Static | ZeroBOX

PE Compile Time

2076-05-18 11:17:15

PDB Path

fcon.pdb

PE Imphash

b237d8f62519a8eea449d577a2a175fc

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00032dec 0x00033000 6.25860341476
.rdata 0x00034000 0x00010950 0x00011000 5.23534733064
.data 0x00045000 0x00002060 0x00001000 3.22677277781
.pdata 0x00048000 0x00003c48 0x00004000 5.26810182268
.didat 0x0004c000 0x00000010 0x00001000 0.0131269437212
.rsrc 0x0004d000 0x000012f8 0x00002000 2.45450944752
.reloc 0x0004f000 0x000007d0 0x00001000 3.5251540951

Resources

Name Offset Size Language Sub-language File type
MUI 0x0004e208 0x000000f0 LANG_ENGLISH SUBLANG_ENGLISH_US data
WEVT_TEMPLATE 0x0004d110 0x00000d62 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x0004de78 0x00000390 LANG_ENGLISH SUBLANG_ENGLISH_US PGP symmetric key encrypted data - Plaintext or unencrypted data

Imports

Library msvcp_win.dll:
0x180036de0 ??1_Lockit@std@@QEAA@XZ
0x180036de8 ??0_Lockit@std@@QEAA@H@Z
0x180036eb8 ?_Xbad_alloc@std@@YAXXZ
Library api-ms-win-crt-runtime-l1-1-0.dll:
0x180036d00 _initterm_e
0x180036d08 _initterm
Library api-ms-win-crt-private-l1-1-0.dll:
0x180036ba8 _o__get_errno
0x180036bd0 _o__purecall
0x180036be0 _o__seh_filter_dll
0x180036be8 _o__set_errno
0x180036bf0 memmove
0x180036bf8 _o__wcsdup
0x180036c00 _o__wcsicmp
0x180036c08 _o_abort
0x180036c10 _o_ceilf
0x180036c18 _o_free
0x180036c20 _o_iswspace
0x180036c28 _o_malloc
0x180036c30 _o_qsort
0x180036c38 _o_realloc
0x180036c40 _o_terminate
0x180036c48 _o_wcscpy_s
0x180036c50 _o_wcstoul
0x180036c58 __C_specific_handler
0x180036c60 __current_exception
0x180036c70 _o__cexit
0x180036c78 _CxxThrowException
0x180036c80 _o__callnewh
0x180036c88 _o__crt_atexit
0x180036c90 _o__execute_onexit_table
0x180036c98 _o__errno
0x180036cc8 _o___std_exception_copy
0x180036cd0 __CxxFrameHandler3
0x180036cd8 __std_terminate
0x180036ce0 __CxxFrameHandler4
0x180036ce8 memcmp
0x180036cf0 memcpy
Library api-ms-win-crt-string-l1-1-0.dll:
0x180036d18 memset
Library api-ms-win-core-libraryloader-l1-2-0.dll:
0x1800368b0 FreeLibraryAndExitThread
0x1800368b8 FreeLibrary
0x1800368c0 GetModuleFileNameA
0x1800368c8 GetProcAddress
0x1800368d0 GetModuleHandleExW
0x1800368d8 GetModuleHandleW
Library api-ms-win-core-synch-l1-1-0.dll:
0x180036a18 InitializeSRWLock
0x180036a20 EnterCriticalSection
0x180036a28 ReleaseSemaphore
0x180036a38 SetEvent
0x180036a40 ResetEvent
0x180036a48 CreateEventW
0x180036a50 LeaveCriticalSection
0x180036a60 WaitForSingleObject
0x180036a68 ReleaseMutex
0x180036a70 ReleaseSRWLockExclusive
0x180036a78 AcquireSRWLockExclusive
0x180036a80 WaitForSingleObjectEx
0x180036a88 OpenSemaphoreW
0x180036a90 ReleaseSRWLockShared
0x180036a98 CreateMutexExW
0x180036aa0 AcquireSRWLockShared
0x180036aa8 DeleteCriticalSection
0x180036ab0 CreateSemaphoreExW
Library api-ms-win-core-heap-l1-1-0.dll:
0x180036878 HeapAlloc
0x180036880 HeapFree
0x180036888 GetProcessHeap
Library api-ms-win-core-errorhandling-l1-1-0.dll:
0x180036838 GetLastError
0x180036840 SetLastError
0x180036848 UnhandledExceptionFilter
0x180036850 RaiseException
Library api-ms-win-core-threadpool-l1-2-0.dll:
0x180036af0 CloseThreadpoolTimer
0x180036af8 CreateThreadpoolTimer
0x180036b00 SetThreadpoolTimer
Library api-ms-win-core-processthreads-l1-1-0.dll:
0x180036918 GetCurrentProcess
0x180036920 GetCurrentProcessId
0x180036928 CreateThread
0x180036930 GetCurrentThreadId
0x180036938 TerminateProcess
0x180036940 ResumeThread
Library api-ms-win-core-localization-l1-2-0.dll:
0x1800368f8 FormatMessageW
Library api-ms-win-core-debug-l1-1-0.dll:
0x1800367f8 DebugBreak
0x180036800 OutputDebugStringW
0x180036808 IsDebuggerPresent
Library api-ms-win-core-handle-l1-1-0.dll:
0x180036868 CloseHandle
Library api-ms-win-eventing-provider-l1-1-0.dll:
0x180036d28 EventActivityIdControl
0x180036d30 EventUnregister
0x180036d38 EventRegister
0x180036d40 EventWriteTransfer
0x180036d48 EventSetInformation
Library api-ms-win-core-winrt-string-l1-1-0.dll:
0x180036b68 WindowsIsStringEmpty
0x180036b80 WindowsCreateString
0x180036b90 WindowsDeleteString
Library api-ms-win-core-com-l1-1-0.dll:
0x1800367b0 StringFromGUID2
0x1800367b8 CoTaskMemFree
0x1800367c8 CoCreateGuid
0x1800367d0 CoCreateInstance
0x1800367d8 CoTaskMemRealloc
0x1800367e0 CoGetApartmentType
0x1800367e8 CoTaskMemAlloc
Library api-ms-win-core-winrt-error-l1-1-0.dll:
0x180036b30 RoOriginateError
0x180036b38 RoOriginateErrorW
0x180036b40 RoTransformError
Library api-ms-win-core-util-l1-1-0.dll:
0x180036b18 DecodePointer
0x180036b20 EncodePointer
Library api-ms-win-core-synch-l1-2-0.dll:
0x180036ac0 InitOnceExecuteOnce
0x180036ac8 InitOnceComplete
0x180036ad0 InitOnceBeginInitialize
Library api-ms-win-core-winrt-l1-1-0.dll:
0x180036b50 RoActivateInstance
0x180036b58 RoGetActivationFactory
Library api-ms-win-core-rtlsupport-l1-1-0.dll:
0x1800369e0 RtlCaptureContext
0x1800369e8 RtlLookupFunctionEntry
0x1800369f0 RtlVirtualUnwind
Library api-ms-win-core-processthreads-l1-1-1.dll:
Library api-ms-win-core-profile-l1-1-0.dll:
0x180036960 QueryPerformanceCounter
Library api-ms-win-core-sysinfo-l1-1-0.dll:
0x180036ae0 GetSystemTimeAsFileTime
Library api-ms-win-core-interlocked-l1-1-0.dll:
0x180036898 InitializeSListHead
Library ntdll.dll:
0x180036f48 ZwQueryKey
0x180036f50 ZwOpenKeyEx
0x180036f58 RtlAllocateHeap
0x180036f60 ZwEnumerateValueKey
0x180036f68 ZwEnumerateKey
0x180036f70 RtlFreeHeap
0x180036f78 ZwClose
0x180036f88 RtlPublishWnfStateData
0x180036f90 RtlGetSystemBootStatus
0x180036f98 RtlSetSystemBootStatus
0x180036fd8 RtlEqualUnicodeString
Library RPCRT4.dll:
0x180036770 NdrClientCall3
0x180036778 RpcStringBindingComposeW
0x180036780 RpcStringFreeW
0x180036788 RpcExceptionFilter
0x180036790 RpcBindingFree
Library api-ms-win-core-string-l1-1-0.dll:
0x180036a00 MultiByteToWideChar
0x180036a08 CompareStringOrdinal
Library api-ms-win-core-registry-l1-1-0.dll:
0x180036970 RegDeleteKeyExW
0x180036978 RegEnumKeyExW
0x180036980 RegEnumValueW
0x180036988 RegOpenKeyExW
0x180036990 RegQueryInfoKeyW
0x180036998 RegFlushKey
0x1800369a0 RegCreateKeyExW
0x1800369a8 RegCloseKey
0x1800369b0 RegDeleteValueW
0x1800369b8 RegGetValueW
0x1800369c0 RegSetValueExW
Library api-ms-win-core-path-l1-1-0.dll:
0x180036908 PathAllocCombine
Library api-ms-win-core-registry-l2-1-0.dll:
0x1800369d0 RegEnumKeyW
Library api-ms-win-stateseparation-helpers-l1-1-0.dll:
Library api-ms-win-core-apiquery-l1-1-0.dll:
Library api-ms-win-core-delayload-l1-1-1.dll:
0x180036828 ResolveDelayLoadedAPI
Library api-ms-win-core-delayload-l1-1-0.dll:
0x180036818 DelayLoadFailureHook
Library OLEAUT32.dll:
0x180036738 SetErrorInfo
0x180036740 GetErrorInfo
0x180036748 SysFreeString
0x180036750 SysAllocString
0x180036758 SysStringLen
Library api-ms-win-core-libraryloader-l1-2-1.dll:
0x1800368e8 LoadLibraryW

Exports

Ordinal Address Name
3 0x18000d7a0 DllCanUnloadNow
4 0x18000d7f0 DllGetActivationFactory
5 0x18000d830 DllGetClassObject
6 0x18000d990 GetCtacPropertyAlloc
1 0x18000cc80 ModifyStagingControlVariants
2 0x18000ccf0 ModifyStagingControls
7 0x18000df70 SubscribeFeatureReporting
8 0x18000e020 UnsubscribeFeatureReporting
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.didat
@.reloc
\$ UVWAVAWH
fA94@u
fA94@u
A_A^_^]
\$ UVWATAVH
A^A\_^]
\$ UVWAVAWH
fA94@u
fA94@u
A_A^_^]
q0R^G'
q0R^G'
|$ AVH
SVWAVH
8A^_^[
WAVAWH
H3E H3E
WAVAWH
0A_A^_
q0R^G'
t5fA9(t/I
ug@89t`H
^ H9;t
L$0H9;t
|$ UATAUAVAWH
F8@88t
A_A^A]A\]
WAVAWH
A_A^_
\$ UVWAVAWH
t,D8=J
A_A^_^]
\$ VWAVH
u%H!\$8H
USVWAVAWH
A_A^_^[]
UVWATAUAVAWH
@A_A^A]A\_^]
L$ SWH
s WAVAWH
@A_A^_
UVWAVAWH
~0H+~(H
0A_A^_^]
t$ WAVAWH
@u;L9;u$E3
0A_A^_
p WAVAWH
A_A^_
WAVAWH
|$ UATAUAVAWH
A_A^A]A\]
UVWAVAWH
H!|$PA
A_A^_^]
SVWAVAWH
`A_A^_^[
WATAUAVAWH
H9/sDH
A_A^A]A\_
rHfD97w
C9fD97u,
D$0D9r
L$ SVWH
UVWAVAWH
A_A^_^]
HcT$ HcL$$H
{ ATAVAWH
A_A^A\
UVWAVAWH
PA_A^_^]
h UAVAWH
UVWAVAWH
pa\P@?
pA_A^_^]
pa\P@?
WAVAWH
fD9<Ou
D9;}BH
\$ UVWATAUAVAWH
t$ WATAUAVAWH
A_A^A]A\_
x ATAVAWH
A_A^A\
t$ WAVAWH
WAVAWH
0A_A^_
qa\P@?
R$fA;Z*
fA9Z*v#A
t$ WATAUAVAWH
A_A^A]A\_
UUUUUUU
WAVAWH
A_A^_
UUUUUUU
T$h;T$
p0U:(
p(V6?.8
pHXtv
UUUUUUU
WAVAWH
A_A^_
UVWATAUAVAWH
L9uHunN
hL9uHu
@A_A^A]A\_^]
SVWATAUAVAWH
@A_A^A]A\_^[
D$(H+D$ H
WAVAWH
fD9<Ou
D9;}JH
WAVAWH
A_A^_
WATAUAVAWH
0A_A^A]A\_
VWATAVAWH
0A_A^A\_^
VWATAVAWH
A_A^A\_^
t$ WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
UUUUUUU
A_A^A]A\_
@SVWATAUAVAWH
0A_A^A]A\_^[
x ATAVAWH
A_A^A\
t$ WAVAWH
@A_A^_
t$ WAVAWH
@A_A^_
WAVAWH
UUUUUUU
A_A^_
WAVAWH
A_A^_
WAVAWH
@A_A^_
t$ UWATAVAWH
t^H;}PtXL
0A_A^A\_]
t[H;]@tUI
@USVWAVH
@A^_^[]
UVWAVAWH
pA_A^_^]
W H;W(t
UVWAVAWH
A_A^_^]
D#D$0D
3D$8%x
3D$8%x
fB9<Bu
|$ UAVAWH
\$ UVWATAUAVAWH
fF9,@u
A_A^A]A\_^]
t$ UWAVH
q(V6?.8
\$ UVWH
qHXtv
UUUUUUU
3333333
|$ AVH
UVWATAUAVAWH
@A_A^A]A\_^]
UUUUUUU
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
H;\$8u
@SVWATAUAVAWH
UUUUUUU
PA_A^A]A\_^[
9H(t+H
t$ UWATAVAWH
A_A^A\_]
|$ AVH
L$ VWAVH
X UVWH
x4;w(r
3D$8%x
3D$8%x
3D$8%x
UVWATAUAVAWH
D!d$pI
UHL!d$ L
D9e0t0H
D9u0t5A;
0A_A^A]A\_^]
UAVAWH
fD9<^u
@A_A^]
UVWAVAWH
fD9<Au
fD9<Su
A_A^_^]
@USVWAVH
E8H!}@H
A^_^[]
h VWATAVAWH
9w0u+A
A_A^A\_^
p WAVAWH
@A_A^_
WAVAWH
@A_A^_
x|;w(r
BX9A4t
@SUVWATAVAW
A_A^A\_^][
t$ UWAVH
|$ AVH
SVWATAUAVAWH
@A_A^A]A\_^[
x ATAVAWH
A_A^A\
x ATAVAWH
A_A^A\
x ATAVAWH
0A_A^A\
@USVWATAUAVAWH
xA_A^A]A\_^[]
VWATAVAWH
@A_A^A\_^
WAVAWH
0A_A^_
WAVAWH
0A_A^_
WATAUAVAWH
A_A^A]A\_
x UATAUAVAWH
A_A^A]A\]
H9t0H
|$ AVH
t$ UWAVH
USVWATAVAWH
D$0H;D$0
A_A^A\_^[]
|$ AVH
@USVWAVH
0A^_^[]
@SVAUAVAWH
u+D9x u
u%D9x t
A_A^A]^[
UWATAVAWH
A_A^A\_]
UVWATAUAVAWH
PA_A^A]A\_^]
|$ UAVAWH
t$ UWAVH
@SUVWAV
A^_^][
UAVAWH
fffffff
@USVWATAUAVAWH
t>fD9*t8A
XA_A^A]A\_^[]
J 9H u$H
USVWATAUAVAWH
A_A^A]A\_^[]
H;V0tU
l$ VWAVH
L$ UVWH
L$ UVWH
t$ WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
A_A^A]A\_
@SUVWH
D$@H;Q
@USVWAVH
A^_^[]
D$`H;Q
D$@I;^
UUUUUUU
VWATAVAWH
fE9$@u
0A_A^A\_^
\$ UVWH
t$ UWATAVAWH
A_A^A\_]
f99trM
D$xf9(twH
ATAVAWH
A_A^A\
fA94Au
H!|$P3
@USVWAVH
A^_^[]
UVWATAUAVAWH
`A_A^A]A\_^]
WAVAWH
@A_A^_
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
xqE9&scA
A_A^A]A\_^]
ext-ms-win-devmgmt-policy-l1-1-0.dll
SleepConditionVariableCS
WakeAllConditionVariable
Unknown exception
Exception
ReturnNt
ReturnHr
FailFast
RaiseFailFastException
RtlNtStatusToDosErrorNoTeb
RtlDllShutdownInProgress
RtlDisownModuleHeapAllocation
WilFailureNotifyWatchers
onecore\internal\sdk\inc\wil\opensource\wil\resource.h
WilError_03
RtlQueryFeatureConfiguration
RtlRegisterFeatureConfigurationChangeNotification
RtlUnregisterFeatureConfigurationChangeNotification
RtlNotifyFeatureUsage
LogStagedFeatureUsage
NtQueryWnfStateData
NtUpdateWnfStateData
onecore\internal\sdk\inc\wil\staging.h
WilStaging_02
onecore\base\flighting\FeatureManagement\libs\inc\StagingControls.h
Unknown feature control kind
onecore\base\flighting\featuremanagement\dll\module.cpp
vector too long
onecore\internal\sdk\inc\wil\opensource/wil/result_macros.h
Fonecore\internal\sdk\inc\wil\opensource/wil/winrt.h
bad array new length
onecore\base\flighting\featuremanagement\libs\featureexperiments\featureconfigurationsmanager.cpp
unordered_map/set too long
invalid hash bucket count
map/set too long
string too long
onecore\base\flighting\common\inc\FlightIdUtility.h
onecore\base\flighting\FeatureManagement\libs\inc\stagingcontrols.h
onecore\base\flighting\common\inc\UtcClient.h
C++/WinRT version:2.0.220110.5
onecore\base\flighting\featuremanagement\libs\featureexperiments\featureexperimentmanager.cpp
w<bad cast
invalid string position
invalid stoul argument
stoul argument out of range
onecore\base\flighting\featuremanagement\libs\featureexperiments\wexplogger.cpp
H 0 L
length
RoOriginateLanguageException
onecore\base\flighting\featuremanagement\libs\featureexperiments\safeguardstreatmentsprovider.cpp
RoGetActivationFactory
CoIncrementMTAUsage
DllGetActivationFactory
bad allocation
onecore\base\flighting\featuremanagement\libs\featureexperiments\featureusagelistener.cpp
onecore\base\flighting\featuremanagement\libs\featureexperiments\onesettingstreatmentsprovider.cpp
onecore\base\flighting\common\inc\RegWow64Helpers.h
onecore\base\flighting\featuremanagement\libs\featureexperiments\enterprisetreatmentsprovider.cpp
Error: Found invalid feature configurations, valid DWORD value expected, value index: %u
ReconcileFeatureConfigurations
onecore\base\flighting\featuremanagement\libs\reconciliationtask\reconciliationtaskhandler.cpp
onecore\internal\sdk\inc\wil\opensource\wil\result.h
onecore\base\flighting\FeatureManagement\libs\inc\SafeguardsHelper.h
onecore\base\flighting\featuremanagement\libs\taskhandlers\usagedatareportingtaskhandler.cpp
onecore\base\flighting\featuremanagement\libs\taskhandlers\usagedataflushingtaskhandler.cpp
onecore\base\flighting\featuremanagement\libs\usagereporting\clientconfiguration.cpp
onecore\base\flighting\featuremanagement\libs\usagereporting\usagereporting.cpp
onecore\base\flighting\featuremanagement\libs\inc\StagingControls.h
onecore\base\flighting\featuremanagement\libs\featurestatewriter\stagingcontrols.cpp
onecore\base\flighting\featuremanagement\libs\featurestatewriter\stagingcontrolslkg.cpp
onecore\base\flighting\featuremanagement\libs\featurestatewriter\storagewriter.cpp
onecore\base\flighting\featuremanagement\libs\featurestatewriter\regpersistedkey.cpp
FlightIdRegistered
flightId
PartA_PrivTags
SetFeatureVariant
featureId
variantId
payload
SetFeatureEnablementState
featureId
featureEnabledState
featureEnabledStateKind
StateChange
flightId
PartA_PrivTags
OrphanedFlightId
flightId
PartA_PrivTags
FlightIdUnregistered
flightId
PartA_PrivTags
ExperimentDropped
flightId
PartA_PrivTags
LKGRestored
PartA_PrivTags
LkgFeatures
featureId
status
variant
payload
stateKind
flightId
firstStatus
CurrentFeatures
featureId
status
variant
payload
stateKind
flightId
firstStatus
Heartbeat
PartA_PrivTags
Features
featureId
status
variant
payload
stateKind
flightId
firstStatus
SafeguardsFeaturesReconcileStart
PartA_PrivTags
IgnoredByPolicy
PartA_PrivTags
ExperimentReconcileIgnored
PartA_PrivTags
FallbackError
PartA_PrivTags
wilResult
hresult
fileName
lineNumber
module
failureType
message
threadId
callContext
originatingContextId
originatingContextName
originatingContextMessage
currentContextId
currentContextName
currentContextMessage
FallbackError
PartA_PrivTags
wilResult
hresult
fileName
lineNumber
module
failureType
message
threadId
callContext
originatingContextId
originatingContextName
originatingContextMessage
currentContextId
currentContextName
currentContextMessage
failureId
failureCount
function
KirUsage
featureId
SafeguardsFeaturesAppliedFeaturesInfo
featureId
enabledState
priority
SafeguardsFeaturesGetFeaturesFromCtac
ctacAttribute
safeguardsFeatures
PartA_PrivTags
SafeguardsFeaturesParseFeaturesInfo
featureId
enabledState
priority
SafeguardsFeaturesPriorityNotAccepted
featureId
enabledState
priority
SafeguardsFeaturesSettingSafeguardsFlag
PartA_PrivTags
SafeguardsFeaturesApplingOnRegistry
PartA_PrivTags
SafeguardsFeaturesApplyFeatures
PartA_PrivTags
SafeguardsFeaturesParseFeatures
PartA_PrivTags
Status
flightId
featureId
variantId
PartA_PrivTags
ActivityStoppedAutomatically
ActivityIntermediateStop
PartA_PrivTags
wilActivity
hresult
threadId
ActivityError
PartA_PrivTags
wilActivity
hresult
fileName
lineNumber
module
failureType
message
threadId
callContext
originatingContextId
originatingContextName
originatingContextMessage
currentContextId
currentContextName
currentContextMessage
failureId
failureCount
function
ActivityError
PartA_PrivTags
wilActivity
hresult
fileName
lineNumber
module
failureType
message
threadId
callContext
originatingContextId
originatingContextName
originatingContextMessage
currentContextId
currentContextName
currentContextMessage
ReconcileFeatureConfigurations
PartA_PrivTags
wilActivity
threadId
ReconcileFeatureConfigurations
PartA_PrivTags
wilActivity
hresult
threadId
ReconcileFeatureConfigurations
PartA_PrivTags
PartA_PrivTags
wilActivity
hresult
fileName
lineNumber
module
failureType
message
threadId
callContext
originatingContextId
originatingContextName
originatingContextMessage
currentContextId
currentContextName
currentContextMessage
AggregateFeatureError
featureId
process
message
lineNumber
modulePath
callerReturnAddressOffset
callerModule
originName
originFile
originLineNumber
originModule
originCallerReturnAddressOffset
originCallerModule
timeSinceLastReportMS
AggregateUniqueUsage
FfeatureIds
Hcounts
HtimeSinceLastReportMS
AggregateDeviceUsage
FfeatureIds
HtimeSinceLastReportMS
RuntimeConfigWriteFailure
failureStatus
PartA_PrivTags
StorageConfigWriteFailure
failureStatus
PartA_PrivTags
Microsoft.Windows.FeatureQuality
Microsoft.Windows.FeatureQuality
Microsoft.Windows.WilFeatures
fcon.pdb
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.rdata$brc
.rdata$T$brc
.idata$5
.00cfg
.CRT$XCA
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gehcont
.gfids
.giats
.rdata
.rdata$r
.rdata$voltmd
.rdata$zETW0
.rdata$zETW1
.rdata$zETW2
.rdata$zETW9
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata
.xdata$x
minATL$__a
minATL$__m
minATL$__r
minATL$__z
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$brc
.data$r$brc
.data$rs$brc
.pdata
.didat$5
.rsrc$01
.rsrc$02
.H2,4P6
2:`6*,*&*"*
08@HPX
PolicyManager_GetPolicyInt
fcon.dll
ModifyStagingControlVariants
ModifyStagingControls
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetCtacPropertyAlloc
SubscribeFeatureReporting
UnsubscribeFeatureReporting
?_Xlength_error@std@@YAXPEBD@Z
msvcp_win.dll
_initterm
_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll
__CxxFrameHandler4
__std_terminate
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___stdio_common_vsnprintf_s
_o___stdio_common_vswprintf
_o__callnewh
_o__cexit
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__get_errno
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__wcsdup
_o__wcsicmp
_o_abort
_o_ceilf
_o_free
_o_iswspace
_o_malloc
_o_qsort
_o_realloc
_o_terminate
_o_wcscpy_s
_o_wcstoul
__C_specific_handler
__current_exception
__current_exception_context
memset
_CxxThrowException
api-ms-win-crt-private-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
EnterCriticalSection
ReleaseSemaphore
GetModuleHandleExW
LeaveCriticalSection
InitializeCriticalSectionEx
WaitForThreadpoolTimerCallbacks
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
ReleaseSRWLockExclusive
OutputDebugStringW
CloseThreadpoolTimer
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
SetThreadpoolTimer
ReleaseSRWLockShared
CreateThreadpoolTimer
HeapAlloc
GetProcAddress
CreateMutexExW
AcquireSRWLockShared
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
EventWriteTransfer
EventRegister
EventUnregister
WindowsDeleteString
CoTaskMemFree
CoTaskMemAlloc
WindowsGetStringRawBuffer
RoOriginateError
DecodePointer
InitOnceExecuteOnce
RoActivateInstance
RaiseException
WindowsCreateStringReference
EncodePointer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
RoOriginateErrorW
ResumeThread
FreeLibrary
FreeLibraryAndExitThread
CreateThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
api-ms-win-core-libraryloader-l1-2-0.dll
api-ms-win-core-synch-l1-1-0.dll
api-ms-win-core-heap-l1-1-0.dll
api-ms-win-core-errorhandling-l1-1-0.dll
api-ms-win-core-threadpool-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-0.dll
api-ms-win-core-localization-l1-2-0.dll
api-ms-win-core-debug-l1-1-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-eventing-provider-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
api-ms-win-core-com-l1-1-0.dll
api-ms-win-core-winrt-error-l1-1-0.dll
api-ms-win-core-util-l1-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-core-rtlsupport-l1-1-0.dll
api-ms-win-core-processthreads-l1-1-1.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-sysinfo-l1-1-0.dll
api-ms-win-core-interlocked-l1-1-0.dll
RtlQueryFeatureConfigurationChangeStamp
RtlPublishWnfStateData
RtlGetSystemBootStatus
RtlSetSystemBootStatus
RtlQueryAllFeatureConfigurations
RtlQueryFeatureUsageNotificationSubscriptions
RtlSetFeatureConfigurations
RtlSubscribeForFeatureUsageNotification
RtlUnsubscribeFromFeatureUsageNotifications
RtlIsStateSeparationEnabled
ntdll.dll
WindowsCreateString
CoCreateFreeThreadedMarshaler
EventSetInformation
RpcBindingFree
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
CoCreateInstance
InitOnceBeginInitialize
InitOnceComplete
CompareStringOrdinal
WindowsCompareStringOrdinal
CoTaskMemRealloc
RoGetActivationFactory
InitializeSRWLock
CoGetApartmentType
RoTransformError
RegOpenKeyExW
RegDeleteKeyExW
RegEnumKeyExW
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyW
PathAllocCombine
RegCloseKey
EventActivityIdControl
RegGetValueW
RegSetValueExW
RegCreateKeyExW
StringFromGUID2
CoCreateGuid
RegEnumKeyW
RegFlushKey
GetPersistedRegistryLocationW
RpcExceptionFilter
NdrClientCall3
RPCRT4.dll
api-ms-win-core-string-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-path-l1-1-0.dll
api-ms-win-core-registry-l2-1-0.dll
api-ms-win-stateseparation-helpers-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-apiquery-l1-1-0.dll
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?flags@ios_base@std@@QEBAHXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@G@std@@2V0locale@2@A
?widen@?$ctype@G@std@@QEBAGD@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
?_Xbad_function_call@std@@YAXXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
__CxxFrameHandler3
ResolveDelayLoadedAPI
DelayLoadFailureHook
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
api-ms-win-core-delayload-l1-1-1.dll
api-ms-win-core-delayload-l1-1-0.dll
RtlEqualUnicodeString
RtlIntegerToUnicodeString
ZwQueryKey
ZwOpenKeyEx
RtlAllocateHeap
ZwEnumerateValueKey
ZwEnumerateKey
RtlFreeHeap
ZwClose
InterlockedPushEntrySList
LoadLibraryW
MultiByteToWideChar
OLEAUT32.dll
api-ms-win-core-libraryloader-l1-2-1.dll
memcmp
memcpy
memmove
.?AVbad_alloc@std@@
.?AVResultException@wil@@
.?AVexception@std@@
.?AVbad_array_new_length@std@@
.?AVbad_cast@std@@
.?AV<lambda_a368c4f453dc3c7359f1ceffcb4ca690>@@
.?AV<lambda_150907acfd1b00f2ef73df3b583a23f7>@@
.?AV<lambda_0adb2ceba7f04f88e28be3ca3911873f>@@
.?AV<lambda_4342ac19f78846601f741f5a938723fc>@@
.?AV<lambda_e25d98aa505814564ab889e1f6ef8d9a>@@
.?AV<lambda_f32cb3425f377728a4d4f72b06ddcbde>@@
.?AVout_of_range@std@@
.?AUhresult_canceled@winrt@@
.?AUhresult_illegal_delegate_assignment@winrt@@
.?AUhresult_illegal_state_change@winrt@@
.?AUhresult_illegal_method_call@winrt@@
.?AUhresult_changed_state@winrt@@
.?AUhresult_class_not_registered@winrt@@
.?AUhresult_class_not_available@winrt@@
.?AUhresult_no_interface@winrt@@
.?AUhresult_out_of_bounds@winrt@@
.?AUhresult_invalid_argument@winrt@@
.?AUhresult_not_implemented@winrt@@
.?AUhresult_wrong_thread@winrt@@
.?AUhresult_error@winrt@@
.?AUhresult_access_denied@winrt@@
.?AVlogic_error@std@@
.?AVinvalid_argument@std@@
.?AV<lambda_3542d134cdd7784fc7841d164f335cf5>@@
.?AV<lambda_2fb786e69528556a76451d7c6702be62>@@
.?AV<lambda_ee4ca1655b9288e52b25c775fa3f0d71>@@
.?AV<lambda_e0921e37e0e80b1622ff6f1d264e11d0>@@
.?AV<lambda_81c792fff5110a84d8f1735ea6b75661>@@
.?AV<lambda_fde96293874d0c10cfaf39fa47dfd5df>@@
.?AVtype_info@@
EBiQPSe
<.N,ZX
ext-ms-win-devmgmt-policy-l1-1-0
ext-ms-win-devmgmt-policy-l1-1-1
ext-ms-win-devmgmt-policy-l1-1-2
ext-ms-win-devmgmt-policy-l1-1-3
api-ms-win-core-synch-l1-2-0.dll
kernel32.dll
%hs(%u)\%hs!%p:
%hs!%p:
(caller: %p)
%hs(%d) tid(%x) %08X %ws
Msg:[%ws]
CallContext:[%hs]
[%hs(%hs)]
kernelbase.dll
lstd::exception: %hs
ntdll.dll
Local\SM0:%lu:%lu:%hs
FeatureConfigs
pMxVersion
MxState
activatibleClassId
Windows.Internal.Flighting.FeatureConfiguration.FeatureConfigurationsManager
InternalExperiment
FX:00000000
ncalrpc
%ws:%08X
ASM-WindowsDefault
telemetry
Windows.Internal.Flighting.ClientAttributes
AllowExperimentation
System
Windows.Foundation.Collections.IIterator`1<Windows.Internal.Flighting.FeatureConfiguration.FeatureFlightId>
Windows.Foundation.Collections.IVectorView`1<Windows.Internal.Flighting.FeatureConfiguration.FeatureFlightId>
Windows.Foundation.Collections.IVector`1<Windows.Internal.Flighting.FeatureConfiguration.FeatureFlightId>
Windows.Internal.Flighting.OneSettings.OneSettingsPayload
Windows.Internal.Flighting.OneSettings.OneSettingsManager
combase.dll
Unknown
CurrentTargetOs
GatedFeature_
yWindows.Foundation.Collections.IIterator`1<String>
Windows.Foundation.Collections.IIterable`1<String>
entityId
featureId
featureOptions
featurePayload
variant
SOFTWARE\Microsoft\Windows\CurrentVersion\Fcon\FeatureManagement\CommitedOverrides
SOFTWARE\Microsoft\Windows\CurrentVersion\Fcon
FeatureConfiguration
TimeSinceLastLog
pUsageSubscriptions
FeatureManagement
LastKnownGood
Overrides
EnabledStateOptions
EnabledState
VariantPayloadKind
Variant
ReportingKind
VariantPayload
ReportingTarget
ReportingOptions
SYSTEM\CurrentControlSet\Control\FeatureManagement
LKGConfiguration
SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement
%s\%lu\%lu
ImpressionTime
FlightId
Safeguard
FeatureManagement\Overrides
\Registry\Machine\SYSTEM\CurrentControlSet\Control
\Registry\Machine\OSBOOT\ControlSetOverride
\Registry\Machine\SYSTEM\CurrentControlSet\Policies\Microsoft
WEVT_TEMPLATE
Microsoft-Windows-FeatureConfiguration/Analytic
Microsoft-Windows-FeatureConfiguration/Operational
FeatureStateMap
ValueTypeMap
EventData
RegKeyName
ValueName
ValueType
ErrorCode
RegKeyName
ValueName
ValueType
ErrorCode
EventData
ErrorCode
ErrorCode
EventData
FeatureId
FeatureState
FeatureId
FeatureState
EventData
FeatureId
FeatureId
EventData
FeatureId
FeatureId
Microsoft-Windows-FeatureConfiguration
win:Start
win:Stop
OpSetState
OpResetState
win:Error
win:Informational
FeatureConfigurationBySystemPolicy
AlwaysDisabled
DisabledByDefault
EnabledByDefault
AlwaysEnabled
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Microsoft Corporation
FileDescription
Feature Configuration
FileVersion
10.0.22621.1344 (WinBuild.160101.0800)
InternalName
fcon.dll
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
fcon.dll
ProductName
Microsoft
Windows
Operating System
ProductVersion
10.0.22621.1344
VarFileInfo
Translation
WEVT_TEMPLATE
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Clean
VIPRE Clean
Sangfor Clean
CrowdStrike Clean
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec Clean
tehtris Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
Cynet Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Clean
Tencent Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
Trapmine Clean
FireEye Clean
Emsisoft Clean
Ikarus Clean
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
GData Clean
Google Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
DeepInstinct Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG Clean
Avast Clean
No IRMA results available.