\HDAudio.Driver.{091AEA3D-8B36-4AC9-8B5B-5965F73BC7F6}\\HDAudioExt.dll", "sha256": "3496720838dd19a05c76cc45f061a09bc168d409cd3883833c9e9445387a1ab4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 782336, "processed_bytes": 782336, "instructions": 274616, "skipdata_bytes": 13 } ], "utc": "2026-11-11T21:40:13.598124+00:00", "instructions": 274616, "skipdata_bytes": 13, "calls": 18741, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 18, "KERNEL32.dll!GetLastError": 120, "ole32.dll!CoCreateInstance": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!DeleteCriticalSection": 64, "KERNEL32.dll!EnterCriticalSection": 20, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LeaveCriticalSection": 22, "KERNEL32.dll!DecodePointer": 4, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!CloseHandle": 43, "KERNEL32.dll!SetLastError": 56, "OLEAUT32.dll!VariantClear": 87, "OLEAUT32.dll!VariantInit": 63, "SETUPAPI.dll!SetupCloseInfFile": 9, "KERNEL32.dll!GetCurrentProcess": 16, "SETUPAPI.dll!SetupOpenInfFileW": 2, "SETUPAPI.dll!SetupFindFirstLineW": 1, "OLEAUT32.dll!VariantChangeType": 11, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysFreeString": 6, "OLEAUT32.dll!SysStringLen": 11, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "KERNEL32.dll!MultiByteToWideChar": 12, "OLEAUT32.dll!SysAllocString": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 5, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "OLEAUT32.dll!SysAllocStringLen": 2, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegCloseKey": 26, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 4, "KERNEL32.dll!CreateFileW": 12, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 8, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 4, "OLEAUT32.dll!SafeArrayUnlock": 3, "OLEAUT32.dll!SafeArrayDestroy": 3, "OLEAUT32.dll!SafeArrayGetVartype": 2, "OLEAUT32.dll!SafeArrayCopy": 2, "OLEAUT32.dll!SafeArrayLock": 4, "OLEAUT32.dll!SafeArrayGetLBound": 2, "OLEAUT32.dll!SafeArrayGetUBound": 2, "KERNEL32.dll!FindClose": 3, "USERENV.dll!UnloadUserProfile": 3, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!SetupDiGetINFClassW": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "RPCRT4.dll!UuidFromStringW": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!LoadLibraryW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\Display.PhysX.{5A50652D-B45C-4D25-84CD-19B69879382B}\\PhysXExt64.dll", "sha256": "2d333ab49dcd59d874683c6467608bc77f87cad1fd350a6f61257262995c5c7d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 810496, "processed_bytes": 810496, "instructions": 229056, "skipdata_bytes": 153 } ], "utc": "2026-11-11T21:40:13.866010+00:00", "instructions": 229056, "skipdata_bytes": 153, "calls": 15510, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 29, "KERNEL32.dll!GetLastError": 133, "ole32.dll!CoCreateInstance": 1, "KERNEL32.dll!RaiseException": 5, "KERNEL32.dll!DeleteCriticalSection": 93, "KERNEL32.dll!EnterCriticalSection": 20, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!LeaveCriticalSection": 22, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!WideCharToMultiByte": 16, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "OLEAUT32.dll!VariantClear": 101, "OLEAUT32.dll!VariantInit": 61, "KERNEL32.dll!CloseHandle": 45, "KERNEL32.dll!SetLastError": 51, "msi.dll!#141": 1, "msi.dll!#190": 1, "OLEAUT32.dll!SafeArrayDestroy": 8, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysFreeString": 7, "OLEAUT32.dll!SysStringLen": 10, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "OLEAUT32.dll!VariantChangeType": 3, "OLEAUT32.dll!SysAllocStringLen": 3, "KERNEL32.dll!MultiByteToWideChar": 16, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 6, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegCloseKey": 30, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 7, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateFileW": 13, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 8, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 2, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 16, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 4, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!FindClose": 3, "USERENV.dll!UnloadUserProfile": 4, "KERNEL32.dll!CopyFileW": 1, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 1, "KERNEL32.dll!GetSystemDirectoryW": 15, "ADVAPI32.dll!GetFileSecurityW": 2, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayUnlock": 5, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetDim": 1, "OLEAUT32.dll!SafeArrayGetLBound": 8, "OLEAUT32.dll!SafeArrayGetUBound": 7, "KERNEL32.dll!GetProcAddress": 31, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!LocalAlloc": 10, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 4, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetVersionExW": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\ShadowPlay.{D93CCF6F-6877-4B4B-83B0-4AF388304402}\\ShadowPlayExt.dll", "sha256": "1278e2dd44d3b638091913ad27719b7d8e67766a21bc34ddf882e537fb23fa30", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 798720, "processed_bytes": 798720, "instructions": 281008, "skipdata_bytes": 4 } ], "utc": "2026-11-11T21:40:13.845427+00:00", "instructions": 281008, "skipdata_bytes": 4, "calls": 21144, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 24, "KERNEL32.dll!GetLastError": 148, "KERNEL32.dll!InitializeSListHead": 9, "KERNEL32.dll!WaitForSingleObject": 8, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!CloseHandle": 54, "KERNEL32.dll!GetCurrentProcess": 21, "KERNEL32.dll!SetLastError": 45, "OLEAUT32.dll!VariantClear": 111, "OLEAUT32.dll!VariantInit": 82, "KERNEL32.dll!DeleteCriticalSection": 50, "KERNEL32.dll!WideCharToMultiByte": 23, "KERNEL32.dll!FindResourceW": 3, "KERNEL32.dll!HeapAlloc": 6, "KERNEL32.dll!HeapFree": 10, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 1, "KERNEL32.dll!LeaveCriticalSection": 26, "ole32.dll!CoCreateInstance": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!EnterCriticalSection": 24, "KERNEL32.dll!EncodePointer": 11, "KERNEL32.dll!DecodePointer": 6, "OLEAUT32.dll!VariantChangeType": 20, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysFreeString": 8, "OLEAUT32.dll!SysStringLen": 16, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "OLEAUT32.dll!SysAllocString": 5, "ADVAPI32.dll!RegCloseKey": 24, "OLEAUT32.dll!SysAllocStringLen": 1, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!CreateFileW": 10, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!WriteFile": 7, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 6, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 12, "KERNEL32.dll!WaitForSingleObjectEx": 9, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 19, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!Thread32First": 1, "KERNEL32.dll!OpenThread": 1, "KERNEL32.dll!GetThreadTimes": 2, "KERNEL32.dll!Thread32Next": 1, "KERNEL32.dll!Sleep": 4, "USER32.dll!GetWindowThreadProcessId": 2, "USER32.dll!GetParent": 2, "USER32.dll!GetWindow": 2, "USER32.dll!IsWindowVisible": 1, "USER32.dll!GetClassNameW": 1, "SHLWAPI.dll!StrStrIW": 2, "USER32.dll!EnumWindows": 2, "USER32.dll!PostMessageW": 4, "USER32.dll!PostThreadMessageW": 2, "KERNEL32.dll!OpenProcess": 4, "KERNEL32.dll!GetProcAddress": 86, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!FreeLibrary": 9, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!GetProcessId": 1, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetTickCount": 3, "KERNEL32.dll!MultiByteToWideChar": 26, "OLEAUT32.dll!SafeArrayUnlock": 1, "OLEAUT32.dll!SafeArrayDestroy": 3, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 1, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetUBound": 1, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "KERNEL32.dll!QueryDosDeviceW": 2, "KERNEL32.dll!GetSystemInfo": 1, "PSAPI.DLL!GetProcessImageFileNameW": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetModuleHandleW": 11, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryEnterCriticalSection": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!TlsAlloc": 5, "KERNEL32.dll!TlsFree": 5, "KERNEL32.dll!TlsGetValue": 4, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!InterlockedFlushSList": 23, "KERNEL32.dll!InterlockedPushEntrySList": 21, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!GetACP": 6, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableA": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!ChangeTimerQueueTimer": 1, "KERNEL32.dll!CreateTimerQueueTimer": 1, "KERNEL32.dll!DeleteTimerQueueTimer": 1, "KERNEL32.dll!GetLogicalProcessorInformation": 2, "KERNEL32.dll!GetNumaHighestNodeNumber": 1, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!GetThreadPriority": 1, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!SignalObjectAndWait": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!UnregisterWait": 1, "KERNEL32.dll!GetCurrentThread": 6, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!UnregisterWaitEx": 1, "KERNEL32.dll!InterlockedPopEntrySList": 13, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!QueryDepthSList": 17, "KERNEL32.dll!CreateTimerQueue": 1, "KERNEL32.dll!LocalAlloc": 7, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!TerminateThread": 2, "KERNEL32.dll!ResumeThread": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvBackend\\NvBackendAPI64.dll", "sha256": "f2bc30fbadbe0a4559915183aaf62de5b3e4267e231c4291d9b6ac7c2af4f98f", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 855552, "processed_bytes": 855552, "instructions": 231435, "skipdata_bytes": 47 } ], "utc": "2026-11-11T21:40:14.443732+00:00", "instructions": 231435, "skipdata_bytes": 47, "calls": 21048, "api_reference_counts": { "KERNEL32.dll!LeaveCriticalSection": 833, "KERNEL32.dll!EnterCriticalSection": 152, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!GetLastError": 62, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!QueryServiceStatus": 1, "ADVAPI32.dll!StartServiceW": 1, "ADVAPI32.dll!CloseServiceHandle": 2, "KERNEL32.dll!Sleep": 1, "KERNEL32.dll!FileTimeToSystemTime": 4, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!WaitForSingleObject": 6, "KERNEL32.dll!CloseHandle": 27, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!WideCharToMultiByte": 5, "KERNEL32.dll!MultiByteToWideChar": 7, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!lstrlenA": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!LocalFree": 5, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!GetNativeSystemInfo": 1, "WS2_32.dll!inet_addr": 3, "WS2_32.dll!gethostbyname": 3, "WS2_32.dll!WSAGetLastError": 2, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!DisconnectNamedPipe": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!WaitNamedPipeA": 1, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!SetSecurityDescriptorOwner": 1, "KERNEL32.dll!CreateNamedPipeA": 1, "KERNEL32.dll!ReadFile": 1, "KERNEL32.dll!GetOverlappedResult": 3, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!CancelIo": 3, "KERNEL32.dll!ConnectNamedPipe": 1, "KERNEL32.dll!WaitForMultipleObjects": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 2, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetModuleHandleW": 2, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!SetLastError": 7, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!FreeLibrary": 5, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!WriteConsoleW": 2, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "WS2_32.dll!socket": 4, "WS2_32.dll!WSACleanup": 4, "WS2_32.dll!accept": 1, "WS2_32.dll!bind": 2, "WS2_32.dll!getsockname": 1, "WS2_32.dll!htons": 3, "WS2_32.dll!ioctlsocket": 2, "WS2_32.dll!connect": 1, "WS2_32.dll!closesocket": 3, "WS2_32.dll!WSAStartup": 2, "KERNEL32.dll!GetTickCount": 1, "WS2_32.dll!shutdown": 1, "WS2_32.dll!listen": 2, "WS2_32.dll!recv": 2, "WS2_32.dll!setsockopt": 1, "WS2_32.dll!send": 1, "WS2_32.dll!select": 1, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!ResumeThread": 1, "WS2_32.dll!WSACreateEvent": 2, "WS2_32.dll!WSACloseEvent": 1, "WS2_32.dll!htonl": 1, "WS2_32.dll!getsockopt": 1, "WS2_32.dll!WSAResetEvent": 1, "WS2_32.dll!WSAEventSelect": 1, "WS2_32.dll!WSAWaitForMultipleEvents": 1, "WS2_32.dll!WSAEnumNetworkEvents": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\FvContainer.System.exe", "sha256": "2ef3a9a17925bf57b7834a444f82d59b1ef7c6a546505c05b9303d7764f3b6ea", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 874496, "processed_bytes": 874496, "instructions": 262062, "skipdata_bytes": 443 } ], "utc": "2026-11-11T21:40:14.726113+00:00", "instructions": 262062, "skipdata_bytes": 443, "calls": 13876, "api_reference_counts": { "KERNEL32.dll!SetDefaultDllDirectories": 2, "SHELL32.dll!CommandLineToArgvW": 2, "KERNEL32.dll!GetCurrentProcess": 7, "KERNEL32.dll!GetProcessTimes": 3, "KERNEL32.dll!GetModuleHandleW": 16, "USER32.dll!RegisterClassW": 2, "USER32.dll!CreateWindowExW": 2, "USER32.dll!SetWindowLongPtrW": 2, "USER32.dll!ShutdownBlockReasonCreate": 2, "KERNEL32.dll!WaitForSingleObject": 10, "KERNEL32.dll!CloseHandle": 56, "USER32.dll!ShutdownBlockReasonDestroy": 2, "USER32.dll!DestroyWindow": 3, "USER32.dll!UnregisterClassW": 2, "USER32.dll!PostMessageW": 4, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageW": 2, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!CreateEventW": 7, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!SetEvent": 10, "USER32.dll!GetWindowLongPtrW": 2, "USER32.dll!DefWindowProcW": 2, "KERNEL32.dll!WaitForMultipleObjects": 4, "KERNEL32.dll!AddVectoredExceptionHandler": 3, "KERNEL32.dll!AddVectoredContinueHandler": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 10, "KERNEL32.dll!RemoveVectoredExceptionHandler": 4, "KERNEL32.dll!RemoveVectoredContinueHandler": 4, "KERNEL32.dll!RtlCaptureStackBackTrace": 3, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!GetProcAddress": 102, "KERNEL32.dll!GetLastError": 191, "ADVAPI32.dll!CreateWellKnownSid": 3, "KERNEL32.dll!LocalAlloc": 60, "ADVAPI32.dll!LookupAccountSidW": 2, "KERNEL32.dll!LocalFree": 110, "ADVAPI32.dll!BuildExplicitAccessWithNameW": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!OpenSCManagerW": 2, "ADVAPI32.dll!OpenServiceW": 2, "ADVAPI32.dll!QueryServiceConfigW": 2, "ADVAPI32.dll!ChangeServiceConfigW": 2, "ADVAPI32.dll!CloseServiceHandle": 3, "ADVAPI32.dll!RegisterServiceCtrlHandlerExW": 3, "ADVAPI32.dll!RegCreateKeyExW": 5, "ADVAPI32.dll!RegCloseKey": 10, "ADVAPI32.dll!SetServiceStatus": 2, "ADVAPI32.dll!RegSetValueExW": 2, "ADVAPI32.dll!StartServiceCtrlDispatcherW": 2, "KERNEL32.dll!GetCurrentProcessId": 5, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetSecurityInfo": 2, "ADVAPI32.dll!SetSecurityInfo": 2, "KERNEL32.dll!SetLastError": 71, "KERNEL32.dll!GetErrorMode": 2, "KERNEL32.dll!SetErrorMode": 3, "SHLWAPI.dll!PathIsRelativeW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 3, "KERNEL32.dll!LoadLibraryExW": 32, "USER32.dll!LoadStringW": 2, "KERNEL32.dll!FreeLibrary": 36, "KERNEL32.dll!GetSystemDirectoryW": 17, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!GetModuleFileNameW": 11, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!CreateFileW": 16, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateTimerQueueTimer": 2, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!FindClose": 12, "KERNEL32.dll!DeleteTimerQueueTimer": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 5, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!CreateDirectoryW": 3, "ADVAPI32.dll!RegGetValueW": 7, "ADVAPI32.dll!RegDeleteValueW": 3, "USER32.dll!PostThreadMessageW": 3, "USER32.dll!PeekMessageW": 2, "USER32.dll!GetMessageW": 2, "KERNEL32.dll!FindCloseChangeNotification": 2, "KERNEL32.dll!FindFirstChangeNotificationW": 2, "KERNEL32.dll!FindNextChangeNotification": 2, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegSetKeyValueW": 4, "KERNEL32.dll!MultiByteToWideChar": 5, "KERNEL32.dll!WideCharToMultiByte": 9, "KERNEL32.dll!RemoveDirectoryW": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!DeviceIoControl": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "PSAPI.DLL!GetProcessMemoryInfo": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileInformationByHandle": 4, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 6, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetFilePointerEx": 11, "KERNEL32.dll!SetEndOfFile": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RaiseException": 10, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 5, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!EnterCriticalSection": 12, "KERNEL32.dll!LeaveCriticalSection": 12, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 6, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\InstallerExtension.dll", "sha256": "764358a378bf8ed483f6c2b5288736c014bed19c05039dd1e7fc26001d0b890b", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 863232, "processed_bytes": 863232, "instructions": 302750, "skipdata_bytes": 4 } ], "utc": "2026-11-11T21:40:14.593804+00:00", "instructions": 302750, "skipdata_bytes": 4, "calls": 23569, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 13, "KERNEL32.dll!GetLastError": 125, "KERNEL32.dll!InitializeSListHead": 9, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!LocalFree": 16, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!SetLastError": 27, "KERNEL32.dll!GetFileAttributesW": 6, "KERNEL32.dll!CreateFileW": 10, "KERNEL32.dll!CloseHandle": 37, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!LocalAlloc": 6, "KERNEL32.dll!GetProcAddress": 92, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!GetModuleHandleW": 17, "KERNEL32.dll!GetModuleFileNameW": 6, "KERNEL32.dll!LoadLibraryW": 3, "KERNEL32.dll!RaiseException": 4, "OLEAUT32.dll!SysFreeString": 12, "KERNEL32.dll!DeleteCriticalSection": 46, "ole32.dll!CoCreateInstance": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetCurrentProcess": 13, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "SHLWAPI.dll!PathFindFileNameW": 1, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegOpenKeyExW": 7, "ADVAPI32.dll!RegCloseKey": 22, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegEnumValueW": 3, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!WideCharToMultiByte": 25, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!WriteFile": 8, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "KERNEL32.dll!FindResourceExW": 1, "OLEAUT32.dll!VariantClear": 116, "OLEAUT32.dll!SysStringLen": 9, "KERNEL32.dll!EnterCriticalSection": 42, "OLEAUT32.dll!LoadTypeLib": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!LeaveCriticalSection": 44, "OLEAUT32.dll!VariantInit": 67, "OLEAUT32.dll!SysAllocStringLen": 3, "OLEAUT32.dll!VariantChangeType": 12, "OLEAUT32.dll!SysAllocString": 4, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!FindResourceW": 4, "KERNEL32.dll!SetEvent": 17, "KERNEL32.dll!GetCurrentThreadId": 12, "KERNEL32.dll!WaitForSingleObjectEx": 9, "ADVAPI32.dll!RegDeleteKeyW": 3, "USER32.dll!CharNextW": 2, "ole32.dll!StringFromGUID2": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 4, "KERNEL32.dll!GetThreadLocale": 4, "KERNEL32.dll!SetThreadLocale": 10, "KERNEL32.dll!EncodePointer": 11, "KERNEL32.dll!DecodePointer": 6, "KERNEL32.dll!ConnectNamedPipe": 1, "KERNEL32.dll!DisconnectNamedPipe": 1, "KERNEL32.dll!CreateNamedPipeW": 1, "KERNEL32.dll!WaitNamedPipeW": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!MultiByteToWideChar": 24, "OLEAUT32.dll!SafeArrayUnlock": 3, "OLEAUT32.dll!SafeArrayDestroy": 3, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetLBound": 3, "OLEAUT32.dll!SafeArrayGetUBound": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 9, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 8, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "KERNEL32.dll!GetSystemInfo": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!TryEnterCriticalSection": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!GetTickCount": 1, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!TlsAlloc": 5, "KERNEL32.dll!TlsFree": 5, "KERNEL32.dll!TlsGetValue": 4, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!InterlockedFlushSList": 23, "KERNEL32.dll!InterlockedPushEntrySList": 21, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetACP": 6, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableA": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!ChangeTimerQueueTimer": 1, "KERNEL32.dll!CreateTimerQueueTimer": 1, "KERNEL32.dll!DeleteTimerQueueTimer": 1, "KERNEL32.dll!GetLogicalProcessorInformation": 2, "KERNEL32.dll!GetNumaHighestNodeNumber": 1, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!GetThreadPriority": 1, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!SignalObjectAndWait": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!UnregisterWait": 1, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetCurrentThread": 6, "KERNEL32.dll!GetThreadTimes": 1, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!UnregisterWaitEx": 1, "KERNEL32.dll!InterlockedPopEntrySList": 13, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!QueryDepthSList": 17, "KERNEL32.dll!CreateTimerQueue": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvsphelperplugin64.dll", "sha256": "43b98088129920386e56ce706e292a49283404fdffdf834db7c47f2ca6ed6fb6", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 829952, "processed_bytes": 829952, "instructions": 434082, "skipdata_bytes": 2 } ], "utc": "2026-11-11T21:40:14.442302+00:00", "instructions": 434082, "skipdata_bytes": 2, "calls": 8745, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 20, "KERNEL32.dll!InitializeCriticalSectionEx": 20, "KERNEL32.dll!GetLastError": 263, "KERNEL32.dll!InitializeCriticalSection": 8, "KERNEL32.dll!GetCurrentThreadId": 14, "USER32.dll!GetThreadDesktop": 4, "USER32.dll!OpenInputDesktop": 3, "USER32.dll!SetThreadDesktop": 6, "USER32.dll!CloseDesktop": 7, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 3, "ADVAPI32.dll!DuplicateTokenEx": 2, "ADVAPI32.dll!ImpersonateLoggedOnUser": 2, "KERNEL32.dll!CloseHandle": 105, "KERNEL32.dll!DecodePointer": 10, "KERNEL32.dll!DeleteCriticalSection": 35, "USER32.dll!UnregisterClassA": 13, "KERNEL32.dll!HeapDestroy": 4, "ADVAPI32.dll!RevertToSelf": 5, "KERNEL32.dll!HeapAlloc": 8, "KERNEL32.dll!HeapFree": 9, "KERNEL32.dll!HeapSize": 3, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!GetModuleFileNameA": 4, "USER32.dll!GetAsyncKeyState": 10, "ADVAPI32.dll!RegOpenKeyExA": 26, "ADVAPI32.dll!RegOpenCurrentUser": 4, "ADVAPI32.dll!RegQueryValueExA": 20, "ADVAPI32.dll!RegCloseKey": 23, "USER32.dll!UnregisterHotKey": 3, "USER32.dll!RegisterHotKey": 2, "KERNEL32.dll!CreateEventA": 9, "ADVAPI32.dll!InitializeSecurityDescriptor": 6, "ADVAPI32.dll!SetSecurityDescriptorDacl": 6, "KERNEL32.dll!CreateEventW": 16, "KERNEL32.dll!OpenEventW": 8, "KERNEL32.dll!OpenFileMappingW": 5, "USER32.dll!DestroyWindow": 4, "KERNEL32.dll!UnmapViewOfFile": 6, "USER32.dll!IsWindow": 6, "KERNEL32.dll!GetCurrentProcessId": 12, "USER32.dll!RegisterRawInputDevices": 9, "KERNEL32.dll!SetEvent": 19, "KERNEL32.dll!WaitForSingleObject": 20, "USER32.dll!DefWindowProcA": 2, "KERNEL32.dll!GetModuleHandleA": 2, "USER32.dll!RegisterClassExA": 2, "USER32.dll!CreateWindowExA": 2, "KERNEL32.dll!MapViewOfFile": 4, "USER32.dll!GetRawInputData": 4, "USER32.dll!PeekMessageA": 5, "USER32.dll!TranslateMessage": 4, "USER32.dll!DispatchMessageA": 4, "USER32.dll!MsgWaitForMultipleObjectsEx": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!SetDllDirectoryA": 4, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!FreeLibrary": 45, "KERNEL32.dll!GetProcAddress": 78, "ADVAPI32.dll!LookupAccountNameA": 2, "KERNEL32.dll!LocalFree": 111, "KERNEL32.dll!FlushFileBuffers": 9, "KERNEL32.dll!DisconnectNamedPipe": 7, "USER32.dll!wsprintfW": 5, "KERNEL32.dll!ConnectNamedPipe": 7, "KERNEL32.dll!WriteFile": 15, "KERNEL32.dll!ReadFile": 10, "KERNEL32.dll!ResetEvent": 5, "KERNEL32.dll!CreateNamedPipeW": 3, "KERNEL32.dll!WaitForMultipleObjects": 3, "KERNEL32.dll!LocalAlloc": 60, "KERNEL32.dll!GetSystemDirectoryW": 20, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!SetLastError": 103, "KERNEL32.dll!GetModuleHandleW": 12, "KERNEL32.dll!GetModuleFileNameW": 13, "KERNEL32.dll!VerSetConditionMask": 12, "KERNEL32.dll!VerifyVersionInfoW": 6, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 10, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!EnterCriticalSection": 30, "KERNEL32.dll!LeaveCriticalSection": 31, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 6, "KERNEL32.dll!WideCharToMultiByte": 6, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileA": 3, "KERNEL32.dll!CreateFileA": 5, "ADVAPI32.dll!GetSecurityDescriptorDacl": 9, "SHELL32.dll!SHGetFolderPathA": 4, "KERNEL32.dll!CreateDirectoryA": 5, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclA": 3, "ADVAPI32.dll!FreeSid": 4, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!OutputDebugStringA": 3, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "ADVAPI32.dll!RegCreateKeyExA": 6, "ADVAPI32.dll!RegCopyTreeA": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "ADVAPI32.dll!RegSetValueExA": 5, "ADVAPI32.dll!RegDeleteKeyExA": 3, "ADVAPI32.dll!RegDeleteKeyValueA": 2, "KERNEL32.dll!OpenFileMappingA": 3, "KERNEL32.dll!ReleaseMutex": 2, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!CreateMutexW": 2, "KERNEL32.dll!OpenMutexW": 3, "KERNEL32.dll!LoadLibraryA": 7, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!CreateMutexA": 2, "KERNEL32.dll!OpenMutexA": 2, "KERNEL32.dll!CreateNamedPipeA": 2, "KERNEL32.dll!GetCurrentProcess": 5, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 5, "ADVAPI32.dll!GetLengthSid": 3, "ADVAPI32.dll!CopySid": 3, "KERNEL32.dll!CreateFileMappingA": 2, "USER32.dll!SystemParametersInfoA": 4, "USER32.dll!EnumDisplaySettingsA": 3, "USER32.dll!GetSystemMetrics": 5, "USER32.dll!GetPhysicalCursorPos": 2, "USER32.dll!PostThreadMessageA": 3, "USER32.dll!UnhookWindowsHookEx": 6, "USER32.dll!FindWindowA": 23, "USER32.dll!SetWindowsHookExA": 4, "USER32.dll!GetMessageA": 3, "USER32.dll!CallNextHookEx": 6, "USER32.dll!PostMessageA": 35, "USER32.dll!SendMessageA": 11, "USER32.dll!GetForegroundWindow": 3, "USER32.dll!SendNotifyMessageA": 9, "USER32.dll!MapVirtualKeyA": 3, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!OpenProcess": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "VERSION.dll!GetFileVersionInfoSizeA": 1, "VERSION.dll!GetFileVersionInfoA": 1, "VERSION.dll!VerQueryValueA": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "WTSAPI32.dll!WTSQueryUserToken": 1, "WTSAPI32.dll!WTSQuerySessionInformationA": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 8, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!OutputDebugStringW": 6, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetFileType": 4, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\FvContainer.exe", "sha256": "bd3fa80956cafa3eb6db3acc440145ee90d24abf96cd53ba02b6eb17542e5788", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 874496, "processed_bytes": 874496, "instructions": 262062, "skipdata_bytes": 443 } ], "utc": "2026-11-11T21:40:15.227835+00:00", "instructions": 262062, "skipdata_bytes": 443, "calls": 13876, "api_reference_counts": { "KERNEL32.dll!SetDefaultDllDirectories": 2, "SHELL32.dll!CommandLineToArgvW": 2, "KERNEL32.dll!GetCurrentProcess": 7, "KERNEL32.dll!GetProcessTimes": 3, "KERNEL32.dll!GetModuleHandleW": 16, "USER32.dll!RegisterClassW": 2, "USER32.dll!CreateWindowExW": 2, "USER32.dll!SetWindowLongPtrW": 2, "USER32.dll!ShutdownBlockReasonCreate": 2, "KERNEL32.dll!WaitForSingleObject": 10, "KERNEL32.dll!CloseHandle": 56, "USER32.dll!ShutdownBlockReasonDestroy": 2, "USER32.dll!DestroyWindow": 3, "USER32.dll!UnregisterClassW": 2, "USER32.dll!PostMessageW": 4, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageW": 2, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!CreateEventW": 7, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!SetEvent": 10, "USER32.dll!GetWindowLongPtrW": 2, "USER32.dll!DefWindowProcW": 2, "KERNEL32.dll!WaitForMultipleObjects": 4, "KERNEL32.dll!AddVectoredExceptionHandler": 3, "KERNEL32.dll!AddVectoredContinueHandler": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 10, "KERNEL32.dll!RemoveVectoredExceptionHandler": 4, "KERNEL32.dll!RemoveVectoredContinueHandler": 4, "KERNEL32.dll!RtlCaptureStackBackTrace": 3, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!GetProcAddress": 102, "KERNEL32.dll!GetLastError": 191, "ADVAPI32.dll!CreateWellKnownSid": 3, "KERNEL32.dll!LocalAlloc": 60, "ADVAPI32.dll!LookupAccountSidW": 2, "KERNEL32.dll!LocalFree": 110, "ADVAPI32.dll!BuildExplicitAccessWithNameW": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!OpenSCManagerW": 2, "ADVAPI32.dll!OpenServiceW": 2, "ADVAPI32.dll!QueryServiceConfigW": 2, "ADVAPI32.dll!ChangeServiceConfigW": 2, "ADVAPI32.dll!CloseServiceHandle": 3, "ADVAPI32.dll!RegisterServiceCtrlHandlerExW": 3, "ADVAPI32.dll!RegCreateKeyExW": 5, "ADVAPI32.dll!RegCloseKey": 10, "ADVAPI32.dll!SetServiceStatus": 2, "ADVAPI32.dll!RegSetValueExW": 2, "ADVAPI32.dll!StartServiceCtrlDispatcherW": 2, "KERNEL32.dll!GetCurrentProcessId": 5, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetSecurityInfo": 2, "ADVAPI32.dll!SetSecurityInfo": 2, "KERNEL32.dll!SetLastError": 71, "KERNEL32.dll!GetErrorMode": 2, "KERNEL32.dll!SetErrorMode": 3, "SHLWAPI.dll!PathIsRelativeW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 3, "KERNEL32.dll!LoadLibraryExW": 32, "USER32.dll!LoadStringW": 2, "KERNEL32.dll!FreeLibrary": 36, "KERNEL32.dll!GetSystemDirectoryW": 17, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!GetModuleFileNameW": 11, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!CreateFileW": 16, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateTimerQueueTimer": 2, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!FindClose": 12, "KERNEL32.dll!DeleteTimerQueueTimer": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 5, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!CreateDirectoryW": 3, "ADVAPI32.dll!RegGetValueW": 7, "ADVAPI32.dll!RegDeleteValueW": 3, "USER32.dll!PostThreadMessageW": 3, "USER32.dll!PeekMessageW": 2, "USER32.dll!GetMessageW": 2, "KERNEL32.dll!FindCloseChangeNotification": 2, "KERNEL32.dll!FindFirstChangeNotificationW": 2, "KERNEL32.dll!FindNextChangeNotification": 2, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegSetKeyValueW": 4, "KERNEL32.dll!MultiByteToWideChar": 5, "KERNEL32.dll!WideCharToMultiByte": 9, "KERNEL32.dll!RemoveDirectoryW": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!DeviceIoControl": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "PSAPI.DLL!GetProcessMemoryInfo": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileInformationByHandle": 4, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 6, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetFilePointerEx": 11, "KERNEL32.dll!SetEndOfFile": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RaiseException": 10, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 5, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!EnterCriticalSection": 12, "KERNEL32.dll!LeaveCriticalSection": 12, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 6, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\InstallerCore\\NVPrxy64.DLL", "sha256": "599949b92a60f05705ba66c8611c177462cb44f877b16e6054c097ffb9d9e88e", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 884224, "processed_bytes": 884224, "instructions": 246619, "skipdata_bytes": 141 } ], "utc": "2026-11-11T21:40:15.537070+00:00", "instructions": 246619, "skipdata_bytes": 141, "calls": 17378, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 24, "KERNEL32.dll!GetLastError": 180, "KERNEL32.dll!DeleteCriticalSection": 160, "KERNEL32.dll!EnterCriticalSection": 52, "KERNEL32.dll!LeaveCriticalSection": 55, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 3, "SETUPAPI.dll!SetupDiGetClassDevsW": 5, "SETUPAPI.dll!CM_Get_DevNode_Status": 8, "KERNEL32.dll!ResumeThread": 1, "OLEAUT32.dll!VariantInit": 96, "OLEAUT32.dll!VariantClear": 137, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 10, "OLEAUT32.dll!VariantChangeType": 6, "OLEAUT32.dll!SysAllocStringLen": 3, "OLEAUT32.dll!SysStringLen": 12, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "KERNEL32.dll!SetLastError": 61, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 15, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 4, "KERNEL32.dll!CloseHandle": 48, "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegCloseKey": 30, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 7, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!CreateFileW": 12, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!GetModuleFileNameW": 2, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 16, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "RPCRT4.dll!RpcServerUseProtseqEpW": 1, "RPCRT4.dll!RpcServerRegisterIfEx": 1, "RPCRT4.dll!RpcServerListen": 1, "USER32.dll!SetTimer": 1, "USER32.dll!GetMessageW": 2, "USER32.dll!PostQuitMessage": 1, "RPCRT4.dll!RpcMgmtStopServerListening": 2, "RPCRT4.dll!RpcMgmtWaitServerListen": 1, "RPCRT4.dll!RpcServerUnregisterIf": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "ole32.dll!CoInitialize": 7, "ole32.dll!CoCreateInstance": 7, "OLEAUT32.dll!SysFreeString": 4, "KERNEL32.dll!InitializeCriticalSectionEx": 31, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 5, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 2, "SETUPAPI.dll!SetupDiCallClassInstaller": 2, "SETUPAPI.dll!SetupDiSetClassInstallParamsW": 2, "SETUPAPI.dll!SetupDiGetClassInstallParamsW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoW": 1, "SETUPAPI.dll!SetupDiSetDeviceRegistryPropertyW": 9, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupDiGetSelectedDriverW": 1, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiInstallDevice": 1, "SETUPAPI.dll!SetupDiOpenDevRegKey": 2, "SETUPAPI.dll!SetupCopyOEMInfW": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupUninstallOEMInfW": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!UnmapViewOfFile": 4, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindNextFileW": 3, "KERNEL32.dll!GetCurrentDirectoryW": 1, "KERNEL32.dll!QueryDosDeviceW": 2, "KERNEL32.dll!GetSystemWindowsDirectoryW": 1, "KERNEL32.dll!GetSystemDirectoryW": 15, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!lstrcmpW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!MultiByteToWideChar": 14, "KERNEL32.dll!GetProcAddress": 31, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!FreeLibrary": 6, "ole32.dll!CoTaskMemAlloc": 1, "ole32.dll!PropVariantClear": 1, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "KERNEL32.dll!GetProcessId": 3, "OLEAUT32.dll!SafeArrayUnlock": 3, "OLEAUT32.dll!SafeArrayDestroy": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayLock": 2, "OLEAUT32.dll!SafeArrayGetLBound": 2, "OLEAUT32.dll!SafeArrayGetUBound": 2, "OLEAUT32.dll!SysAllocString": 1, "KERNEL32.dll!LocalAlloc": 10, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "PSAPI.DLL!GetProcessImageFileNameW": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!RaiseException": 5, "RPCRT4.dll!NdrServerCallAll": 1, "RPCRT4.dll!NdrServerCall2": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\HDAudio.Driver.{091AEA3D-8B36-4AC9-8B5B-5965F73BC7F6}\\HDAudioExt64.dll", "sha256": "a1dad609c7a2edcf2d458920ae20f9476c8c37722a089b4ddf0ab1172f04d106", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 891904, "processed_bytes": 891904, "instructions": 250553, "skipdata_bytes": 163 } ], "utc": "2026-11-11T21:40:15.544260+00:00", "instructions": 250553, "skipdata_bytes": 163, "calls": 17463, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 40, "KERNEL32.dll!GetLastError": 173, "ole32.dll!CoCreateInstance": 1, "KERNEL32.dll!RaiseException": 5, "KERNEL32.dll!DeleteCriticalSection": 131, "KERNEL32.dll!EnterCriticalSection": 22, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!LeaveCriticalSection": 24, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!WideCharToMultiByte": 18, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "OLEAUT32.dll!VariantInit": 107, "OLEAUT32.dll!VariantClear": 196, "KERNEL32.dll!CloseHandle": 55, "KERNEL32.dll!SetLastError": 71, "SETUPAPI.dll!SetupCloseInfFile": 9, "OLEAUT32.dll!VariantChangeType": 13, "KERNEL32.dll!GetCurrentProcess": 15, "SETUPAPI.dll!SetupOpenInfFileW": 2, "SETUPAPI.dll!SetupFindFirstLineW": 3, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysFreeString": 9, "OLEAUT32.dll!SysStringLen": 11, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "KERNEL32.dll!MultiByteToWideChar": 20, "OLEAUT32.dll!SysAllocString": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "OLEAUT32.dll!SysAllocStringLen": 3, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 4, "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegCloseKey": 30, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 7, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!WaitForSingleObject": 4, "KERNEL32.dll!CreateFileW": 13, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 8, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 2, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 16, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 4, "OLEAUT32.dll!SafeArrayUnlock": 7, "OLEAUT32.dll!SafeArrayDestroy": 7, "OLEAUT32.dll!SafeArrayGetVartype": 2, "OLEAUT32.dll!SafeArrayCopy": 2, "OLEAUT32.dll!SafeArrayLock": 4, "OLEAUT32.dll!SafeArrayGetLBound": 9, "OLEAUT32.dll!SafeArrayGetUBound": 8, "KERNEL32.dll!FindClose": 3, "USERENV.dll!UnloadUserProfile": 4, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!CopyFileW": 1, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 1, "KERNEL32.dll!GetSystemWindowsDirectoryW": 1, "KERNEL32.dll!GetSystemDirectoryW": 15, "ADVAPI32.dll!GetFileSecurityW": 2, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!SetupDiGetINFClassW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupGetFieldCount": 2, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupFindNextLine": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "RPCRT4.dll!UuidFromStringW": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!GetProcAddress": 31, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 6, "KERNEL32.dll!LoadLibraryW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "KERNEL32.dll!LocalAlloc": 10, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\Plugins\\LocalSystem\\NvXDCore.dll", "sha256": "fca581fcb45d60136a6907be06c50a9efa3dfbc682c01acb0bdb977a777dab52", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 900608, "processed_bytes": 900608, "instructions": 245645, "skipdata_bytes": 9 } ], "utc": "2026-11-11T21:40:15.592525+00:00", "instructions": 245645, "skipdata_bytes": 9, "calls": 18645, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 15, "KERNEL32.dll!GetLastError": 96, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!LocalFree": 58, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!SetLastError": 24, "KERNEL32.dll!GetSystemDirectoryW": 6, "KERNEL32.dll!LocalAlloc": 35, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!GetProcAddress": 59, "KERNEL32.dll!GetModuleHandleW": 19, "KERNEL32.dll!GetModuleFileNameW": 5, "KERNEL32.dll!GetFileAttributesW": 5, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 3, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 5, "ADVAPI32.dll!RegOpenKeyExW": 20, "ADVAPI32.dll!RegQueryValueExW": 29, "ADVAPI32.dll!RegDeleteValueW": 3, "ADVAPI32.dll!RegCloseKey": 62, "ADVAPI32.dll!RegDeleteKeyW": 5, "USERENV.dll!CreateEnvironmentBlock": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "SHLWAPI.dll!PathAddBackslashW": 1, "ADVAPI32.dll!CreateProcessAsUserW": 1, "KERNEL32.dll!CloseHandle": 96, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 4, "USER32.dll!GetSystemMetrics": 2, "WTSAPI32.dll!WTSEnumerateSessionsW": 3, "WTSAPI32.dll!WTSFreeMemory": 5, "WTSAPI32.dll!WTSQueryUserToken": 1, "SETUPAPI.dll!SetupDiGetClassDevsW": 2, "SHLWAPI.dll!StrStrIW": 2, "KERNEL32.dll!lstrcmpiW": 14, "CFGMGR32.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 2, "KERNEL32.dll!DecodePointer": 2, "KERNEL32.dll!DeleteCriticalSection": 28, "ADVAPI32.dll!RegEnumKeyExW": 3, "ole32.dll!CoTaskMemFree": 11, "ole32.dll!CoTaskMemRealloc": 4, "KERNEL32.dll!EnterCriticalSection": 20, "KERNEL32.dll!LeaveCriticalSection": 22, "KERNEL32.dll!FindResourceW": 2, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!MultiByteToWideChar": 11, "KERNEL32.dll!FreeLibrary": 10, "USER32.dll!CharNextW": 24, "ADVAPI32.dll!RegSetValueExW": 7, "OLEAUT32.dll!VarUI4FromStr": 1, "ole32.dll!CoTaskMemAlloc": 6, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegQueryInfoKeyW": 4, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 6, "SHLWAPI.dll!PathFindFileNameW": 1, "ADVAPI32.dll!RegEnumValueW": 2, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!WideCharToMultiByte": 8, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!ReleaseSemaphore": 11, "KERNEL32.dll!CreateEventA": 6, "KERNEL32.dll!WaitForSingleObjectEx": 4, "KERNEL32.dll!SetEvent": 17, "KERNEL32.dll!OutputDebugStringW": 3, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!CreateMutexW": 2, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!WaitForSingleObject": 15, "KERNEL32.dll!ReleaseMutex": 1, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!CreateSemaphoreA": 5, "KERNEL32.dll!WaitForMultipleObjectsEx": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "ole32.dll!CoCreateInstance": 7, "ole32.dll!StringFromGUID2": 1, "KERNEL32.dll!HeapAlloc": 5, "KERNEL32.dll!HeapFree": 17, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 19, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "SHELL32.dll!SHGetFolderPathW": 1, "SHLWAPI.dll!PathFileExistsW": 10, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateSymbolicLinkW": 1, "SHLWAPI.dll!SHGetValueW": 3, "SHLWAPI.dll!SHSetValueW": 1, "SHLWAPI.dll!SHDeleteValueW": 1, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "KERNEL32.dll!Sleep": 6, "CFGMGR32.dll!CM_Register_Notification": 1, "USER32.dll!RegisterSuspendResumeNotification": 1, "WTSAPI32.dll!WTSRegisterSessionNotification": 1, "ADVAPI32.dll!UnregisterTraceGuids": 1, "KERNEL32.dll!WaitForMultipleObjects": 2, "KERNEL32.dll!CreateEventW": 7, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 2, "KERNEL32.dll!ResetEvent": 3, "KERNEL32.dll!OpenEventW": 5, "ole32.dll!CoRevokeClassObject": 2, "CFGMGR32.dll!CM_Unregister_Notification": 1, "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1, "USER32.dll!UnregisterSuspendResumeNotification": 1, "KERNEL32.dll!RaiseException": 8, "KERNEL32.dll!DuplicateHandle": 1, "RPCRT4.dll!RpcRevertToSelfEx": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "RPCRT4.dll!RpcImpersonateClient": 1, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "WTSAPI32.dll!WTSQuerySessionInformationW": 2, "ole32.dll!CoRegisterClassObject": 1, "KERNEL32.dll!CreateThread": 2, "ole32.dll!CoResumeClassObjects": 2, "ole32.dll!CoAddRefServerProcess": 1, "USER32.dll!PostThreadMessageW": 1, "OLEAUT32.dll!SysAllocString": 3, "OLEAUT32.dll!SysFreeString": 1, "OLEAUT32.dll!VariantInit": 11, "OLEAUT32.dll!VariantClear": 18, "ole32.dll!CoInitialize": 2, "ole32.dll!CoUninitialize": 1, "ADVAPI32.dll!RegNotifyChangeKeyValue": 1, "ole32.dll!CoSetProxyBlanket": 1, "KERNEL32.dll!DeviceIoControl": 2, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LockResource": 1, "ole32.dll!CoCreateInstanceEx": 1, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!SetWaitableTimer": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!CreateWaitableTimerA": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ResumeThread": 1, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\Plugins\\Session\\nvxdsyncplugin.dll", "sha256": "870140e1f941c2043d5e5bd34b734f64f57b05d48f47ecf89fbf1a783371adf8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 926720, "processed_bytes": 926720, "instructions": 244280, "skipdata_bytes": 7 }, { "name": ".orpc", "raw_bytes": 512, "processed_bytes": 512, "instructions": 204, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:16.046283+00:00", "instructions": 244484, "skipdata_bytes": 8, "calls": 19014, "api_reference_counts": { "ADVAPI32.dll!RegQueryValueExW": 14, "ADVAPI32.dll!RegCloseKey": 44, "ADVAPI32.dll!RegOpenKeyExW": 16, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!CloseHandle": 83, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!WideCharToMultiByte": 8, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!WaitForSingleObject": 11, "KERNEL32.dll!ReleaseMutex": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!CreateMutexW": 3, "KERNEL32.dll!CreateEventA": 6, "KERNEL32.dll!WaitForSingleObjectEx": 4, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 4, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!SetEvent": 12, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 7, "ADVAPI32.dll!RegCreateKeyExW": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 11, "KERNEL32.dll!GetLastError": 65, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!DeleteCriticalSection": 20, "ADVAPI32.dll!RegEnumValueW": 1, "ole32.dll!CoTaskMemAlloc": 7, "KERNEL32.dll!CreateSemaphoreA": 5, "KERNEL32.dll!ReleaseSemaphore": 11, "KERNEL32.dll!WaitForMultipleObjectsEx": 2, "ole32.dll!CoCreateInstanceEx": 1, "ole32.dll!CoTaskMemRealloc": 4, "ole32.dll!CoTaskMemFree": 11, "ole32.dll!CoCreateInstance": 5, "ole32.dll!CoAddRefServerProcess": 1, "ole32.dll!CoReleaseServerProcess": 1, "USER32.dll!PostThreadMessageW": 1, "KERNEL32.dll!GetProcessHeap": 22, "KERNEL32.dll!HeapAlloc": 6, "KERNEL32.dll!HeapFree": 18, "KERNEL32.dll!EnterCriticalSection": 21, "KERNEL32.dll!LeaveCriticalSection": 22, "USER32.dll!CharNextW": 26, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegSetValueExW": 3, "KERNEL32.dll!EncodePointer": 4, "ole32.dll!CoRevokeClassObject": 1, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysAllocString": 1, "ole32.dll!StringFromGUID2": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 4, "OLEAUT32.dll!SysStringLen": 1, "KERNEL32.dll!GetModuleHandleW": 12, "KERNEL32.dll!GetProcAddress": 22, "OLEAUT32.dll!SysFreeString": 3, "ADVAPI32.dll!RegDeleteKeyW": 2, "KERNEL32.dll!lstrcmpiW": 12, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoInitializeSecurity": 1, "KERNEL32.dll!WaitForMultipleObjects": 3, "ole32.dll!CoSuspendClassObjects": 1, "KERNEL32.dll!GetCurrentProcessId": 7, "KERNEL32.dll!ProcessIdToSessionId": 3, "KERNEL32.dll!SetDllDirectoryW": 1, "USER32.dll!RegisterDeviceNotificationW": 1, "KERNEL32.dll!Sleep": 2, "ole32.dll!CoResumeClassObjects": 2, "ADVAPI32.dll!RegEnumKeyExW": 1, "ole32.dll!CoRegisterClassObject": 1, "KERNEL32.dll!LoadLibraryExW": 6, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!SizeofResource": 1, "KERNEL32.dll!MultiByteToWideChar": 11, "KERNEL32.dll!FreeLibrary": 7, "ADVAPI32.dll!RegDeleteValueW": 1, "KERNEL32.dll!OpenEventW": 9, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!ResetEvent": 4, "USER32.dll!UnregisterDeviceNotification": 1, "KERNEL32.dll!RaiseException": 8, "ADVAPI32.dll!UnregisterTraceGuids": 1, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 1, "KERNEL32.dll!DuplicateHandle": 1, "RPCRT4.dll!NdrOleAllocate": 1, "RPCRT4.dll!NdrOleFree": 1, "RPCRT4.dll!CStdStubBuffer_QueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_AddRef": 1, "RPCRT4.dll!CStdStubBuffer_Connect": 1, "RPCRT4.dll!CStdStubBuffer_Disconnect": 1, "RPCRT4.dll!CStdStubBuffer_Invoke": 1, "RPCRT4.dll!CStdStubBuffer_IsIIDSupported": 1, "RPCRT4.dll!CStdStubBuffer_CountRefs": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerQueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerRelease": 1, "RPCRT4.dll!IUnknown_QueryInterface_Proxy": 1, "RPCRT4.dll!IUnknown_AddRef_Proxy": 1, "RPCRT4.dll!IUnknown_Release_Proxy": 1, "RPCRT4.dll!NdrCStdStubBuffer_Release": 1, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!SetWaitableTimer": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!CreateWaitableTimerA": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ResumeThread": 1, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!SetLastError": 4, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvxdbat.dll", "sha256": "379ecc2cf34e0984e3bbfded7c8a4612f23b4375329c45ad3f253eaea19069d5", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".orpc", "raw_bytes": 512, "processed_bytes": 512, "instructions": 204, "skipdata_bytes": 1 }, { "name": ".text", "raw_bytes": 936448, "processed_bytes": 936448, "instructions": 248083, "skipdata_bytes": 20 } ], "utc": "2026-11-11T21:40:16.354528+00:00", "instructions": 248287, "skipdata_bytes": 21, "calls": 19094, "api_reference_counts": { "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegCloseKey": 40, "ADVAPI32.dll!RegOpenKeyExW": 16, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!CloseHandle": 52, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!WideCharToMultiByte": 8, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!WaitForSingleObject": 5, "KERNEL32.dll!ReleaseMutex": 1, "KERNEL32.dll!GetModuleFileNameW": 4, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!CreateEventA": 6, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 4, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!SetEvent": 8, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "ADVAPI32.dll!RegCreateKeyExW": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 8, "KERNEL32.dll!GetLastError": 56, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!DeleteCriticalSection": 15, "ADVAPI32.dll!RegEnumValueW": 1, "ole32.dll!CoTaskMemAlloc": 7, "KERNEL32.dll!ReleaseSemaphore": 11, "KERNEL32.dll!WaitForMultipleObjectsEx": 1, "KERNEL32.dll!CreateSemaphoreA": 3, "ole32.dll!CoCreateInstanceEx": 1, "ole32.dll!CoTaskMemRealloc": 4, "ole32.dll!CoTaskMemFree": 11, "RPCRT4.dll!NdrDllCanUnloadNow": 1, "RPCRT4.dll!NdrDllGetClassObject": 1, "RPCRT4.dll!NdrDllRegisterProxy": 1, "RPCRT4.dll!NdrDllUnregisterProxy": 1, "ole32.dll!CoCreateInstance": 4, "KERNEL32.dll!RaiseException": 8, "ADVAPI32.dll!UnregisterTraceGuids": 1, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "USER32.dll!CharNextW": 26, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegSetValueExW": 3, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!LeaveCriticalSection": 7, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysAllocString": 1, "ole32.dll!StringFromGUID2": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 4, "OLEAUT32.dll!SysStringLen": 1, "KERNEL32.dll!GetModuleHandleW": 11, "KERNEL32.dll!GetProcAddress": 18, "OLEAUT32.dll!SysFreeString": 3, "ADVAPI32.dll!RegDeleteKeyW": 2, "KERNEL32.dll!GetThreadLocale": 2, "KERNEL32.dll!SetThreadLocale": 4, "KERNEL32.dll!lstrcmpiW": 12, "ADVAPI32.dll!RegEnumKeyExW": 1, "KERNEL32.dll!LoadLibraryExW": 6, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!SizeofResource": 1, "KERNEL32.dll!MultiByteToWideChar": 11, "KERNEL32.dll!FreeLibrary": 6, "ADVAPI32.dll!RegDeleteValueW": 1, "KERNEL32.dll!OpenEventW": 4, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 1, "USER32.dll!GetSystemMetrics": 1, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 1, "ole32.dll!CoGetStdMarshalEx": 1, "RPCRT4.dll!IUnknown_QueryInterface_Proxy": 1, "RPCRT4.dll!IUnknown_AddRef_Proxy": 1, "RPCRT4.dll!IUnknown_Release_Proxy": 1, "RPCRT4.dll!NdrOleAllocate": 1, "RPCRT4.dll!NdrOleFree": 1, "RPCRT4.dll!CStdStubBuffer_QueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_AddRef": 1, "RPCRT4.dll!CStdStubBuffer_Connect": 1, "RPCRT4.dll!CStdStubBuffer_Disconnect": 1, "RPCRT4.dll!CStdStubBuffer_Invoke": 1, "RPCRT4.dll!CStdStubBuffer_IsIIDSupported": 1, "RPCRT4.dll!CStdStubBuffer_CountRefs": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerQueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerRelease": 1, "RPCRT4.dll!NdrCStdStubBuffer_Release": 1, "WTSAPI32.dll!WTSEnumerateSessionsW": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetProcessHeap": 8, "KERNEL32.dll!HeapFree": 7, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!SetLastError": 4, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\chrome_elf.dll", "sha256": "020972f183e435a7dc0d608be8d89e0f54f253bd7f7d3315c27c1715321d23ad", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 945664, "processed_bytes": 945664, "instructions": 261691, "skipdata_bytes": 3 } ], "utc": "2026-11-11T21:40:16.384494+00:00", "instructions": 261691, "skipdata_bytes": 3, "calls": 14516, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 13, "KERNEL32.dll!TryAcquireSRWLockExclusive": 95, "KERNEL32.dll!ReleaseSRWLockExclusive": 126, "KERNEL32.dll!SetProcessMitigationPolicy": 1, "KERNEL32.dll!GetCurrentProcess": 13, "KERNEL32.dll!VirtualProtect": 5, "KERNEL32.dll!GetModuleHandleW": 10, "KERNEL32.dll!WideCharToMultiByte": 7, "KERNEL32.dll!WaitForSingleObject": 4, "KERNEL32.dll!ReleaseMutex": 2, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CloseHandle": 17, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!CreateFileW": 18, "KERNEL32.dll!GetLastError": 85, "KERNEL32.dll!ReadFile": 7, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!GetProcAddress": 21, "KERNEL32.dll!GetCurrentThread": 6, "KERNEL32.dll!LocalFree": 6, "KERNEL32.dll!TlsGetValue": 7, "KERNEL32.dll!VirtualProtectEx": 2, "KERNEL32.dll!WriteProcessMemory": 3, "KERNEL32.dll!ReadProcessMemory": 1, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 2, "KERNEL32.dll!GetCommandLineW": 5, "KERNEL32.dll!GetEnvironmentVariableW": 9, "KERNEL32.dll!GetNativeSystemInfo": 3, "KERNEL32.dll!GetTempPathW": 5, "KERNEL32.dll!GetModuleFileNameW": 8, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!GetProductInfo": 1, "KERNEL32.dll!IsWow64Process": 1, "KERNEL32.dll!SetLastError": 28, "KERNEL32.dll!GetCurrentProcessId": 9, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!AddVectoredExceptionHandler": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!GetFileType": 7, "KERNEL32.dll!CreateProcessW": 1, "ADVAPI32.dll!RegOpenKeyExW": 1, "ADVAPI32.dll!RegCloseKey": 2, "ADVAPI32.dll!RegQueryValueExW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 1, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!GetTickCount": 1, "KERNEL32.dll!OutputDebugStringA": 1, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!GetProcessId": 2, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!SetEnvironmentVariableW": 4, "SHELL32.dll!SHGetFolderPathW": 15, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetCurrentDirectoryW": 4, "SHELL32.dll!#680": 1, "KERNEL32.dll!LockFileEx": 2, "KERNEL32.dll!UnlockFileEx": 2, "KERNEL32.dll!SetEndOfFile": 3, "KERNEL32.dll!SetNamedPipeHandleState": 1, "KERNEL32.dll!TransactNamedPipe": 1, "KERNEL32.dll!WaitNamedPipeW": 1, "KERNEL32.dll!CreateNamedPipeW": 1, "ADVAPI32.dll!BuildExplicitAccessWithNameW": 1, "ADVAPI32.dll!BuildSecurityDescriptorW": 1, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!LoadLibraryW": 8, "KERNEL32.dll!SetThreadPriority": 5, "KERNEL32.dll!SetThreadInformation": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 8, "KERNEL32.dll!TlsSetValue": 5, "ADVAPI32.dll!IsValidSid": 2, "ADVAPI32.dll!GetLengthSid": 2, "KERNEL32.dll!SetFilePointerEx": 4, "KERNEL32.dll!RaiseException": 8, "KERNEL32.dll!VirtualAlloc": 10, "KERNEL32.dll!Sleep": 13, "KERNEL32.dll!VirtualFree": 9, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!GetSystemDirectoryW": 1, "KERNEL32.dll!GetWindowsDirectoryW": 1, "ole32.dll!CoTaskMemFree": 2, "ADVAPI32.dll!IsValidSecurityDescriptor": 1, "ADVAPI32.dll!GetSecurityDescriptorControl": 1, "ADVAPI32.dll!GetSecurityDescriptorOwner": 1, "ADVAPI32.dll!GetSecurityDescriptorGroup": 1, "ADVAPI32.dll!GetSecurityDescriptorDacl": 1, "ADVAPI32.dll!GetSecurityDescriptorSacl": 1, "ADVAPI32.dll!GetNamedSecurityInfoW": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 1, "ADVAPI32.dll!SetSecurityInfo": 1, "ADVAPI32.dll!IsValidAcl": 1, "ADVAPI32.dll!BuildTrusteeWithSidW": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "KERNEL32.dll!InitOnceExecuteOnce": 5, "KERNEL32.dll!RtlCaptureStackBackTrace": 1, "WINMM.dll!timeGetTime": 2, "KERNEL32.dll!QueryPerformanceCounter": 7, "KERNEL32.dll!VirtualQuery": 3, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!QueryThreadCycleTime": 1, "KERNEL32.dll!GetThreadPriority": 2, "KERNEL32.dll!UnregisterWaitEx": 1, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!FreeLibrary": 9, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 5, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!EnterCriticalSection": 4, "KERNEL32.dll!LeaveCriticalSection": 4, "KERNEL32.dll!DeleteCriticalSection": 5, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!PeekNamedPipe": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!FindFirstFileExW": 3, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!CreateRemoteThread": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!SleepEx": 1, "KERNEL32.dll!GetComputerNameExW": 2, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!RemoveVectoredExceptionHandler": 1, "KERNEL32.dll!GetFileTime": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!K32GetMappedFileNameW": 1, "ntdll.dll!NtClose": 1, "ntdll.dll!NtDeleteKey": 1, "ntdll.dll!RtlInitUnicodeString": 1, "ntdll.dll!NtOpenKeyEx": 1, "ntdll.dll!NtQueryValueKey": 1, "ntdll.dll!NtSetValueKey": 1, "ntdll.dll!RtlFormatCurrentUserKeyPath": 1, "ntdll.dll!RtlFreeUnicodeString": 1, "ntdll.dll!NtCreateKey": 1, "KERNEL32.dll!WerRegisterRuntimeExceptionModule": 1, "dbghelp.dll!MiniDumpWriteDump": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvDLISR\\NGXWrapper.dll", "sha256": "c7351623cc93c87d68d8cffafb2b48d58c61505f1f6ceb213c565b2b2652df07", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 945664, "processed_bytes": 945664, "instructions": 466754, "skipdata_bytes": 72 } ], "utc": "2026-11-11T21:40:16.421871+00:00", "instructions": 466754, "skipdata_bytes": 72, "calls": 13314, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 5, "KERNEL32.dll!InitializeCriticalSectionEx": 10, "KERNEL32.dll!GetLastError": 81, "KERNEL32.dll!InitializeCriticalSection": 6, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fseek": 7, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 2, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 2, "api-ms-win-crt-stdio-l1-1-0.dll!feof": 2, "api-ms-win-crt-stdio-l1-1-0.dll!ferror": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 76, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "api-ms-win-crt-heap-l1-1-0.dll!free": 84, "KERNEL32.dll!DecodePointer": 5, "KERNEL32.dll!DeleteCriticalSection": 19, "USER32.dll!UnregisterClassW": 6, "KERNEL32.dll!HeapDestroy": 7, "KERNEL32.dll!HeapAlloc": 4, "api-ms-win-crt-string-l1-1-0.dll!wcsncmp": 2, "ole32.dll!PropVariantClear": 3, "ole32.dll!CoTaskMemFree": 5, "KERNEL32.dll!HeapFree": 3, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 6, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!CreateDirectoryW": 2, "KERNEL32.dll!HeapReAlloc": 3, "ole32.dll!CoInitialize": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoTaskMemAlloc": 2, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 2, "ole32.dll!CoUninitialize": 2, "api-ms-win-crt-math-l1-1-0.dll!ldexp": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fopen_s": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 5, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 9, "api-ms-win-crt-stdio-l1-1-0.dll!ftell": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 5, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 8, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetCurrentProcessId": 5, "KERNEL32.dll!QueryPerformanceCounter": 8, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 5, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 2, "MSVCP140.dll!_Mbrtowc": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 7, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-math-l1-1-0.dll!powf": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1, "KERNEL32.dll!GetProcAddress": 618, "KERNEL32.dll!FreeLibrary": 33, "KERNEL32.dll!LoadLibraryExA": 2, "KERNEL32.dll!HeapCreate": 2, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!LeaveCriticalSection": 18, "KERNEL32.dll!InitializeConditionVariable": 2, "KERNEL32.dll!WakeConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableCS": 2, "KERNEL32.dll!CreateFileMappingA": 2, "KERNEL32.dll!CreateFileMappingNumaA": 2, "KERNEL32.dll!CloseHandle": 13, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!CreateEventA": 5, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!Sleep": 5, "KERNEL32.dll!WaitForMultipleObjects": 3, "KERNEL32.dll!FindFirstFileA": 2, "KERNEL32.dll!FindNextFileA": 2, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GlobalMemoryStatusEx": 5, "KERNEL32.dll!GetModuleHandleA": 5, "KERNEL32.dll!GetModuleFileNameA": 4, "KERNEL32.dll!GetLargePageMinimum": 2, "KERNEL32.dll!GetEnvironmentVariableA": 3, "KERNEL32.dll!GetFileAttributesExA": 2, "KERNEL32.dll!GetComputerNameA": 2, "KERNEL32.dll!GetLocalTime": 2, "KERNEL32.dll!GetSystemInfo": 5, "KERNEL32.dll!GetCurrentThread": 3, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!SetThreadAffinityMask": 5, "KERNEL32.dll!VirtualQuery": 6, "KERNEL32.dll!GetCurrentDirectoryA": 2, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!InitializeSRWLock": 3, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!LockFileEx": 3, "KERNEL32.dll!TryEnterCriticalSection": 3, "KERNEL32.dll!CreateDirectoryA": 2, "KERNEL32.dll!GetNumaNodeProcessorMask": 2, "KERNEL32.dll!SwitchToThread": 3, "KERNEL32.dll!RemoveDirectoryA": 5, "KERNEL32.dll!DeleteFileA": 3, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!CreateSemaphoreA": 3, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!SetEnvironmentVariableA": 2, "KERNEL32.dll!GetModuleHandleExA": 3, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!UnlockFileEx": 2, "KERNEL32.dll!VirtualAlloc": 4, "KERNEL32.dll!VirtualFree": 3, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!LocalAlloc": 82, "KERNEL32.dll!LocalFree": 179, "KERNEL32.dll!GetSystemDirectoryW": 21, "KERNEL32.dll!GetFileAttributesW": 18, "KERNEL32.dll!SetLastError": 110, "KERNEL32.dll!GetModuleFileNameW": 6, "KERNEL32.dll!VerSetConditionMask": 11, "KERNEL32.dll!VerifyVersionInfoW": 7, "KERNEL32.dll!GetFullPathNameW": 5, "KERNEL32.dll!LoadLibraryExW": 20, "KERNEL32.dll!CreateFileW": 6, "KERNEL32.dll!CreateProcessA": 3, "KERNEL32.dll!CreateProcessW": 3, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 6, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 6, "VCRUNTIME140.dll!wcsrchr": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "ADVAPI32.dll!RegQueryValueExW": 9, "VCRUNTIME140.dll!wcsstr": 3, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "api-ms-win-crt-string-l1-1-0.dll!_wcsdup": 7, "ADVAPI32.dll!RegOpenKeyExW": 6, "ADVAPI32.dll!RegCloseKey": 6, "KERNEL32.dll!LoadLibraryW": 3, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 6, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 8, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 4, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fputs": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "KERNEL32.dll!GetStdHandle": 2, "KERNEL32.dll!WriteConsoleA": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf_s": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_wfsopen": 5, "KERNEL32.dll!GetConsoleWindow": 2, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!AllocConsole": 2, "KERNEL32.dll!SetConsoleTitleA": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_set_invalid_parameter_handler": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 3, "USER32.dll!MessageBoxA": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 5, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 10, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 2, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 3, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 2, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 11, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 6, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 4, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 8, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 7, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 6, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 6, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 3, "KERNEL32.dll!WideCharToMultiByte": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "gdiplus.dll!GdipGetImageEncodersSize": 1, "gdiplus.dll!GdipGetImageEncoders": 1, "KERNEL32.dll!OutputDebugStringA": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!RaiseException": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!__CxxFrameHandler3": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_get_osfhandle": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_fileno": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fopen": 1, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 1, "api-ms-win-crt-string-l1-1-0.dll!strncat": 1, "api-ms-win-crt-string-l1-1-0.dll!strncpy": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NvContainer\\Watchdog\\NvPluginWatchdog.dll", "sha256": "92fc33f9a2d3add07058ec5fd470b6653609fd59067c50020d4c6f02b797ad5d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 988160, "processed_bytes": 988160, "instructions": 293354, "skipdata_bytes": 10 } ], "utc": "2026-11-11T21:40:16.850231+00:00", "instructions": 293354, "skipdata_bytes": 10, "calls": 15553, "api_reference_counts": { "ADVAPI32.dll!RegQueryValueExW": 2, "ADVAPI32.dll!RegCloseKey": 8, "KERNEL32.dll!GetCommandLineW": 4, "SHELL32.dll!CommandLineToArgvW": 3, "KERNEL32.dll!LocalFree": 101, "KERNEL32.dll!CloseHandle": 94, "ADVAPI32.dll!RegGetValueW": 15, "KERNEL32.dll!ExpandEnvironmentStringsW": 6, "KERNEL32.dll!GetSystemTimeAsFileTime": 9, "KERNEL32.dll!GetExitCodeProcess": 2, "KERNEL32.dll!GetLastError": 225, "KERNEL32.dll!GetSystemDirectoryW": 18, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!GetProcAddress": 95, "KERNEL32.dll!FreeLibrary": 32, "KERNEL32.dll!GetTickCount": 2, "KERNEL32.dll!CreateFileW": 18, "KERNEL32.dll!GetProcessId": 2, "KERNEL32.dll!GetCurrentProcessId": 5, "KERNEL32.dll!CreateEventW": 7, "KERNEL32.dll!TerminateProcess": 6, "ADVAPI32.dll!LogonUserW": 2, "KERNEL32.dll!GetCurrentProcess": 7, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!DuplicateTokenEx": 2, "ADVAPI32.dll!SetTokenInformation": 2, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!GetBinaryTypeW": 2, "ADVAPI32.dll!CreateProcessAsUserW": 2, "KERNEL32.dll!SetEvent": 10, "KERNEL32.dll!WaitForSingleObject": 7, "KERNEL32.dll!GetProcessTimes": 2, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 3, "KERNEL32.dll!LocalAlloc": 60, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "ADVAPI32.dll!LookupAccountNameW": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!RegEnumKeyExW": 3, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!WaitForMultipleObjects": 4, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!GetModuleFileNameW": 13, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!SetLastError": 97, "KERNEL32.dll!GetModuleHandleW": 9, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "ADVAPI32.dll!RegCreateKeyExW": 3, "ADVAPI32.dll!RegDeleteValueW": 3, "KERNEL32.dll!FindCloseChangeNotification": 2, "KERNEL32.dll!FindFirstChangeNotificationW": 2, "KERNEL32.dll!FindNextChangeNotification": 2, "KERNEL32.dll!CreateTimerQueueTimer": 2, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!FindClose": 14, "KERNEL32.dll!DeleteTimerQueueTimer": 2, "KERNEL32.dll!FindFirstFileW": 3, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetModuleHandleExW": 4, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!Sleep": 2, "ADVAPI32.dll!RegSetKeyValueW": 4, "WTSAPI32.dll!WTSQueryUserToken": 1, "WTSAPI32.dll!WTSQuerySessionInformationW": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "WTSAPI32.dll!WTSEnumerateSessionsW": 1, "WTSAPI32.dll!WTSRegisterSessionNotification": 1, "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1, "USERENV.dll!CreateEnvironmentBlock": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!MultiByteToWideChar": 13, "KERNEL32.dll!WideCharToMultiByte": 11, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!DeviceIoControl": 5, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 5, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!EnterCriticalSection": 8, "KERNEL32.dll!LeaveCriticalSection": 8, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\Display.NvApp.{39B563FC-F52F-4E62-B6EC-9DD602862CA8}\\NvAppExt.dll", "sha256": "8b1f53246d0370b2f2d2712bfe7244ea3382c952540d030d637ad82c89d38b05", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1011712, "processed_bytes": 1011712, "instructions": 347246, "skipdata_bytes": 7 } ], "utc": "2026-11-11T21:40:17.156496+00:00", "instructions": 347246, "skipdata_bytes": 7, "calls": 26847, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 36, "KERNEL32.dll!GetLastError": 181, "KERNEL32.dll!InitializeSListHead": 9, "KERNEL32.dll!DeleteCriticalSection": 146, "ole32.dll!CoCreateInstance": 2, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!EnterCriticalSection": 24, "KERNEL32.dll!EncodePointer": 11, "KERNEL32.dll!LeaveCriticalSection": 26, "KERNEL32.dll!DecodePointer": 6, "KERNEL32.dll!FindResourceW": 3, "KERNEL32.dll!WideCharToMultiByte": 26, "KERNEL32.dll!HeapAlloc": 6, "KERNEL32.dll!HeapFree": 10, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "OLEAUT32.dll!VariantClear": 191, "KERNEL32.dll!GetCurrentProcess": 33, "KERNEL32.dll!CloseHandle": 71, "KERNEL32.dll!SetLastError": 72, "OLEAUT32.dll!VariantInit": 130, "OLEAUT32.dll!VariantChangeType": 20, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 11, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysStringLen": 25, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!DuplicateHandle": 3, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "OLEAUT32.dll!SafeArrayDestroy": 7, "OLEAUT32.dll!SysAllocStringLen": 4, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegQueryValueExW": 7, "ADVAPI32.dll!RegCloseKey": 29, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 7, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 6, "KERNEL32.dll!CreateFileW": 15, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 7, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 12, "KERNEL32.dll!WaitForSingleObjectEx": 9, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 3, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "KERNEL32.dll!CreateToolhelp32Snapshot": 2, "KERNEL32.dll!Thread32First": 1, "KERNEL32.dll!OpenThread": 1, "KERNEL32.dll!GetThreadTimes": 2, "KERNEL32.dll!Thread32Next": 1, "KERNEL32.dll!Sleep": 4, "USER32.dll!GetWindowThreadProcessId": 2, "USER32.dll!GetParent": 2, "USER32.dll!GetWindow": 2, "USER32.dll!IsWindowVisible": 1, "USER32.dll!GetClassNameW": 1, "SHLWAPI.dll!StrStrIW": 2, "USER32.dll!EnumWindows": 2, "USER32.dll!PostMessageW": 4, "USER32.dll!PostThreadMessageW": 2, "KERNEL32.dll!OpenProcess": 4, "KERNEL32.dll!MultiByteToWideChar": 28, "OLEAUT32.dll!SafeArrayUnlock": 3, "OLEAUT32.dll!SafeArrayGetVartype": 2, "OLEAUT32.dll!SafeArrayCopy": 2, "OLEAUT32.dll!SafeArrayLock": 4, "OLEAUT32.dll!SafeArrayGetLBound": 3, "OLEAUT32.dll!SafeArrayGetUBound": 4, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!UnmapViewOfFile": 5, "USERENV.dll!UnloadUserProfile": 3, "KERNEL32.dll!MoveFileExW": 5, "KERNEL32.dll!CopyFileW": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!CopyFileExW": 2, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindNextFileW": 3, "KERNEL32.dll!QueryDosDeviceW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "ADVAPI32.dll!IsTextUnicode": 1, "ADVAPI32.dll!GetFileSecurityW": 2, "KERNEL32.dll!GetCurrentThread": 7, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "KERNEL32.dll!GetProcessId": 4, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetTickCount": 3, "KERNEL32.dll!GetProcAddress": 61, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 8, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!GetSystemInfo": 2, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "KERNEL32.dll!GetVersionExW": 3, "PSAPI.DLL!GetProcessImageFileNameW": 1, "KERNEL32.dll!LocalAlloc": 5, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!GetFileInformationByHandle": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!CreateHardLinkW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!TryEnterCriticalSection": 2, "KERNEL32.dll!GetModuleHandleW": 11, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!ChangeTimerQueueTimer": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!CreateTimerQueueTimer": 1, "KERNEL32.dll!DeleteTimerQueueTimer": 1, "KERNEL32.dll!GetLogicalProcessorInformation": 2, "KERNEL32.dll!GetNumaHighestNodeNumber": 1, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!GetThreadPriority": 1, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!SignalObjectAndWait": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!TlsAlloc": 5, "KERNEL32.dll!TlsFree": 5, "KERNEL32.dll!TlsGetValue": 4, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!UnregisterWait": 1, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!InterlockedFlushSList": 23, "KERNEL32.dll!UnregisterWaitEx": 1, "KERNEL32.dll!InterlockedPopEntrySList": 13, "KERNEL32.dll!InterlockedPushEntrySList": 21, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!QueryDepthSList": 17, "KERNEL32.dll!CreateTimerQueue": 1, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetACP": 6, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableA": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!OpenEventA": 2, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegCopyTreeW": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\bin\\nvrla.exe", "sha256": "ed1b58b59ac1dc101da0ddfa8a2d81fbf7adf62b83d92974fc317bccbae158d4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1046528, "processed_bytes": 1046528, "instructions": 291678, "skipdata_bytes": 959 } ], "utc": "2026-11-11T21:40:17.706663+00:00", "instructions": 291678, "skipdata_bytes": 959, "calls": 20568, "api_reference_counts": { "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!Sleep": 9, "KERNEL32.dll!SetEvent": 5, "ADVAPI32.dll!EventWriteTransfer": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventUnregister": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!WaitForMultipleObjects": 2, "USER32.dll!PostMessageW": 2, "USER32.dll!RegisterDeviceNotificationW": 2, "USER32.dll!DefWindowProcW": 1, "KERNEL32.dll!VerSetConditionMask": 14, "KERNEL32.dll!VerifyVersionInfoW": 6, "USER32.dll!UnregisterDeviceNotification": 2, "USER32.dll!PostQuitMessage": 1, "KERNEL32.dll!AllocConsole": 1, "KERNEL32.dll!GetCurrentProcessId": 2, "KERNEL32.dll!AttachConsole": 1, "KERNEL32.dll!SetConsoleTitleA": 1, "KERNEL32.dll!CreateEventW": 5, "KERNEL32.dll!GetLastError": 85, "KERNEL32.dll!CloseHandle": 20, "KERNEL32.dll!SetDefaultDllDirectories": 1, "KERNEL32.dll!GetCommandLineW": 2, "SHELL32.dll!CommandLineToArgvW": 1, "KERNEL32.dll!LocalAlloc": 18, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "USER32.dll!LoadIconW": 1, "USER32.dll!LoadCursorW": 1, "USER32.dll!RegisterClassW": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!GetMessageW": 2, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 1, "USER32.dll!DestroyWindow": 1, "ADVAPI32.dll!FreeSid": 1, "KERNEL32.dll!LocalFree": 34, "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 3, "SHELL32.dll!SHCreateDirectoryExW": 1, "HID.DLL!HidD_GetHidGuid": 1, "HID.DLL!HidD_GetFeature": 1, "HID.DLL!HidD_SetFeature": 1, "CFGMGR32.dll!CM_Get_Device_Interface_List_SizeW": 1, "CFGMGR32.dll!CM_Get_Device_Interface_ListW": 1, "KERNEL32.dll!CreateFileW": 7, "HID.DLL!HidD_GetAttributes": 1, "HID.DLL!HidD_GetPreparsedData": 1, "HID.DLL!HidP_GetCaps": 1, "HID.DLL!HidD_FreePreparsedData": 2, "KERNEL32.dll!CreateDirectoryW": 1, "bcrypt.dll!BCryptOpenAlgorithmProvider": 2, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptGetProperty": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 2, "bcrypt.dll!BCryptCloseAlgorithmProvider": 4, "bcrypt.dll!BCryptImportKeyPair": 1, "bcrypt.dll!BCryptVerifySignature": 1, "bcrypt.dll!BCryptDestroyKey": 2, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!GetProcAddress": 40, "KERNEL32.dll!FreeLibrary": 9, "KERNEL32.dll!EnterCriticalSection": 17, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!GetSystemDirectoryW": 4, "KERNEL32.dll!SetLastError": 28, "KERNEL32.dll!GetFullPathNameW": 9, "KERNEL32.dll!LoadLibraryExW": 6, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "WS2_32.dll!WSACreateEvent": 2, "WS2_32.dll!WSACloseEvent": 3, "WS2_32.dll!getsockopt": 4, "WS2_32.dll!send": 9, "WS2_32.dll!WSAEventSelect": 5, "WS2_32.dll!WSAWaitForMultipleEvents": 1, "WS2_32.dll!WSAEnumNetworkEvents": 3, "WS2_32.dll!WSAResetEvent": 1, "KERNEL32.dll!DeleteCriticalSection": 9, "WS2_32.dll!closesocket": 12, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "WS2_32.dll!WSAGetLastError": 48, "WS2_32.dll!socket": 4, "WS2_32.dll!htons": 17, "IPHLPAPI.DLL!if_nametoindex": 1, "WS2_32.dll!ntohs": 4, "WS2_32.dll!WSAStartup": 1, "WS2_32.dll!WSACleanup": 1, "KERNEL32.dll!QueryPerformanceFrequency": 1, "KERNEL32.dll!FormatMessageW": 2, "WS2_32.dll!recv": 3, "WS2_32.dll!connect": 3, "WS2_32.dll!WSASetLastError": 5, "WS2_32.dll!WSAIoctl": 1, "WS2_32.dll!setsockopt": 10, "WS2_32.dll!accept": 2, "WS2_32.dll!getpeername": 1, "WS2_32.dll!bind": 5, "WS2_32.dll!getsockname": 5, "KERNEL32.dll!SleepEx": 1, "KERNEL32.dll!GetTickCount": 1, "WS2_32.dll!select": 2, "KERNEL32.dll!MoveFileExA": 2, "WS2_32.dll!htonl": 3, "WS2_32.dll!listen": 2, "WS2_32.dll!getaddrinfo": 1, "WS2_32.dll!freeaddrinfo": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!GetEnvironmentVariableA": 1, "CRYPT32.dll!CertCloseStore": 8, "KERNEL32.dll!GetModuleHandleA": 2, "ADVAPI32.dll!CryptAcquireContextA": 6, "ADVAPI32.dll!CryptCreateHash": 5, "ADVAPI32.dll!CryptHashData": 4, "ADVAPI32.dll!CryptGetHashParam": 10, "ADVAPI32.dll!CryptDestroyHash": 5, "ADVAPI32.dll!CryptReleaseContext": 11, "CRYPT32.dll!CertOpenStore": 2, "CRYPT32.dll!CryptStringToBinaryA": 1, "CRYPT32.dll!CertFindCertificateInStore": 2, "KERNEL32.dll!MultiByteToWideChar": 10, "CRYPT32.dll!PFXImportCertStore": 1, "CRYPT32.dll!CertFreeCertificateContext": 9, "CRYPT32.dll!CertEnumCertificatesInStore": 1, "KERNEL32.dll!GetStdHandle": 2, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!PeekNamedPipe": 2, "KERNEL32.dll!ReadFile": 7, "WS2_32.dll!recvfrom": 1, "WS2_32.dll!sendto": 9, "WLDAP32.dll!#22": 3, "WLDAP32.dll!#211": 4, "WLDAP32.dll!#217": 1, "WLDAP32.dll!#143": 1, "WLDAP32.dll!#50": 1, "WLDAP32.dll!#26": 1, "WLDAP32.dll!#30": 1, "WLDAP32.dll!#200": 4, "WLDAP32.dll!#32": 1, "WLDAP32.dll!#35": 1, "WLDAP32.dll!#79": 2, "WLDAP32.dll!#33": 1, "WLDAP32.dll!#301": 3, "WLDAP32.dll!#27": 1, "WLDAP32.dll!#41": 1, "WLDAP32.dll!#46": 1, "WLDAP32.dll!#60": 1, "WLDAP32.dll!#45": 2, "WS2_32.dll!ioctlsocket": 1, "CRYPT32.dll!CertCreateCertificateChainEngine": 1, "CRYPT32.dll!CertGetCertificateChain": 1, "CRYPT32.dll!CertFreeCertificateChainEngine": 1, "CRYPT32.dll!CertFreeCertificateChain": 1, "CRYPT32.dll!CertFindExtension": 1, "CRYPT32.dll!CryptDecodeObjectEx": 1, "CRYPT32.dll!CertGetNameStringA": 2, "CRYPT32.dll!CryptQueryObject": 1, "CRYPT32.dll!CertAddCertificateContextToStore": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!GetFileSizeEx": 2, "WS2_32.dll!gethostname": 1, "ADVAPI32.dll!CryptImportKey": 1, "ADVAPI32.dll!CryptEncrypt": 1, "ADVAPI32.dll!CryptDestroyKey": 1, "WS2_32.dll!__WSAFDIsSet": 1, "Secur32.dll!InitSecurityInterfaceA": 1, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!WideCharToMultiByte": 3, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!InitializeSListHead": 1, "bcrypt.dll!BCryptGenRandom": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\ipccommon64.dll", "sha256": "0c2568f255d2a966bf61638c03f51bd92c0b641d70ef0c233c67120ff8fd71ea", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1034752, "processed_bytes": 1034752, "instructions": 553097, "skipdata_bytes": 92 } ], "utc": "2026-11-11T21:40:17.195576+00:00", "instructions": 553097, "skipdata_bytes": 92, "calls": 10326, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 8, "KERNEL32.dll!CreateEventA": 8, "KERNEL32.dll!SetEvent": 5, "KERNEL32.dll!CloseHandle": 46, "KERNEL32.dll!GetCurrentProcessId": 7, "KERNEL32.dll!WaitForMultipleObjects": 4, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!EnterCriticalSection": 24, "KERNEL32.dll!LeaveCriticalSection": 26, "KERNEL32.dll!GetTickCount": 7, "KERNEL32.dll!DeleteCriticalSection": 12, "KERNEL32.dll!GetProcessHeap": 4, "KERNEL32.dll!HeapAlloc": 4, "KERNEL32.dll!SetLastError": 98, "KERNEL32.dll!GetLastError": 135, "KERNEL32.dll!HeapFree": 3, "KERNEL32.dll!GetSystemDirectoryW": 18, "KERNEL32.dll!GetModuleHandleExW": 7, "KERNEL32.dll!GetModuleFileNameW": 15, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 3, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!WideCharToMultiByte": 8, "KERNEL32.dll!LocalAlloc": 59, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!LocalFree": 101, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileA": 3, "KERNEL32.dll!CreateFileA": 4, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathA": 4, "KERNEL32.dll!CreateDirectoryA": 5, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclA": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 13, "KERNEL32.dll!GetProcAddress": 76, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 15, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 13, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 38, "KERNEL32.dll!MultiByteToWideChar": 6, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!AcquireSRWLockExclusive": 7, "KERNEL32.dll!TryAcquireSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 6, "KERNEL32.dll!WakeConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 8, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateSymbolicLinkW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetFileInformationByHandleEx": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!GetTempPathW": 3, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!SetFileInformationByHandle": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!InitializeSListHead": 2, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 6, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvmf64.dll", "sha256": "f6078b6640f711df12da1ca6cd5d1b6aa44c59acc37d98e488d2bb7415c8e91e", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1057280, "processed_bytes": 1057280, "instructions": 563396, "skipdata_bytes": 69 } ], "utc": "2026-11-11T21:40:17.780063+00:00", "instructions": 563396, "skipdata_bytes": 69, "calls": 11667, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 9, "KERNEL32.dll!EnterCriticalSection": 58, "ole32.dll!PropVariantClear": 7, "KERNEL32.dll!DeleteCriticalSection": 15, "KERNEL32.dll!LeaveCriticalSection": 62, "ole32.dll!PropVariantCopy": 7, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!GetLastError": 90, "KERNEL32.dll!LocalAlloc": 2, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!CloseHandle": 24, "KERNEL32.dll!LocalFree": 9, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileW": 3, "KERNEL32.dll!CreateFileW": 12, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathW": 4, "KERNEL32.dll!CreateDirectoryW": 5, "KERNEL32.dll!GetModuleFileNameW": 11, "KERNEL32.dll!WideCharToMultiByte": 4, "KERNEL32.dll!GetCurrentProcessId": 4, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 8, "KERNEL32.dll!GetProcAddress": 11, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!OutputDebugStringW": 6, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExW": 3, "KERNEL32.dll!GetFileAttributesW": 3, "KERNEL32.dll!GetFinalPathNameByHandleW": 2, "KERNEL32.dll!WriteFile": 10, "MFPlat.DLL!MFStartup": 1, "MFPlat.DLL!MFShutdown": 1, "MFPlat.DLL!MFPutWorkItem": 1, "MFPlat.DLL!MFAllocateWorkQueue": 1, "MFPlat.DLL!MFUnlockWorkQueue": 1, "MFPlat.DLL!MFCreateAsyncResult": 1, "MFPlat.DLL!MFInvokeCallback": 1, "MFPlat.DLL!MFCreateEventQueue": 1, "KERNEL32.dll!CreateSemaphoreW": 2, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!CreateMutexW": 5, "KERNEL32.dll!WaitForSingleObject": 11, "KERNEL32.dll!ReleaseSemaphore": 3, "KERNEL32.dll!ReleaseMutex": 5, "KERNEL32.dll!SignalObjectAndWait": 3, "KERNEL32.dll!GetCurrentProcess": 8, "KERNEL32.dll!GlobalMemoryStatusEx": 3, "WS2_32.dll!htonl": 177, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!GetExitCodeThread": 2, "WS2_32.dll!htons": 42, "WS2_32.dll!ntohl": 3, "KERNEL32.dll!GetSystemTime": 3, "KERNEL32.dll!SystemTimeToFileTime": 3, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 10, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!K32GetProcessMemoryInfo": 1, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!SetLastError": 16, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!GetFileType": 6, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvxdplcy.dll", "sha256": "76b583ae106d2e2c670c3abeacea24624e68bc629cf201492326723e38744e6e", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1073664, "processed_bytes": 1073664, "instructions": 296209, "skipdata_bytes": 26 }, { "name": ".orpc", "raw_bytes": 512, "processed_bytes": 512, "instructions": 204, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:18.477531+00:00", "instructions": 296413, "skipdata_bytes": 27, "calls": 23043, "api_reference_counts": { "ADVAPI32.dll!RegEnumValueW": 1, "ole32.dll!CoTaskMemAlloc": 6, "ole32.dll!CoTaskMemRealloc": 4, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!ReleaseSemaphore": 5, "KERNEL32.dll!WaitForMultipleObjectsEx": 1, "KERNEL32.dll!CreateSemaphoreA": 3, "KERNEL32.dll!CloseHandle": 33, "ole32.dll!CoCreateInstanceEx": 1, "KERNEL32.dll!CreateEventA": 4, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 4, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!WideCharToMultiByte": 8, "ole32.dll!CoTaskMemFree": 11, "ADVAPI32.dll!RegQueryValueExW": 10, "ADVAPI32.dll!RegCloseKey": 39, "ADVAPI32.dll!RegOpenKeyExW": 16, "ADVAPI32.dll!RegCreateKeyExW": 3, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!ReleaseMutex": 1, "KERNEL32.dll!GetModuleFileNameW": 4, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetCurrentThreadId": 2, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 7, "KERNEL32.dll!GetLastError": 55, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!DeleteCriticalSection": 17, "ole32.dll!CoCreateGuid": 1, "ole32.dll!CoCreateInstance": 2, "KERNEL32.dll!RaiseException": 8, "ADVAPI32.dll!UnregisterTraceGuids": 1, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "USER32.dll!CharNextW": 26, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegSetValueExW": 3, "KERNEL32.dll!EnterCriticalSection": 12, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!LeaveCriticalSection": 13, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!SysAllocString": 1, "ole32.dll!StringFromGUID2": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 4, "OLEAUT32.dll!SysStringLen": 1, "KERNEL32.dll!GetModuleHandleW": 11, "KERNEL32.dll!GetProcAddress": 18, "OLEAUT32.dll!SysFreeString": 3, "ADVAPI32.dll!RegDeleteKeyW": 2, "KERNEL32.dll!GetThreadLocale": 2, "KERNEL32.dll!SetThreadLocale": 4, "KERNEL32.dll!lstrcmpiW": 12, "ADVAPI32.dll!RegEnumKeyExW": 1, "KERNEL32.dll!LoadLibraryExW": 6, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!SizeofResource": 1, "KERNEL32.dll!MultiByteToWideChar": 11, "KERNEL32.dll!FreeLibrary": 6, "ADVAPI32.dll!RegDeleteValueW": 1, "KERNEL32.dll!OpenEventW": 1, "RPCRT4.dll!IUnknown_QueryInterface_Proxy": 1, "RPCRT4.dll!IUnknown_AddRef_Proxy": 1, "RPCRT4.dll!IUnknown_Release_Proxy": 1, "RPCRT4.dll!NdrOleAllocate": 1, "RPCRT4.dll!NdrOleFree": 1, "RPCRT4.dll!CStdStubBuffer_QueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_AddRef": 1, "RPCRT4.dll!CStdStubBuffer_Connect": 1, "RPCRT4.dll!CStdStubBuffer_Disconnect": 1, "RPCRT4.dll!CStdStubBuffer_Invoke": 1, "RPCRT4.dll!CStdStubBuffer_IsIIDSupported": 1, "RPCRT4.dll!CStdStubBuffer_CountRefs": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerQueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerRelease": 1, "RPCRT4.dll!NdrCStdStubBuffer_Release": 1, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!SetLastError": 4, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!HeapFree": 5, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!GetProcessHeap": 5, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\dxil.dll", "sha256": "2c93b092b20bcf0214f5eca09ae8fd1842c8a9197b77298dfe8184c65c4c7c86", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1171456, "processed_bytes": 1171456, "instructions": 339612, "skipdata_bytes": 320 } ], "utc": "2026-11-11T21:40:18.850151+00:00", "instructions": 339612, "skipdata_bytes": 320, "calls": 19223, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 2, "ADVAPI32.dll!EventWriteTransfer": 1, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventUnregister": 1, "ole32.dll!CoGetMalloc": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsSetValue": 5, "KERNEL32.dll!GetLastError": 31, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!EnterCriticalSection": 14, "KERNEL32.dll!LeaveCriticalSection": 15, "KERNEL32.dll!TlsGetValue": 22, "KERNEL32.dll!MultiByteToWideChar": 5, "KERNEL32.dll!WideCharToMultiByte": 3, "KERNEL32.dll!LocalFree": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!InitializeCriticalSection": 2, "KERNEL32.dll!GetStdHandle": 8, "KERNEL32.dll!GetConsoleScreenBufferInfo": 3, "KERNEL32.dll!SetConsoleTextAttribute": 3, "KERNEL32.dll!GetConsoleMode": 3, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!DeleteCriticalSection": 9, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!SetLastError": 6, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!GetProcAddress": 4, "KERNEL32.dll!FreeLibrary": 3, "KERNEL32.dll!LoadLibraryExW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 3, "KERNEL32.dll!FlsSetValue": 6, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!CreateFileW": 2, "KERNEL32.dll!CloseHandle": 4, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 2, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!QueryPerformanceCounter": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetCommandLineW": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\capcore64.dll", "sha256": "ea21c7b665248ac378459dbead602436c45181cb9606b33eb6e59d30d5e9f3b4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1193984, "processed_bytes": 1193984, "instructions": 595371, "skipdata_bytes": 25 } ], "utc": "2026-11-11T21:40:18.857946+00:00", "instructions": 595371, "skipdata_bytes": 25, "calls": 13454, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 38, "KERNEL32.dll!LocalAlloc": 59, "KERNEL32.dll!LocalFree": 100, "KERNEL32.dll!GetProcAddress": 128, "KERNEL32.dll!GetSystemDirectoryW": 28, "KERNEL32.dll!GetFileAttributesW": 12, "KERNEL32.dll!GetLastError": 262, "KERNEL32.dll!SetLastError": 119, "KERNEL32.dll!GetModuleHandleW": 22, "KERNEL32.dll!GetModuleFileNameW": 15, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 24, "KERNEL32.dll!CloseHandle": 178, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 52, "USER32.dll!EnumWindows": 3, "USER32.dll!GetForegroundWindow": 3, "USER32.dll!GetWindowThreadProcessId": 4, "USER32.dll!GetWindowRect": 4, "USER32.dll!IsWindowVisible": 3, "USER32.dll!MonitorFromPoint": 3, "USER32.dll!GetSystemMetrics": 3, "KERNEL32.dll!CreateSemaphoreW": 17, "KERNEL32.dll!CreateEventW": 40, "KERNEL32.dll!EnterCriticalSection": 128, "KERNEL32.dll!DeleteCriticalSection": 76, "KERNEL32.dll!LeaveCriticalSection": 135, "KERNEL32.dll!WaitForMultipleObjects": 55, "KERNEL32.dll!ReleaseSemaphore": 29, "GDI32.dll!SetDCBrushColor": 5, "GDI32.dll!SetDCPenColor": 5, "GDI32.dll!SetTextColor": 5, "GDI32.dll!SetBkMode": 5, "USER32.dll!DrawTextW": 5, "KERNEL32.dll!WaitForSingleObject": 34, "KERNEL32.dll!SetEvent": 33, "KERNEL32.dll!SetThreadPriority": 16, "KERNEL32.dll!GetThreadPriority": 15, "WINMM.dll!timeBeginPeriod": 4, "USER32.dll!InvalidateRect": 3, "KERNEL32.dll!GetCurrentProcess": 13, "KERNEL32.dll!SetPriorityClass": 5, "KERNEL32.dll!GetPriorityClass": 5, "WINMM.dll!timeEndPeriod": 4, "ole32.dll!CoTaskMemFree": 24, "KERNEL32.dll!Sleep": 18, "KERNEL32.dll!CancelWaitableTimer": 5, "KERNEL32.dll!CreateWaitableTimerW": 4, "KERNEL32.dll!SetWaitableTimer": 7, "KERNEL32.dll!SleepEx": 5, "USER32.dll!DestroyWindow": 7, "USER32.dll!RegisterClassExW": 4, "USER32.dll!CreateWindowExW": 4, "USER32.dll!UnregisterClassW": 2, "USER32.dll!EnumDisplayDevicesW": 2, "KERNEL32.dll!CreateEventExW": 3, "ole32.dll!CoInitializeEx": 4, "KERNEL32.dll!GetVolumeInformationA": 2, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!OutputDebugStringW": 7, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 8, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 10, "KERNEL32.dll!CopyFileW": 3, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathW": 8, "KERNEL32.dll!CreateDirectoryW": 8, "KERNEL32.dll!WideCharToMultiByte": 17, "KERNEL32.dll!GetCurrentProcessId": 7, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 12, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExW": 3, "KERNEL32.dll!GetFinalPathNameByHandleW": 2, "KERNEL32.dll!DeleteFileW": 10, "KERNEL32.dll!WriteFile": 15, "ole32.dll!CoCreateInstance": 11, "SHLWAPI.dll!PathIsUNCW": 2, "SHLWAPI.dll!PathAppendW": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!GetTempFileNameW": 4, "KERNEL32.dll!SetFilePointer": 9, "KERNEL32.dll!ReadFile": 7, "KERNEL32.dll!FlushFileBuffers": 4, "KERNEL32.dll!GetTickCount": 4, "ole32.dll!CoUninitialize": 3, "OLEAUT32.dll!VariantInit": 2, "OLEAUT32.dll!VariantClear": 2, "KERNEL32.dll!ResetEvent": 5, "KERNEL32.dll!GetThreadId": 10, "USER32.dll!PostThreadMessageW": 7, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!GetFileSize": 2, "KERNEL32.dll!GetModuleHandleExW": 6, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "SHELL32.dll!SHGetKnownFolderPath": 1, "USER32.dll!DefWindowProcW": 1, "dxva2.dll!DXVA2CreateVideoService": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!MultiByteToWideChar": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!GetStringTypeW": 3, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NvContainer\\nvcontainer.exe", "sha256": "0f0a5352c50d4701d629e7c88a7a45632e76217bdc8e21569af5d2ab3c345817", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1217024, "processed_bytes": 1217024, "instructions": 363670, "skipdata_bytes": 400 } ], "utc": "2026-11-11T21:40:19.637060+00:00", "instructions": 363670, "skipdata_bytes": 400, "calls": 18888, "api_reference_counts": { "KERNEL32.dll!SetDefaultDllDirectories": 2, "SHELL32.dll!CommandLineToArgvW": 2, "KERNEL32.dll!GetCurrentProcess": 6, "KERNEL32.dll!GetProcessTimes": 2, "KERNEL32.dll!GetModuleHandleW": 13, "USER32.dll!RegisterClassW": 2, "USER32.dll!CreateWindowExW": 2, "USER32.dll!SetWindowLongPtrW": 2, "USER32.dll!ShutdownBlockReasonCreate": 2, "KERNEL32.dll!WaitForSingleObject": 10, "KERNEL32.dll!CloseHandle": 72, "USER32.dll!ShutdownBlockReasonDestroy": 2, "USER32.dll!DestroyWindow": 3, "USER32.dll!UnregisterClassW": 2, "USER32.dll!PostMessageW": 4, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageW": 2, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!CreateEventW": 5, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!SetEvent": 9, "USER32.dll!GetWindowLongPtrW": 2, "USER32.dll!DefWindowProcW": 2, "KERNEL32.dll!WaitForMultipleObjects": 4, "KERNEL32.dll!AddVectoredExceptionHandler": 3, "KERNEL32.dll!AddVectoredContinueHandler": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 10, "KERNEL32.dll!RemoveVectoredExceptionHandler": 4, "KERNEL32.dll!RemoveVectoredContinueHandler": 4, "KERNEL32.dll!RtlCaptureStackBackTrace": 3, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!GetProcAddress": 99, "KERNEL32.dll!GetLastError": 214, "ADVAPI32.dll!CreateWellKnownSid": 3, "KERNEL32.dll!LocalAlloc": 59, "ADVAPI32.dll!LookupAccountSidW": 2, "KERNEL32.dll!LocalFree": 98, "ADVAPI32.dll!BuildExplicitAccessWithNameW": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!OpenSCManagerW": 2, "ADVAPI32.dll!OpenServiceW": 2, "ADVAPI32.dll!QueryServiceConfigW": 2, "ADVAPI32.dll!ChangeServiceConfigW": 2, "ADVAPI32.dll!CloseServiceHandle": 3, "ADVAPI32.dll!RegisterServiceCtrlHandlerExW": 3, "ADVAPI32.dll!RegCreateKeyExW": 5, "ADVAPI32.dll!RegCloseKey": 8, "ADVAPI32.dll!SetServiceStatus": 2, "ADVAPI32.dll!RegSetValueExW": 2, "ADVAPI32.dll!StartServiceCtrlDispatcherW": 2, "KERNEL32.dll!GetCurrentProcessId": 5, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetSecurityInfo": 2, "ADVAPI32.dll!SetSecurityInfo": 2, "KERNEL32.dll!SetLastError": 99, "KERNEL32.dll!GetErrorMode": 2, "KERNEL32.dll!SetErrorMode": 3, "SHLWAPI.dll!PathIsRelativeW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 3, "KERNEL32.dll!LoadLibraryExW": 32, "USER32.dll!LoadStringW": 2, "KERNEL32.dll!FreeLibrary": 36, "KERNEL32.dll!GetSystemDirectoryW": 17, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!GetModuleFileNameW": 12, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!CreateFileW": 17, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateTimerQueueTimer": 2, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!FindClose": 14, "KERNEL32.dll!DeleteTimerQueueTimer": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 5, "KERNEL32.dll!FindFirstFileW": 3, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!CreateDirectoryW": 3, "ADVAPI32.dll!RegGetValueW": 7, "ADVAPI32.dll!RegDeleteValueW": 3, "USER32.dll!PostThreadMessageW": 3, "USER32.dll!PeekMessageW": 2, "USER32.dll!GetMessageW": 2, "KERNEL32.dll!FindCloseChangeNotification": 2, "KERNEL32.dll!FindFirstChangeNotificationW": 2, "KERNEL32.dll!FindNextChangeNotification": 2, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegSetKeyValueW": 4, "KERNEL32.dll!MultiByteToWideChar": 13, "KERNEL32.dll!WideCharToMultiByte": 11, "KERNEL32.dll!RemoveDirectoryW": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!DeviceIoControl": 5, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "PSAPI.DLL!GetProcessMemoryInfo": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 5, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RaiseException": 10, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!EnterCriticalSection": 8, "KERNEL32.dll!LeaveCriticalSection": 8, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA App\\NvIGOUtil.dll", "sha256": "15be24a489474a04851042b56d2c34e5928f32872ab7721f54ead26992f7f580", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1226752, "processed_bytes": 1226752, "instructions": 659815, "skipdata_bytes": 440 } ], "utc": "2026-11-11T21:40:19.652991+00:00", "instructions": 659815, "skipdata_bytes": 440, "calls": 14686, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 131, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 652, "api-ms-win-crt-heap-l1-1-0.dll!free": 388, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 44, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 30, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 18, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 10, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 36, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 56, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 49, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 59, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 15, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 39, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!ResetEvent": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 4, "OLEAUT32.dll!VariantInit": 6, "OLEAUT32.dll!VariantClear": 11, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 3, "OLEAUT32.dll!VariantCopy": 3, "ole32.dll!CoTaskMemFree": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 3, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!WaitForSingleObject": 2, "ADVAPI32.dll!RegGetValueW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvfcapi64.dll", "sha256": "e753adbe26fb98537c482feab1228e30cacb3582a2cf4eabbb1762c5ef272c88", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1233920, "processed_bytes": 1233920, "instructions": 631277, "skipdata_bytes": 52 } ], "utc": "2026-11-11T21:40:20.101890+00:00", "instructions": 631277, "skipdata_bytes": 52, "calls": 12827, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 7, "KERNEL32.dll!EnterCriticalSection": 48, "KERNEL32.dll!LeaveCriticalSection": 49, "KERNEL32.dll!DeleteCriticalSection": 14, "SHELL32.dll!SHGetFolderPathA": 8, "KERNEL32.dll!CreateDirectoryA": 11, "KERNEL32.dll!CreateEventA": 5, "KERNEL32.dll!CloseHandle": 48, "KERNEL32.dll!WaitForSingleObject": 6, "KERNEL32.dll!ResetEvent": 3, "ADVAPI32.dll!InitializeSecurityDescriptor": 4, "ADVAPI32.dll!SetSecurityDescriptorDacl": 4, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 6, "KERNEL32.dll!SetEvent": 6, "KERNEL32.dll!GetCurrentProcessId": 10, "KERNEL32.dll!WaitForMultipleObjects": 2, "KERNEL32.dll!GetLastError": 142, "USER32.dll!EnumWindows": 3, "USER32.dll!GetForegroundWindow": 3, "USER32.dll!GetWindowThreadProcessId": 4, "USER32.dll!GetWindowRect": 4, "USER32.dll!IsWindowVisible": 3, "USER32.dll!MonitorFromPoint": 3, "USER32.dll!GetSystemMetrics": 3, "ole32.dll!CoTaskMemFree": 5, "KERNEL32.dll!LocalAlloc": 59, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!LocalFree": 101, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileA": 3, "KERNEL32.dll!CreateFileA": 6, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "KERNEL32.dll!GetModuleFileNameW": 11, "KERNEL32.dll!WideCharToMultiByte": 8, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclA": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 12, "KERNEL32.dll!GetProcAddress": 72, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 11, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!FreeLibrary": 31, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!GetSystemDirectoryW": 19, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!SetLastError": 97, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "USER32.dll!EnumDisplayDevicesA": 3, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!GetThreadId": 10, "USER32.dll!PostThreadMessageA": 7, "KERNEL32.dll!CreateThread": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "d3d11.dll!D3D11CreateDevice": 1, "D3DCOMPILER_47.dll!D3DCompile": 1, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!MultiByteToWideChar": 10, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetFileType": 4, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvspscreenshot64.dll", "sha256": "7b8b6ce9e4f48ae53f55ed74e1df2285bfa6c2ea2e5e28e920810c02c87a5ebd", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1234432, "processed_bytes": 1234432, "instructions": 635890, "skipdata_bytes": 40 } ], "utc": "2026-11-11T21:40:20.750941+00:00", "instructions": 635890, "skipdata_bytes": 40, "calls": 12633, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 6, "KERNEL32.dll!CreateEventA": 5, "KERNEL32.dll!CloseHandle": 38, "USER32.dll!wsprintfW": 3, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!WaitForSingleObject": 5, "ole32.dll!CoCreateInstance": 2, "OLEAUT32.dll!VariantInit": 2, "KERNEL32.dll!EnterCriticalSection": 22, "KERNEL32.dll!DeleteCriticalSection": 13, "KERNEL32.dll!LeaveCriticalSection": 23, "KERNEL32.dll!LoadLibraryA": 5, "KERNEL32.dll!GetProcAddress": 15, "KERNEL32.dll!FreeLibrary": 20, "KERNEL32.dll!GetCurrentProcessId": 8, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!LocalAlloc": 3, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!LocalFree": 20, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!GetLastError": 110, "KERNEL32.dll!CopyFileA": 3, "KERNEL32.dll!CreateFileA": 5, "ADVAPI32.dll!GetSecurityDescriptorDacl": 9, "SHELL32.dll!SHGetFolderPathA": 4, "KERNEL32.dll!CreateDirectoryA": 5, "KERNEL32.dll!GetModuleFileNameW": 13, "KERNEL32.dll!WideCharToMultiByte": 8, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclA": 3, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "ADVAPI32.dll!FreeSid": 4, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 8, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 9, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!WriteFile": 11, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!GetModuleHandleExW": 6, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "gdiplus.dll!GdipAlloc": 1, "gdiplus.dll!GdipFree": 1, "gdiplus.dll!GdiplusStartup": 1, "gdiplus.dll!GdiplusShutdown": 1, "gdiplus.dll!GdipCloneImage": 1, "gdiplus.dll!GdipDisposeImage": 1, "gdiplus.dll!GdipSaveImageToFile": 1, "gdiplus.dll!GdipSetPropertyItem": 1, "gdiplus.dll!GdipCreateBitmapFromScan0": 1, "gdiplus.dll!GdipGetImageEncodersSize": 1, "gdiplus.dll!GdipGetImageEncoders": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!UnmapViewOfFile": 3, "KERNEL32.dll!FlushFileBuffers": 5, "KERNEL32.dll!DisconnectNamedPipe": 3, "KERNEL32.dll!OpenFileMappingA": 3, "KERNEL32.dll!ReadFile": 7, "KERNEL32.dll!ReleaseMutex": 2, "KERNEL32.dll!WaitForMultipleObjects": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!CreateMutexA": 2, "KERNEL32.dll!OpenMutexA": 2, "KERNEL32.dll!CreateNamedPipeA": 2, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!GetProcessHeap": 12, "KERNEL32.dll!HeapFree": 8, "KERNEL32.dll!GetCurrentProcess": 5, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 5, "KERNEL32.dll!HeapAlloc": 7, "ADVAPI32.dll!GetLengthSid": 3, "ADVAPI32.dll!CopySid": 3, "KERNEL32.dll!CreateFileMappingA": 2, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!MultiByteToWideChar": 10, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!SetLastError": 16, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 6, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvfp64.dll", "sha256": "64368488e1fb272e7ac68d31ba01afebf9020fa0db0017b7265b928c053b20b1", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1273856, "processed_bytes": 1273856, "instructions": 651895, "skipdata_bytes": 37 } ], "utc": "2026-11-11T21:40:20.935075+00:00", "instructions": 651895, "skipdata_bytes": 37, "calls": 13277, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 4, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!LocalAlloc": 62, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!CloseHandle": 32, "KERNEL32.dll!LocalFree": 105, "KERNEL32.dll!EnterCriticalSection": 19, "KERNEL32.dll!DeleteCriticalSection": 11, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!LeaveCriticalSection": 20, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!GetLastError": 131, "KERNEL32.dll!CopyFileA": 3, "KERNEL32.dll!CreateFileA": 4, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathA": 4, "KERNEL32.dll!CreateDirectoryA": 5, "KERNEL32.dll!GetModuleFileNameW": 13, "KERNEL32.dll!WideCharToMultiByte": 8, "KERNEL32.dll!GetCurrentProcessId": 5, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclA": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetModuleHandleW": 12, "KERNEL32.dll!GetProcAddress": 77, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 3, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!GetSystemDirectoryW": 20, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 3, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!FreeLibrary": 30, "KERNEL32.dll!GetCurrentProcess": 6, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!SetEnvironmentVariableA": 3, "KERNEL32.dll!VirtualAlloc": 2, "KERNEL32.dll!VirtualFree": 3, "KERNEL32.dll!FormatMessageA": 6, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!SetLastError": 97, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!MultiByteToWideChar": 10, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetFileType": 4, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\FrameViewSdk.{9D58CA10-2FA6-49C0-9986-8FEDA998716E}\\FrameViewSdkExt.dll", "sha256": "24db8717b792cce09ee877d73c37f2c65c448cadefe98ce2887250615e688ff0", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1280000, "processed_bytes": 1280000, "instructions": 480860, "skipdata_bytes": 6 } ], "utc": "2026-11-11T21:40:21.662993+00:00", "instructions": 480860, "skipdata_bytes": 6, "calls": 30297, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 30, "KERNEL32.dll!GetLastError": 214, "KERNEL32.dll!InitializeCriticalSectionEx": 26, "KERNEL32.dll!GetModuleHandleA": 11, "KERNEL32.dll!GetProcAddress": 68, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!DeleteCriticalSection": 111, "OLEAUT32.dll!SysFreeString": 18, "KERNEL32.dll!DecodePointer": 9, "USER32.dll!UnregisterClassW": 5, "ole32.dll!CoCreateInstance": 2, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 7, "KERNEL32.dll!HeapFree": 23, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 3, "KERNEL32.dll!GetProcessHeap": 30, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 5, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!GetCurrentProcess": 14, "KERNEL32.dll!GetProcessTimes": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 7, "KERNEL32.dll!GetModuleFileNameW": 10, "SHLWAPI.dll!PathFindFileNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "ADVAPI32.dll!OpenProcessToken": 5, "ADVAPI32.dll!GetTokenInformation": 3, "KERNEL32.dll!CloseHandle": 80, "ADVAPI32.dll!RegOpenKeyExW": 19, "ADVAPI32.dll!RegCloseKey": 24, "ADVAPI32.dll!RegQueryValueExW": 10, "ADVAPI32.dll!RegEnumValueW": 4, "KERNEL32.dll!CreateEventA": 8, "KERNEL32.dll!WaitForSingleObjectEx": 8, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!OutputDebugStringW": 4, "KERNEL32.dll!CreateMutexW": 3, "KERNEL32.dll!WaitForSingleObject": 5, "KERNEL32.dll!ReleaseMutex": 5, "KERNEL32.dll!WideCharToMultiByte": 36, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!CreateFileW": 28, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!GetFileAttributesW": 14, "KERNEL32.dll!RemoveDirectoryW": 6, "KERNEL32.dll!GetTempPathW": 3, "SHELL32.dll!SHGetFolderPathW": 4, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 9, "KERNEL32.dll!FindResourceExW": 3, "OLEAUT32.dll!VariantInit": 78, "OLEAUT32.dll!VariantClear": 121, "OLEAUT32.dll!SysAllocStringLen": 6, "OLEAUT32.dll!VariantChangeType": 19, "OLEAUT32.dll!SysStringLen": 27, "KERNEL32.dll!GetCurrentThreadId": 6, "KERNEL32.dll!EnterCriticalSection": 40, "KERNEL32.dll!LeaveCriticalSection": 42, "KERNEL32.dll!EncodePointer": 8, "OLEAUT32.dll!SysAllocString": 9, "OLEAUT32.dll!LoadTypeLib": 3, "OLEAUT32.dll!LoadRegTypeLib": 2, "KERNEL32.dll!OpenEventW": 3, "KERNEL32.dll!SetLastError": 71, "KERNEL32.dll!MultiByteToWideChar": 34, "OLEAUT32.dll!SafeArrayUnlock": 10, "OLEAUT32.dll!SafeArrayDestroy": 11, "OLEAUT32.dll!SafeArrayGetVartype": 4, "OLEAUT32.dll!SafeArrayCopy": 2, "OLEAUT32.dll!SafeArrayLock": 8, "OLEAUT32.dll!SafeArrayGetLBound": 9, "OLEAUT32.dll!SafeArrayGetUBound": 8, "KERNEL32.dll!FindClose": 14, "KERNEL32.dll!GlobalFree": 4, "KERNEL32.dll!UnmapViewOfFile": 13, "USERENV.dll!UnloadUserProfile": 4, "KERNEL32.dll!MoveFileExW": 9, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileExW": 3, "KERNEL32.dll!GetTickCount": 6, "KERNEL32.dll!DeviceIoControl": 5, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 6, "SHLWAPI.dll!UrlIsW": 3, "SHLWAPI.dll!PathCreateFromUrlW": 2, "KERNEL32.dll!QueryDosDeviceW": 3, "KERNEL32.dll!GetFileAttributesExW": 4, "KERNEL32.dll!CreateFileMappingW": 3, "KERNEL32.dll!MapViewOfFile": 5, "ADVAPI32.dll!LookupPrivilegeValueW": 3, "ADVAPI32.dll!GetNamedSecurityInfoW": 2, "KERNEL32.dll!GetTempFileNameW": 2, "KERNEL32.dll!GetFileTime": 3, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!GlobalAlloc": 2, "ADVAPI32.dll!IsTextUnicode": 2, "KERNEL32.dll!SetCurrentDirectoryW": 3, "KERNEL32.dll!SetFileTime": 3, "ADVAPI32.dll!GetFileSecurityW": 3, "KERNEL32.dll!GetCurrentThread": 3, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!DuplicateToken": 2, "ADVAPI32.dll!MapGenericMask": 2, "ADVAPI32.dll!AccessCheck": 2, "SHLWAPI.dll!UrlCreateFromPathW": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "KERNEL32.dll!CreateEventW": 4, "KERNEL32.dll!ActivateActCtx": 2, "KERNEL32.dll!DeactivateActCtx": 2, "KERNEL32.dll!GetModuleHandleExW": 8, "KERNEL32.dll!FreeLibrary": 17, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!ReleaseActCtx": 2, "KERNEL32.dll!CreateActCtxW": 2, "KERNEL32.dll!FormatMessageW": 3, "KERNEL32.dll!LocalFree": 53, "KERNEL32.dll!FileTimeToSystemTime": 2, "RPCRT4.dll!UuidToStringW": 2, "RPCRT4.dll!RpcStringFreeW": 2, "RPCRT4.dll!UuidFromStringW": 2, "KERNEL32.dll!GetSystemInfo": 4, "OLEAUT32.dll!VariantCopy": 3, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegDeleteValueW": 2, "ADVAPI32.dll!RegQueryInfoKeyW": 6, "ADVAPI32.dll!RegOpenCurrentUser": 2, "ADVAPI32.dll!AdjustTokenPrivileges": 3, "ADVAPI32.dll!RegGetKeySecurity": 2, "KERNEL32.dll!LocalAlloc": 26, "ADVAPI32.dll!RegEnumKeyExW": 2, "ADVAPI32.dll!RegRenameKey": 2, "ADVAPI32.dll!RegSetValueExW": 2, "ADVAPI32.dll!RegDeleteKeyW": 2, "OLEAUT32.dll!SafeArrayCreate": 5, "sfc.dll!SfcIsFileProtected": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!GetFullPathNameW": 6, "KERNEL32.dll!lstrcmpW": 2, "KERNEL32.dll!LoadLibraryExW": 19, "KERNEL32.dll!GetModuleFileNameA": 6, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!GetSystemDirectoryW": 3, "KERNEL32.dll!GetModuleHandleW": 8, "KERNEL32.dll!GetVersionExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 3, "KERNEL32.dll!GetWindowsDirectoryW": 1, "KERNEL32.dll!GetSystemWindowsDirectoryW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!TlsAlloc": 5, "KERNEL32.dll!TlsFree": 6, "KERNEL32.dll!TlsGetValue": 22, "KERNEL32.dll!TlsSetValue": 8, "KERNEL32.dll!Sleep": 5, "KERNEL32.dll!CompareStringW": 3, "KERNEL32.dll!GetLocaleInfoW": 13, "KERNEL32.dll!LCMapStringW": 3, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!FormatMessageA": 2, "KERNEL32.dll!CreateDirectoryExW": 3, "KERNEL32.dll!GetFileInformationByHandle": 4, "KERNEL32.dll!SetFilePointerEx": 7, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 2, "KERNEL32.dll!GetEnvironmentVariableW": 3, "KERNEL32.dll!AreFileApisANSI": 3, "KERNEL32.dll!IsDebuggerPresent": 6, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!ResetEvent": 6, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!RtlUnwind": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!EnumSystemLocalesW": 7, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!GetACP": 7, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleCP": 2, "KERNEL32.dll!GetConsoleMode": 3, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!FindFirstFileExA": 3, "KERNEL32.dll!FindNextFileA": 3, "KERNEL32.dll!FindFirstFileExW": 3, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 6, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableA": 3, "KERNEL32.dll!SetEnvironmentVariableW": 3, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!SetWaitableTimer": 2, "KERNEL32.dll!OpenEventA": 5, "KERNEL32.dll!SystemTimeToFileTime": 2, "KERNEL32.dll!CreateWaitableTimerA": 3, "KERNEL32.dll!WaitForMultipleObjectsEx": 3, "KERNEL32.dll!ReleaseSemaphore": 6, "KERNEL32.dll!GetLogicalProcessorInformation": 3, "KERNEL32.dll!ResumeThread": 4, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3 }, "complete_linear_sweep": true }, { "path": "Installer2\\Display.Driver.{F11599FA-D299-43A1-B827-83234858D1A3}\\DisplayDriverExt.dll", "sha256": "3003a80c9e45d37ac4b345a0a3cb10d5f8ecd6b5f02ed68e8ff69b622bf57334", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1287168, "processed_bytes": 1287168, "instructions": 420110, "skipdata_bytes": 7 } ], "utc": "2026-11-11T21:40:22.000461+00:00", "instructions": 420110, "skipdata_bytes": 7, "calls": 35182, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 38, "KERNEL32.dll!GetLastError": 168, "KERNEL32.dll!DeleteCriticalSection": 173, "KERNEL32.dll!GetModuleHandleA": 2, "KERNEL32.dll!GetProcAddress": 52, "KERNEL32.dll!EnterCriticalSection": 26, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LeaveCriticalSection": 28, "KERNEL32.dll!DecodePointer": 4, "KERNEL32.dll!FindResourceW": 5, "KERNEL32.dll!WideCharToMultiByte": 23, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "OLEAUT32.dll!SafeArrayUnlock": 13, "OLEAUT32.dll!SafeArrayDestroy": 30, "KERNEL32.dll!CloseHandle": 56, "KERNEL32.dll!SetLastError": 81, "SETUPAPI.dll!SetupOpenInfFileW": 12, "SETUPAPI.dll!SetupCloseInfFile": 21, "OLEAUT32.dll!VariantClear": 396, "OLEAUT32.dll!VariantInit": 305, "KERNEL32.dll!WaitForSingleObject": 7, "ole32.dll!CoCreateInstance": 9, "OLEAUT32.dll!SysFreeString": 30, "KERNEL32.dll!Sleep": 4, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 21, "KERNEL32.dll!GetVersionExW": 3, "OLEAUT32.dll!SysStringLen": 15, "KERNEL32.dll!lstrlenW": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 2, "bcrypt.dll!BCryptDestroyKey": 6, "bcrypt.dll!BCryptCloseAlgorithmProvider": 3, "OLEAUT32.dll!SysAllocString": 11, "OLEAUT32.dll!VariantChangeType": 27, "OLEAUT32.dll!SysStringByteLen": 3, "OLEAUT32.dll!SysAllocStringByteLen": 3, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!ResumeThread": 1, "OLEAUT32.dll!SafeArrayCreate": 3, "OLEAUT32.dll!SafeArrayLock": 7, "OLEAUT32.dll!SafeArrayGetLBound": 7, "OLEAUT32.dll!SafeArrayRedim": 1, "OLEAUT32.dll!SafeArrayGetUBound": 7, "OLEAUT32.dll!VariantCopy": 2, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 1, "OLEAUT32.dll!SafeArrayGetVartype": 3, "OLEAUT32.dll!SafeArrayCopy": 3, "OLEAUT32.dll!LoadTypeLib": 2, "KERNEL32.dll!GetModuleFileNameW": 3, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!MultiByteToWideChar": 32, "OLEAUT32.dll!SysAllocStringLen": 4, "SETUPAPI.dll!CM_Get_Device_IDW": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 8, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "ADVAPI32.dll!RegCloseKey": 17, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 4, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 7, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!CreateFileW": 16, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!WriteFile": 10, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 5, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 5, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!RaiseException": 3, "SETUPAPI.dll!SetupFindFirstLineW": 9, "SETUPAPI.dll!SetupFindNextLine": 5, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptImportKeyPair": 2, "KERNEL32.dll!GetFileSize": 2, "KERNEL32.dll!ReadFile": 6, "bcrypt.dll!BCryptEncrypt": 2, "bcrypt.dll!BCryptDecrypt": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 3, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 3, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!UnmapViewOfFile": 5, "USERENV.dll!UnloadUserProfile": 3, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!CopyFileW": 1, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!SetFileAttributesW": 1, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!QueryDosDeviceW": 2, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "ADVAPI32.dll!IsTextUnicode": 1, "ADVAPI32.dll!GetFileSecurityW": 2, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!SetupDiGetActualSectionToInstallExW": 1, "SETUPAPI.dll!SetupGetFieldCount": 8, "SETUPAPI.dll!SetupDiGetINFClassW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupOpenAppendInfFileW": 1, "SETUPAPI.dll!SetupFindNextMatchLineW": 1, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupGetIntField": 2, "SETUPAPI.dll!SetupGetLineTextW": 2, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 2, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!FreeLibrary": 8, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "KERNEL32.dll!GetProcessId": 1, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "RPCRT4.dll!UuidFromStringW": 1, "KERNEL32.dll!OpenEventW": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!LocalFree": 7, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!SystemTimeToFileTime": 2, "KERNEL32.dll!LocalAlloc": 5, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 2, "PSAPI.DLL!GetProcessImageFileNameW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetACP": 6, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableA": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "ADVAPI32.dll!ControlService": 1, "ADVAPI32.dll!CloseServiceHandle": 1, "ADVAPI32.dll!DeleteService": 1, "ADVAPI32.dll!QueryServiceConfig2W": 2, "ADVAPI32.dll!ChangeServiceConfig2W": 3, "ADVAPI32.dll!EnumDependentServicesW": 2, "ADVAPI32.dll!QueryServiceStatusEx": 2, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!ChangeServiceConfigW": 1, "KERNEL32.dll!OpenEventA": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\Display.Driver.{92800A66-972D-4AAC-A44D-81E3328AF354}\\DisplayDriverExt.dll", "sha256": "417edc653f0ea0ac8be0e58a1f1c3fc17772ae9ed8c24e3ddab5200c74c33347", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1307648, "processed_bytes": 1307648, "instructions": 428865, "skipdata_bytes": 15 } ], "utc": "2026-11-11T21:40:22.556856+00:00", "instructions": 428865, "skipdata_bytes": 15, "calls": 34539, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 11, "KERNEL32.dll!GetLastError": 143, "KERNEL32.dll!EnterCriticalSection": 20, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LeaveCriticalSection": 22, "KERNEL32.dll!DecodePointer": 4, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!DeleteCriticalSection": 183, "OLEAUT32.dll!SafeArrayUnlock": 11, "OLEAUT32.dll!SafeArrayDestroy": 26, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!SetLastError": 82, "SETUPAPI.dll!SetupOpenInfFileW": 13, "SETUPAPI.dll!SetupCloseInfFile": 18, "OLEAUT32.dll!VariantClear": 463, "OLEAUT32.dll!VariantInit": 306, "KERNEL32.dll!WaitForSingleObject": 7, "ole32.dll!CoCreateInstance": 9, "OLEAUT32.dll!SysFreeString": 17, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!GetProcAddress": 7, "KERNEL32.dll!GetCurrentProcess": 22, "KERNEL32.dll!GetVersionExW": 3, "OLEAUT32.dll!SysStringLen": 13, "OLEAUT32.dll!SysAllocStringLen": 5, "OLEAUT32.dll!VariantChangeType": 22, "OLEAUT32.dll!SafeArrayGetLBound": 8, "OLEAUT32.dll!SafeArrayGetUBound": 7, "KERNEL32.dll!lstrlenW": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 2, "bcrypt.dll!BCryptDestroyKey": 6, "bcrypt.dll!BCryptCloseAlgorithmProvider": 3, "OLEAUT32.dll!SysAllocString": 10, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!ResumeThread": 1, "OLEAUT32.dll!SafeArrayCreate": 3, "OLEAUT32.dll!SafeArrayLock": 7, "OLEAUT32.dll!SafeArrayRedim": 1, "OLEAUT32.dll!SysStringByteLen": 3, "OLEAUT32.dll!SysAllocStringByteLen": 3, "OLEAUT32.dll!VariantCopy": 2, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 1, "OLEAUT32.dll!SafeArrayGetVartype": 3, "OLEAUT32.dll!SafeArrayCopy": 3, "OLEAUT32.dll!LoadTypeLib": 2, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!MultiByteToWideChar": 12, "SETUPAPI.dll!CM_Get_Device_IDW": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 5, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "ADVAPI32.dll!RegCloseKey": 44, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 4, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!RegOpenKeyExW": 32, "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegEnumValueW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!CreateFileW": 17, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!WriteFile": 10, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!RaiseException": 3, "SETUPAPI.dll!SetupFindFirstLineW": 4, "SETUPAPI.dll!SetupFindNextLine": 2, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptImportKeyPair": 2, "KERNEL32.dll!GetFileSize": 2, "KERNEL32.dll!ReadFile": 6, "bcrypt.dll!BCryptEncrypt": 2, "bcrypt.dll!BCryptDecrypt": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 4, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!UnmapViewOfFile": 1, "USERENV.dll!UnloadUserProfile": 3, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "ADVAPI32.dll!IsTextUnicode": 1, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!SetupDiGetActualSectionToInstallExW": 1, "SETUPAPI.dll!SetupDiGetINFClassW": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupGetFieldCount": 3, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupGetIntField": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 2, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!FreeLibrary": 7, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "KERNEL32.dll!GetProcessId": 1, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "RPCRT4.dll!UuidFromStringW": 1, "KERNEL32.dll!OpenEventW": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!SystemTimeToFileTime": 2, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "PSAPI.DLL!GetProcessImageFileNameW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "ADVAPI32.dll!CloseServiceHandle": 5, "ADVAPI32.dll!ControlService": 1, "ADVAPI32.dll!DeleteService": 1, "ADVAPI32.dll!QueryServiceConfig2W": 2, "ADVAPI32.dll!ChangeServiceConfig2W": 3, "ADVAPI32.dll!QueryServiceStatusEx": 2, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!ChangeServiceConfigW": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\7z.dll", "sha256": "3dfedba6e092428ed5a33c4e38d646f706ced851783442a2bb2dd281499fe2ea", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1318400, "processed_bytes": 1318400, "instructions": 367154, "skipdata_bytes": 127 } ], "utc": "2026-11-11T21:40:22.770204+00:00", "instructions": 367154, "skipdata_bytes": 127, "calls": 25454, "api_reference_counts": { "USER32.dll!CharUpperW": 6, "OLEAUT32.dll!SysStringLen": 18, "KERNEL32.dll!MultiByteToWideChar": 3, "KERNEL32.dll!GetLastError": 50, "KERNEL32.dll!WideCharToMultiByte": 3, "KERNEL32.dll!CreateDirectoryW": 2, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetTickCount": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!SetLastError": 10, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetTempPathW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindFirstStreamW": 2, "KERNEL32.dll!FindNextStreamW": 1, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CloseHandle": 9, "KERNEL32.dll!CreateFileW": 4, "KERNEL32.dll!SetFileTime": 1, "KERNEL32.dll!ReadFile": 1, "KERNEL32.dll!WriteFile": 7, "OLEAUT32.dll!VariantClear": 5, "OLEAUT32.dll!SysAllocStringLen": 5, "OLEAUT32.dll!SysAllocString": 2, "OLEAUT32.dll!VariantCopy": 1, "KERNEL32.dll!FileTimeToLocalFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!GetProcessAffinityMask": 1, "KERNEL32.dll!GlobalMemoryStatusEx": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetProcAddress": 6, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!DosDateTimeToFileTime": 1, "KERNEL32.dll!FileTimeToDosDateTime": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 2, "KERNEL32.dll!LeaveCriticalSection": 48, "KERNEL32.dll!EnterCriticalSection": 41, "KERNEL32.dll!WaitForMultipleObjects": 1, "USER32.dll!CharPrevExA": 1, "KERNEL32.dll!LocalFileTimeToFileTime": 10, "OLEAUT32.dll!SysAllocStringByteLen": 4, "OLEAUT32.dll!SysFreeString": 37, "KERNEL32.dll!DeleteCriticalSection": 22, "KERNEL32.dll!CompareFileTime": 3, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!QueryPerformanceCounter": 2, "KERNEL32.dll!VirtualAlloc": 6, "KERNEL32.dll!VirtualFree": 2, "KERNEL32.dll!GetLargePageMinimum": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateSemaphoreW": 2, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetModuleHandleW": 2, "ADVAPI32.dll!SystemFunction036": 1, "KERNEL32.dll!RtlCaptureContext": 3, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 3, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!FreeLibrary": 5, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetACP": 1, "KERNEL32.dll!GetCPInfo": 2, "KERNEL32.dll!IsValidCodePage": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetStringTypeW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 1, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!WriteConsoleW": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA App\\MessageBusRouter.dll", "sha256": "517840f0c1ffbfd699c1f628e1d37449299d242e55ec13ed4a6ab3dc95a1858a", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1318400, "processed_bytes": 1318400, "instructions": 712272, "skipdata_bytes": 890 } ], "utc": "2026-11-11T21:40:23.146936+00:00", "instructions": 712272, "skipdata_bytes": 890, "calls": 14528, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 9, "KERNEL32.dll!InitializeCriticalSectionEx": 18, "KERNEL32.dll!GetLastError": 133, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 612, "api-ms-win-crt-heap-l1-1-0.dll!free": 284, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 49, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 9, "KERNEL32.dll!DeleteCriticalSection": 20, "USER32.dll!UnregisterClassW": 10, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 27, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 25, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 15, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 30, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 50, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 52, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 20, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 42, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "KERNEL32.dll!WideCharToMultiByte": 12, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\BackgroundProcess\\BackgroundProcess.dll", "sha256": "71f7038fae4657eb27dfba113ffeeb981e6952588d5e1709b952eed6760d8dcc", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1334272, "processed_bytes": 1334272, "instructions": 716171, "skipdata_bytes": 886 } ], "utc": "2026-11-11T21:40:23.380926+00:00", "instructions": 716171, "skipdata_bytes": 886, "calls": 14989, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 10, "KERNEL32.dll!InitializeCriticalSectionEx": 20, "KERNEL32.dll!GetLastError": 145, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 607, "api-ms-win-crt-heap-l1-1-0.dll!free": 356, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 47, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 10, "KERNEL32.dll!DeleteCriticalSection": 22, "USER32.dll!UnregisterClassW": 11, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 48, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 69, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 3, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 55, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "USER32.dll!PostThreadMessageW": 2, "KERNEL32.dll!OpenProcess": 6, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!OpenThread": 2, "KERNEL32.dll!GetThreadTimes": 2, "ADVAPI32.dll!EqualSid": 2, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 3, "KERNEL32.dll!GetProcessId": 2, "ADVAPI32.dll!OpenSCManagerW": 2, "ADVAPI32.dll!CloseServiceHandle": 2, "ADVAPI32.dll!OpenServiceW": 2, "ADVAPI32.dll!QueryServiceStatus": 2, "ADVAPI32.dll!StartServiceW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!Thread32First": 1, "KERNEL32.dll!Thread32Next": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvApp\\NvAppIgoIpcProxy.dll", "sha256": "16b4d31149d89b3ac6f1ada950907521c6b75dc515b1c063b06eb2213a5e6eb5", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1353216, "processed_bytes": 1353216, "instructions": 730541, "skipdata_bytes": 498 } ], "utc": "2026-11-11T21:40:24.000483+00:00", "instructions": 730541, "skipdata_bytes": 498, "calls": 15255, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 10, "KERNEL32.dll!InitializeCriticalSectionEx": 20, "KERNEL32.dll!GetLastError": 135, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 695, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "api-ms-win-crt-heap-l1-1-0.dll!free": 299, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 10, "KERNEL32.dll!DeleteCriticalSection": 22, "USER32.dll!UnregisterClassW": 11, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 44, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 47, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "KERNEL32.dll!GetProcAddress": 52, "KERNEL32.dll!FreeLibrary": 20, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA App\\DriverInstall.dll", "sha256": "429f7cccf4828a0cfd17962a50bb6d5b8bbe14a0666d6d36ca0a7173a4303fa1", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1351168, "processed_bytes": 1351168, "instructions": 718590, "skipdata_bytes": 625 } ], "utc": "2026-11-11T21:40:23.984236+00:00", "instructions": 718590, "skipdata_bytes": 625, "calls": 15910, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 137, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 689, "api-ms-win-crt-heap-l1-1-0.dll!free": 316, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 51, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 29, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 27, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 55, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 43, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 7, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!WaitForSingleObject": 6, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!GetExitCodeProcess": 2, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 48, "KERNEL32.dll!GetSystemDirectoryW": 6, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 62, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 3, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!DeleteFileW": 3, "SHLWAPI.dll!PathFileExistsW": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!FindFirstFileW": 6, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 8, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!OpenEventW": 2, "USER32.dll!FindWindowW": 2, "USER32.dll!SetForegroundWindow": 2, "SHELL32.dll!ShellExecuteExW": 2, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 7, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 14, "KERNEL32.dll!CreateNamedPipeW": 2, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!DisconnectNamedPipe": 2, "KERNEL32.dll!CreateThread": 6, "KERNEL32.dll!ReadFile": 2, "KERNEL32.dll!WaitNamedPipeW": 2, "KERNEL32.dll!WriteFile": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Thrd_detach": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\InstallerCore\\NVI2UI.DLL", "sha256": "e0840001809399d9028d5edeeccd12b30c3dcbd2196742b04a902dd1a6989bb2", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1358848, "processed_bytes": 1358848, "instructions": 457089, "skipdata_bytes": 20 } ], "utc": "2026-11-11T21:40:25.371806+00:00", "instructions": 457089, "skipdata_bytes": 20, "calls": 35402, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 28, "KERNEL32.dll!GetLastError": 161, "OLEAUT32.dll!VariantInit": 419, "OLEAUT32.dll!VariantClear": 583, "KERNEL32.dll!FindResourceW": 7, "KERNEL32.dll!WideCharToMultiByte": 16, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "ADVAPI32.dll!RegQueryValueExW": 10, "ADVAPI32.dll!RegOpenKeyExW": 24, "ADVAPI32.dll!RegCloseKey": 41, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!LeaveCriticalSection": 141, "KERNEL32.dll!CloseHandle": 45, "KERNEL32.dll!SetEvent": 6, "OLEAUT32.dll!SysFreeString": 61, "GDI32.dll!DeleteObject": 41, "OLEAUT32.dll!SysStringLen": 80, "GDI32.dll!RemoveFontResourceExW": 1, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!HeapAlloc": 6, "KERNEL32.dll!WriteFile": 8, "OLEAUT32.dll!SysAllocStringLen": 10, "KERNEL32.dll!FindResourceExW": 1, "SHELL32.dll!SHGetPathFromIDListW": 2, "USER32.dll!SendMessageW": 165, "OLEAUT32.dll!VariantChangeType": 30, "GDI32.dll!DeleteDC": 12, "KERNEL32.dll!SetLastError": 88, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 2, "USER32.dll!IsRectEmpty": 5, "GDI32.dll!SelectObject": 87, "GDI32.dll!SetTextColor": 27, "USER32.dll!DrawTextW": 16, "KERNEL32.dll!WaitForSingleObject": 5, "KERNEL32.dll!CreateFileW": 11, "USER32.dll!GetClientRect": 60, "USER32.dll!ClientToScreen": 18, "USER32.dll!GetParent": 21, "USER32.dll!ScreenToClient": 23, "GDI32.dll!CreateCompatibleDC": 11, "GDI32.dll!BitBlt": 10, "KERNEL32.dll!HeapFree": 10, "KERNEL32.dll!EnterCriticalSection": 113, "OLEAUT32.dll!VariantCopy": 24, "KERNEL32.dll!GetCurrentProcess": 8, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetProcessHeap": 13, "KERNEL32.dll!GetModuleFileNameW": 6, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CreateMutexW": 2, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!OutputDebugStringW": 2, "SHELL32.dll!SHBrowseForFolderW": 1, "ole32.dll!CoTaskMemFree": 13, "USER32.dll!InvalidateRect": 35, "USER32.dll!UpdateWindow": 5, "GDI32.dll!CreateCompatibleBitmap": 6, "USER32.dll!GetWindowLongW": 54, "USER32.dll!SetWindowLongW": 37, "USER32.dll!GetWindowRect": 31, "USER32.dll!SetWindowPos": 18, "KERNEL32.dll!HeapReAlloc": 2, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegCreateKeyExW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!GetCurrentThreadId": 22, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!GetModuleHandleW": 16, "KERNEL32.dll!GetProcAddress": 21, "KERNEL32.dll!OutputDebugStringA": 1, "USER32.dll!UnregisterClassW": 1, "KERNEL32.dll!LoadLibraryW": 3, "KERNEL32.dll!DeleteCriticalSection": 93, "OLEAUT32.dll!SysAllocString": 22, "USER32.dll!IsWindow": 31, "USER32.dll!ReleaseCapture": 6, "USER32.dll!TrackMouseEvent": 6, "GDI32.dll!SetBkMode": 30, "GDI32.dll!GetStockObject": 12, "GDI32.dll!SetBkColor": 7, "GDI32.dll!CreateSolidBrush": 22, "USER32.dll!SetRect": 2, "GDI32.dll!RectVisible": 2, "USER32.dll!LoadCursorW": 23, "KERNEL32.dll!ResumeThread": 2, "USER32.dll!AttachThreadInput": 1, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 1, "USER32.dll!PostQuitMessage": 2, "USER32.dll!DestroyWindow": 26, "USER32.dll!PostMessageW": 14, "USER32.dll!GetMessageW": 3, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageW": 2, "KERNEL32.dll!RaiseException": 4, "USER32.dll!CreateWindowExW": 1, "USER32.dll!GetClassInfoExW": 1, "USER32.dll!RegisterClassExW": 1, "USER32.dll!GetWindowTextLengthW": 6, "USER32.dll!GetWindowTextW": 6, "USER32.dll!GetDC": 14, "KERNEL32.dll!MulDiv": 51, "USER32.dll!PtInRect": 6, "USER32.dll!GetScrollInfo": 13, "USER32.dll!GetCapture": 6, "USER32.dll!RedrawWindow": 12, "GDI32.dll!CreatePen": 7, "GDI32.dll!RoundRect": 1, "ole32.dll!CoCreateInstance": 9, "KERNEL32.dll!MultiByteToWideChar": 14, "USER32.dll!LoadIconW": 2, "USER32.dll!DestroyIcon": 6, "USER32.dll!DefWindowProcW": 8, "USER32.dll!SetFocus": 3, "USER32.dll!MoveWindow": 10, "SHELL32.dll!SHGetFileInfoW": 2, "USER32.dll!SetWindowTextW": 5, "KERNEL32.dll!GetExitCodeThread": 1, "USER32.dll!CallWindowProcW": 10, "GDI32.dll!GetTextExtentPoint32W": 2, "GDI32.dll!CreateFontIndirectW": 3, "GDI32.dll!AddFontResourceExW": 1, "GDI32.dll!GetDeviceCaps": 12, "USER32.dll!GetSysColor": 2, "USER32.dll!ReleaseDC": 13, "ole32.dll!OleUninitialize": 2, "ole32.dll!OleInitialize": 2, "KERNEL32.dll!GlobalAlloc": 4, "KERNEL32.dll!GlobalLock": 4, "KERNEL32.dll!GlobalUnlock": 4, "ole32.dll!CreateStreamOnHGlobal": 3, "USER32.dll!IsWindowVisible": 3, "USER32.dll!FillRect": 17, "GDI32.dll!ExcludeClipRect": 1, "USER32.dll!GetClassNameW": 1, "KERNEL32.dll!lstrcmpW": 2, "USER32.dll!CharNextW": 5, "ole32.dll!CLSIDFromString": 1, "ole32.dll!CLSIDFromProgID": 1, "ole32.dll!CoGetClassObject": 1, "OLEAUT32.dll!LoadTypeLib": 4, "ole32.dll!CoTaskMemAlloc": 5, "USER32.dll!CopyRect": 2, "OLEAUT32.dll!LoadRegTypeLib": 1, "USER32.dll!CreateAcceleratorTableW": 1, "USER32.dll!InvalidateRgn": 1, "ole32.dll!CreateBindCtx": 1, "ole32.dll!OleLockRunning": 2, "USER32.dll!BeginPaint": 8, "USER32.dll!EndPaint": 10, "USER32.dll!GetFocus": 1, "USER32.dll!IsChild": 1, "USER32.dll!GetWindow": 2, "USER32.dll!GetDlgItem": 3, "USER32.dll!DestroyAcceleratorTable": 1, "USER32.dll!SetCapture": 5, "ole32.dll!StringFromGUID2": 2, "USER32.dll!ShowWindow": 3, "GDI32.dll!GetObjectW": 1, "USER32.dll!GetDesktopWindow": 2, "OLEAUT32.dll!OleCreateFontIndirect": 1, "USER32.dll!RegisterWindowMessageW": 2, "USER32.dll!CopyImage": 1, "KERNEL32.dll!LoadLibraryA": 1, "USER32.dll!SetCursor": 1, "USER32.dll!SetRectEmpty": 1, "KERNEL32.dll!CreateEventW": 3, "USER32.dll!GetMenu": 2, "USER32.dll!AdjustWindowRectEx": 2, "USER32.dll!SystemParametersInfoW": 1, "USER32.dll!MonitorFromWindow": 1, "USER32.dll!GetMonitorInfoW": 1, "USER32.dll!MapWindowPoints": 1, "SHELL32.dll!ExtractIconW": 1, "USER32.dll!GetDialogBaseUnits": 2, "dwmapi.dll!DwmSetWindowAttribute": 3, "GDI32.dll!Rectangle": 4, "GDI32.dll!TextOutW": 1, "USER32.dll!PeekMessageW": 1, "USER32.dll!KillTimer": 6, "USER32.dll!MessageBoxW": 3, "USER32.dll!SetTimer": 2, "USER32.dll!GetDCEx": 1, "USER32.dll!GetWindowDC": 5, "USER32.dll!GetSystemMenu": 1, "USER32.dll!EnableMenuItem": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!SetThreadPriority": 2, "GDI32.dll!CreateRectRgn": 1, "USER32.dll!SetWindowRgn": 8, "ADVAPI32.dll!RegQueryInfoKeyW": 3, "ADVAPI32.dll!RegDeleteKeyW": 3, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!DecodePointer": 6, "KERNEL32.dll!GetThreadLocale": 3, "KERNEL32.dll!SetThreadLocale": 6, "USER32.dll!IsDialogMessageW": 1, "GDI32.dll!CreateRoundRectRgn": 7, "GDI32.dll!MoveToEx": 5, "GDI32.dll!LineTo": 5, "USER32.dll!GetScrollBarInfo": 43, "USER32.dll!GetSystemMetrics": 2, "USER32.dll!SetScrollInfo": 1, "KERNEL32.dll!GetTickCount": 1, "UxTheme.dll!SetWindowTheme": 2, "USER32.dll!GetDlgCtrlID": 2, "USER32.dll!SetScrollPos": 1, "GDI32.dll!SetTextAlign": 1, "KERNEL32.dll!GlobalFree": 1, "OLEAUT32.dll!SysStringByteLen": 8, "OLEAUT32.dll!SysAllocStringByteLen": 5, "gdiplus.dll!GdipCreateFromHDC": 1, "gdiplus.dll!GdipDeleteGraphics": 1, "gdiplus.dll!GdipDrawImageRectI": 1, "gdiplus.dll!GdipSetSmoothingMode": 1, "gdiplus.dll!GdipSetPixelOffsetMode": 1, "gdiplus.dll!GdipAlloc": 1, "gdiplus.dll!GdipFree": 1, "gdiplus.dll!GdipLoadImageFromStream": 1, "gdiplus.dll!GdipCloneImage": 1, "gdiplus.dll!GdipDisposeImage": 1, "gdiplus.dll!GdipSetInterpolationMode": 1, "gdiplus.dll!GdipGetImageGraphicsContext": 1, "gdiplus.dll!GdipGetImageHorizontalResolution": 1, "gdiplus.dll!GdipGetImageVerticalResolution": 1, "gdiplus.dll!GdipGetImagePixelFormat": 1, "gdiplus.dll!GdipCreateBitmapFromScan0": 1, "gdiplus.dll!GdipCreateHBITMAPFromBitmap": 1, "gdiplus.dll!GdipBitmapSetResolution": 1, "gdiplus.dll!GdipDrawImageRect": 1, "gdiplus.dll!GdipGetImageWidth": 1, "gdiplus.dll!GdipGetImageHeight": 1, "gdiplus.dll!GdipSetCompositingMode": 1, "gdiplus.dll!GdiplusStartup": 1, "gdiplus.dll!GdiplusShutdown": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 3, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "ADVAPI32.dll!IsTextUnicode": 1, "SHLWAPI.dll!UrlIsW": 1, "SHLWAPI.dll!UrlCreateFromPathW": 1, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!SetFilePointerEx": 7, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!GetFileTime": 1, "OLEAUT32.dll!SafeArrayUnlock": 1, "OLEAUT32.dll!SafeArrayDestroy": 1, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetUBound": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!FreeLibrary": 7, "KERNEL32.dll!GetVersionExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!LocalAlloc": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!FlushInstructionCache": 1, "KERNEL32.dll!InterlockedPopEntrySList": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!InterlockedPushEntrySList": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 8, "KERNEL32.dll!InitializeSListHead": 2, "urlmon.dll!CreateURLMonikerEx": 1, "urlmon.dll!CreateAsyncBindCtx": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!ExitThread": 3, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA App\\AppDiscovery.dll", "sha256": "ee57869caf91ca90b55c43a549edbe255e9c2822f36bf26a8de578387df10870", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1355776, "processed_bytes": 1355776, "instructions": 720753, "skipdata_bytes": 460 } ], "utc": "2026-11-11T21:40:25.127792+00:00", "instructions": 720753, "skipdata_bytes": 460, "calls": 16350, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 129, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 760, "api-ms-win-crt-heap-l1-1-0.dll!free": 359, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 48, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 15, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 18, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 15, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 33, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 31, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 17, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 10, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 35, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 66, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 39, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "api-ms-win-crt-string-l1-1-0.dll!toupper": 12, "KERNEL32.dll!CloseHandle": 60, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 2, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!GetProcessId": 3, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!GetExitCodeProcess": 2, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 48, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 14, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 26, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "ADVAPI32.dll!RegCloseKey": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 10, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 3, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegQueryValueExW": 6, "ole32.dll!CoTaskMemFree": 4, "USER32.dll!FindWindowW": 2, "USER32.dll!SetForegroundWindow": 2, "SHELL32.dll!ShellExecuteExW": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "SHELL32.dll!SHGetFolderPathW": 2, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 125, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 242, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 222, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 15, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 7, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 18, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "api-ms-win-crt-runtime-l1-1-0.dll!strerror_s": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "libcrypto-3-x64.dll!OPENSSL_cleanse": 1, "libcrypto-3-x64.dll!EVP_EncryptInit_ex": 1, "libcrypto-3-x64.dll!EVP_EncryptUpdate": 1, "libcrypto-3-x64.dll!EVP_EncryptFinal_ex": 1, "libcrypto-3-x64.dll!EVP_DecryptInit_ex": 1, "libcrypto-3-x64.dll!EVP_DecryptUpdate": 1, "libcrypto-3-x64.dll!EVP_DecryptFinal_ex": 1, "libcrypto-3-x64.dll!EVP_CIPHER_CTX_new": 1, "libcrypto-3-x64.dll!EVP_CIPHER_CTX_free": 1, "libcrypto-3-x64.dll!EVP_aes_256_cbc": 1, "libcrypto-3-x64.dll!EVP_add_cipher": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA App\\LoginId.dll", "sha256": "87319cac6eaec67bfab7999494bfbf69d35f4c668f063196f58e22ddcf207f3e", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1372672, "processed_bytes": 1372672, "instructions": 733411, "skipdata_bytes": 880 } ], "utc": "2026-11-11T21:40:25.932511+00:00", "instructions": 733411, "skipdata_bytes": 880, "calls": 15338, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 12, "KERNEL32.dll!InitializeCriticalSectionEx": 24, "KERNEL32.dll!GetLastError": 97, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 640, "api-ms-win-crt-heap-l1-1-0.dll!free": 387, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 52, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 12, "KERNEL32.dll!DeleteCriticalSection": 26, "USER32.dll!UnregisterClassW": 13, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 12, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 30, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 56, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 60, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!LockFileEx": 2, "KERNEL32.dll!CloseHandle": 44, "KERNEL32.dll!UnlockFileEx": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 8, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!GetFileAttributesW": 6, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 4, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 72, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 144, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 6, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "KERNEL32.dll!LocalFree": 4, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!GetProcAddress": 2, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\Base\\NvWorkstation.dll", "sha256": "7b51449052214a12a0dbf001925cd9811c149bc38bf99edf8fd4dee4a1da9b76", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1397760, "processed_bytes": 1397760, "instructions": 741818, "skipdata_bytes": 464 } ], "utc": "2026-11-11T21:40:25.941960+00:00", "instructions": 741818, "skipdata_bytes": 464, "calls": 16670, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 132, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 736, "api-ms-win-crt-heap-l1-1-0.dll!free": 414, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 52, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 12, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 30, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 56, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 41, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "KERNEL32.dll!FreeLibrary": 15, "SHELL32.dll!SHGetFolderPathW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 2, "KERNEL32.dll!GetProcAddress": 67, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 5, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 3, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 8, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!GetFileAttributesW": 14, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateFileW": 11, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 72, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 144, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "ole32.dll!CoCreateGuid": 2, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 66, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\McpServer\\NvAppCore.dll", "sha256": "5b271506715f51d9690ddbfe95a9e808c1a4d616653d27eadf24da313976bc01", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1428480, "processed_bytes": 1428480, "instructions": 747550, "skipdata_bytes": 297 } ], "utc": "2026-11-11T21:40:26.683494+00:00", "instructions": 747550, "skipdata_bytes": 297, "calls": 16831, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 13, "KERNEL32.dll!InitializeCriticalSectionEx": 26, "KERNEL32.dll!GetLastError": 153, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnprintf_s": 5, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 6, "api-ms-win-crt-heap-l1-1-0.dll!free": 286, "KERNEL32.dll!DecodePointer": 13, "KERNEL32.dll!DeleteCriticalSection": 28, "USER32.dll!UnregisterClassW": 14, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 21, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1018, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 88, "api-ms-win-crt-string-l1-1-0.dll!tolower": 19, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 6, "KERNEL32.dll!WideCharToMultiByte": 12, "USER32.dll!AllowSetForegroundWindow": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!GetProcAddress": 49, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 33, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 34, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 17, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 18, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 11, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 9, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 32, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 11, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 6, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 7, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 4, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 8, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 8, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 4, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 6, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!GetCurrentProcessId": 8, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 4, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 25, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 78, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 20, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 24, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 28, "MSVCP140.dll!??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!towlower": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 7, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 15, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "KERNEL32.dll!CloseHandle": 60, "KERNEL32.dll!LocalFree": 72, "KERNEL32.dll!FreeLibrary": 15, "ole32.dll!CoCreateGuid": 2, "ADVAPI32.dll!RegGetValueW": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 2, "KERNEL32.dll!GetTempPathW": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 8, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 3, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!GetModuleHandleW": 6, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 5, "USER32.dll!LoadStringW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcstok_s": 3, "KERNEL32.dll!FormatMessageA": 3, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!LocalAlloc": 24, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 10, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 5, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 18, "KERNEL32.dll!SetFileAttributesW": 4, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!MultiByteToWideChar": 8, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!MoveFileExW": 5, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 5, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "ole32.dll!CoTaskMemFree": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "WINHTTP.dll!WinHttpCloseHandle": 5, "WINHTTP.dll!WinHttpSetTimeouts": 2, "WINHTTP.dll!WinHttpOpen": 2, "WINHTTP.dll!WinHttpConnect": 2, "WINHTTP.dll!WinHttpOpenRequest": 2, "WINHTTP.dll!WinHttpSetOption": 3, "WINHTTP.dll!WinHttpSendRequest": 2, "WINHTTP.dll!WinHttpReceiveResponse": 2, "WINHTTP.dll!WinHttpQueryHeaders": 2, "WINHTTP.dll!WinHttpQueryDataAvailable": 3, "WINHTTP.dll!WinHttpReadData": 2, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 2, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 2, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "dxgi.dll!CreateDXGIFactory": 1, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptGetProperty": 1, "bcrypt.dll!BCryptCloseAlgorithmProvider": 1, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\Base\\SystemInfo.dll", "sha256": "e67c0fb8991495fc1795486263042c2af7e3ce9c29fd030ebf20a7cf53958cd4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1524224, "processed_bytes": 1524224, "instructions": 800221, "skipdata_bytes": 333 } ], "utc": "2026-11-11T21:40:26.904623+00:00", "instructions": 800221, "skipdata_bytes": 333, "calls": 18634, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 11, "KERNEL32.dll!InitializeCriticalSectionEx": 22, "KERNEL32.dll!GetLastError": 150, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 905, "api-ms-win-crt-heap-l1-1-0.dll!free": 338, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 45, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 11, "KERNEL32.dll!DeleteCriticalSection": 24, "USER32.dll!UnregisterClassW": 12, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 16, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 30, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 18, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 37, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 58, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 70, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 55, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 8, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 11, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 60, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 15, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 42, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 4, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "OLEAUT32.dll!SysAllocString": 12, "OLEAUT32.dll!VariantInit": 14, "ole32.dll!CoInitialize": 6, "ole32.dll!CoCreateInstance": 6, "ole32.dll!CoUninitialize": 8, "OLEAUT32.dll!VariantChangeType": 4, "OLEAUT32.dll!SysFreeString": 22, "OLEAUT32.dll!VariantClear": 21, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 12, "ADVAPI32.dll!RegCloseKey": 4, "ADVAPI32.dll!CryptReleaseContext": 6, "ADVAPI32.dll!CryptDestroyHash": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 8, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 3, "KERNEL32.dll!FormatMessageA": 3, "OLEAUT32.dll!SafeArrayGetElement": 3, "USER32.dll!GetDC": 2, "GDI32.dll!GetDeviceCaps": 2, "USER32.dll!ReleaseDC": 2, "KERNEL32.dll!DeviceIoControl": 5, "IPHLPAPI.DLL!GetIpInterfaceTable": 2, "IPHLPAPI.DLL!FreeMibTable": 6, "ADVAPI32.dll!CryptAcquireContextW": 2, "ADVAPI32.dll!CryptCreateHash": 2, "ADVAPI32.dll!CryptHashData": 2, "ADVAPI32.dll!CryptGetHashParam": 3, "CRYPT32.dll!CryptBinaryToStringW": 3, "KERNEL32.dll!GlobalMemoryStatusEx": 2, "WS2_32.dll!inet_addr": 3, "IPHLPAPI.DLL!SendARP": 2, "ole32.dll!CoSetProxyBlanket": 3, "KERNEL32.dll!GetComputerNameW": 2, "OLEAUT32.dll!SysStringLen": 3, "KERNEL32.dll!GetLogicalDriveStringsW": 2, "KERNEL32.dll!GetDriveTypeW": 5, "KERNEL32.dll!GetDiskFreeSpaceW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 3, "USER32.dll!EnumDisplayMonitors": 2, "USER32.dll!EnumDisplayDevicesW": 3, "USER32.dll!EnumDisplaySettingsW": 2, "IPHLPAPI.DLL!GetIfTable2": 2, "IPHLPAPI.DLL!GetAdaptersInfo": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 3, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!GetUserDefaultUILanguage": 3, "KERNEL32.dll!LCIDToLocaleName": 2, "USER32.dll!GetMonitorInfoW": 2, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "KERNEL32.dll!GetVersionExW": 2, "MSVCP140.dll!?setf@ios_base@std@@QEAAHH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 6, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "IPHLPAPI.DLL!GetIpAddrTable": 3, "WS2_32.dll!ntohl": 2, "IPHLPAPI.DLL!GetAdaptersAddresses": 3, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!CreateErrorInfo": 2, "wlanapi.dll!WlanOpenHandle": 1, "wlanapi.dll!WlanCloseHandle": 1, "wlanapi.dll!WlanQueryInterface": 1, "wlanapi.dll!WlanFreeMemory": 1, "dxgi.dll!CreateDXGIFactory": 1, "d3d9.dll!Direct3DCreate9Ex": 1, "POWRPROF.dll!GetPwrCapabilities": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvApp\\NvKVStorage.dll", "sha256": "8b7452fc80c02e6eedf41fd0c4eeb3d4875adea838010a3cb6afa65dc05dad84", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1532416, "processed_bytes": 1532416, "instructions": 813644, "skipdata_bytes": 768 } ], "utc": "2026-11-11T21:40:27.734342+00:00", "instructions": 813644, "skipdata_bytes": 768, "calls": 17431, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 10, "KERNEL32.dll!InitializeCriticalSectionEx": 20, "KERNEL32.dll!GetLastError": 135, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 11, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 728, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 29, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 27, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 55, "api-ms-win-crt-heap-l1-1-0.dll!free": 388, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 10, "KERNEL32.dll!DeleteCriticalSection": 22, "USER32.dll!UnregisterClassW": 11, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 66, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 16, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 7, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 6, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 6, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 6, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!?exceptions@ios_base@std@@QEAAXH@Z": 2, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 6, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 54, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "KERNEL32.dll!GetProcAddress": 52, "KERNEL32.dll!FreeLibrary": 20, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\Plugins\\LocalSystem\\_nvspserviceplugin64.dll", "sha256": "8f7587a1610874e9263fb5ab6890875f1527c4fc9e62c82c0746958416ba76fe", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1617408, "processed_bytes": 1617408, "instructions": 807420, "skipdata_bytes": 168 } ], "utc": "2026-11-11T21:40:27.774090+00:00", "instructions": 807420, "skipdata_bytes": 168, "calls": 19051, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 9, "KERNEL32.dll!InitializeCriticalSectionEx": 10, "KERNEL32.dll!GetLastError": 238, "KERNEL32.dll!LocalAlloc": 60, "KERNEL32.dll!LocalFree": 104, "KERNEL32.dll!GetProcAddress": 110, "KERNEL32.dll!GetSystemDirectoryW": 20, "KERNEL32.dll!GetFileAttributesW": 12, "KERNEL32.dll!SetLastError": 108, "KERNEL32.dll!GetModuleHandleW": 13, "KERNEL32.dll!GetModuleFileNameW": 17, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 14, "KERNEL32.dll!CloseHandle": 86, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 47, "ole32.dll!CoTaskMemFree": 8, "KERNEL32.dll!GetCurrentProcessId": 9, "KERNEL32.dll!EnterCriticalSection": 40, "KERNEL32.dll!LeaveCriticalSection": 41, "KERNEL32.dll!DeleteCriticalSection": 29, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!WaitForMultipleObjects": 6, "KERNEL32.dll!SetEvent": 12, "KERNEL32.dll!CreateEventW": 10, "KERNEL32.dll!CreateSemaphoreW": 3, "KERNEL32.dll!WaitForSingleObject": 7, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileW": 3, "ADVAPI32.dll!GetSecurityDescriptorDacl": 5, "SHELL32.dll!SHGetFolderPathW": 10, "KERNEL32.dll!CreateDirectoryW": 5, "KERNEL32.dll!WideCharToMultiByte": 9, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 5, "ADVAPI32.dll!SetSecurityDescriptorDacl": 5, "ADVAPI32.dll!FreeSid": 2, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 2, "KERNEL32.dll!GetLocalTime": 3, "KERNEL32.dll!GetCurrentThreadId": 19, "KERNEL32.dll!OutputDebugStringW": 7, "ADVAPI32.dll!RegOpenKeyExA": 5, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 11, "KERNEL32.dll!MoveFileExW": 3, "KERNEL32.dll!GetFinalPathNameByHandleW": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!WriteFile": 13, "ADVAPI32.dll!ControlTraceW": 3, "ADVAPI32.dll!EnableTraceEx2": 4, "ole32.dll!CoCreateGuid": 2, "ADVAPI32.dll!StartTraceW": 2, "ADVAPI32.dll!OpenTraceW": 2, "ADVAPI32.dll!ProcessTrace": 2, "ADVAPI32.dll!CloseTrace": 4, "KERNEL32.dll!GetModuleHandleExW": 12, "KERNEL32.dll!GetSystemInfo": 4, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 7, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!GetCurrentProcess": 10, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!DuplicateTokenEx": 2, "ADVAPI32.dll!SetTokenInformation": 3, "ADVAPI32.dll!GetLengthSid": 2, "USER32.dll!WaitForInputIdle": 2, "KERNEL32.dll!OpenProcess": 10, "ADVAPI32.dll!LookupPrivilegeValueW": 2, "ADVAPI32.dll!AdjustTokenPrivileges": 2, "KERNEL32.dll!TerminateProcess": 7, "KERNEL32.dll!ProcessIdToSessionId": 4, "KERNEL32.dll!QueryFullProcessImageNameW": 5, "ADVAPI32.dll!RegGetValueA": 2, "KERNEL32.dll!DecodePointer": 6, "USER32.dll!UnregisterClassW": 5, "ADVAPI32.dll!RegCreateKeyExA": 3, "ADVAPI32.dll!RegSetValueExA": 5, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!ResetEvent": 5, "ADVAPI32.dll!RegDeleteKeyValueA": 3, "SHLWAPI.dll!PathFileExistsW": 6, "KERNEL32.dll!RemoveDirectoryW": 7, "KERNEL32.dll!Sleep": 5, "KERNEL32.dll!CreateSymbolicLinkW": 5, "USER32.dll!RegisterDeviceNotificationW": 3, "USER32.dll!UnregisterDeviceNotification": 3, "KERNEL32.dll!CreateWaitableTimerW": 2, "KERNEL32.dll!SetWaitableTimer": 3, "KERNEL32.dll!CancelWaitableTimer": 3, "KERNEL32.dll!GetThreadId": 10, "USER32.dll!PostThreadMessageW": 7, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!QueryPerformanceFrequency": 3, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!GetTickCount": 3, "CRYPT32.dll!CertGetNameStringW": 5, "CRYPT32.dll!CryptQueryObject": 2, "CRYPT32.dll!CryptMsgGetParam": 3, "CRYPT32.dll!CertFindCertificateInStore": 2, "CRYPT32.dll!CertFreeCertificateContext": 2, "CRYPT32.dll!CryptMsgClose": 2, "CRYPT32.dll!CertCloseStore": 2, "SHLWAPI.dll!PathFindFileNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!RtlCaptureStackBackTrace": 2, "KERNEL32.dll!GetNamedPipeClientProcessId": 2, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!CreateNamedPipeW": 2, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!GetOverlappedResult": 2, "KERNEL32.dll!DisconnectNamedPipe": 2, "KERNEL32.dll!CancelIo": 2, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "WTSAPI32.dll!WTSQueryUserToken": 1, "USERENV.dll!CreateEnvironmentBlock": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!K32GetModuleFileNameExW": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 7, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 6, "KERNEL32.dll!SleepConditionVariableSRW": 8, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 8, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!TryAcquireSRWLockExclusive": 3, "KERNEL32.dll!WakeConditionVariable": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!MultiByteToWideChar": 10, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetFileInformationByHandleEx": 2, "KERNEL32.dll!GetTempPathW": 3, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!SetFileInformationByHandle": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!RaiseException": 7, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\Display.Driver.{92800A66-972D-4AAC-A44D-81E3328AF354}\\DisplayDriverExt64.dll", "sha256": "69c26a1b1ab9fd9278cfa31e582a3a51020a34a257f7cec866f66543b7ee42f1", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1630208, "processed_bytes": 1630208, "instructions": 417877, "skipdata_bytes": 174 } ], "utc": "2026-11-11T21:40:28.520607+00:00", "instructions": 417877, "skipdata_bytes": 174, "calls": 33376, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 40, "KERNEL32.dll!GetLastError": 205, "KERNEL32.dll!EnterCriticalSection": 26, "KERNEL32.dll!EncodePointer": 4, "KERNEL32.dll!LeaveCriticalSection": 28, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!FindResourceW": 5, "KERNEL32.dll!LoadResource": 3, "KERNEL32.dll!LockResource": 3, "KERNEL32.dll!SizeofResource": 3, "KERNEL32.dll!WideCharToMultiByte": 16, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "OLEAUT32.dll!SafeArrayGetVartype": 3, "OLEAUT32.dll!SafeArrayUnlock": 19, "OLEAUT32.dll!SafeArrayDestroy": 33, "OLEAUT32.dll!SafeArrayCopy": 3, "OLEAUT32.dll!SafeArrayLock": 9, "KERNEL32.dll!DeleteCriticalSection": 278, "SETUPAPI.dll!SetupOpenInfFileW": 13, "SETUPAPI.dll!SetupCloseInfFile": 21, "KERNEL32.dll!SetLastError": 88, "OLEAUT32.dll!VariantClear": 801, "KERNEL32.dll!WaitForSingleObject": 7, "OLEAUT32.dll!VariantInit": 450, "ole32.dll!CoCreateInstance": 9, "OLEAUT32.dll!SysAllocString": 13, "OLEAUT32.dll!SysFreeString": 21, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!ResumeThread": 1, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!GetProcAddress": 32, "KERNEL32.dll!GetCurrentProcess": 16, "KERNEL32.dll!CloseHandle": 61, "OLEAUT32.dll!SysAllocStringLen": 7, "KERNEL32.dll!GetVersionExW": 3, "OLEAUT32.dll!SysStringLen": 12, "OLEAUT32.dll!SafeArrayCreate": 4, "OLEAUT32.dll!SafeArrayGetLBound": 16, "OLEAUT32.dll!SafeArrayRedim": 2, "OLEAUT32.dll!SafeArrayGetUBound": 13, "OLEAUT32.dll!VariantChangeType": 35, "KERNEL32.dll!lstrlenW": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 2, "bcrypt.dll!BCryptDestroyKey": 6, "bcrypt.dll!BCryptCloseAlgorithmProvider": 3, "OLEAUT32.dll!SysStringByteLen": 3, "OLEAUT32.dll!SysAllocStringByteLen": 3, "OLEAUT32.dll!VariantCopy": 2, "KERNEL32.dll!GetExitCodeThread": 1, "ole32.dll!CoInitializeEx": 1, "ole32.dll!CoUninitialize": 1, "OLEAUT32.dll!LoadTypeLib": 2, "KERNEL32.dll!GetModuleFileNameW": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!MultiByteToWideChar": 24, "SETUPAPI.dll!CM_Get_Device_IDW": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "SETUPAPI.dll!SetupDiGetClassDevsW": 2, "ADVAPI32.dll!RegCloseKey": 29, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!OpenProcessToken": 4, "ADVAPI32.dll!GetTokenInformation": 4, "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 8, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!CreateFileW": 18, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!WriteFile": 10, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 5, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 2, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 16, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 4, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!RaiseException": 5, "SETUPAPI.dll!SetupFindFirstLineW": 9, "SETUPAPI.dll!SetupFindNextLine": 7, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptImportKeyPair": 2, "KERNEL32.dll!GetFileSize": 2, "KERNEL32.dll!ReadFile": 6, "bcrypt.dll!BCryptEncrypt": 2, "bcrypt.dll!BCryptDecrypt": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 4, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 3, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!UnmapViewOfFile": 1, "USERENV.dll!UnloadUserProfile": 4, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!CopyFileW": 1, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!SetFileAttributesW": 3, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 1, "KERNEL32.dll!QueryDosDeviceW": 2, "KERNEL32.dll!GetSystemWindowsDirectoryW": 1, "KERNEL32.dll!GetSystemDirectoryW": 15, "KERNEL32.dll!GetWindowsDirectoryW": 1, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "ADVAPI32.dll!IsTextUnicode": 1, "ADVAPI32.dll!GetFileSecurityW": 2, "KERNEL32.dll!GetCurrentThread": 1, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!SetupDiGetActualSectionToInstallExW": 1, "SETUPAPI.dll!SetupGetFieldCount": 6, "SETUPAPI.dll!SetupDiGetINFClassW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupOpenAppendInfFileW": 1, "SETUPAPI.dll!SetupFindNextMatchLineW": 1, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupGetIntField": 1, "SETUPAPI.dll!SetupGetLineTextW": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 2, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!FreeLibrary": 7, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "KERNEL32.dll!GetProcessId": 1, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!RpcStringFreeW": 1, "RPCRT4.dll!UuidFromStringW": 1, "KERNEL32.dll!OpenEventW": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!SystemTimeToFileTime": 2, "KERNEL32.dll!LocalAlloc": 10, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!GetModuleFileNameA": 1, "PSAPI.DLL!GetProcessImageFileNameW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 3, "KERNEL32.dll!ReleaseSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 1, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "ADVAPI32.dll!CloseServiceHandle": 5, "ADVAPI32.dll!ControlService": 1, "ADVAPI32.dll!DeleteService": 1, "ADVAPI32.dll!QueryServiceConfig2W": 2, "ADVAPI32.dll!ChangeServiceConfig2W": 4, "ADVAPI32.dll!EnumDependentServicesW": 2, "ADVAPI32.dll!QueryServiceStatusEx": 2, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!ChangeServiceConfigW": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvApp\\DriverUpdateRecommendation.dll", "sha256": "7da2c603174a7c6c7d3e5549d7f1d37d9ac21283864f03d02fd3a35ee8d9a8b3", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1633280, "processed_bytes": 1633280, "instructions": 859253, "skipdata_bytes": 583 } ], "utc": "2026-11-11T21:40:28.850219+00:00", "instructions": 859253, "skipdata_bytes": 583, "calls": 19768, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 8, "KERNEL32.dll!InitializeCriticalSectionEx": 16, "KERNEL32.dll!GetLastError": 132, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 859, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "api-ms-win-crt-heap-l1-1-0.dll!free": 336, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 8, "KERNEL32.dll!DeleteCriticalSection": 18, "USER32.dll!UnregisterClassW": 9, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 68, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 20, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 47, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 53, "ADVAPI32.dll!RegGetValueW": 3, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegSetValueExW": 2, "ADVAPI32.dll!RegCloseKey": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnprintf_s": 4, "SHELL32.dll!SHGetFolderPathW": 2, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 8, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "KERNEL32.dll!WideCharToMultiByte": 12, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\dependencies\\CrimsonUtil.dll", "sha256": "74026f7a344f0bc5fca5843e9bd8475d0dd22599b1a88ab0a07b089ff6844949", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1758720, "processed_bytes": 1758720, "instructions": 871807, "skipdata_bytes": 1391 } ], "utc": "2026-11-11T21:40:29.738033+00:00", "instructions": 871807, "skipdata_bytes": 1391, "calls": 22438, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 11, "KERNEL32.dll!InitializeCriticalSectionEx": 25, "KERNEL32.dll!GetLastError": 110, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 588, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 30, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 7, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 24, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 34, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 34, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "api-ms-win-crt-heap-l1-1-0.dll!free": 91, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 16, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 19, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "KERNEL32.dll!DecodePointer": 11, "KERNEL32.dll!DeleteCriticalSection": 34, "USER32.dll!UnregisterClassW": 12, "KERNEL32.dll!HeapDestroy": 4, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 69, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 6, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 18, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 17, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 7, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 10, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 13, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 19, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 11, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 27, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 11, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 6, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 6, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 6, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 36, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 4, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 227, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 197, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 26, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!AcquireSRWLockExclusive": 11, "KERNEL32.dll!ReleaseSRWLockExclusive": 13, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 4, "KERNEL32.dll!LocalFree": 5, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CloseHandle": 44, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 21, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetProcAddress": 4, "KERNEL32.dll!GetFileAttributesW": 6, "KERNEL32.dll!SetFileAttributesW": 4, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!MultiByteToWideChar": 7, "KERNEL32.dll!WideCharToMultiByte": 10, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 4, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 17, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLogicalDrives": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 3, "KERNEL32.dll!Sleep": 4, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 36, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 4, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 41, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 6, "KERNEL32.dll!WaitForMultipleObjects": 3, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 5, "KERNEL32.dll!ProcessIdToSessionId": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 17, "api-ms-win-crt-stdio-l1-1-0.dll!fputs": 6, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 3, "KERNEL32.dll!OutputDebugStringA": 2, "api-ms-win-crt-time-l1-1-0.dll!strftime": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 4, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 4, "KERNEL32.dll!MoveFileW": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnprintf_s": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 6, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 2, "MSVCP140.dll!?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ": 2, "MSVCP140.dll!?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z": 2, "MSVCP140.dll!?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoll": 3, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-time-l1-1-0.dll!_mkgmtime64": 3, "KERNEL32.dll!SetLastError": 4, "WS2_32.dll!WSACreateEvent": 3, "WS2_32.dll!WSACloseEvent": 4, "WS2_32.dll!WSASetEvent": 2, "WS2_32.dll!getsockopt": 4, "WS2_32.dll!send": 9, "WS2_32.dll!WSAEventSelect": 6, "WS2_32.dll!WSAWaitForMultipleEvents": 2, "WS2_32.dll!WSAEnumNetworkEvents": 4, "WS2_32.dll!WSAResetEvent": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 65, "api-ms-win-crt-utility-l1-1-0.dll!qsort": 5, "api-ms-win-crt-stdio-l1-1-0.dll!_fileno": 9, "api-ms-win-crt-filesystem-l1-1-0.dll!_fstat64": 11, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlink": 5, "api-ms-win-crt-string-l1-1-0.dll!strcspn": 10, "api-ms-win-crt-stdio-l1-1-0.dll!feof": 3, "WS2_32.dll!recv": 3, "WS2_32.dll!connect": 5, "WS2_32.dll!WSAGetLastError": 60, "WS2_32.dll!WSASetLastError": 6, "WS2_32.dll!WSAIoctl": 4, "WS2_32.dll!setsockopt": 10, "WS2_32.dll!accept": 2, "WS2_32.dll!getpeername": 3, "WS2_32.dll!ntohs": 8, "WS2_32.dll!htons": 21, "WS2_32.dll!bind": 6, "WS2_32.dll!getsockname": 8, "WS2_32.dll!closesocket": 3, "WS2_32.dll!socket": 3, "KERNEL32.dll!SleepEx": 2, "KERNEL32.dll!EnterCriticalSection": 36, "KERNEL32.dll!LeaveCriticalSection": 47, "api-ms-win-crt-stdio-l1-1-0.dll!fseek": 6, "api-ms-win-crt-stdio-l1-1-0.dll!ftell": 4, "WS2_32.dll!WSACleanup": 3, "WS2_32.dll!WSAStartup": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 3, "KERNEL32.dll!QueryPerformanceFrequency": 2, "WS2_32.dll!select": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_fullpath": 8, "KERNEL32.dll!CreateFileA": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fsopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!freopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_sopen_s": 2, "KERNEL32.dll!MoveFileExA": 3, "api-ms-win-crt-convert-l1-1-0.dll!mbstowcs_s": 3, "api-ms-win-crt-string-l1-1-0.dll!wcsncmp": 6, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 3, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 2, "api-ms-win-crt-convert-l1-1-0.dll!wcstombs_s": 3, "api-ms-win-crt-math-l1-1-0.dll!_fdopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_close": 9, "api-ms-win-crt-stdio-l1-1-0.dll!fgets": 2, "api-ms-win-crt-stdio-l1-1-0.dll!ferror": 3, "api-ms-win-crt-utility-l1-1-0.dll!bsearch": 3, "IPHLPAPI.DLL!if_nametoindex": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_lseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_read": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_write": 2, "WS2_32.dll!listen": 3, "WLDAP32.dll!#22": 4, "WLDAP32.dll!#217": 2, "WLDAP32.dll!#143": 2, "WLDAP32.dll!#211": 5, "WLDAP32.dll!#50": 2, "WLDAP32.dll!#26": 2, "WLDAP32.dll!#30": 2, "WLDAP32.dll!#200": 5, "WLDAP32.dll!#32": 2, "WLDAP32.dll!#35": 2, "WLDAP32.dll!#79": 3, "WLDAP32.dll!#33": 2, "WLDAP32.dll!#301": 3, "WLDAP32.dll!#27": 2, "WLDAP32.dll!#41": 2, "WLDAP32.dll!#46": 2, "WLDAP32.dll!#60": 2, "WLDAP32.dll!#45": 5, "api-ms-win-crt-string-l1-1-0.dll!strpbrk": 7, "KERNEL32.dll!GetStdHandle": 2, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!PeekNamedPipe": 2, "KERNEL32.dll!ReadFile": 3, "WS2_32.dll!recvfrom": 2, "WS2_32.dll!sendto": 10, "WS2_32.dll!ioctlsocket": 2, "KERNEL32.dll!GetModuleHandleA": 3, "KERNEL32.dll!VerSetConditionMask": 7, "KERNEL32.dll!VerifyVersionInfoW": 3, "api-ms-win-crt-runtime-l1-1-0.dll!strerror_s": 2, "api-ms-win-crt-string-l1-1-0.dll!strspn": 2, "WS2_32.dll!htonl": 5, "CRYPT32.dll!CertCloseStore": 10, "ADVAPI32.dll!CryptAcquireContextA": 7, "ADVAPI32.dll!CryptCreateHash": 7, "ADVAPI32.dll!CryptHashData": 7, "ADVAPI32.dll!CryptGetHashParam": 13, "ADVAPI32.dll!CryptDestroyHash": 7, "ADVAPI32.dll!CryptReleaseContext": 11, "CRYPT32.dll!CertOpenStore": 3, "CRYPT32.dll!CryptStringToBinaryA": 2, "CRYPT32.dll!CertFindCertificateInStore": 3, "CRYPT32.dll!PFXImportCertStore": 2, "CRYPT32.dll!CertFreeCertificateContext": 14, "CRYPT32.dll!CertEnumCertificatesInStore": 4, "KERNEL32.dll!GetEnvironmentVariableA": 2, "WS2_32.dll!getaddrinfo": 2, "WS2_32.dll!freeaddrinfo": 2, "KERNEL32.dll!InitializeConditionVariable": 5, "WS2_32.dll!gethostname": 2, "CRYPT32.dll!CertCreateCertificateChainEngine": 2, "CRYPT32.dll!CertGetCertificateChain": 2, "CRYPT32.dll!CertFreeCertificateChainEngine": 2, "CRYPT32.dll!CertFreeCertificateChain": 2, "CRYPT32.dll!CertFindExtension": 3, "CRYPT32.dll!CryptDecodeObjectEx": 3, "CRYPT32.dll!CertGetNameStringA": 4, "CRYPT32.dll!CryptQueryObject": 2, "CRYPT32.dll!CertAddCertificateContextToStore": 2, "KERNEL32.dll!WakeConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableCS": 3, "KERNEL32.dll!WaitForSingleObjectEx": 2, "Secur32.dll!InitSecurityInterfaceA": 1, "bcrypt.dll!BCryptGenRandom": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z": 1, "VCRUNTIME140.dll!strstr": 1, "api-ms-win-crt-string-l1-1-0.dll!_strdup": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "WS2_32.dll!__WSAFDIsSet": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvApp\\DesktopNotification.dll", "sha256": "77b6a40c31dbe8319aa91cfd7921bbdea1b0a247d61986b12ed6efc53cb94089", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1737216, "processed_bytes": 1737216, "instructions": 916849, "skipdata_bytes": 758 } ], "utc": "2026-11-11T21:40:29.683968+00:00", "instructions": 916849, "skipdata_bytes": 758, "calls": 20137, "api_reference_counts": { "api-ms-win-core-heap-l1-1-0.dll!GetProcessHeap": 14, "api-ms-win-core-synch-l1-1-0.dll!InitializeCriticalSectionEx": 28, "api-ms-win-core-errorhandling-l1-1-0.dll!GetLastError": 143, "api-ms-win-crt-heap-l1-1-0.dll!free": 417, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 58, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 893, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "api-ms-win-core-util-l1-1-0.dll!DecodePointer": 14, "api-ms-win-core-synch-l1-1-0.dll!DeleteCriticalSection": 30, "USER32.dll!UnregisterClassW": 15, "api-ms-win-core-heap-l1-1-0.dll!HeapDestroy": 4, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 68, "api-ms-win-core-heap-l1-1-0.dll!HeapAlloc": 2, "api-ms-win-core-heap-l1-1-0.dll!HeapFree": 2, "api-ms-win-core-heap-l1-1-0.dll!HeapSize": 2, "api-ms-win-core-heap-l1-1-0.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "api-ms-win-core-synch-l1-1-0.dll!AcquireSRWLockExclusive": 6, "api-ms-win-core-synch-l1-1-0.dll!ReleaseSRWLockExclusive": 6, "api-ms-win-core-synch-l1-2-0.dll!WakeAllConditionVariable": 4, "api-ms-win-core-synch-l1-2-0.dll!SleepConditionVariableSRW": 3, "api-ms-win-core-processthreads-l1-1-1.dll!IsProcessorFeaturePresent": 5, "api-ms-win-core-rtlsupport-l1-1-0.dll!RtlCaptureContext": 4, "api-ms-win-core-rtlsupport-l1-1-0.dll!RtlLookupFunctionEntry": 4, "api-ms-win-core-rtlsupport-l1-1-0.dll!RtlVirtualUnwind": 4, "api-ms-win-core-debug-l1-1-0.dll!IsDebuggerPresent": 3, "api-ms-win-core-errorhandling-l1-1-0.dll!SetUnhandledExceptionFilter": 4, "api-ms-win-core-errorhandling-l1-1-0.dll!UnhandledExceptionFilter": 3, "api-ms-win-core-processthreads-l1-1-0.dll!GetStartupInfoW": 2, "api-ms-win-core-libraryloader-l1-2-0.dll!GetModuleHandleW": 5, "api-ms-win-core-processthreads-l1-1-0.dll!GetCurrentProcess": 2, "api-ms-win-core-processthreads-l1-1-0.dll!TerminateProcess": 2, "api-ms-win-core-sysinfo-l1-1-0.dll!GetSystemTimeAsFileTime": 3, "api-ms-win-core-processthreads-l1-1-0.dll!GetCurrentThreadId": 3, "api-ms-win-core-processthreads-l1-1-0.dll!GetCurrentProcessId": 3, "api-ms-win-core-profile-l1-1-0.dll!QueryPerformanceCounter": 3, "api-ms-win-core-libraryloader-l1-2-0.dll!DisableThreadLibraryCalls": 2, "api-ms-win-core-interlocked-l1-1-0.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "api-ms-win-core-localization-l1-2-0.dll!GetLocaleInfoEx": 2, "api-ms-win-core-localization-l1-2-0.dll!FormatMessageA": 2, "api-ms-win-core-heap-l2-1-0.dll!LocalFree": 69, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "api-ms-win-core-handle-l1-1-0.dll!CloseHandle": 58, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 76, "api-ms-win-core-file-l2-1-0.dll!CreateSymbolicLinkW": 3, "api-ms-win-core-file-l2-1-0.dll!GetFileInformationByHandleEx": 9, "api-ms-win-core-file-l1-1-0.dll!GetFileInformationByHandle": 2, "api-ms-win-core-file-l1-1-0.dll!SetFileInformationByHandle": 8, "api-ms-win-core-file-l2-1-2.dll!CopyFileW": 5, "api-ms-win-core-libraryloader-l1-2-0.dll!GetProcAddress": 52, "api-ms-win-core-file-l1-1-0.dll!GetFileAttributesW": 8, "api-ms-win-core-file-l1-1-0.dll!SetFileAttributesW": 4, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "api-ms-win-core-file-l1-2-2.dll!AreFileApisANSI": 2, "api-ms-win-core-string-l1-1-0.dll!MultiByteToWideChar": 8, "api-ms-win-core-string-l1-1-0.dll!WideCharToMultiByte": 12, "api-ms-win-core-file-l1-1-0.dll!CreateFileW": 9, "api-ms-win-core-file-l1-1-0.dll!CreateDirectoryW": 3, "api-ms-win-core-file-l2-1-0.dll!CreateDirectoryExW": 2, "api-ms-win-core-file-l2-1-0.dll!CreateHardLinkW": 2, "api-ms-win-core-file-l1-1-0.dll!FindNextFileW": 5, "api-ms-win-core-file-l1-1-0.dll!FindClose": 7, "api-ms-win-core-file-l1-1-0.dll!FindFirstFileExW": 2, "api-ms-win-core-processenvironment-l1-1-0.dll!GetCurrentDirectoryW": 2, "api-ms-win-core-file-l1-1-0.dll!GetFinalPathNameByHandleW": 3, "api-ms-win-core-file-l1-1-0.dll!GetFullPathNameW": 4, "api-ms-win-core-file-l1-1-0.dll!GetFileAttributesExW": 3, "api-ms-win-core-file-l1-1-0.dll!FindFirstFileW": 5, "api-ms-win-core-io-l1-1-0.dll!DeviceIoControl": 3, "api-ms-win-core-file-l2-1-0.dll!MoveFileExW": 4, "api-ms-win-core-processenvironment-l1-1-0.dll!SetCurrentDirectoryW": 2, "api-ms-win-core-file-l1-1-0.dll!SetFileTime": 2, "api-ms-win-core-file-l1-1-0.dll!GetDiskFreeSpaceExW": 4, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 20, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 15, "api-ms-win-crt-string-l1-1-0.dll!iswspace": 4, "api-ms-win-core-file-l1-1-0.dll!GetTempFileNameW": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "api-ms-win-core-libraryloader-l1-2-0.dll!FreeLibrary": 20, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "api-ms-win-core-com-l1-1-0.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "api-ms-win-core-heap-l2-1-0.dll!LocalAlloc": 24, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "api-ms-win-core-sysinfo-l1-1-0.dll!GetSystemDirectoryW": 5, "api-ms-win-core-errorhandling-l1-1-0.dll!SetLastError": 67, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "api-ms-win-core-libraryloader-l1-2-0.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "api-ms-win-core-sysinfo-l1-2-0.dll!VerSetConditionMask": 6, "api-ms-win-core-kernel32-legacy-l1-1-1.dll!VerifyVersionInfoW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "api-ms-win-core-libraryloader-l1-2-0.dll!LoadLibraryExW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "api-ms-win-core-libraryloader-l1-2-0.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "api-ms-win-core-processthreads-l1-1-0.dll!CreateProcessA": 2, "api-ms-win-core-processthreads-l1-1-0.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?GetMessageTranslator@GXP@@YAPEAVMessageTranslator@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVpath@filesystem@4@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@@Z": 1, "CrimsonUtil.dll!?SaveURL@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVpath@filesystem@5@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@AEBV?$shared_ptr@VICancellationToken@GXP@@@5@AEBV?$unordered_set@W4DownloadOptions@NetworkRequest@GXP@@U?$hash@W4DownloadOptions@NetworkRequest@GXP@@@std@@U?$equal_to@W4DownloadOptions@NetworkRequest@GXP@@@5@V?$alloc": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "api-ms-win-core-file-l1-1-0.dll!RemoveDirectoryW": 2, "api-ms-win-core-file-l1-1-0.dll!GetLogicalDrives": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "api-ms-win-core-file-l1-1-0.dll!GetFileTime": 2, "api-ms-win-core-timezone-l1-1-0.dll!FileTimeToSystemTime": 2, "api-ms-win-core-file-l1-1-0.dll!DeleteFileW": 2, "api-ms-win-core-file-l1-1-0.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "api-ms-win-core-synch-l1-2-0.dll!Sleep": 3, "api-ms-win-core-processthreads-l1-1-1.dll!OpenProcess": 2, "api-ms-win-core-psapi-l1-1-0.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "api-ms-win-core-processenvironment-l1-1-0.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "api-ms-win-core-libraryloader-l1-2-0.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "api-ms-win-core-registry-l1-1-0.dll!RegOpenKeyExW": 2, "api-ms-win-core-registry-l1-1-0.dll!RegQueryValueExW": 3, "api-ms-win-core-file-l1-1-0.dll!GetLongPathNameW": 3, "api-ms-win-core-localization-obsolete-l1-2-0.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "api-ms-win-core-sysinfo-l1-1-0.dll!GetSystemTime": 2, "api-ms-win-core-timezone-l1-1-0.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-core-synch-l1-2-0.dll!InitOnceBeginInitialize": 3, "api-ms-win-core-synch-l1-2-0.dll!InitOnceComplete": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "api-ms-win-core-com-l1-1-0.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "api-ms-win-core-file-l1-2-0.dll!GetTempPathW": 2, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "api-ms-win-core-file-l1-1-0.dll!GetDriveTypeW": 2, "api-ms-win-core-com-l1-1-0.dll!CoUninitialize": 2, "api-ms-win-core-com-l1-1-0.dll!CoInitializeEx": 2, "api-ms-win-core-com-l1-1-0.dll!CoInitializeSecurity": 2, "api-ms-win-core-com-l1-1-0.dll!CoCreateInstance": 2, "api-ms-win-core-com-l1-1-0.dll!CoSetProxyBlanket": 2, "api-ms-win-core-processthreads-l1-1-0.dll!CreateThread": 5, "api-ms-win-core-synch-l1-2-1.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "api-ms-win-core-toolhelp-l1-1-0.dll!CreateToolhelp32Snapshot": 1, "api-ms-win-core-toolhelp-l1-1-0.dll!Process32FirstW": 1, "api-ms-win-core-toolhelp-l1-1-0.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "api-ms-win-core-synch-l1-1-0.dll!EnterCriticalSection": 7, "api-ms-win-core-debug-l1-1-0.dll!OutputDebugStringW": 2, "api-ms-win-core-synch-l1-1-0.dll!LeaveCriticalSection": 7, "api-ms-win-core-errorhandling-l1-1-0.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "api-ms-win-core-synch-l1-1-0.dll!AcquireSRWLockShared": 2, "api-ms-win-core-synch-l1-1-0.dll!TryAcquireSRWLockExclusive": 2, "api-ms-win-core-synch-l1-1-0.dll!TryAcquireSRWLockShared": 2, "api-ms-win-core-synch-l1-1-0.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "api-ms-win-core-libraryloader-l1-2-1.dll!LoadLibraryW": 1, "api-ms-win-core-com-l1-1-0.dll!CoCreateFreeThreadedMarshaler": 1, "OLEAUT32.dll!SysStringLen": 1, "api-ms-win-core-localization-l1-2-0.dll!FormatMessageW": 1, "api-ms-win-core-interlocked-l1-1-0.dll!InterlockedPushEntrySList": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA Overlay\\GraphicsSetting.dll", "sha256": "ffbc5c554ff6d125a49f830e2e26ff8798a9349ef29e753313e56e0b277f65a9", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1745920, "processed_bytes": 1745920, "instructions": 896752, "skipdata_bytes": 479 } ], "utc": "2026-11-11T21:40:29.704067+00:00", "instructions": 896752, "skipdata_bytes": 479, "calls": 22072, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 129, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 895, "api-ms-win-crt-heap-l1-1-0.dll!free": 582, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 60, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 9, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 30, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 18, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 36, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 56, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 40, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "KERNEL32.dll!GetProcAddress": 74, "MSVCP140.dll!?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 3, "KERNEL32.dll!FreeLibrary": 15, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!QueryFullProcessImageNameW": 3, "KERNEL32.dll!CloseHandle": 59, "SHELL32.dll!SHGetFolderPathW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 8, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 3, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 4, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 4, "KERNEL32.dll!WideCharToMultiByte": 13, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\Base\\LocalGames.dll", "sha256": "374d54b50b3aff21eeae03752a846bb0d0e16995e4f7fe9c55a69369348fbbde", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 1758720, "processed_bytes": 1758720, "instructions": 910163, "skipdata_bytes": 411 } ], "utc": "2026-11-11T21:40:30.871846+00:00", "instructions": 910163, "skipdata_bytes": 411, "calls": 22594, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 127, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1091, "api-ms-win-crt-heap-l1-1-0.dll!free": 623, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 51, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 95, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 43, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnprintf_s": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 18, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 11, "api-ms-win-crt-convert-l1-1-0.dll!wcstoll": 3, "SHELL32.dll!SHGetFolderPathW": 2, "SHELL32.dll!ShellExecuteW": 2, "SHELL32.dll!ShellExecuteA": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_signal": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvLocalizedConfig\\NvLocalizedConfig.dll", "sha256": "fb9958400043be8f32192ef061f98db24ee659f59b0c83410c791edcf5a70200", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2076672, "processed_bytes": 2076672, "instructions": 1049679, "skipdata_bytes": 936 } ], "utc": "2026-11-11T21:40:31.937488+00:00", "instructions": 1049679, "skipdata_bytes": 936, "calls": 27497, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 14, "KERNEL32.dll!InitializeCriticalSectionEx": 28, "KERNEL32.dll!GetLastError": 144, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 15, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 9, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 35, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 11, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 6, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 4, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 8, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 8, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 4, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 18, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 964, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 34, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 33, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 18, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 37, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 66, "api-ms-win-crt-heap-l1-1-0.dll!free": 652, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 14, "KERNEL32.dll!DeleteCriticalSection": 30, "USER32.dll!UnregisterClassW": 15, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 65, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 8, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 58, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 7, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 10, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 13, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 17, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?exceptions@ios_base@std@@QEAAXH@Z": 2, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "KERNEL32.dll!GetProcAddress": 53, "KERNEL32.dll!FreeLibrary": 23, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?CreateCancellationTokenSource@GXP@@YA?AV?$shared_ptr@VICancellationTokenSource@GXP@@@std@@XZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 4, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 7, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 17, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 3, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 24, "KERNEL32.dll!InitOnceComplete": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z": 2, "MSVCP140.dll!?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 5, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-time-l1-1-0.dll!_mkgmtime64": 3, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 2, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 2, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!log2": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "CrimsonUtil.dll!?SaveURL@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVpath@filesystem@5@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@AEBV?$shared_ptr@VICancellationToken@GXP@@@5@AEBV?$unordered_set@W4DownloadOptions@NetworkRequest@GXP@@U?$hash@W4DownloadOptions@NetworkRequest@GXP@@@std@@U?$equal_to@W4DownloadOptions@NetworkRequest@GXP@@@5@V?$alloc": 1, "CrimsonUtil.dll!?Request@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBUHttpRequestData@12@AEBV?$shared_ptr@VICancellationToken@GXP@@@std@@@Z": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA App\\NvOc.dll", "sha256": "c1a24f75b1db3cccdeab14906a32154254e03ee1f6f9d74d8cfb0dcb726ef2ee", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2128896, "processed_bytes": 2128896, "instructions": 1081741, "skipdata_bytes": 405 } ], "utc": "2026-11-11T21:40:31.971554+00:00", "instructions": 1081741, "skipdata_bytes": 405, "calls": 30067, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 141, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 814, "api-ms-win-crt-heap-l1-1-0.dll!free": 444, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 54, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 19, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 5, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 41, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 3, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegCloseKey": 6, "ADVAPI32.dll!RegOpenKeyExW": 7, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegSetValueExW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateFileW": 11, "KERNEL32.dll!CloseHandle": 61, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "KERNEL32.dll!ProcessIdToSessionId": 3, "ADVAPI32.dll!DuplicateToken": 2, "ADVAPI32.dll!ImpersonateLoggedOnUser": 2, "ADVAPI32.dll!GetUserNameW": 2, "ADVAPI32.dll!RevertToSelf": 2, "ADVAPI32.dll!LookupAccountNameW": 2, "KERNEL32.dll!LocalFree": 67, "KERNEL32.dll!WaitForSingleObject": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "WTSAPI32.dll!WTSQuerySessionInformationW": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "WTSAPI32.dll!WTSQueryUserToken": 1, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!FreeLibrary": 16, "KERNEL32.dll!GetProcAddress": 59, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!RaiseException": 2, "POWRPROF.dll!PowerSettingUnregisterNotification": 1, "POWRPROF.dll!PowerSettingRegisterNotification": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\aiuser\\McpServerPlugin.dll", "sha256": "c8fe52a475cdaececd2e7d1fff2f16ad2c932d9549492727fa3fc459a5a7943e", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2182144, "processed_bytes": 2182144, "instructions": 1140973, "skipdata_bytes": 585 } ], "utc": "2026-11-11T21:40:31.978145+00:00", "instructions": 1140973, "skipdata_bytes": 585, "calls": 26094, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 8, "KERNEL32.dll!InitializeCriticalSectionEx": 16, "KERNEL32.dll!GetLastError": 157, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1354, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "api-ms-win-crt-heap-l1-1-0.dll!free": 583, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 8, "KERNEL32.dll!DeleteCriticalSection": 18, "USER32.dll!UnregisterClassW": 9, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 6, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 5, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 40, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 48, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 210, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!CloseHandle": 80, "ADVAPI32.dll!OpenProcessToken": 5, "ADVAPI32.dll!GetTokenInformation": 8, "KERNEL32.dll!LocalFree": 75, "ole32.dll!CoTaskMemFree": 6, "ADVAPI32.dll!RegGetValueW": 3, "KERNEL32.dll!CreateEventA": 2, "KERNEL32.dll!CreateFileW": 10, "KERNEL32.dll!WriteFile": 3, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!WaitForSingleObject": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 22, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 5, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 3, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!GetProcAddress": 60, "KERNEL32.dll!FreeLibrary": 21, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 3, "KERNEL32.dll!CreateEventW": 5, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!WaitForMultipleObjects": 4, "KERNEL32.dll!GetOverlappedResult": 5, "KERNEL32.dll!CancelIo": 4, "KERNEL32.dll!DisconnectNamedPipe": 4, "KERNEL32.dll!CreateNamedPipeA": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 2, "KERNEL32.dll!ReadFile": 2, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!CancelIoEx": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 8, "api-ms-win-crt-convert-l1-1-0.dll!strtoll": 3, "HTTPAPI.dll!HttpSendHttpResponse": 5, "HTTPAPI.dll!HttpSetRequestQueueProperty": 2, "HTTPAPI.dll!HttpSetUrlGroupProperty": 3, "HTTPAPI.dll!HttpSendResponseEntityBody": 3, "KERNEL32.dll!WideCharToMultiByte": 14, "api-ms-win-crt-string-l1-1-0.dll!tolower": 8, "HTTPAPI.dll!HttpReceiveRequestEntityBody": 3, "HTTPAPI.dll!HttpReceiveHttpRequest": 3, "HTTPAPI.dll!HttpInitialize": 2, "HTTPAPI.dll!HttpCreateServerSession": 2, "HTTPAPI.dll!HttpCreateUrlGroup": 2, "HTTPAPI.dll!HttpCreateRequestQueue": 2, "HTTPAPI.dll!HttpCloseRequestQueue": 2, "HTTPAPI.dll!HttpCloseServerSession": 2, "HTTPAPI.dll!HttpTerminate": 2, "HTTPAPI.dll!HttpRemoveUrlFromUrlGroup": 2, "HTTPAPI.dll!HttpCloseUrlGroup": 2, "HTTPAPI.dll!HttpShutdownRequestQueue": 2, "HTTPAPI.dll!HttpAddUrlToUrlGroup": 5, "KERNEL32.dll!Sleep": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "KERNEL32.dll!MultiByteToWideChar": 8, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "KERNEL32.dll!LocalAlloc": 24, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "ole32.dll!CoCreateGuid": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "SHELL32.dll!SHGetKnownFolderPath": 1, "bcrypt.dll!BCryptGenRandom": 1, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptCloseAlgorithmProvider": 1, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorA": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_yield": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_trylock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\NVIDIA Overlay.exe", "sha256": "7011028937e367e222b07f9199bf6a09ea28c14035c43593fd91df9a45ea7716", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2197504, "processed_bytes": 2197504, "instructions": 1158989, "skipdata_bytes": 265 }, { "name": ".crthunk", "raw_bytes": 512, "processed_bytes": 512, "instructions": 256, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:33.198715+00:00", "instructions": 1159245, "skipdata_bytes": 265, "calls": 32441, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 23, "KERNEL32.dll!GetLastError": 144, "KERNEL32.dll!GetCurrentThreadId": 8, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 4, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 10, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 3, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 2, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 13, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 848, "api-ms-win-crt-runtime-l1-1-0.dll!_invoke_watson": 8, "KERNEL32.dll!LoadLibraryExW": 12, "SHLWAPI.dll!PathFileExistsW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 2, "USER32.dll!MessageBoxW": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 29, "KERNEL32.dll!SetDefaultDllDirectories": 2, "KERNEL32.dll!GetTickCount": 2, "KERNEL32.dll!GetModuleFileNameW": 4, "KERNEL32.dll!GetCommandLineW": 4, "api-ms-win-crt-convert-l1-1-0.dll!strtoll": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 43, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 19, "KERNEL32.dll!LocalAlloc": 26, "KERNEL32.dll!LocalFree": 75, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 61, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 69, "KERNEL32.dll!GetFileAttributesW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 17, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!CreateFileW": 6, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 83, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 18, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 7, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStartupInfoW": 2, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_exe": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_set_app_type": 1, "api-ms-win-crt-math-l1-1-0.dll!__setusermatherr": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_wide_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_wide_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_get_wide_winmain_command_line": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_exit": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_set_fmode": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_c_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_thread_local_exe_atexit_callback": 1, "api-ms-win-crt-locale-l1-1-0.dll!_configthreadlocale": 1, "api-ms-win-crt-heap-l1-1-0.dll!_set_new_mode": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__p__commode": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 37, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 12, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "KERNEL32.dll!DecodePointer": 8, "KERNEL32.dll!DeleteCriticalSection": 26, "USER32.dll!UnregisterClassW": 10, "OLEAUT32.dll!SysFreeString": 16, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 29, "KERNEL32.dll!WaitForMultipleObjects": 3, "KERNEL32.dll!CreateDirectoryW": 5, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!WaitForSingleObject": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 11, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 17, "api-ms-win-crt-string-l1-1-0.dll!tolower": 4, "KERNEL32.dll!CreateEventW": 6, "USER32.dll!AllowSetForegroundWindow": 4, "ADVAPI32.dll!RegOpenKeyExA": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 55, "ADVAPI32.dll!RegQueryValueExA": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 29, "ADVAPI32.dll!RegCloseKey": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z": 5, "KERNEL32.dll!DeleteFileW": 5, "KERNEL32.dll!RaiseException": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z": 13, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 3, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 5, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 3, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 3, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 8, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 12, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 4, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 8, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 2, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 5, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 2, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 8, "MSVCP140.dll!??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z": 3, "MSVCP140.dll!??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ": 3, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ": 3, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z": 2, "USER32.dll!AdjustWindowRectEx": 2, "KERNEL32.dll!GetModuleHandleA": 10, "api-ms-win-crt-filesystem-l1-1-0.dll!_wremove": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_wrename": 2, "ole32.dll!CoCreateInstance": 8, "SHELL32.dll!SHCreateDirectoryExW": 3, "ole32.dll!CoCreateGuid": 2, "USER32.dll!GetKeyState": 13, "USER32.dll!MapVirtualKeyA": 3, "KERNEL32.dll!GetCurrentDirectoryW": 3, "USER32.dll!GetDC": 7, "GDI32.dll!GetDeviceCaps": 3, "USER32.dll!ReleaseDC": 12, "USER32.dll!MonitorFromWindow": 5, "KERNEL32.dll!FindFirstFileW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 6, "USER32.dll!SystemParametersInfoW": 4, "USER32.dll!GetSystemMetrics": 8, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "USER32.dll!GetAsyncKeyState": 2, "KERNEL32.dll!LCIDToLocaleName": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "USER32.dll!SetWindowLongPtrW": 6, "KERNEL32.dll!OpenProcess": 4, "ole32.dll!CoTaskMemFree": 5, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 6, "OLEAUT32.dll!SysAllocString": 4, "OLEAUT32.dll!VariantInit": 9, "OLEAUT32.dll!VariantClear": 10, "SHELL32.dll!ShellExecuteExW": 3, "KERNEL32.dll!GetProcessId": 3, "KERNEL32.dll!GetCurrentThread": 2, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!DuplicateToken": 2, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!GetLengthSid": 2, "ADVAPI32.dll!InitializeAcl": 2, "ADVAPI32.dll!AddAccessAllowedAce": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!SetSecurityDescriptorGroup": 2, "ADVAPI32.dll!SetSecurityDescriptorOwner": 2, "ADVAPI32.dll!IsValidSecurityDescriptor": 2, "ADVAPI32.dll!AccessCheck": 2, "ADVAPI32.dll!FreeSid": 3, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoUninitialize": 3, "KERNEL32.dll!ResetEvent": 2, "ADVAPI32.dll!RegisterEventSourceW": 2, "ADVAPI32.dll!ReportEventW": 2, "ADVAPI32.dll!DeregisterEventSource": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z": 9, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 8, "MSVCP140.dll!?widen@?$ctype@_W@std@@QEBA_WD@Z": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 3, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 23, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 12, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 6, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 6, "MSVCP140.dll!??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z": 6, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 6, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 12, "MSVCP140.dll!??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 10, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 7, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 7, "KERNEL32.dll!MulDiv": 40, "USER32.dll!LockSetForegroundWindow": 3, "USER32.dll!GetClientRect": 11, "dwmapi.dll!DwmSetWindowAttribute": 5, "USER32.dll!LoadIconW": 9, "USER32.dll!SendMessageW": 15, "USER32.dll!CopyRect": 44, "USER32.dll!GetWindowRect": 20, "USER32.dll!GetWindowLongW": 14, "USER32.dll!GetWindowLongPtrW": 7, "USER32.dll!SetWindowLongW": 11, "USER32.dll!SetWindowPos": 18, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 3, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 11, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 4, "KERNEL32.dll!CancelIoEx": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!SleepEx": 2, "KERNEL32.dll!ReadDirectoryChangesW": 2, "USER32.dll!GetForegroundWindow": 4, "USER32.dll!GetWindowThreadProcessId": 5, "USER32.dll!AttachThreadInput": 5, "USER32.dll!SetForegroundWindow": 4, "USER32.dll!SetFocus": 7, "USER32.dll!SetActiveWindow": 2, "USER32.dll!GetWindowPlacement": 5, "USER32.dll!ShowWindow": 16, "USER32.dll!GetMonitorInfoW": 5, "USER32.dll!MonitorFromRect": 5, "SHELL32.dll!ShellExecuteW": 3, "USER32.dll!IsZoomed": 24, "USER32.dll!SetWindowTextW": 2, "USER32.dll!SetRect": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoll": 3, "api-ms-win-crt-string-l1-1-0.dll!iswalnum": 2, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 2, "MSVCP140.dll!??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 3, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 9, "KERNEL32.dll!CreateMutexW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 2, "KERNEL32.dll!ReleaseMutex": 2, "WS2_32.dll!WSAStartup": 2, "WS2_32.dll!GetAddrInfoW": 2, "WS2_32.dll!WSACleanup": 4, "WS2_32.dll!WSAAddressToStringW": 2, "WS2_32.dll!FreeAddrInfoW": 3, "ADVAPI32.dll!RegGetValueW": 4, "USER32.dll!OpenClipboard": 2, "USER32.dll!EmptyClipboard": 2, "KERNEL32.dll!GlobalAlloc": 2, "USER32.dll!CloseClipboard": 3, "KERNEL32.dll!GlobalLock": 2, "KERNEL32.dll!GlobalUnlock": 2, "USER32.dll!SetClipboardData": 2, "KERNEL32.dll!GlobalFree": 2, "USER32.dll!GetSystemMenu": 3, "USER32.dll!EnableMenuItem": 3, "SHELL32.dll!CommandLineToArgvW": 2, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z": 2, "USER32.dll!LoadImageW": 2, "USER32.dll!SetRectEmpty": 21, "USER32.dll!DestroyWindow": 8, "USER32.dll!BeginDeferWindowPos": 2, "USER32.dll!DeferWindowPos": 2, "USER32.dll!EndDeferWindowPos": 2, "USER32.dll!LoadCursorW": 4, "GDI32.dll!CreateSolidBrush": 14, "USER32.dll!RegisterClassExW": 4, "USER32.dll!SetParent": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf": 3, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy": 3, "USER32.dll!ClientToScreen": 7, "USER32.dll!GetWindowInfo": 5, "USER32.dll!CallWindowProcW": 2, "USER32.dll!DefWindowProcW": 4, "USER32.dll!RemovePropW": 3, "USER32.dll!ScreenToClient": 5, "USER32.dll!SetPropW": 4, "USER32.dll!GetPropW": 5, "USER32.dll!TrackMouseEvent": 4, "USER32.dll!CreateWindowExW": 4, "USER32.dll!CallNextHookEx": 3, "USER32.dll!SetWindowsHookExW": 2, "USER32.dll!UnhookWindowsHookEx": 2, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 3, "GDI32.dll!CreateCompatibleDC": 6, "GDI32.dll!CreateCompatibleBitmap": 4, "GDI32.dll!SelectObject": 27, "GDI32.dll!DeleteObject": 47, "GDI32.dll!BitBlt": 4, "GDI32.dll!DeleteDC": 6, "USER32.dll!GetMenu": 4, "USER32.dll!GetMenuItemCount": 2, "USER32.dll!GetMenuItemRect": 2, "USER32.dll!UnionRect": 2, "USER32.dll!DrawTextExW": 4, "USER32.dll!DrawTextW": 4, "GDI32.dll!CreateDIBSection": 2, "GDI32.dll!SetTextColor": 4, "GDI32.dll!SetBkColor": 2, "GDI32.dll!SetBkMode": 4, "GDI32.dll!Rectangle": 2, "GDI32.dll!MoveToEx": 2, "GDI32.dll!LineTo": 2, "USER32.dll!FillRect": 5, "USER32.dll!GetMenuBarInfo": 3, "USER32.dll!GetMenuInfo": 2, "USER32.dll!SetMenuInfo": 2, "KERNEL32.dll!FindResourceW": 3, "KERNEL32.dll!LoadResource": 3, "KERNEL32.dll!LockResource": 3, "KERNEL32.dll!SizeofResource": 3, "SHLWAPI.dll!#12": 2, "USER32.dll!GetDCEx": 3, "USER32.dll!GetWindowDC": 6, "USER32.dll!GetMenuStringW": 3, "USER32.dll!PtInRect": 13, "USER32.dll!TrackPopupMenuEx": 2, "USER32.dll!PostMessageW": 3, "GDI32.dll!ExcludeClipRect": 3, "GDI32.dll!CreatePen": 6, "GDI32.dll!CreateFontIndirectW": 3, "UxTheme.dll!SetWindowTheme": 2, "USER32.dll!IsIconic": 5, "GDI32.dll!CreateRectRgnIndirect": 3, "GDI32.dll!SelectClipRgn": 3, "USER32.dll!GetWindowTextW": 3, "GDI32.dll!GetObjectW": 2, "MSIMG32.dll!AlphaBlend": 2, "USER32.dll!RedrawWindow": 2, "USER32.dll!GetWindow": 3, "USER32.dll!LoadStringW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcstok_s": 3, "KERNEL32.dll!UnmapViewOfFile": 2, "api-ms-win-crt-convert-l1-1-0.dll!mbstowcs": 3, "USER32.dll!RegisterWindowMessageW": 2, "USER32.dll!SetLayeredWindowAttributes": 2, "USER32.dll!UpdateWindow": 5, "GDI32.dll!CreateRectRgn": 3, "dwmapi.dll!DwmEnableBlurBehindWindow": 3, "USER32.dll!RegisterRawInputDevices": 2, "USER32.dll!IsWindow": 7, "USER32.dll!MonitorFromPoint": 2, "USER32.dll!SetClassLongPtrW": 3, "USER32.dll!SetCursor": 2, "USER32.dll!GetMessageTime": 2, "USER32.dll!GetDoubleClickTime": 2, "USER32.dll!GetCursorPos": 2, "USER32.dll!BeginPaint": 2, "USER32.dll!EndPaint": 2, "USER32.dll!GetRawInputData": 3, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!GetSystemInfo": 2, "USER32.dll!EnableWindow": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z": 2, "KERNEL32.dll!GetProcessTimes": 2, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!FormatMessageA": 3, "api-ms-win-crt-string-l1-1-0.dll!isspace": 3, "libcef.dll!cef_get_min_log_level": 1, "libcef.dll!cef_string_utf16_set": 1, "libcef.dll!cef_string_utf8_clear": 1, "libcef.dll!cef_string_utf16_clear": 1, "libcef.dll!cef_string_utf16_cmp": 1, "libcef.dll!cef_string_utf8_to_utf16": 1, "libcef.dll!cef_string_utf16_to_utf8": 1, "libcef.dll!cef_time_now": 1, "libcef.dll!cef_time_delta": 1, "libcef.dll!cef_log": 1, "libcef.dll!cef_string_wide_to_utf8": 1, "libcef.dll!cef_string_userfree_utf16_free": 1, "libcef.dll!cef_process_message_create": 1, "libcef.dll!cef_string_list_alloc": 1, "libcef.dll!cef_string_list_free": 1, "libcef.dll!cef_string_map_alloc": 1, "libcef.dll!cef_string_map_free": 1, "libcef.dll!cef_command_line_create": 1, "libcef.dll!cef_command_line_get_global": 1, "libcef.dll!cef_api_hash": 1, "libcef.dll!cef_is_cert_status_error": 1, "libcef.dll!cef_currently_on": 1, "libcef.dll!cef_post_task": 1, "libcef.dll!cef_post_delayed_task": 1, "libcef.dll!cef_register_extension": 1, "libcef.dll!cef_register_scheme_handler_factory": 1, "libcef.dll!cef_clear_scheme_handler_factories": 1, "libcef.dll!cef_execute_process": 1, "libcef.dll!cef_initialize": 1, "libcef.dll!cef_get_exit_code": 1, "libcef.dll!cef_shutdown": 1, "libcef.dll!cef_do_message_loop_work": 1, "libcef.dll!cef_run_message_loop": 1, "libcef.dll!cef_quit_message_loop": 1, "libcef.dll!cef_crash_reporting_enabled": 1, "libcef.dll!cef_set_crash_key_value": 1, "libcef.dll!cef_create_directory": 1, "libcef.dll!cef_get_temp_directory": 1, "libcef.dll!cef_create_new_temp_directory": 1, "libcef.dll!cef_create_temp_directory_in_directory": 1, "libcef.dll!cef_directory_exists": 1, "libcef.dll!cef_delete_file": 1, "libcef.dll!cef_zip_directory": 1, "libcef.dll!cef_load_crlsets_file": 1, "libcef.dll!cef_is_rtl": 1, "libcef.dll!cef_add_cross_origin_whitelist_entry": 1, "libcef.dll!cef_remove_cross_origin_whitelist_entry": 1, "libcef.dll!cef_clear_cross_origin_whitelist": 1, "libcef.dll!cef_resolve_url": 1, "libcef.dll!cef_parse_url": 1, "libcef.dll!cef_create_url": 1, "libcef.dll!cef_format_url_for_security_display": 1, "libcef.dll!cef_get_mime_type": 1, "libcef.dll!cef_get_extensions_for_mime_type": 1, "libcef.dll!cef_base64encode": 1, "libcef.dll!cef_base64decode": 1, "libcef.dll!cef_uriencode": 1, "libcef.dll!cef_uridecode": 1, "libcef.dll!cef_parse_json": 1, "libcef.dll!cef_parse_json_buffer": 1, "libcef.dll!cef_parse_jsonand_return_error": 1, "libcef.dll!cef_write_json": 1, "libcef.dll!cef_get_path": 1, "libcef.dll!cef_launch_process": 1, "libcef.dll!cef_begin_tracing": 1, "libcef.dll!cef_end_tracing": 1, "libcef.dll!cef_now_from_system_trace_time": 1, "libcef.dll!cef_execute_java_script_with_user_gesture_for_tests": 1, "libcef.dll!cef_set_data_directory_for_tests": 1, "libcef.dll!cef_is_feature_enabled_for_tests": 1, "libcef.dll!cef_dictionary_value_create": 1, "libcef.dll!cef_list_value_create": 1, "libcef.dll!cef_value_create": 1, "libcef.dll!cef_cookie_manager_get_global_manager": 1, "libcef.dll!cef_browser_host_create_browser": 1, "libcef.dll!cef_browser_host_create_browser_sync": 1, "libcef.dll!cef_stream_reader_create_for_file": 1, "libcef.dll!cef_stream_reader_create_for_data": 1, "libcef.dll!cef_stream_reader_create_for_handler": 1, "libcef.dll!cef_string_multimap_alloc": 1, "libcef.dll!cef_string_multimap_free": 1, "libcef.dll!cef_server_create": 1, "libcef.dll!cef_drag_data_create": 1, "libcef.dll!cef_string_list_size": 1, "libcef.dll!cef_string_list_value": 1, "libcef.dll!cef_string_list_append": 1, "libcef.dll!cef_string_map_size": 1, "libcef.dll!cef_string_map_key": 1, "libcef.dll!cef_string_map_value": 1, "libcef.dll!cef_string_map_append": 1, "libcef.dll!cef_string_multimap_size": 1, "libcef.dll!cef_string_multimap_key": 1, "libcef.dll!cef_string_multimap_value": 1, "libcef.dll!cef_string_multimap_append": 1, "libcef.dll!cef_binary_value_create": 1, "libcef.dll!cef_v8context_get_current_context": 1, "libcef.dll!cef_v8context_get_entered_context": 1, "libcef.dll!cef_v8context_in_context": 1, "libcef.dll!cef_v8value_create_undefined": 1, "libcef.dll!cef_v8value_create_null": 1, "libcef.dll!cef_v8value_create_bool": 1, "libcef.dll!cef_v8value_create_int": 1, "libcef.dll!cef_v8value_create_uint": 1, "libcef.dll!cef_v8value_create_double": 1, "libcef.dll!cef_v8value_create_date": 1, "libcef.dll!cef_v8value_create_string": 1, "libcef.dll!cef_v8value_create_object": 1, "libcef.dll!cef_v8value_create_array": 1, "libcef.dll!cef_v8value_create_array_buffer": 1, "libcef.dll!cef_v8value_create_array_buffer_with_copy": 1, "libcef.dll!cef_v8value_create_function": 1, "libcef.dll!cef_v8value_create_promise": 1, "libcef.dll!cef_request_context_get_global_context": 1, "libcef.dll!cef_request_context_create_context": 1, "libcef.dll!cef_create_context_shared": 1, "libcef.dll!cef_task_runner_get_for_current_thread": 1, "libcef.dll!cef_task_runner_get_for_thread": 1, "libcef.dll!cef_image_create": 1, "libcef.dll!cef_stream_writer_create_for_file": 1, "libcef.dll!cef_stream_writer_create_for_handler": 1, "libcef.dll!cef_request_create": 1, "libcef.dll!cef_urlrequest_create": 1, "libcef.dll!cef_shared_process_message_builder_create": 1, "libcef.dll!cef_media_router_get_global": 1, "libcef.dll!cef_v8stack_trace_get_current": 1, "libcef.dll!cef_response_create": 1, "libcef.dll!cef_post_data_create": 1, "libcef.dll!cef_menu_model_create": 1, "libcef.dll!cef_print_settings_create": 1, "libcef.dll!cef_post_data_element_create": 1, "KERNEL32.dll!VirtualProtect": 4, "KERNEL32.dll!GetVersionExW": 3, "KERNEL32.dll!ReadProcessMemory": 2, "KERNEL32.dll!WriteProcessMemory": 4, "KERNEL32.dll!VirtualProtectEx": 3, "urlmon.dll!URLDownloadToFileW": 1, "d3d11.dll!D3D11CreateDevice": 1, "D3DCOMPILER_47.dll!D3DCompile": 1, "WS2_32.dll!WSAGetLastError": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "OLEACC.dll!LresultFromObject": 1, "OLEACC.dll!AccessibleObjectFromWindow": 1, "UIAutomationCore.DLL!UiaReturnRawElementProvider": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "gdiplus.dll!GdipAlloc": 1, "gdiplus.dll!GdipFree": 1, "gdiplus.dll!GdiplusStartup": 1, "gdiplus.dll!GdiplusShutdown": 1, "gdiplus.dll!GdipLoadImageFromStream": 1, "gdiplus.dll!GdipLoadImageFromFile": 1, "gdiplus.dll!GdipLoadImageFromStreamICM": 1, "gdiplus.dll!GdipLoadImageFromFileICM": 1, "gdiplus.dll!GdipCloneImage": 1, "gdiplus.dll!GdipDisposeImage": 1, "gdiplus.dll!GdipGetImageWidth": 1, "gdiplus.dll!GdipGetImageHeight": 1, "gdiplus.dll!GdipCreateFromHDC": 1, "gdiplus.dll!GdipDeleteGraphics": 1, "gdiplus.dll!GdipSetSmoothingMode": 1, "gdiplus.dll!GdipDrawImageRectI": 1, "gdiplus.dll!GdipNewPrivateFontCollection": 1, "gdiplus.dll!GdipDeletePrivateFontCollection": 1, "gdiplus.dll!GdipPrivateAddMemoryFont": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileAttributesW": 2, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!WideCharToMultiByte": 6, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!floorf": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!log": 1, "api-ms-win-crt-math-l1-1-0.dll!logf": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "SHLWAPI.dll!#219": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayPutElement": 2, "OLEAUT32.dll!SafeArrayDestroy": 2, "USER32.dll!GetFocus": 2, "USER32.dll!GetParent": 2, "ole32.dll!CoAddRefServerProcess": 2, "ole32.dll!CoReleaseServerProcess": 2, "USER32.dll!PostThreadMessageW": 2, "USER32.dll!WaitForInputIdle": 2, "USER32.dll!IsWindowEnabled": 2, "api-ms-win-crt-string-l1-1-0.dll!strncpy": 2, "UIAutomationCore.DLL!UiaHostProviderFromHwnd": 1, "KERNEL32.dll!GetTempPathW": 1, "api-ms-win-crt-math-l1-1-0.dll!sqrt": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\NVIDIA App.exe", "sha256": "0f166e95144447c5317d92b2e74f58507cccab17033588b486f40b026f932ceb", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2198016, "processed_bytes": 2198016, "instructions": 1159276, "skipdata_bytes": 292 }, { "name": ".crthunk", "raw_bytes": 512, "processed_bytes": 512, "instructions": 256, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:40:34.521438+00:00", "instructions": 1159532, "skipdata_bytes": 292, "calls": 32447, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 23, "KERNEL32.dll!GetLastError": 144, "KERNEL32.dll!GetCurrentThreadId": 8, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 4, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 10, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 3, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 2, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 13, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 848, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!CloseHandle": 84, "api-ms-win-crt-runtime-l1-1-0.dll!_invoke_watson": 8, "KERNEL32.dll!LoadLibraryExW": 12, "SHLWAPI.dll!PathFileExistsW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 2, "USER32.dll!MessageBoxW": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 29, "KERNEL32.dll!SetDefaultDllDirectories": 2, "KERNEL32.dll!GetTickCount": 2, "KERNEL32.dll!GetModuleFileNameW": 4, "KERNEL32.dll!GetCommandLineW": 4, "api-ms-win-crt-convert-l1-1-0.dll!strtoll": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 43, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 19, "KERNEL32.dll!LocalAlloc": 26, "KERNEL32.dll!LocalFree": 75, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 61, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 69, "KERNEL32.dll!GetFileAttributesW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 17, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!CreateFileW": 6, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 18, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 7, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetStartupInfoW": 2, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_exe": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_set_app_type": 1, "api-ms-win-crt-math-l1-1-0.dll!__setusermatherr": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_wide_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_wide_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_get_wide_winmain_command_line": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_exit": 1, "api-ms-win-crt-stdio-l1-1-0.dll!_set_fmode": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_c_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_thread_local_exe_atexit_callback": 1, "api-ms-win-crt-locale-l1-1-0.dll!_configthreadlocale": 1, "api-ms-win-crt-heap-l1-1-0.dll!_set_new_mode": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__p__commode": 1, "api-ms-win-crt-heap-l1-1-0.dll!free": 37, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 12, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 3, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "KERNEL32.dll!DecodePointer": 8, "KERNEL32.dll!DeleteCriticalSection": 26, "USER32.dll!UnregisterClassW": 10, "OLEAUT32.dll!SysFreeString": 16, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 29, "KERNEL32.dll!WaitForMultipleObjects": 3, "KERNEL32.dll!CreateDirectoryW": 5, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!WaitForSingleObject": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 11, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 17, "api-ms-win-crt-string-l1-1-0.dll!tolower": 4, "KERNEL32.dll!CreateEventW": 6, "USER32.dll!AllowSetForegroundWindow": 4, "ADVAPI32.dll!RegOpenKeyExA": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 55, "ADVAPI32.dll!RegQueryValueExA": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 29, "ADVAPI32.dll!RegCloseKey": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z": 5, "KERNEL32.dll!DeleteFileW": 5, "KERNEL32.dll!RaiseException": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z": 13, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 3, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 5, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 3, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 3, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 8, "MSVCP140.dll!??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 12, "MSVCP140.dll!??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 4, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 8, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 2, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 5, "MSVCP140.dll!?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ": 2, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 8, "MSVCP140.dll!??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z": 3, "MSVCP140.dll!??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ": 3, "MSVCP140.dll!?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ": 3, "MSVCP140.dll!?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z": 2, "USER32.dll!AdjustWindowRectEx": 2, "KERNEL32.dll!GetModuleHandleA": 10, "api-ms-win-crt-filesystem-l1-1-0.dll!_wremove": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_wrename": 2, "ole32.dll!CoCreateInstance": 8, "SHELL32.dll!SHCreateDirectoryExW": 3, "ole32.dll!CoCreateGuid": 2, "USER32.dll!GetKeyState": 13, "USER32.dll!MapVirtualKeyA": 3, "KERNEL32.dll!GetCurrentDirectoryW": 3, "USER32.dll!GetDC": 7, "GDI32.dll!GetDeviceCaps": 3, "USER32.dll!ReleaseDC": 12, "USER32.dll!MonitorFromWindow": 5, "KERNEL32.dll!FindFirstFileW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 6, "USER32.dll!SystemParametersInfoW": 4, "USER32.dll!GetSystemMetrics": 8, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "USER32.dll!GetAsyncKeyState": 2, "KERNEL32.dll!LCIDToLocaleName": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "USER32.dll!SetWindowLongPtrW": 6, "KERNEL32.dll!OpenProcess": 4, "ole32.dll!CoTaskMemFree": 5, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 6, "OLEAUT32.dll!SysAllocString": 4, "OLEAUT32.dll!VariantInit": 9, "OLEAUT32.dll!VariantClear": 10, "SHELL32.dll!ShellExecuteExW": 3, "KERNEL32.dll!GetProcessId": 3, "KERNEL32.dll!GetCurrentThread": 2, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!DuplicateToken": 2, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!GetLengthSid": 2, "ADVAPI32.dll!InitializeAcl": 2, "ADVAPI32.dll!AddAccessAllowedAce": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!SetSecurityDescriptorGroup": 2, "ADVAPI32.dll!SetSecurityDescriptorOwner": 2, "ADVAPI32.dll!IsValidSecurityDescriptor": 2, "ADVAPI32.dll!AccessCheck": 2, "ADVAPI32.dll!FreeSid": 3, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoUninitialize": 3, "KERNEL32.dll!ResetEvent": 2, "ADVAPI32.dll!RegisterEventSourceW": 2, "ADVAPI32.dll!ReportEventW": 2, "ADVAPI32.dll!DeregisterEventSource": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z": 9, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 8, "MSVCP140.dll!?widen@?$ctype@_W@std@@QEBA_WD@Z": 2, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 3, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 3, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 23, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 12, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 6, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 6, "MSVCP140.dll!??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z": 6, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 6, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 12, "MSVCP140.dll!??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 10, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 7, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 7, "KERNEL32.dll!MulDiv": 40, "USER32.dll!LockSetForegroundWindow": 3, "USER32.dll!GetClientRect": 11, "dwmapi.dll!DwmSetWindowAttribute": 5, "USER32.dll!LoadIconW": 9, "USER32.dll!SendMessageW": 15, "USER32.dll!CopyRect": 44, "USER32.dll!GetWindowRect": 20, "USER32.dll!GetWindowLongW": 14, "USER32.dll!GetWindowLongPtrW": 7, "USER32.dll!SetWindowLongW": 11, "USER32.dll!SetWindowPos": 18, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 3, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 11, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 4, "KERNEL32.dll!CancelIoEx": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!SleepEx": 2, "KERNEL32.dll!ReadDirectoryChangesW": 2, "USER32.dll!GetForegroundWindow": 4, "USER32.dll!GetWindowThreadProcessId": 5, "USER32.dll!AttachThreadInput": 5, "USER32.dll!SetForegroundWindow": 4, "USER32.dll!SetFocus": 7, "USER32.dll!SetActiveWindow": 2, "USER32.dll!GetWindowPlacement": 5, "USER32.dll!ShowWindow": 16, "USER32.dll!GetMonitorInfoW": 5, "USER32.dll!MonitorFromRect": 5, "SHELL32.dll!ShellExecuteW": 3, "USER32.dll!IsZoomed": 24, "USER32.dll!SetWindowTextW": 2, "USER32.dll!SetRect": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoll": 3, "api-ms-win-crt-string-l1-1-0.dll!iswalnum": 2, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 2, "MSVCP140.dll!??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 3, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 9, "KERNEL32.dll!CreateMutexW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 2, "KERNEL32.dll!ReleaseMutex": 2, "WS2_32.dll!WSAStartup": 2, "WS2_32.dll!GetAddrInfoW": 2, "WS2_32.dll!WSACleanup": 4, "WS2_32.dll!WSAAddressToStringW": 2, "WS2_32.dll!FreeAddrInfoW": 3, "ADVAPI32.dll!RegGetValueW": 4, "USER32.dll!OpenClipboard": 2, "USER32.dll!EmptyClipboard": 2, "KERNEL32.dll!GlobalAlloc": 2, "USER32.dll!CloseClipboard": 3, "KERNEL32.dll!GlobalLock": 2, "KERNEL32.dll!GlobalUnlock": 2, "USER32.dll!SetClipboardData": 2, "KERNEL32.dll!GlobalFree": 2, "USER32.dll!GetSystemMenu": 3, "USER32.dll!EnableMenuItem": 3, "SHELL32.dll!CommandLineToArgvW": 2, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z": 2, "USER32.dll!LoadImageW": 2, "USER32.dll!SetRectEmpty": 21, "USER32.dll!DestroyWindow": 8, "USER32.dll!BeginDeferWindowPos": 2, "USER32.dll!DeferWindowPos": 2, "USER32.dll!EndDeferWindowPos": 2, "USER32.dll!LoadCursorW": 4, "GDI32.dll!CreateSolidBrush": 14, "USER32.dll!RegisterClassExW": 4, "USER32.dll!SetParent": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf": 3, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy": 3, "USER32.dll!ClientToScreen": 7, "USER32.dll!GetWindowInfo": 5, "USER32.dll!CallWindowProcW": 2, "USER32.dll!DefWindowProcW": 4, "USER32.dll!RemovePropW": 3, "USER32.dll!ScreenToClient": 5, "USER32.dll!SetPropW": 4, "USER32.dll!GetPropW": 5, "USER32.dll!TrackMouseEvent": 4, "USER32.dll!CreateWindowExW": 4, "USER32.dll!CallNextHookEx": 3, "USER32.dll!SetWindowsHookExW": 2, "USER32.dll!UnhookWindowsHookEx": 2, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 3, "GDI32.dll!CreateCompatibleDC": 6, "GDI32.dll!CreateCompatibleBitmap": 4, "GDI32.dll!SelectObject": 27, "GDI32.dll!DeleteObject": 47, "GDI32.dll!BitBlt": 4, "GDI32.dll!DeleteDC": 6, "USER32.dll!GetMenu": 4, "USER32.dll!GetMenuItemCount": 2, "USER32.dll!GetMenuItemRect": 2, "USER32.dll!UnionRect": 2, "USER32.dll!DrawTextExW": 4, "USER32.dll!DrawTextW": 4, "GDI32.dll!CreateDIBSection": 2, "GDI32.dll!SetTextColor": 4, "GDI32.dll!SetBkColor": 2, "GDI32.dll!SetBkMode": 4, "GDI32.dll!Rectangle": 2, "GDI32.dll!MoveToEx": 2, "GDI32.dll!LineTo": 2, "USER32.dll!FillRect": 5, "USER32.dll!GetMenuBarInfo": 3, "USER32.dll!GetMenuInfo": 2, "USER32.dll!SetMenuInfo": 2, "KERNEL32.dll!FindResourceW": 3, "KERNEL32.dll!LoadResource": 3, "KERNEL32.dll!LockResource": 3, "KERNEL32.dll!SizeofResource": 3, "SHLWAPI.dll!#12": 2, "USER32.dll!GetDCEx": 3, "USER32.dll!GetWindowDC": 6, "USER32.dll!GetMenuStringW": 3, "USER32.dll!PtInRect": 13, "USER32.dll!TrackPopupMenuEx": 2, "USER32.dll!PostMessageW": 3, "GDI32.dll!ExcludeClipRect": 3, "GDI32.dll!CreatePen": 6, "GDI32.dll!CreateFontIndirectW": 3, "UxTheme.dll!SetWindowTheme": 2, "USER32.dll!IsIconic": 5, "GDI32.dll!CreateRectRgnIndirect": 3, "GDI32.dll!SelectClipRgn": 3, "USER32.dll!GetWindowTextW": 3, "GDI32.dll!GetObjectW": 2, "MSIMG32.dll!AlphaBlend": 2, "USER32.dll!RedrawWindow": 2, "USER32.dll!GetWindow": 3, "USER32.dll!LoadStringW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcstok_s": 3, "KERNEL32.dll!UnmapViewOfFile": 2, "api-ms-win-crt-convert-l1-1-0.dll!mbstowcs": 3, "USER32.dll!RegisterWindowMessageW": 2, "USER32.dll!SetLayeredWindowAttributes": 2, "USER32.dll!UpdateWindow": 5, "GDI32.dll!CreateRectRgn": 3, "dwmapi.dll!DwmEnableBlurBehindWindow": 3, "USER32.dll!RegisterRawInputDevices": 2, "USER32.dll!IsWindow": 7, "USER32.dll!MonitorFromPoint": 2, "USER32.dll!SetClassLongPtrW": 3, "USER32.dll!SetCursor": 2, "USER32.dll!GetMessageTime": 2, "USER32.dll!GetDoubleClickTime": 2, "USER32.dll!GetCursorPos": 2, "USER32.dll!BeginPaint": 2, "USER32.dll!EndPaint": 2, "USER32.dll!GetRawInputData": 3, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!GetSystemInfo": 2, "USER32.dll!EnableWindow": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z": 2, "KERNEL32.dll!GetProcessTimes": 2, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!FormatMessageA": 3, "api-ms-win-crt-string-l1-1-0.dll!isspace": 3, "libcef.dll!cef_get_min_log_level": 1, "libcef.dll!cef_string_utf16_set": 1, "libcef.dll!cef_string_utf8_clear": 1, "libcef.dll!cef_string_utf16_clear": 1, "libcef.dll!cef_string_utf16_cmp": 1, "libcef.dll!cef_string_utf8_to_utf16": 1, "libcef.dll!cef_string_utf16_to_utf8": 1, "libcef.dll!cef_time_now": 1, "libcef.dll!cef_time_delta": 1, "libcef.dll!cef_log": 1, "libcef.dll!cef_string_wide_to_utf8": 1, "libcef.dll!cef_string_userfree_utf16_free": 1, "libcef.dll!cef_process_message_create": 1, "libcef.dll!cef_string_list_alloc": 1, "libcef.dll!cef_string_list_free": 1, "libcef.dll!cef_string_map_alloc": 1, "libcef.dll!cef_string_map_free": 1, "libcef.dll!cef_command_line_create": 1, "libcef.dll!cef_command_line_get_global": 1, "libcef.dll!cef_api_hash": 1, "libcef.dll!cef_is_cert_status_error": 1, "libcef.dll!cef_currently_on": 1, "libcef.dll!cef_post_task": 1, "libcef.dll!cef_post_delayed_task": 1, "libcef.dll!cef_register_extension": 1, "libcef.dll!cef_register_scheme_handler_factory": 1, "libcef.dll!cef_clear_scheme_handler_factories": 1, "libcef.dll!cef_execute_process": 1, "libcef.dll!cef_initialize": 1, "libcef.dll!cef_get_exit_code": 1, "libcef.dll!cef_shutdown": 1, "libcef.dll!cef_do_message_loop_work": 1, "libcef.dll!cef_run_message_loop": 1, "libcef.dll!cef_quit_message_loop": 1, "libcef.dll!cef_crash_reporting_enabled": 1, "libcef.dll!cef_set_crash_key_value": 1, "libcef.dll!cef_create_directory": 1, "libcef.dll!cef_get_temp_directory": 1, "libcef.dll!cef_create_new_temp_directory": 1, "libcef.dll!cef_create_temp_directory_in_directory": 1, "libcef.dll!cef_directory_exists": 1, "libcef.dll!cef_delete_file": 1, "libcef.dll!cef_zip_directory": 1, "libcef.dll!cef_load_crlsets_file": 1, "libcef.dll!cef_is_rtl": 1, "libcef.dll!cef_add_cross_origin_whitelist_entry": 1, "libcef.dll!cef_remove_cross_origin_whitelist_entry": 1, "libcef.dll!cef_clear_cross_origin_whitelist": 1, "libcef.dll!cef_resolve_url": 1, "libcef.dll!cef_parse_url": 1, "libcef.dll!cef_create_url": 1, "libcef.dll!cef_format_url_for_security_display": 1, "libcef.dll!cef_get_mime_type": 1, "libcef.dll!cef_get_extensions_for_mime_type": 1, "libcef.dll!cef_base64encode": 1, "libcef.dll!cef_base64decode": 1, "libcef.dll!cef_uriencode": 1, "libcef.dll!cef_uridecode": 1, "libcef.dll!cef_parse_json": 1, "libcef.dll!cef_parse_json_buffer": 1, "libcef.dll!cef_parse_jsonand_return_error": 1, "libcef.dll!cef_write_json": 1, "libcef.dll!cef_get_path": 1, "libcef.dll!cef_launch_process": 1, "libcef.dll!cef_begin_tracing": 1, "libcef.dll!cef_end_tracing": 1, "libcef.dll!cef_now_from_system_trace_time": 1, "libcef.dll!cef_execute_java_script_with_user_gesture_for_tests": 1, "libcef.dll!cef_set_data_directory_for_tests": 1, "libcef.dll!cef_is_feature_enabled_for_tests": 1, "libcef.dll!cef_dictionary_value_create": 1, "libcef.dll!cef_list_value_create": 1, "libcef.dll!cef_value_create": 1, "libcef.dll!cef_cookie_manager_get_global_manager": 1, "libcef.dll!cef_browser_host_create_browser": 1, "libcef.dll!cef_browser_host_create_browser_sync": 1, "libcef.dll!cef_stream_reader_create_for_file": 1, "libcef.dll!cef_stream_reader_create_for_data": 1, "libcef.dll!cef_stream_reader_create_for_handler": 1, "libcef.dll!cef_string_multimap_alloc": 1, "libcef.dll!cef_string_multimap_free": 1, "libcef.dll!cef_server_create": 1, "libcef.dll!cef_drag_data_create": 1, "libcef.dll!cef_string_list_size": 1, "libcef.dll!cef_string_list_value": 1, "libcef.dll!cef_string_list_append": 1, "libcef.dll!cef_string_map_size": 1, "libcef.dll!cef_string_map_key": 1, "libcef.dll!cef_string_map_value": 1, "libcef.dll!cef_string_map_append": 1, "libcef.dll!cef_string_multimap_size": 1, "libcef.dll!cef_string_multimap_key": 1, "libcef.dll!cef_string_multimap_value": 1, "libcef.dll!cef_string_multimap_append": 1, "libcef.dll!cef_binary_value_create": 1, "libcef.dll!cef_v8context_get_current_context": 1, "libcef.dll!cef_v8context_get_entered_context": 1, "libcef.dll!cef_v8context_in_context": 1, "libcef.dll!cef_v8value_create_undefined": 1, "libcef.dll!cef_v8value_create_null": 1, "libcef.dll!cef_v8value_create_bool": 1, "libcef.dll!cef_v8value_create_int": 1, "libcef.dll!cef_v8value_create_uint": 1, "libcef.dll!cef_v8value_create_double": 1, "libcef.dll!cef_v8value_create_date": 1, "libcef.dll!cef_v8value_create_string": 1, "libcef.dll!cef_v8value_create_object": 1, "libcef.dll!cef_v8value_create_array": 1, "libcef.dll!cef_v8value_create_array_buffer": 1, "libcef.dll!cef_v8value_create_array_buffer_with_copy": 1, "libcef.dll!cef_v8value_create_function": 1, "libcef.dll!cef_v8value_create_promise": 1, "libcef.dll!cef_request_context_get_global_context": 1, "libcef.dll!cef_request_context_create_context": 1, "libcef.dll!cef_create_context_shared": 1, "libcef.dll!cef_task_runner_get_for_current_thread": 1, "libcef.dll!cef_task_runner_get_for_thread": 1, "libcef.dll!cef_image_create": 1, "libcef.dll!cef_stream_writer_create_for_file": 1, "libcef.dll!cef_stream_writer_create_for_handler": 1, "libcef.dll!cef_request_create": 1, "libcef.dll!cef_urlrequest_create": 1, "libcef.dll!cef_shared_process_message_builder_create": 1, "libcef.dll!cef_media_router_get_global": 1, "libcef.dll!cef_v8stack_trace_get_current": 1, "libcef.dll!cef_response_create": 1, "libcef.dll!cef_post_data_create": 1, "libcef.dll!cef_menu_model_create": 1, "libcef.dll!cef_print_settings_create": 1, "libcef.dll!cef_post_data_element_create": 1, "KERNEL32.dll!VirtualProtect": 4, "KERNEL32.dll!GetVersionExW": 3, "KERNEL32.dll!ReadProcessMemory": 2, "KERNEL32.dll!WriteProcessMemory": 4, "KERNEL32.dll!VirtualProtectEx": 3, "urlmon.dll!URLDownloadToFileW": 1, "d3d11.dll!D3D11CreateDevice": 1, "D3DCOMPILER_47.dll!D3DCompile": 1, "WS2_32.dll!WSAGetLastError": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "OLEACC.dll!LresultFromObject": 1, "OLEACC.dll!AccessibleObjectFromWindow": 1, "UIAutomationCore.DLL!UiaReturnRawElementProvider": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "gdiplus.dll!GdipAlloc": 1, "gdiplus.dll!GdipFree": 1, "gdiplus.dll!GdiplusStartup": 1, "gdiplus.dll!GdiplusShutdown": 1, "gdiplus.dll!GdipLoadImageFromStream": 1, "gdiplus.dll!GdipLoadImageFromFile": 1, "gdiplus.dll!GdipLoadImageFromStreamICM": 1, "gdiplus.dll!GdipLoadImageFromFileICM": 1, "gdiplus.dll!GdipCloneImage": 1, "gdiplus.dll!GdipDisposeImage": 1, "gdiplus.dll!GdipGetImageWidth": 1, "gdiplus.dll!GdipGetImageHeight": 1, "gdiplus.dll!GdipCreateFromHDC": 1, "gdiplus.dll!GdipDeleteGraphics": 1, "gdiplus.dll!GdipSetSmoothingMode": 1, "gdiplus.dll!GdipDrawImageRectI": 1, "gdiplus.dll!GdipNewPrivateFontCollection": 1, "gdiplus.dll!GdipDeletePrivateFontCollection": 1, "gdiplus.dll!GdipPrivateAddMemoryFont": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileAttributesW": 2, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!WideCharToMultiByte": 6, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!floorf": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!log": 1, "api-ms-win-crt-math-l1-1-0.dll!logf": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "SHLWAPI.dll!#219": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "OLEAUT32.dll!SafeArrayPutElement": 2, "OLEAUT32.dll!SafeArrayDestroy": 2, "USER32.dll!GetFocus": 2, "USER32.dll!GetParent": 2, "ole32.dll!CoAddRefServerProcess": 2, "ole32.dll!CoReleaseServerProcess": 2, "USER32.dll!PostThreadMessageW": 2, "USER32.dll!WaitForInputIdle": 2, "USER32.dll!IsWindowEnabled": 2, "api-ms-win-crt-string-l1-1-0.dll!strncpy": 2, "UIAutomationCore.DLL!UiaHostProviderFromHwnd": 1, "KERNEL32.dll!GetTempPathW": 1, "api-ms-win-crt-math-l1-1-0.dll!sqrt": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\oc\\_OverClockingNvc.dll", "sha256": "34bf6504e387f5e00ad3d662b90a2ec23a124794352af02fbcd504d3d573a39d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2244608, "processed_bytes": 2244608, "instructions": 1147284, "skipdata_bytes": 421 } ], "utc": "2026-11-11T21:40:34.676010+00:00", "instructions": 1147284, "skipdata_bytes": 421, "calls": 31024, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 8, "KERNEL32.dll!InitializeCriticalSectionEx": 16, "KERNEL32.dll!GetLastError": 141, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 15, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 859, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 29, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 27, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 17, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 10, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 34, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 54, "api-ms-win-crt-heap-l1-1-0.dll!free": 398, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 8, "KERNEL32.dll!DeleteCriticalSection": 21, "USER32.dll!UnregisterClassW": 9, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 5, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 44, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 3, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegCloseKey": 6, "ADVAPI32.dll!RegOpenKeyExW": 7, "ADVAPI32.dll!RegQueryValueExW": 6, "ADVAPI32.dll!RegSetValueExW": 2, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 53, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "KERNEL32.dll!GetProcAddress": 55, "KERNEL32.dll!FreeLibrary": 22, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 70, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 9, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 61, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "KERNEL32.dll!ProcessIdToSessionId": 3, "ADVAPI32.dll!DuplicateToken": 2, "ADVAPI32.dll!ImpersonateLoggedOnUser": 2, "ADVAPI32.dll!GetUserNameW": 2, "ADVAPI32.dll!RevertToSelf": 2, "ADVAPI32.dll!LookupAccountNameW": 2, "KERNEL32.dll!WaitForSingleObject": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "WTSAPI32.dll!WTSQuerySessionInformationW": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "WTSAPI32.dll!WTSQueryUserToken": 1, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvAccount.dll", "sha256": "473c1ea63f0a9a923303f7a03315eb285ad48326fd1f23f3e67685bb464dbe44", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2312192, "processed_bytes": 2312192, "instructions": 1159397, "skipdata_bytes": 972 } ], "utc": "2026-11-11T21:40:34.803110+00:00", "instructions": 1159397, "skipdata_bytes": 972, "calls": 31480, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 19, "KERNEL32.dll!InitializeCriticalSectionEx": 38, "KERNEL32.dll!GetLastError": 154, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 15, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 9, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 35, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 11, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 6, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 4, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 8, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 8, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 4, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 23, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1124, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 40, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 39, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 18, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 37, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 77, "api-ms-win-crt-heap-l1-1-0.dll!free": 706, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "KERNEL32.dll!DecodePointer": 19, "KERNEL32.dll!DeleteCriticalSection": 40, "USER32.dll!UnregisterClassW": 20, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 73, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 13, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 63, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 7, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 10, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 13, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 20, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 14, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 28, "SHLWAPI.dll!UrlUnescapeA": 3, "SHLWAPI.dll!UrlEscapeA": 3, "MSVCP140.dll!?exceptions@ios_base@std@@QEAAXH@Z": 5, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 4, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z": 3, "MSVCP140.dll!?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ": 2, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 7, "KERNEL32.dll!GetProcAddress": 53, "KERNEL32.dll!FreeLibrary": 23, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?CreateCancellationTokenSource@GXP@@YA?AV?$shared_ptr@VICancellationTokenSource@GXP@@@std@@XZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 4, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 3, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 24, "KERNEL32.dll!InitOnceComplete": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "MSVCP140.dll!?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z": 2, "MSVCP140.dll!?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 5, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-time-l1-1-0.dll!_mkgmtime64": 3, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 2, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 2, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1, "api-ms-win-crt-math-l1-1-0.dll!log2": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "CrimsonUtil.dll!?SaveURL@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVpath@filesystem@5@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@AEBV?$shared_ptr@VICancellationToken@GXP@@@5@AEBV?$unordered_set@W4DownloadOptions@NetworkRequest@GXP@@U?$hash@W4DownloadOptions@NetworkRequest@GXP@@@std@@U?$equal_to@W4DownloadOptions@NetworkRequest@GXP@@@5@V?$alloc": 1, "CrimsonUtil.dll!?Request@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBUHttpRequestData@12@AEBV?$shared_ptr@VICancellationToken@GXP@@@std@@@Z": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\Base\\NvPerfMon.dll", "sha256": "391ce3350020cd47f5ab8ab5f14261b64de11d97b93358602dbb73a5a20d13b8", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2376192, "processed_bytes": 2376192, "instructions": 1220744, "skipdata_bytes": 432 } ], "utc": "2026-11-11T21:40:36.132208+00:00", "instructions": 1220744, "skipdata_bytes": 432, "calls": 30958, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 160, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 940, "api-ms-win-crt-heap-l1-1-0.dll!free": 433, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 52, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 19, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 9, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 41, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 7, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 4, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 3, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 3, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!GetFileAttributesW": 20, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateFileW": 13, "KERNEL32.dll!CloseHandle": 60, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 4, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 6, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!GetSystemDirectoryW": 22, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!GetProcAddress": 111, "KERNEL32.dll!FreeLibrary": 31, "KERNEL32.dll!LocalAlloc": 74, "KERNEL32.dll!LocalFree": 160, "KERNEL32.dll!SetLastError": 128, "KERNEL32.dll!VerSetConditionMask": 11, "KERNEL32.dll!VerifyVersionInfoW": 7, "KERNEL32.dll!GetFullPathNameW": 6, "KERNEL32.dll!LoadLibraryExW": 20, "KERNEL32.dll!GetModuleFileNameA": 3, "KERNEL32.dll!CreateProcessA": 3, "KERNEL32.dll!CreateProcessW": 3, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-string-l1-1-0.dll!wcscat_s": 1, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strlen": 1, "api-ms-win-crt-string-l1-1-0.dll!wcscmp": 1, "api-ms-win-crt-string-l1-1-0.dll!wcslen": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvApp\\Diagnostics.dll", "sha256": "ef4d98d1b68cf8e60bc51960b9b28be0a4e90b3291cf66953753a03f8fc056a4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2426880, "processed_bytes": 2426880, "instructions": 1207075, "skipdata_bytes": 879 } ], "utc": "2026-11-11T21:40:37.551561+00:00", "instructions": 1207075, "skipdata_bytes": 879, "calls": 33062, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 20, "KERNEL32.dll!InitializeCriticalSectionEx": 40, "KERNEL32.dll!GetLastError": 160, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 15, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 9, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 35, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 11, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 6, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 4, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 8, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 8, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 4, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 16, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1355, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 37, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 36, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 21, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 10, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 44, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 75, "api-ms-win-crt-heap-l1-1-0.dll!free": 705, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 18, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 12, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 25, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "KERNEL32.dll!DecodePointer": 20, "KERNEL32.dll!DeleteCriticalSection": 42, "USER32.dll!UnregisterClassW": 21, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 5, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 24, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 57, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 8, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 69, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 8, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 3, "KERNEL32.dll!GetProcAddress": 58, "KERNEL32.dll!FreeLibrary": 23, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 6, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 60, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 8, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 16, "KERNEL32.dll!UnmapViewOfFile": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 2, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!MapViewOfFile": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 4, "SHELL32.dll!SHGetFolderPathW": 3, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?CreateCancellationTokenSource@GXP@@YA?AV?$shared_ptr@VICancellationTokenSource@GXP@@@std@@XZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 4, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 7, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 10, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 13, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 72, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 144, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z": 2, "MSVCP140.dll!?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 5, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-time-l1-1-0.dll!_mkgmtime64": 3, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1, "api-ms-win-crt-math-l1-1-0.dll!log2": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\nvspapi64.dll", "sha256": "25b2b108a502619e6f2248abaddb52b0f81667b60adb7c371d416eb12c7c9be1", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2562560, "processed_bytes": 2562560, "instructions": 1238190, "skipdata_bytes": 242 } ], "utc": "2026-11-11T21:40:37.755374+00:00", "instructions": 1238190, "skipdata_bytes": 242, "calls": 34670, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 20, "KERNEL32.dll!InitializeCriticalSectionEx": 9, "KERNEL32.dll!GetLastError": 305, "KERNEL32.dll!FreeLibrary": 63, "KERNEL32.dll!GetCurrentProcessId": 33, "KERNEL32.dll!GetCurrentProcess": 14, "KERNEL32.dll!GetSystemDirectoryW": 23, "KERNEL32.dll!GetProcAddress": 130, "KERNEL32.dll!CloseHandle": 134, "USER32.dll!EnumDisplayDevicesA": 3, "KERNEL32.dll!Sleep": 12, "KERNEL32.dll!CreateEventExA": 3, "KERNEL32.dll!WaitForSingleObject": 32, "KERNEL32.dll!EnterCriticalSection": 151, "KERNEL32.dll!DeleteCriticalSection": 38, "KERNEL32.dll!LeaveCriticalSection": 155, "KERNEL32.dll!CreateEventA": 14, "KERNEL32.dll!SetEvent": 29, "KERNEL32.dll!WaitForMultipleObjects": 11, "KERNEL32.dll!WideCharToMultiByte": 11, "KERNEL32.dll!GetThreadId": 14, "KERNEL32.dll!GetCurrentThreadId": 19, "USER32.dll!PostThreadMessageA": 9, "KERNEL32.dll!ResetEvent": 8, "KERNEL32.dll!CreateThread": 7, "ole32.dll!CoTaskMemFree": 10, "SHELL32.dll!SHGetFolderPathW": 3, "SHELL32.dll!SHGetFolderPathA": 6, "KERNEL32.dll!CreateFileA": 7, "KERNEL32.dll!GetTickCount": 5, "OLEAUT32.dll!SysAllocString": 6, "OLEAUT32.dll!SysFreeString": 12, "KERNEL32.dll!GetProcessHeap": 25, "KERNEL32.dll!HeapFree": 21, "ADVAPI32.dll!OpenSCManagerW": 3, "ADVAPI32.dll!OpenServiceW": 3, "ADVAPI32.dll!QueryServiceStatus": 3, "ADVAPI32.dll!CloseServiceHandle": 6, "KERNEL32.dll!OpenEventA": 8, "KERNEL32.dll!GlobalMemoryStatusEx": 2, "SHLWAPI.dll!PathFileExistsW": 5, "KERNEL32.dll!GetTempPathW": 3, "KERNEL32.dll!MoveFileExW": 3, "KERNEL32.dll!DeleteFileW": 2, "OLEAUT32.dll!VariantClear": 6, "OLEAUT32.dll!SysAllocStringLen": 4, "OLEAUT32.dll!VariantCopy": 5, "OLEAUT32.dll!VariantInit": 6, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!GetModuleFileNameW": 18, "KERNEL32.dll!TryEnterCriticalSection": 3, "USER32.dll!IsWindow": 10, "USER32.dll!PostMessageA": 12, "KERNEL32.dll!GetProcessTimes": 4, "KERNEL32.dll!GetModuleHandleA": 6, "USER32.dll!RegisterClassExA": 2, "USER32.dll!CreateWindowExA": 2, "USER32.dll!ChangeWindowMessageFilterEx": 3, "USER32.dll!GetMessageA": 5, "USER32.dll!TranslateMessage": 3, "USER32.dll!DispatchMessageA": 3, "USER32.dll!DestroyWindow": 3, "USER32.dll!UnregisterClassA": 6, "USER32.dll!DefWindowProcA": 2, "KERNEL32.dll!LocalAlloc": 61, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "KERNEL32.dll!LocalFree": 117, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileA": 3, "ADVAPI32.dll!GetSecurityDescriptorDacl": 9, "KERNEL32.dll!CreateDirectoryA": 5, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclA": 3, "ADVAPI32.dll!InitializeSecurityDescriptor": 5, "ADVAPI32.dll!SetSecurityDescriptorDacl": 5, "ADVAPI32.dll!FreeSid": 4, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 3, "KERNEL32.dll!GetModuleHandleW": 14, "KERNEL32.dll!GetLocalTime": 4, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 19, "ADVAPI32.dll!RegQueryValueExA": 14, "ADVAPI32.dll!RegCloseKey": 14, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFileAttributesA": 6, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!WriteFile": 16, "KERNEL32.dll!CreateEventW": 17, "USER32.dll!wsprintfW": 3, "KERNEL32.dll!ReadFile": 11, "KERNEL32.dll!CreateFileW": 13, "KERNEL32.dll!WaitNamedPipeW": 3, "KERNEL32.dll!GetModuleHandleExW": 10, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 9, "KERNEL32.dll!LoadLibraryA": 5, "KERNEL32.dll!OpenProcess": 9, "KERNEL32.dll!UnmapViewOfFile": 3, "KERNEL32.dll!FlushFileBuffers": 5, "KERNEL32.dll!DisconnectNamedPipe": 3, "KERNEL32.dll!OpenFileMappingA": 3, "KERNEL32.dll!ReleaseMutex": 2, "KERNEL32.dll!CreateMutexA": 2, "KERNEL32.dll!OpenMutexA": 2, "KERNEL32.dll!CreateNamedPipeA": 2, "KERNEL32.dll!ConnectNamedPipe": 2, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 5, "KERNEL32.dll!HeapAlloc": 7, "ADVAPI32.dll!GetLengthSid": 4, "ADVAPI32.dll!CopySid": 3, "KERNEL32.dll!CreateFileMappingA": 2, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!GetModuleFileNameA": 6, "SHLWAPI.dll!PathFindFileNameA": 3, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 3, "ADVAPI32.dll!LookupAccountNameA": 2, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!SetLastError": 103, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!GetCommandLineA": 4, "USER32.dll!EnumDisplaySettingsA": 2, "KERNEL32.dll!DecodePointer": 6, "ADVAPI32.dll!RegCreateKeyExA": 6, "ADVAPI32.dll!RegCopyTreeA": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "ADVAPI32.dll!RegSetValueExA": 5, "ADVAPI32.dll!RegDeleteKeyExA": 3, "ADVAPI32.dll!RegDeleteKeyValueA": 2, "KERNEL32.dll!MultiByteToWideChar": 11, "KERNEL32.dll!SetCurrentDirectoryA": 2, "ADVAPI32.dll!DuplicateTokenEx": 2, "ADVAPI32.dll!SetTokenInformation": 2, "USER32.dll!WaitForInputIdle": 2, "USER32.dll!FindWindowExW": 6, "USER32.dll!GetShellWindow": 3, "USER32.dll!EnumWindows": 3, "USER32.dll!RedrawWindow": 2, "USER32.dll!FindWindowW": 4, "USER32.dll!EnumDisplaySettingsExA": 3, "ADVAPI32.dll!OpenSCManagerA": 2, "KERNEL32.dll!GetSystemDirectoryA": 2, "KERNEL32.dll!GetVolumeInformationA": 2, "KERNEL32.dll!GetVersionExA": 6, "USER32.dll!GetForegroundWindow": 2, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!TerminateProcess": 6, "USER32.dll!FindWindowA": 2, "USER32.dll!SendMessageA": 2, "CRYPT32.dll!CertGetNameStringW": 5, "CRYPT32.dll!CryptQueryObject": 2, "CRYPT32.dll!CryptMsgGetParam": 3, "CRYPT32.dll!CertFindCertificateInStore": 2, "CRYPT32.dll!CertFreeCertificateContext": 2, "CRYPT32.dll!CryptMsgClose": 2, "CRYPT32.dll!CertCloseStore": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 3, "SHLWAPI.dll!PathFindFileNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!RtlCaptureStackBackTrace": 2, "KERNEL32.dll!SetNamedPipeHandleState": 2, "KERNEL32.dll!InitializeSRWLock": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 8, "KERNEL32.dll!ReleaseSRWLockExclusive": 8, "USER32.dll!GetWindowLongPtrW": 2, "USER32.dll!DefWindowProcW": 3, "USER32.dll!PostQuitMessage": 2, "USER32.dll!PostMessageW": 2, "USER32.dll!PeekMessageW": 2, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 3, "ole32.dll!CoCreateGuid": 2, "USER32.dll!RegisterClassW": 2, "USER32.dll!CreateWindowExW": 2, "USER32.dll!UnregisterClassW": 3, "USER32.dll!SetWindowLongPtrW": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "WTSAPI32.dll!WTSQuerySessionInformationA": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "VERSION.dll!GetFileVersionInfoSizeA": 1, "VERSION.dll!GetFileVersionInfoA": 1, "VERSION.dll!VerQueryValueA": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!OutputDebugStringW": 7, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 8, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!InitializeSListHead": 2, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptSetProperty": 1, "bcrypt.dll!BCryptCloseAlgorithmProvider": 1, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 1, "bcrypt.dll!BCryptGenerateSymmetricKey": 1, "bcrypt.dll!BCryptEncrypt": 1, "bcrypt.dll!BCryptDestroyKey": 1, "bcrypt.dll!BCryptGenRandom": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!K32GetProcessMemoryInfo": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!K32GetModuleFileNameExW": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!FindNextFileW": 4, "KERNEL32.dll!FindClose": 10, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA Overlay\\Gallery.dll", "sha256": "5361a2c1993c80499cd6448b5f476d29a2ffee18ce20b4979ea00bcaeba32098", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2628608, "processed_bytes": 2628608, "instructions": 1306333, "skipdata_bytes": 626 } ], "utc": "2026-11-11T21:40:37.975102+00:00", "instructions": 1306333, "skipdata_bytes": 626, "calls": 34355, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 11, "KERNEL32.dll!InitializeCriticalSectionEx": 38, "KERNEL32.dll!GetLastError": 158, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1927, "api-ms-win-crt-heap-l1-1-0.dll!free": 634, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 54, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 11, "KERNEL32.dll!DecodePointer": 18, "KERNEL32.dll!DeleteCriticalSection": 38, "USER32.dll!UnregisterClassW": 19, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 13, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 12, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 41, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 40, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 24, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 93, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 16, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 24, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 23, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 23, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 6, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 52, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 9, "GDI32.dll!DeleteDC": 15, "KERNEL32.dll!EnterCriticalSection": 23, "KERNEL32.dll!LeaveCriticalSection": 23, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 33, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 19, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 12, "ole32.dll!CoInitializeEx": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 7, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 37, "GDI32.dll!DeleteObject": 11, "KERNEL32.dll!FindResourceExW": 5, "KERNEL32.dll!FindResourceW": 4, "GDI32.dll!GetObjectW": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 4, "api-ms-win-crt-stdio-l1-1-0.dll!rewind": 2, "api-ms-win-crt-stdio-l1-1-0.dll!getc": 18, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 15, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 11, "MSVCP140.dll!?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z": 10, "MSVCP140.dll!?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ": 9, "MSVCP140.dll!?eof@ios_base@std@@QEBA_NXZ": 2, "ole32.dll!CoUninitialize": 4, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 9, "GDI32.dll!CreateDIBSection": 3, "GDI32.dll!SetDIBColorTable": 3, "GDI32.dll!SelectObject": 9, "api-ms-win-crt-string-l1-1-0.dll!wcsspn": 4, "api-ms-win-crt-string-l1-1-0.dll!wcscspn": 4, "SHLWAPI.dll!PathFindExtensionW": 3, "MSVCP140.dll!?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ": 3, "GDI32.dll!CreateCompatibleDC": 6, "SHELL32.dll!SHCreateItemFromParsingName": 2, "GDI32.dll!CreateCompatibleBitmap": 2, "GDI32.dll!SetStretchBltMode": 2, "GDI32.dll!StretchBlt": 2, "SHLWAPI.dll!#12": 2, "CRYPT32.dll!CryptBinaryToStringW": 3, "KERNEL32.dll!FindFirstFileW": 12, "KERNEL32.dll!FindNextFileW": 12, "KERNEL32.dll!FindClose": 19, "KERNEL32.dll!lstrcmpW": 3, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 7, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 73, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_resetstkoflw": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 7, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "KERNEL32.dll!CloseHandle": 69, "KERNEL32.dll!SetEvent": 5, "KERNEL32.dll!CancelIoEx": 2, "KERNEL32.dll!CreateFileW": 10, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!ReadDirectoryChangesW": 2, "api-ms-win-crt-utility-l1-1-0.dll!rand": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "ole32.dll!PropVariantClear": 11, "PROPSYS.dll!PropVariantToUInt32": 2, "USER32.dll!GetDC": 2, "KERNEL32.dll!GetProcAddress": 53, "KERNEL32.dll!FreeLibrary": 16, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "OLEAUT32.dll!SysAllocString": 7, "OLEAUT32.dll!SysFreeString": 17, "SHELL32.dll!SHGetPropertyStoreFromParsingName": 2, "KERNEL32.dll!GetSystemTime": 3, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 3, "KERNEL32.dll!Sleep": 4, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?CloudSyncAbort@CloudSyncClient@GXP@@SAXXZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 144, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 3, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "gdiplus.dll!GdiplusShutdown": 1, "gdiplus.dll!GdipAlloc": 1, "gdiplus.dll!GdipFree": 1, "gdiplus.dll!GdiplusStartup": 1, "gdiplus.dll!GdipCloneImage": 1, "gdiplus.dll!GdipDisposeImage": 1, "gdiplus.dll!GdipSaveImageToFile": 1, "gdiplus.dll!GdipSaveImageToStream": 1, "gdiplus.dll!GdipGetImageGraphicsContext": 1, "gdiplus.dll!GdipGetImageWidth": 1, "gdiplus.dll!GdipGetImageHeight": 1, "gdiplus.dll!GdipGetImagePixelFormat": 1, "gdiplus.dll!GdipGetImagePalette": 1, "gdiplus.dll!GdipGetImagePaletteSize": 1, "gdiplus.dll!GdipCreateBitmapFromFile": 1, "gdiplus.dll!GdipCreateBitmapFromFileICM": 1, "gdiplus.dll!GdipCreateBitmapFromScan0": 1, "gdiplus.dll!GdipCreateBitmapFromHBITMAP": 1, "gdiplus.dll!GdipBitmapLockBits": 1, "gdiplus.dll!GdipBitmapUnlockBits": 1, "gdiplus.dll!GdipDeleteGraphics": 1, "gdiplus.dll!GdipDrawImageI": 1, "gdiplus.dll!GdipGetImageEncodersSize": 1, "gdiplus.dll!GdipGetImageEncoders": 1, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!RaiseException": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-string-l1-1-0.dll!wmemcpy_s": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\plugins.system\\NvMessageBusBroadcast.dll", "sha256": "e07a2df896f8e081117ae027ac4fce9613118c131030b0ccbbcc5731d750e595", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2682880, "processed_bytes": 2682880, "instructions": 865836, "skipdata_bytes": 1218 } ], "utc": "2026-11-11T21:40:39.482652+00:00", "instructions": 865836, "skipdata_bytes": 1218, "calls": 44410, "api_reference_counts": { "KERNEL32.dll!GetModuleHandleExW": 5, "KERNEL32.dll!GetModuleFileNameW": 8, "KERNEL32.dll!GetLastError": 204, "ADVAPI32.dll!LookupPrivilegeValueW": 2, "KERNEL32.dll!GetCurrentProcess": 12, "ADVAPI32.dll!OpenProcessToken": 6, "ADVAPI32.dll!AdjustTokenPrivileges": 2, "KERNEL32.dll!CloseHandle": 66, "KERNEL32.dll!GetNamedPipeClientProcessId": 3, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "KERNEL32.dll!CreateNamedPipeW": 2, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 4, "KERNEL32.dll!CreateIoCompletionPort": 3, "KERNEL32.dll!GetQueuedCompletionStatus": 2, "KERNEL32.dll!PostQueuedCompletionStatus": 3, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!CancelIoEx": 4, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!LocalFree": 14, "KERNEL32.dll!VerSetConditionMask": 10, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 2, "KERNEL32.dll!LocalAlloc": 3, "ADVAPI32.dll!FreeSid": 4, "ADVAPI32.dll!GetSecurityDescriptorDacl": 2, "ADVAPI32.dll!GetTokenInformation": 7, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!ProcessIdToSessionId": 4, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!MultiByteToWideChar": 19, "KERNEL32.dll!WideCharToMultiByte": 17, "RPCRT4.dll!UuidCreate": 2, "RPCRT4.dll!UuidToStringA": 2, "RPCRT4.dll!RpcStringFreeA": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!GetTimeZoneInformation": 3, "KERNEL32.dll!GetCurrentThreadId": 16, "KERNEL32.dll!GetFileAttributesW": 4, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!CreateFileW": 17, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!InitOnceBeginInitialize": 64, "KERNEL32.dll!InitOnceComplete": 65, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!SetLastError": 14, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 12, "KERNEL32.dll!GetCurrentDirectoryW": 11, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!CreateSymbolicLinkW": 4, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 6, "KERNEL32.dll!GetFileInformationByHandle": 6, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 23, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetFilePointerEx": 11, "KERNEL32.dll!SetEndOfFile": 3, "KERNEL32.dll!SetCurrentDirectoryW": 7, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 5, "KERNEL32.dll!InitializeSRWLock": 4, "KERNEL32.dll!DeleteCriticalSection": 9, "KERNEL32.dll!EnterCriticalSection": 14, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!TryEnterCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 14, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!InitializeConditionVariable": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!WakeConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableCS": 4, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetModuleHandleW": 9, "KERNEL32.dll!GetProcAddress": 51, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CloseThreadpoolWork": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!CreateThreadpoolWork": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!SubmitThreadpoolWork": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 5, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!FreeLibrary": 19, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetFileType": 9, "KERNEL32.dll!SetEnvironmentVariableW": 8, "KERNEL32.dll!PeekNamedPipe": 5, "KERNEL32.dll!FileTimeToSystemTime": 3, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 3, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!DuplicateHandle": 3, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 6, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!OutputDebugStringW": 5, "WS2_32.dll!htonl": 1, "WS2_32.dll!ntohl": 1, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "FrameViewSDK\\FvContainer\\NvMessageBus.dll", "sha256": "4915c54254d22a538c82ed438a8b01ce3b3ccdb136a9853072d463d436e80ae3", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2723328, "processed_bytes": 2723328, "instructions": 883099, "skipdata_bytes": 1289 } ], "utc": "2026-11-11T21:40:40.751162+00:00", "instructions": 883099, "skipdata_bytes": 1289, "calls": 44786, "api_reference_counts": { "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 4, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!ProcessIdToSessionId": 4, "ADVAPI32.dll!GetTokenInformation": 5, "KERNEL32.dll!GetLastError": 191, "KERNEL32.dll!LocalFree": 3, "KERNEL32.dll!OpenProcess": 2, "ADVAPI32.dll!OpenProcessToken": 2, "KERNEL32.dll!CloseHandle": 60, "KERNEL32.dll!WaitNamedPipeW": 2, "KERNEL32.dll!CreateFileW": 18, "KERNEL32.dll!GetNamedPipeServerProcessId": 2, "KERNEL32.dll!CreateIoCompletionPort": 3, "KERNEL32.dll!GetQueuedCompletionStatus": 2, "KERNEL32.dll!PostQueuedCompletionStatus": 3, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!CancelIoEx": 4, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!MultiByteToWideChar": 19, "KERNEL32.dll!WideCharToMultiByte": 17, "RPCRT4.dll!UuidCreate": 2, "RPCRT4.dll!UuidToStringA": 2, "RPCRT4.dll!RpcStringFreeA": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!GetTimeZoneInformation": 3, "KERNEL32.dll!GetCurrentThreadId": 16, "KERNEL32.dll!GetFileAttributesW": 4, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!GetModuleFileNameW": 7, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!InitOnceBeginInitialize": 64, "KERNEL32.dll!InitOnceComplete": 65, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!SetLastError": 14, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 12, "KERNEL32.dll!GetCurrentDirectoryW": 11, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 5, "KERNEL32.dll!InitializeSRWLock": 4, "KERNEL32.dll!DeleteCriticalSection": 9, "KERNEL32.dll!EnterCriticalSection": 14, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!TryEnterCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 14, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!CreateSymbolicLinkW": 4, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 6, "KERNEL32.dll!GetFileInformationByHandle": 6, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 23, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetFilePointerEx": 11, "KERNEL32.dll!SetEndOfFile": 3, "KERNEL32.dll!SetCurrentDirectoryW": 7, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!InitializeConditionVariable": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!WakeConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableCS": 4, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!GetModuleHandleW": 9, "KERNEL32.dll!GetProcAddress": 51, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CloseThreadpoolWork": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!CreateThreadpoolWork": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!SubmitThreadpoolWork": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!GetCurrentProcess": 8, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 5, "KERNEL32.dll!CreateEventW": 3, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!FreeLibrary": 19, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetFileType": 9, "KERNEL32.dll!SetEnvironmentVariableW": 8, "KERNEL32.dll!PeekNamedPipe": 5, "KERNEL32.dll!FileTimeToSystemTime": 3, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 3, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!DuplicateHandle": 3, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 6, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!OutputDebugStringW": 5, "WS2_32.dll!htonl": 1, "WS2_32.dll!ntohl": 1, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\MessageBus\\NvMessageBusBroadcast.dll", "sha256": "63b000b70eaea5477e8d30e141f84ccf5391a8d098377768795e694aeda8372f", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2794496, "processed_bytes": 2794496, "instructions": 902674, "skipdata_bytes": 1208 } ], "utc": "2026-11-11T21:40:41.371174+00:00", "instructions": 902674, "skipdata_bytes": 1208, "calls": 45704, "api_reference_counts": { "KERNEL32.dll!GetModuleHandleExW": 5, "KERNEL32.dll!GetModuleFileNameW": 9, "KERNEL32.dll!GetLastError": 191, "KERNEL32.dll!GetNamedPipeClientProcessId": 3, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "KERNEL32.dll!CreateNamedPipeW": 2, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 4, "KERNEL32.dll!CreateIoCompletionPort": 3, "KERNEL32.dll!GetQueuedCompletionStatus": 2, "KERNEL32.dll!PostQueuedCompletionStatus": 3, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!CloseHandle": 68, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!CancelIoEx": 4, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!GetCurrentProcess": 11, "ADVAPI32.dll!OpenProcessToken": 5, "KERNEL32.dll!LocalFree": 14, "KERNEL32.dll!VerSetConditionMask": 10, "KERNEL32.dll!VerifyVersionInfoW": 4, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 2, "KERNEL32.dll!LocalAlloc": 3, "ADVAPI32.dll!FreeSid": 4, "ADVAPI32.dll!GetSecurityDescriptorDacl": 2, "ADVAPI32.dll!GetTokenInformation": 7, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!ProcessIdToSessionId": 4, "KERNEL32.dll!OpenProcess": 2, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!MultiByteToWideChar": 19, "KERNEL32.dll!WideCharToMultiByte": 13, "RPCRT4.dll!UuidCreate": 2, "RPCRT4.dll!UuidToStringA": 2, "RPCRT4.dll!RpcStringFreeA": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!GetTimeZoneInformation": 3, "KERNEL32.dll!GetCurrentThreadId": 13, "KERNEL32.dll!GetFileAttributesW": 4, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateFileW": 17, "KERNEL32.dll!DeviceIoControl": 5, "KERNEL32.dll!InitOnceBeginInitialize": 42, "KERNEL32.dll!InitOnceComplete": 43, "KERNEL32.dll!FindFirstFileW": 3, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 14, "KERNEL32.dll!SetLastError": 20, "KERNEL32.dll!GetCurrentDirectoryW": 9, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!CreateSymbolicLinkW": 4, "KERNEL32.dll!GetFileInformationByHandleEx": 10, "KERNEL32.dll!GetFileInformationByHandle": 6, "KERNEL32.dll!SetFileInformationByHandle": 9, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetProcAddress": 11, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 5, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 10, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 7, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 7, "KERNEL32.dll!AcquireSRWLockExclusive": 8, "KERNEL32.dll!TryAcquireSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!WakeAllConditionVariable": 6, "KERNEL32.dll!WakeConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 8, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 3, "KERNEL32.dll!EnterCriticalSection": 8, "KERNEL32.dll!LeaveCriticalSection": 8, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!GetTempPathW": 3, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!FreeLibrary": 19, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetFileType": 9, "KERNEL32.dll!SetEnvironmentVariableW": 8, "KERNEL32.dll!PeekNamedPipe": 5, "KERNEL32.dll!FileTimeToSystemTime": 3, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 3, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!DuplicateHandle": 3, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!OutputDebugStringW": 5, "WS2_32.dll!htonl": 1, "WS2_32.dll!ntohl": 1, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\session\\NvDriverDiagnostics.dll", "sha256": "8dce136dde4d2f25ddf4df33373939a0e1c2ba30088fc0740a9539c1146cec30", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2723328, "processed_bytes": 2723328, "instructions": 1336694, "skipdata_bytes": 1011 } ], "utc": "2026-11-11T21:40:41.026522+00:00", "instructions": 1336694, "skipdata_bytes": 1011, "calls": 38172, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 21, "KERNEL32.dll!InitializeCriticalSectionEx": 42, "KERNEL32.dll!GetLastError": 161, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 15, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 9, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 35, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 11, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 6, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 4, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 8, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 8, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 4, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 18, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 6, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1355, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 35, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 34, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 19, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 10, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 39, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 70, "api-ms-win-crt-heap-l1-1-0.dll!free": 828, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 16, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 24, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "KERNEL32.dll!DecodePointer": 21, "KERNEL32.dll!DeleteCriticalSection": 44, "USER32.dll!UnregisterClassW": 22, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 79, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 11, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 14, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 77, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 7, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 10, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 13, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 15, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 21, "MSVCP140.dll!?exceptions@ios_base@std@@QEAAXH@Z": 4, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 4, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 4, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 7, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 18, "MSVCP140.dll!?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z": 3, "MSVCP140.dll!?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ": 2, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 7, "ADVAPI32.dll!GetSecurityDescriptorDacl": 2, "ADVAPI32.dll!SetNamedSecurityInfoW": 2, "KERNEL32.dll!LocalFree": 70, "KERNEL32.dll!GetProcAddress": 54, "KERNEL32.dll!FreeLibrary": 23, "KERNEL32.dll!MultiByteToWideChar": 8, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!LocalAlloc": 24, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 58, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 4, "SHELL32.dll!SHGetFolderPathW": 3, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?CreateCancellationTokenSource@GXP@@YA?AV?$shared_ptr@VICancellationTokenSource@GXP@@@std@@XZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 4, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "MSVCP140.dll!?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z": 2, "MSVCP140.dll!?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 5, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "api-ms-win-crt-time-l1-1-0.dll!_mkgmtime64": 3, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 24, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceil": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!log2": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "CrimsonUtil.dll!?SaveURL@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVpath@filesystem@5@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@5@AEBV?$shared_ptr@VICancellationToken@GXP@@@5@AEBV?$unordered_set@W4DownloadOptions@NetworkRequest@GXP@@U?$hash@W4DownloadOptions@NetworkRequest@GXP@@@std@@U?$equal_to@W4DownloadOptions@NetworkRequest@GXP@@@5@V?$alloc": 1, "CrimsonUtil.dll!?Request@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBUHttpRequestData@12@AEBV?$shared_ptr@VICancellationToken@GXP@@@std@@@Z": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\MessageBus\\NvMessageBus.dll", "sha256": "348162a5948cd59e8b0ece73c7cdf9faa55d9a9f906879392c1527308b2af85d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2804224, "processed_bytes": 2804224, "instructions": 909540, "skipdata_bytes": 1123 } ], "utc": "2026-11-11T21:40:41.982196+00:00", "instructions": 909540, "skipdata_bytes": 1123, "calls": 45518, "api_reference_counts": { "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryValueExW": 5, "ADVAPI32.dll!RegCloseKey": 4, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!ProcessIdToSessionId": 4, "ADVAPI32.dll!GetTokenInformation": 5, "KERNEL32.dll!GetLastError": 178, "KERNEL32.dll!LocalFree": 3, "KERNEL32.dll!OpenProcess": 2, "ADVAPI32.dll!OpenProcessToken": 2, "KERNEL32.dll!CloseHandle": 65, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!WaitNamedPipeW": 2, "KERNEL32.dll!CreateFileW": 18, "KERNEL32.dll!GetNamedPipeServerProcessId": 2, "KERNEL32.dll!CreateIoCompletionPort": 3, "KERNEL32.dll!GetQueuedCompletionStatus": 2, "KERNEL32.dll!PostQueuedCompletionStatus": 3, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!CancelIoEx": 4, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!MultiByteToWideChar": 19, "KERNEL32.dll!WideCharToMultiByte": 13, "RPCRT4.dll!UuidCreate": 2, "RPCRT4.dll!UuidToStringA": 2, "RPCRT4.dll!RpcStringFreeA": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!GetTimeZoneInformation": 3, "KERNEL32.dll!GetCurrentThreadId": 13, "KERNEL32.dll!GetFileAttributesW": 4, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!GetModuleFileNameW": 8, "KERNEL32.dll!GetModuleHandleExW": 4, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!DeviceIoControl": 5, "KERNEL32.dll!InitOnceBeginInitialize": 42, "KERNEL32.dll!InitOnceComplete": 43, "KERNEL32.dll!FindFirstFileW": 3, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 14, "KERNEL32.dll!SetLastError": 20, "KERNEL32.dll!GetCurrentDirectoryW": 9, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 7, "KERNEL32.dll!AcquireSRWLockExclusive": 8, "KERNEL32.dll!TryAcquireSRWLockExclusive": 4, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!CreateSymbolicLinkW": 4, "KERNEL32.dll!GetFileInformationByHandleEx": 10, "KERNEL32.dll!GetFileInformationByHandle": 6, "KERNEL32.dll!SetFileInformationByHandle": 9, "KERNEL32.dll!CopyFileW": 4, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetProcAddress": 11, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 5, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!GetFullPathNameW": 10, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetCurrentDirectoryW": 7, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!WakeAllConditionVariable": 6, "KERNEL32.dll!WakeConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 8, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!DeleteCriticalSection": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 3, "KERNEL32.dll!EnterCriticalSection": 8, "KERNEL32.dll!LeaveCriticalSection": 8, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!GetTempPathW": 3, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!GetCurrentProcess": 8, "KERNEL32.dll!TerminateProcess": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 7, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!FreeLibrary": 19, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!GetFileType": 9, "KERNEL32.dll!SetEnvironmentVariableW": 8, "KERNEL32.dll!PeekNamedPipe": 5, "KERNEL32.dll!FileTimeToSystemTime": 3, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 3, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!DuplicateHandle": 3, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!GetStdHandle": 3, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!WriteConsoleW": 6, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!OutputDebugStringW": 5, "WS2_32.dll!htonl": 1, "WS2_32.dll!ntohl": 1, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\NvUI.dll", "sha256": "b9d8948eedfcc5cbcd123d1b4fcd6f9c63e1cdc17ec4a6cbd3aeca7df098a597", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2913280, "processed_bytes": 2913280, "instructions": 793205, "skipdata_bytes": 12 } ], "utc": "2026-11-11T21:40:43.334874+00:00", "instructions": 793205, "skipdata_bytes": 12, "calls": 74936, "api_reference_counts": { "USER32.dll!RegisterWindowMessageW": 51, "KERNEL32.dll!InitializeCriticalSectionEx": 6, "KERNEL32.dll!GetLastError": 182, "KERNEL32.dll!CreateEventW": 6, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 7, "USER32.dll!GetSystemMetrics": 155, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 16, "KERNEL32.dll!LocalFree": 68, "KERNEL32.dll!VerSetConditionMask": 10, "KERNEL32.dll!VerifyVersionInfoW": 5, "KERNEL32.dll!SetLastError": 83, "KERNEL32.dll!LocalAlloc": 39, "KERNEL32.dll!CreateProcessW": 1, "KERNEL32.dll!GetProcAddress": 139, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!GetModuleHandleW": 41, "KERNEL32.dll!GetModuleFileNameW": 11, "USER32.dll!GetDC": 13, "USER32.dll!SendMessageW": 1102, "USER32.dll!GetWindowRect": 338, "GDI32.dll!SetTextColor": 14, "GDI32.dll!SetBkMode": 7, "USER32.dll!DrawTextW": 6, "USER32.dll!GetClientRect": 251, "USER32.dll!InflateRect": 317, "USER32.dll!FrameRect": 2, "USER32.dll!ReleaseDC": 14, "USER32.dll!GetAncestor": 1, "USER32.dll!TrackMouseEvent": 15, "GDI32.dll!CreateSolidBrush": 70, "USER32.dll!LoadBitmapW": 12, "GDI32.dll!DeleteObject": 105, "USER32.dll!EnableWindow": 29, "KERNEL32.dll!LoadResource": 20, "KERNEL32.dll!LockResource": 17, "KERNEL32.dll!SizeofResource": 6, "KERNEL32.dll!FindResourceW": 17, "USER32.dll!SetForegroundWindow": 12, "USER32.dll!KillTimer": 79, "USER32.dll!LoadIconW": 15, "GDI32.dll!GetObjectW": 93, "GDI32.dll!CreateFontIndirectW": 35, "USER32.dll!InvalidateRect": 228, "USER32.dll!SetTimer": 38, "USER32.dll!SetThreadDpiAwarenessContext": 2, "USER32.dll!SetWindowPos": 24, "ADVAPI32.dll!RegQueryValueExW": 67, "ADVAPI32.dll!RegCloseKey": 136, "KERNEL32.dll!MultiByteToWideChar": 19, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 39, "ADVAPI32.dll!RegCreateKeyExW": 10, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!CloseHandle": 87, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!CreateFileW": 12, "KERNEL32.dll!WideCharToMultiByte": 11, "KERNEL32.dll!WriteFile": 8, "KERNEL32.dll!WaitForSingleObject": 8, "KERNEL32.dll!ReleaseMutex": 2, "SHLWAPI.dll!PathFindFileNameW": 3, "KERNEL32.dll!CreateMutexW": 3, "KERNEL32.dll!CreateEventA": 6, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!FormatMessageW": 4, "KERNEL32.dll!SetEvent": 16, "KERNEL32.dll!GetCurrentThreadId": 24, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!GetCurrentProcess": 9, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!QueryPerformanceFrequency": 5, "KERNEL32.dll!QueryPerformanceCounter": 9, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "USER32.dll!FindWindowW": 22, "USER32.dll!PostMessageW": 67, "KERNEL32.dll!Sleep": 15, "USER32.dll!TranslateMessage": 8, "USER32.dll!DispatchMessageW": 15, "USER32.dll!GetMessageW": 12, "SHELL32.dll!Shell_NotifyIconW": 23, "USER32.dll!IsWindow": 159, "KERNEL32.dll!OpenEventW": 6, "KERNEL32.dll!WaitForMultipleObjects": 3, "USER32.dll!PostThreadMessageW": 2, "WTSAPI32.dll!WTSRegisterSessionNotification": 3, "USER32.dll!RegisterWindowMessageA": 1, "USER32.dll!ChangeWindowMessageFilter": 1, "WTSAPI32.dll!WTSUnRegisterSessionNotification": 3, "USER32.dll!PostQuitMessage": 10, "USER32.dll!LoadCursorW": 62, "USER32.dll!CreateWindowExW": 3, "USER32.dll!GetWindowDC": 2, "GDI32.dll!CreateCompatibleDC": 97, "GDI32.dll!CreateCompatibleBitmap": 41, "GDI32.dll!BitBlt": 81, "USER32.dll!DestroyWindow": 14, "USER32.dll!WindowFromDC": 2, "USER32.dll!CopyRect": 82, "GDI32.dll!StretchBlt": 7, "ole32.dll!CoCreateInstance": 8, "ADVAPI32.dll!RegOpenKeyW": 2, "GDI32.dll!SelectObject": 154, "KERNEL32.dll!lstrlenW": 2, "GDI32.dll!GetTextExtentPoint32W": 52, "GDI32.dll!GetDeviceCaps": 19, "KERNEL32.dll!MulDiv": 26, "USER32.dll!GetDlgItem": 39, "USER32.dll!ShowWindow": 17, "USER32.dll!GetWindowLongW": 32, "USER32.dll!SetWindowLongW": 13, "USER32.dll!SetLayeredWindowAttributes": 8, "USER32.dll!GetForegroundWindow": 5, "USER32.dll!BringWindowToTop": 17, "USER32.dll!MapWindowPoints": 52, "USER32.dll!IsIconic": 17, "USER32.dll!DrawIcon": 2, "USER32.dll!FillRect": 201, "USER32.dll!GetWindowLongPtrW": 9, "GDI32.dll!GetStockObject": 24, "SHELL32.dll!SHAppBarMessage": 8, "USER32.dll!MonitorFromWindow": 5, "USER32.dll!GetMonitorInfoW": 14, "USER32.dll!IsRectEmpty": 250, "USER32.dll!GetSysColor": 103, "USER32.dll!SetRectEmpty": 273, "USER32.dll!UnionRect": 14, "GDI32.dll!ExtTextOutW": 9, "USER32.dll!wsprintfW": 7, "KERNEL32.dll!lstrcpynW": 2, "KERNEL32.dll!GetLocaleInfoW": 14, "KERNEL32.dll!lstrcmpW": 9, "USER32.dll!GetDesktopWindow": 18, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindClose": 3, "SHELL32.dll!ShellExecuteW": 5, "KERNEL32.dll!FreeLibrary": 41, "COMCTL32.dll!ImageList_SetBkColor": 1, "USER32.dll!EnumWindows": 1, "COMCTL32.dll!ImageList_GetImageCount": 1, "COMCTL32.dll!ImageList_Remove": 1, "KERNEL32.dll!OpenProcess": 1, "SHELL32.dll!ExtractIconExW": 2, "COMCTL32.dll!ImageList_ReplaceIcon": 4, "USER32.dll!DestroyIcon": 17, "USER32.dll!IsWindowVisible": 81, "USER32.dll!GetParent": 501, "USER32.dll!GetWindowThreadProcessId": 4, "USER32.dll!GetWindowTextW": 10, "KERNEL32.dll!GetSystemDefaultLCID": 4, "KERNEL32.dll!GetCurrentProcessId": 8, "KERNEL32.dll!ProcessIdToSessionId": 3, "WTSAPI32.dll!WTSQueryUserToken": 4, "ADVAPI32.dll!ImpersonateLoggedOnUser": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 6, "ADVAPI32.dll!RevertToSelf": 4, "ole32.dll!CoCreateGuid": 3, "ole32.dll!CoFreeUnusedLibrariesEx": 1, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!GetTokenInformation": 2, "SHELL32.dll!SHCreateItemInKnownFolder": 1, "SHELL32.dll!SHCreateShellItem": 1, "USER32.dll!GetIconInfo": 4, "MSIMG32.dll!TransparentBlt": 2, "GDI32.dll!DeleteDC": 27, "USER32.dll!InsertMenuItemW": 3, "USER32.dll!InsertMenuW": 6, "KERNEL32.dll!DeleteCriticalSection": 22, "KERNEL32.dll!EnterCriticalSection": 34, "KERNEL32.dll!LeaveCriticalSection": 41, "ole32.dll!CoTaskMemFree": 20, "ole32.dll!CoTaskMemRealloc": 3, "ole32.dll!CoTaskMemAlloc": 7, "USER32.dll!CharNextW": 26, "KERNEL32.dll!lstrcmpiW": 15, "ADVAPI32.dll!RegSetValueExW": 19, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegEnumKeyExW": 5, "ADVAPI32.dll!RegDeleteKeyW": 4, "ADVAPI32.dll!RegDeleteValueW": 3, "ADVAPI32.dll!RegQueryInfoKeyW": 4, "KERNEL32.dll!FindResourceExW": 11, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 2, "SETUPAPI.dll!CM_Get_DevNode_Status": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 1, "KERNEL32.dll!GetVersionExW": 3, "SHELL32.dll!SHGetFolderPathW": 4, "ADVAPI32.dll!RegOpenCurrentUser": 1, "KERNEL32.dll!GlobalFree": 18, "COMCTL32.dll!ImageList_AddMasked": 1, "COMCTL32.dll!ImageList_SetOverlayImage": 2, "COMCTL32.dll!ImageList_Draw": 3, "GDI32.dll!GetTextColor": 22, "GDI32.dll!CreateDIBSection": 11, "MSIMG32.dll!GradientFill": 1, "GDI32.dll!CreatePatternBrush": 10, "KERNEL32.dll!RaiseException": 8, "KERNEL32.dll!DecodePointer": 27, "USER32.dll!DrawFocusRect": 9, "KERNEL32.dll!GlobalAlloc": 14, "KERNEL32.dll!GlobalLock": 26, "KERNEL32.dll!GlobalUnlock": 27, "ole32.dll!CreateStreamOnHGlobal": 4, "GDI32.dll!TextOutW": 2, "KERNEL32.dll!ResetEvent": 4, "KERNEL32.dll!SuspendThread": 2, "KERNEL32.dll!TerminateThread": 1, "USER32.dll!CloseWindow": 2, "USER32.dll!DrawIconEx": 13, "USER32.dll!GetFocus": 53, "gdiplus.dll!GdiplusStartup": 3, "gdiplus.dll!GdipCreateLineBrushI": 1, "gdiplus.dll!GdipCreateFromHDC": 2, "gdiplus.dll!GdipFillRectangleI": 1, "GDI32.dll!RoundRect": 4, "gdiplus.dll!GdipDeleteGraphics": 3, "gdiplus.dll!GdipDeleteBrush": 4, "USER32.dll!UpdateWindow": 157, "USER32.dll!LoadImageW": 11, "gdiplus.dll!GdipFree": 2, "gdiplus.dll!GdipCloneBrush": 1, "gdiplus.dll!GdipAlloc": 3, "USER32.dll!GetClassNameW": 11, "USER32.dll!SetWindowLongPtrW": 10, "USER32.dll!MoveWindow": 6, "GDI32.dll!GetPixel": 16, "GDI32.dll!CreateBitmap": 16, "GDI32.dll!SetStretchBltMode": 6, "GDI32.dll!SetBkColor": 11, "USER32.dll!CallWindowProcW": 4, "USER32.dll!RedrawWindow": 220, "USER32.dll!BeginPaint": 4, "USER32.dll!IsWindowEnabled": 13, "USER32.dll!GetCursorPos": 100, "USER32.dll!PtInRect": 231, "USER32.dll!DrawFrameControl": 3, "GDI32.dll!CreateBrushIndirect": 1, "GDI32.dll!PatBlt": 67, "USER32.dll!EndPaint": 4, "GDI32.dll!GetTextExtentPointW": 2, "KERNEL32.dll!GetProcessHeap": 21, "KERNEL32.dll!HeapFree": 17, "KERNEL32.dll!HeapAlloc": 7, "USER32.dll!GetMenuItemCount": 36, "USER32.dll!GetSubMenu": 31, "USER32.dll!GetMenuItemID": 18, "USER32.dll!SetMenuItemInfoW": 2, "USER32.dll!GetMenuItemInfoW": 11, "USER32.dll!IsMenu": 14, "USER32.dll!DestroyMenu": 17, "USER32.dll!LoadMenuIndirectW": 2, "USER32.dll!RemoveMenu": 12, "USER32.dll!SetMenuItemBitmaps": 5, "KERNEL32.dll!EncodePointer": 28, "KERNEL32.dll!GetThreadLocale": 2, "KERNEL32.dll!SetThreadLocale": 4, "OLEAUT32.dll!SysStringLen": 4, "OLEAUT32.dll!SysFreeString": 8, "ole32.dll!StringFromGUID2": 1, "OLEAUT32.dll!LoadTypeLib": 3, "OLEAUT32.dll!SysAllocString": 13, "USER32.dll!CheckMenuItem": 16, "USER32.dll!EnableMenuItem": 49, "USER32.dll!SetWindowTextW": 7, "ADVAPI32.dll!LookupPrivilegeValueW": 1, "ADVAPI32.dll!AdjustTokenPrivileges": 1, "USER32.dll!ExitWindowsEx": 1, "GDI32.dll!CreateRoundRectRgn": 3, "GDI32.dll!SetBrushOrgEx": 3, "GDI32.dll!FillRgn": 2, "GDI32.dll!CreateDCW": 2, "USER32.dll!SetCursor": 39, "USER32.dll!GetCapture": 43, "USER32.dll!SetCapture": 44, "USER32.dll!ClientToScreen": 56, "USER32.dll!ReleaseCapture": 87, "USER32.dll!RegisterClassExW": 1, "USER32.dll!AdjustWindowRect": 1, "USER32.dll!PeekMessageW": 22, "USER32.dll!DefWindowProcW": 4, "KERNEL32.dll!OutputDebugStringA": 2, "USER32.dll!SetCursorPos": 4, "USER32.dll!ScreenToClient": 101, "GDI32.dll!CreatePen": 33, "GDI32.dll!Rectangle": 12, "GDI32.dll!UnrealizeObject": 1, "USER32.dll!SetRect": 36, "USER32.dll!OffsetRect": 173, "USER32.dll!GetKeyState": 53, "USER32.dll!EnumDisplaySettingsW": 1, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 3, "KERNEL32.dll!HeapDestroy": 2, "ADVAPI32.dll!ImpersonateSelf": 1, "KERNEL32.dll!GetCurrentThread": 2, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!GetLengthSid": 1, "ADVAPI32.dll!InitializeAcl": 1, "ADVAPI32.dll!AddAccessAllowedAce": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "ADVAPI32.dll!SetSecurityDescriptorGroup": 1, "ADVAPI32.dll!SetSecurityDescriptorOwner": 1, "ADVAPI32.dll!IsValidSecurityDescriptor": 1, "ADVAPI32.dll!AccessCheck": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "gdiplus.dll!GdiplusShutdown": 2, "gdiplus.dll!GdipCreateBitmapFromStreamICM": 1, "gdiplus.dll!GdipCreateHBITMAPFromBitmap": 1, "gdiplus.dll!GdipDisposeImage": 2, "gdiplus.dll!GdipCloneImage": 1, "USER32.dll!ShowCaret": 1, "USER32.dll!CreateIconIndirect": 1, "SHELL32.dll!Shell_NotifyIconGetRect": 1, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 1, "WTSAPI32.dll!WTSEnumerateSessionsW": 2, "WTSAPI32.dll!WTSFreeMemory": 2, "ADVAPI32.dll!DuplicateTokenEx": 2, "USERENV.dll!CreateEnvironmentBlock": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "SHLWAPI.dll!StrStrIW": 1, "USER32.dll!GetThreadDesktop": 2, "USER32.dll!OpenDesktopW": 1, "USER32.dll!SetThreadDesktop": 3, "USER32.dll!OpenInputDesktop": 2, "USER32.dll!CloseDesktop": 3, "USER32.dll!GetUserObjectInformationW": 2, "ole32.dll!CoAllowSetForegroundWindow": 1, "ole32.dll!CoInitializeEx": 3, "ole32.dll!CoUninitialize": 6, "gdiplus.dll!GdipCreateBitmapFromStream": 1, "USER32.dll!DrawTextExW": 1, "GDI32.dll!Escape": 1, "GDI32.dll!ExcludeClipRect": 2, "GDI32.dll!GetClipBox": 1, "GDI32.dll!GetLayout": 1, "USER32.dll!GrayStringW": 1, "GDI32.dll!IntersectClipRect": 3, "GDI32.dll!MoveToEx": 3, "GDI32.dll!LineTo": 1, "GDI32.dll!OffsetViewportOrgEx": 2, "GDI32.dll!OffsetWindowOrgEx": 2, "GDI32.dll!PtVisible": 1, "GDI32.dll!RectVisible": 1, "GDI32.dll!RestoreDC": 2, "GDI32.dll!SaveDC": 2, "GDI32.dll!ScaleViewportExtEx": 2, "GDI32.dll!ScaleWindowExtEx": 2, "GDI32.dll!SelectClipRgn": 2, "GDI32.dll!ExtSelectClipRgn": 2, "GDI32.dll!SelectPalette": 1, "GDI32.dll!SetLayout": 1, "GDI32.dll!SetMapMode": 4, "GDI32.dll!SetPolyFillMode": 2, "GDI32.dll!SetROP2": 2, "GDI32.dll!SetTextAlign": 2, "GDI32.dll!SetViewportExtEx": 3, "GDI32.dll!SetViewportOrgEx": 4, "GDI32.dll!SetWindowExtEx": 3, "GDI32.dll!SetWindowOrgEx": 4, "USER32.dll!TabbedTextOutW": 1, "USER32.dll!GetLastActivePopup": 5, "USER32.dll!MessageBoxW": 2, "USER32.dll!GetMenuState": 6, "USER32.dll!GetMenuStringW": 3, "USER32.dll!AppendMenuW": 28, "KERNEL32.dll!GlobalSize": 4, "ole32.dll!OleDuplicateData": 1, "GDI32.dll!CopyMetaFileW": 1, "KERNEL32.dll!CopyFileW": 1, "USER32.dll!IsChild": 24, "USER32.dll!GetWindow": 49, "USER32.dll!SetWindowsHookExW": 4, "USER32.dll!GetClassInfoW": 5, "USER32.dll!EqualRect": 39, "USER32.dll!DeferWindowPos": 5, "USER32.dll!UnhookWindowsHookEx": 8, "OLEAUT32.dll!VariantInit": 1, "OLEAUT32.dll!VariantChangeType": 8, "OLEAUT32.dll!VariantClear": 12, "USER32.dll!AdjustWindowRectEx": 5, "USER32.dll!ValidateRect": 5, "USER32.dll!ShowScrollBar": 4, "USER32.dll!GetMessageTime": 1, "USER32.dll!GetMessagePos": 1, "USER32.dll!GetTopWindow": 11, "USER32.dll!GetWindowTextLengthW": 4, "USER32.dll!GetMenu": 9, "USER32.dll!GetScrollInfo": 1, "USER32.dll!GetScrollPos": 4, "USER32.dll!GetScrollRange": 1, "USER32.dll!GetWindowPlacement": 2, "USER32.dll!SetActiveWindow": 5, "USER32.dll!SetFocus": 10, "USER32.dll!GetDlgCtrlID": 13, "USER32.dll!BeginDeferWindowPos": 12, "USER32.dll!EndDeferWindowPos": 11, "USER32.dll!ScrollWindow": 1, "USER32.dll!SetMenu": 6, "USER32.dll!SetScrollInfo": 1, "USER32.dll!SetScrollPos": 7, "USER32.dll!SetScrollRange": 1, "USER32.dll!SetWindowPlacement": 1, "USER32.dll!TrackPopupMenu": 9, "USER32.dll!TrackPopupMenuEx": 1, "USER32.dll!WinHelpW": 2, "USER32.dll!GetPropW": 4, "USER32.dll!RemovePropW": 2, "KERNEL32.dll!GlobalFindAtomW": 1, "KERNEL32.dll!GlobalDeleteAtom": 3, "USER32.dll!CallNextHookEx": 5, "USER32.dll!GetClassLongPtrW": 9, "USER32.dll!SetPropW": 2, "KERNEL32.dll!GlobalAddAtomW": 3, "KERNEL32.dll!LoadLibraryW": 5, "KERNEL32.dll!DeactivateActCtx": 49, "USER32.dll!GetClassInfoExW": 1, "KERNEL32.dll!ActivateActCtx": 2, "USER32.dll!RegisterClassW": 1, "KERNEL32.dll!QueryActCtxW": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!CreateActCtxW": 1, "KERNEL32.dll!FindActCtxSectionStringW": 1, "USER32.dll!CheckDlgButton": 1, "USER32.dll!IsDialogMessageW": 1, "USER32.dll!IsDlgButtonChecked": 1, "USER32.dll!SendDlgItemMessageW": 1, "USER32.dll!SetDlgItemTextW": 1, "USER32.dll!GetMenuCheckMarkDimensions": 1, "USER32.dll!GetActiveWindow": 7, "USER32.dll!EndDialog": 1, "USER32.dll!GetNextDlgTabItem": 4, "USER32.dll!CreateDialogIndirectParamW": 1, "USER32.dll!SendDlgItemMessageA": 2, "KERNEL32.dll!lstrcmpA": 1, "KERNEL32.dll!SetThreadPriority": 3, "KERNEL32.dll!ResumeThread": 5, "GDI32.dll!DPtoLP": 3, "GDI32.dll!CreateRectRgnIndirect": 26, "USER32.dll!IntersectRect": 33, "GDI32.dll!CreateRectRgn": 14, "GDI32.dll!CombineRgn": 12, "GDI32.dll!SetRectRgn": 3, "USER32.dll!SystemParametersInfoW": 22, "SHLWAPI.dll!PathFindExtensionW": 3, "ole32.dll!CoInitialize": 2, "KERNEL32.dll!GetPrivateProfileIntW": 1, "KERNEL32.dll!GetPrivateProfileStringW": 1, "KERNEL32.dll!WritePrivateProfileStringW": 2, "ADVAPI32.dll!RegEnumKeyW": 2, "ADVAPI32.dll!RegQueryValueW": 1, "USER32.dll!ShowOwnedPopups": 1, "USER32.dll!WindowFromPoint": 10, "KERNEL32.dll!GetProfileIntW": 6, "USER32.dll!GetDCEx": 1, "KERNEL32.dll!FileTimeToSystemTime": 7, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!GetFileTime": 1, "KERNEL32.dll!FileTimeToLocalFileTime": 6, "SHLWAPI.dll!PathStripToRootW": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!GetFileSize": 2, "KERNEL32.dll!SetFilePointer": 3, "KERNEL32.dll!LockFile": 1, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!UnlockFile": 1, "SHLWAPI.dll!PathIsUNCW": 1, "KERNEL32.dll!GetVolumeInformationW": 1, "USER32.dll!CharUpperW": 6, "USER32.dll!UnregisterClassW": 1, "KERNEL32.dll!GlobalFlags": 1, "KERNEL32.dll!CompareStringW": 4, "USER32.dll!RealChildWindowFromPoint": 1, "ole32.dll!CoDisconnectObject": 1, "USER32.dll!GetSysColorBrush": 11, "KERNEL32.dll!TlsAlloc": 4, "KERNEL32.dll!InitializeCriticalSection": 4, "KERNEL32.dll!TlsFree": 4, "KERNEL32.dll!GlobalHandle": 3, "KERNEL32.dll!GlobalReAlloc": 2, "KERNEL32.dll!TlsSetValue": 5, "KERNEL32.dll!TlsGetValue": 6, "KERNEL32.dll!LocalReAlloc": 1, "OLEAUT32.dll!SystemTimeToVariantTime": 1, "OLEAUT32.dll!VariantTimeToSystemTime": 1, "OLEAUT32.dll!VarBstrFromDate": 1, "UxTheme.dll!DrawThemeText": 1, "KERNEL32.dll!GetSystemDefaultUILanguage": 1, "KERNEL32.dll!VirtualProtect": 3, "USER32.dll!MapDialogRect": 1, "USER32.dll!GetAsyncKeyState": 31, "KERNEL32.dll!SetErrorMode": 2, "KERNEL32.dll!DeleteFileW": 3, "GDI32.dll!EnumFontFamiliesExW": 3, "SHELL32.dll!SHGetDesktopFolder": 7, "USER32.dll!CreatePopupMenu": 15, "USER32.dll!GetMenuDefaultItem": 4, "KERNEL32.dll!GetWindowsDirectoryW": 2, "SHELL32.dll!SHGetFileInfoW": 12, "SHELL32.dll!SHGetPathFromIDListW": 4, "SHLWAPI.dll!StrFormatKBSizeW": 1, "USER32.dll!GetNextDlgGroupItem": 4, "GDI32.dll!GetObjectType": 1, "USER32.dll!CopyImage": 3, "GDI32.dll!RealizePalette": 5, "GDI32.dll!GetNearestPaletteIndex": 3, "GDI32.dll!GetSystemPaletteEntries": 2, "GDI32.dll!GetPaletteEntries": 3, "GDI32.dll!CreatePalette": 4, "GDI32.dll!GetBkColor": 9, "KERNEL32.dll!lstrcpyW": 12, "USER32.dll!MessageBeep": 32, "GDI32.dll!GetTextMetricsW": 15, "USER32.dll!NotifyWinEvent": 14, "USER32.dll!HideCaret": 1, "USER32.dll!EnableScrollBar": 7, "USER32.dll!InvertRect": 4, "OLEAUT32.dll!SysAllocStringLen": 26, "USER32.dll!MapVirtualKeyW": 3, "GDI32.dll!CreateDIBitmap": 1, "UxTheme.dll!DrawThemeParentBackground": 3, "USER32.dll!EnumDisplayMonitors": 1, "GDI32.dll!GetTextCharsetInfo": 1, "GDI32.dll!EnumFontFamiliesW": 2, "GDI32.dll!SetPixel": 8, "USER32.dll!DrawStateW": 13, "USER32.dll!OpenClipboard": 4, "USER32.dll!EmptyClipboard": 4, "USER32.dll!CloseClipboard": 7, "USER32.dll!SetClipboardData": 4, "GDI32.dll!SetDIBColorTable": 1, "MSIMG32.dll!AlphaBlend": 5, "USER32.dll!SetClassLongPtrW": 1, "USER32.dll!SetParent": 30, "USER32.dll!SetWindowRgn": 21, "UxTheme.dll!CloseThemeData": 23, "UxTheme.dll!DrawThemeBackground": 23, "UxTheme.dll!GetCurrentThemeName": 1, "UxTheme.dll!GetThemeColor": 19, "USER32.dll!DrawEdge": 2, "GDI32.dll!CreateHatchBrush": 1, "GDI32.dll!Ellipse": 10, "GDI32.dll!CreatePolygonRgn": 13, "GDI32.dll!Polyline": 5, "GDI32.dll!Polygon": 7, "GDI32.dll!CreateEllipticRgn": 3, "UxTheme.dll!OpenThemeData": 23, "USER32.dll!LoadMenuW": 11, "USER32.dll!IsZoomed": 13, "USER32.dll!GetSystemMenu": 9, "USER32.dll!DeleteMenu": 11, "USER32.dll!CopyIcon": 1, "GDI32.dll!LPtoDP": 3, "SHLWAPI.dll!PathRemoveFileSpecW": 4, "SHELL32.dll!SHBrowseForFolderW": 1, "KERNEL32.dll!GetCurrentDirectoryW": 2, "USER32.dll!UpdateLayeredWindow": 3, "USER32.dll!MonitorFromPoint": 8, "USER32.dll!LoadAcceleratorsW": 3, "KERNEL32.dll!GlobalGetAtomNameW": 2, "SHELL32.dll!DragQueryFileW": 2, "SHELL32.dll!DragFinish": 1, "USER32.dll!TranslateAcceleratorW": 4, "USER32.dll!GetComboBoxInfo": 1, "GDI32.dll!GetRgnBox": 5, "GDI32.dll!OffsetRgn": 2, "USER32.dll!GetKeyboardLayout": 3, "USER32.dll!MapVirtualKeyExW": 1, "USER32.dll!GetKeyNameTextW": 1, "USER32.dll!IsCharLowerW": 1, "USER32.dll!GetKeyboardState": 2, "USER32.dll!ToUnicodeEx": 2, "USER32.dll!CopyAcceleratorTableW": 5, "USER32.dll!DestroyAcceleratorTable": 6, "USER32.dll!CreateAcceleratorTableW": 1, "KERNEL32.dll!GetTempPathW": 1, "USER32.dll!LockWindowUpdate": 7, "USER32.dll!SetMenuDefaultItem": 3, "USER32.dll!GetDoubleClickTime": 1, "ole32.dll!ReleaseStgMedium": 5, "ole32.dll!DoDragDrop": 1, "KERNEL32.dll!GetTickCount64": 3, "KERNEL32.dll!SearchPathW": 1, "USER32.dll!RegisterClipboardFormatW": 13, "USER32.dll!CharUpperBuffW": 1, "WINMM.dll!PlaySoundW": 2, "ole32.dll!OleGetClipboard": 1, "USER32.dll!IsClipboardFormatAvailable": 2, "ole32.dll!CoLockObjectExternal": 3, "ole32.dll!RegisterDragDrop": 1, "ole32.dll!RevokeDragDrop": 1, "USER32.dll!GetUpdateRect": 1, "KERNEL32.dll!GetTempFileNameW": 1, "UxTheme.dll!GetWindowTheme": 2, "USER32.dll!ModifyMenuW": 1, "UxTheme.dll!IsAppThemed": 5, "UxTheme.dll!IsThemeBackgroundPartiallyTransparent": 2, "USER32.dll!WaitMessage": 2, "USER32.dll!DefMDIChildProcW": 1, "USER32.dll!DefFrameProcW": 1, "USER32.dll!DrawMenuBar": 2, "USER32.dll!TranslateMDISysAccel": 1, "UxTheme.dll!GetThemeSysColor": 23, "USER32.dll!SubtractRect": 1, "USER32.dll!CreateMenu": 2, "ole32.dll!OleCreateMenuDescriptor": 2, "ole32.dll!OleDestroyMenuDescriptor": 1, "ole32.dll!IsAccelerator": 1, "ole32.dll!OleTranslateAccelerator": 1, "GDI32.dll!GetBoundsRect": 1, "GDI32.dll!FrameRgn": 5, "GDI32.dll!PtInRegion": 4, "USER32.dll!GetWindowRgn": 1, "OLEAUT32.dll!VariantCopy": 2, "UxTheme.dll!GetThemePartSize": 4, "USER32.dll!DestroyCursor": 7, "GDI32.dll!ExtFloodFill": 1, "GDI32.dll!SetPaletteEntries": 1, "GDI32.dll!SetPixelV": 1, "ole32.dll!OleLockRunning": 1, "GDI32.dll!GetViewportOrgEx": 2, "GDI32.dll!GetTextFaceW": 1, "GDI32.dll!GetWindowExtEx": 3, "GDI32.dll!GetViewportExtEx": 3, "GDI32.dll!GetWindowOrgEx": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "ADVAPI32.dll!RegOpenKeyExA": 1, "ADVAPI32.dll!RegQueryValueExA": 1, "KERNEL32.dll!ExpandEnvironmentStringsA": 1, "KERNEL32.dll!LoadLibraryExA": 3, "IMM32.dll!ImmGetContext": 1, "IMM32.dll!ImmReleaseContext": 1, "IMM32.dll!ImmGetOpenStatus": 1, "USER32.dll!UnpackDDElParam": 1, "USER32.dll!ReuseDDElParam": 1, "WINSPOOL.DRV!OpenPrinterW": 1, "WINSPOOL.DRV!DocumentPropertiesW": 1, "WINSPOOL.DRV!ClosePrinter": 1, "SHELL32.dll!SHGetSpecialFolderLocation": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!ReleaseSemaphore": 6, "KERNEL32.dll!SetWaitableTimer": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!CreateWaitableTimerA": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!WaitForMultipleObjectsEx": 1, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "OLEACC.dll!LresultFromObject": 1, "OLEACC.dll!AccessibleObjectFromWindow": 1, "OLEACC.dll!CreateStdAccessibleObject": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!ExitThread": 3, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!HeapQueryInformation": 1, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!WriteConsoleW": 2, "gdiplus.dll!GdipGetImageGraphicsContext": 1, "gdiplus.dll!GdipGetImageWidth": 1, "gdiplus.dll!GdipGetImageHeight": 1, "gdiplus.dll!GdipGetImagePixelFormat": 1, "gdiplus.dll!GdipGetImagePalette": 1, "gdiplus.dll!GdipGetImagePaletteSize": 1, "gdiplus.dll!GdipCreateBitmapFromScan0": 1, "gdiplus.dll!GdipBitmapLockBits": 1, "gdiplus.dll!GdipBitmapUnlockBits": 1, "gdiplus.dll!GdipDrawImageI": 1, "gdiplus.dll!GdipCreateBitmapFromHBITMAP": 1, "gdiplus.dll!GdipSetInterpolationMode": 1, "gdiplus.dll!GdipDrawImageRectI": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA Overlay\\Rise.dll", "sha256": "6fe292b656acf7611b1bfe6f94c386d01f3c9aa7312c6c29a135b8313a583f60", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 2935296, "processed_bytes": 2935296, "instructions": 1435738, "skipdata_bytes": 624 } ], "utc": "2026-11-11T21:40:43.943071+00:00", "instructions": 1435738, "skipdata_bytes": 624, "calls": 40492, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 19, "KERNEL32.dll!InitializeCriticalSectionEx": 32, "KERNEL32.dll!GetLastError": 174, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1245, "api-ms-win-crt-heap-l1-1-0.dll!free": 602, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 55, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 16, "KERNEL32.dll!DeleteCriticalSection": 37, "USER32.dll!UnregisterClassW": 17, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 5, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 26, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 16, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 32, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 52, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 54, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 10, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 72, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 19, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 10, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 44, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 7, "KERNEL32.dll!GetSystemPowerStatus": 2, "ADVAPI32.dll!RegOpenKeyExA": 2, "ADVAPI32.dll!RegQueryValueExA": 2, "ADVAPI32.dll!RegCloseKey": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 4, "api-ms-win-crt-time-l1-1-0.dll!strftime": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fopen_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 7, "api-ms-win-crt-convert-l1-1-0.dll!wcstombs_s": 7, "ole32.dll!CoTaskMemFree": 5, "SHLWAPI.dll!PathFileExistsW": 5, "api-ms-win-crt-convert-l1-1-0.dll!mbstowcs_s": 15, "KERNEL32.dll!QueryPerformanceFrequency": 5, "KERNEL32.dll!LoadLibraryW": 3, "KERNEL32.dll!WideCharToMultiByte": 13, "KERNEL32.dll!GetFileInformationByHandle": 3, "KERNEL32.dll!CreateFileA": 2, "KERNEL32.dll!ReadFile": 2, "KERNEL32.dll!WriteFile": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_controlfp_s": 10, "KERNEL32.dll!SetEvent": 5, "KERNEL32.dll!CreateEventA": 7, "KERNEL32.dll!WaitForSingleObject": 14, "KERNEL32.dll!ResetEvent": 5, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!CreateSemaphoreW": 2, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!Sleep": 5, "KERNEL32.dll!CreateThread": 6, "KERNEL32.dll!SetThreadPriority": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 4, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!OpenEventW": 2, "api-ms-win-crt-string-l1-1-0.dll!strncpy": 3, "api-ms-win-crt-string-l1-1-0.dll!_stricmp": 2, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 4, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 4, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "ole32.dll!CoCreateGuid": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!strchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!exp": 1, "api-ms-win-crt-math-l1-1-0.dll!log": 1, "api-ms-win-crt-math-l1-1-0.dll!pow": 1, "api-ms-win-crt-math-l1-1-0.dll!sin": 1, "api-ms-win-crt-math-l1-1-0.dll!sqrt": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\ShadowPlay\\NVSPCAPS\\_nvspcaps64.dll", "sha256": "0c8f771fa27f073701e99f1b3d49d45e6f99f1c2bba4291fa6003409a1c7ae1d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 3005440, "processed_bytes": 3005440, "instructions": 1439711, "skipdata_bytes": 452 } ], "utc": "2026-11-11T21:40:44.422343+00:00", "instructions": 1439711, "skipdata_bytes": 452, "calls": 40319, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSection": 29, "KERNEL32.dll!GetProcessHeap": 20, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 448, "KERNEL32.dll!CloseHandle": 197, "USER32.dll!EnumDisplayDevicesA": 5, "KERNEL32.dll!Sleep": 15, "KERNEL32.dll!FreeLibrary": 76, "KERNEL32.dll!GetCurrentProcessId": 19, "KERNEL32.dll!GetCurrentProcess": 14, "KERNEL32.dll!GetSystemDirectoryW": 22, "KERNEL32.dll!GetProcAddress": 142, "KERNEL32.dll!CreateWaitableTimerA": 5, "KERNEL32.dll!SetWaitableTimer": 9, "KERNEL32.dll!CancelWaitableTimer": 7, "KERNEL32.dll!LocalAlloc": 61, "KERNEL32.dll!LocalFree": 119, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!SetLastError": 116, "KERNEL32.dll!GetModuleHandleW": 17, "KERNEL32.dll!GetModuleFileNameW": 17, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!LoadLibraryExW": 31, "KERNEL32.dll!CreateFileW": 14, "KERNEL32.dll!GetModuleFileNameA": 4, "KERNEL32.dll!CreateProcessA": 5, "KERNEL32.dll!CreateProcessW": 2, "SHELL32.dll!SHGetFolderPathW": 2, "ole32.dll!CoTaskMemFree": 17, "SHELL32.dll!SHGetFolderPathA": 9, "KERNEL32.dll!CreateFileA": 7, "KERNEL32.dll!GetCurrentThreadId": 24, "KERNEL32.dll!EnterCriticalSection": 262, "KERNEL32.dll!LeaveCriticalSection": 294, "KERNEL32.dll!DeleteCriticalSection": 61, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!WaitForMultipleObjects": 15, "KERNEL32.dll!SetEvent": 35, "KERNEL32.dll!CreateEventA": 23, "KERNEL32.dll!CreateSemaphoreA": 3, "KERNEL32.dll!WaitForSingleObject": 36, "USER32.dll!IsWindow": 11, "USER32.dll!PostMessageA": 13, "OLEAUT32.dll!SysAllocString": 11, "OLEAUT32.dll!SysFreeString": 21, "OLEAUT32.dll!SysAllocStringLen": 7, "KERNEL32.dll!ResetEvent": 13, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantCopy": 2, "KERNEL32.dll!InitializeSRWLock": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 9, "KERNEL32.dll!ReleaseSRWLockExclusive": 8, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 3, "KERNEL32.dll!TryEnterCriticalSection": 3, "ADVAPI32.dll!OpenEventLogA": 2, "ADVAPI32.dll!CloseEventLog": 3, "ADVAPI32.dll!ReadEventLogA": 2, "KERNEL32.dll!GetFileAttributesA": 7, "KERNEL32.dll!GetExitCodeProcess": 3, "KERNEL32.dll!GetTickCount": 9, "USER32.dll!WaitForInputIdle": 3, "KERNEL32.dll!TerminateProcess": 7, "USER32.dll!FindWindowW": 6, "KERNEL32.dll!OpenEventA": 17, "USER32.dll!GetForegroundWindow": 9, "KERNEL32.dll!OpenProcess": 20, "KERNEL32.dll!HeapFree": 13, "KERNEL32.dll!QueryPerformanceFrequency": 7, "KERNEL32.dll!QueryPerformanceCounter": 12, "KERNEL32.dll!CreateEventW": 5, "USER32.dll!FindWindowA": 9, "KERNEL32.dll!VirtualFree": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 16, "USER32.dll!GetSystemMetrics": 6, "USER32.dll!EnumDisplaySettingsA": 5, "KERNEL32.dll!CreateNamedPipeW": 4, "KERNEL32.dll!GetProcessTimes": 5, "KERNEL32.dll!ConnectNamedPipe": 3, "KERNEL32.dll!CancelIoEx": 3, "KERNEL32.dll!GetOverlappedResult": 5, "KERNEL32.dll!DisconnectNamedPipe": 4, "KERNEL32.dll!GetModuleHandleExW": 13, "KERNEL32.dll!FreeLibraryAndExitThread": 3, "KERNEL32.dll!GetNamedPipeClientProcessId": 2, "KERNEL32.dll!WriteFile": 12, "KERNEL32.dll!ReadFile": 8, "KERNEL32.dll!CreateThread": 5, "CRYPT32.dll!CertGetNameStringW": 5, "CRYPT32.dll!CryptQueryObject": 2, "CRYPT32.dll!CryptMsgGetParam": 3, "CRYPT32.dll!CertFindCertificateInStore": 2, "CRYPT32.dll!CertFreeCertificateContext": 2, "CRYPT32.dll!CryptMsgClose": 2, "CRYPT32.dll!CertCloseStore": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 4, "SHLWAPI.dll!PathFindFileNameW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!RtlCaptureStackBackTrace": 2, "USER32.dll!GetDisplayConfigBufferSizes": 3, "USER32.dll!QueryDisplayConfig": 3, "KERNEL32.dll!LoadLibraryA": 10, "KERNEL32.dll!WideCharToMultiByte": 15, "KERNEL32.dll!GetThreadId": 10, "USER32.dll!PostThreadMessageA": 7, "USER32.dll!RegisterDeviceNotificationA": 3, "KERNEL32.dll!GetModuleHandleA": 2, "USER32.dll!RegisterClassExA": 2, "USER32.dll!CreateWindowExA": 2, "USER32.dll!GetMessageA": 3, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageA": 2, "USER32.dll!UnregisterDeviceNotification": 3, "USER32.dll!DestroyWindow": 2, "USER32.dll!UnregisterClassA": 8, "USER32.dll!PostQuitMessage": 2, "USER32.dll!DefWindowProcA": 2, "KERNEL32.dll!GetCommandLineA": 4, "ADVAPI32.dll!CreateWellKnownSid": 2, "ADVAPI32.dll!ImpersonateSelf": 2, "KERNEL32.dll!GetCurrentThread": 6, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!CreateRestrictedToken": 2, "ADVAPI32.dll!SetThreadToken": 5, "ADVAPI32.dll!RevertToSelf": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!CopyFileA": 3, "ADVAPI32.dll!GetSecurityDescriptorDacl": 9, "KERNEL32.dll!CreateDirectoryA": 9, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclA": 3, "ADVAPI32.dll!InitializeSecurityDescriptor": 5, "ADVAPI32.dll!SetSecurityDescriptorDacl": 5, "ADVAPI32.dll!FreeSid": 4, "ADVAPI32.dll!GetUserNameA": 2, "ADVAPI32.dll!GetUserNameW": 3, "KERNEL32.dll!GetLocalTime": 6, "KERNEL32.dll!OutputDebugStringA": 2, "ADVAPI32.dll!RegOpenKeyExA": 19, "ADVAPI32.dll!RegQueryValueExA": 14, "ADVAPI32.dll!RegCloseKey": 14, "KERNEL32.dll!MoveFileExA": 3, "KERNEL32.dll!GetFinalPathNameByHandleA": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!GetSystemInfo": 5, "KERNEL32.dll!MultiByteToWideChar": 14, "ole32.dll!CoInitializeEx": 9, "KERNEL32.dll!DecodePointer": 8, "ole32.dll!CoUninitialize": 9, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 8, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 11, "USER32.dll!RedrawWindow": 7, "SETUPAPI.dll!SetupDiGetClassDevsW": 2, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 3, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 2, "KERNEL32.dll!GetTempPathW": 8, "KERNEL32.dll!HeapSize": 3, "KERNEL32.dll!CreateDirectoryW": 6, "KERNEL32.dll!RemoveDirectoryW": 2, "ole32.dll!CoCreateInstance": 8, "OLEAUT32.dll!VariantClear": 7, "KERNEL32.dll!HeapReAlloc": 3, "ole32.dll!PropVariantClear": 8, "ADVAPI32.dll!RegCreateKeyExA": 6, "ADVAPI32.dll!RegCopyTreeA": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "ADVAPI32.dll!RegSetValueExA": 5, "ADVAPI32.dll!RegDeleteKeyExA": 3, "ADVAPI32.dll!RegDeleteKeyValueA": 2, "KERNEL32.dll!SetCurrentDirectoryA": 2, "ADVAPI32.dll!OpenProcessToken": 3, "ADVAPI32.dll!DuplicateTokenEx": 2, "ADVAPI32.dll!GetLengthSid": 4, "ADVAPI32.dll!SetTokenInformation": 2, "USER32.dll!FindWindowExW": 6, "USER32.dll!GetShellWindow": 3, "USER32.dll!EnumWindows": 4, "USER32.dll!EnumDisplaySettingsExA": 3, "ADVAPI32.dll!OpenSCManagerA": 2, "ADVAPI32.dll!CloseServiceHandle": 2, "KERNEL32.dll!GetSystemDirectoryA": 2, "KERNEL32.dll!GetVolumeInformationA": 2, "KERNEL32.dll!GetVersionExA": 6, "USER32.dll!GetWindowThreadProcessId": 14, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 2, "USER32.dll!SendMessageA": 2, "SHELL32.dll!SHGetPropertyStoreFromParsingName": 2, "USER32.dll!wsprintfW": 4, "KERNEL32.dll!GetSystemTime": 2, "USER32.dll!GetWindowLongA": 4, "USER32.dll!IsWindowVisible": 7, "USER32.dll!GetWindow": 4, "USER32.dll!GetDesktopWindow": 2, "USER32.dll!GetWindowRect": 2, "USER32.dll!GetWindowDisplayAffinity": 2, "KERNEL32.dll!QueryFullProcessImageNameA": 3, "USER32.dll!EnumChildWindows": 2, "USER32.dll!GetWindowTextW": 2, "KERNEL32.dll!K32GetModuleFileNameExW": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!Module32FirstW": 1, "KERNEL32.dll!Module32NextW": 1, "KERNEL32.dll!K32GetProcessMemoryInfo": 1, "KERNEL32.dll!K32GetProcessImageFileNameA": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "WTSAPI32.dll!WTSRegisterSessionNotification": 1, "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1, "VERSION.dll!GetFileVersionInfoSizeA": 1, "VERSION.dll!GetFileVersionInfoA": 1, "VERSION.dll!VerQueryValueA": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "d3d11.dll!D3D11CreateDevice": 1, "dxgi.dll!CreateDXGIFactory1": 1, "KERNEL32.dll!OutputDebugStringW": 7, "KERNEL32.dll!UnmapViewOfFile": 3, "KERNEL32.dll!FlushFileBuffers": 5, "KERNEL32.dll!OpenFileMappingA": 3, "KERNEL32.dll!ReleaseMutex": 2, "KERNEL32.dll!CreateMutexA": 2, "KERNEL32.dll!OpenMutexA": 2, "KERNEL32.dll!CreateNamedPipeA": 2, "ADVAPI32.dll!GetTokenInformation": 5, "ADVAPI32.dll!CopySid": 3, "KERNEL32.dll!CreateFileMappingA": 2, "KERNEL32.dll!MapViewOfFile": 3, "KERNEL32.dll!OpenEventW": 3, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!OpenFileMappingW": 3, "KERNEL32.dll!CreateMutexW": 2, "KERNEL32.dll!OpenMutexW": 3, "KERNEL32.dll!GetLocaleInfoEx": 3, "KERNEL32.dll!FormatMessageA": 3, "KERNEL32.dll!GetNativeSystemInfo": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!LCMapStringEx": 5, "KERNEL32.dll!TryAcquireSRWLockExclusive": 3, "KERNEL32.dll!WakeAllConditionVariable": 6, "KERNEL32.dll!WakeConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 8, "KERNEL32.dll!CloseThreadpoolTimer": 2, "KERNEL32.dll!CloseThreadpoolWait": 2, "KERNEL32.dll!CreateEventExW": 2, "KERNEL32.dll!CreateSemaphoreExW": 2, "KERNEL32.dll!CreateSymbolicLinkW": 2, "KERNEL32.dll!CreateThreadpoolTimer": 2, "KERNEL32.dll!CreateThreadpoolWait": 2, "KERNEL32.dll!FlushProcessWriteBuffers": 2, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 2, "KERNEL32.dll!GetCurrentProcessorNumber": 2, "KERNEL32.dll!GetFileInformationByHandleEx": 2, "KERNEL32.dll!GetTickCount64": 2, "KERNEL32.dll!InitOnceExecuteOnce": 2, "KERNEL32.dll!SetFileInformationByHandle": 2, "KERNEL32.dll!SetThreadpoolTimer": 2, "KERNEL32.dll!SetThreadpoolWait": 2, "KERNEL32.dll!WaitForThreadpoolTimerCallbacks": 2, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!CompareStringEx": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!RtlVirtualUnwind": 6, "KERNEL32.dll!IsDebuggerPresent": 8, "KERNEL32.dll!GetStartupInfoW": 3, "KERNEL32.dll!InitializeSListHead": 2, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptSetProperty": 1, "bcrypt.dll!BCryptCloseAlgorithmProvider": 1, "bcrypt.dll!BCryptGenRandom": 1, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!GetStdHandle": 4, "KERNEL32.dll!GetFileType": 6, "KERNEL32.dll!WriteConsoleW": 7, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 2, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!GetConsoleOutputCP": 2, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 7, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!RtlUnwind": 2 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\Base\\NvCplDisplayPlugin.dll", "sha256": "1ab74d6cff0c2a7e64afdb0f8602c6d3521041d768d935e3cef2ebab69787060", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 3024384, "processed_bytes": 3024384, "instructions": 1492291, "skipdata_bytes": 358 } ], "utc": "2026-11-11T21:40:44.503315+00:00", "instructions": 1492291, "skipdata_bytes": 358, "calls": 43660, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 142, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 1693, "api-ms-win-crt-heap-l1-1-0.dll!free": 1583, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 52, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 16, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 16, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 7, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 9, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 3, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 3, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 10, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 30, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 28, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 18, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 8, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 36, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 56, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 5, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 43, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 5, "KERNEL32.dll!FreeLibrary": 15, "KERNEL32.dll!GetSystemPowerStatus": 2, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 7, "SETUPAPI.dll!SetupDiGetClassDevsW": 3, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 3, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 2, "api-ms-win-crt-string-l1-1-0.dll!towlower": 3, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 5, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 5, "USER32.dll!GetDisplayConfigBufferSizes": 2, "USER32.dll!QueryDisplayConfig": 2, "USER32.dll!DisplayConfigGetDeviceInfo": 3, "ADVAPI32.dll!RegOpenKeyExW": 6, "ADVAPI32.dll!RegQueryValueExW": 7, "SHELL32.dll!SHGetFolderPathW": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 2, "USER32.dll!GetDC": 2, "GDI32.dll!GetDeviceCaps": 3, "USER32.dll!ReleaseDC": 2, "KERNEL32.dll!GetProcAddress": 86, "SETUPAPI.dll!SetupDiOpenDeviceInterfaceW": 2, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 3, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!LookupPrivilegeValueW": 2, "ADVAPI32.dll!AdjustTokenPrivileges": 2, "KERNEL32.dll!CloseHandle": 62, "USER32.dll!ExitWindowsEx": 2, "ADVAPI32.dll!RegCreateKeyExA": 3, "ADVAPI32.dll!RegSetValueExA": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 4, "MSVCP140.dll!?setf@ios_base@std@@QEAAHH@Z": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!GetFileAttributesW": 15, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateFileW": 11, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 6, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "KERNEL32.dll!ProcessIdToSessionId": 3, "ADVAPI32.dll!DuplicateToken": 2, "ADVAPI32.dll!ImpersonateLoggedOnUser": 2, "ADVAPI32.dll!GetUserNameW": 2, "ADVAPI32.dll!RevertToSelf": 2, "ADVAPI32.dll!LookupAccountNameW": 2, "KERNEL32.dll!LocalFree": 67, "KERNEL32.dll!WaitForSingleObject": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 3, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "WTSAPI32.dll!WTSQuerySessionInformationW": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "WTSAPI32.dll!WTSQueryUserToken": 1, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvBackend\\ApplicationOntology\\Ontology64.dll", "sha256": "fb6f988c718b4482eda67b2924fb088b2664b4053e0280f9a5229d05da2ba525", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 3257344, "processed_bytes": 3257344, "instructions": 894445, "skipdata_bytes": 1538 } ], "utc": "2026-11-11T21:40:45.846696+00:00", "instructions": 894445, "skipdata_bytes": 1538, "calls": 53236, "api_reference_counts": { "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!GetLastError": 104, "KERNEL32.dll!CloseHandle": 42, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!GetModuleFileNameW": 3, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!LocalFree": 76, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!WideCharToMultiByte": 10, "KERNEL32.dll!MultiByteToWideChar": 11, "ADVAPI32.dll!CryptGetHashParam": 2, "ADVAPI32.dll!CryptAcquireContextW": 1, "ADVAPI32.dll!CryptCreateHash": 1, "ADVAPI32.dll!CryptDestroyHash": 8, "ADVAPI32.dll!CryptReleaseContext": 8, "ADVAPI32.dll!CryptHashData": 6, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "USER32.dll!GetSystemMetrics": 1, "KERNEL32.dll!WaitForSingleObject": 4, "ole32.dll!CoUninitialize": 2, "KERNEL32.dll!CreatePipe": 3, "KERNEL32.dll!SetHandleInformation": 3, "KERNEL32.dll!ReadFile": 9, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!CreateProcessW": 3, "KERNEL32.dll!FindResourceW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsDeleteString": 25, "api-ms-win-core-winrt-l1-1-0.dll!RoUninitialize": 6, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsCreateString": 5, "api-ms-win-core-winrt-l1-1-0.dll!RoGetActivationFactory": 3, "api-ms-win-core-winrt-l1-1-0.dll!RoInitialize": 4, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsGetStringRawBuffer": 4, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoAllowSetForegroundWindow": 1, "ADVAPI32.dll!RegCloseKey": 33, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 9, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!GetPrivateProfileStringW": 2, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "ole32.dll!CoInitialize": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!GetFileAttributesExW": 5, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!GetSystemDirectoryW": 16, "KERNEL32.dll!LocalAlloc": 43, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!SetLastError": 39, "KERNEL32.dll!GetProcAddress": 57, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!lstrcmpA": 4, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!GetModuleHandleW": 5, "ADVAPI32.dll!RegOpenKeyExW": 3, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegEnumValueW": 1, "ADVAPI32.dll!RegQueryValueExW": 2, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!EnterCriticalSection": 7, "KERNEL32.dll!TryEnterCriticalSection": 1, "KERNEL32.dll!LeaveCriticalSection": 7, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!GetCurrentProcessId": 4, "SHLWAPI.dll!PathFileExistsW": 1, "ADVAPI32.dll!RegOpenKeyA": 2, "ADVAPI32.dll!RegQueryValueExA": 4, "KERNEL32.dll!DeleteFileW": 4, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!CopyFileW": 1, "KERNEL32.dll!MoveFileW": 1, "KERNEL32.dll!GlobalMemoryStatusEx": 1, "ADVAPI32.dll!RegGetValueW": 2, "ADVAPI32.dll!RegCreateKeyExW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "ole32.dll!StringFromGUID2": 1, "KERNEL32.dll!SetFileTime": 1, "ADVAPI32.dll!RegCreateKeyExA": 1, "ADVAPI32.dll!RegSetValueExA": 1, "USER32.dll!EnumDisplayDevicesA": 4, "USER32.dll!EnumDisplaySettingsA": 2, "KERNEL32.dll!GetTempPathW": 3, "KERNEL32.dll!WritePrivateProfileStringW": 1, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!Sleep": 8, "KERNEL32.dll!CallNamedPipeW": 1, "KERNEL32.dll!FreeLibrary": 20, "bcrypt.dll!BCryptOpenAlgorithmProvider": 5, "bcrypt.dll!BCryptSetProperty": 1, "bcrypt.dll!BCryptGenerateSymmetricKey": 3, "bcrypt.dll!BCryptGetProperty": 4, "bcrypt.dll!BCryptCreateHash": 2, "bcrypt.dll!BCryptHashData": 5, "bcrypt.dll!BCryptFinishHash": 2, "bcrypt.dll!BCryptDestroyHash": 3, "bcrypt.dll!BCryptCloseAlgorithmProvider": 5, "bcrypt.dll!BCryptDecrypt": 1, "bcrypt.dll!BCryptDestroyKey": 3, "bcrypt.dll!BCryptEncrypt": 1, "KERNEL32.dll!InitializeSRWLock": 1, "KERNEL32.dll!InitializeConditionVariable": 1, "KERNEL32.dll!ReleaseSRWLockExclusive": 7, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!SleepConditionVariableSRW": 2, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!RtlCaptureStackBackTrace": 1, "dbghelp.dll!SymFromAddr": 1, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!CompareStringEx": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!TlsGetValue": 1, "KERNEL32.dll!TlsSetValue": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!GetLogicalProcessorInformation": 2, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!LoadLibraryW": 1, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetFileInformationByHandleEx": 3, "KERNEL32.dll!HeapCreate": 1, "KERNEL32.dll!GetDiskFreeSpaceW": 1, "KERNEL32.dll!LockFile": 1, "KERNEL32.dll!SetFilePointer": 1, "KERNEL32.dll!GetFullPathNameA": 1, "KERNEL32.dll!UnlockFileEx": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!HeapValidate": 1, "KERNEL32.dll!GetTempPathA": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!GetDiskFreeSpaceA": 1, "KERNEL32.dll!GetFileAttributesA": 1, "KERNEL32.dll!FlushViewOfFile": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!LoadLibraryA": 1, "KERNEL32.dll!HeapCompact": 1, "KERNEL32.dll!HeapDestroy": 1, "KERNEL32.dll!UnlockFile": 1, "KERNEL32.dll!LockFileEx": 1, "KERNEL32.dll!GetFileSize": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "KERNEL32.dll!GetSystemTime": 1, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "KERNEL32.dll!GetTickCount": 1, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NvTelemetry\\NvTelemetryAPI64.dll", "sha256": "ab5455ea4ae1780b9badb809f0a6ead682b8d9e34f1c9c36252b906c697737f4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 3378176, "processed_bytes": 3378176, "instructions": 843095, "skipdata_bytes": 1950 } ], "utc": "2026-11-11T21:40:47.892481+00:00", "instructions": 843095, "skipdata_bytes": 1950, "calls": 58564, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 29, "SHELL32.dll!SHGetFolderPathW": 1, "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "OLEAUT32.dll!SysFreeString": 17, "ole32.dll!CoUninitialize": 10, "KERNEL32.dll!InitOnceBeginInitialize": 1, "KERNEL32.dll!InitOnceComplete": 1, "KERNEL32.dll!GetVolumePathNameW": 1, "KERNEL32.dll!GetLastError": 87, "IPHLPAPI.DLL!GetAdaptersAddresses": 1, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!GetNativeSystemInfo": 1, "OLEAUT32.dll!VariantClear": 7, "ole32.dll!CoInitializeEx": 1, "OLEAUT32.dll!SysStringLen": 1, "ole32.dll!CoCreateInstance": 1, "ole32.dll!CoSetProxyBlanket": 1, "OLEAUT32.dll!SysAllocString": 4, "OLEAUT32.dll!VariantInit": 2, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetElement": 1, "OLEAUT32.dll!VariantChangeType": 1, "KERNEL32.dll!GetProcAddress": 50, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "KERNEL32.dll!CloseHandle": 24, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!MultiByteToWideChar": 26, "KERNEL32.dll!WideCharToMultiByte": 16, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!LoadLibraryExW": 12, "KERNEL32.dll!LocalFree": 14, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!SetLastError": 17, "KERNEL32.dll!GetFileAttributesW": 2, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!LocalAlloc": 5, "KERNEL32.dll!GetFullPathNameW": 5, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 6, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!GetCurrentThreadId": 9, "KERNEL32.dll!GetCurrentProcessId": 2, "KERNEL32.dll!QueryPerformanceCounter": 2, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 2, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!GetFinalPathNameByHandleW": 1, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 5, "KERNEL32.dll!GetModuleHandleExW": 6, "KERNEL32.dll!CloseThreadpoolWork": 1, "KERNEL32.dll!SubmitThreadpoolWork": 1, "KERNEL32.dll!CreateThreadpoolWork": 1, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!QueryPerformanceFrequency": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!DeleteCriticalSection": 9, "KERNEL32.dll!EnterCriticalSection": 15, "KERNEL32.dll!LeaveCriticalSection": 20, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!FreeLibrary": 19, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 6, "KERNEL32.dll!GetStdHandle": 7, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!GetConsoleMode": 3, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "USER32.dll!GetProcessWindowStation": 1, "USER32.dll!GetUserObjectInformationW": 2, "ADVAPI32.dll!RegisterEventSourceW": 1, "ADVAPI32.dll!ReportEventW": 1, "ADVAPI32.dll!DeregisterEventSource": 1, "USER32.dll!MessageBoxW": 1, "KERNEL32.dll!GetEnvironmentVariableW": 5, "KERNEL32.dll!InitializeSRWLock": 2, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!ReleaseSemaphore": 4, "KERNEL32.dll!InitializeCriticalSection": 2, "KERNEL32.dll!CreateSemaphoreA": 2, "KERNEL32.dll!WaitForSingleObject": 3, "CRYPT32.dll!CertGetCertificateContextProperty": 6, "ADVAPI32.dll!CryptAcquireContextW": 6, "ADVAPI32.dll!CryptReleaseContext": 11, "ADVAPI32.dll!CryptCreateHash": 2, "ADVAPI32.dll!CryptSetHashParam": 2, "ADVAPI32.dll!CryptSignHashW": 2, "ADVAPI32.dll!CryptDestroyHash": 2, "ADVAPI32.dll!CryptDestroyKey": 4, "CRYPT32.dll!CertFreeCertificateContext": 8, "CRYPT32.dll!CertEnumCertificatesInStore": 6, "CRYPT32.dll!CertFindCertificateInStore": 3, "CRYPT32.dll!CertCloseStore": 4, "ADVAPI32.dll!CryptGetUserKey": 1, "ADVAPI32.dll!CryptExportKey": 2, "ADVAPI32.dll!CryptEnumProvidersW": 4, "ADVAPI32.dll!CryptGetProvParam": 2, "CRYPT32.dll!CertDuplicateCertificateContext": 1, "CRYPT32.dll!CertOpenStore": 1, "ADVAPI32.dll!CryptDecrypt": 1, "WS2_32.dll!WSASetLastError": 12, "WS2_32.dll!send": 6, "WS2_32.dll!recv": 3, "WS2_32.dll!WSAGetLastError": 24, "WS2_32.dll!getsockopt": 4, "WS2_32.dll!WSAStartup": 1, "WS2_32.dll!ioctlsocket": 1, "WS2_32.dll!select": 1, "WS2_32.dll!WSACleanup": 1, "WS2_32.dll!htons": 1, "WS2_32.dll!getservbyname": 2, "WS2_32.dll!inet_addr": 1, "WS2_32.dll!htonl": 1, "WS2_32.dll!inet_ntoa": 2, "WS2_32.dll!getservbyport": 1, "WS2_32.dll!ntohs": 2, "WS2_32.dll!gethostbyaddr": 1, "KERNEL32.dll!GetSystemDirectoryA": 1, "KERNEL32.dll!LoadLibraryA": 3, "WS2_32.dll!gethostbyname": 1, "ADVAPI32.dll!CryptGenRandom": 2, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!GetSystemTime": 1, "KERNEL32.dll!SystemTimeToFileTime": 1, "WS2_32.dll!closesocket": 1, "WS2_32.dll!setsockopt": 8, "WS2_32.dll!connect": 1, "WS2_32.dll!socket": 1, "CRYPT32.dll!CertOpenSystemStoreW": 1, "KERNEL32.dll!SetConsoleMode": 2, "KERNEL32.dll!ReadConsoleA": 1, "KERNEL32.dll!FindFirstFileW": 1, "WS2_32.dll!shutdown": 2, "WS2_32.dll!sendto": 3, "WS2_32.dll!recvfrom": 2, "WS2_32.dll!getsockname": 1, "WS2_32.dll!getpeername": 2, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!PeekNamedPipe": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\d3dcompiler_47.dll", "sha256": "b09c5df3e2259d48b7559011d5e3929cc3688653ca6cb9d91951d29708be63fa", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 3727360, "processed_bytes": 3727360, "instructions": 1027882, "skipdata_bytes": 5121 } ], "utc": "2026-11-11T21:40:48.634821+00:00", "instructions": 1027882, "skipdata_bytes": 5121, "calls": 47005, "api_reference_counts": { "KERNEL32.dll!GetSystemInfo": 4, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 6, "KERNEL32.dll!DisableThreadLibraryCalls": 1, "KERNEL32.dll!TlsFree": 1, "KERNEL32.dll!InitializeCriticalSection": 5, "KERNEL32.dll!MultiByteToWideChar": 36, "KERNEL32.dll!WideCharToMultiByte": 12, "KERNEL32.dll!DeleteCriticalSection": 16, "KERNEL32.dll!EnterCriticalSection": 34, "KERNEL32.dll!LeaveCriticalSection": 34, "KERNEL32.dll!TlsGetValue": 429, "KERNEL32.dll!GetProcessHeap": 73, "KERNEL32.dll!HeapAlloc": 102, "KERNEL32.dll!HeapFree": 248, "KERNEL32.dll!CreateFileW": 14, "KERNEL32.dll!GetLastError": 47, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!ReadFile": 7, "KERNEL32.dll!CloseHandle": 25, "KERNEL32.dll!WriteFile": 8, "KERNEL32.dll!FreeLibrary": 7, "KERNEL32.dll!Sleep": 1, "KERNEL32.dll!TlsAlloc": 1, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetFullPathNameW": 9, "KERNEL32.dll!OutputDebugStringA": 11, "KERNEL32.dll!VirtualFree": 11, "KERNEL32.dll!GetFullPathNameA": 2, "KERNEL32.dll!GetEnvironmentVariableA": 1, "KERNEL32.dll!VirtualAlloc": 8, "KERNEL32.dll!LoadLibraryExW": 7, "KERNEL32.dll!GetProcAddress": 22, "KERNEL32.dll!lstrcmpiA": 1, "KERNEL32.dll!QueryPerformanceCounter": 2, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!GetFileSize": 5, "ADVAPI32.dll!RegOpenKeyExA": 3, "ADVAPI32.dll!RegQueryValueExA": 4, "ADVAPI32.dll!RegCloseKey": 7, "KERNEL32.dll!HeapCreate": 1, "ADVAPI32.dll!RegEnumKeyExA": 1, "KERNEL32.dll!SetLastError": 8, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 2, "KERNEL32.dll!FlsGetValue": 3, "KERNEL32.dll!FlsSetValue": 6, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 6, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetModuleHandleExW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!SetFilePointerEx": 6, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!RaiseException": 3, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwindEx": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!EncodePointer": 1, "KERNEL32.dll!InitializeCriticalSectionEx": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!LocalAlloc": 1, "KERNEL32.dll!LocalFree": 2, "KERNEL32.dll!UnmapViewOfFile": 8, "KERNEL32.dll!CreateFileMappingW": 3, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!GetFileAttributesW": 1, "KERNEL32.dll!SetFileAttributesW": 1, "KERNEL32.dll!DeviceIoControl": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!CreateFileMappingA": 1, "KERNEL32.dll!MapViewOfFileEx": 3, "RPCRT4.dll!UuidCreate": 1, "ADVAPI32.dll!RegOpenKeyExW": 1, "ADVAPI32.dll!RegQueryValueExW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetModuleFileNameW": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetDriveTypeW": 1, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!SetEvent": 1, "KERNEL32.dll!ResetEvent": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "ADVAPI32.dll!CryptGetHashParam": 2, "ADVAPI32.dll!CryptDestroyHash": 6, "ADVAPI32.dll!CryptReleaseContext": 6, "ADVAPI32.dll!CryptHashData": 1, "ADVAPI32.dll!CryptAcquireContextW": 1, "ADVAPI32.dll!CryptCreateHash": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\Base\\NvCplPlugin.dll", "sha256": "ae985824c654f6f05d73819ca800c72007b0b3bff58f2731fca9c5cc51be158b", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 3560960, "processed_bytes": 3560960, "instructions": 1780919, "skipdata_bytes": 397 } ], "utc": "2026-11-11T21:40:48.404821+00:00", "instructions": 1780919, "skipdata_bytes": 397, "calls": 51061, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 7, "KERNEL32.dll!InitializeCriticalSectionEx": 14, "KERNEL32.dll!GetLastError": 140, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 2131, "api-ms-win-crt-heap-l1-1-0.dll!free": 765, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 68, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 7, "KERNEL32.dll!DeleteCriticalSection": 19, "USER32.dll!UnregisterClassW": 8, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 14, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 10, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 16, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 4, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 6, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 4, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 12, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 29, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 27, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 17, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 34, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 55, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 16, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!ReleaseSRWLockExclusive": 6, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 44, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 9, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 10, "KERNEL32.dll!FreeLibrary": 21, "ADVAPI32.dll!RegOpenKeyExW": 8, "ADVAPI32.dll!RegQueryValueExW": 8, "ADVAPI32.dll!RegCloseKey": 9, "SHELL32.dll!SHGetFolderPathW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 4, "SHLWAPI.dll!SHGetValueW": 2, "USER32.dll!FindWindowA": 2, "KERNEL32.dll!GetProcAddress": 116, "KERNEL32.dll!OpenEventW": 2, "KERNEL32.dll!SetEvent": 2, "KERNEL32.dll!CloseHandle": 64, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf_s": 5, "MSVCP140.dll!?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA_W_W@Z": 3, "MSVCP140.dll!?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ": 10, "MSVCP140.dll!?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ": 3, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 3, "MSVCP140.dll!?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ": 3, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 3, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 2, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 3, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 9, "MSVCP140.dll!??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z": 7, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 10, "OLEAUT32.dll!SysAllocString": 7, "OLEAUT32.dll!VariantInit": 9, "MSVCP140.dll!??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 17, "MSVCP140.dll!?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 11, "MSVCP140.dll!?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 9, "MSVCP140.dll!?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 15, "MSVCP140.dll!?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z": 7, "MSVCP140.dll!?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 2, "OLEAUT32.dll!SysFreeString": 17, "OLEAUT32.dll!VariantClear": 12, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 19, "KERNEL32.dll!GetSystemDirectoryW": 6, "KERNEL32.dll!WaitForSingleObject": 3, "KERNEL32.dll!GetExitCodeProcess": 2, "KERNEL32.dll!GetFileAttributesW": 16, "MSVCP140.dll!??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z": 7, "MSVCP140.dll!?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 6, "MSVCP140.dll!?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 14, "KERNEL32.dll!GetLocalTime": 2, "ole32.dll!CoInitializeEx": 3, "ole32.dll!CoInitializeSecurity": 3, "ole32.dll!CoCreateInstance": 3, "ADVAPI32.dll!GetUserNameW": 2, "OLEAUT32.dll!VariantTimeToSystemTime": 2, "ole32.dll!CoUninitialize": 3, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 2, "api-ms-win-crt-runtime-l1-1-0.dll!system": 2, "ADVAPI32.dll!RegCreateKeyExW": 3, "ADVAPI32.dll!RegSetValueExW": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ": 3, "MSVCP140.dll!?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z": 4, "MSVCP140.dll!?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z": 2, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 3, "ADVAPI32.dll!AllocateAndInitializeSid": 2, "ADVAPI32.dll!EqualSid": 2, "ADVAPI32.dll!FreeSid": 2, "SHLWAPI.dll!PathFileExistsW": 4, "SHELL32.dll!ShellExecuteExW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 22, "USER32.dll!EnumDisplayDevicesA": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "api-ms-win-crt-string-l1-1-0.dll!tolower": 26, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 23, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 12, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 12, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z": 3, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 16, "MSVCP140.dll!??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!FindResourceExW": 5, "KERNEL32.dll!FindResourceW": 4, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 6, "api-ms-win-crt-string-l1-1-0.dll!_wcslwr_s": 6, "KERNEL32.dll!FindFirstVolumeW": 2, "KERNEL32.dll!QueryDosDeviceW": 2, "KERNEL32.dll!GetVolumePathNamesForVolumeNameW": 2, "KERNEL32.dll!FindNextVolumeW": 2, "KERNEL32.dll!FindVolumeClose": 2, "KERNEL32.dll!LoadResource": 2, "KERNEL32.dll!LockResource": 2, "KERNEL32.dll!SizeofResource": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!toupper": 4, "USER32.dll!GetSystemMetrics": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsnwprintf_s": 5, "api-ms-win-crt-string-l1-1-0.dll!towlower": 3, "ole32.dll!CoTaskMemFree": 3, "MSVCP140.dll!?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 3, "KERNEL32.dll!GetVersionExW": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf": 3, "api-ms-win-crt-string-l1-1-0.dll!wcsncmp": 2, "api-ms-win-crt-convert-l1-1-0.dll!wcstoul": 10, "api-ms-win-crt-string-l1-1-0.dll!iswctype": 12, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 11, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateFileW": 11, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 4, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 22, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!MultiByteToWideChar": 6, "KERNEL32.dll!WideCharToMultiByte": 10, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 3, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 66, "KERNEL32.dll!SetLastError": 67, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z": 2, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-string-l1-1-0.dll!wmemcpy_s": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 1, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 1, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 1, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 1, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\Plugins\\localuser\\NvApp\\Downloader.dll", "sha256": "b12df892d47aaeb73f30b9f655a1f7c39541193bc6ec3546b6e982f4e78b2bbe", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 4298240, "processed_bytes": 4298240, "instructions": 2061335, "skipdata_bytes": 1635 } ], "utc": "2026-11-11T21:40:48.895562+00:00", "instructions": 2061335, "skipdata_bytes": 1635, "calls": 61678, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 61, "KERNEL32.dll!InitializeCriticalSectionEx": 125, "KERNEL32.dll!GetLastError": 256, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 21, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 12, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 43, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 13, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 7, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 20, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 5, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 10, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 14, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 5, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 25, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 7, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 2133, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 48, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 51, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 32, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 26, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 66, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 106, "api-ms-win-crt-heap-l1-1-0.dll!free": 742, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 14, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 9, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 25, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 22, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 18, "KERNEL32.dll!DecodePointer": 61, "KERNEL32.dll!DeleteCriticalSection": 134, "USER32.dll!UnregisterClassW": 62, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 3, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 22, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 6, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 71, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 2, "KERNEL32.dll!GetProcAddress": 57, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 70, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleHandleW": 5, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 12, "KERNEL32.dll!VerifyVersionInfoW": 6, "KERNEL32.dll!GetFullPathNameW": 6, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 10, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 60, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 66, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!FreeLibrary": 21, "KERNEL32.dll!AcquireSRWLockExclusive": 12, "KERNEL32.dll!ReleaseSRWLockExclusive": 14, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 54, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 30, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 54, "SHELL32.dll!SHGetFolderPathW": 5, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 63, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 10, "KERNEL32.dll!MultiByteToWideChar": 9, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 29, "KERNEL32.dll!WideCharToMultiByte": 12, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 4, "api-ms-win-crt-time-l1-1-0.dll!strftime": 7, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 6, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 5, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 12, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 24, "api-ms-win-crt-time-l1-1-0.dll!_time64": 39, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 10, "api-ms-win-crt-time-l1-1-0.dll!_ctime64_s": 5, "MSVCP140.dll!??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z": 4, "api-ms-win-crt-time-l1-1-0.dll!_mktime64": 5, "KERNEL32.dll!FormatMessageA": 5, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsscanf": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z": 4, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 43, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z": 2, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z": 3, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 12, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 7, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 10, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 13, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 26, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 7, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 7, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 5, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 7, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 23, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 6, "MSVCP140.dll!?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z": 3, "MSVCP140.dll!?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ": 3, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 2, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 9, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 4, "KERNEL32.dll!InitOnceBeginInitialize": 3, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 23, "KERNEL32.dll!InitOnceComplete": 4, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z": 2, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 2, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 2, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 4, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z": 2, "MSVCP140.dll!?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z": 2, "MSVCP140.dll!?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 125, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 242, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 222, "api-ms-win-crt-runtime-l1-1-0.dll!strerror_s": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!FindFirstFileW": 5, "KERNEL32.dll!FindNextFileW": 5, "KERNEL32.dll!FindClose": 7, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 3, "KERNEL32.dll!Sleep": 5, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 6, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "ole32.dll!CoCreateGuid": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 6, "KERNEL32.dll!WaitForMultipleObjects": 3, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "libcrypto-3-x64.dll!EVP_MD_get_size": 1, "libcrypto-3-x64.dll!EVP_MD_CTX_new": 1, "libcrypto-3-x64.dll!EVP_MD_CTX_free": 1, "libcrypto-3-x64.dll!EVP_DigestUpdate": 1, "libcrypto-3-x64.dll!EVP_DigestFinal_ex": 1, "libcrypto-3-x64.dll!EVP_DigestInit": 1, "libcrypto-3-x64.dll!EVP_md5": 1, "libcrypto-3-x64.dll!EVP_sha1": 1, "libcrypto-3-x64.dll!ERR_get_error": 1, "libcrypto-3-x64.dll!OPENSSL_cleanse": 1, "libcrypto-3-x64.dll!EVP_EncryptInit_ex": 1, "libcrypto-3-x64.dll!EVP_EncryptUpdate": 1, "libcrypto-3-x64.dll!EVP_EncryptFinal_ex": 1, "libcrypto-3-x64.dll!EVP_DecryptInit_ex": 1, "libcrypto-3-x64.dll!EVP_DecryptUpdate": 1, "libcrypto-3-x64.dll!EVP_DecryptFinal_ex": 1, "libcrypto-3-x64.dll!EVP_CIPHER_CTX_new": 1, "libcrypto-3-x64.dll!EVP_CIPHER_CTX_free": 1, "libcrypto-3-x64.dll!EVP_aes_256_cbc": 1, "libcrypto-3-x64.dll!EVP_add_cipher": 1, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 15, "WS2_32.dll!WSACreateEvent": 3, "WS2_32.dll!WSACloseEvent": 4, "WS2_32.dll!WSASetEvent": 2, "WS2_32.dll!getsockopt": 4, "WS2_32.dll!send": 9, "WS2_32.dll!WSAEventSelect": 6, "WS2_32.dll!WSAWaitForMultipleEvents": 2, "WS2_32.dll!WSAEnumNetworkEvents": 4, "WS2_32.dll!WSAResetEvent": 2, "WS2_32.dll!WSAGetLastError": 60, "api-ms-win-crt-utility-l1-1-0.dll!qsort": 5, "api-ms-win-crt-stdio-l1-1-0.dll!_fileno": 9, "api-ms-win-crt-filesystem-l1-1-0.dll!_fstat64": 11, "api-ms-win-crt-stdio-l1-1-0.dll!fputs": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlink": 5, "api-ms-win-crt-string-l1-1-0.dll!strcspn": 10, "api-ms-win-crt-stdio-l1-1-0.dll!feof": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fseek": 6, "api-ms-win-crt-stdio-l1-1-0.dll!ftell": 4, "WS2_32.dll!WSACleanup": 3, "WS2_32.dll!WSAStartup": 2, "WS2_32.dll!recv": 3, "WS2_32.dll!connect": 5, "WS2_32.dll!WSASetLastError": 6, "WS2_32.dll!WSAIoctl": 4, "WS2_32.dll!setsockopt": 10, "WS2_32.dll!accept": 2, "WS2_32.dll!getpeername": 3, "WS2_32.dll!ntohs": 8, "WS2_32.dll!htons": 21, "WS2_32.dll!bind": 6, "WS2_32.dll!getsockname": 8, "WS2_32.dll!closesocket": 3, "WS2_32.dll!socket": 3, "KERNEL32.dll!SleepEx": 2, "KERNEL32.dll!EnterCriticalSection": 36, "KERNEL32.dll!LeaveCriticalSection": 47, "KERNEL32.dll!QueryPerformanceFrequency": 2, "WS2_32.dll!select": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_fullpath": 8, "WS2_32.dll!getaddrinfo": 2, "WS2_32.dll!freeaddrinfo": 2, "KERNEL32.dll!InitializeConditionVariable": 5, "KERNEL32.dll!CreateFileA": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fsopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!freopen_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_sopen_s": 2, "KERNEL32.dll!MoveFileExA": 3, "api-ms-win-crt-convert-l1-1-0.dll!mbstowcs_s": 3, "api-ms-win-crt-string-l1-1-0.dll!wcsncmp": 6, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 3, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 2, "api-ms-win-crt-convert-l1-1-0.dll!wcstombs_s": 3, "api-ms-win-crt-math-l1-1-0.dll!_fdopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_close": 9, "api-ms-win-crt-stdio-l1-1-0.dll!fgets": 2, "api-ms-win-crt-stdio-l1-1-0.dll!ferror": 3, "api-ms-win-crt-utility-l1-1-0.dll!bsearch": 3, "KERNEL32.dll!GetEnvironmentVariableA": 2, "api-ms-win-crt-string-l1-1-0.dll!strspn": 2, "IPHLPAPI.DLL!if_nametoindex": 2, "CRYPT32.dll!CertCloseStore": 10, "KERNEL32.dll!GetModuleHandleA": 3, "ADVAPI32.dll!CryptAcquireContextA": 7, "ADVAPI32.dll!CryptCreateHash": 7, "ADVAPI32.dll!CryptHashData": 7, "ADVAPI32.dll!CryptGetHashParam": 13, "ADVAPI32.dll!CryptDestroyHash": 7, "ADVAPI32.dll!CryptReleaseContext": 11, "CRYPT32.dll!CertOpenStore": 3, "CRYPT32.dll!CryptStringToBinaryA": 2, "CRYPT32.dll!CertFindCertificateInStore": 3, "CRYPT32.dll!PFXImportCertStore": 2, "CRYPT32.dll!CertFreeCertificateContext": 14, "CRYPT32.dll!CertEnumCertificatesInStore": 4, "WS2_32.dll!htonl": 5, "WS2_32.dll!listen": 3, "api-ms-win-crt-string-l1-1-0.dll!strpbrk": 7, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_lseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_read": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_write": 2, "WLDAP32.dll!#22": 4, "WLDAP32.dll!#217": 2, "WLDAP32.dll!#143": 2, "WLDAP32.dll!#211": 5, "WLDAP32.dll!#50": 2, "WLDAP32.dll!#26": 2, "WLDAP32.dll!#30": 2, "WLDAP32.dll!#200": 5, "WLDAP32.dll!#32": 2, "WLDAP32.dll!#35": 2, "WLDAP32.dll!#79": 3, "WLDAP32.dll!#33": 2, "WLDAP32.dll!#301": 3, "WLDAP32.dll!#27": 2, "WLDAP32.dll!#41": 2, "WLDAP32.dll!#46": 2, "WLDAP32.dll!#60": 2, "WLDAP32.dll!#45": 5, "KERNEL32.dll!GetStdHandle": 2, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!PeekNamedPipe": 2, "KERNEL32.dll!ReadFile": 3, "WS2_32.dll!recvfrom": 2, "WS2_32.dll!sendto": 10, "WS2_32.dll!ioctlsocket": 2, "CRYPT32.dll!CertCreateCertificateChainEngine": 2, "CRYPT32.dll!CertGetCertificateChain": 2, "CRYPT32.dll!CertFreeCertificateChainEngine": 2, "CRYPT32.dll!CertFreeCertificateChain": 2, "CRYPT32.dll!CertFindExtension": 3, "CRYPT32.dll!CryptDecodeObjectEx": 3, "CRYPT32.dll!CertGetNameStringA": 4, "CRYPT32.dll!CryptQueryObject": 2, "CRYPT32.dll!CertAddCertificateContextToStore": 2, "WS2_32.dll!gethostname": 2, "KERNEL32.dll!WakeConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableCS": 3, "KERNEL32.dll!WaitForSingleObjectEx": 2, "Secur32.dll!InitSecurityInterfaceA": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!RaiseException": 2, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Thrd_detach": 1, "MSVCP140.dll!?_Random_device@std@@YAIXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!TryAcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!strstr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-string-l1-1-0.dll!_strdup": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1, "WS2_32.dll!__WSAFDIsSet": 1, "bcrypt.dll!BCryptGenRandom": 1 }, "complete_linear_sweep": true }, { "path": "Installer2\\InstallerCore\\NVI2.DLL", "sha256": "fe0397022b4e1bf79c31d55c43fc99792d489a889c8790b712de5a022c7994a4", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 4385792, "processed_bytes": 4385792, "instructions": 1385860, "skipdata_bytes": 42 } ], "utc": "2026-11-11T21:40:50.514466+00:00", "instructions": 1385860, "skipdata_bytes": 42, "calls": 114893, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 128, "KERNEL32.dll!GetLastError": 354, "OLEAUT32.dll!SysAllocString": 204, "OLEAUT32.dll!SysFreeString": 560, "OLEAUT32.dll!VariantInit": 1083, "OLEAUT32.dll!VariantClear": 2350, "OLEAUT32.dll!VariantChangeType": 67, "KERNEL32.dll!EnterCriticalSection": 789, "KERNEL32.dll!LeaveCriticalSection": 833, "OLEAUT32.dll!SysStringLen": 140, "OLEAUT32.dll!SysAllocStringLen": 35, "KERNEL32.dll!FindResourceW": 5, "KERNEL32.dll!LoadResource": 4, "KERNEL32.dll!LockResource": 3, "KERNEL32.dll!SizeofResource": 4, "KERNEL32.dll!WideCharToMultiByte": 15, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 6, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 44, "ADVAPI32.dll!OpenProcessToken": 7, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!CloseHandle": 101, "ADVAPI32.dll!RegOpenKeyExW": 42, "ADVAPI32.dll!RegCloseKey": 63, "ADVAPI32.dll!RegQueryValueExW": 12, "ADVAPI32.dll!RegEnumValueW": 2, "KERNEL32.dll!ExpandEnvironmentStringsW": 5, "KERNEL32.dll!WaitForSingleObject": 11, "KERNEL32.dll!CreateFileW": 23, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!GetFileSizeEx": 5, "KERNEL32.dll!WriteFile": 10, "KERNEL32.dll!GetModuleFileNameW": 6, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 7, "KERNEL32.dll!RemoveDirectoryW": 6, "KERNEL32.dll!CreateMutexW": 3, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 2, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!FormatMessageA": 2, "KERNEL32.dll!LocalFree": 27, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 11, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!GetTickCount": 42, "KERNEL32.dll!DeleteCriticalSection": 1091, "KERNEL32.dll!GetDiskFreeSpaceW": 10, "KERNEL32.dll!OpenEventW": 4, "KERNEL32.dll!SetLastError": 108, "KERNEL32.dll!Sleep": 17, "KERNEL32.dll!CreateEventW": 8, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!SetThreadPriority": 1, "RPCRT4.dll!UuidCreate": 5, "KERNEL32.dll!WaitForMultipleObjects": 1, "OLEAUT32.dll!VariantCopy": 29, "OLEAUT32.dll!SafeArrayCopy": 9, "OLEAUT32.dll!SafeArrayUnlock": 42, "OLEAUT32.dll!SafeArrayDestroy": 41, "OLEAUT32.dll!SafeArrayGetVartype": 15, "OLEAUT32.dll!SafeArrayLock": 27, "OLEAUT32.dll!LoadTypeLib": 4, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!LoadLibraryA": 1, "USER32.dll!LoadStringW": 1, "KERNEL32.dll!GetUserDefaultLCID": 3, "KERNEL32.dll!LCMapStringW": 32, "KERNEL32.dll!GetStringTypeExW": 3, "KERNEL32.dll!DeleteFileW": 5, "KERNEL32.dll!MoveFileExW": 11, "KERNEL32.dll!OpenProcess": 3, "OLEAUT32.dll!SysStringByteLen": 72, "OLEAUT32.dll!SysAllocStringByteLen": 72, "OLEAUT32.dll!VarCmp": 1, "OLEAUT32.dll!VarBstrCmp": 5, "KERNEL32.dll!lstrlenW": 1, "OLEAUT32.dll!SafeArrayCreate": 12, "OLEAUT32.dll!SafeArrayGetLBound": 27, "OLEAUT32.dll!SafeArrayGetUBound": 27, "KERNEL32.dll!RaiseException": 6, "ole32.dll!CoCreateInstance": 17, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoUninitialize": 3, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsSetValue": 3, "ole32.dll!CoInitializeSecurity": 1, "ole32.dll!CoRegisterClassObject": 1, "ole32.dll!CoRevokeClassObject": 1, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!GetThreadLocale": 5, "KERNEL32.dll!SetThreadLocale": 10, "ole32.dll!StringFromGUID2": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 6, "KERNEL32.dll!GetModuleHandleW": 19, "KERNEL32.dll!GetProcAddress": 50, "ADVAPI32.dll!RegDeleteKeyW": 6, "USER32.dll!CharNextW": 23, "ole32.dll!CoTaskMemFree": 4, "ole32.dll!CoTaskMemRealloc": 1, "ole32.dll!CoTaskMemAlloc": 2, "KERNEL32.dll!lstrcmpiW": 12, "ADVAPI32.dll!RegSetValueExW": 5, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegEnumKeyExW": 3, "ADVAPI32.dll!RegDeleteValueW": 2, "ADVAPI32.dll!RegCreateKeyExW": 2, "KERNEL32.dll!LoadLibraryExW": 14, "KERNEL32.dll!MultiByteToWideChar": 13, "SETUPAPI.dll!CM_Get_Device_IDW": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "KERNEL32.dll!WaitForMultipleObjectsEx": 1, "KERNEL32.dll!GetExitCodeThread": 1, "KERNEL32.dll!DuplicateHandle": 3, "USER32.dll!AllowSetForegroundWindow": 1, "SETUPAPI.dll!SetupOpenInfFileW": 10, "SETUPAPI.dll!SetupCloseInfFile": 15, "SETUPAPI.dll!SetupFindFirstLineW": 5, "OLEAUT32.dll!SafeArrayRedim": 2, "ADVAPI32.dll!IsValidSecurityDescriptor": 2, "ADVAPI32.dll!ConvertSidToStringSidW": 2, "ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorW": 4, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!DecodePointer": 4, "ADVAPI32.dll!LookupPrivilegeValueW": 4, "ADVAPI32.dll!AdjustTokenPrivileges": 3, "ADVAPI32.dll!InitiateSystemShutdownW": 1, "OLEAUT32.dll!VariantCopyInd": 1, "msi.dll!#116": 7, "msi.dll!#70": 1, "msi.dll!#92": 1, "msi.dll!#32": 1, "msi.dll!#159": 1, "msi.dll!#160": 1, "msi.dll!#141": 2, "msi.dll!#281": 2, "msi.dll!#88": 1, "msi.dll!#157": 1, "msi.dll!#8": 1, "KERNEL32.dll!GetVersionExW": 4, "ADVAPI32.dll!GetSecurityDescriptorControl": 1, "ADVAPI32.dll!GetSecurityDescriptorDacl": 3, "ADVAPI32.dll!GetSecurityDescriptorSacl": 1, "SETUPAPI.dll!CMP_WaitNoPendingInstallEvents": 1, "KERNEL32.dll!OpenMutexW": 1, "KERNEL32.dll!GetSystemTime": 1, "KERNEL32.dll!ResetEvent": 3, "KERNEL32.dll!GetCommandLineW": 5, "SHLWAPI.dll!PathIsURLW": 3, "ADVAPI32.dll!AllocateAndInitializeSid": 3, "ADVAPI32.dll!SetEntriesInAclW": 3, "ADVAPI32.dll!SetNamedSecurityInfoW": 1, "ADVAPI32.dll!FreeSid": 10, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!IsDebuggerPresent": 5, "KERNEL32.dll!DebugBreak": 1, "KERNEL32.dll!GetTickCount64": 2, "RPCRT4.dll!RpcStringBindingComposeW": 1, "RPCRT4.dll!RpcStringFreeW": 2, "RPCRT4.dll!RpcBindingFromStringBindingW": 1, "RPCRT4.dll!RpcBindingFree": 1, "RPCRT4.dll!NdrClientCall2": 13, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 4, "KERNEL32.dll!VirtualProtect": 4, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!GetLocaleInfoW": 13, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!GlobalFree": 2, "KERNEL32.dll!UnmapViewOfFile": 1, "USERENV.dll!UnloadUserProfile": 3, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileExW": 2, "KERNEL32.dll!DeviceIoControl": 4, "KERNEL32.dll!FindFirstFileW": 2, "SHLWAPI.dll!UrlIsW": 1, "SHLWAPI.dll!PathCreateFromUrlW": 1, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 3, "ADVAPI32.dll!GetNamedSecurityInfoW": 1, "KERNEL32.dll!GetTempFileNameW": 1, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!GlobalAlloc": 1, "KERNEL32.dll!SetFileTime": 2, "ADVAPI32.dll!OpenThreadToken": 1, "ADVAPI32.dll!DuplicateToken": 1, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "KERNEL32.dll!LocalAlloc": 4, "ADVAPI32.dll!InitializeSecurityDescriptor": 4, "ADVAPI32.dll!RegRenameKey": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "RPCRT4.dll!UuidToStringW": 1, "RPCRT4.dll!UuidFromStringW": 1, "KERNEL32.dll!CreateProcessW": 1, "SHELL32.dll!ShellExecuteExW": 1, "KERNEL32.dll!GetExitCodeProcess": 1, "KERNEL32.dll!GetProcessId": 1, "KERNEL32.dll!TerminateProcess": 4, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "KERNEL32.dll!ActivateActCtx": 1, "KERNEL32.dll!DeactivateActCtx": 1, "KERNEL32.dll!GetModuleHandleExW": 5, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!ReleaseActCtx": 1, "KERNEL32.dll!CreateActCtxW": 1, "KERNEL32.dll!GetLocalTime": 2, "KERNEL32.dll!InitializeCriticalSectionEx": 3, "OLEAUT32.dll!SafeArrayGetDim": 1, "KERNEL32.dll!SystemTimeToFileTime": 3, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1, "SETUPAPI.dll!SetupDiSetClassRegistryPropertyW": 2, "SETUPAPI.dll!SetupDiSetDeviceRegistryPropertyW": 2, "SETUPAPI.dll!SetupDiGetActualSectionToInstallExW": 1, "SETUPAPI.dll!SetupDiBuildClassInfoList": 1, "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5, "SETUPAPI.dll!SetupGetFieldCount": 2, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1, "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1, "SETUPAPI.dll!SetupGetIntField": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "KERNEL32.dll!GetUserDefaultUILanguage": 1, "KERNEL32.dll!GetSystemDefaultLangID": 1, "WINHTTP.dll!WinHttpOpen": 1, "WINHTTP.dll!WinHttpCrackUrl": 1, "WINHTTP.dll!WinHttpConnect": 1, "WINHTTP.dll!WinHttpCloseHandle": 1, "WINHTTP.dll!WinHttpQueryDataAvailable": 1, "WINHTTP.dll!WinHttpReadData": 1, "WINHTTP.dll!WinHttpOpenRequest": 1, "WINHTTP.dll!WinHttpReceiveResponse": 1, "WINHTTP.dll!WinHttpSendRequest": 2, "WINHTTP.dll!WinHttpSetOption": 1, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!SetFilePointerEx": 9, "KERNEL32.dll!ReadFile": 6, "KERNEL32.dll!SetEndOfFile": 5, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "USER32.dll!SendMessageTimeoutW": 1, "USER32.dll!GetLastActivePopup": 1, "ADVAPI32.dll!CloseServiceHandle": 7, "ADVAPI32.dll!ChangeServiceConfigW": 2, "ADVAPI32.dll!ControlService": 1, "ADVAPI32.dll!ChangeServiceConfig2W": 5, "ADVAPI32.dll!OpenSCManagerW": 2, "ADVAPI32.dll!CreateServiceW": 1, "ADVAPI32.dll!DeleteService": 1, "ADVAPI32.dll!QueryServiceConfig2W": 2, "ADVAPI32.dll!QueryServiceConfigW": 2, "ADVAPI32.dll!QueryServiceStatusEx": 2, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!StartServiceW": 1, "ADVAPI32.dll!QueryServiceObjectSecurity": 4, "ADVAPI32.dll!BuildTrusteeWithSidW": 2, "ADVAPI32.dll!SetServiceObjectSecurity": 2, "USER32.dll!GetSystemMetrics": 1, "sfc.dll!SfcIsFileProtected": 1, "WINTRUST.dll!WinVerifyTrust": 1, "KERNEL32.dll!GetFileSize": 1, "KERNEL32.dll!SetFilePointer": 2, "KERNEL32.dll!GetFileInformationByHandle": 3, "bcrypt.dll!BCryptOpenAlgorithmProvider": 1, "bcrypt.dll!BCryptGetProperty": 1, "bcrypt.dll!BCryptCloseAlgorithmProvider": 1, "bcrypt.dll!BCryptCreateHash": 1, "bcrypt.dll!BCryptHashData": 1, "bcrypt.dll!BCryptFinishHash": 1, "bcrypt.dll!BCryptDestroyHash": 1, "USER32.dll!CharUpperW": 1, "KERNEL32.dll!GetCurrentDirectoryW": 1, "KERNEL32.dll!GetProcessAffinityMask": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GlobalMemoryStatus": 1, "KERNEL32.dll!VirtualAlloc": 2, "KERNEL32.dll!VirtualFree": 2, "KERNEL32.dll!InitializeCriticalSection": 1, "KERNEL32.dll!CreateSemaphoreW": 1, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!AreFileApisANSI": 2, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 7, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!OpenEventA": 2 }, "complete_linear_sweep": true }, { "path": "Installer2\\InstallerCore\\NvInstallerUtil.dll", "sha256": "e08b544f697e003cda488f09b28210b6339ed333b7d4e95beadb59fa8485b822", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 4568576, "processed_bytes": 4568576, "instructions": 1604681, "skipdata_bytes": 2459 } ], "utc": "2026-11-11T21:40:51.786214+00:00", "instructions": 1604681, "skipdata_bytes": 2459, "calls": 116452, "api_reference_counts": { "KERNEL32.dll!CreateEventW": 5, "KERNEL32.dll!GetLastError": 153, "KERNEL32.dll!SetEvent": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!MultiByteToWideChar": 28, "KERNEL32.dll!WideCharToMultiByte": 17, "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 3, "KERNEL32.dll!GetModuleHandleExW": 6, "KERNEL32.dll!GetModuleFileNameW": 3, "KERNEL32.dll!InitOnceComplete": 20, "KERNEL32.dll!InitializeCriticalSectionEx": 4, "OLEAUT32.dll!SysFreeString": 17, "ole32.dll!CoUninitialize": 11, "KERNEL32.dll!InitOnceBeginInitialize": 19, "KERNEL32.dll!GetVolumePathNameW": 1, "IPHLPAPI.DLL!GetAdaptersAddresses": 1, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!GetNativeSystemInfo": 1, "OLEAUT32.dll!VariantClear": 8, "ole32.dll!CoInitializeEx": 1, "OLEAUT32.dll!SysStringLen": 1, "OLEAUT32.dll!SysAllocString": 4, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 1, "OLEAUT32.dll!VariantInit": 2, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetElement": 1, "OLEAUT32.dll!VariantChangeType": 1, "ole32.dll!CoInitialize": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 2, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!GetPrivateProfileStringW": 2, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!QueryFullProcessImageNameW": 1, "KERNEL32.dll!CloseHandle": 34, "KERNEL32.dll!GetNamedPipeClientProcessId": 1, "KERNEL32.dll!ReadFile": 8, "KERNEL32.dll!WaitForMultipleObjects": 4, "KERNEL32.dll!GetOverlappedResult": 2, "KERNEL32.dll!PeekNamedPipe": 4, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!DisconnectNamedPipe": 2, "ADVAPI32.dll!ConvertStringSidToSidW": 2, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "KERNEL32.dll!CreateNamedPipeW": 1, "KERNEL32.dll!ConnectNamedPipe": 1, "KERNEL32.dll!CancelIo": 1, "KERNEL32.dll!WaitForSingleObject": 7, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!DeleteFileW": 5, "KERNEL32.dll!GetFileAttributesW": 3, "KERNEL32.dll!CreateFileW": 8, "KERNEL32.dll!DeviceIoControl": 1, "RPCRT4.dll!UuidCreate": 1, "RPCRT4.dll!UuidToStringA": 1, "RPCRT4.dll!RpcStringFreeA": 1, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!GetSystemTime": 3, "ADVAPI32.dll!GetSecurityDescriptorDacl": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 1, "KERNEL32.dll!GetFileInformationByHandle": 3, "KERNEL32.dll!InitializeCriticalSection": 4, "KERNEL32.dll!DeleteCriticalSection": 18, "KERNEL32.dll!EnterCriticalSection": 33, "KERNEL32.dll!TryEnterCriticalSection": 1, "KERNEL32.dll!LeaveCriticalSection": 47, "KERNEL32.dll!GetCurrentThreadId": 9, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!MoveFileW": 1, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 6, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!FindNextFileW": 3, "KERNEL32.dll!FindClose": 5, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 1, "KERNEL32.dll!GetFullPathNameW": 10, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 9, "KERNEL32.dll!AcquireSRWLockExclusive": 9, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 8, "KERNEL32.dll!CloseThreadpoolWork": 1, "KERNEL32.dll!SubmitThreadpoolWork": 1, "KERNEL32.dll!CreateThreadpoolWork": 1, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 1, "KERNEL32.dll!SleepConditionVariableSRW": 2, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!WakeConditionVariable": 2, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!DecodePointer": 2, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!GetProcAddress": 21, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!SetLastError": 13, "KERNEL32.dll!FreeLibrary": 20, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!GetFileType": 8, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!GetConsoleMode": 3, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetStdHandle": 8, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!GetTempPathW": 1, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!GetModuleFileNameA": 1, "USER32.dll!GetProcessWindowStation": 1, "USER32.dll!GetUserObjectInformationW": 2, "ADVAPI32.dll!RegisterEventSourceW": 1, "ADVAPI32.dll!ReportEventW": 1, "ADVAPI32.dll!DeregisterEventSource": 1, "USER32.dll!MessageBoxW": 1, "KERNEL32.dll!GetEnvironmentVariableW": 5, "KERNEL32.dll!InitializeSRWLock": 2, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!VirtualFree": 1, "ADVAPI32.dll!CryptAcquireContextW": 6, "ADVAPI32.dll!CryptGenRandom": 2, "ADVAPI32.dll!CryptReleaseContext": 18, "KERNEL32.dll!ReleaseSemaphore": 4, "KERNEL32.dll!CreateSemaphoreA": 2, "CRYPT32.dll!CertGetCertificateContextProperty": 6, "ADVAPI32.dll!CryptCreateHash": 6, "ADVAPI32.dll!CryptSetHashParam": 2, "ADVAPI32.dll!CryptSignHashW": 2, "ADVAPI32.dll!CryptDestroyHash": 6, "ADVAPI32.dll!CryptDestroyKey": 4, "CRYPT32.dll!CertFreeCertificateContext": 19, "CRYPT32.dll!CertEnumCertificatesInStore": 7, "CRYPT32.dll!CertFindCertificateInStore": 5, "CRYPT32.dll!CertCloseStore": 15, "ADVAPI32.dll!CryptGetUserKey": 1, "ADVAPI32.dll!CryptExportKey": 2, "ADVAPI32.dll!CryptEnumProvidersW": 4, "ADVAPI32.dll!CryptGetProvParam": 2, "CRYPT32.dll!CertDuplicateCertificateContext": 1, "CRYPT32.dll!CertOpenStore": 3, "ADVAPI32.dll!CryptDecrypt": 1, "WS2_32.dll!WSASetLastError": 17, "WS2_32.dll!send": 14, "WS2_32.dll!recv": 5, "WS2_32.dll!WSAGetLastError": 76, "WS2_32.dll!getsockopt": 6, "WS2_32.dll!WSAStartup": 2, "WS2_32.dll!ioctlsocket": 2, "WS2_32.dll!select": 3, "WS2_32.dll!WSACleanup": 3, "WS2_32.dll!htons": 16, "WS2_32.dll!getservbyname": 2, "WS2_32.dll!inet_addr": 1, "WS2_32.dll!htonl": 3, "WS2_32.dll!inet_ntoa": 2, "WS2_32.dll!getservbyport": 1, "WS2_32.dll!ntohs": 6, "WS2_32.dll!gethostbyaddr": 1, "KERNEL32.dll!GetSystemDirectoryA": 1, "KERNEL32.dll!LoadLibraryA": 4, "WS2_32.dll!gethostbyname": 1, "KERNEL32.dll!LoadLibraryW": 3, "KERNEL32.dll!SystemTimeToFileTime": 2, "WS2_32.dll!closesocket": 3, "WS2_32.dll!setsockopt": 15, "WS2_32.dll!connect": 3, "WS2_32.dll!socket": 3, "CRYPT32.dll!CertOpenSystemStoreW": 1, "KERNEL32.dll!SetConsoleMode": 2, "KERNEL32.dll!ReadConsoleA": 1, "WS2_32.dll!shutdown": 2, "WS2_32.dll!sendto": 12, "WS2_32.dll!recvfrom": 3, "WS2_32.dll!getsockname": 5, "WS2_32.dll!getpeername": 3, "WS2_32.dll!WSACreateEvent": 2, "WS2_32.dll!WSACloseEvent": 3, "WS2_32.dll!WSASetEvent": 1, "WS2_32.dll!WSAEventSelect": 5, "WS2_32.dll!WSAWaitForMultipleEvents": 1, "WS2_32.dll!WSAEnumNetworkEvents": 3, "WS2_32.dll!WSAResetEvent": 1, "WLDAP32.dll!#22": 3, "WLDAP32.dll!#301": 2, "WLDAP32.dll!#41": 1, "WLDAP32.dll!#46": 1, "WLDAP32.dll!#217": 1, "WLDAP32.dll!#143": 1, "WLDAP32.dll!#211": 4, "WLDAP32.dll!#50": 1, "WLDAP32.dll!#26": 1, "WLDAP32.dll!#30": 1, "WLDAP32.dll!#200": 4, "WLDAP32.dll!#32": 1, "WLDAP32.dll!#35": 1, "WLDAP32.dll!#79": 3, "WLDAP32.dll!#33": 1, "WLDAP32.dll!#27": 1, "WLDAP32.dll!#60": 1, "WLDAP32.dll!#45": 2, "WS2_32.dll!WSAIoctl": 2, "WS2_32.dll!accept": 1, "WS2_32.dll!bind": 4, "KERNEL32.dll!SleepEx": 1, "WS2_32.dll!getaddrinfo": 1, "WS2_32.dll!freeaddrinfo": 1, "KERNEL32.dll!InitializeConditionVariable": 3, "KERNEL32.dll!GetEnvironmentVariableA": 1, "KERNEL32.dll!MoveFileExA": 2, "IPHLPAPI.DLL!if_nametoindex": 1, "WS2_32.dll!listen": 1, "ADVAPI32.dll!CryptAcquireContextA": 4, "ADVAPI32.dll!CryptHashData": 3, "ADVAPI32.dll!CryptGetHashParam": 8, "KERNEL32.dll!GetModuleHandleA": 2, "CRYPT32.dll!CryptStringToBinaryA": 1, "CRYPT32.dll!PFXImportCertStore": 1, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 2, "CRYPT32.dll!CertCreateCertificateChainEngine": 1, "CRYPT32.dll!CertGetCertificateChain": 1, "CRYPT32.dll!CertFreeCertificateChainEngine": 1, "CRYPT32.dll!CertFreeCertificateChain": 1, "CRYPT32.dll!CertFindExtension": 1, "CRYPT32.dll!CryptDecodeObjectEx": 1, "CRYPT32.dll!CertGetNameStringA": 2, "CRYPT32.dll!CryptQueryObject": 1, "CRYPT32.dll!CertAddCertificateContextToStore": 1, "WS2_32.dll!gethostname": 1, "KERNEL32.dll!SleepConditionVariableCS": 2, "Secur32.dll!InitSecurityInterfaceA": 1, "KERNEL32.dll!HeapCreate": 1, "KERNEL32.dll!GetDiskFreeSpaceW": 1, "KERNEL32.dll!OutputDebugStringA": 1, "KERNEL32.dll!LockFile": 1, "KERNEL32.dll!SetFilePointer": 1, "KERNEL32.dll!GetFullPathNameA": 1, "KERNEL32.dll!UnlockFileEx": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!HeapValidate": 1, "KERNEL32.dll!GetTempPathA": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!GetDiskFreeSpaceA": 1, "KERNEL32.dll!GetFileAttributesA": 1, "KERNEL32.dll!FlushViewOfFile": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!DeleteFileA": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!HeapCompact": 1, "KERNEL32.dll!HeapDestroy": 1, "KERNEL32.dll!UnlockFile": 1, "KERNEL32.dll!LockFileEx": 1, "KERNEL32.dll!GetFileSize": 1, "KERNEL32.dll!GetTickCount": 1, "bcrypt.dll!BCryptGenRandom": 1, "WS2_32.dll!__WSAFDIsSet": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvxdapix.dll", "sha256": "f051472a239f3392bc59c23f3962e4dabb0ee64affdf7fa4856ace209adace6d", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 5039616, "processed_bytes": 5039616, "instructions": 1318334, "skipdata_bytes": 33 }, { "name": ".orpc", "raw_bytes": 512, "processed_bytes": 512, "instructions": 149, "skipdata_bytes": 1 } ], "utc": "2026-11-11T21:40:53.036859+00:00", "instructions": 1318483, "skipdata_bytes": 34, "calls": 127962, "api_reference_counts": { "USER32.dll!RegisterWindowMessageW": 6, "ADVAPI32.dll!InitializeSecurityDescriptor": 3, "ADVAPI32.dll!SetSecurityDescriptorDacl": 3, "KERNEL32.dll!GetSystemInfo": 4, "KERNEL32.dll!GetProcAddress": 122, "USER32.dll!BroadcastSystemMessageW": 1, "KERNEL32.dll!ResetEvent": 14, "KERNEL32.dll!SetEvent": 31, "KERNEL32.dll!TerminateProcess": 7, "KERNEL32.dll!CloseHandle": 130, "ADVAPI32.dll!RegEnumValueW": 1, "USER32.dll!GetAsyncKeyState": 1, "KERNEL32.dll!HeapAlloc": 15, "KERNEL32.dll!HeapFree": 44, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 56, "ADVAPI32.dll!RegQueryValueExW": 197, "ADVAPI32.dll!RegCloseKey": 325, "SETUPAPI.dll!SetupDiGetDeviceInfoListDetailW": 1, "SETUPAPI.dll!CM_Get_Device_ID_ExW": 1, "SETUPAPI.dll!CM_Get_DevNode_Status_Ex": 1, "SETUPAPI.dll!SetupDiSetClassInstallParamsW": 3, "SETUPAPI.dll!SetupDiCallClassInstaller": 3, "KERNEL32.dll!GetLastError": 195, "SETUPAPI.dll!SetupDiChangeState": 1, "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 2, "SETUPAPI.dll!SetupDiGetClassDevsW": 8, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 12, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 11, "KERNEL32.dll!LocalFree": 55, "KERNEL32.dll!LocalAlloc": 25, "KERNEL32.dll!Sleep": 33, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 8, "SETUPAPI.dll!SetupDiOpenDevRegKey": 2, "SETUPAPI.dll!CM_Reenumerate_DevNode": 1, "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 9, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 5, "SHLWAPI.dll!StrStrIW": 4, "KERNEL32.dll!lstrcmpiW": 14, "KERNEL32.dll!OpenEventW": 25, "KERNEL32.dll!WaitForMultipleObjects": 8, "SHELL32.dll!SHGetSpecialFolderPathW": 2, "KERNEL32.dll!GetSystemDirectoryW": 9, "SHLWAPI.dll!PathCombineW": 4, "ole32.dll!CoCreateGuid": 107, "ADVAPI32.dll!RegOpenCurrentUser": 3, "ADVAPI32.dll!RegSetValueExW": 104, "ADVAPI32.dll!RegOpenKeyExW": 29, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!ExpandEnvironmentStringsW": 3, "KERNEL32.dll!GetFileSizeEx": 3, "KERNEL32.dll!CreateFileW": 16, "KERNEL32.dll!WideCharToMultiByte": 10, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!WaitForSingleObject": 19, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!GetModuleFileNameW": 6, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!CreateMutexW": 3, "KERNEL32.dll!CreateEventA": 6, "KERNEL32.dll!WaitForSingleObjectEx": 4, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!FormatMessageW": 4, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!GetCurrentProcess": 7, "KERNEL32.dll!GetProcessTimes": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "KERNEL32.dll!QueryPerformanceFrequency": 6, "KERNEL32.dll!QueryPerformanceCounter": 10, "ADVAPI32.dll!RegCreateKeyExW": 13, "USER32.dll!GetThreadDesktop": 2, "USER32.dll!OpenInputDesktop": 2, "USER32.dll!SetThreadDesktop": 3, "USER32.dll!CloseDesktop": 3, "USER32.dll!GetUserObjectInformationW": 2, "KERNEL32.dll!VerSetConditionMask": 8, "KERNEL32.dll!VerifyVersionInfoW": 4, "OLEAUT32.dll!SysAllocString": 2, "OLEAUT32.dll!SysFreeString": 2, "KERNEL32.dll!GetVersionExW": 2, "ole32.dll!CoCreateInstance": 5, "ole32.dll!CoSetProxyBlanket": 1, "OLEAUT32.dll!VariantClear": 1, "KERNEL32.dll!FindResourceExW": 4, "KERNEL32.dll!FindResourceW": 2, "KERNEL32.dll!LoadResource": 4, "KERNEL32.dll!LockResource": 3, "KERNEL32.dll!SizeofResource": 2, "KERNEL32.dll!GetCurrentProcessId": 8, "KERNEL32.dll!ProcessIdToSessionId": 6, "WTSAPI32.dll!WTSEnumerateSessionsW": 3, "WTSAPI32.dll!WTSFreeMemory": 3, "WTSAPI32.dll!WTSQueryUserToken": 4, "ADVAPI32.dll!DuplicateTokenEx": 2, "ADVAPI32.dll!ImpersonateLoggedOnUser": 3, "ADVAPI32.dll!RevertToSelf": 4, "ADVAPI32.dll!QueryServiceConfigW": 2, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 4, "USER32.dll!GetSystemMetrics": 4, "USERENV.dll!CreateEnvironmentBlock": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "KERNEL32.dll!GetSystemDefaultLCID": 2, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "KERNEL32.dll!FreeResource": 2, "KERNEL32.dll!FreeLibrary": 31, "KERNEL32.dll!InitializeCriticalSectionEx": 4, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!DecodePointer": 3, "RstrtMgr.DLL!RmStartSession": 1, "RstrtMgr.DLL!RmRegisterResources": 1, "RstrtMgr.DLL!RmGetList": 1, "RstrtMgr.DLL!RmEndSession": 2, "KERNEL32.dll!OpenProcess": 7, "KERNEL32.dll!CompareFileTime": 1, "KERNEL32.dll!QueryFullProcessImageNameA": 3, "PSAPI.DLL!EnumProcessModulesEx": 2, "PSAPI.DLL!GetModuleFileNameExW": 3, "PSAPI.DLL!EnumProcesses": 2, "KERNEL32.dll!GetModuleHandleW": 15, "USER32.dll!wsprintfW": 3, "ADVAPI32.dll!CloseServiceHandle": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!StartServiceW": 1, "ADVAPI32.dll!ControlService": 1, "KERNEL32.dll!GetTickCount": 2, "ADVAPI32.dll!QueryServiceStatusEx": 1, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!RegDeleteValueW": 18, "KERNEL32.dll!DeleteTimerQueueTimer": 2, "KERNEL32.dll!CreateTimerQueueTimer": 1, "KERNEL32.dll!GetSystemPowerStatus": 3, "USER32.dll!FindWindowA": 1, "USER32.dll!PostMessageW": 1, "KERNEL32.dll!WaitForMultipleObjectsEx": 2, "KERNEL32.dll!ReleaseSemaphore": 11, "KERNEL32.dll!OpenEventA": 2, "NvUI.dll!ShowACETrayIcon": 1, "NvUI.dll!HideACETrayIcon": 1, "NvUI.dll!StartNotificationIcon": 1, "NvUI.dll!StartACETrayIcon": 3, "NvUI.dll!StopXGpuTrayIcon": 2, "NvUI.dll!StartOptimusXGpuTrayIcon": 1, "NvUI.dll!StartOptimusXGpuTrayIconUI": 1, "dwmapi.dll!DwmIsCompositionEnabled": 3, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoUninitialize": 6, "NvUI.dll!NvUiNvapiInit": 1, "ADVAPI32.dll!RegEnumKeyExW": 3, "KERNEL32.dll!CreateEventW": 14, "KERNEL32.dll!QueryActCtxW": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!SetLastError": 44, "KERNEL32.dll!CreateActCtxW": 1, "KERNEL32.dll!ActivateActCtx": 2, "KERNEL32.dll!FindActCtxSectionStringW": 1, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!DeactivateActCtx": 4, "KERNEL32.dll!OutputDebugStringA": 1, "KERNEL32.dll!InitOnceBeginInitialize": 1, "KERNEL32.dll!InitOnceComplete": 2, "NvUI.dll!StopDx11SampleApp": 1, "NvUI.dll!UpdateTrayIconEx": 1, "NvUI.dll!StopNotificationIcon": 1, "USER32.dll!DisplayConfigSetDeviceInfo": 8, "USER32.dll!DisplayConfigGetDeviceInfo": 13, "USER32.dll!SetDisplayConfig": 16, "NvUI.dll!ACEShowBalloonVariadic": 3, "USER32.dll!EnumDisplaySettingsW": 3, "USER32.dll!ChangeDisplaySettingsExW": 3, "NvUI.dll!StartDx11SampleApp": 1, "SHLWAPI.dll!SHDeleteKeyW": 5, "KERNEL32.dll!MulDiv": 3, "USER32.dll!EnumDisplayDevicesW": 7, "dwmapi.dll!#102": 3, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "GDI32.dll!CreateDCW": 3, "GDI32.dll!GetDeviceGammaRamp": 1, "GDI32.dll!DeleteDC": 3, "GDI32.dll!SetDeviceGammaRamp": 1, "GDI32.dll!GetICMProfileW": 1, "KERNEL32.dll!GetFileTime": 1, "KERNEL32.dll!FileTimeToSystemTime": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsDeleteString": 3, "api-ms-win-core-winrt-l1-1-0.dll!RoUninitialize": 2, "NvUI.dll!ShowBalloonVariadic": 4, "USER32.dll!SystemParametersInfoW": 1, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!lstrlenW": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsGetStringRawBuffer": 5, "NTDSAPI.dll!DsGetRdnW": 1, "SHLWAPI.dll!#487": 1, "api-ms-win-core-winrt-l1-1-0.dll!RoInitialize": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsCreateString": 1, "api-ms-win-core-winrt-l1-1-0.dll!RoGetActivationFactory": 1, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!LookupPrivilegeValueW": 2, "ADVAPI32.dll!AdjustTokenPrivileges": 2, "USER32.dll!ExitWindowsEx": 2, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "KERNEL32.dll!GetFirmwareEnvironmentVariableExW": 2, "KERNEL32.dll!GlobalMemoryStatusEx": 1, "KERNEL32.dll!GetPhysicallyInstalledSystemMemory": 1, "KERNEL32.dll!SetFirmwareEnvironmentVariableExW": 1, "ADVAPI32.dll!RegNotifyChangeKeyValue": 4, "NvSmartMax64.dll!NvSmartMaxEntryPoint": 3, "NvSmartMax64.dll!NVSetHooks": 3, "NvSmartMax64.dll!NvSmartMaxSetMaximized": 1, "NvSmartMax64.dll!NvSmartMaxSetTaskbarRect": 1, "USER32.dll!InflateRect": 1, "NvSmartMax64.dll!NvSmartMaxSetDeviceGrids": 1, "NvSmartMax64.dll!NvSmartMaxGetTaskbarRect": 1, "USER32.dll!FindWindowW": 1, "SHELL32.dll!SHAppBarMessage": 1, "KERNEL32.dll!SetThreadExecutionState": 1, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!GetFileAttributesW": 9, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "NvUI.dll!ShowPowerNotification": 2, "NvUI.dll!ShowVideoBridgeNotification": 1, "NvUI.dll!DisplayTooltipWithoutExecuteW": 1, "NvUI.dll!DisplayTooltipWithExecuteW": 1, "KERNEL32.dll!SetWaitableTimer": 3, "KERNEL32.dll!CreateWaitableTimerW": 1, "NvUI.dll!ShowBalloon": 1, "NvSmartMax64.dll!NvIsNvSmartMaxEnabled": 1, "NvSmartMax64.dll!NVUnHook": 1, "NvSmartMax64.dll!NvSmartMaxShutdown": 1, "NvUI.dll!ShowBalloonVer5": 3, "USER32.dll!OpenDesktopW": 1, "USER32.dll!GetCursorPos": 1, "USER32.dll!PtInRect": 1, "NvUI.dll!ShowSLIBlockingAppsDlg": 2, "KERNEL32.dll!FindFirstFileW": 1, "USER32.dll!GetWindowLongW": 1, "USER32.dll!GetWindowRect": 1, "USER32.dll!FindWindowExW": 1, "USER32.dll!GetClassNameW": 2, "USER32.dll!GetWindowTextW": 2, "USER32.dll!GetWindowThreadProcessId": 1, "USER32.dll!GetDesktopWindow": 1, "USER32.dll!GetShellWindow": 1, "USER32.dll!IsWindow": 1, "NvUI.dll!ShowSurroundNotification": 1, "NvUI.dll!?ShowBalloon@NotificationIcon@UI@UXDriver@Nvidia@@SA_NIIIPEB_W000@Z": 3, "KERNEL32.dll!GetShortPathNameW": 2, "KERNEL32.dll!GetSystemWow64DirectoryW": 1, "NvSmartMax64.dll!NvSmartMaxGetTaskbarDisplayIndex": 1, "KERNEL32.dll!lstrcmpW": 1, "NvUI.dll!?ShowThemedMessageWindow@NotificationIcon@UI@UXDriver@Nvidia@@SA_NIIKPEAUHICON__@@PEB_W@Z": 3, "SHLWAPI.dll!PathRemoveFileSpecW": 1, "SHLWAPI.dll!PathFileExistsW": 1, "KERNEL32.dll!DeleteFileW": 4, "ADVAPI32.dll!GetUserNameW": 3, "SETUPAPI.dll!CM_Get_Parent": 3, "CFGMGR32.dll!CM_Get_DevNode_PropertyW": 2, "SHLWAPI.dll!StrStrW": 1, "SETUPAPI.dll!SetupDiGetDevicePropertyW": 3, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 2, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 1, "USER32.dll!GetDisplayConfigBufferSizes": 1, "USER32.dll!QueryDisplayConfig": 1, "KERNEL32.dll!FlushFileBuffers": 4, "KERNEL32.dll!DisconnectNamedPipe": 3, "KERNEL32.dll!WaitNamedPipeW": 1, "KERNEL32.dll!SetNamedPipeHandleState": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 4, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!FreeSid": 4, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!CreateNamedPipeW": 1, "KERNEL32.dll!ConnectNamedPipe": 1, "KERNEL32.dll!CreateThread": 3, "ole32.dll!CoTaskMemAlloc": 6, "ole32.dll!CoTaskMemRealloc": 4, "ole32.dll!StringFromGUID2": 3, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!DeviceIoControl": 6, "SETUPAPI.dll!CM_Get_Device_ID_Size": 3, "SETUPAPI.dll!CM_Get_Device_IDW": 2, "KERNEL32.dll!CreateSemaphoreA": 1, "RPCRT4.dll!NdrDllGetClassObject": 1, "RPCRT4.dll!NdrDllCanUnloadNow": 1, "RPCRT4.dll!NdrDllRegisterProxy": 1, "RPCRT4.dll!NdrDllUnregisterProxy": 1, "ADVAPI32.dll!UnregisterTraceGuids": 1, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "KERNEL32.dll!RaiseException": 8, "KERNEL32.dll!TerminateThread": 1, "KERNEL32.dll!GetThreadId": 1, "USER32.dll!PostThreadMessageW": 3, "USER32.dll!SendMessageW": 1, "USER32.dll!GetMessageW": 1, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 2, "USER32.dll!DefWindowProcW": 1, "USER32.dll!RegisterPowerSettingNotification": 5, "USER32.dll!RegisterSuspendResumeNotification": 1, "USER32.dll!RegisterDeviceNotificationW": 1, "USER32.dll!SetWinEventHook": 1, "USER32.dll!UnhookWinEvent": 1, "USER32.dll!UnregisterPowerSettingNotification": 1, "USER32.dll!UnregisterSuspendResumeNotification": 1, "USER32.dll!UnregisterDeviceNotification": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!RegisterClassExW": 1, "USER32.dll!UnregisterHotKey": 1, "USER32.dll!RegisterHotKey": 1, "KERNEL32.dll!DuplicateHandle": 1, "USER32.dll!CharNextW": 20, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegDeleteKeyW": 2, "ADVAPI32.dll!RegQueryInfoKeyW": 3, "KERNEL32.dll!EnterCriticalSection": 16, "KERNEL32.dll!MultiByteToWideChar": 11, "KERNEL32.dll!LeaveCriticalSection": 14, "KERNEL32.dll!EncodePointer": 4, "OLEAUT32.dll!LoadTypeLib": 2, "KERNEL32.dll!GetThreadLocale": 2, "KERNEL32.dll!SetThreadLocale": 4, "OLEAUT32.dll!SysStringLen": 1, "USER32.dll!MsgWaitForMultipleObjects": 3, "ole32.dll!CoInitialize": 3, "KERNEL32.dll!GetCurrentThread": 1, "KERNEL32.dll!OpenMutexW": 1, "USER32.dll!PeekMessageW": 1, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!CreateProcessW": 1, "KERNEL32.dll!InitializeCriticalSection": 1, "RPCRT4.dll!IUnknown_QueryInterface_Proxy": 1, "RPCRT4.dll!IUnknown_AddRef_Proxy": 1, "RPCRT4.dll!IUnknown_Release_Proxy": 1, "RPCRT4.dll!NdrOleAllocate": 1, "RPCRT4.dll!NdrOleFree": 1, "RPCRT4.dll!CStdStubBuffer_QueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_AddRef": 1, "RPCRT4.dll!CStdStubBuffer_Connect": 1, "RPCRT4.dll!CStdStubBuffer_Disconnect": 1, "RPCRT4.dll!CStdStubBuffer_Invoke": 1, "RPCRT4.dll!CStdStubBuffer_IsIIDSupported": 1, "RPCRT4.dll!CStdStubBuffer_CountRefs": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerQueryInterface": 1, "RPCRT4.dll!CStdStubBuffer_DebugServerRelease": 1, "RPCRT4.dll!NdrCStdStubBuffer_Release": 1, "WTSAPI32.dll!WTSRegisterSessionNotification": 1, "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!VirtualProtect": 2, "KERNEL32.dll!LoadLibraryExA": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsGetValue": 3, "KERNEL32.dll!CreateWaitableTimerA": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!TlsSetValue": 3, "KERNEL32.dll!ResumeThread": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!RtlPcToFileHeader": 4, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\MessageBus\\MessageBus.dll", "sha256": "64e300997b5796da22ad8baa49e4eb919cdc170157cbe6770279f94508a84650", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 5349888, "processed_bytes": 5349888, "instructions": 1622471, "skipdata_bytes": 12827 } ], "utc": "2026-11-11T21:40:54.588969+00:00", "instructions": 1622471, "skipdata_bytes": 12827, "calls": 94739, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 34, "KERNEL32.dll!TlsAlloc": 7, "KERNEL32.dll!EnterCriticalSection": 33, "KERNEL32.dll!LeaveCriticalSection": 64, "KERNEL32.dll!InitializeCriticalSection": 2, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!Sleep": 13, "KERNEL32.dll!GetNamedPipeServerProcessId": 2, "KERNEL32.dll!CloseHandle": 54, "KERNEL32.dll!CreateIoCompletionPort": 3, "KERNEL32.dll!GetLastError": 137, "KERNEL32.dll!SetEvent": 15, "KERNEL32.dll!PostQueuedCompletionStatus": 5, "KERNEL32.dll!GetQueuedCompletionStatus": 2, "KERNEL32.dll!ConnectNamedPipe": 2, "KERNEL32.dll!CancelIoEx": 2, "KERNEL32.dll!ReadFile": 8, "KERNEL32.dll!WriteFile": 17, "KERNEL32.dll!WaitNamedPipeW": 2, "KERNEL32.dll!CreateFileW": 20, "CRYPT32.dll!CertOpenSystemStoreW": 2, "CRYPT32.dll!CertFindCertificateInStore": 3, "CRYPT32.dll!CertFreeCertificateContext": 9, "CRYPT32.dll!CertEnumCertificatesInStore": 8, "CRYPT32.dll!CertCloseStore": 5, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!CopyFileW": 2, "KERNEL32.dll!CreateDirectoryW": 2, "KERNEL32.dll!GetFileAttributesExW": 4, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!MoveFileExW": 2, "KERNEL32.dll!SetFileTime": 2, "KERNEL32.dll!SetFilePointer": 7, "KERNEL32.dll!SetEndOfFile": 3, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 8, "KERNEL32.dll!TryEnterCriticalSection": 2, "KERNEL32.dll!CreateEventW": 8, "KERNEL32.dll!WaitForSingleObject": 10, "KERNEL32.dll!ResetEvent": 13, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!GetExitCodeProcess": 4, "KERNEL32.dll!OpenProcess": 3, "KERNEL32.dll!TerminateProcess": 6, "KERNEL32.dll!GetStartupInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 6, "KERNEL32.dll!DuplicateHandle": 5, "KERNEL32.dll!GetStdHandle": 19, "KERNEL32.dll!GetConsoleWindow": 2, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!GetProcessTimes": 2, "KERNEL32.dll!GetCurrentDirectoryW": 5, "KERNEL32.dll!ExpandEnvironmentStringsW": 6, "KERNEL32.dll!GetLogicalDriveStringsW": 2, "KERNEL32.dll!GetSystemDirectoryW": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetTempPathW": 2, "KERNEL32.dll!WideCharToMultiByte": 13, "KERNEL32.dll!GetSystemTimeAsFileTime": 8, "KERNEL32.dll!FindFirstFileW": 4, "KERNEL32.dll!FindClose": 12, "KERNEL32.dll!FindNextFileW": 7, "KERNEL32.dll!TlsFree": 7, "KERNEL32.dll!SetThreadPriority": 3, "KERNEL32.dll!TlsGetValue": 7, "KERNEL32.dll!GetCurrentThreadId": 11, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!TlsSetValue": 7, "KERNEL32.dll!GetEnvironmentVariableA": 4, "KERNEL32.dll!GetComputerNameA": 2, "KERNEL32.dll!GetSystemInfo": 3, "KERNEL32.dll!GetVersionExW": 5, "KERNEL32.dll!SetEnvironmentVariableA": 2, "ADVAPI32.dll!CryptAcquireContextW": 6, "ADVAPI32.dll!CryptGenRandom": 2, "ADVAPI32.dll!CryptReleaseContext": 11, "KERNEL32.dll!CreatePipe": 2, "KERNEL32.dll!FlushFileBuffers": 4, "KERNEL32.dll!GetTimeZoneInformation": 7, "KERNEL32.dll!FormatMessageW": 4, "KERNEL32.dll!LocalFree": 2, "KERNEL32.dll!CreateMutexW": 2, "KERNEL32.dll!ReleaseMutex": 8, "KERNEL32.dll!WaitForMultipleObjects": 5, "KERNEL32.dll!FreeLibrary": 35, "ADVAPI32.dll!RegCloseKey": 5, "KERNEL32.dll!LoadLibraryW": 5, "KERNEL32.dll!GetProcAddress": 63, "ADVAPI32.dll!RegDeleteKeyW": 2, "ADVAPI32.dll!RegDeleteValueW": 2, "ADVAPI32.dll!RegOpenKeyExW": 4, "ADVAPI32.dll!RegQueryValueExW": 11, "ADVAPI32.dll!RegCreateKeyExW": 3, "ADVAPI32.dll!RegSetValueExW": 10, "ADVAPI32.dll!RegQueryInfoKeyW": 3, "ADVAPI32.dll!RegEnumKeyExW": 2, "ADVAPI32.dll!RegEnumValueW": 2, "WS2_32.dll!WSAStartup": 3, "WS2_32.dll!WSACleanup": 3, "WS2_32.dll!htons": 5, "WS2_32.dll!ntohs": 7, "WS2_32.dll!getservbyname": 2, "WS2_32.dll!ntohl": 11, "WS2_32.dll!inet_addr": 2, "WS2_32.dll!getaddrinfo": 6, "WS2_32.dll!freeaddrinfo": 6, "WS2_32.dll!getnameinfo": 3, "WS2_32.dll!gethostname": 2, "WS2_32.dll!WSAGetLastError": 40, "WS2_32.dll!select": 2, "WS2_32.dll!accept": 3, "WS2_32.dll!getsockname": 3, "WS2_32.dll!bind": 5, "WS2_32.dll!closesocket": 4, "WS2_32.dll!connect": 5, "WS2_32.dll!getsockopt": 4, "WS2_32.dll!socket": 3, "WS2_32.dll!ioctlsocket": 5, "WS2_32.dll!listen": 3, "WS2_32.dll!getpeername": 2, "WS2_32.dll!WSAPoll": 2, "WS2_32.dll!recv": 3, "WS2_32.dll!recvfrom": 2, "WS2_32.dll!send": 5, "WS2_32.dll!sendto": 2, "WS2_32.dll!setsockopt": 7, "WS2_32.dll!shutdown": 4, "KERNEL32.dll!GetModuleHandleExW": 7, "KERNEL32.dll!SetLastError": 25, "WS2_32.dll!WSASetLastError": 4, "WS2_32.dll!gethostbyname": 2, "KERNEL32.dll!MultiByteToWideChar": 28, "KERNEL32.dll!GetEnvironmentVariableW": 4, "KERNEL32.dll!GetModuleHandleW": 10, "USER32.dll!GetProcessWindowStation": 2, "USER32.dll!GetUserObjectInformationW": 3, "KERNEL32.dll!GetFileType": 10, "ADVAPI32.dll!RegisterEventSourceW": 3, "ADVAPI32.dll!ReportEventW": 3, "ADVAPI32.dll!DeregisterEventSource": 3, "USER32.dll!MessageBoxW": 2, "KERNEL32.dll!CreateFiber": 4, "KERNEL32.dll!SwitchToFiber": 5, "KERNEL32.dll!DeleteFiber": 3, "CRYPT32.dll!CertGetCertificateContextProperty": 7, "ADVAPI32.dll!CryptCreateHash": 3, "ADVAPI32.dll!CryptSetHashParam": 3, "ADVAPI32.dll!CryptSignHashW": 3, "ADVAPI32.dll!CryptDestroyHash": 3, "ADVAPI32.dll!CryptDestroyKey": 5, "ADVAPI32.dll!CryptGetUserKey": 2, "ADVAPI32.dll!CryptExportKey": 3, "ADVAPI32.dll!CryptEnumProvidersW": 5, "ADVAPI32.dll!CryptGetProvParam": 3, "CRYPT32.dll!CertDuplicateCertificateContext": 2, "CRYPT32.dll!CertOpenStore": 2, "ADVAPI32.dll!CryptDecrypt": 2, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!ConvertThreadToFiber": 2, "KERNEL32.dll!ConvertFiberToThread": 2, "KERNEL32.dll!LoadLibraryA": 2, "KERNEL32.dll!GetConsoleMode": 7, "KERNEL32.dll!SetConsoleMode": 5, "KERNEL32.dll!ReadConsoleW": 3, "KERNEL32.dll!ReadConsoleA": 2, "KERNEL32.dll!GetSystemTime": 4, "KERNEL32.dll!SystemTimeToFileTime": 3, "KERNEL32.dll!CreateTimerQueueTimer": 2, "KERNEL32.dll!DeleteTimerQueueTimer": 2, "KERNEL32.dll!GetModuleFileNameW": 11, "ADVAPI32.dll!GetUserNameW": 2, "USER32.dll!PostThreadMessageW": 2, "USER32.dll!PostMessageW": 2, "USER32.dll!PeekMessageW": 2, "USER32.dll!GetMessageW": 2, "KERNEL32.dll!MoveFileW": 2, "KERNEL32.dll!OutputDebugStringA": 2, "KERNEL32.dll!ProcessIdToSessionId": 2, "WS2_32.dll!__WSAFDIsSet": 1, "IPHLPAPI.DLL!GetAdaptersInfo": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!GetTickCount": 2, "KERNEL32.dll!SwitchToThread": 2, "KERNEL32.dll!DecodePointer": 3, "KERNEL32.dll!EncodePointer": 5, "KERNEL32.dll!CompareStringW": 3, "KERNEL32.dll!GetLocaleInfoW": 13, "KERNEL32.dll!LCMapStringW": 3, "KERNEL32.dll!GetStringTypeW": 5, "KERNEL32.dll!GetCPInfo": 6, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!WaitForSingleObjectEx": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 5, "KERNEL32.dll!UnhandledExceptionFilter": 4, "KERNEL32.dll!RtlCaptureContext": 6, "KERNEL32.dll!RtlLookupFunctionEntry": 7, "KERNEL32.dll!IsDebuggerPresent": 7, "bcrypt.dll!BCryptGenRandom": 1, "KERNEL32.dll!RtlPcToFileHeader": 6, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!RtlUnwindEx": 4, "KERNEL32.dll!InterlockedFlushSList": 2, "KERNEL32.dll!InterlockedPushEntrySList": 2, "KERNEL32.dll!LoadLibraryExW": 21, "KERNEL32.dll!IsProcessorFeaturePresent": 3, "KERNEL32.dll!ExitThread": 4, "KERNEL32.dll!FreeLibraryAndExitThread": 2, "KERNEL32.dll!CreateThread": 3, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!ExitProcess": 2, "KERNEL32.dll!SetConsoleCtrlHandler": 2, "KERNEL32.dll!GetFileInformationByHandle": 5, "KERNEL32.dll!PeekNamedPipe": 5, "KERNEL32.dll!FileTimeToSystemTime": 3, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 3, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!GetConsoleCP": 2, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 8, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetTimeFormatW": 2, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!IsValidLocale": 3, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!SetStdHandle": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!GetFullPathNameW": 22, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!GetOEMCP": 2, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 4, "KERNEL32.dll!GetCommandLineA": 2, "KERNEL32.dll!GetCommandLineW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 6, "KERNEL32.dll!GetEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 8, "KERNEL32.dll!OutputDebugStringW": 5, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!GetConsoleScreenBufferInfo": 2, "KERNEL32.dll!SetConsoleTextAttribute": 3 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\dependencies\\libcrypto-3-x64.dll", "sha256": "bf7031536634118b6d476d3af2247141d37f3034fbbe2e8c7a9a60608f5ec393", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 5261312, "processed_bytes": 5261312, "instructions": 2284252, "skipdata_bytes": 2560 } ], "utc": "2026-11-11T21:40:54.225331+00:00", "instructions": 2284252, "skipdata_bytes": 2560, "calls": 80564, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 29, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 5, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 79, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 14, "api-ms-win-crt-time-l1-1-0.dll!_time64": 45, "api-ms-win-crt-string-l1-1-0.dll!strncpy": 15, "api-ms-win-crt-utility-l1-1-0.dll!qsort": 8, "KERNEL32.dll!ConvertThreadToFiberEx": 2, "KERNEL32.dll!ConvertFiberToThread": 2, "KERNEL32.dll!CreateFiberEx": 4, "KERNEL32.dll!DeleteFiber": 7, "KERNEL32.dll!SwitchToFiber": 5, "WS2_32.dll!WSASetLastError": 16, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 9, "api-ms-win-crt-heap-l1-1-0.dll!free": 25, "WS2_32.dll!htons": 2, "WS2_32.dll!getservbyname": 3, "WS2_32.dll!inet_addr": 3, "WS2_32.dll!htonl": 2, "WS2_32.dll!inet_ntoa": 3, "WS2_32.dll!getservbyport": 2, "WS2_32.dll!ntohs": 4, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 7, "WS2_32.dll!gethostbyaddr": 2, "WS2_32.dll!WSAGetLastError": 41, "KERNEL32.dll!GetSystemDirectoryA": 2, "api-ms-win-crt-string-l1-1-0.dll!strcat_s": 3, "KERNEL32.dll!LoadLibraryA": 4, "KERNEL32.dll!GetProcAddress": 14, "KERNEL32.dll!FreeLibrary": 15, "api-ms-win-crt-string-l1-1-0.dll!strncpy_s": 4, "WS2_32.dll!gethostbyname": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 3, "KERNEL32.dll!FormatMessageA": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 12, "api-ms-win-crt-stdio-l1-1-0.dll!fputs": 6, "WS2_32.dll!getsockopt": 7, "WS2_32.dll!getsockname": 4, "WS2_32.dll!WSAStartup": 2, "WS2_32.dll!ioctlsocket": 3, "WS2_32.dll!select": 2, "WS2_32.dll!WSACleanup": 2, "WS2_32.dll!accept": 2, "WS2_32.dll!closesocket": 4, "WS2_32.dll!bind": 3, "WS2_32.dll!setsockopt": 14, "WS2_32.dll!connect": 2, "WS2_32.dll!listen": 2, "WS2_32.dll!socket": 2, "WS2_32.dll!shutdown": 4, "WS2_32.dll!send": 7, "WS2_32.dll!recv": 4, "WS2_32.dll!sendto": 4, "WS2_32.dll!recvfrom": 3, "WS2_32.dll!getpeername": 3, "KERNEL32.dll!SetLastError": 8, "KERNEL32.dll!GetLastError": 13, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 3, "api-ms-win-crt-stdio-l1-1-0.dll!ferror": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fgets": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fseek": 4, "api-ms-win-crt-stdio-l1-1-0.dll!feof": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_fileno": 4, "api-ms-win-crt-stdio-l1-1-0.dll!_get_osfhandle": 2, "KERNEL32.dll!GetFileType": 3, "api-ms-win-crt-stdio-l1-1-0.dll!ftell": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_setmode": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 9, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 7, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 19, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 7, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 6, "api-ms-win-crt-string-l1-1-0.dll!_strdup": 4, "api-ms-win-crt-string-l1-1-0.dll!isspace": 4, "api-ms-win-crt-convert-l1-1-0.dll!atoi": 21, "KERNEL32.dll!LoadLibraryW": 3, "KERNEL32.dll!CloseHandle": 10, "api-ms-win-crt-string-l1-1-0.dll!tolower": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 3, "api-ms-win-crt-string-l1-1-0.dll!strpbrk": 13, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsscanf": 3, "KERNEL32.dll!GetEnvironmentVariableW": 12, "api-ms-win-crt-runtime-l1-1-0.dll!raise": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_exit": 2, "KERNEL32.dll!GetModuleHandleW": 4, "USER32.dll!GetProcessWindowStation": 2, "USER32.dll!GetUserObjectInformationW": 3, "KERNEL32.dll!GetStdHandle": 9, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 4, "KERNEL32.dll!WriteFile": 2, "KERNEL32.dll!MultiByteToWideChar": 11, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vswprintf": 5, "ADVAPI32.dll!RegisterEventSourceW": 2, "ADVAPI32.dll!ReportEventW": 2, "ADVAPI32.dll!DeregisterEventSource": 2, "USER32.dll!MessageBoxW": 2, "KERNEL32.dll!GetACP": 2, "KERNEL32.dll!WideCharToMultiByte": 7, "api-ms-win-crt-environment-l1-1-0.dll!getenv": 4, "KERNEL32.dll!GetModuleHandleExW": 4, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 2, "KERNEL32.dll!VirtualFree": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualAlloc": 2, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!VirtualLock": 2, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!FindNextFileW": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fopen": 4, "api-ms-win-crt-runtime-l1-1-0.dll!strerror_s": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64_s": 3, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!GetCurrentThreadId": 7, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!InitializeSRWLock": 3, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!AcquireSRWLockExclusive": 2, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "api-ms-win-crt-string-l1-1-0.dll!strspn": 24, "api-ms-win-crt-string-l1-1-0.dll!strcspn": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_fstat64i32": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!clearerr": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_chmod": 2, "KERNEL32.dll!WaitForSingleObject": 5, "KERNEL32.dll!EnterCriticalSection": 10, "KERNEL32.dll!LeaveCriticalSection": 15, "KERNEL32.dll!ReleaseSemaphore": 5, "KERNEL32.dll!DeleteCriticalSection": 3, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!CreateSemaphoreA": 3, "KERNEL32.dll!TryEnterCriticalSection": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_endthreadex": 2, "KERNEL32.dll!GetExitCodeThread": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 2, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!SetConsoleMode": 5, "api-ms-win-crt-runtime-l1-1-0.dll!signal": 25, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!ReadConsoleA": 2, "KERNEL32.dll!GetCurrentProcess": 3, "KERNEL32.dll!TerminateProcess": 3, "ADVAPI32.dll!CryptAcquireContextW": 3, "ADVAPI32.dll!CryptGenRandom": 3, "ADVAPI32.dll!CryptReleaseContext": 3, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 7, "CRYPT32.dll!CertOpenSystemStoreW": 2, "CRYPT32.dll!CertFindCertificateInStore": 4, "CRYPT32.dll!CertFreeCertificateContext": 3, "CRYPT32.dll!CertCloseStore": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!IsDebuggerPresent": 2, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!InitializeSListHead": 2, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!strstr": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 1 }, "complete_linear_sweep": true }, { "path": "NvTelemetry\\plugin\\NvTelemetry64.dll", "sha256": "64f71e1b98f1fcea2d38f353e3097108c8a0d5196123d15fd94e25a44f887ee5", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 6001152, "processed_bytes": 6001152, "instructions": 1567048, "skipdata_bytes": 3302 } ], "utc": "2026-11-11T21:40:56.430039+00:00", "instructions": 1567048, "skipdata_bytes": 3302, "calls": 110967, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 29, "KERNEL32.dll!CreateEventW": 5, "KERNEL32.dll!GetLastError": 144, "KERNEL32.dll!SetEvent": 3, "SHELL32.dll!SHGetKnownFolderPath": 3, "ole32.dll!CoTaskMemFree": 4, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!MultiByteToWideChar": 28, "KERNEL32.dll!WideCharToMultiByte": 17, "KERNEL32.dll!GetModuleHandleExW": 7, "KERNEL32.dll!GetModuleFileNameW": 3, "KERNEL32.dll!InitOnceComplete": 22, "KERNEL32.dll!InitializeCriticalSectionEx": 4, "OLEAUT32.dll!SysFreeString": 17, "ole32.dll!CoUninitialize": 13, "KERNEL32.dll!InitOnceBeginInitialize": 21, "KERNEL32.dll!GetVolumePathNameW": 1, "IPHLPAPI.DLL!GetAdaptersAddresses": 1, "KERNEL32.dll!GetVersionExW": 1, "KERNEL32.dll!GetNativeSystemInfo": 1, "OLEAUT32.dll!VariantClear": 7, "ole32.dll!CoInitializeEx": 1, "OLEAUT32.dll!SysStringLen": 1, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 1, "OLEAUT32.dll!SysAllocString": 4, "OLEAUT32.dll!VariantInit": 2, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetElement": 1, "OLEAUT32.dll!VariantChangeType": 1, "KERNEL32.dll!GetSystemTime": 7, "ole32.dll!CoInitialize": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 2, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!MapViewOfFile": 2, "KERNEL32.dll!UnmapViewOfFile": 2, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!GetPrivateProfileStringW": 2, "KERNEL32.dll!OpenProcess": 1, "KERNEL32.dll!QueryFullProcessImageNameW": 1, "KERNEL32.dll!CloseHandle": 45, "KERNEL32.dll!GetNamedPipeClientProcessId": 1, "KERNEL32.dll!ReadFile": 8, "KERNEL32.dll!WaitForMultipleObjects": 4, "KERNEL32.dll!GetOverlappedResult": 2, "KERNEL32.dll!PeekNamedPipe": 4, "KERNEL32.dll!CancelIo": 3, "KERNEL32.dll!WaitForSingleObject": 7, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!FlushFileBuffers": 3, "KERNEL32.dll!DisconnectNamedPipe": 2, "ADVAPI32.dll!ConvertStringSidToSidW": 2, "ADVAPI32.dll!SetEntriesInAclW": 1, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "KERNEL32.dll!CreateNamedPipeW": 1, "KERNEL32.dll!ConnectNamedPipe": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!DeleteFileW": 5, "KERNEL32.dll!GetFileAttributesW": 3, "KERNEL32.dll!CreateFileW": 11, "KERNEL32.dll!DeviceIoControl": 2, "RPCRT4.dll!UuidCreate": 1, "RPCRT4.dll!UuidToStringA": 1, "RPCRT4.dll!RpcStringFreeA": 1, "KERNEL32.dll!GetCurrentProcess": 4, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "ADVAPI32.dll!GetSecurityDescriptorDacl": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 1, "KERNEL32.dll!GetFileInformationByHandle": 3, "KERNEL32.dll!InitializeCriticalSection": 4, "KERNEL32.dll!DeleteCriticalSection": 18, "KERNEL32.dll!EnterCriticalSection": 33, "KERNEL32.dll!TryEnterCriticalSection": 1, "KERNEL32.dll!LeaveCriticalSection": 46, "KERNEL32.dll!RaiseException": 6, "KERNEL32.dll!GetCurrentThreadId": 11, "KERNEL32.dll!MoveFileW": 1, "KERNEL32.dll!GetTimeZoneInformation": 2, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 5, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!FindNextFileW": 3, "KERNEL32.dll!FindClose": 6, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 1, "KERNEL32.dll!GetFullPathNameW": 9, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!FindFirstFileW": 2, "KERNEL32.dll!GetFileInformationByHandleEx": 4, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!WaitForSingleObjectEx": 3, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 9, "KERNEL32.dll!AcquireSRWLockExclusive": 9, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!RtlPcToFileHeader": 4, "KERNEL32.dll!IsProcessorFeaturePresent": 6, "KERNEL32.dll!CloseThreadpoolWork": 1, "KERNEL32.dll!SubmitThreadpoolWork": 1, "KERNEL32.dll!CreateThreadpoolWork": 1, "KERNEL32.dll!FreeLibraryWhenCallbackReturns": 1, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!WakeConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetModuleHandleW": 4, "KERNEL32.dll!GetProcAddress": 21, "KERNEL32.dll!GetSystemTimeAsFileTime": 5, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!InterlockedPushEntrySList": 1, "KERNEL32.dll!SetLastError": 13, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!FreeLibrary": 20, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!GetFileType": 8, "KERNEL32.dll!FileTimeToSystemTime": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetDriveTypeW": 2, "KERNEL32.dll!GetConsoleMode": 3, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetStdHandle": 8, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!GetProcessHeap": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!GetTempPathW": 1, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!GetModuleFileNameA": 1, "USER32.dll!GetProcessWindowStation": 1, "USER32.dll!GetUserObjectInformationW": 2, "ADVAPI32.dll!RegisterEventSourceW": 1, "ADVAPI32.dll!ReportEventW": 1, "ADVAPI32.dll!DeregisterEventSource": 1, "USER32.dll!MessageBoxW": 1, "KERNEL32.dll!GetEnvironmentVariableW": 5, "KERNEL32.dll!InitializeSRWLock": 2, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "KERNEL32.dll!VirtualFree": 1, "ADVAPI32.dll!CryptAcquireContextW": 6, "ADVAPI32.dll!CryptGenRandom": 2, "ADVAPI32.dll!CryptReleaseContext": 18, "KERNEL32.dll!ReleaseSemaphore": 4, "KERNEL32.dll!CreateSemaphoreA": 2, "CRYPT32.dll!CertGetCertificateContextProperty": 6, "ADVAPI32.dll!CryptCreateHash": 6, "ADVAPI32.dll!CryptSetHashParam": 2, "ADVAPI32.dll!CryptSignHashW": 2, "ADVAPI32.dll!CryptDestroyHash": 6, "ADVAPI32.dll!CryptDestroyKey": 4, "CRYPT32.dll!CertFreeCertificateContext": 18, "CRYPT32.dll!CertEnumCertificatesInStore": 7, "CRYPT32.dll!CertFindCertificateInStore": 5, "CRYPT32.dll!CertCloseStore": 13, "ADVAPI32.dll!CryptGetUserKey": 1, "ADVAPI32.dll!CryptExportKey": 2, "ADVAPI32.dll!CryptEnumProvidersW": 4, "ADVAPI32.dll!CryptGetProvParam": 2, "CRYPT32.dll!CertDuplicateCertificateContext": 1, "CRYPT32.dll!CertOpenStore": 3, "ADVAPI32.dll!CryptDecrypt": 1, "WS2_32.dll!WSASetLastError": 17, "WS2_32.dll!send": 13, "WS2_32.dll!recv": 5, "WS2_32.dll!WSAGetLastError": 74, "WS2_32.dll!getsockopt": 6, "WS2_32.dll!WSAStartup": 2, "WS2_32.dll!ioctlsocket": 2, "WS2_32.dll!select": 3, "WS2_32.dll!WSACleanup": 3, "WS2_32.dll!htons": 15, "WS2_32.dll!getservbyname": 2, "WS2_32.dll!inet_addr": 1, "WS2_32.dll!htonl": 3, "WS2_32.dll!inet_ntoa": 2, "WS2_32.dll!getservbyport": 1, "WS2_32.dll!ntohs": 8, "WS2_32.dll!gethostbyaddr": 1, "KERNEL32.dll!GetSystemDirectoryA": 1, "KERNEL32.dll!LoadLibraryA": 4, "WS2_32.dll!gethostbyname": 1, "KERNEL32.dll!LoadLibraryW": 3, "KERNEL32.dll!SystemTimeToFileTime": 2, "WS2_32.dll!closesocket": 3, "WS2_32.dll!setsockopt": 15, "WS2_32.dll!connect": 3, "WS2_32.dll!socket": 3, "CRYPT32.dll!CertOpenSystemStoreW": 1, "KERNEL32.dll!SetConsoleMode": 2, "KERNEL32.dll!ReadConsoleA": 1, "WS2_32.dll!shutdown": 2, "WS2_32.dll!sendto": 12, "WS2_32.dll!recvfrom": 3, "WS2_32.dll!getsockname": 5, "WS2_32.dll!getpeername": 3, "WS2_32.dll!WSACreateEvent": 2, "WS2_32.dll!WSACloseEvent": 3, "WS2_32.dll!WSASetEvent": 1, "WS2_32.dll!WSAEventSelect": 5, "WS2_32.dll!WSAWaitForMultipleEvents": 1, "WS2_32.dll!WSAEnumNetworkEvents": 3, "WS2_32.dll!WSAResetEvent": 1, "WLDAP32.dll!#22": 3, "WLDAP32.dll!#217": 1, "WLDAP32.dll!#143": 1, "WLDAP32.dll!#211": 4, "WLDAP32.dll!#50": 1, "WLDAP32.dll!#26": 1, "WLDAP32.dll!#30": 1, "WLDAP32.dll!#200": 4, "WLDAP32.dll!#32": 1, "WLDAP32.dll!#35": 1, "WLDAP32.dll!#79": 2, "WLDAP32.dll!#33": 1, "WLDAP32.dll!#301": 2, "WLDAP32.dll!#27": 1, "WLDAP32.dll!#41": 1, "WLDAP32.dll!#46": 1, "WLDAP32.dll!#60": 1, "WLDAP32.dll!#45": 2, "WS2_32.dll!WSAIoctl": 2, "WS2_32.dll!accept": 1, "WS2_32.dll!bind": 4, "KERNEL32.dll!SleepEx": 1, "WS2_32.dll!getaddrinfo": 1, "WS2_32.dll!freeaddrinfo": 1, "KERNEL32.dll!InitializeConditionVariable": 3, "KERNEL32.dll!GetEnvironmentVariableA": 1, "KERNEL32.dll!MoveFileExA": 2, "IPHLPAPI.DLL!if_nametoindex": 1, "WS2_32.dll!listen": 1, "ADVAPI32.dll!CryptAcquireContextA": 4, "ADVAPI32.dll!CryptHashData": 3, "ADVAPI32.dll!CryptGetHashParam": 8, "KERNEL32.dll!GetModuleHandleA": 2, "CRYPT32.dll!CryptStringToBinaryA": 1, "CRYPT32.dll!PFXImportCertStore": 1, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 2, "CRYPT32.dll!CertCreateCertificateChainEngine": 1, "CRYPT32.dll!CertGetCertificateChain": 1, "CRYPT32.dll!CertFreeCertificateChainEngine": 1, "CRYPT32.dll!CertFreeCertificateChain": 1, "CRYPT32.dll!CertFindExtension": 1, "CRYPT32.dll!CryptDecodeObjectEx": 1, "CRYPT32.dll!CertGetNameStringA": 2, "CRYPT32.dll!CryptQueryObject": 1, "CRYPT32.dll!CertAddCertificateContextToStore": 1, "WS2_32.dll!gethostname": 1, "KERNEL32.dll!SleepConditionVariableCS": 2, "Secur32.dll!InitSecurityInterfaceA": 1, "KERNEL32.dll!HeapCreate": 1, "KERNEL32.dll!GetDiskFreeSpaceW": 1, "KERNEL32.dll!OutputDebugStringA": 1, "KERNEL32.dll!LockFile": 1, "KERNEL32.dll!SetFilePointer": 1, "KERNEL32.dll!GetFullPathNameA": 1, "KERNEL32.dll!UnlockFileEx": 1, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!HeapValidate": 1, "KERNEL32.dll!GetTempPathA": 1, "KERNEL32.dll!FormatMessageW": 1, "KERNEL32.dll!GetDiskFreeSpaceA": 1, "KERNEL32.dll!GetFileAttributesA": 1, "KERNEL32.dll!FlushViewOfFile": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!DeleteFileA": 1, "KERNEL32.dll!GetSystemInfo": 1, "KERNEL32.dll!HeapCompact": 1, "KERNEL32.dll!HeapDestroy": 1, "KERNEL32.dll!UnlockFile": 1, "KERNEL32.dll!LockFileEx": 1, "KERNEL32.dll!GetFileSize": 1, "KERNEL32.dll!GetTickCount": 1, "bcrypt.dll!BCryptGenRandom": 1, "WS2_32.dll!__WSAFDIsSet": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvBackend\\Plugins\\LocalUser\\NvBackend64.dll", "sha256": "7a84c83e7437cf63c94f9edd389f4b1e6f072ef1b7bb6fa1013a22e670132a50", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 6316032, "processed_bytes": 6316032, "instructions": 1570736, "skipdata_bytes": 1880 } ], "utc": "2026-11-11T21:40:59.560047+00:00", "instructions": 1570736, "skipdata_bytes": 1880, "calls": 136256, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 29, "KERNEL32.dll!MultiByteToWideChar": 32, "KERNEL32.dll!WideCharToMultiByte": 17, "KERNEL32.dll!GetLastError": 245, "SHELL32.dll!SHGetKnownFolderPath": 2, "ole32.dll!CoTaskMemFree": 2, "KERNEL32.dll!FreeLibrary": 28, "KERNEL32.dll!GetProcAddress": 97, "WS2_32.dll!WSACleanup": 7, "WS2_32.dll!WSAStartup": 4, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegCloseKey": 20, "KERNEL32.dll!WaitForMultipleObjects": 8, "KERNEL32.dll!GetCurrentProcessId": 6, "KERNEL32.dll!ProcessIdToSessionId": 2, "KERNEL32.dll!GetNativeSystemInfo": 3, "KERNEL32.dll!GetVersionExW": 8, "KERNEL32.dll!GlobalMemoryStatusEx": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 7, "KERNEL32.dll!GetSystemPowerStatus": 1, "USER32.dll!DefWindowProcW": 5, "KERNEL32.dll!CloseHandle": 93, "USER32.dll!UnhookWinEvent": 2, "USER32.dll!GetWindowLongPtrW": 2, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "KERNEL32.dll!GetProcessTimes": 1, "USER32.dll!SetWinEventHook": 1, "USER32.dll!EnumWindows": 1, "KERNEL32.dll!Sleep": 5, "USER32.dll!MonitorFromWindow": 1, "USER32.dll!GetMonitorInfoW": 1, "USER32.dll!UnregisterDeviceNotification": 4, "USER32.dll!RegisterDeviceNotificationW": 4, "KERNEL32.dll!InitOnceComplete": 3, "KERNEL32.dll!InitOnceBeginInitialize": 2, "KERNEL32.dll!CreatePipe": 1, "KERNEL32.dll!SetHandleInformation": 1, "KERNEL32.dll!TerminateProcess": 5, "KERNEL32.dll!ReadFile": 7, "KERNEL32.dll!CreateFileW": 18, "KERNEL32.dll!CreateFileMappingW": 2, "KERNEL32.dll!MapViewOfFile": 3, "KERNEL32.dll!UnmapViewOfFile": 4, "SHELL32.dll!SHGetFolderPathW": 8, "KERNEL32.dll!GetSystemTimeAsFileTime": 7, "KERNEL32.dll!WritePrivateProfileStringW": 1, "KERNEL32.dll!GetFileAttributesW": 12, "USER32.dll!UnregisterClassW": 2, "USER32.dll!DestroyWindow": 2, "KERNEL32.dll!GetCurrentThreadId": 12, "USER32.dll!RegisterClassExW": 1, "USER32.dll!CreateWindowExW": 1, "USER32.dll!MsgWaitForMultipleObjectsEx": 1, "USER32.dll!TranslateMessage": 1, "USER32.dll!DispatchMessageW": 1, "USER32.dll!PeekMessageW": 1, "KERNEL32.dll!SetLastError": 48, "USER32.dll!SetWindowLongPtrW": 1, "SHLWAPI.dll!UrlUnescapeW": 1, "KERNEL32.dll!LocalFree": 54, "ADVAPI32.dll!ConvertStringSidToSidW": 2, "ADVAPI32.dll!SetEntriesInAclW": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 2, "ADVAPI32.dll!SetSecurityDescriptorDacl": 2, "ADVAPI32.dll!RegOpenKeyExW": 17, "ADVAPI32.dll!RegQueryValueExW": 17, "KERNEL32.dll!DeleteFileW": 3, "KERNEL32.dll!ExpandEnvironmentStringsW": 1, "KERNEL32.dll!FindFirstFileW": 6, "KERNEL32.dll!FindClose": 12, "KERNEL32.dll!GetLogicalDrives": 1, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!FindNextFileW": 6, "ADVAPI32.dll!CryptReleaseContext": 16, "ADVAPI32.dll!CryptAcquireContextW": 8, "ADVAPI32.dll!CryptGenRandom": 3, "KERNEL32.dll!OpenFileMappingW": 1, "KERNEL32.dll!VirtualQuery": 1, "VERSION.dll!GetFileVersionInfoSizeW": 2, "VERSION.dll!GetFileVersionInfoW": 2, "VERSION.dll!VerQueryValueW": 3, "SETUPAPI.dll!SetupDiGetClassDevsW": 4, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 4, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 3, "OLEAUT32.dll!SysFreeString": 3, "OLEAUT32.dll!SysAllocString": 3, "OLEAUT32.dll!VariantClear": 10, "ole32.dll!CoUninitialize": 3, "ole32.dll!CoInitialize": 2, "OLEAUT32.dll!VariantInit": 7, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 1, "OLEAUT32.dll!SysStringLen": 3, "OLEAUT32.dll!VariantCopy": 1, "OLEAUT32.dll!SafeArrayGetLBound": 1, "OLEAUT32.dll!SafeArrayGetElement": 1, "OLEAUT32.dll!VariantChangeType": 2, "KERNEL32.dll!lstrlenW": 4, "KERNEL32.dll!InitializeCriticalSectionEx": 2, "KERNEL32.dll!GetTickCount": 4, "KERNEL32.dll!GetWindowsDirectoryW": 2, "KERNEL32.dll!GetFileAttributesExW": 5, "USER32.dll!GetSystemMetrics": 7, "KERNEL32.dll!GetSystemDefaultLangID": 1, "KERNEL32.dll!GetSystemDirectoryW": 5, "USER32.dll!EnumDisplaySettingsW": 3, "USER32.dll!EnumDisplayDevicesW": 4, "KERNEL32.dll!VerSetConditionMask": 11, "KERNEL32.dll!VerifyVersionInfoW": 5, "ADVAPI32.dll!RegEnumKeyExW": 8, "KERNEL32.dll!lstrcmpiW": 1, "USER32.dll!EnumDisplaySettingsExW": 2, "VERSION.dll!GetFileVersionInfoSizeA": 1, "VERSION.dll!GetFileVersionInfoA": 1, "KERNEL32.dll!GetSystemDirectoryA": 2, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 5, "ole32.dll!StringFromGUID2": 3, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GlobalAlloc": 1, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 2, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 3, "KERNEL32.dll!GlobalFree": 1, "KERNEL32.dll!GetVolumeInformationW": 1, "KERNEL32.dll!GetDiskFreeSpaceExW": 1, "KERNEL32.dll!DeviceIoControl": 14, "KERNEL32.dll!GetCurrentProcess": 6, "KERNEL32.dll!GetProcessAffinityMask": 1, "KERNEL32.dll!GetCurrentThread": 2, "KERNEL32.dll!SetThreadAffinityMask": 2, "KERNEL32.dll!LocalAlloc": 22, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!GetFullPathNameW": 5, "KERNEL32.dll!LoadLibraryExW": 13, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!CreateProcessW": 1, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!SetEvent": 2, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "WS2_32.dll!ntohl": 1, "ADVAPI32.dll!RegEnumValueW": 1, "ADVAPI32.dll!RegSetValueExW": 1, "KERNEL32.dll!WaitForSingleObject": 10, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!SleepConditionVariableSRW": 4, "KERNEL32.dll!QueryPerformanceCounter": 4, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!AcquireSRWLockExclusive": 6, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!FormatMessageA": 2, "KERNEL32.dll!CreateSymbolicLinkW": 2, "KERNEL32.dll!GetFileInformationByHandleEx": 7, "KERNEL32.dll!GetFileInformationByHandle": 3, "KERNEL32.dll!SetFileInformationByHandle": 5, "KERNEL32.dll!AreFileApisANSI": 1, "KERNEL32.dll!CopyFileW": 3, "KERNEL32.dll!CreateDirectoryW": 2, "KERNEL32.dll!CreateHardLinkW": 1, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!RtlPcToFileHeader": 2, "KERNEL32.dll!RaiseException": 5, "KERNEL32.dll!DeleteCriticalSection": 11, "KERNEL32.dll!EnterCriticalSection": 17, "KERNEL32.dll!LeaveCriticalSection": 22, "KERNEL32.dll!EncodePointer": 3, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!GetConsoleMode": 3, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 6, "KERNEL32.dll!GetStdHandle": 7, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!WriteFile": 9, "KERNEL32.dll!SetFilePointerEx": 5, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!SetConsoleCtrlHandler": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 4, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!InitializeSRWLock": 2, "KERNEL32.dll!AcquireSRWLockShared": 1, "KERNEL32.dll!ReleaseSRWLockShared": 1, "WS2_32.dll!WSASetLastError": 12, "WS2_32.dll!send": 7, "WS2_32.dll!recv": 4, "WS2_32.dll!WSAGetLastError": 27, "WS2_32.dll!getsockopt": 5, "WS2_32.dll!ioctlsocket": 3, "WS2_32.dll!select": 2, "WS2_32.dll!htons": 5, "WS2_32.dll!getservbyname": 2, "WS2_32.dll!inet_addr": 5, "WS2_32.dll!htonl": 2, "WS2_32.dll!inet_ntoa": 2, "WS2_32.dll!getservbyport": 1, "WS2_32.dll!ntohs": 2, "WS2_32.dll!gethostbyaddr": 1, "KERNEL32.dll!LoadLibraryA": 3, "WS2_32.dll!gethostbyname": 5, "USER32.dll!GetProcessWindowStation": 1, "USER32.dll!GetUserObjectInformationW": 2, "ADVAPI32.dll!RegisterEventSourceW": 1, "ADVAPI32.dll!ReportEventW": 1, "ADVAPI32.dll!DeregisterEventSource": 1, "USER32.dll!MessageBoxW": 1, "KERNEL32.dll!GetEnvironmentVariableW": 5, "KERNEL32.dll!ReleaseSemaphore": 4, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!CreateSemaphoreA": 2, "KERNEL32.dll!GetSystemTime": 1, "KERNEL32.dll!SystemTimeToFileTime": 2, "WS2_32.dll!closesocket": 4, "WS2_32.dll!setsockopt": 9, "WS2_32.dll!connect": 2, "WS2_32.dll!socket": 5, "CRYPT32.dll!CertGetCertificateContextProperty": 6, "ADVAPI32.dll!CryptCreateHash": 3, "ADVAPI32.dll!CryptSetHashParam": 2, "ADVAPI32.dll!CryptSignHashW": 2, "ADVAPI32.dll!CryptDestroyHash": 5, "ADVAPI32.dll!CryptDestroyKey": 4, "CRYPT32.dll!CertFreeCertificateContext": 8, "CRYPT32.dll!CertEnumCertificatesInStore": 6, "CRYPT32.dll!CertFindCertificateInStore": 3, "CRYPT32.dll!CertCloseStore": 4, "ADVAPI32.dll!CryptGetUserKey": 1, "ADVAPI32.dll!CryptExportKey": 2, "ADVAPI32.dll!CryptEnumProvidersW": 4, "ADVAPI32.dll!CryptGetProvParam": 2, "CRYPT32.dll!CertDuplicateCertificateContext": 1, "CRYPT32.dll!CertOpenStore": 1, "ADVAPI32.dll!CryptDecrypt": 1, "KERNEL32.dll!LoadLibraryW": 2, "KERNEL32.dll!SetConsoleMode": 2, "KERNEL32.dll!ReadConsoleA": 1, "CRYPT32.dll!CertOpenSystemStoreW": 1, "WS2_32.dll!shutdown": 3, "WS2_32.dll!sendto": 4, "WS2_32.dll!recvfrom": 2, "WS2_32.dll!getsockname": 2, "WS2_32.dll!getpeername": 2, "KERNEL32.dll!OutputDebugStringW": 2, "ole32.dll!CoCreateGuid": 1, "ADVAPI32.dll!OpenProcessToken": 2, "ADVAPI32.dll!GetTokenInformation": 4, "KERNEL32.dll!GetComputerNameW": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!ResumeThread": 1, "WS2_32.dll!WSACreateEvent": 2, "WS2_32.dll!WSACloseEvent": 1, "WS2_32.dll!bind": 2, "WS2_32.dll!listen": 2, "WS2_32.dll!WSAResetEvent": 1, "WS2_32.dll!WSAEventSelect": 1, "WS2_32.dll!WSAWaitForMultipleEvents": 1, "WS2_32.dll!WSAEnumNetworkEvents": 1, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!FormatMessageW": 1, "ADVAPI32.dll!CryptHashData": 1, "ADVAPI32.dll!CryptGetHashParam": 2, "WINHTTP.dll!WinHttpOpen": 1, "WINHTTP.dll!WinHttpCloseHandle": 8, "WINHTTP.dll!WinHttpSetOption": 3, "WINHTTP.dll!WinHttpSetStatusCallback": 1, "WINHTTP.dll!WinHttpConnect": 1, "WINHTTP.dll!WinHttpOpenRequest": 1, "WINHTTP.dll!WinHttpSendRequest": 1, "WINHTTP.dll!WinHttpReceiveResponse": 1, "WINHTTP.dll!WinHttpQueryDataAvailable": 1, "WINHTTP.dll!WinHttpReadData": 1, "WINHTTP.dll!WinHttpAddRequestHeaders": 1, "WINHTTP.dll!WinHttpQueryOption": 1, "WINHTTP.dll!WinHttpQueryHeaders": 2, "WINHTTP.dll!WinHttpCrackUrl": 1, "KERNEL32.dll!lstrlenA": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!ReleaseMutex": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!PeekNamedPipe": 1, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetCurrentDirectoryW": 2, "WS2_32.dll!InetNtopW": 1, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "KERNEL32.dll!DisconnectNamedPipe": 1, "KERNEL32.dll!CreateFileA": 1, "KERNEL32.dll!WaitNamedPipeA": 1, "ADVAPI32.dll!SetSecurityDescriptorOwner": 1, "KERNEL32.dll!CreateNamedPipeA": 1, "KERNEL32.dll!GetOverlappedResult": 3, "KERNEL32.dll!CancelIo": 3, "KERNEL32.dll!ConnectNamedPipe": 1, "WS2_32.dll!accept": 1, "WS2_32.dll!__WSAFDIsSet": 1, "KERNEL32.dll!DecodePointer": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA Overlay\\NvCamera.dll", "sha256": "c167a74311e3de18aad10c9c6a930f9fbaf3209c3d32d18c0519844079860e3f", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 6015488, "processed_bytes": 6015488, "instructions": 3084100, "skipdata_bytes": 1443 } ], "utc": "2026-11-11T21:40:57.072232+00:00", "instructions": 3084100, "skipdata_bytes": 1443, "calls": 76604, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 19, "KERNEL32.dll!InitializeCriticalSectionEx": 38, "KERNEL32.dll!GetLastError": 173, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 3040, "api-ms-win-crt-heap-l1-1-0.dll!free": 479, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 77, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 19, "KERNEL32.dll!DeleteCriticalSection": 43, "USER32.dll!UnregisterClassW": 21, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 16, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 14, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 32, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 19, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 6, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 6, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 7, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 9, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 8, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 7, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 12, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 6, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 36, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 34, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 22, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 9, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 45, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 70, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 16, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 10, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 24, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 17, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 4, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 23, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 7, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 56, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 6, "KERNEL32.dll!FreeLibrary": 32, "KERNEL32.dll!GetExitCodeThread": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!CloseHandle": 66, "ADVAPI32.dll!RegOpenKeyExW": 5, "ADVAPI32.dll!RegQueryValueExW": 5, "KERNEL32.dll!GetProcAddress": 61, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 10, "USER32.dll!GetRawInputData": 3, "USER32.dll!GetDesktopWindow": 2, "USER32.dll!GetWindowRect": 2, "USER32.dll!SetCursorPos": 2, "USER32.dll!RegisterRawInputDevices": 3, "USER32.dll!GetAsyncKeyState": 2, "KERNEL32.dll!CreateThread": 6, "USER32.dll!RegisterClassExW": 2, "USER32.dll!CreateWindowExW": 2, "USER32.dll!GetMessageW": 3, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageW": 2, "USER32.dll!DestroyWindow": 2, "USER32.dll!DefWindowProcW": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 10, "api-ms-win-crt-string-l1-1-0.dll!isalnum": 2, "ADVAPI32.dll!RegQueryMultipleValuesW": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 49, "api-ms-win-crt-convert-l1-1-0.dll!wcstol": 3, "ADVAPI32.dll!RegCreateKeyExW": 3, "ADVAPI32.dll!RegSetValueExW": 2, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 11, "api-ms-win-crt-string-l1-1-0.dll!tolower": 8, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 6, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 71, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 11, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcsnlen": 4, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 6, "KERNEL32.dll!MultiByteToWideChar": 14, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 3, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 5, "KERNEL32.dll!WideCharToMultiByte": 14, "api-ms-win-crt-stdio-l1-1-0.dll!_wfsopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetws": 3, "api-ms-win-crt-string-l1-1-0.dll!wcstok_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!ferror": 2, "KERNEL32.dll!GetTickCount64": 3, "KERNEL32.dll!InitOnceExecuteOnce": 2, "ADVAPI32.dll!RegGetValueW": 2, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!GetErrorMode": 2, "KERNEL32.dll!SetErrorMode": 4, "USER32.dll!LoadStringW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 3, "api-ms-win-crt-string-l1-1-0.dll!isspace": 3, "KERNEL32.dll!InitOnceBeginInitialize": 42, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 61, "KERNEL32.dll!InitOnceComplete": 43, "MSVCP140.dll!?eof@ios_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 4, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 3, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 8, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 16, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 4, "api-ms-win-crt-convert-l1-1-0.dll!strtod": 3, "api-ms-win-crt-string-l1-1-0.dll!strpbrk": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 3, "api-ms-win-crt-runtime-l1-1-0.dll!strerror": 3, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 2, "MSVCP140.dll!?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ": 2, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoll": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 8, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 5, "MSVCP140.dll!?unsetf@ios_base@std@@QEAAXH@Z": 2, "MSVCP140.dll!?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ": 15, "MSVCP140.dll!?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ": 4, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 4, "MSVCP140.dll!?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ": 5, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 6, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 5, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 4, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!iswalpha": 7, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 4, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z": 3, "MSVCP140.dll!?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 15, "MSVCP140.dll!?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 10, "MSVCP140.dll!?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 8, "MSVCP140.dll!?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 14, "MSVCP140.dll!?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z": 7, "MSVCP140.dll!?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 2, "MSVCP140.dll!??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 6, "KERNEL32.dll!FindFirstFileW": 6, "KERNEL32.dll!FindNextFileW": 6, "KERNEL32.dll!FindClose": 8, "MSVCP140.dll!?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 5, "MSVCP140.dll!?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_wsopen_dispatch": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_waccess": 2, "KERNEL32.dll!GetCurrentDirectoryW": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_wchdir": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_close": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_dup2": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_dup": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_wmkdir": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ": 3, "MSVCP140.dll!?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z": 4, "MSVCP140.dll!?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_read": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_setmode": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_wstat64i32": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_write": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!?Request@NetworkRequest@GXP@@YAPEAVNetworkResponse@2@AEBUHttpRequestData@12@@Z": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 6, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 15, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 2, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 124, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 5, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 5, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 3, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "ole32.dll!CoCreateGuid": 2, "KERNEL32.dll!GetTempPathW": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "OLEAUT32.dll!SysAllocString": 5, "OLEAUT32.dll!SysFreeString": 15, "KERNEL32.dll!GetDriveTypeW": 2, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!WaitForMultipleObjects": 2, "OLEAUT32.dll!VariantInit": 4, "OLEAUT32.dll!VariantClear": 8, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!RaiseException": 2, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!VariantChangeType": 2, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Thrd_detach": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!wcschr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!memchr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-math-l1-1-0.dll!_dclass": 1, "api-ms-win-crt-math-l1-1-0.dll!_fdclass": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\libGLESv2.dll", "sha256": "8e94434d84530fef7224b8f5d55f5e0344b222f8883bca35863e2194bc03e821", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 6415360, "processed_bytes": 6415360, "instructions": 1648964, "skipdata_bytes": 17 } ], "utc": "2026-11-11T21:41:00.111310+00:00", "instructions": 1648964, "skipdata_bytes": 17, "calls": 107698, "api_reference_counts": { "USER32.dll!MonitorFromWindow": 1, "USER32.dll!DestroyWindow": 5, "KERNEL32.dll!GetModuleHandleW": 14, "USER32.dll!UnregisterClassA": 2, "USER32.dll!IsWindow": 2, "USER32.dll!GetClassInfoW": 1, "USER32.dll!CreateWindowExW": 3, "USER32.dll!LoadCursorW": 2, "USER32.dll!RegisterClassW": 2, "KERNEL32.dll!GetLastError": 73, "USER32.dll!GetClientRect": 6, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!GetProcAddress": 60, "USER32.dll!WindowFromDC": 3, "KERNEL32.dll!QueryPerformanceFrequency": 4, "KERNEL32.dll!QueryPerformanceCounter": 5, "KERNEL32.dll!FreeLibrary": 14, "KERNEL32.dll!GetCurrentProcessId": 3, "USER32.dll!GetWindowThreadProcessId": 2, "KERNEL32.dll!LoadLibraryW": 5, "USER32.dll!IsIconic": 1, "KERNEL32.dll!GetModuleHandleExA": 3, "KERNEL32.dll!LoadLibraryA": 1, "KERNEL32.dll!Sleep": 10, "USER32.dll!InvalidateRect": 1, "KERNEL32.dll!LoadLibraryExA": 2, "USER32.dll!GetDC": 3, "GDI32.dll!ChoosePixelFormat": 2, "GDI32.dll!SetPixelFormat": 3, "USER32.dll!ReleaseDC": 3, "USER32.dll!CreateWindowExA": 1, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 1, "GDI32.dll!DescribePixelFormat": 2, "GDI32.dll!GetPixelFormat": 1, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!VerifyVersionInfoW": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!InitOnceExecuteOnce": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetCurrentProcess": 5, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!VirtualQuery": 1, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!RaiseException": 7, "KERNEL32.dll!GetSystemTimeAsFileTime": 1, "KERNEL32.dll!GetCurrentThreadId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!GetCPInfo": 3, "KERNEL32.dll!EnterCriticalSection": 4, "KERNEL32.dll!LeaveCriticalSection": 4, "KERNEL32.dll!DeleteCriticalSection": 5, "KERNEL32.dll!SetLastError": 7, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!CloseHandle": 8, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!CreateFileW": 5, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!LoadLibraryExW": 5, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetProcessHeap": 1, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!HeapSize": 1, "KERNEL32.dll!MultiByteToWideChar": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!FindClose": 2, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!WideCharToMultiByte": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 3, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetFileSizeEx": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!HeapReAlloc": 1, "KERNEL32.dll!TlsAlloc": 2, "KERNEL32.dll!TlsFree": 2, "KERNEL32.dll!TlsGetValue": 2, "KERNEL32.dll!TlsSetValue": 2, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!TryAcquireSRWLockExclusive": 1, "KERNEL32.dll!WakeConditionVariable": 1, "KERNEL32.dll!WaitForSingleObjectEx": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!GetEnvironmentVariableW": 2, "KERNEL32.dll!GetCurrentDirectoryW": 1, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!GetTempPathA": 1, "KERNEL32.dll!GetTempFileNameA": 1, "dxgi.dll!CreateDXGIFactory1": 1, "d3d9.dll!D3DPERF_BeginEvent": 1, "d3d9.dll!D3DPERF_EndEvent": 1, "d3d9.dll!D3DPERF_SetMarker": 1, "d3d9.dll!D3DPERF_GetStatus": 1, "d3d9.dll!Direct3DCreate9": 1, "dxgi.dll!CreateDXGIFactory": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\NvCpl\\nvcpl.dll", "sha256": "a7703de492d47d4e75d6f77e7350a860b927f35be719b5e78a94e4d50d236da1", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 6640640, "processed_bytes": 6640640, "instructions": 1778521, "skipdata_bytes": 88 } ], "utc": "2026-11-11T21:41:01.146247+00:00", "instructions": 1778521, "skipdata_bytes": 88, "calls": 164929, "api_reference_counts": { "USER32.dll!RegisterWindowMessageW": 60, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 7, "KERNEL32.dll!GetLastError": 182, "USER32.dll!GetSystemMetrics": 144, "KERNEL32.dll!GetProcessHeap": 25, "KERNEL32.dll!HeapFree": 21, "KERNEL32.dll!CreateEventA": 6, "KERNEL32.dll!CloseHandle": 90, "KERNEL32.dll!WaitForSingleObject": 6, "KERNEL32.dll!CreateEventW": 1, "KERNEL32.dll!SetEvent": 13, "KERNEL32.dll!InitializeCriticalSection": 5, "KERNEL32.dll!DeleteCriticalSection": 16, "ole32.dll!CoInitializeEx": 5, "USER32.dll!MsgWaitForMultipleObjects": 1, "USER32.dll!TranslateMessage": 5, "USER32.dll!DispatchMessageW": 11, "USER32.dll!PeekMessageW": 20, "ole32.dll!CoUninitialize": 8, "KERNEL32.dll!HeapAlloc": 7, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 52, "KERNEL32.dll!FormatMessageW": 3, "KERNEL32.dll!WideCharToMultiByte": 13, "KERNEL32.dll!EnterCriticalSection": 36, "USER32.dll!GetClassInfoExW": 4, "KERNEL32.dll!LeaveCriticalSection": 43, "USER32.dll!LoadCursorW": 49, "USER32.dll!RegisterClassExW": 3, "KERNEL32.dll!InitializeCriticalSectionEx": 3, "KERNEL32.dll!RaiseException": 9, "KERNEL32.dll!WaitForSingleObjectEx": 2, "OLEAUT32.dll!SysFreeString": 4, "USER32.dll!UnregisterClassW": 1, "USER32.dll!DefWindowProcW": 7, "USER32.dll!PostQuitMessage": 2, "USER32.dll!CreateWindowExW": 2, "USER32.dll!GetMessageW": 8, "ole32.dll!CoCreateGuid": 2, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegQueryValueExW": 55, "ADVAPI32.dll!RegOpenKeyExW": 35, "ADVAPI32.dll!RegCloseKey": 102, "ADVAPI32.dll!RegCreateKeyExW": 8, "KERNEL32.dll!OutputDebugStringW": 4, "KERNEL32.dll!ExpandEnvironmentStringsW": 2, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!CreateFileW": 17, "KERNEL32.dll!WriteFile": 8, "KERNEL32.dll!ReleaseMutex": 2, "KERNEL32.dll!GetModuleFileNameW": 7, "SHLWAPI.dll!PathFindFileNameW": 3, "KERNEL32.dll!CreateMutexW": 2, "KERNEL32.dll!GetCurrentThreadId": 12, "ADVAPI32.dll!TraceMessage": 1, "KERNEL32.dll!GetCurrentProcess": 8, "KERNEL32.dll!GetProcessTimes": 2, "KERNEL32.dll!QueryPerformanceFrequency": 7, "KERNEL32.dll!QueryPerformanceCounter": 13, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "ADVAPI32.dll!UnregisterTraceGuids": 1, "KERNEL32.dll!OpenEventW": 7, "SHLWAPI.dll!PathFileExistsW": 1, "KERNEL32.dll!Sleep": 7, "USER32.dll!PostMessageW": 51, "KERNEL32.dll!OpenSemaphoreW": 1, "KERNEL32.dll!WaitForMultipleObjects": 1, "KERNEL32.dll!ReleaseSemaphore": 7, "KERNEL32.dll!ResetEvent": 3, "ole32.dll!CoCreateInstance": 14, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 3, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!FreeLibrary": 33, "ADVAPI32.dll!RegSetValueExW": 11, "ole32.dll!CoTaskMemAlloc": 10, "ole32.dll!CoTaskMemFree": 24, "KERNEL32.dll!GetProcAddress": 131, "USER32.dll!wsprintfW": 4, "KERNEL32.dll!GetCurrentProcessId": 8, "KERNEL32.dll!ProcessIdToSessionId": 3, "WTSAPI32.dll!WTSQuerySessionInformationW": 1, "WTSAPI32.dll!WTSFreeMemory": 2, "USER32.dll!EnumWindows": 1, "KERNEL32.dll!GetSystemDirectoryA": 1, "SHLWAPI.dll!PathCombineA": 1, "SHLWAPI.dll!SHDeleteKeyW": 2, "ADVAPI32.dll!RegDeleteValueW": 4, "ADVAPI32.dll!RegEnumKeyExW": 3, "USER32.dll!SendMessageW": 958, "USER32.dll!KillTimer": 71, "USER32.dll!GetClientRect": 228, "GDI32.dll!CreateSolidBrush": 44, "USER32.dll!FillRect": 184, "GDI32.dll!DeleteObject": 74, "USER32.dll!GetWindowLongPtrW": 7, "USER32.dll!SetWindowLongPtrW": 11, "USER32.dll!BeginPaint": 4, "USER32.dll!EndPaint": 4, "USER32.dll!SetTimer": 29, "USER32.dll!SetLayeredWindowAttributes": 6, "USER32.dll!OffsetRect": 174, "USER32.dll!EnumDisplaySettingsW": 2, "USER32.dll!SetRect": 57, "USER32.dll!EnumDisplayDevicesW": 6, "USER32.dll!EnumDisplayMonitors": 2, "USER32.dll!GetMonitorInfoW": 12, "KERNEL32.dll!GetModuleHandleW": 28, "GDI32.dll!GetStockObject": 18, "USER32.dll!ShowWindow": 13, "USER32.dll!SetFocus": 11, "GDI32.dll!CreateFontIndirectW": 22, "GDI32.dll!SelectObject": 120, "GDI32.dll!SetBkMode": 4, "GDI32.dll!SetTextColor": 8, "KERNEL32.dll!MultiByteToWideChar": 21, "GDI32.dll!GetTextExtentPoint32W": 48, "KERNEL32.dll!lstrlenW": 8, "GDI32.dll!TextOutW": 11, "USER32.dll!GetSysColor": 89, "USER32.dll!FrameRect": 2, "KERNEL32.dll!FindResourceW": 16, "KERNEL32.dll!LoadResource": 14, "KERNEL32.dll!LockResource": 13, "KERNEL32.dll!SizeofResource": 4, "KERNEL32.dll!FindResourceExW": 3, "KERNEL32.dll!DeactivateActCtx": 49, "KERNEL32.dll!SetLastError": 93, "KERNEL32.dll!QueryActCtxW": 1, "KERNEL32.dll!GetModuleHandleExW": 3, "KERNEL32.dll!CreateActCtxW": 1, "KERNEL32.dll!ActivateActCtx": 2, "KERNEL32.dll!FindActCtxSectionStringW": 1, "KERNEL32.dll!LoadLibraryW": 5, "KERNEL32.dll!OutputDebugStringA": 1, "USER32.dll!RedrawWindow": 220, "USER32.dll!SetWindowPos": 18, "USER32.dll!EnableWindow": 23, "USER32.dll!IsWindow": 151, "gdiplus.dll!GdipCloneBrush": 1, "gdiplus.dll!GdipAlloc": 6, "gdiplus.dll!GdipDeleteBrush": 2, "gdiplus.dll!GdipFree": 6, "gdiplus.dll!GdipCreateFontFamilyFromName": 1, "gdiplus.dll!GdipCreateFont": 1, "gdiplus.dll!GdipDeleteFont": 2, "gdiplus.dll!GdipCreateSolidFill": 2, "gdiplus.dll!GdipCreatePen1": 1, "gdiplus.dll!GdipDeletePen": 2, "gdiplus.dll!GdipSetPenDashArray": 1, "gdiplus.dll!GdipDeleteFontFamily": 1, "USER32.dll!DestroyWindow": 13, "gdiplus.dll!GdipCreateFromHDC": 2, "gdiplus.dll!GdipFillRectangle": 1, "gdiplus.dll!GdipDeleteGraphics": 2, "GDI32.dll!GetObjectW": 67, "GDI32.dll!CreateCompatibleDC": 78, "GDI32.dll!StretchBlt": 5, "USER32.dll!CallWindowProcW": 5, "KERNEL32.dll!GlobalFree": 17, "KERNEL32.dll!GlobalAlloc": 13, "KERNEL32.dll!GlobalLock": 25, "KERNEL32.dll!GlobalUnlock": 25, "ole32.dll!CreateStreamOnHGlobal": 3, "KERNEL32.dll!GetSystemDefaultLCID": 2, "WTSAPI32.dll!WTSQueryUserToken": 2, "ADVAPI32.dll!ImpersonateLoggedOnUser": 2, "KERNEL32.dll!GetUserDefaultUILanguage": 5, "ADVAPI32.dll!RevertToSelf": 2, "KERNEL32.dll!LoadLibraryExW": 15, "SHELL32.dll!SHGetKnownFolderPath": 1, "ADVAPI32.dll!LookupAccountNameW": 1, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "ole32.dll!CoAllowSetForegroundWindow": 1, "USER32.dll!IsWindowVisible": 79, "USER32.dll!GetParent": 489, "USER32.dll!GetWindowThreadProcessId": 4, "USER32.dll!GetWindowTextW": 9, "RstrtMgr.DLL!RmStartSession": 1, "RstrtMgr.DLL!RmRegisterResources": 1, "RstrtMgr.DLL!RmGetList": 1, "RstrtMgr.DLL!RmEndSession": 2, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!CompareFileTime": 1, "KERNEL32.dll!QueryFullProcessImageNameA": 2, "PSAPI.DLL!EnumProcessModulesEx": 2, "PSAPI.DLL!GetModuleFileNameExW": 2, "PSAPI.DLL!EnumProcesses": 1, "KERNEL32.dll!VerSetConditionMask": 10, "KERNEL32.dll!VerifyVersionInfoW": 5, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!GetSystemDirectoryW": 8, "ole32.dll!CoInitialize": 3, "OLEAUT32.dll!VariantInit": 2, "KERNEL32.dll!GetVersionExW": 3, "OLEAUT32.dll!SysStringLen": 5, "OLEAUT32.dll!VariantClear": 16, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "KERNEL32.dll!OpenMutexW": 1, "SHELL32.dll!SHGetSpecialFolderPathW": 1, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ole32.dll!StringFromGUID2": 1, "ole32.dll!CLSIDFromString": 1, "USER32.dll!ChangeDisplaySettingsExW": 3, "USER32.dll!EnumDisplaySettingsExW": 1, "WTSAPI32.dll!WTSEnumerateSessionsW": 1, "ADVAPI32.dll!DuplicateTokenEx": 1, "ADVAPI32.dll!CloseServiceHandle": 1, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!QueryServiceStatusEx": 1, "ADVAPI32.dll!OpenSCManagerW": 1, "ole32.dll!CoTaskMemRealloc": 2, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!GetFullPathNameW": 3, "KERNEL32.dll!GetModuleFileNameA": 1, "KERNEL32.dll!CreateProcessW": 1, "KERNEL32.dll!GetFileAttributesW": 10, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!VirtualProtect": 3, "KERNEL32.dll!LoadLibraryExA": 2, "KERNEL32.dll!FindFirstVolumeW": 1, "KERNEL32.dll!QueryDosDeviceW": 1, "KERNEL32.dll!GetVolumePathNamesForVolumeNameW": 1, "KERNEL32.dll!FindNextVolumeW": 1, "KERNEL32.dll!FindVolumeClose": 1, "ADVAPI32.dll!RegOpenKeyW": 1, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 1, "KERNEL32.dll!GetLocaleInfoW": 13, "KERNEL32.dll!lstrcpyW": 14, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!TryAcquireSRWLockExclusive": 2, "KERNEL32.dll!EncodePointer": 22, "KERNEL32.dll!LCMapStringEx": 4, "KERNEL32.dll!GetLocaleInfoEx": 1, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CompareStringEx": 2, "KERNEL32.dll!SetWaitableTimer": 1, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!TlsAlloc": 4, "KERNEL32.dll!TlsGetValue": 5, "KERNEL32.dll!CreateWaitableTimerA": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!WaitForMultipleObjectsEx": 1, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!ResumeThread": 2, "KERNEL32.dll!CreateDirectoryExW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!DecodePointer": 17, "KERNEL32.dll!InterlockedPopEntrySList": 2, "KERNEL32.dll!VirtualAlloc": 2, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!InterlockedPushEntrySList": 3, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!FlushInstructionCache": 1, "KERNEL32.dll!WakeAllConditionVariable": 2, "KERNEL32.dll!SleepConditionVariableSRW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "USER32.dll!GetDC": 4, "GDI32.dll!CreatePen": 30, "USER32.dll!GetWindowDC": 1, "USER32.dll!ReleaseDC": 5, "GDI32.dll!DeleteDC": 13, "GDI32.dll!CreateBitmap": 11, "GDI32.dll!CreatePatternBrush": 5, "GDI32.dll!GetPixel": 15, "GDI32.dll!BitBlt": 66, "USER32.dll!ClientToScreen": 55, "USER32.dll!DrawTextExW": 1, "USER32.dll!DrawTextW": 1, "GDI32.dll!Escape": 1, "GDI32.dll!ExcludeClipRect": 2, "GDI32.dll!ExtTextOutW": 6, "GDI32.dll!GetClipBox": 1, "GDI32.dll!GetLayout": 1, "USER32.dll!GrayStringW": 1, "GDI32.dll!IntersectClipRect": 3, "GDI32.dll!MoveToEx": 3, "GDI32.dll!LineTo": 1, "GDI32.dll!OffsetViewportOrgEx": 2, "GDI32.dll!OffsetWindowOrgEx": 2, "GDI32.dll!PtVisible": 1, "GDI32.dll!RectVisible": 1, "GDI32.dll!RestoreDC": 2, "GDI32.dll!SaveDC": 2, "GDI32.dll!ScaleViewportExtEx": 2, "GDI32.dll!ScaleWindowExtEx": 2, "USER32.dll!ScreenToClient": 100, "GDI32.dll!SelectClipRgn": 2, "GDI32.dll!ExtSelectClipRgn": 2, "GDI32.dll!SelectPalette": 1, "GDI32.dll!SetBkColor": 7, "GDI32.dll!SetLayout": 1, "GDI32.dll!SetMapMode": 4, "GDI32.dll!SetPolyFillMode": 2, "GDI32.dll!SetROP2": 2, "GDI32.dll!SetTextAlign": 2, "GDI32.dll!SetViewportExtEx": 3, "GDI32.dll!SetViewportOrgEx": 4, "GDI32.dll!SetWindowExtEx": 3, "GDI32.dll!SetWindowOrgEx": 4, "USER32.dll!TabbedTextOutW": 1, "USER32.dll!GetMenuItemCount": 30, "USER32.dll!GetSubMenu": 25, "USER32.dll!GetMenuState": 6, "USER32.dll!GetMenuStringW": 3, "USER32.dll!AppendMenuW": 28, "USER32.dll!GetMenuItemID": 17, "USER32.dll!InsertMenuW": 2, "USER32.dll!RemoveMenu": 2, "KERNEL32.dll!GlobalSize": 4, "ole32.dll!OleDuplicateData": 1, "GDI32.dll!CopyMetaFileW": 1, "KERNEL32.dll!CopyFileW": 1, "USER32.dll!UnhookWindowsHookEx": 6, "GDI32.dll!CreateRectRgnIndirect": 26, "USER32.dll!CopyRect": 68, "USER32.dll!InflateRect": 308, "USER32.dll!IntersectRect": 33, "GDI32.dll!CreateRectRgn": 14, "GDI32.dll!CombineRgn": 12, "GDI32.dll!SetRectRgn": 3, "GDI32.dll!PatBlt": 55, "USER32.dll!CheckDlgButton": 1, "USER32.dll!GetDlgCtrlID": 13, "USER32.dll!GetDlgItem": 18, "USER32.dll!GetWindowLongW": 29, "USER32.dll!IsDialogMessageW": 1, "USER32.dll!IsWindowEnabled": 12, "USER32.dll!MoveWindow": 1, "USER32.dll!SetWindowLongW": 9, "USER32.dll!SetWindowTextW": 3, "USER32.dll!GetLastActivePopup": 5, "USER32.dll!MessageBoxW": 2, "USER32.dll!GetFocus": 52, "USER32.dll!GetDesktopWindow": 11, "KERNEL32.dll!GlobalFlags": 1, "KERNEL32.dll!lstrcmpW": 7, "USER32.dll!GetWindowRect": 303, "USER32.dll!PtInRect": 225, "USER32.dll!GetWindow": 49, "USER32.dll!GetClassNameW": 9, "KERNEL32.dll!CompareStringW": 4, "USER32.dll!RealChildWindowFromPoint": 1, "KERNEL32.dll!GlobalHandle": 2, "KERNEL32.dll!GlobalReAlloc": 2, "KERNEL32.dll!LocalReAlloc": 1, "ADVAPI32.dll!RegDeleteKeyW": 2, "ole32.dll!CoDisconnectObject": 1, "USER32.dll!GetSysColorBrush": 11, "GDI32.dll!GetDeviceCaps": 11, "KERNEL32.dll!lstrcmpA": 1, "OLEAUT32.dll!SystemTimeToVariantTime": 1, "OLEAUT32.dll!VariantTimeToSystemTime": 1, "OLEAUT32.dll!VarBstrFromDate": 1, "USER32.dll!GetForegroundWindow": 4, "USER32.dll!IsChild": 24, "USER32.dll!SetForegroundWindow": 4, "USER32.dll!SetWindowsHookExW": 3, "USER32.dll!GetClassInfoW": 5, "USER32.dll!EqualRect": 36, "USER32.dll!DeferWindowPos": 5, "OLEAUT32.dll!VariantChangeType": 8, "USER32.dll!AdjustWindowRectEx": 5, "USER32.dll!GetKeyState": 52, "USER32.dll!MonitorFromWindow": 2, "USER32.dll!MapWindowPoints": 43, "USER32.dll!ValidateRect": 5, "USER32.dll!ShowScrollBar": 4, "USER32.dll!GetMessageTime": 1, "USER32.dll!GetMessagePos": 1, "USER32.dll!GetTopWindow": 11, "USER32.dll!GetWindowTextLengthW": 4, "USER32.dll!GetMenu": 9, "USER32.dll!GetScrollInfo": 1, "USER32.dll!GetScrollPos": 4, "USER32.dll!GetScrollRange": 1, "USER32.dll!GetWindowPlacement": 2, "USER32.dll!SetActiveWindow": 5, "USER32.dll!IsMenu": 13, "USER32.dll!GetCapture": 40, "USER32.dll!BeginDeferWindowPos": 12, "USER32.dll!EndDeferWindowPos": 11, "USER32.dll!IsIconic": 16, "USER32.dll!UpdateWindow": 145, "USER32.dll!ScrollWindow": 1, "USER32.dll!SetMenu": 6, "USER32.dll!SetScrollInfo": 1, "USER32.dll!SetScrollPos": 7, "USER32.dll!SetScrollRange": 1, "USER32.dll!SetWindowPlacement": 1, "USER32.dll!TrackPopupMenu": 9, "USER32.dll!WinHelpW": 2, "USER32.dll!GetPropW": 4, "USER32.dll!RemovePropW": 2, "KERNEL32.dll!GlobalFindAtomW": 1, "KERNEL32.dll!GlobalDeleteAtom": 1, "USER32.dll!CallNextHookEx": 4, "USER32.dll!GetClassLongPtrW": 9, "USER32.dll!SetPropW": 2, "KERNEL32.dll!GlobalAddAtomW": 3, "USER32.dll!LoadIconW": 9, "USER32.dll!RegisterClassW": 1, "SHLWAPI.dll!PathStripToRootW": 1, "KERNEL32.dll!DuplicateHandle": 1, "KERNEL32.dll!FlushFileBuffers": 2, "KERNEL32.dll!GetFileSize": 2, "KERNEL32.dll!SetFilePointer": 3, "KERNEL32.dll!LockFile": 1, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!SetEndOfFile": 2, "KERNEL32.dll!UnlockFile": 1, "SHLWAPI.dll!PathIsUNCW": 1, "KERNEL32.dll!GetVolumeInformationW": 1, "USER32.dll!CharUpperW": 6, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 2, "USER32.dll!SystemParametersInfoW": 22, "USER32.dll!DestroyMenu": 16, "USER32.dll!GetMenuItemInfoW": 10, "USER32.dll!EnableMenuItem": 48, "USER32.dll!CheckMenuItem": 12, "USER32.dll!SetMenuItemBitmaps": 1, "USER32.dll!SetMenuItemInfoW": 1, "USER32.dll!GetMenuCheckMarkDimensions": 1, "USER32.dll!LoadBitmapW": 3, "USER32.dll!SendDlgItemMessageA": 2, "USER32.dll!SetRectEmpty": 270, "UxTheme.dll!DrawThemeText": 1, "USER32.dll!GetActiveWindow": 5, "USER32.dll!EndDialog": 1, "USER32.dll!GetNextDlgTabItem": 4, "USER32.dll!CreateDialogIndirectParamW": 1, "USER32.dll!MapDialogRect": 1, "USER32.dll!GetAsyncKeyState": 31, "KERNEL32.dll!FileTimeToSystemTime": 7, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1, "KERNEL32.dll!GetFileAttributesExW": 2, "KERNEL32.dll!GetFileTime": 1, "KERNEL32.dll!FileTimeToLocalFileTime": 6, "USER32.dll!ShowOwnedPopups": 1, "KERNEL32.dll!MulDiv": 23, "GDI32.dll!EnumFontFamiliesExW": 3, "SHLWAPI.dll!PathRemoveFileSpecW": 4, "SHLWAPI.dll!PathFindExtensionW": 1, "USER32.dll!LoadImageW": 8, "USER32.dll!GetNextDlgGroupItem": 4, "USER32.dll!ReleaseCapture": 85, "USER32.dll!InvalidateRect": 192, "USER32.dll!IsRectEmpty": 247, "USER32.dll!DrawFocusRect": 6, "USER32.dll!SetCapture": 42, "USER32.dll!WindowFromPoint": 10, "USER32.dll!GetCursorPos": 96, "USER32.dll!SetCursor": 32, "GDI32.dll!GetObjectType": 1, "USER32.dll!GetIconInfo": 2, "USER32.dll!CopyImage": 3, "USER32.dll!DrawIconEx": 12, "USER32.dll!DestroyIcon": 14, "GDI32.dll!RealizePalette": 5, "GDI32.dll!GetNearestPaletteIndex": 3, "GDI32.dll!GetSystemPaletteEntries": 2, "GDI32.dll!GetPaletteEntries": 3, "GDI32.dll!CreatePalette": 4, "GDI32.dll!GetBkColor": 9, "SHELL32.dll!ShellExecuteW": 2, "USER32.dll!MessageBeep": 32, "GDI32.dll!GetTextMetricsW": 15, "USER32.dll!NotifyWinEvent": 14, "USER32.dll!HideCaret": 1, "USER32.dll!EnableScrollBar": 7, "USER32.dll!InvertRect": 4, "OLEAUT32.dll!SysAllocString": 10, "OLEAUT32.dll!SysAllocStringLen": 26, "SHELL32.dll!SHGetDesktopFolder": 7, "USER32.dll!CreatePopupMenu": 15, "USER32.dll!GetMenuDefaultItem": 4, "KERNEL32.dll!GetWindowsDirectoryW": 2, "SHELL32.dll!SHGetFileInfoW": 12, "SHELL32.dll!SHGetPathFromIDListW": 4, "KERNEL32.dll!lstrcmpiW": 2, "SHLWAPI.dll!StrFormatKBSizeW": 1, "USER32.dll!MapVirtualKeyW": 3, "GDI32.dll!CreateCompatibleBitmap": 35, "GDI32.dll!CreateDIBitmap": 1, "UxTheme.dll!DrawThemeParentBackground": 3, "GDI32.dll!GetTextCharsetInfo": 1, "GDI32.dll!EnumFontFamiliesW": 2, "GDI32.dll!SetPixel": 8, "GDI32.dll!CreateDIBSection": 10, "USER32.dll!DrawStateW": 13, "USER32.dll!OpenClipboard": 4, "USER32.dll!EmptyClipboard": 4, "USER32.dll!CloseClipboard": 7, "USER32.dll!SetClipboardData": 4, "GDI32.dll!SetDIBColorTable": 1, "MSIMG32.dll!AlphaBlend": 5, "MSIMG32.dll!TransparentBlt": 1, "USER32.dll!SetClassLongPtrW": 1, "USER32.dll!SetParent": 30, "USER32.dll!SetWindowRgn": 21, "UxTheme.dll!CloseThemeData": 23, "UxTheme.dll!DrawThemeBackground": 23, "GDI32.dll!GetTextColor": 20, "UxTheme.dll!GetCurrentThemeName": 1, "UxTheme.dll!GetThemeColor": 19, "USER32.dll!DrawEdge": 2, "GDI32.dll!CreateHatchBrush": 1, "GDI32.dll!Ellipse": 10, "USER32.dll!DrawFrameControl": 2, "GDI32.dll!CreatePolygonRgn": 13, "GDI32.dll!Polyline": 5, "GDI32.dll!Polygon": 7, "GDI32.dll!CreateEllipticRgn": 3, "UxTheme.dll!OpenThemeData": 23, "USER32.dll!LoadMenuW": 11, "USER32.dll!IsZoomed": 13, "USER32.dll!TrackMouseEvent": 11, "USER32.dll!GetSystemMenu": 9, "USER32.dll!DeleteMenu": 11, "GDI32.dll!CreateRoundRectRgn": 2, "USER32.dll!BringWindowToTop": 15, "USER32.dll!SetCursorPos": 3, "USER32.dll!CopyIcon": 1, "USER32.dll!DrawIcon": 1, "GDI32.dll!LPtoDP": 3, "GDI32.dll!Rectangle": 9, "USER32.dll!UnionRect": 13, "KERNEL32.dll!GetCurrentDirectoryW": 2, "USER32.dll!UpdateLayeredWindow": 3, "USER32.dll!MonitorFromPoint": 8, "USER32.dll!LoadAcceleratorsW": 3, "USER32.dll!InsertMenuItemW": 1, "KERNEL32.dll!GlobalGetAtomNameW": 2, "SHELL32.dll!DragQueryFileW": 2, "SHELL32.dll!DragFinish": 1, "USER32.dll!TranslateAcceleratorW": 4, "SHELL32.dll!SHBrowseForFolderW": 1, "USER32.dll!GetComboBoxInfo": 1, "GDI32.dll!GetRgnBox": 5, "GDI32.dll!OffsetRgn": 2, "USER32.dll!GetKeyboardLayout": 3, "USER32.dll!MapVirtualKeyExW": 1, "USER32.dll!GetKeyNameTextW": 1, "USER32.dll!IsCharLowerW": 1, "USER32.dll!GetKeyboardState": 2, "USER32.dll!ToUnicodeEx": 2, "USER32.dll!CopyAcceleratorTableW": 5, "USER32.dll!DestroyAcceleratorTable": 6, "USER32.dll!CreateAcceleratorTableW": 1, "KERNEL32.dll!GetTempPathW": 1, "USER32.dll!LockWindowUpdate": 7, "USER32.dll!SetMenuDefaultItem": 3, "USER32.dll!GetDoubleClickTime": 1, "SHELL32.dll!SHAppBarMessage": 4, "ole32.dll!ReleaseStgMedium": 5, "KERNEL32.dll!GetProfileIntW": 5, "ole32.dll!DoDragDrop": 1, "KERNEL32.dll!GetTickCount64": 3, "KERNEL32.dll!SearchPathW": 1, "USER32.dll!RegisterClipboardFormatW": 13, "USER32.dll!CharUpperBuffW": 1, "KERNEL32.dll!SetThreadPriority": 1, "WINMM.dll!PlaySoundW": 2, "ole32.dll!OleGetClipboard": 1, "USER32.dll!IsClipboardFormatAvailable": 2, "ole32.dll!CoLockObjectExternal": 3, "ole32.dll!RegisterDragDrop": 1, "ole32.dll!RevokeDragDrop": 1, "USER32.dll!GetUpdateRect": 1, "KERNEL32.dll!GetTempFileNameW": 1, "UxTheme.dll!GetWindowTheme": 2, "USER32.dll!ModifyMenuW": 1, "UxTheme.dll!IsAppThemed": 5, "UxTheme.dll!IsThemeBackgroundPartiallyTransparent": 2, "USER32.dll!WaitMessage": 2, "GDI32.dll!CreateDCW": 1, "USER32.dll!DefMDIChildProcW": 1, "USER32.dll!DefFrameProcW": 1, "USER32.dll!DrawMenuBar": 2, "USER32.dll!TranslateMDISysAccel": 1, "GDI32.dll!RoundRect": 3, "UxTheme.dll!GetThemeSysColor": 23, "USER32.dll!SubtractRect": 1, "USER32.dll!CreateMenu": 2, "ole32.dll!OleCreateMenuDescriptor": 2, "ole32.dll!OleDestroyMenuDescriptor": 1, "USER32.dll!PostThreadMessageW": 1, "ole32.dll!IsAccelerator": 1, "ole32.dll!OleTranslateAccelerator": 1, "GDI32.dll!GetBoundsRect": 1, "GDI32.dll!FillRgn": 1, "GDI32.dll!FrameRgn": 5, "GDI32.dll!PtInRegion": 4, "USER32.dll!GetWindowRgn": 1, "OLEAUT32.dll!VariantCopy": 2, "UxTheme.dll!GetThemePartSize": 4, "USER32.dll!DestroyCursor": 7, "GDI32.dll!ExtFloodFill": 1, "GDI32.dll!SetPaletteEntries": 1, "GDI32.dll!SetPixelV": 1, "ole32.dll!OleLockRunning": 1, "GDI32.dll!GetViewportOrgEx": 2, "GDI32.dll!DPtoLP": 1, "OLEAUT32.dll!LoadTypeLib": 1, "GDI32.dll!GetTextFaceW": 1, "GDI32.dll!GetWindowExtEx": 3, "GDI32.dll!GetViewportExtEx": 3, "GDI32.dll!GetWindowOrgEx": 1, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!RtlPcToFileHeader": 3, "KERNEL32.dll!ExitThread": 3, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!CreateThread": 2, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!HeapQueryInformation": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 3, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!SetFilePointerEx": 2, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!FindNextFileW": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableW": 1, "KERNEL32.dll!WriteConsoleW": 2, "OLEACC.dll!LresultFromObject": 1, "OLEACC.dll!AccessibleObjectFromWindow": 1, "OLEACC.dll!CreateStdAccessibleObject": 1, "gdiplus.dll!GdiplusShutdown": 1, "gdiplus.dll!GdiplusStartup": 1, "gdiplus.dll!GdipCloneImage": 1, "gdiplus.dll!GdipDisposeImage": 1, "gdiplus.dll!GdipGetImageGraphicsContext": 1, "gdiplus.dll!GdipGetImageWidth": 1, "gdiplus.dll!GdipGetImageHeight": 1, "gdiplus.dll!GdipGetImagePixelFormat": 1, "gdiplus.dll!GdipGetImagePalette": 1, "gdiplus.dll!GdipGetImagePaletteSize": 1, "gdiplus.dll!GdipCreateBitmapFromStream": 1, "gdiplus.dll!GdipCreateBitmapFromScan0": 1, "gdiplus.dll!GdipBitmapLockBits": 1, "gdiplus.dll!GdipBitmapUnlockBits": 1, "gdiplus.dll!GdipDrawImageI": 1, "gdiplus.dll!GdipCreateBitmapFromHBITMAP": 1, "gdiplus.dll!GdipSetInterpolationMode": 1, "gdiplus.dll!GdipDrawImageRectI": 1, "IMM32.dll!ImmGetContext": 1, "IMM32.dll!ImmReleaseContext": 1, "IMM32.dll!ImmGetOpenStatus": 1, "USER32.dll!UnpackDDElParam": 1, "USER32.dll!ReuseDDElParam": 1, "WINSPOOL.DRV!OpenPrinterW": 1, "WINSPOOL.DRV!DocumentPropertiesW": 1, "WINSPOOL.DRV!ClosePrinter": 1, "SHELL32.dll!SHGetSpecialFolderLocation": 1, "KERNEL32.dll!RtlUnwind": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\plugins\\NVIDIA Overlay\\ShareServer.dll", "sha256": "ea5cc83f0023ad367f1e1be8b8e038c00e364fc1516afb50412742bd9f8ed1f0", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 7649792, "processed_bytes": 7649792, "instructions": 3749370, "skipdata_bytes": 1536 } ], "utc": "2026-11-11T21:41:06.934904+00:00", "instructions": 3749370, "skipdata_bytes": 1536, "calls": 103606, "api_reference_counts": { "KERNEL32.dll!GetProcessHeap": 13, "KERNEL32.dll!InitializeCriticalSectionEx": 26, "KERNEL32.dll!GetLastError": 153, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo_noreturn": 5267, "api-ms-win-crt-heap-l1-1-0.dll!free": 1631, "api-ms-win-crt-heap-l1-1-0.dll!realloc": 71, "MSVCP140.dll!?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ": 3, "MSVCP140.dll!?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ": 3, "MSVCP140.dll!?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ": 3, "api-ms-win-crt-heap-l1-1-0.dll!calloc": 6, "KERNEL32.dll!DecodePointer": 13, "KERNEL32.dll!DeleteCriticalSection": 31, "USER32.dll!UnregisterClassW": 14, "KERNEL32.dll!HeapDestroy": 4, "KERNEL32.dll!HeapAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapReAlloc": 2, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z": 16, "MSVCP140.dll!?width@ios_base@std@@QEBA_JXZ": 12, "MSVCP140.dll!?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ": 27, "MSVCP140.dll!?good@ios_base@std@@QEBA_NXZ": 17, "MSVCP140.dll!?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ": 5, "MSVCP140.dll!?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ": 5, "MSVCP140.dll!?flags@ios_base@std@@QEBAHXZ": 6, "MSVCP140.dll!?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ": 7, "MSVCP140.dll!?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z": 5, "MSVCP140.dll!?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z": 3, "MSVCP140.dll!?width@ios_base@std@@QEAA_J_J@Z": 6, "MSVCP140.dll!?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 22, "MSVCP140.dll!?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ": 5, "MSVCP140.dll!??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ": 53, "MSVCP140.dll!??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ": 51, "MSVCP140.dll!??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 32, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z": 6, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z": 13, "MSVCP140.dll!??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 64, "MSVCP140.dll!??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ": 104, "MSVCP140.dll!?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 18, "MSVCP140.dll!?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 11, "MSVCP140.dll!?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 12, "MSVCP140.dll!?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 24, "MSVCP140.dll!?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 16, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ": 20, "MSVCP140.dll!?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 5, "MSVCP140.dll!?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ": 24, "MSVCP140.dll!?setf@ios_base@std@@QEAAHHH@Z": 3, "MSVCP140.dll!?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 4, "MSVCP140.dll!?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z": 5, "MSVCP140.dll!?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 3, "KERNEL32.dll!AcquireSRWLockExclusive": 5, "KERNEL32.dll!ReleaseSRWLockExclusive": 5, "KERNEL32.dll!WakeAllConditionVariable": 4, "KERNEL32.dll!SleepConditionVariableSRW": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 4, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!SetUnhandledExceptionFilter": 4, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!GetStartupInfoW": 2, "KERNEL32.dll!GetModuleHandleW": 6, "KERNEL32.dll!GetCurrentProcess": 2, "KERNEL32.dll!TerminateProcess": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!GetCurrentThreadId": 3, "KERNEL32.dll!GetCurrentProcessId": 4, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!DisableThreadLibraryCalls": 2, "KERNEL32.dll!InitializeSListHead": 2, "MSVCP140.dll!?_Xbad_alloc@std@@YAXXZ": 1, "MSVCP140.dll!?_Xlength_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Mbrtowc": 1, "MSVCP140.dll!?uncaught_exception@std@@YA_NXZ": 1, "MSVCP140.dll!?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z": 2, "MSVCP140.dll!?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z": 2, "MSVCP140.dll!?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ": 1, "VCRUNTIME140.dll!_purecall": 1, "VCRUNTIME140.dll!__std_terminate": 1, "VCRUNTIME140.dll!strrchr": 1, "VCRUNTIME140.dll!__std_exception_copy": 1, "VCRUNTIME140.dll!__std_exception_destroy": 1, "VCRUNTIME140.dll!__std_type_info_compare": 1, "VCRUNTIME140.dll!_CxxThrowException": 1, "VCRUNTIME140_1.dll!__CxxFrameHandler4": 1, "VCRUNTIME140.dll!memcpy": 1, "VCRUNTIME140.dll!memcmp": 1, "VCRUNTIME140.dll!memmove": 1, "VCRUNTIME140.dll!__C_specific_handler": 1, "VCRUNTIME140.dll!__current_exception": 1, "VCRUNTIME140.dll!__current_exception_context": 1, "VCRUNTIME140.dll!memset": 1, "VCRUNTIME140.dll!__std_type_info_destroy_list": 1, "api-ms-win-crt-heap-l1-1-0.dll!_callnewh": 1, "api-ms-win-crt-heap-l1-1-0.dll!malloc": 80, "api-ms-win-crt-runtime-l1-1-0.dll!_seh_filter_dll": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_configure_narrow_argv": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_narrow_environment": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initialize_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_register_onexit_function": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_execute_onexit_table": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_atexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_crt_at_quick_exit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_cexit": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm": 1, "api-ms-win-crt-runtime-l1-1-0.dll!_initterm_e": 1, "api-ms-win-crt-runtime-l1-1-0.dll!terminate": 9, "OLEAUT32.dll!VariantInit": 18, "OLEAUT32.dll!VariantClear": 39, "KERNEL32.dll!GetProcAddress": 66, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf_s": 5, "OLEAUT32.dll!SysAllocString": 7, "OLEAUT32.dll!SysFreeString": 19, "OLEAUT32.dll!VariantChangeType": 11, "KERNEL32.dll!FreeLibrary": 29, "OLEAUT32.dll!SysStringByteLen": 4, "OLEAUT32.dll!SysAllocStringByteLen": 4, "api-ms-win-crt-string-l1-1-0.dll!strncpy": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!strcpy_s": 4, "OLEAUT32.dll!VariantCopy": 3, "SHELL32.dll!SHGetFolderPathW": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z": 4, "api-ms-win-crt-string-l1-1-0.dll!wcscpy_s": 10, "api-ms-win-crt-string-l1-1-0.dll!wcsncmp": 3, "api-ms-win-crt-runtime-l1-1-0.dll!_beginthreadex": 10, "api-ms-win-crt-stdio-l1-1-0.dll!fgetc": 5, "api-ms-win-crt-stdio-l1-1-0.dll!fputc": 4, "api-ms-win-crt-stdio-l1-1-0.dll!ungetc": 4, "MSVCP140.dll!??0_Lockit@std@@QEAA@H@Z": 6, "MSVCP140.dll!??Bid@locale@std@@QEAA_KXZ": 9, "MSVCP140.dll!?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??1_Lockit@std@@QEAA@XZ": 11, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ": 22, "MSVCP140.dll!??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 12, "MSVCP140.dll!??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 27, "api-ms-win-crt-runtime-l1-1-0.dll!_errno": 49, "api-ms-win-crt-convert-l1-1-0.dll!strtoul": 5, "MSVCP140.dll!?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fwrite": 72, "api-ms-win-crt-stdio-l1-1-0.dll!_get_stream_buffer_pointers": 7, "MSVCP140.dll!?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z": 7, "MSVCP140.dll!?always_noconv@codecvt_base@std@@QEBA_NXZ": 7, "api-ms-win-crt-filesystem-l1-1-0.dll!_lock_file": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_unlock_file": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fclose": 7, "MSVCP140.dll!?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ": 5, "MSVCP140.dll!?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_fseeki64": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fsetpos": 2, "api-ms-win-crt-stdio-l1-1-0.dll!setvbuf": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fflush": 4, "MSVCP140.dll!?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ": 2, "MSVCP140.dll!?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z": 2, "MSVCP140.dll!?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fread": 7, "MSVCP140.dll!?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ": 2, "MSVCP140.dll!?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z": 2, "MSVCP140.dll!??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z": 9, "MSVCP140.dll!??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ": 22, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!remove": 2, "KERNEL32.dll!GetDriveTypeW": 3, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vsprintf": 13, "OLEAUT32.dll!SysAllocStringLen": 10, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBADD@Z": 20, "MSVCP140.dll!?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z": 5, "MSVCP140.dll!?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0facet@locale@std@@IEAA@_K@Z": 3, "MSVCP140.dll!?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ": 4, "MSVCP140.dll!??1facet@locale@std@@MEAA@XZ": 5, "MSVCP140.dll!?c_str@?$_Yarn@D@std@@QEBAPEBDXZ": 3, "MSVCP140.dll!??0_Locinfo@std@@QEAA@PEBD@Z": 5, "MSVCP140.dll!??1_Locinfo@std@@QEAA@XZ": 10, "api-ms-win-crt-convert-l1-1-0.dll!wcstoll": 4, "KERNEL32.dll!FindFirstFileW": 7, "KERNEL32.dll!FindNextFileW": 7, "KERNEL32.dll!FindClose": 9, "KERNEL32.dll!LocalAlloc": 24, "KERNEL32.dll!LocalFree": 69, "api-ms-win-crt-string-l1-1-0.dll!isalpha": 6, "KERNEL32.dll!GetSystemDirectoryW": 5, "KERNEL32.dll!SetLastError": 71, "KERNEL32.dll!GetFileAttributesW": 8, "api-ms-win-crt-string-l1-1-0.dll!_wcsnicmp": 6, "KERNEL32.dll!GetModuleFileNameW": 5, "api-ms-win-crt-string-l1-1-0.dll!_wcsicmp": 6, "api-ms-win-crt-string-l1-1-0.dll!_strnicmp": 2, "KERNEL32.dll!VerSetConditionMask": 6, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetFullPathNameW": 4, "api-ms-win-crt-string-l1-1-0.dll!isdigit": 2, "KERNEL32.dll!LoadLibraryExW": 11, "KERNEL32.dll!CreateFileW": 9, "api-ms-win-crt-string-l1-1-0.dll!wcstok": 3, "KERNEL32.dll!CloseHandle": 57, "KERNEL32.dll!GetModuleFileNameA": 2, "api-ms-win-crt-string-l1-1-0.dll!strncmp": 2, "KERNEL32.dll!CreateProcessA": 2, "KERNEL32.dll!CreateProcessW": 2, "api-ms-win-crt-runtime-l1-1-0.dll!_invalid_parameter_noinfo": 5, "KERNEL32.dll!MultiByteToWideChar": 14, "ole32.dll!CoTaskMemFree": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen": 3, "KERNEL32.dll!WideCharToMultiByte": 14, "api-ms-win-crt-stdio-l1-1-0.dll!_wfsopen": 2, "api-ms-win-crt-stdio-l1-1-0.dll!fgetws": 3, "api-ms-win-crt-string-l1-1-0.dll!wcstok_s": 3, "api-ms-win-crt-stdio-l1-1-0.dll!ferror": 2, "KERNEL32.dll!GetTickCount64": 3, "KERNEL32.dll!InitOnceExecuteOnce": 2, "ADVAPI32.dll!RegCreateKeyExW": 2, "ADVAPI32.dll!RegGetValueW": 2, "ADVAPI32.dll!RegCloseKey": 2, "KERNEL32.dll!GetErrorMode": 2, "KERNEL32.dll!SetErrorMode": 4, "USER32.dll!LoadStringW": 2, "api-ms-win-crt-string-l1-1-0.dll!wcsncpy_s": 3, "api-ms-win-crt-string-l1-1-0.dll!isspace": 3, "KERNEL32.dll!InitOnceBeginInitialize": 42, "api-ms-win-crt-runtime-l1-1-0.dll!abort": 60, "KERNEL32.dll!InitOnceComplete": 43, "MSVCP140.dll!?eof@ios_base@std@@QEBA_NXZ": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__stdio_common_vfprintf": 4, "api-ms-win-crt-stdio-l1-1-0.dll!__acrt_iob_func": 4, "api-ms-win-crt-convert-l1-1-0.dll!strtod": 3, "api-ms-win-crt-string-l1-1-0.dll!strpbrk": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtol": 3, "api-ms-win-crt-runtime-l1-1-0.dll!strerror": 3, "MSVCP140.dll!?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z": 2, "MSVCP140.dll!?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ": 2, "MSVCP140.dll!?fail@ios_base@std@@QEBA_NXZ": 2, "MSVCP140.dll!?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoll": 3, "api-ms-win-crt-convert-l1-1-0.dll!strtoull": 8, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z": 5, "MSVCP140.dll!?unsetf@ios_base@std@@QEAAXH@Z": 2, "MSVCP140.dll!?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ": 15, "MSVCP140.dll!?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ": 4, "MSVCP140.dll!?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ": 4, "MSVCP140.dll!?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ": 5, "MSVCP140.dll!?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z": 6, "MSVCP140.dll!?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z": 5, "MSVCP140.dll!?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ": 4, "MSVCP140.dll!?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!iswalpha": 7, "MSVCP140.dll!??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 4, "MSVCP140.dll!??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ": 3, "MSVCP140.dll!??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z": 3, "MSVCP140.dll!?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 15, "MSVCP140.dll!?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 10, "MSVCP140.dll!?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 8, "MSVCP140.dll!?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 14, "MSVCP140.dll!?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z": 7, "MSVCP140.dll!?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z": 3, "MSVCP140.dll!??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 2, "MSVCP140.dll!??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 7, "MSVCP140.dll!??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ": 6, "MSVCP140.dll!?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 5, "MSVCP140.dll!?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ": 13, "api-ms-win-crt-stdio-l1-1-0.dll!_wsopen_dispatch": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_waccess": 2, "KERNEL32.dll!GetCurrentDirectoryW": 4, "api-ms-win-crt-filesystem-l1-1-0.dll!_wchdir": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_close": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_dup2": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_dup": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_wmkdir": 2, "MSVCP140.dll!?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ": 3, "MSVCP140.dll!?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z": 4, "MSVCP140.dll!?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_read": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_setmode": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_wstat64i32": 2, "api-ms-win-crt-stdio-l1-1-0.dll!_write": 2, "CrimsonUtil.dll!?LogInit@GXP@@YAXW4Profile@1@P6AXPEBDPEAX@Z2@Z": 1, "CrimsonUtil.dll!?LogNameThread@GXP@@YAXPEBD0@Z": 1, "CrimsonUtil.dll!?LogMessage@GXP@@YAXW4LogLevel@1@PEBDH1ZZ": 1, "CrimsonUtil.dll!??0CloudSyncClient@GXP@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000@Z": 1, "CrimsonUtil.dll!??1CloudSyncClient@GXP@@QEAA@XZ": 1, "CrimsonUtil.dll!?CloudSyncObject@CloudSyncClient@GXP@@QEBA_NAEBV?$GenericValue@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@@rapidjson@@@Z": 1, "CrimsonUtil.dll!?CloudSyncAbort@CloudSyncClient@GXP@@SAXXZ": 1, "CrimsonUtil.dll!?CloudSyncFetchManifestBegin@CloudSyncClient@GXP@@AEBA_NPEAPEBDPEAPEAX@Z": 1, "CrimsonUtil.dll!?CloudSyncFetchManifestEnd@CloudSyncClient@GXP@@AEBAXAEBV?$GenericDocument@U?$UTF8@D@rapidjson@@V?$MemoryPoolAllocator@VCrtAllocator@rapidjson@@@2@VCrtAllocator@2@@rapidjson@@PEAX@Z": 1, "MSVCP140.dll!?getloc@ios_base@std@@QEBA?AVlocale@2@XZ": 2, "MSVCP140.dll!?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z": 2, "api-ms-win-crt-string-l1-1-0.dll!isprint": 4, "MSVCP140.dll!?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z": 3, "MSVCP140.dll!?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "MSVCP140.dll!?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ": 2, "api-ms-win-crt-string-l1-1-0.dll!tolower": 7, "MSVCP140.dll!?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "SHLWAPI.dll!PathFileExistsW": 2, "KERNEL32.dll!CreateDirectoryW": 3, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!GetLogicalDrives": 2, "KERNEL32.dll!SetFileAttributesW": 4, "KERNEL32.dll!CopyFileW": 5, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 2, "KERNEL32.dll!DeleteFileW": 2, "KERNEL32.dll!MoveFileExW": 4, "KERNEL32.dll!GetFileSizeEx": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64": 2, "KERNEL32.dll!Sleep": 3, "KERNEL32.dll!OpenProcess": 2, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "api-ms-win-crt-time-l1-1-0.dll!_time64": 3, "api-ms-win-crt-time-l1-1-0.dll!_localtime64_s": 2, "KERNEL32.dll!GetDiskFreeSpaceExW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 2, "api-ms-win-crt-time-l1-1-0.dll!_gmtime64": 4, "MSVCP140.dll!??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z": 2, "KERNEL32.dll!GetModuleHandleExW": 3, "api-ms-win-crt-filesystem-l1-1-0.dll!_wsplitpath_s": 2, "ADVAPI32.dll!RegOpenKeyExW": 2, "ADVAPI32.dll!RegQueryValueExW": 3, "KERNEL32.dll!GetLongPathNameW": 3, "KERNEL32.dll!GetUserDefaultUILanguage": 2, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetSystemTime": 2, "KERNEL32.dll!SystemTimeToFileTime": 2, "SHLWAPI.dll!PathIsRelativeW": 2, "MSVCP140.dll!??7ios_base@std@@QEBA_NXZ": 5, "api-ms-win-crt-environment-l1-1-0.dll!_wputenv": 2, "MSVCP140.dll!?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 137, "MSVCP140.dll!?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ": 144, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z": 4, "MSVCP140.dll!?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z": 4, "MSVCP140.dll!??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z": 6, "MSVCP140.dll!?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z": 2, "MSVCP140.dll!??0codecvt_base@std@@QEAA@_K@Z": 4, "MSVCP140.dll!?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z": 2, "MSVCP140.dll!??0_Locinfo@std@@QEAA@HPEBD@Z": 3, "MSVCP140.dll!?_Getname@_Locinfo@std@@QEBAPEBDXZ": 4, "MSVCP140.dll!?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z": 3, "MSVCP140.dll!??1codecvt_base@std@@UEAA@XZ": 8, "MSVCP140.dll!??Bios_base@std@@QEBA_NXZ": 3, "MSVCP140.dll!?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z": 2, "KERNEL32.dll!GetTempPathW": 2, "MSVCP140.dll!?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z": 3, "MSVCP140.dll!?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z": 3, "api-ms-win-crt-stdio-l1-1-0.dll!_wfopen_s": 3, "ole32.dll!CoCreateGuid": 2, "api-ms-win-crt-filesystem-l1-1-0.dll!_stat64i32": 3, "ole32.dll!CoUninitialize": 2, "ole32.dll!CoInitializeEx": 2, "ole32.dll!CoInitializeSecurity": 2, "ole32.dll!CoCreateInstance": 2, "ole32.dll!CoSetProxyBlanket": 2, "KERNEL32.dll!CreateThread": 5, "KERNEL32.dll!WaitForMultipleObjects": 2, "KERNEL32.dll!EnterCriticalSection": 18, "KERNEL32.dll!InitializeCriticalSection": 3, "KERNEL32.dll!LeaveCriticalSection": 17, "KERNEL32.dll!OutputDebugStringW": 3, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "KERNEL32.dll!RaiseException": 2, "SHELL32.dll!SHGetKnownFolderPath": 1, "OLEAUT32.dll!GetErrorInfo": 2, "OLEAUT32.dll!SetErrorInfo": 3, "OLEAUT32.dll!CreateErrorInfo": 2, "MSVCP140.dll!_Query_perf_counter": 1, "MSVCP140.dll!_Query_perf_frequency": 1, "MSVCP140.dll!_Mtx_init_in_situ": 1, "MSVCP140.dll!_Mtx_destroy_in_situ": 1, "MSVCP140.dll!_Mtx_lock": 1, "MSVCP140.dll!_Mtx_unlock": 1, "MSVCP140.dll!?_Throw_Cpp_error@std@@YAXH@Z": 1, "MSVCP140.dll!?_Xbad_function_call@std@@YAXXZ": 1, "MSVCP140.dll!?_Xout_of_range@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?_Xinvalid_argument@std@@YAXPEBD@Z": 1, "MSVCP140.dll!_Xtime_get_ticks": 1, "KERNEL32.dll!GetLocaleInfoEx": 2, "KERNEL32.dll!FormatMessageA": 2, "MSVCP140.dll!_Thrd_join": 1, "MSVCP140.dll!_Thrd_id": 1, "MSVCP140.dll!_Cnd_init_in_situ": 1, "MSVCP140.dll!_Cnd_destroy_in_situ": 1, "MSVCP140.dll!_Cnd_timedwait": 1, "MSVCP140.dll!_Cnd_signal": 1, "MSVCP140.dll!_Cnd_do_broadcast_at_thread_exit": 1, "MSVCP140.dll!?_Syserror_map@std@@YAPEBDH@Z": 1, "MSVCP140.dll!?_Winerror_map@std@@YAHH@Z": 1, "KERNEL32.dll!CreateSymbolicLinkW": 3, "KERNEL32.dll!GetFileInformationByHandleEx": 9, "KERNEL32.dll!GetFileInformationByHandle": 2, "KERNEL32.dll!SetFileInformationByHandle": 8, "api-ms-win-crt-locale-l1-1-0.dll!___lc_codepage_func": 2, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!CreateDirectoryExW": 2, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!FindFirstFileExW": 2, "KERNEL32.dll!GetFinalPathNameByHandleW": 3, "KERNEL32.dll!DeviceIoControl": 3, "KERNEL32.dll!SetCurrentDirectoryW": 2, "KERNEL32.dll!SetFileTime": 2, "MSVCP140.dll!?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z": 1, "MSVCP140.dll!?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z": 1, "MSVCP140.dll!_Strcoll": 1, "MSVCP140.dll!_Strxfrm": 1, "MSVCP140.dll!?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z": 1, "MSVCP140.dll!?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z": 1, "MSVCP140.dll!?_Incref@facet@locale@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ": 1, "MSVCP140.dll!_Mtx_trylock": 1, "MSVCP140.dll!?__ExceptionPtrCreate@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrDestroy@@YAXPEAX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopy@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrAssign@@YAXPEAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrToBool@@YA_NPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrRethrow@@YAXPEBX@Z": 1, "MSVCP140.dll!?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z": 1, "MSVCP140.dll!_Cnd_wait": 1, "MSVCP140.dll!_Cnd_broadcast": 1, "MSVCP140.dll!_Cnd_register_at_thread_exit": 1, "MSVCP140.dll!_Cnd_unregister_at_thread_exit": 1, "MSVCP140.dll!?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z": 1, "MSVCP140.dll!?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ": 1, "MSVCP140.dll!?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z": 1, "MSVCP140.dll!?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z": 1, "MSVCP140.dll!?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z": 1, "MSVCP140.dll!?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ": 1, "MSVCP140.dll!?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ": 1, "MSVCP140.dll!?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ": 1, "MSVCP140.dll!?__ExceptionPtrCurrentException@@YAXPEAX@Z": 1, "MSVCP140.dll!?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z": 1, "MSVCP140.dll!?_ReportUnobservedException@details@Concurrency@@YAXXZ": 1, "MSVCP140.dll!?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ": 1, "MSVCP140.dll!?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z": 1, "MSVCP140.dll!?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ": 1, "MSVCP140.dll!??0task_continuation_context@Concurrency@@AEAA@XZ": 1, "MSVCP140.dll!?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z": 1, "MSVCP140.dll!?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ": 1, "MSVCP140.dll!?_Xruntime_error@std@@YAXPEBD@Z": 1, "MSVCP140.dll!?do_encoding@codecvt_base@std@@MEBAHXZ": 1, "MSVCP140.dll!?do_max_length@codecvt_base@std@@MEBAHXZ": 1, "VCRUNTIME140.dll!memchr": 1, "VCRUNTIME140.dll!strchr": 1, "VCRUNTIME140.dll!wcsrchr": 1, "VCRUNTIME140.dll!wcsstr": 1, "VCRUNTIME140.dll!wcschr": 1, "api-ms-win-crt-math-l1-1-0.dll!ceilf": 1, "api-ms-win-crt-string-l1-1-0.dll!strcmp": 1, "api-ms-win-crt-math-l1-1-0.dll!_dclass": 1, "api-ms-win-crt-math-l1-1-0.dll!_fdclass": 1, "api-ms-win-crt-math-l1-1-0.dll!floor": 1, "api-ms-win-crt-heap-l1-1-0.dll!_recalloc": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\dxcompiler.dll", "sha256": "f1b24c125aa3ce8e25aed1840843bd25ebfb8584b507af1594007abb26b1ffa0", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 17438208, "processed_bytes": 17438208, "instructions": 4684323, "skipdata_bytes": 22 } ], "utc": "2026-11-11T21:41:07.031658+00:00", "instructions": 4684323, "skipdata_bytes": 22, "calls": 305005, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 3, "KERNEL32.dll!GetLastError": 75, "ADVAPI32.dll!EventRegister": 1, "ADVAPI32.dll!EventUnregister": 1, "ADVAPI32.dll!EventWriteTransfer": 1, "KERNEL32.dll!SetLastError": 16, "KERNEL32.dll!MultiByteToWideChar": 25, "KERNEL32.dll!WideCharToMultiByte": 10, "ole32.dll!CoTaskMemAlloc": 25, "ole32.dll!CoTaskMemFree": 4, "OLEAUT32.dll!SysAllocStringLen": 13, "OLEAUT32.dll!SysFreeString": 68, "KERNEL32.dll!FreeLibrary": 8, "KERNEL32.dll!LoadLibraryA": 1, "KERNEL32.dll!GetProcAddress": 7, "KERNEL32.dll!GetModuleHandleW": 3, "KERNEL32.dll!InitializeCriticalSection": 2, "KERNEL32.dll!EnterCriticalSection": 6, "KERNEL32.dll!LeaveCriticalSection": 6, "KERNEL32.dll!WakeAllConditionVariable": 3, "KERNEL32.dll!SleepConditionVariableSRW": 2, "KERNEL32.dll!CreateFileW": 7, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!ReadFile": 5, "KERNEL32.dll!CloseHandle": 10, "KERNEL32.dll!GetProcessHeap": 5, "KERNEL32.dll!HeapAlloc": 3, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapFree": 2, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!TlsGetValue": 32, "KERNEL32.dll!TlsFree": 4, "KERNEL32.dll!TlsAlloc": 3, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!GetCurrentDirectoryW": 2, "KERNEL32.dll!VirtualQuery": 2, "KERNEL32.dll!GetSystemInfo": 2, "KERNEL32.dll!DeleteCriticalSection": 10, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!FindFirstFileW": 1, "KERNEL32.dll!FindClose": 3, "KERNEL32.dll!SetFileTime": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!GetFileType": 5, "KERNEL32.dll!CreateHardLinkW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileAttributesW": 1, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!RemoveDirectoryW": 1, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!GetModuleFileNameW": 2, "KERNEL32.dll!GetTempPathW": 1, "KERNEL32.dll!CreateFileMappingW": 1, "KERNEL32.dll!MapViewOfFile": 1, "KERNEL32.dll!UnmapViewOfFile": 1, "KERNEL32.dll!GetConsoleMode": 4, "KERNEL32.dll!GetStdHandle": 8, "KERNEL32.dll!GetConsoleScreenBufferInfo": 6, "KERNEL32.dll!SetConsoleTextAttribute": 5, "OLEAUT32.dll!VariantInit": 9, "OLEAUT32.dll!SysAllocString": 26, "OLEAUT32.dll!VariantCopy": 3, "OLEAUT32.dll!SysStringLen": 4, "OLEAUT32.dll!VariantClear": 2, "KERNEL32.dll!GetNativeSystemInfo": 1, "KERNEL32.dll!GetCurrentProcess": 4, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 3, "KERNEL32.dll!WaitForSingleObject": 1, "OLEAUT32.dll!SysStringByteLen": 3, "OLEAUT32.dll!SysAllocStringByteLen": 3, "KERNEL32.dll!CompareStringOrdinal": 1, "KERNEL32.dll!QueryPerformanceCounter": 2, "KERNEL32.dll!QueryPerformanceFrequency": 1, "KERNEL32.dll!AcquireSRWLockExclusive": 4, "KERNEL32.dll!ReleaseSRWLockExclusive": 4, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!OutputDebugStringW": 1, "KERNEL32.dll!IsProcessorFeaturePresent": 5, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 5, "KERNEL32.dll!RtlVirtualUnwind": 4, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!LocalFree": 2, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!GetCurrentThreadId": 2, "KERNEL32.dll!GetCurrentProcessId": 1, "KERNEL32.dll!InitializeSListHead": 1, "KERNEL32.dll!RtlPcToFileHeader": 1, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!SetEndOfFile": 1, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!SetFilePointerEx": 5, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!WriteFile": 6, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!EncodePointer": 2, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!CompareStringW": 1, "KERNEL32.dll!FlsAlloc": 1, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 1, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetLocaleInfoW": 11, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!LoadLibraryExW": 4, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!GetACP": 3, "KERNEL32.dll!FindFirstFileExW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 2, "KERNEL32.dll!FreeEnvironmentStringsW": 3, "KERNEL32.dll!SetEnvironmentVariableW": 2, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!RtlUnwind": 1, "KERNEL32.dll!WriteConsoleW": 2, "OLEAUT32.dll!VarBstrCat": 1 }, "complete_linear_sweep": true }, { "path": "NVIDIA App\\CEF\\libcef.dll", "sha256": "29bb51e0fc7ebd1d41c7781d1068c60253647013e578053b8bb93a52ad33dca7", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 188039168, "processed_bytes": 188039168, "instructions": 51418058, "skipdata_bytes": 3913 }, { "name": ".rodata", "raw_bytes": 4608, "processed_bytes": 4608, "instructions": 1905, "skipdata_bytes": 386 }, { "name": "LZMADEC", "raw_bytes": 4608, "processed_bytes": 4608, "instructions": 1442, "skipdata_bytes": 0 }, { "name": "malloc_h", "raw_bytes": 512, "processed_bytes": 512, "instructions": 350, "skipdata_bytes": 0 } ], "utc": "2026-11-11T21:41:07.807218+00:00", "instructions": 51421755, "skipdata_bytes": 4299, "calls": 3807879, "api_reference_counts": { "KERNEL32.dll!RtlVirtualUnwind": 15, "KERNEL32.dll!TryAcquireSRWLockExclusive": 3608, "KERNEL32.dll!ReleaseSRWLockExclusive": 4036, "USER32.dll!GetWindowLongPtrW": 10, "KERNEL32.dll!GetCommandLineW": 5, "USER32.dll!MapWindowPoints": 8, "ole32.dll!CoInitialize": 1, "ole32.dll!CoUninitialize": 6, "USER32.dll!GetMenu": 2, "USER32.dll!AdjustWindowRectEx": 5, "KERNEL32.dll!GetModuleHandleW": 78, "KERNEL32.dll!GetProcAddress": 111, "KERNEL32.dll!InitializeCriticalSectionEx": 20, "KERNEL32.dll!GetLastError": 561, "KERNEL32.dll!GetProcessHeap": 9, "USER32.dll!LoadCursorW": 6, "USER32.dll!RegisterClassExW": 9, "USER32.dll!CreateWindowExW": 11, "USER32.dll!GetClientRect": 15, "USER32.dll!GetAncestor": 14, "USER32.dll!SetWindowLongPtrW": 9, "USER32.dll!PostMessageW": 9, "USER32.dll!SetFocus": 5, "USER32.dll!SetWindowPos": 23, "USER32.dll!DefWindowProcW": 19, "USER32.dll!MapVirtualKeyW": 5, "USER32.dll!IsWindowEnabled": 5, "dwmapi.dll!DwmGetWindowAttribute": 5, "dwmapi.dll!DwmSetWindowAttribute": 3, "USER32.dll!IsWindowVisible": 14, "USER32.dll!IsIconic": 7, "USER32.dll!GetWindowRect": 27, "USER32.dll!IsZoomed": 3, "USER32.dll!GetWindowPlacement": 5, "USER32.dll!BeginDeferWindowPos": 1, "USER32.dll!EndDeferWindowPos": 1, "KERNEL32.dll!GetLogicalProcessorInformation": 4, "KERNEL32.dll!InitializeSRWLock": 10, "KERNEL32.dll!InitializeConditionVariable": 11, "KERNEL32.dll!AcquireSRWLockExclusive": 69, "KERNEL32.dll!SleepConditionVariableSRW": 8, "KERNEL32.dll!WakeConditionVariable": 35, "KERNEL32.dll!GetModuleHandleA": 12, "KERNEL32.dll!VirtualAlloc": 28, "KERNEL32.dll!VirtualFree": 28, "KERNEL32.dll!WideCharToMultiByte": 20, "KERNEL32.dll!GetCurrentThread": 30, "KERNEL32.dll!LocalFree": 51, "KERNEL32.dll!GetCurrentProcessId": 66, "KERNEL32.dll!GetCurrentThreadId": 69, "KERNEL32.dll!TlsGetValue": 27, "KERNEL32.dll!SetLastError": 205, "KERNEL32.dll!GetCurrentProcess": 127, "KERNEL32.dll!DuplicateHandle": 56, "KERNEL32.dll!WriteFile": 25, "KERNEL32.dll!ReadFile": 19, "KERNEL32.dll!CancelIo": 5, "KERNEL32.dll!GetSystemDirectoryW": 6, "KERNEL32.dll!GetComputerNameExW": 4, "KERNEL32.dll!DeleteCriticalSection": 130, "KERNEL32.dll!EnterCriticalSection": 593, "KERNEL32.dll!LeaveCriticalSection": 626, "WINMM.dll!waveOutGetNumDevs": 1, "ole32.dll!CoCreateInstance": 83, "ole32.dll!CoInitializeEx": 6, "KERNEL32.dll!SetEvent": 12, "KERNEL32.dll!CreateEventW": 21, "KERNEL32.dll!CloseHandle": 103, "KERNEL32.dll!FindFirstFileA": 1, "KERNEL32.dll!VerifyVersionInfoW": 14, "ADVAPI32.dll!RegOpenKeyExW": 23, "ADVAPI32.dll!RegQueryValueExA": 3, "ADVAPI32.dll!RegCloseKey": 41, "KERNEL32.dll!WaitForMultipleObjects": 9, "KERNEL32.dll!LoadLibraryW": 28, "KERNEL32.dll!CreateMutexW": 7, "USER32.dll!RegisterDeviceNotificationW": 3, "ole32.dll!CoCreateFreeThreadedMarshaler": 3, "USER32.dll!ClientToScreen": 9, "USER32.dll!GetSystemMetrics": 21, "USER32.dll!GetCursorPos": 16, "USER32.dll!ScreenToClient": 13, "USER32.dll!GetDoubleClickTime": 2, "KERNEL32.dll!VirtualProtectEx": 3, "KERNEL32.dll!WriteProcessMemory": 10, "KERNEL32.dll!ReadProcessMemory": 17, "KERNEL32.dll!VirtualProtect": 10, "KERNEL32.dll!RtlAddFunctionTable": 1, "KERNEL32.dll!RtlDeleteFunctionTable": 1, "KERNEL32.dll!LoadLibraryExW": 29, "KERNEL32.dll!AddVectoredExceptionHandler": 2, "USERENV.dll!RegisterGPNotification": 2, "USERENV.dll!UnregisterGPNotification": 2, "USERENV.dll!GetProfileType": 2, "COMCTL32.dll!InitCommonControlsEx": 1, "ADVAPI32.dll!GetSecurityDescriptorDacl": 2, "KERNEL32.dll!CreateFileW": 61, "KERNEL32.dll!GetFileInformationByHandle": 7, "KERNEL32.dll!GetFinalPathNameByHandleW": 2, "ADVAPI32.dll!SetSecurityInfo": 2, "USER32.dll!GetThreadDesktop": 4, "WS2_32.dll!WSAGetLastError": 65, "WS2_32.dll!closesocket": 10, "KERNEL32.dll!GetProcessTimes": 5, "USER32.dll!SystemParametersInfoW": 16, "KERNEL32.dll!GetModuleFileNameW": 13, "USER32.dll!IsWindow": 36, "SHELL32.dll!SHGetSpecialFolderPathW": 1, "USER32.dll!GetDesktopWindow": 11, "USER32.dll!NotifyWinEvent": 8, "USER32.dll!RegisterTouchWindow": 2, "USER32.dll!DestroyWindow": 10, "USER32.dll!GetParent": 35, "USER32.dll!SetParent": 3, "USER32.dll!ShowWindow": 6, "USER32.dll!TrackMouseEvent": 2, "USER32.dll!GetCapture": 3, "USER32.dll!WindowFromPoint": 8, "USER32.dll!GetClassInfoExW": 4, "USER32.dll!GetWindowLongW": 34, "USER32.dll!SetWindowLongW": 8, "USER32.dll!BeginPaint": 3, "USER32.dll!EndPaint": 3, "USER32.dll!CallWindowProcW": 2, "USER32.dll!EnumThreadWindows": 4, "USER32.dll!GetWindow": 12, "KERNEL32.dll!GlobalMemoryStatusEx": 5, "KERNEL32.dll!GetTimeZoneInformation": 6, "KERNEL32.dll!PowerCreateRequest": 1, "KERNEL32.dll!PowerSetRequest": 1, "KERNEL32.dll!PowerClearRequest": 2, "USER32.dll!UnregisterPowerSettingNotification": 5, "KERNEL32.dll!GetSystemPowerStatus": 3, "CRYPT32.dll!CertCloseStore": 26, "KERNEL32.dll!WaitForSingleObject": 39, "KERNEL32.dll!ReleaseMutex": 4, "KERNEL32.dll!GetComputerNameW": 4, "ADVAPI32.dll!LookupAccountNameW": 4, "KERNEL32.dll!GetVolumeInformationW": 3, "KERNEL32.dll!SetPriorityClass": 4, "USER32.dll!PostThreadMessageW": 1, "USER32.dll!PeekMessageW": 6, "KERNEL32.dll!SetConsoleCtrlHandler": 4, "KERNEL32.dll!QueryFullProcessImageNameA": 3, "KERNEL32.dll!GetProcessMitigationPolicy": 5, "chrome_elf.dll!GetInstallDetailsPayload": 1, "KERNEL32.dll!GetTempPathA": 3, "KERNEL32.dll!InitializeCriticalSection": 80, "KERNEL32.dll!OpenThread": 6, "KERNEL32.dll!CreateThread": 10, "KERNEL32.dll!GetThreadPriority": 6, "KERNEL32.dll!SetThreadPriority": 16, "KERNEL32.dll!ResumeThread": 6, "KERNEL32.dll!GetTempFileNameA": 2, "KERNEL32.dll!GetCommandLineA": 3, "KERNEL32.dll!DebugBreak": 2, "KERNEL32.dll!GetStdHandle": 9, "KERNEL32.dll!GetConsoleScreenBufferInfo": 1, "KERNEL32.dll!WakeAllConditionVariable": 14, "KERNEL32.dll!HeapLock": 1, "KERNEL32.dll!HeapWalk": 1, "KERNEL32.dll!HeapUnlock": 1, "KERNEL32.dll!GetModuleHandleExA": 2, "ole32.dll!CoSetProxyBlanket": 8, "KERNEL32.dll!GetVersionExW": 6, "KERNEL32.dll!GetProductInfo": 2, "KERNEL32.dll!GetNativeSystemInfo": 7, "KERNEL32.dll!IsWow64Process": 2, "api-ms-win-core-winrt-l1-1-0.dll!RoGetActivationFactory": 2, "ole32.dll!CoTaskMemAlloc": 25, "ole32.dll!PropVariantClear": 33, "SHLWAPI.dll!#437": 1, "USER32.dll!RemovePropW": 4, "USER32.dll!SetPropW": 3, "USER32.dll!SetProcessDPIAware": 1, "USER32.dll!GetUserObjectInformationW": 4, "USER32.dll!GetPointerDevices": 2, "USER32.dll!RegisterPointerDeviceNotifications": 1, "KERNEL32.dll!ProcessIdToSessionId": 3, "KERNEL32.dll!ExpandEnvironmentStringsW": 8, "ADVAPI32.dll!IsValidSid": 10, "ADVAPI32.dll!GetLengthSid": 11, "ADVAPI32.dll!EqualSid": 2, "ntdll.dll!NtQueryObject": 2, "ADVAPI32.dll!IsValidSecurityDescriptor": 1, "ADVAPI32.dll!GetSecurityDescriptorControl": 1, "ADVAPI32.dll!GetSecurityDescriptorOwner": 1, "ADVAPI32.dll!GetSecurityDescriptorGroup": 1, "ADVAPI32.dll!GetSecurityDescriptorSacl": 1, "ADVAPI32.dll!GetNamedSecurityInfoW": 2, "ADVAPI32.dll!GetSecurityInfo": 1, "ADVAPI32.dll!SetNamedSecurityInfoW": 2, "ADVAPI32.dll!MapGenericMask": 1, "ADVAPI32.dll!AccessCheck": 1, "OLEAUT32.dll!VariantClear": 8, "OLEAUT32.dll!SysAllocStringLen": 3, "OLEAUT32.dll!SysFreeString": 7, "OLEAUT32.dll!SysStringLen": 11, "ADVAPI32.dll!RegNotifyChangeKeyValue": 1, "ADVAPI32.dll!RegCreateKeyExW": 4, "ADVAPI32.dll!RegQueryValueExW": 12, "ADVAPI32.dll!RegDeleteKeyExW": 3, "ADVAPI32.dll!RegDeleteValueW": 2, "ADVAPI32.dll!RegSetValueExW": 6, "ADVAPI32.dll!RegQueryInfoKeyW": 11, "ADVAPI32.dll!RegEnumValueW": 2, "ADVAPI32.dll!RegEnumKeyExW": 2, "KERNEL32.dll!RegisterWaitForSingleObject": 8, "USER32.dll!FindWindowExW": 2, "USER32.dll!UnregisterClassW": 5, "api-ms-win-core-winrt-l1-1-0.dll!RoActivateInstance": 1, "ADVAPI32.dll!OpenProcessToken": 7, "ADVAPI32.dll!DuplicateTokenEx": 3, "ADVAPI32.dll!OpenThreadToken": 2, "ADVAPI32.dll!SetTokenInformation": 2, "ADVAPI32.dll!GetTokenInformation": 20, "ADVAPI32.dll!CreateRestrictedToken": 1, "ADVAPI32.dll!LookupPrivilegeValueW": 2, "ADVAPI32.dll!AdjustTokenPrivileges": 2, "KERNEL32.dll!GetSystemTimeAsFileTime": 17, "KERNEL32.dll!QueryPerformanceCounter": 41, "WINMM.dll!timeEndPeriod": 2, "WINMM.dll!timeBeginPeriod": 2, "KERNEL32.dll!SystemTimeToFileTime": 5, "KERNEL32.dll!TzSpecificLocalTimeToSystemTime": 2, "KERNEL32.dll!FileTimeToSystemTime": 7, "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 4, "KERNEL32.dll!QueryPerformanceFrequency": 27, "api-ms-win-core-realtime-l1-1-1.dll!QueryUnbiasedInterruptTimePrecise": 1, "KERNEL32.dll!QueryThreadCycleTime": 3, "KERNEL32.dll!IsDebuggerPresent": 8, "KERNEL32.dll!RaiseException": 44, "KERNEL32.dll!GetThreadId": 2, "KERNEL32.dll!SetThreadInformation": 3, "KERNEL32.dll!GetLogicalProcessorInformationEx": 6, "KERNEL32.dll!GetDiskFreeSpaceExW": 3, "KERNEL32.dll!ConnectNamedPipe": 5, "KERNEL32.dll!GetOverlappedResult": 7, "KERNEL32.dll!MultiByteToWideChar": 30, "KERNEL32.dll!OpenProcess": 11, "KERNEL32.dll!TerminateProcess": 23, "KERNEL32.dll!GetExitCodeProcess": 5, "KERNEL32.dll!GetPriorityClass": 2, "KERNEL32.dll!SetProcessInformation": 1, "KERNEL32.dll!QueryProcessCycleTime": 1, "KERNEL32.dll!GetProcessId": 2, "KERNEL32.dll!HeapSetInformation": 3, "KERNEL32.dll!CreateProcessW": 2, "KERNEL32.dll!GetEnvironmentStringsW": 4, "KERNEL32.dll!FreeEnvironmentStringsW": 5, "USER32.dll!AllowSetForegroundWindow": 2, "ADVAPI32.dll!CreateProcessAsUserW": 2, "KERNEL32.dll!AssignProcessToJobObject": 1, "KERNEL32.dll!FreeLibrary": 38, "KERNEL32.dll!GetModuleHandleExW": 8, "USER32.dll!GetQueueStatus": 2, "USER32.dll!PostQuitMessage": 1, "USER32.dll!TranslateMessage": 2, "USER32.dll!DispatchMessageW": 2, "KERNEL32.dll!CreateIoCompletionPort": 8, "ADVAPI32.dll!InitializeAcl": 2, "ADVAPI32.dll!InitializeSecurityDescriptor": 1, "ADVAPI32.dll!SetSecurityDescriptorDacl": 1, "KERNEL32.dll!CreateFileMappingW": 8, "KERNEL32.dll!RtlCaptureStackBackTrace": 2, "KERNEL32.dll!MapViewOfFile": 11, "KERNEL32.dll!UnmapViewOfFile": 9, "KERNEL32.dll!GetFileSizeEx": 4, "KERNEL32.dll!SetFilePointerEx": 10, "KERNEL32.dll!SetEndOfFile": 8, "KERNEL32.dll!LockFileEx": 4, "KERNEL32.dll!UnlockFileEx": 4, "KERNEL32.dll!FlushFileBuffers": 8, "KERNEL32.dll!GetFileAttributesW": 30, "KERNEL32.dll!DeleteFileW": 10, "KERNEL32.dll!RemoveDirectoryW": 7, "KERNEL32.dll!SetFileAttributesW": 8, "KERNEL32.dll!ReplaceFileW": 1, "KERNEL32.dll!MoveFileW": 7, "KERNEL32.dll!GetTempPathW": 2, "SHELL32.dll!SHGetFolderPathW": 18, "KERNEL32.dll!GetLongPathNameW": 6, "KERNEL32.dll!CreateDirectoryW": 8, "KERNEL32.dll!GetLogicalDriveStringsW": 1, "KERNEL32.dll!GetFileAttributesExW": 3, "KERNEL32.dll!GetCurrentDirectoryW": 6, "KERNEL32.dll!SetCurrentDirectoryW": 1, "KERNEL32.dll!GetVolumePathNameW": 2, "WS2_32.dll!ioctlsocket": 3, "KERNEL32.dll!PrefetchVirtualMemory": 1, "SHELL32.dll!#680": 4, "KERNEL32.dll!ReadDirectoryChangesW": 3, "KERNEL32.dll!FindClose": 7, "SHLWAPI.dll!PathMatchSpecW": 1, "KERNEL32.dll!FindFirstFileExW": 4, "KERNEL32.dll!GetLocalTime": 1, "KERNEL32.dll!GetTickCount": 5, "KERNEL32.dll!OutputDebugStringA": 5, "KERNEL32.dll!SetEnvironmentVariableW": 4, "KERNEL32.dll!GetEnvironmentVariableW": 17, "SHELL32.dll!CommandLineToArgvW": 1, "KERNEL32.dll!TlsSetValue": 9, "KERNEL32.dll!CreateNamedPipeW": 5, "WS2_32.dll!WSAStartup": 1, "IPHLPAPI.DLL!GetAdaptersAddresses": 2, "WS2_32.dll!WSASocketW": 2, "WS2_32.dll!setsockopt": 20, "KERNEL32.dll!FormatMessageA": 4, "KERNEL32.dll!InitOnceBeginInitialize": 27, "KERNEL32.dll!InitOnceComplete": 20, "KERNEL32.dll!GetModuleFileNameA": 2, "KERNEL32.dll!LoadLibraryA": 5, "USER32.dll!GetWindowThreadProcessId": 19, "DWrite.dll!DWriteCreateFactory": 3, "USER32.dll!GetDC": 18, "GDI32.dll!GetDeviceCaps": 13, "USER32.dll!ReleaseDC": 23, "GDI32.dll!CreateFontIndirectW": 2, "GDI32.dll!SelectObject": 31, "GDI32.dll!GetObjectW": 7, "GDI32.dll!GetTextMetricsW": 3, "GDI32.dll!DeleteObject": 59, "USER32.dll!GetSysColor": 1, "USER32.dll!MonitorFromWindow": 35, "USER32.dll!EnumDisplayMonitors": 4, "USER32.dll!GetMonitorInfoW": 27, "USER32.dll!EnumDisplaySettingsW": 3, "USER32.dll!DisplayConfigGetDeviceInfo": 2, "USER32.dll!EnumDisplayDevicesW": 5, "USER32.dll!MonitorFromPoint": 3, "USER32.dll!MonitorFromRect": 9, "USER32.dll!DestroyIcon": 29, "SHELL32.dll!SHGetPropertyStoreForWindow": 2, "ole32.dll!OleInitialize": 1, "ole32.dll!OleUninitialize": 1, "USER32.dll!EnableWindow": 5, "USER32.dll!GetMessageExtraInfo": 2, "USER32.dll!UnregisterDeviceNotification": 3, "KERNEL32.dll!VirtualQuery": 6, "KERNEL32.dll!GetSystemInfo": 13, "KERNEL32.dll!CreateSemaphoreA": 2, "KERNEL32.dll!TryEnterCriticalSection": 4, "OLEAUT32.dll!SysAllocString": 61, "USER32.dll!LoadIconW": 3, "USER32.dll!LoadImageW": 4, "KERNEL32.dll!TlsAlloc": 7, "USER32.dll!GetLastInputInfo": 1, "UxTheme.dll!GetThemePartSize": 1, "UxTheme.dll!CloseThemeData": 48, "USER32.dll!GetCaretBlinkTime": 1, "GDI32.dll!CreateRectRgn": 7, "USER32.dll!GetWindowRgn": 3, "GDI32.dll!EqualRgn": 1, "USER32.dll!SetWindowRgn": 2, "GDI32.dll!CombineRgn": 2, "USER32.dll!OffsetRect": 3, "GDI32.dll!CreateRectRgnIndirect": 2, "USER32.dll!SetWindowPlacement": 1, "USER32.dll!SetForegroundWindow": 9, "USER32.dll!GetActiveWindow": 6, "USER32.dll!SetCursor": 2, "USER32.dll!SendMessageW": 18, "USER32.dll!RedrawWindow": 3, "USER32.dll!GetPointerType": 3, "USER32.dll!IsChild": 5, "USER32.dll!GetForegroundWindow": 8, "USER32.dll!GetMessageTime": 7, "dwmapi.dll!DwmDefWindowProc": 2, "USER32.dll!GetSystemMenu": 4, "dwmapi.dll!DwmExtendFrameIntoClientArea": 5, "GDI32.dll!CreateSolidBrush": 6, "USER32.dll!FillRect": 10, "USER32.dll!EnumChildWindows": 1, "USER32.dll!GetWindowDC": 2, "GDI32.dll!SelectClipRgn": 3, "GDI32.dll!GetRgnBox": 2, "USER32.dll!IntersectRect": 2, "USER32.dll!IsRectEmpty": 3, "GDI32.dll!GetStockObject": 4, "ole32.dll!CoTaskMemFree": 59, "ADVAPI32.dll!GetUserNameW": 1, "KERNEL32.dll!SetUnhandledExceptionFilter": 7, "KERNEL32.dll!SetProcessShutdownParameters": 1, "KERNEL32.dll!SetErrorMode": 1, "ADVAPI32.dll!IsValidAcl": 1, "ADVAPI32.dll!AddMandatoryAce": 1, "ADVAPI32.dll!BuildTrusteeWithSidW": 1, "ADVAPI32.dll!SetEntriesInAclW": 2, "KERNEL32.dll!DeleteProcThreadAttributeList": 1, "KERNEL32.dll!InitializeProcThreadAttributeList": 2, "KERNEL32.dll!UpdateProcThreadAttribute": 1, "ADVAPI32.dll!UnregisterTraceGuids": 2, "ADVAPI32.dll!RegisterTraceGuidsW": 1, "KERNEL32.dll!FindResourceW": 4, "KERNEL32.dll!SizeofResource": 4, "KERNEL32.dll!LoadResource": 4, "KERNEL32.dll!LockResource": 3, "KERNEL32.dll!Sleep": 26, "KERNEL32.dll!FlushViewOfFile": 2, "KERNEL32.dll!GetWindowsDirectoryW": 1, "USER32.dll!RegisterSuspendResumeNotification": 1, "KERNEL32.dll!AcquireSRWLockShared": 2, "KERNEL32.dll!ReleaseSRWLockShared": 2, "KERNEL32.dll!InitOnceExecuteOnce": 131, "KERNEL32.dll!GetLocaleInfoEx": 1, "WS2_32.dll!WSACreateEvent": 5, "WS2_32.dll!WSAEventSelect": 7, "WS2_32.dll!htonl": 37, "WS2_32.dll!connect": 4, "WS2_32.dll!WSACloseEvent": 6, "WS2_32.dll!WSAEnumNetworkEvents": 5, "WS2_32.dll!shutdown": 1, "WS2_32.dll!bind": 4, "WS2_32.dll!listen": 2, "WS2_32.dll!accept": 2, "WS2_32.dll!recv": 8, "WS2_32.dll!WSASend": 1, "WS2_32.dll!getsockname": 4, "WS2_32.dll!WSAIoctl": 5, "CRYPT32.dll!CertOpenStore": 7, "CRYPT32.dll!CertAddStoreToCollection": 3, "CRYPT32.dll!CertControlStore": 3, "WS2_32.dll!WSALookupServiceBeginW": 2, "WS2_32.dll!WSALookupServiceNextW": 2, "WS2_32.dll!WSALookupServiceEnd": 3, "IPHLPAPI.DLL!CancelIPChangeNotify": 1, "IPHLPAPI.DLL!NotifyAddrChange": 1, "GDI32.dll!SetWorldTransform": 6, "GDI32.dll!CreateDIBSection": 9, "GDI32.dll!CreateDCW": 4, "GDI32.dll!GetICMProfileW": 1, "GDI32.dll!DeleteDC": 26, "KERNEL32.dll!GetThreadPreferredUILanguages": 2, "USER32.dll!GetKeyState": 14, "KERNEL32.dll!GetQueuedCompletionStatus": 6, "KERNEL32.dll!TerminateJobObject": 4, "KERNEL32.dll!PostQueuedCompletionStatus": 5, "KERNEL32.dll!SetInformationJobObject": 5, "USER32.dll!GetPropW": 3, "USER32.dll!UpdateLayeredWindow": 1, "USER32.dll!GetKeyboardLayout": 4, "USER32.dll!RegisterWindowMessageW": 1, "KERNEL32.dll!GetThreadTimes": 3, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 16, "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 3, "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1, "SETUPAPI.dll!SetupDiOpenDevRegKey": 3, "ole32.dll!CLSIDFromString": 7, "SETUPAPI.dll!SetupDiGetDeviceInterfaceDetailW": 11, "SETUPAPI.dll!SetupDiGetClassDevsW": 13, "SETUPAPI.dll!SetupDiEnumDeviceInterfaces": 5, "SETUPAPI.dll!SetupDiGetDevicePropertyW": 10, "GDI32.dll!CreateCompatibleDC": 12, "GDI32.dll!SetGraphicsMode": 3, "KERNEL32.dll!GetUserGeoID": 2, "KERNEL32.dll!GetGeoInfoW": 2, "USER32.dll!GetFocus": 3, "USER32.dll!SetWindowDisplayAffinity": 1, "KERNEL32.dll!GetFileType": 15, "KERNEL32.dll!GetFileInformationByHandleEx": 1, "ADVAPI32.dll!ImpersonateNamedPipeClient": 1, "ADVAPI32.dll!RevertToSelf": 3, "USER32.dll!RegisterClassW": 1, "SHELL32.dll!#4": 1, "KERNEL32.dll!GetStartupInfoW": 6, "KERNEL32.dll!lstrcmpiA": 1, "USER32.dll!FindWindowW": 8, "USER32.dll!GetTopWindow": 1, "USER32.dll!SendInput": 4, "USER32.dll!SetWindowsHookExW": 4, "USER32.dll!CallNextHookEx": 5, "USER32.dll!UnhookWindowsHookEx": 7, "USER32.dll!GetLayeredWindowAttributes": 2, "USER32.dll!SetWinEventHook": 10, "USER32.dll!EnumWindows": 8, "ADVAPI32.dll!EventRegister": 2, "ADVAPI32.dll!EventSetInformation": 2, "USER32.dll!MsgWaitForMultipleObjectsEx": 3, "WINMM.dll!timeGetTime": 2, "KERNEL32.dll!GetDynamicTimeZoneInformation": 1, "WS2_32.dll!WSAResetEvent": 6, "KERNEL32.dll!SetFilePointer": 6, "KERNEL32.dll!SetDefaultDllDirectories": 1, "KERNEL32.dll!SetHandleInformation": 2, "ADVAPI32.dll!SetThreadToken": 1, "USER32.dll!CloseDesktop": 2, "USER32.dll!CloseWindowStation": 1, "USER32.dll!SetRect": 1, "KERNEL32.dll!DeviceIoControl": 23, "USER32.dll!GetKeyboardLayoutList": 6, "ole32.dll!RevokeDragDrop": 1, "KERNEL32.dll!SetNamedPipeHandleState": 2, "KERNEL32.dll!TransactNamedPipe": 1, "KERNEL32.dll!WaitNamedPipeW": 2, "ADVAPI32.dll!BuildExplicitAccessWithNameW": 1, "ADVAPI32.dll!BuildSecurityDescriptorW": 1, "KERNEL32.dll!GetLocaleInfoW": 18, "KERNEL32.dll!LocaleNameToLCID": 2, "KERNEL32.dll!GetACP": 7, "USER32.dll!RegisterPowerSettingNotification": 1, "api-ms-win-core-winrt-l1-1-0.dll!RoInitialize": 1, "api-ms-win-core-winrt-l1-1-0.dll!RoUninitialize": 1, "KERNEL32.dll!VirtualAllocEx": 3, "KERNEL32.dll!VirtualFreeEx": 1, "USERENV.dll!DeriveAppContainerSidFromAppContainerName": 2, "ADVAPI32.dll!FreeSid": 4, "KERNEL32.dll!CreateJobObjectW": 2, "KERNEL32.dll!QueryInformationJobObject": 1, "USER32.dll!GetProcessWindowStation": 2, "USER32.dll!CreateWindowStationW": 2, "USER32.dll!SetProcessWindowStation": 2, "USER32.dll!CreateDesktopW": 2, "ole32.dll!RegisterDragDrop": 1, "KERNEL32.dll!CreateSemaphoreW": 5, "KERNEL32.dll!ReleaseSemaphore": 12, "KERNEL32.dll!FormatMessageW": 7, "WINHTTP.dll!WinHttpGetIEProxyConfigForCurrentUser": 2, "KERNEL32.dll!GlobalFree": 14, "KERNEL32.dll!GetFirmwareType": 1, "ole32.dll!StringFromCLSID": 1, "bcryptprimitives.dll!ProcessPrng": 1, "KERNEL32.dll!UnregisterWaitEx": 2, "KERNEL32.dll!ResetEvent": 5, "USER32.dll!KillTimer": 2, "WS2_32.dll!WSADuplicateSocketW": 1, "KERNEL32.dll!TryAcquireSRWLockShared": 1, "USER32.dll!GetWindowTextLengthW": 5, "USER32.dll!GetWindowTextW": 6, "USER32.dll!SetWindowTextW": 1, "USER32.dll!QueryDisplayConfig": 1, "dwmapi.dll!DwmGetCompositionTimingInfo": 2, "KERNEL32.dll!InitializeSListHead": 2, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!HeapAlloc": 15, "KERNEL32.dll!HeapFree": 15, "KERNEL32.dll!FlushInstructionCache": 1, "KERNEL32.dll!InterlockedPushEntrySList": 3, "KERNEL32.dll!InterlockedPopEntrySList": 2, "KERNEL32.dll!DecodePointer": 1, "KERNEL32.dll!LoadLibraryExA": 3, "KERNEL32.dll!EncodePointer": 6, "KERNEL32.dll!IsProcessorFeaturePresent": 6, "KERNEL32.dll!RtlCaptureContext": 4, "KERNEL32.dll!RtlLookupFunctionEntry": 6, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!RtlPcToFileHeader": 4, "KERNEL32.dll!RtlUnwindEx": 3, "KERNEL32.dll!InterlockedFlushSList": 1, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetCPInfo": 4, "KERNEL32.dll!ExitThread": 2, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetDriveTypeW": 3, "KERNEL32.dll!PeekNamedPipe": 3, "KERNEL32.dll!SetStdHandle": 2, "KERNEL32.dll!GetFullPathNameW": 11, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadConsoleW": 2, "KERNEL32.dll!GetConsoleOutputCP": 1, "KERNEL32.dll!GetStringTypeW": 2, "KERNEL32.dll!CompareStringW": 4, "KERNEL32.dll!FlsAlloc": 2, "KERNEL32.dll!FlsFree": 1, "KERNEL32.dll!FlsGetValue": 1, "KERNEL32.dll!FlsSetValue": 2, "KERNEL32.dll!GetDateFormatW": 2, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 4, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!LCMapStringW": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!FindNextFileW": 2, "KERNEL32.dll!RtlUnwind": 2, "KERNEL32.dll!TlsFree": 3, "KERNEL32.dll!WriteConsoleW": 3, "USER32.dll!MessageBoxW": 3, "KERNEL32.dll!HeapDestroy": 5, "KERNEL32.dll!HeapReAlloc": 2, "KERNEL32.dll!HeapSize": 2, "dbghelp.dll!SymFromAddr": 2, "KERNEL32.dll!CreateEventA": 1, "WS2_32.dll!getaddrinfo": 2, "WS2_32.dll!freeaddrinfo": 2, "WS2_32.dll!socket": 4, "WS2_32.dll!ntohs": 25, "WS2_32.dll!htons": 12, "WS2_32.dll!ntohl": 37, "WINMM.dll!waveInGetNumDevs": 1, "KERNEL32.dll!LocalAlloc": 1, "WINMM.dll!waveOutOpen": 1, "WINMM.dll!waveOutPause": 1, "WINMM.dll!waveOutRestart": 1, "WINMM.dll!waveOutReset": 2, "WINMM.dll!waveOutClose": 1, "USER32.dll!RegisterRawInputDevices": 3, "KERNEL32.dll!GetSystemTime": 5, "PROPSYS.dll!PSCreateMemoryPropertyStore": 3, "ole32.dll!PropVariantCopy": 1, "KERNEL32.dll!SuspendThread": 4, "KERNEL32.dll!GetThreadContext": 4, "ADVAPI32.dll!EventWriteTransfer": 2, "SHELL32.dll!SHCreateItemFromParsingName": 4, "USERENV.dll!EnterCriticalPolicySection": 2, "USERENV.dll!LeaveCriticalPolicySection": 2, "KERNEL32.dll!CancelIoEx": 1, "USER32.dll!ClipCursor": 3, "KERNEL32.dll!CheckRemoteDebuggerPresent": 1, "OLEAUT32.dll!LoadRegTypeLib": 1, "OLEAUT32.dll!LoadTypeLib": 1, "USER32.dll!CharNextW": 2, "KERNEL32.dll!lstrcmpiW": 20, "ole32.dll!CoTaskMemRealloc": 1, "OLEAUT32.dll!VarUI4FromStr": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "KERNEL32.dll!LCIDToLocaleName": 1, "KERNEL32.dll!CreateMemoryResourceNotification": 2, "SETUPAPI.dll!SetupDiOpenDeviceInterfaceW": 4, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 2, "KERNEL32.dll!SetCommTimeouts": 1, "KERNEL32.dll!ClearCommError": 1, "KERNEL32.dll!PurgeComm": 3, "KERNEL32.dll!GetCommState": 2, "KERNEL32.dll!SetCommState": 1, "KERNEL32.dll!GetCommModemStatus": 1, "KERNEL32.dll!EscapeCommFunction": 3, "KERNEL32.dll!GetMaximumProcessorGroupCount": 1, "CRYPT32.dll!CryptQueryObject": 1, "CRYPT32.dll!CryptMsgGetParam": 2, "CRYPT32.dll!CertFindCertificateInStore": 2, "CRYPT32.dll!CertGetNameStringW": 2, "CRYPT32.dll!CertFreeCertificateContext": 6, "CRYPT32.dll!CryptMsgClose": 3, "KERNEL32.dll!GetNamedPipeServerProcessId": 1, "SHELL32.dll!SHGetFileInfoW": 2, "SHELL32.dll!SHChangeNotify": 17, "KERNEL32.dll!FindFirstFileW": 3, "ADVAPI32.dll!RegGetValueW": 1, "ADVAPI32.dll!GetSidSubAuthorityCount": 2, "ADVAPI32.dll!GetSidSubAuthority": 2, "SHELL32.dll!SHQueryUserNotificationState": 1, "KERNEL32.dll!AttachConsole": 2, "KERNEL32.dll!GetConsoleDisplayMode": 1, "KERNEL32.dll!FreeConsole": 2, "USER32.dll!EqualRect": 1, "OLEAUT32.dll!SafeArrayGetDim": 15, "OLEAUT32.dll!SafeArrayGetVartype": 18, "OLEAUT32.dll!SafeArrayAccessData": 21, "OLEAUT32.dll!SafeArrayGetLBound": 17, "OLEAUT32.dll!SafeArrayGetUBound": 17, "GDI32.dll!SaveDC": 3, "GDI32.dll!IntersectClipRect": 2, "GDI32.dll!RestoreDC": 2, "GDI32.dll!StretchDIBits": 5, "ADVAPI32.dll!CryptAcquireContextW": 1, "ADVAPI32.dll!CryptGenRandom": 1, "ADVAPI32.dll!CryptReleaseContext": 4, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindNextFileA": 1, "GDI32.dll!CreateFontIndirectA": 2, "GDI32.dll!GetOutlineTextMetricsW": 2, "GDI32.dll!GetFontData": 3, "GDI32.dll!GetCharWidthW": 2, "GDI32.dll!GetObjectType": 2, "GDI32.dll!SetStretchBltMode": 4, "GDI32.dll!CreateBitmap": 4, "GDI32.dll!SetDIBitsToDevice": 2, "GDI32.dll!GetClipBox": 1, "GDI32.dll!MoveToEx": 3, "GDI32.dll!LineTo": 3, "GDI32.dll!SetMiterLimit": 1, "GDI32.dll!SetPolyFillMode": 3, "GDI32.dll!StrokeAndFillPath": 1, "GDI32.dll!FillPath": 2, "GDI32.dll!StrokePath": 1, "GDI32.dll!ExtCreatePen": 1, "GDI32.dll!BeginPath": 1, "GDI32.dll!EndPath": 1, "GDI32.dll!CloseFigure": 1, "GDI32.dll!PolyBezierTo": 1, "GDI32.dll!SelectClipPath": 2, "GDI32.dll!WidenPath": 1, "GDI32.dll!CreatePen": 1, "GDI32.dll!CreateCompatibleBitmap": 2, "GDI32.dll!BitBlt": 5, "GDI32.dll!GetDIBits": 4, "KERNEL32.dll!GetSystemDirectoryA": 1, "GDI32.dll!GetClipRgn": 1, "GDI32.dll!GetRegionData": 2, "GDI32.dll!GdiComment": 1, "KERNEL32.dll!GetWindowsDirectoryA": 1, "GDI32.dll!EnumFontFamiliesExA": 2, "GDI32.dll!CreateFontA": 3, "GDI32.dll!GetTextFaceA": 1, "GDI32.dll!EnumFontFamiliesExW": 1, "KERNEL32.dll!FindFirstVolumeW": 2, "KERNEL32.dll!FindVolumeClose": 3, "KERNEL32.dll!FindNextVolumeW": 1, "KERNEL32.dll!EnumResourceNamesW": 1, "USER32.dll!LoadStringW": 1, "KERNEL32.dll!WaitForSingleObjectEx": 5, "KERNEL32.dll!SwitchToThread": 1, "PROPSYS.dll!InitPropVariantFromCLSID": 1, "USER32.dll!GetPointerDevice": 1, "OLEAUT32.dll!VariantCopy": 3, "PROPSYS.dll!VariantCompare": 1, "OLEAUT32.dll!SysAllocStringByteLen": 1, "OLEAUT32.dll!SysStringByteLen": 1, "KERNEL32.dll!AllocConsole": 2, "SHELL32.dll!ShellExecuteExW": 3, "USER32.dll!SetTimer": 1, "KERNEL32.dll!SetFileTime": 5, "KERNEL32.dll!SetFileInformationByHandle": 1, "KERNEL32.dll!MoveFileExW": 3, "KERNEL32.dll!CreateHardLinkW": 2, "KERNEL32.dll!CopyFileW": 1, "KERNEL32.dll!HeapCreate": 2, "ADVAPI32.dll!RegisterEventSourceA": 1, "ADVAPI32.dll!ReportEventA": 1, "ADVAPI32.dll!DeregisterEventSource": 1, "KERNEL32.dll!GetCurrentProcessorNumber": 4, "ADVAPI32.dll!CryptGetProvParam": 2, "CRYPT32.dll!CryptAcquireCertificatePrivateKey": 1, "ADVAPI32.dll!CryptDestroyHash": 3, "ADVAPI32.dll!CryptCreateHash": 1, "ADVAPI32.dll!CryptGetHashParam": 1, "ADVAPI32.dll!CryptSetHashParam": 1, "ADVAPI32.dll!CryptSignHashW": 2, "WS2_32.dll!gethostname": 1, "WS2_32.dll!getsockopt": 5, "WS2_32.dll!getpeername": 2, "WS2_32.dll!recvfrom": 2, "WS2_32.dll!send": 1, "WS2_32.dll!sendto": 2, "WS2_32.dll!WSAWaitForMultipleEvents": 1, "WS2_32.dll!WSASetEvent": 1, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!GetEnvironmentVariableA": 2, "KERNEL32.dll!SetEnvironmentVariableA": 2, "USER32.dll!RegisterClipboardFormatW": 1, "USER32.dll!RegisterHotKey": 1, "USER32.dll!UnregisterHotKey": 1, "api-ms-win-core-handle-l1-1-0.dll!CompareObjectHandles": 2, "USER32.dll!CreateIconIndirect": 2, "USER32.dll!GetIconInfo": 4, "USER32.dll!DrawIconEx": 2, "GDI32.dll!SetDIBits": 1, "GDI32.dll!SetBkMode": 2, "GDI32.dll!ModifyWorldTransform": 4, "USER32.dll!GetKeyboardState": 4, "USER32.dll!SetKeyboardState": 3, "ole32.dll!CoCreateGuid": 2, "KERNEL32.dll!DeleteFileA": 2, "KERNEL32.dll!MapViewOfFileEx": 1, "KERNEL32.dll!CreateWaitableTimerExW": 1, "KERNEL32.dll!SetWaitableTimer": 1, "OLEAUT32.dll!SafeArrayUnaccessData": 38, "OLEAUT32.dll!SafeArrayDestroy": 24, "USER32.dll!UnhookWinEvent": 2, "OLEAUT32.dll!SafeArrayCreateVector": 24, "OLEAUT32.dll!SafeArrayPutElement": 2, "SHLWAPI.dll!AssocQueryStringW": 2, "SHELL32.dll!SHCreateAssociationRegistration": 1, "SHELL32.dll!SHGetDesktopFolder": 2, "SHELL32.dll!SHOpenFolderAndSelectItems": 1, "SHELL32.dll!ShellExecuteA": 1, "KERNEL32.dll!SetConsoleTextAttribute": 1, "KERNEL32.dll!UnregisterWait": 1, "UxTheme.dll!OpenThemeData": 1, "UxTheme.dll!DrawThemeBackground": 6, "USER32.dll!DrawEdge": 2, "USER32.dll!DrawFrameControl": 5, "GDI32.dll!GetWorldTransform": 2, "USER32.dll!GetSysColorBrush": 2, "USER32.dll!FrameRect": 1, "USER32.dll!InflateRect": 3, "USER32.dll!DrawFocusRect": 1, "GDI32.dll!SetBkColor": 3, "GDI32.dll!SetTextColor": 3, "UxTheme.dll!#47": 2, "USER32.dll!InvertRect": 1, "UxTheme.dll!GetThemeBackgroundContentRect": 1, "USER32.dll!PrintWindow": 3, "USER32.dll!TrackPopupMenu": 1, "USER32.dll!GetMessagePos": 1, "USER32.dll!FlashWindowEx": 1, "USER32.dll!SetCapture": 1, "USER32.dll!ReleaseCapture": 1, "USER32.dll!CloseTouchInputHandle": 2, "USER32.dll!GetRawInputData": 2, "USER32.dll!DefRawInputProc": 1, "USER32.dll!InvalidateRect": 1, "USER32.dll!SetMenuDefaultItem": 1, "USER32.dll!GetPointerPenInfo": 1, "SHELL32.dll!#190": 3, "SHELL32.dll!#155": 3, "SHELL32.dll!ShellExecuteW": 4, "USER32.dll!MoveWindow": 1, "GDI32.dll!DeleteEnhMetaFile": 2, "GDI32.dll!CreateEnhMetaFileW": 1, "GDI32.dll!SetEnhMetaFileBits": 1, "GDI32.dll!CloseEnhMetaFile": 1, "GDI32.dll!PlayEnhMetaFile": 1, "GDI32.dll!EnumEnhMetaFile": 2, "GDI32.dll!GetEnhMetaFileHeader": 1, "GDI32.dll!GetEnhMetaFileBits": 2, "GDI32.dll!PlayEnhMetaFileRecord": 1, "GDI32.dll!ExtEscape": 8, "ole32.dll!CreateStreamOnHGlobal": 5, "WINSPOOL.DRV!DeviceCapabilitiesW": 6, "IPHLPAPI.DLL!IpReleaseAddress": 1, "IPHLPAPI.DLL!IpRenewAddress": 1, "IPHLPAPI.DLL!GetInterfaceInfo": 2, "GDI32.dll!GetCurrentObject": 3, "CRYPT32.dll!CertGetNameStringA": 2, "ole32.dll!CoRegisterInitializeSpy": 1, "ole32.dll!CoRevokeInitializeSpy": 1, "ADVAPI32.dll!GetTraceLoggerHandle": 1, "ADVAPI32.dll!GetTraceEnableFlags": 1, "ADVAPI32.dll!GetTraceEnableLevel": 1, "ADVAPI32.dll!TraceEvent": 1, "dbghelp.dll!SymCleanup": 2, "dbghelp.dll!SymSetOptions": 1, "dbghelp.dll!SymGetSearchPathW": 1, "dbghelp.dll!SymSetSearchPathW": 1, "dbghelp.dll!SymGetLineFromAddr64": 1, "dbghelp.dll!SymInitialize": 3, "USER32.dll!UnregisterSuspendResumeNotification": 1, "KERNEL32.dll!ResolveLocaleName": 2, "KERNEL32.dll!GetCurrencyFormatEx": 1, "KERNEL32.dll!GetNumberFormatEx": 1, "KERNEL32.dll!GetDateFormatEx": 3, "KERNEL32.dll!GetTimeFormatEx": 3, "KERNEL32.dll!CreateFileA": 2, "WS2_32.dll!WSAGetOverlappedResult": 3, "WS2_32.dll!WSARecvFrom": 1, "WS2_32.dll!WSASendTo": 1, "WS2_32.dll!WSASetLastError": 1, "CRYPT32.dll!CertGetEnhancedKeyUsage": 2, "ADVAPI32.dll!ProcessTrace": 1, "ADVAPI32.dll!OpenTraceW": 1, "KERNEL32.dll!SleepConditionVariableCS": 2, "KERNEL32.dll!GetThreadGroupAffinity": 1, "KERNEL32.dll!QueryFullProcessImageNameW": 2, "USER32.dll!GetClassNameW": 4, "USER32.dll!GetCursorInfo": 1, "USER32.dll!EnumDisplaySettingsExW": 2, "USER32.dll!GetClipboardData": 13, "KERNEL32.dll!GlobalSize": 17, "KERNEL32.dll!GlobalLock": 43, "KERNEL32.dll!GlobalUnlock": 43, "USER32.dll!OpenClipboard": 5, "ADVAPI32.dll!ImpersonateAnonymousToken": 1, "USER32.dll!CloseClipboard": 1, "USER32.dll!GetClipboardSequenceNumber": 1, "USER32.dll!IsClipboardFormatAvailable": 10, "USER32.dll!EmptyClipboard": 2, "SHELL32.dll!DragQueryFileW": 4, "KERNEL32.dll!GlobalAlloc": 11, "USER32.dll!SetClipboardData": 2, "USER32.dll!GetGuiResources": 1, "GDI32.dll!SetBrushOrgEx": 1, "GDI32.dll!SetArcDirection": 1, "GDI32.dll!SetDCBrushColor": 1, "GDI32.dll!SetDCPenColor": 1, "GDI32.dll!SetROP2": 1, "GDI32.dll!GdiAlphaBlend": 1, "USER32.dll!PtInRect": 1, "SHLWAPI.dll!#12": 2, "ole32.dll!CreateILockBytesOnHGlobal": 2, "ole32.dll!StgCreateDocfileOnILockBytes": 2, "ole32.dll!ReleaseStgMedium": 14, "ole32.dll!OleDuplicateData": 1, "ADVAPI32.dll!RegDisablePredefinedCache": 1, "KERNEL32.dll!GetUserDefaultLangID": 1, "KERNEL32.dll!GetUserDefaultLocaleName": 1, "WINMM.dll!midiInAddBuffer": 2, "WINMM.dll!midiOutUnprepareHeader": 2, "WINMM.dll!midiInGetNumDevs": 1, "WINMM.dll!midiOutGetNumDevs": 1, "WINMM.dll!midiOutClose": 3, "WINMM.dll!midiOutShortMsg": 1, "WINMM.dll!midiOutPrepareHeader": 1, "WINMM.dll!midiOutLongMsg": 1, "WINMM.dll!midiInReset": 1, "WINMM.dll!midiInUnprepareHeader": 2, "WINMM.dll!midiInClose": 3, "WINMM.dll!midiOutReset": 1, "WINMM.dll!midiInOpen": 1, "WINMM.dll!midiInPrepareHeader": 1, "WINMM.dll!midiInStart": 1, "WINMM.dll!midiOutOpen": 1, "PROPSYS.dll!PSGetPropertyKeyFromName": 1, "IPHLPAPI.DLL!GetAdaptersInfo": 2, "CRYPT32.dll!CertOpenSystemStoreW": 1, "CRYPT32.dll!CertFindChainInStore": 1, "CRYPT32.dll!CertGetIntendedKeyUsage": 1, "CRYPT32.dll!CertVerifyTimeValidity": 1, "CRYPT32.dll!CertGetCertificateContextProperty": 1, "USER32.dll!ShowCursor": 1, "USER32.dll!SetCursorPos": 2, "USER32.dll!GetWindowDisplayAffinity": 1, "ole32.dll!CoAllowSetForegroundWindow": 1, "GDI32.dll!SetAbortProc": 1, "GDI32.dll!StartDocW": 1, "GDI32.dll!StartPage": 1, "GDI32.dll!EndPage": 1, "GDI32.dll!EndDoc": 1, "GDI32.dll!CancelDC": 1, "ole32.dll!GetHGlobalFromStream": 2, "USER32.dll!CharToOemBuffW": 1, "KERNEL32.dll!SleepEx": 1, "SHELL32.dll!#2": 1, "USER32.dll!GetAsyncKeyState": 1, "USER32.dll!MessageBeep": 1, "ADVAPI32.dll!EventUnregister": 1, "ADVAPI32.dll!EventWrite": 1, "KERNEL32.dll!GetThreadPriorityBoost": 1, "KERNEL32.dll!SetThreadPriorityBoost": 2, "ADVAPI32.dll!ControlTraceW": 2, "ADVAPI32.dll!StartTraceW": 1, "USER32.dll!GetMonitorInfoA": 2, "USER32.dll!BringWindowToTop": 2, "USER32.dll!SendMessageTimeoutW": 6, "KERNEL32.dll!WTSGetActiveConsoleSessionId": 1, "SHLWAPI.dll!PathFindExtensionW": 1, "KERNEL32.dll!GetPrivateProfileStringW": 1, "SHLWAPI.dll!PathRemoveExtensionW": 1, "SHLWAPI.dll!PathFindFileNameW": 1, "ole32.dll!GetHGlobalFromILockBytes": 1, "WS2_32.dll!WSASetServiceW": 2, "KERNEL32.dll!SetProcessMitigationPolicy": 1, "KERNEL32.dll!SetThreadAffinityMask": 3, "KERNEL32.dll!GetProcessHandleCount": 1, "KERNEL32.dll!EnumSystemLocalesEx": 1, "Secur32.dll!AcquireCredentialsHandleW": 1, "Secur32.dll!InitializeSecurityContextW": 1, "Secur32.dll!QueryContextAttributesW": 1, "Secur32.dll!QuerySecurityPackageInfoW": 1, "Secur32.dll!FreeCredentialsHandle": 1, "Secur32.dll!DeleteSecurityContext": 1, "CFGMGR32.dll!CM_Locate_DevNodeW": 1, "CFGMGR32.dll!CM_Get_Parent": 1, "CFGMGR32.dll!CM_Get_DevNode_PropertyW": 2, "ADVAPI32.dll!AllocateLocallyUniqueId": 1, "ADVAPI32.dll!LogonUserW": 1, "CRYPT32.dll!CertAddEncodedCertificateToStore": 1, "CRYPT32.dll!CryptVerifyCertificateSignatureEx": 1, "CRYPT32.dll!CertCompareCertificateName": 1, "SHELL32.dll!Shell_NotifyIconW": 7, "USER32.dll!MapVirtualKeyExW": 1, "USER32.dll!ToUnicodeEx": 2, "ole32.dll!DoDragDrop": 1, "COMDLG32.dll!PrintDlgExW": 1, "ADVAPI32.dll!OpenSCManagerW": 1, "ADVAPI32.dll!CloseServiceHandle": 3, "ADVAPI32.dll!OpenServiceW": 1, "ADVAPI32.dll!QueryServiceStatus": 1, "SHELL32.dll!SHGetMalloc": 1, "SHELL32.dll!SHGetPathFromIDListW": 3, "KERNEL32.dll!FoldStringW": 2, "KERNEL32.dll!LCMapStringEx": 3, "KERNEL32.dll!FileTimeToLocalFileTime": 1, "KERNEL32.dll!LocalFileTimeToFileTime": 1, "USER32.dll!OemToCharBuffA": 1, "USER32.dll!OemToCharA": 1, "KERNEL32.dll!SetThreadExecutionState": 1, "ADVAPI32.dll!AllocateAndInitializeSid": 1, "ADVAPI32.dll!CheckTokenMembership": 1, "ADVAPI32.dll!SetFileSecurityW": 3, "KERNEL32.dll!GetShortPathNameW": 2, "KERNEL32.dll!VirtualQueryEx": 1, "KERNEL32.dll!RemoveVectoredExceptionHandler": 1, "KERNEL32.dll!GetFileTime": 2, "KERNEL32.dll!GetVolumePathNamesForVolumeNameW": 1, "KERNEL32.dll!GetVolumeNameForVolumeMountPointW": 2, "KERNEL32.dll!QueryDosDeviceW": 2, "USER32.dll!GetClassLongPtrW": 4, "SHELL32.dll!SHGetStockIconInfo": 1, "USER32.dll!SetThreadDesktop": 1, "USER32.dll!OpenInputDesktop": 1, "KERNEL32.dll!GetProcessHeaps": 3, "USERENV.dll!CreateAppContainerProfile": 1, "WINHTTP.dll!WinHttpCloseHandle": 5, "WINHTTP.dll!WinHttpOpen": 3, "WINHTTP.dll!WinHttpSetTimeouts": 3, "WINHTTP.dll!WinHttpGetProxyForUrl": 2, "OLEAUT32.dll!VariantTimeToSystemTime": 1, "SHELL32.dll!SHAppBarMessage": 3, "WINHTTP.dll!WinHttpCrackUrl": 1, "WINHTTP.dll!WinHttpConnect": 1, "WINHTTP.dll!WinHttpOpenRequest": 1, "WINHTTP.dll!WinHttpAddRequestHeaders": 2, "WINHTTP.dll!WinHttpSendRequest": 1, "WINHTTP.dll!WinHttpReceiveResponse": 1, "WINHTTP.dll!WinHttpQueryHeaders": 1, "KERNEL32.dll!VerSetConditionMask": 1, "KERNEL32.dll!Wow64GetThreadContext": 1, "WS2_32.dll!WSAEnumNameSpaceProvidersW": 2, "WINHTTP.dll!WinHttpSetStatusCallback": 2, "WINHTTP.dll!WinHttpCreateProxyResolver": 1, "WINHTTP.dll!WinHttpGetProxyForUrlEx": 1, "WINHTTP.dll!WinHttpGetProxyResult": 1, "WINHTTP.dll!WinHttpFreeProxyResult": 1, "KERNEL32.dll!GetFileAttributesA": 2, "WININET.dll!GetUrlCacheEntryInfoExW": 2, "KERNEL32.dll!CreateRemoteThread": 1, "KERNEL32.dll!GetSystemDefaultLCID": 1, "KERNEL32.dll!GetThreadLocale": 1, "USER32.dll!DestroyMenu": 2, "USER32.dll!CreatePopupMenu": 1, "USER32.dll!SetMenuInfo": 1, "USER32.dll!InsertMenuItemW": 2, "USER32.dll!GetMenuInfo": 1, "USER32.dll!GetMenuItemInfoW": 2, "USER32.dll!SetMenuItemInfoW": 2, "USER32.dll!GetMenuItemCount": 1, "KERNEL32.dll!SetDllDirectoryW": 2, "CRYPT32.dll!CryptProtectMemory": 1, "CRYPT32.dll!CryptUnprotectMemory": 1, "KERNEL32.dll!K32GetPerformanceInfo": 1, "dxgi.dll!CreateDXGIFactory1": 1, "MFPlat.DLL!MFCreateDXGIDeviceManager": 1, "d3d11.dll!D3D11CreateDevice": 1, "MFPlat.DLL!MFCreateSample": 1, "MFPlat.DLL!MFCreateMemoryBuffer": 1, "MFPlat.DLL!MFCreateAlignedMemoryBuffer": 1, "MFPlat.DLL!MFCreateMediaType": 1, "MFPlat.DLL!MFInitMediaTypeFromWaveFormatEx": 1, "MFPlat.DLL!MFCreateDXGISurfaceBuffer": 1, "MFPlat.DLL!MFShutdown": 1, "MFPlat.DLL!MFStartup": 1, "MFPlat.DLL!MFCreateMediaEvent": 1, "MFPlat.DLL!MFTEnumEx": 1, "MFPlat.DLL!MFCreateWaveFormatExFromMFMediaType": 1, "MFPlat.DLL!MFCreateAsyncResult": 1, "MFPlat.DLL!MFCreateMediaBufferWrapper": 1, "MFPlat.DLL!MFUnlockDXGIDeviceManager": 1, "MFPlat.DLL!MFCreateAttributes": 1, "MFPlat.DLL!MFLockDXGIDeviceManager": 1, "MFPlat.DLL!MFCreateEventQueue": 1, "MFPlat.DLL!MFCreatePresentationDescriptor": 1, "MFPlat.DLL!MFCreateStreamDescriptor": 1, "MF.dll!MFCreateDeviceSource": 1, "MF.dll!MFEnumDeviceSources": 1, "MFReadWrite.dll!MFCreateSourceReaderFromMediaSource": 1, "MFPlat.DLL!MFGetSystemTime": 1, "NETAPI32.dll!NetGetJoinInformation": 1, "NETAPI32.dll!NetApiBufferFree": 1, "Secur32.dll!GetUserNameExW": 1, "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 1, "UIAutomationCore.DLL!UiaRaiseAutomationEvent": 1, "UIAutomationCore.DLL!UiaRaiseAutomationPropertyChangedEvent": 1, "UIAutomationCore.DLL!UiaRaiseStructureChangedEvent": 1, "KERNEL32.dll!K32EnumProcessModules": 1, "OLEACC.dll!CreateStdAccessibleObject": 1, "UIAutomationCore.DLL!UiaReturnRawElementProvider": 1, "OLEACC.dll!LresultFromObject": 1, "WTSAPI32.dll!WTSRegisterSessionNotification": 1, "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1, "pdh.dll!PdhAddEnglishCounterW": 1, "pdh.dll!PdhCollectQueryData": 1, "pdh.dll!PdhGetFormattedCounterValue": 1, "pdh.dll!PdhCloseQuery": 1, "HID.DLL!HidD_GetPreparsedData": 1, "HID.DLL!HidP_GetCaps": 1, "HID.DLL!HidD_FreePreparsedData": 1, "HID.DLL!HidD_GetAttributes": 1, "HID.DLL!HidD_GetProductString": 1, "HID.DLL!HidD_GetSerialNumberString": 1, "WINTRUST.dll!WinVerifyTrust": 1, "WINTRUST.dll!WTHelperProvDataFromStateData": 1, "WINTRUST.dll!CryptCATAdminAcquireContext": 1, "WINTRUST.dll!CryptCATAdminCalcHashFromFileHandle": 1, "WINTRUST.dll!CryptCATAdminEnumCatalogFromHash": 1, "WINTRUST.dll!CryptCATCatalogInfoFromContext": 1, "WINTRUST.dll!CryptCATAdminReleaseContext": 1, "WINTRUST.dll!CryptCATAdminReleaseCatalogContext": 1, "ADVAPI32.dll!ConvertSidToStringSidW": 1, "ADVAPI32.dll!ConvertSidToStringSidA": 1, "CRYPT32.dll!CryptProtectData": 1, "CRYPT32.dll!CryptUnprotectData": 1, "WTSAPI32.dll!WTSQuerySessionInformationW": 1, "WTSAPI32.dll!WTSFreeMemory": 1, "KERNEL32.dll!AreFileApisANSI": 1, "chrome_elf.dll!IsExtensionPointDisableSet": 1, "chrome_elf.dll!SignalChromeElf": 1, "chrome_elf.dll!SignalInitializeCrashReporting": 1, "KERNEL32.dll!K32QueryWorkingSetEx": 1, "api-ms-win-shcore-scaling-l1-1-1.dll!SetProcessDpiAwareness": 1, "api-ms-win-power-base-l1-1-0.dll!PowerDeterminePlatformRoleEx": 1, "ADVAPI32.dll!ConvertStringSidToSidW": 1, "OLEAUT32.dll!VarBstrCmp": 1, "pdh.dll!PdhOpenQueryW": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsDeleteString": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsCreateString": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsGetStringRawBuffer": 1, "ntdll.dll!NtDeleteKey": 1, "ntdll.dll!RtlGetLastNtStatus": 1, "ntdll.dll!NtQuerySystemInformation": 1, "KERNEL32.dll!CreateToolhelp32Snapshot": 1, "KERNEL32.dll!Process32FirstW": 1, "KERNEL32.dll!Process32NextW": 1, "USERENV.dll!CreateEnvironmentBlock": 1, "USERENV.dll!DestroyEnvironmentBlock": 1, "VERSION.dll!GetFileVersionInfoSizeW": 1, "VERSION.dll!GetFileVersionInfoW": 1, "VERSION.dll!VerQueryValueW": 1, "api-ms-win-power-base-l1-1-0.dll!CallNtPowerInformation": 1, "ncrypt.dll!NCryptFreeObject": 1, "ncrypt.dll!NCryptGetProperty": 1, "ncrypt.dll!NCryptSignHash": 1, "WS2_32.dll!inet_ntop": 1, "api-ms-win-shcore-scaling-l1-1-1.dll!GetDpiForMonitor": 1, "KERNEL32.dll!K32GetProcessMemoryInfo": 1, "KERNEL32.dll!GetFileSize": 1, "OLEACC.dll!AccessibleObjectFromWindow": 1, "OLEACC.dll!WindowFromAccessibleObject": 1, "KERNEL32.dll!K32GetModuleInformation": 1, "UIAutomationCore.DLL!UiaGetReservedNotSupportedValue": 1, "UIAutomationCore.DLL!UiaGetReservedMixedAttributeValue": 1, "UIAutomationCore.DLL!UiaHostProviderFromHwnd": 1, "chrome_elf.dll!InjectDumpForHungInput_ExportThunk": 1, "chrome_elf.dll!SetMetricsClientId": 1, "SHELL32.dll!SHGetKnownFolderPath": 1, "WINSPOOL.DRV!ClosePrinter": 1, "WINSPOOL.DRV!OpenPrinterW": 1, "WINSPOOL.DRV!DocumentPropertiesW": 1, "chrome_elf.dll!GetCrashReports_ExportThunk": 1, "chrome_elf.dll!RequestSingleCrashUpload_ExportThunk": 1, "chrome_elf.dll!GetCrashpadDatabasePath_ExportThunk": 1, "chrome_elf.dll!ClearReportsBetween_ExportThunk": 1, "KERNEL32.dll!WerSetFlags": 1, "chrome_elf.dll!CrashForException_ExportThunk": 1, "WINTRUST.dll!WTHelperGetProvSignerFromChain": 1, "WINTRUST.dll!WTHelperGetProvCertFromChain": 1, "KERNEL32.dll!DiscardVirtualMemory": 1, "ncrypt.dll!NCryptOpenStorageProvider": 1, "ncrypt.dll!NCryptImportKey": 1, "ncrypt.dll!NCryptIsAlgSupported": 1, "ncrypt.dll!NCryptCreatePersistedKey": 1, "ncrypt.dll!NCryptFinalizeKey": 1, "ncrypt.dll!NCryptExportKey": 1, "ncrypt.dll!NCryptDeleteKey": 1, "ncrypt.dll!NCryptOpenKey": 1, "FONTSUB.dll!CreateFontPackage": 1, "KERNEL32.dll!GetDiskFreeSpaceA": 1, "KERNEL32.dll!GetDiskFreeSpaceW": 1, "KERNEL32.dll!GetFullPathNameA": 1, "KERNEL32.dll!HeapValidate": 1, "KERNEL32.dll!HeapCompact": 1, "KERNEL32.dll!LockFile": 1, "KERNEL32.dll!UnlockFile": 1, "OLEACC.dll!AccessibleChildren": 1, "api-ms-win-power-setting-l1-1-0.dll!PowerGetActiveScheme": 1, "api-ms-win-power-setting-l1-1-0.dll!PowerReadACValue": 1, "api-ms-win-power-setting-l1-1-0.dll!PowerReadDCValue": 1, "NETAPI32.dll!DsRoleGetPrimaryDomainInformation": 1, "NETAPI32.dll!DsRoleFreeMemory": 1, "chrome_elf.dll!SetUploadConsent_ExportThunk": 1, "urlmon.dll!CoInternetCreateSecurityManager": 1, "KERNEL32.dll!K32GetModuleFileNameExW": 1, "ntdll.dll!NtClose": 1, "ntdll.dll!RtlInitUnicodeString": 1, "ntdll.dll!NtSetValueKey": 1, "ntdll.dll!RtlFormatCurrentUserKeyPath": 1, "ntdll.dll!RtlFreeUnicodeString": 1, "ntdll.dll!NtCreateKey": 1, "WINSPOOL.DRV!EnumPrintersW": 1, "WINSPOOL.DRV!GetPrinterDriverW": 1, "WINSPOOL.DRV!GetPrinterW": 1, "WINSPOOL.DRV!#203": 1, "SHELL32.dll!SHGetSpecialFolderLocation": 1, "ntdll.dll!NtQueryInformationThread": 1, "Secur32.dll!FreeContextBuffer": 1, "NETAPI32.dll!NetUserGetInfo": 1, "Secur32.dll!LsaConnectUntrusted": 1, "Secur32.dll!LsaLogonUser": 1, "Secur32.dll!LsaFreeReturnBuffer": 1, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "Secur32.dll!LsaDeregisterLogonProcess": 1, "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsCreateStringReference": 1, "NDFAPI.DLL!NdfCreateWebIncident": 1, "NDFAPI.DLL!NdfExecuteDiagnosis": 1, "NDFAPI.DLL!NdfCloseIncident": 1, "chrome_elf.dll!IsThirdPartyInitialized": 1, "IMM32.dll!ImmGetIMEFileNameW": 1, "KERNEL32.dll!Module32FirstW": 1, "KERNEL32.dll!Module32NextW": 1, "chrome_elf.dll!DumpHungProcessWithPtype_ExportThunk": 1, "MFPlat.DLL!MFFrameRateToAverageTimePerFrame": 1, "SHLWAPI.dll!#219": 1, "CRYPTUI.dll!CryptUIDlgCertMgr": 1, "bthprops.cpl!BluetoothFindFirstRadio": 1, "bthprops.cpl!BluetoothGetRadioInfo": 1, "bthprops.cpl!BluetoothFindRadioClose": 1, "bthprops.cpl!BluetoothIsConnectable": 1, "bthprops.cpl!BluetoothFindFirstDevice": 1, "bthprops.cpl!BluetoothFindNextDevice": 1, "bthprops.cpl!BluetoothFindDeviceClose": 1, "bthprops.cpl!BluetoothEnableDiscovery": 1, "bthprops.cpl!BluetoothEnableIncomingConnections": 1, "bthprops.cpl!BluetoothSdpGetAttributeValue": 1, "bthprops.cpl!BluetoothSdpGetContainerElementData": 1, "wevtapi.dll!EvtRender": 1, "wevtapi.dll!EvtNext": 1, "wevtapi.dll!EvtQuery": 1, "wevtapi.dll!EvtCreateRenderContext": 1, "wevtapi.dll!EvtClose": 1, "CRYPTUI.dll!CryptUIDlgViewCertificateW": 1, "USER32.dll!DdeInitializeW": 1, "USER32.dll!DdeCreateStringHandleW": 1, "USER32.dll!DdeConnect": 1, "USER32.dll!DdeFreeStringHandle": 1, "USER32.dll!DdeClientTransaction": 1, "USER32.dll!DdeDisconnect": 1, "USER32.dll!DdeGetLastError": 1, "USER32.dll!DdeUninitialize": 1, "NETAPI32.dll!NetGetAadJoinInformation": 1, "NETAPI32.dll!NetFreeAadJoinInformation": 1, "WINUSB.DLL!WinUsb_ReadPipe": 1, "WINUSB.DLL!WinUsb_WritePipe": 1, "WINUSB.DLL!WinUsb_Initialize": 1, "WINUSB.DLL!WinUsb_GetAssociatedInterface": 1, "WINUSB.DLL!WinUsb_ControlTransfer": 1, "WINUSB.DLL!WinUsb_SetCurrentAlternateSetting": 1, "WINUSB.DLL!WinUsb_ResetPipe": 1, "WINUSB.DLL!WinUsb_GetOverlappedResult": 1, "WS2_32.dll!WSCEnumProtocols": 1, "WS2_32.dll!WSCGetProviderPath": 1, "dhcpcsvc.DLL!DhcpRequestParams": 1, "WINUSB.DLL!WinUsb_Free": 1, "dhcpcsvc.DLL!DhcpCApiInitialize": 1, "d3d12.dll!#101": 1, "ESENT.dll!JetCloseTable": 1, "ESENT.dll!JetMove": 1, "ESENT.dll!JetRetrieveColumn": 1, "ESENT.dll!JetGetTableColumnInfoW": 1, "ESENT.dll!JetTerm": 1, "ESENT.dll!JetSetSystemParameterW": 1, "ESENT.dll!JetCreateInstanceW": 1, "ESENT.dll!JetInit": 1, "ESENT.dll!JetBeginSessionW": 1, "ESENT.dll!JetAttachDatabase2W": 1, "ESENT.dll!JetOpenDatabaseW": 1, "ESENT.dll!JetOpenTableW": 1 }, "complete_linear_sweep": true } ]