DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Overview
overview
8Static
static
8(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1(...ng.dll
windows7-x64
1(...ng.dll
windows10-2004-x64
1GetPcInfo.exe
windows7-x64
1GetPcInfo.exe
windows10-2004-x64
1Index_dll.dll
windows7-x64
3Index_dll.dll
windows10-2004-x64
3K3ICWorkFlow.dll
windows7-x64
1K3ICWorkFlow.dll
windows10-2004-x64
1KmInst32.exe
windows7-x64
1KmInst32.exe
windows10-2004-x64
1KmSetKX32.exe
windows7-x64
1KmSetKX32.exe
windows10-2004-x64
1Netviewer....es.dll
windows7-x64
1Netviewer....es.dll
windows10-2004-x64
1PFXRsaCertDown.dll
windows7-x64
1PFXRsaCertDown.dll
windows10-2004-x64
1Pdfcore.exe
windows7-x64
1Pdfcore.exe
windows10-2004-x64
3SafeDogGua...er.exe
windows7-x64
8SafeDogGua...er.exe
windows10-2004-x64
8SafeDogNetDrv08.exe
windows7-x64
SafeDogNetDrv08.exe
windows10-2004-x64
hpmcro32.dll
windows7-x64
1hpmcro32.dll
windows10-2004-x64
1kmtwainlang.dll
windows7-x64
1kmtwainlang.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
(2040 2135 2635 2540 2235)kmtwainlang.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
GetPcInfo.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
GetPcInfo.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Index_dll.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
Index_dll.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
K3ICWorkFlow.dll
Resource
win7-20220901-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
K3ICWorkFlow.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
KmInst32.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
KmInst32.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
KmSetKX32.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
KmSetKX32.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Netviewer.resources.dll
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
Netviewer.resources.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
PFXRsaCertDown.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
PFXRsaCertDown.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
Pdfcore.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Pdfcore.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
SafeDogGuardCenter.exe
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
SafeDogGuardCenter.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
SafeDogNetDrv08.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
SafeDogNetDrv08.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
hpmcro32.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
hpmcro32.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
kmtwainlang.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
kmtwainlang.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
4b5980a7d858e8daca95903820d235567864ca117c37d9a8e011edb9468e8d9e
-
Size
3.9MB
-
MD5
2118060a0b4a3dc8a7d2ec3b255003ef
-
SHA1
d7929b060002ec1cf618e6e510187e7771d25603
-
SHA256
4b5980a7d858e8daca95903820d235567864ca117c37d9a8e011edb9468e8d9e
-
SHA512
1f303fb8c56e9a4c5f2e826b9f3ab3100440b12aa390b467e0ac9ad5a2d2755673593f3c4b6cd11d00f15cf29f58c559f4e0c174f6e50e178a55327ca6c23d69
-
SSDEEP
98304:bsqyf8cHeOvsCyvqqtWJqBvo+kPWbvcWqe8arY+TTiD9GlC:Aqyfj0xCWgqBvoZW7357TQcC
Score
8/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/SafeDogGuardCenter.exe vmprotect
Files
-
4b5980a7d858e8daca95903820d235567864ca117c37d9a8e011edb9468e8d9e.zip
-
(2040 2135 2635 2540 2235)kmtwainlang.dll.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
(2040 2135 2635 2540 2235)kmtwainlang.dll12.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
(2040 2135 2635 2540 2235)kmtwainlang.dll3.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
(2040 2135 2635 2540 2235)kmtwainlang.dll7.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
GetPcInfo.exe.exe windows x86
e5cc2ce449a96b08689f2060dc877940
Code Sign
04:00:00:00:00:01:2f:4e:e1:52:d7Certificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before13/04/2011, 10:00Not After28/01/2028, 12:00SubjectCN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:25:07:1d:f9:afCertificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18/11/2009, 10:00Not After18/03/2019, 10:00SubjectCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate
IssuerCN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BENot Before24/05/2016, 00:00Not After24/06/2027, 00:00SubjectCN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SGExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0fCertificate
IssuerCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignNot Before15/06/2016, 00:00Not After15/06/2024, 00:00SubjectCN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
61:29:15:27:00:00:00:00:00:2aCertificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before15/04/2011, 19:55Not After15/04/2021, 20:05SubjectCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
13:58:8b:74:ef:40:0d:cd:3e:37:ff:38Certificate
IssuerCN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BENot Before11/01/2017, 06:24Not After12/01/2020, 06:24SubjectSERIALNUMBER=91440300738803352C,CN=深圳市德尔软件技术有限公司,O=深圳市德尔软件技术有限公司,STREET=福田区新洲路东深圳国际商会大厦0509房,L=SHENZHEN,ST=GUANGDONG,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6eExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:31:89:c6:37:e8Certificate
IssuerCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignNot Before02/08/2011, 10:00Not After02/08/2019, 10:00SubjectCN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BEExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
04:00:00:00:00:01:25:07:1d:f9:afCertificate
IssuerCN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BENot Before18/11/2009, 10:00Not After18/03/2019, 10:00SubjectCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignKey Usages
KeyUsageCertSign
KeyUsageCRLSign
42:67:bb:41:39:3d:2a:0e:b1:47:90:9bCertificate
IssuerCN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BENot Before14/06/2016, 07:04Not After11/05/2019, 08:50SubjectCN=深圳市德尔软件技术有限公司,O=深圳市德尔软件技术有限公司,L=深圳,ST=广东,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
11:21:06:f1:0f:ce:68:f0:9b:fa:e5:5b:18:cd:8f:20:01:77Certificate
IssuerCN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BENot Before24/05/2016, 00:00Not After24/06/2027, 00:00SubjectCN=GlobalSign TSA for Advanced - G2,O=GMO GlobalSign Pte Ltd,C=SGExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
04:00:00:00:00:01:31:89:c6:50:04Certificate
IssuerCN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSignNot Before02/08/2011, 10:00Not After29/03/2029, 10:00SubjectCN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BEKey Usages
KeyUsageCertSign
KeyUsageCRLSign
f0:06:e5:0f:11:95:aa:ed:12:13:d7:b8:c4:60:ff:8f:92:35:13:52Signer
Actual PE Digestf0:06:e5:0f:11:95:aa:ed:12:13:d7:b8:c4:60:ff:8f:92:35:13:52Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=深圳市德尔软件技术有限公司,O=深圳市德尔软件技术有限公司,L=深圳,ST=广东,C=CN01/03/2017, 06:29 Valid: false
a4:a4:63:b8:e6:d1:1d:5a:10:ea:bc:c1:61:de:8f:08:6e:8c:ed:f1:34:1b:11:5d:de:2f:7a:95:a4:23:0f:0fSigner
Actual PE Digesta4:a4:63:b8:e6:d1:1d:5a:10:ea:bc:c1:61:de:8f:08:6e:8c:ed:f1:34:1b:11:5d:de:2f:7a:95:a4:23:0f:0fDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateSERIALNUMBER=91440300738803352C,CN=深圳市德尔软件技术有限公司,O=深圳市德尔软件技术有限公司,STREET=福田区新洲路东深圳国际商会大厦0509房,L=SHENZHEN,ST=GUANGDONG,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e01/03/2017, 06:28 Valid: true
Chain 1
SERIALNUMBER=91440300738803352C,CN=深圳市德尔软件技术有限公司,O=深圳市德尔软件技术有限公司,STREET=福田区新洲路东深圳国际商会大厦0509房,L=SHENZHEN,ST=GUANGDONG,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Chain 2
SERIALNUMBER=91440300738803352C,CN=深圳市德尔软件技术有限公司,O=深圳市德尔软件技术有限公司,STREET=福田区新洲路东深圳国际商会大厦0509房,L=SHENZHEN,ST=GUANGDONG,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13085348454e5a48454e,1.3.6.1.4.1.311.60.2.1.2=#13094755414e47444f4e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleFileNameA
FreeLibrary
GetProcAddress
WritePrivateProfileStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Index_dll.dll.dll windows x86
12e3ab750ea5086d35954831823160d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
GetSystemTime
GetStringTypeExA
lstrcpynA
GetFullPathNameA
GetShortPathNameA
GetThreadLocale
lstrcmpiA
GetCurrentThread
GetModuleFileNameA
GetCurrentThreadId
GlobalAlloc
lstrcmpA
GlobalDeleteAtom
SetEvent
GlobalLock
WaitForSingleObject
InterlockedIncrement
SuspendThread
CreateEventA
LocalFree
InterlockedDecrement
WideCharToMultiByte
InitializeCriticalSection
FormatMessageA
LocalAlloc
GlobalFree
TlsAlloc
DeleteCriticalSection
GetLocaleInfoW
GlobalUnlock
GetUserDefaultLCID
SetEnvironmentVariableA
GetVersionExA
IsValidCodePage
EnumSystemLocalesA
GetLocaleInfoA
SetStdHandle
IsValidLocale
IsBadCodePtr
GetStringTypeW
Sleep
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
GetStringTypeA
UnhandledExceptionFilter
LCMapStringW
CompareStringW
CompareStringA
GetEnvironmentStrings
LCMapStringA
GetEnvironmentStringsW
VirtualAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapDestroy
VirtualFree
HeapCreate
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
FatalAppExitA
GetStartupInfoA
GetLocalTime
SetHandleCount
GetACP
GetTimeZoneInformation
FindFirstFileA
FindClose
RaiseException
ExitThread
ExitProcess
CreateThread
lstrlenA
MultiByteToWideChar
lstrcpyA
TerminateProcess
DebugBreak
OutputDebugStringA
GetStdHandle
HeapValidate
GetCommandLineA
RtlUnwind
GetOEMCP
GetDiskFreeSpaceA
GetTempFileNameA
GetProcessVersion
GetCPInfo
SizeofResource
GetPrivateProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
SetFileAttributesA
GetPrivateProfileIntA
GlobalFlags
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
GetFileAttributesA
GetFileTime
GetFileSize
VirtualProtect
GetProfileIntA
MulDiv
SetThreadPriority
ResumeThread
GetThreadPriority
GlobalAddAtomA
FreeLibrary
GlobalGetAtomNameA
LockResource
GlobalFindAtomA
GetModuleHandleA
FreeResource
FindResourceA
LoadResource
IsBadReadPtr
FileTimeToLocalFileTime
FileTimeToSystemTime
IsBadStringPtrW
IsBadWritePtr
IsBadStringPtrA
lstrcatA
SetLastError
GetVersion
LocalReAlloc
SetErrorMode
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
LoadLibraryA
SetFilePointer
GetLastError
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
GetProcAddress
FlushFileBuffers
CloseHandle
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
user32
GetForegroundWindow
SetForegroundWindow
ShowCaret
SendNotifyMessageA
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
SetCapture
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetWindow
GetCapture
WinHelpA
MapDialogRect
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
GetWindowContextHelpId
SetWindowContextHelpId
CreateWindowExA
GetClassLongA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
RegisterWindowMessageA
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
UnregisterClassA
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
SubtractRect
UnionRect
IntersectRect
OffsetRect
InflateRect
EqualRect
SetRectEmpty
SetRect
PtInRect
IsRectEmpty
CopyRect
UnhookWindowsHookEx
OemToCharA
CharToOemA
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CloseWindow
OpenIcon
GetAsyncKeyState
ReleaseCapture
SetCursorPos
DestroyCursor
LoadAcceleratorsA
DestroyMenu
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
LoadStringA
GetClipboardFormatNameA
GetDialogBaseUnits
DestroyIcon
PostThreadMessageA
LoadCursorA
GetClassNameA
GetDlgCtrlID
GetClassInfoA
SetPropA
CallNextHookEx
ValidateRect
GetCursorPos
SetWindowsHookExA
GetWindowLongA
GetParent
GetLastActivePopup
IsWindowEnabled
MessageBoxA
EnableWindow
SetCursor
PeekMessageA
PostQuitMessage
GetSystemMetrics
CharUpperA
wsprintfA
TabbedTextOutA
PostMessageA
IsWindow
SendMessageA
ValidateRgn
IsWindowVisible
GetWindowDC
ReleaseDC
InvalidateRgn
gdi32
SetTextJustification
SetMapMode
SetStretchBltMode
CreateEnhMetaFileA
CloseEnhMetaFile
CreateMetaFileA
CreateBitmap
GetObjectA
ExtTextOutA
UnrealizeObject
GetObjectType
GetStockObject
CreatePenIndirect
ExtCreatePen
CreatePen
CreateHatchBrush
CreateBrushIndirect
CreateSolidBrush
CreateDIBPatternBrushPt
CreateFontIndirectA
CreatePatternBrush
CreateBitmapIndirect
SetBitmapBits
CreateFontA
SetBitmapDimensionEx
GetBitmapDimensionEx
GetBitmapBits
CreateDiscardableBitmap
CreatePalette
CreateCompatibleBitmap
GetPaletteEntries
SetPaletteEntries
CreateHalftonePalette
GetNearestPaletteIndex
ResizePalette
AnimatePalette
CreateRectRgnIndirect
CreateEllipticRgn
CreateRectRgn
CreatePolygonRgn
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
PathToRegion
ExtCreateRegion
CreateRoundRectRgn
SetRectRgn
CombineRgn
GetRegionData
OffsetRgn
GetRgnBox
EqualRgn
RectInRegion
CreateDCA
PtInRegion
CreateCompatibleDC
GetDeviceCaps
CreateICA
SetBrushOrgEx
EnumObjects
GetBrushOrgEx
SetViewportOrgEx
GetNearestColor
RealizePalette
UpdateColors
OffsetViewportOrgEx
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
GetMapMode
GetViewportOrgEx
GetTextColor
GetWindowOrgEx
GetWindowExtEx
GetViewportExtEx
LPtoDP
FillRgn
DPtoLP
InvertRgn
PaintRgn
FrameRgn
RectVisible
GetCurrentPositionEx
PtVisible
Polyline
Chord
Arc
Pie
Polygon
Ellipse
Rectangle
RoundRect
PolyPolygon
BitBlt
StretchBlt
PatBlt
SetPixel
FloodFill
GetPixel
TextOutA
GetTextExtentPoint32A
ExtFloodFill
GetTextFaceA
GetTextMetricsA
GetTextAlign
GetCharWidthA
GetAspectRatioFilterEx
GetTextCharacterExtra
SetBoundsRect
GetBoundsRect
Escape
GetOutlineTextMetricsA
GetCharABCWidthsA
ResetDCA
GetKerningPairsA
GetGlyphOutlineA
GetFontData
StartPage
EndPage
StartDocA
AbortDoc
EndDoc
SetAbortProc
PlgBlt
SetPixelV
MaskBlt
GetArcDirection
PolyPolyline
AngleArc
GetCurrentObject
PolyBezier
StretchDIBits
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
DeleteObject
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
CloseMetaFile
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
GdiComment
GetColorAdjustment
WidenPath
SelectObject
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
PlayEnhMetaFile
FillPath
EndPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
AbortPath
CloseFigure
BeginPath
ExtEscape
GetCharWidthFloatA
GetCharABCWidthsFloatA
DrawEscape
comdlg32
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
shell32
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
ExtractIconA
comctl32
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_Draw
DestroyPropertySheetPage
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_DragLeave
ImageList_DragEnter
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ord8
ord17
PropertySheetA
ImageList_GetIcon
CreatePropertySheetPageA
ord13
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ord14
ImageList_GetImageCount
ImageList_Add
ImageList_AddMasked
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
Exports
Exports
create_index_file
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
K3ICWorkFlow.dll.dll regsvr32 windows x86
79e1694ea0f0f04b58c9258a7bc67da2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaFreeVar
__vbaLenBstr
__vbaLineInputStr
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
__vbaVarIndexStore
__vbaFreeObjList
_adj_fprem1
ord519
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaLateMemSt
__vbaVarIndexLoadRefLock
__vbaExitProc
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
__vbaBoolVar
ord520
__vbaBoolVarNull
__vbaRefVarAry
_CIsin
ord631
__vbaErase
ord632
__vbaVarZero
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaStrCmp
__vbaVarTstEq
ord560
__vbaI2I4
__vbaObjVar
ord562
DllFunctionCall
__vbaVarLateMemSt
__vbaCastObjVar
__vbaLbound
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaVarAnd
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaNew2
ord648
__vbaVarLateMemCallLdRf
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
ord681
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
__vbaVarCmpEq
ord104
ord105
__vbaAryLock
__vbaLateMemCall
__vbaVarDup
__vbaAryVarVarg
ord616
__vbaVarCopy
ord617
__vbaLateMemCallLd
_CIatan
__vbaAryCopy
__vbaStrMove
__vbaCastObj
ord619
_allmul
__vbaLateMemCallSt
_CItan
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
KmInst32.exe.exe windows x86
74266e90045b9b8b676a8a7e8b06097a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFileTimeToFileTime
GetFileAttributesW
SetFileTime
OutputDebugStringA
GetLocalTime
lstrcpyA
OutputDebugStringW
InterlockedDecrement
WritePrivateProfileStringA
GetPrivateProfileStringA
GetWindowsDirectoryA
GetShortPathNameA
MoveFileExW
GetTempFileNameW
GetTimeZoneInformation
GetSystemDirectoryA
SetLastError
GetModuleFileNameA
LoadLibraryA
lstrlenA
SetEndOfFile
InitializeCriticalSectionAndSpinCount
SystemTimeToFileTime
GetStringTypeW
DisconnectNamedPipe
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
CreateThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ExitProcess
LCMapStringA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
OpenProcess
FlushFileBuffers
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
RtlUnwind
GetCurrentDirectoryW
GetTempPathW
GetLocaleInfoW
GetModuleHandleA
GetTickCount
FormatMessageW
lstrlenW
HeapAlloc
GetFileInformationByHandle
FileTimeToLocalFileTime
CompareFileTime
MoveFileW
ExitThread
FreeEnvironmentStringsW
CreateNamedPipeW
GetLastError
GetModuleHandleW
GetProcessHeap
HeapFree
GetSystemWindowsDirectoryW
CopyFileW
SetFilePointer
CreateFileA
GetFileSize
RemoveDirectoryW
CreateProcessW
GetExitCodeProcess
GetFullPathNameW
GetWindowsDirectoryW
FreeLibrary
LoadLibraryW
GetProcAddress
FindNextFileW
CreateFileW
CloseHandle
ReadFile
WriteFile
GetModuleFileNameW
GetCurrentProcess
DeleteFileW
CreateDirectoryW
FindClose
FindFirstFileW
GetSystemDirectoryW
GetACP
GetVersionExW
SetFileAttributesW
Sleep
GetStringTypeA
user32
GetAncestor
GetWindowThreadProcessId
DestroyWindow
SendNotifyMessageW
GetDesktopWindow
PostMessageW
GetDC
ReleaseDC
wsprintfA
SendMessageW
GetWindowRect
wsprintfW
GetClientRect
DefWindowProcW
GetWindowLongW
PostQuitMessage
UpdateWindow
ShowWindow
SetWindowLongW
wvsprintfA
CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
GetMessageW
IsWindow
EnumWindows
EnumChildWindows
GetWindowTextW
GetWindowTextA
GetClassNameA
GetDlgCtrlID
gdi32
GetStockObject
DeleteObject
AddFontResourceW
EnumFontFamiliesExW
winspool.drv
AddMonitorW
DeleteMonitorW
GetPrinterDriverDirectoryW
ClosePrinter
DeletePrinter
OpenPrinterW
EnumPrintersW
SetPrinterDataW
DeletePrinterConnectionW
EnumPrinterDriversW
DeletePrinterDriverW
AddPrinterDriverW
SetPrinterW
AddPrinterW
ord204
DeletePortW
EnumMonitorsW
GetPrinterDataExW
SetPrinterDataExW
GetPrinterW
EnumPortsW
AddPortW
DeletePrinterDriverExW
advapi32
RegCloseKey
QueryServiceStatus
DeleteService
CreateServiceW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
ControlService
OpenServiceW
QueryServiceConfigW
StartServiceW
OpenSCManagerW
CloseServiceHandle
RegConnectRegistryW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHChangeNotify
ole32
PropVariantClear
CoInitializeEx
CLSIDFromString
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeSecurity
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
VariantClear
SysFreeString
SysAllocString
setupapi
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupFindNextMatchLineW
SetupIterateCabinetW
SetupCopyOEMInfW
SetupDiCallClassInstaller
SetupGetLineCountW
SetupOpenInfFileW
SetupCloseInfFile
SetupDiOpenDevRegKey
SetupDiDeleteDeviceInfo
SetupDiSetDeviceRegistryPropertyW
SetupDiGetClassDevsExW
SetupGetLineByIndexW
SetupOpenAppendInfFileW
SetupGetIntField
SetupFindFirstLineW
SetupGetStringFieldW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiRemoveDevice
mscms
GetColorDirectoryW
lz32
LZClose
LZOpenFileW
LZCopy
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
VerQueryValueA
Sections
.text Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
KmSetKX32.exe.exe windows x86
292c37cee0faa14864934dd371943d84
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
GetVersionExW
SetLastError
GetModuleFileNameA
HeapFree
HeapAlloc
GetStartupInfoW
RtlUnwind
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
RaiseException
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
LCMapStringA
VirtualAlloc
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
OutputDebugStringW
lstrcpyA
GetLocalTime
GetModuleHandleA
GetCurrentProcess
MulDiv
GetModuleFileNameW
GetSystemDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
CreateFileA
GetFileSize
SetFilePointer
ReadFile
GetSystemTime
IsValidLocale
GetLocaleInfoA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CreateFileW
CloseHandle
GetVersionExA
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetProfileStringA
LoadLibraryA
GetProcAddress
GetLastError
LoadLibraryW
FreeLibrary
GetProcessHeap
Sleep
user32
wvsprintfA
GetDesktopWindow
GetDC
ReleaseDC
MessageBoxA
wsprintfW
wsprintfA
winspool.drv
GetPrinterDataA
OpenPrinterW
OpenPrinterA
ClosePrinter
SetPrinterW
GetPrinterDriverW
GetPrinterDriverA
GetPrinterW
EnumPrintersW
DeletePrinterDataW
SetPrinterDataA
GetPrinterDataW
GetPrinterA
SetPrinterDataW
advapi32
RegConnectRegistryW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
StartServiceW
QueryServiceStatus
ControlService
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
gdi32
EnumFontFamiliesExW
DeleteDC
EnumFontsA
EnumFontFamiliesExA
CreateCompatibleDC
SetGraphicsMode
DeleteObject
GetGlyphOutlineA
GetPath
FlattenPath
EndPath
TextOutW
BeginPath
FloodFill
SetBkMode
GetTextMetricsA
GetTextExtentPoint32W
GetGlyphIndicesW
SelectObject
GetGraphicsMode
CreateFontA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
Exports
Exports
??0?$TARRAY@PAUARGS@@$00@@QAE@XZ
??1?$TARRAY@PAUARGS@@$00@@QAE@XZ
??4?$TARRAY@PAUARGS@@$00@@QAEAAV0@ABV0@@Z
??A?$TARRAY@PAUARGS@@$00@@QBEABQAUARGS@@I@Z
?Add@?$TARRAY@PAUARGS@@$00@@QAEHPAUARGS@@@Z
?Clear@?$TARRAY@PAUARGS@@$00@@QAEXXZ
?Init@?$TARRAY@PAUARGS@@$00@@QAEXXZ
?Length@?$TARRAY@PAUARGS@@$00@@QAEIXZ
?Resize@?$TARRAY@PAUARGS@@$00@@QAE_NI@Z
Sections
.text Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Netviewer.resources.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PFXRsaCertDown.dll.dll windows x86
d51f872a487e6f2666aaacab19d262ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
ExitProcess
QueryPerformanceFrequency
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
SetStdHandle
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CreateFileW
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
Sleep
SearchPathA
GetProfileIntA
GetTickCount
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
FindResourceExW
lstrcpyA
GetACP
GetCPInfo
GetOEMCP
VirtualProtect
GlobalFindAtomA
lstrcmpW
FreeResource
FindNextFileA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetVolumeInformationA
LoadLibraryA
lstrcmpiA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryA
FindResourceA
GetSystemDirectoryW
EncodePointer
GlobalGetAtomNameA
SetErrorMode
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
ResumeThread
SetThreadPriority
WaitForSingleObject
SetEvent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetModuleFileNameA
FreeLibrary
GetVersionExA
GetCurrentThreadId
GetCurrentThread
SetLastError
CopyFileA
FormatMessageA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
LocalFree
LocalAlloc
ReadFile
CloseHandle
GetFileSize
CreateFileA
MultiByteToWideChar
GetPrivateProfileStringA
GetWindowsDirectoryA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetSystemInfo
GetModuleHandleA
GetFileType
user32
DestroyMenu
DestroyIcon
IsDialogMessageA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongA
SetWindowLongA
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetMenuItemInfoA
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
CharUpperA
FillRect
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
UnregisterClassA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
EnableScrollBar
UpdateWindow
KillTimer
SetTimer
RealChildWindowFromPoint
GetWindow
GetClassNameA
PtInRect
InflateRect
IntersectRect
SetRectEmpty
OffsetRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
MessageBeep
WindowFromPoint
DrawFocusRect
IsRectEmpty
LoadImageA
DrawIconEx
GetIconInfo
GetDlgItem
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
PostMessageA
PostQuitMessage
GetDesktopWindow
SendMessageA
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetParent
LoadBitmapW
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
ShowOwnedPopups
SetCursor
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetWindowThreadProcessId
GetLastActivePopup
UnhookWindowsHookEx
GetSystemMetrics
GetDC
CopyAcceleratorTableA
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorA
HideCaret
InvertRect
LoadCursorW
NotifyWinEvent
DestroyAcceleratorTable
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
GetWindowTextA
GetWindowTextLengthA
GetClientRect
CopyImage
SystemParametersInfoA
DeleteMenu
GetDlgCtrlID
SetWindowTextA
GetWindowRect
ClientToScreen
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyA
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongA
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
InvalidateRect
GetKeyboardState
gdi32
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsA
LineTo
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
CreateBitmap
GetDeviceCaps
CreateDCA
EnumFontFamiliesExA
CopyMetaFileA
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA
shell32
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
SHAppBarMessage
DragFinish
shlwapi
PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA
UrlUnescapeA
PathFindExtensionA
uxtheme
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
ole32
OleLockRunning
IsAccelerator
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
DoDragDrop
oleaut32
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
VarBstrFromDate
VariantInit
SysAllocString
VariantCopy
VariantChangeType
crypt32
CertVerifyTimeValidity
CryptDecodeObjectEx
CertOpenStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertCloseStore
PFXImportCertStore
CertOpenSystemStoreA
CertAddCertificateContextToStore
libeay32
ord602
ord607
ord584
ord2071
ord571
ord606
ord283
ord485
ord279
ord605
ord333
ord608
ord600
ord870
ord851
ord577
ord565
ord484
ord3212
ord754
ord748
ord641
ord1305
ord281
ord1288
ord1291
wininet
InternetCanonicalizeUrlA
InternetGetConnectedState
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCrackUrlA
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundA
timeGetTime
Exports
Exports
DllPfxCertDownLoad
DllPfxCertInstallIE
DllPfxTimeValidity
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Pdfcore.exe.exe windows x86
098a960507e7735e4fb871e83ac5bd5f
Code Sign
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2013, 12:00Not After22/10/2028, 12:00SubjectCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0f:b9:55:a7:b4:a0:0f:cd:5c:c7:f5:f3:db:73:45:6fCertificate
IssuerCN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before30/04/2021, 00:00Not After10/05/2023, 23:59SubjectCN=Beijing Hitencent Technology Co. Ltd.,OU=Technical Department,O=Beijing Hitencent Technology Co. Ltd.,ST=Beijing,C=CNExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29/03/2022, 00:00Not After14/03/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
f3:79:32:c9:88:03:f1:4d:65:dd:05:78:28:35:94:1a:ad:8f:08:bb:32:5a:83:e1:99:0e:05:2c:37:28:fa:36Signer
Actual PE Digestf3:79:32:c9:88:03:f1:4d:65:dd:05:78:28:35:94:1a:ad:8f:08:bb:32:5a:83:e1:99:0e:05:2c:37:28:fa:36Digest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateCN=Beijing Hitencent Technology Co. Ltd.,OU=Technical Department,O=Beijing Hitencent Technology Co. Ltd.,ST=Beijing,C=CN22/08/2022, 01:57 Valid: true
Chain 1
CN=Beijing Hitencent Technology Co. Ltd.,OU=Technical Department,O=Beijing Hitencent Technology Co. Ltd.,ST=Beijing,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
CloseHandle
ReadFile
CreateFileW
DeleteFileW
CopyFileW
GetProcAddress
LoadLibraryW
GetModuleFileNameW
FlushFileBuffers
CreateFileA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
GetStartupInfoW
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
shlwapi
SHGetValueW
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SafeDogGuardCenter.exe.exe windows x86
d46718b35646f87d47df6a2ed6a8c986
Code Sign
19:9d:f8:8eCertificate
IssuerCN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CNNot Before08/08/2009, 01:00Not After08/08/2024, 01:00SubjectCN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CNKey Usages
KeyUsageCertSign
KeyUsageCRLSign
7d:81:56:50:64:d7Certificate
IssuerCN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CNNot Before17/07/2011, 20:27Not After19/07/2014, 01:43SubjectCN=Hangzhou Chuangju Technology Co.\,LTD,O=Hangzhou Chuangju Technology Co.\,LTD,L=Hangzhou,ST=Zhejiang,C=CN,1.2.840.113549.1.9.1=#0c0e7765624073616665646f672e636eExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
3dCertificate
IssuerCN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=ILNot Before01/03/2011, 01:00Not After01/03/2016, 01:00SubjectCN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CNKey Usages
KeyUsageCertSign
KeyUsageCRLSign
3a:4e:c7:fc:b0:48:6a:34:91:f4:a6:3b:7d:af:be:04:82:73:72:1aSigner
Actual PE Digest3a:4e:c7:fc:b0:48:6a:34:91:f4:a6:3b:7d:af:be:04:82:73:72:1aDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Hangzhou Chuangju Technology Co.\,LTD,O=Hangzhou Chuangju Technology Co.\,LTD,L=Hangzhou,ST=Zhejiang,C=CN,1.2.840.113549.1.9.1=#0c0e7765624073616665646f672e636e26/08/2022, 16:48 Valid: false
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
safedogserverdll
AccountSafeStop
log4cplusu
?getRoot@Logger@log4cplus@@SA?AV12@XZ
ws2_32
WSACleanup
crashreport
InstallCrashReportW
kernel32
FormatMessageA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ExitWindowsEx
advapi32
InitializeSecurityDescriptor
shell32
CommandLineToArgvW
communicate
_UnInitial@4
log7
?WriteLogA@log7@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N1@Z
config7
??BCConfigElem@config7@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
updatehelp
?UpdateHelp@@YAXXZ
notify
ord4
msvcp90
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
msvcr90
??0exception@std@@QAE@XZ
psapi
EnumProcessModules
iphlpapi
GetAdaptersInfo
ole32
CoInitializeEx
Sections
.text Size: - Virtual size: 410KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 1014KB - Virtual size: 1013KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SafeDogNetDrv08.sys.exe windows x86
c3cf230c2dec88fdf2f353911df309a1
Code Sign
19:9d:f8:8eCertificate
IssuerCN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CNNot Before08/08/2009, 01:00Not After08/08/2024, 01:00SubjectCN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CNKey Usages
KeyUsageCertSign
KeyUsageCRLSign
7d:81:56:50:64:d7Certificate
IssuerCN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CNNot Before17/07/2011, 20:27Not After19/07/2014, 01:43SubjectCN=Hangzhou Chuangju Technology Co.\,LTD,O=Hangzhou Chuangju Technology Co.\,LTD,L=Hangzhou,ST=Zhejiang,C=CN,1.2.840.113549.1.9.1=#0c0e7765624073616665646f672e636eExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
61:39:bb:9c:00:00:00:00:00:33Certificate
IssuerCN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before15/04/2011, 20:13Not After15/04/2021, 20:23SubjectCN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=ILKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3dCertificate
IssuerCN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=ILNot Before01/03/2011, 01:00Not After01/03/2016, 01:00SubjectCN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CNKey Usages
KeyUsageCertSign
KeyUsageCRLSign
e5:41:67:e9:c6:8e:e4:d4:42:11:bb:46:8c:ec:f5:c1:51:55:36:deSigner
Actual PE Digeste5:41:67:e9:c6:8e:e4:d4:42:11:bb:46:8c:ec:f5:c1:51:55:36:deDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Hangzhou Chuangju Technology Co.\,LTD,O=Hangzhou Chuangju Technology Co.\,LTD,L=Hangzhou,ST=Zhejiang,C=CN,1.2.840.113549.1.9.1=#0c0e7765624073616665646f672e636e26/08/2022, 16:48 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ObfDereferenceObject
ZwClose
ZwUnmapViewOfSection
ExAllocatePool
RtlTestBit
KeQuerySystemTime
RtlSetBit
RtlClearAllBits
ExfInterlockedInsertTailList
PsTerminateSystemThread
ExfInterlockedRemoveHeadList
PsProcessType
ObfReferenceObject
ObReferenceObjectByHandle
KeUnstackDetachProcess
KeStackAttachProcess
ZwMapViewOfSection
PsThreadType
PsCreateSystemThread
KeReadStateEvent
KeTickCount
KeBugCheckEx
RtlUnwind
PsInitialSystemProcess
ObOpenObjectByPointer
KeBugCheck
KeClearEvent
swprintf
RtlInitUnicodeString
KeDelayExecutionThread
memcpy
KeInitializeEvent
KeWaitForSingleObject
KeSetEvent
ExFreePoolWithTag
ExAllocatePoolWithTag
ExDeleteNPagedLookasideList
ExDeletePagedLookasideList
ExInitializeNPagedLookasideList
ExInitializePagedLookasideList
InterlockedPushEntrySList
InterlockedPopEntrySList
RtlNumberOfSetBits
RtlClearBit
RtlClearBits
RtlAreBitsClear
RtlAreBitsSet
_aulldvrm
_allmul
memset
RtlLookupElementGenericTableAvl
RtlInsertElementGenericTableAvl
RtlInitializeBitMap
RtlSetBits
RtlEnumerateGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlInitializeGenericTableAvl
PsGetCurrentProcessId
MmMapLockedPagesSpecifyCache
ProbeForRead
ProbeForWrite
KeWaitForMultipleObjects
IofCompleteRequest
hal
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
ndis.sys
NdisAllocateNetBufferList
NdisWaitEvent
NdisFreeNetBufferList
NdisFreeNetBuffer
NdisFreeMdl
NdisFreeMemory
NdisFRegisterFilterDriver
NdisFDeregisterFilterDriver
NdisDeregisterDeviceEx
NdisRegisterDeviceEx
NdisFNetPnPEvent
NdisFDevicePnPEventNotify
NdisAllocateCloneOidRequest
NdisFOidRequest
NdisFreeCloneOidRequest
NdisAllocateNetBuffer
NdisFCancelOidRequest
NdisFIndicateStatus
NdisFCancelSendNetBufferLists
NdisSetEvent
NdisFSendNetBufferLists
NdisFIndicateReceiveNetBufferLists
NdisFSendNetBufferListsComplete
NdisFReturnNetBufferLists
NdisAllocateNetBufferListPool
NdisAllocateNetBufferPool
NdisFSetAttributes
NdisFreeNetBufferListPool
NdisFreeNetBufferPool
NdisAcquireReadWriteLock
NdisReleaseReadWriteLock
NdisInitializeReadWriteLock
NdisAllocateMdl
NdisInitializeEvent
NdisFOidRequestComplete
NdisAllocateMemoryWithTagPriority
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
hpmcro32.dll.dll windows x86
0d851b83727a62c4e5b3965bb8d9372a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
isupper
kernel32
FlushFileBuffers
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
ReadFile
WriteFile
GetLastError
Exports
Exports
BuildCommand
BuildInquire
ButtonPoll
CheckIO
ClearButton
Color
ColorDither
ColorThreshold
CommandInquire
Dither
DllMain
Download
DualScan
GetButtonPress
GetScanInfo
GetScanState
GrayScale
InquireBufferSize
InquireModel
InquireNumber
InquireOldestError
InquireString
RecFromScanner
ReceiveResponse
ResetScanner
SCLRead
SCL_Scan
ScannerLock
ScannerLockButton
SendCommand
SendToScanner
SetDecipointWindow
SetDiagnosticSCL
SetIOHandle
SetPixelWindow
SetResolution
SetScale
SetScanState
SetScanWindow
Threshold
Upload
VerifyResponse
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
kmtwainlang.dll.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
kmtwainlang.dll15.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
kmtwainlang.dll18.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
kmtwainlang.dll3.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
kmtwainlang.dll7.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
kmtwainlang.dll9.dll regsvr32 windows x86
256786d487a8a059f70ad2383495f286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord5500
ord1199
ord1247
ord1132
ord6467
ord1131
ord6354
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1116
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
LocalFree
LocalAlloc
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
nlwnsck.dll.dll windows x86
ba783d3c376ec4bdda1d11b8fefd2a49
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libjutils
SybHeap_alloc
libjtml
tml_mutex_alloc
wsock32
__WSAFDIsSet
setsockopt
recv
bind
gethostbyname
ioctlsocket
listen
WSAStartup
connect
closesocket
getpeername
inet_addr
gethostbyaddr
accept
WSAGetLastError
send
select
socket
htons
msvcrt
_adjust_fdiv
_initterm
free
__mb_cur_max
_isctype
_pctype
memmove
atoi
memset
strlen
strcpy
malloc
kernel32
DisableThreadLibraryCalls
Exports
Exports
__sybase_DLL_info2@0
__sybase_DLL_info3@0
__sybase_DLL_info@0
ipd_accept
ipd_close
ipd_connect
ipd_exit
ipd_init
ipd_initsize
ipd_listen
ipd_prop_ext
ipd_property
ipd_read
ipd_write
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
pdftool.exe.exe windows x86
df1a624619533fecdbea702eaafc4964
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qpdf28
??1QPDF@@QAE@XZ
?processFile@QPDF@@QAEXPBD0@Z
?processInputSource@QPDF@@QAEXV?$PointerHolder@VInputSource@@@@PBD@Z
?closeInputSource@QPDF@@QAEXXZ
?setPasswordIsHexKey@QPDF@@QAEX_N@Z
?emptyPDF@QPDF@@QAEXXZ
?setIgnoreXRefStreams@QPDF@@QAEX_N@Z
?setSuppressWarnings@QPDF@@QAEX_N@Z
?setAttemptRecovery@QPDF@@QAEX_N@Z
?getWarnings@QPDF@@QAE?AV?$vector@VQPDFExc@@V?$allocator@VQPDFExc@@@std@@@std@@XZ
?anyWarnings@QPDF@@QBE_NXZ
?getUniqueId@QPDF@@QBE_KXZ
?getFilename@QPDF@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getPDFVersion@QPDF@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getExtensionLevel@QPDF@@QAEHXZ
?getTrailer@QPDF@@QAE?AVQPDFObjectHandle@@XZ
?getRoot@QPDF@@QAE?AVQPDFObjectHandle@@XZ
?getObjectByID@QPDF@@QAE?AVQPDFObjectHandle@@HH@Z
?replaceObject@QPDF@@QAEXABVQPDFObjGen@@VQPDFObjectHandle@@@Z
?copyForeignObject@QPDF@@QAE?AVQPDFObjectHandle@@V2@@Z
?isEncrypted@QPDF@@QBE_NXZ
?isEncrypted@QPDF@@QAE_NAAH00AAW4encryption_method_e@1@11@Z
?ownerPasswordMatched@QPDF@@QBE_NXZ
?userPasswordMatched@QPDF@@QBE_NXZ
?allowAccessibility@QPDF@@QAE_NXZ
?allowExtractAll@QPDF@@QAE_NXZ
?allowPrintLowRes@QPDF@@QAE_NXZ
?allowPrintHighRes@QPDF@@QAE_NXZ
?allowModifyAssembly@QPDF@@QAE_NXZ
?allowModifyForm@QPDF@@QAE_NXZ
?allowModifyAnnotation@QPDF@@QAE_NXZ
?allowModifyOther@QPDF@@QAE_NXZ
?allowModifyAll@QPDF@@QAE_NXZ
?getTrimmedUserPassword@QPDF@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getEncryptionKey@QPDF@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?isLinearized@QPDF@@QAE_NXZ
?checkLinearization@QPDF@@QAE_NXZ
?showLinearizationData@QPDF@@QAEXXZ
?showXRefTable@QPDF@@QAEXXZ
?getAllObjects@QPDF@@QAE?AV?$vector@VQPDFObjectHandle@@V?$allocator@VQPDFObjectHandle@@@std@@@std@@XZ
?getAllPages@QPDF@@QAEABV?$vector@VQPDFObjectHandle@@V?$allocator@VQPDFObjectHandle@@@std@@@std@@XZ
?addPage@QPDF@@QAEXVQPDFObjectHandle@@_N@Z
?getAppearanceState@QPDFAnnotationObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getFlags@QPDFAnnotationObjectHelper@@QAEHXZ
??1Members@QPDFAnnotationObjectHelper@@QAE@XZ
??0QPDFPageObjectHelper@@QAE@VQPDFObjectHandle@@@Z
?getAttribute@QPDFPageObjectHelper@@QAE?AVQPDFObjectHandle@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?getTrimBox@QPDFPageObjectHelper@@QAE?AVQPDFObjectHandle@@_N@Z
?getPageImages@QPDFPageObjectHelper@@QAE?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VQPDFObjectHandle@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VQPDFObjectHandle@@@std@@@2@@std@@XZ
?externalizeInlineImages@QPDFPageObjectHelper@@QAEXI@Z
?getPageContents@QPDFPageObjectHelper@@QAE?AV?$vector@VQPDFObjectHandle@@V?$allocator@VQPDFObjectHandle@@@std@@@std@@XZ
?addPageContents@QPDFPageObjectHelper@@QAEXVQPDFObjectHandle@@_N@Z
?rotatePage@QPDFPageObjectHelper@@QAEXH_N@Z
?coalesceContentStreams@QPDFPageObjectHelper@@QAEXXZ
?parsePageContents@QPDFPageObjectHelper@@QAEXPAVParserCallbacks@QPDFObjectHandle@@@Z
?shallowCopyPage@QPDFPageObjectHelper@@QAE?AV1@XZ
?getFormXObjectForPage@QPDFPageObjectHelper@@QAE?AVQPDFObjectHandle@@_N@Z
?placeFormXObject@QPDFPageObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VQPDFObjectHandle@@ABV23@VRectangle@4@_N33@Z
??1Members@QPDFPageObjectHelper@@QAE@XZ
??0QPDFPageDocumentHelper@@QAE@AAVQPDF@@@Z
?getAllPages@QPDFPageDocumentHelper@@QAE?AV?$vector@VQPDFPageObjectHelper@@V?$allocator@VQPDFPageObjectHelper@@@std@@@std@@XZ
?pushInheritedAttributesToPage@QPDFPageDocumentHelper@@QAEXXZ
?removeUnreferencedResources@QPDFPageDocumentHelper@@QAEXXZ
?addPage@QPDFPageDocumentHelper@@QAEXVQPDFPageObjectHelper@@_N@Z
?removePage@QPDFPageDocumentHelper@@QAEXVQPDFPageObjectHelper@@@Z
?flattenAnnotations@QPDFPageDocumentHelper@@QAEXHH@Z
??1Members@QPDFPageDocumentHelper@@QAE@XZ
?newName@QPDFObjectHandle@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?hasPageLabels@QPDFPageLabelDocumentHelper@@QAE_NXZ
?getLabelForPage@QPDFPageLabelDocumentHelper@@QAE?AVQPDFObjectHandle@@_J@Z
?getLabelsForPageRange@QPDFPageLabelDocumentHelper@@QAEX_J00AAV?$vector@VQPDFObjectHandle@@V?$allocator@VQPDFObjectHandle@@@std@@@std@@@Z
??1Members@QPDFPageLabelDocumentHelper@@QAE@XZ
?getKids@QPDFOutlineObjectHelper@@QAE?AV?$vector@VQPDFOutlineObjectHelper@@V?$allocator@VQPDFOutlineObjectHelper@@@std@@@std@@XZ
?getDest@QPDFOutlineObjectHelper@@QAE?AVQPDFObjectHandle@@XZ
?getDestPage@QPDFOutlineObjectHelper@@QAE?AVQPDFObjectHandle@@XZ
?getCount@QPDFOutlineObjectHelper@@QAEHXZ
?getTitle@QPDFOutlineObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0QPDFOutlineDocumentHelper@@QAE@AAVQPDF@@@Z
??1QPDFOutlineDocumentHelper@@UAE@XZ
?getTopLevelOutlines@QPDFOutlineDocumentHelper@@QAE?AV?$vector@VQPDFOutlineObjectHelper@@V?$allocator@VQPDFOutlineObjectHelper@@@std@@@std@@XZ
?getOutlinesForPage@QPDFOutlineDocumentHelper@@QAE?AV?$vector@VQPDFOutlineObjectHelper@@V?$allocator@VQPDFOutlineObjectHelper@@@std@@@std@@ABVQPDFObjGen@@@Z
?getFieldType@QPDFFormFieldObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getFullyQualifiedName@QPDFFormFieldObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getPartialName@QPDFFormFieldObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getAlternativeName@QPDFFormFieldObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getMappingName@QPDFFormFieldObjectHelper@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getValue@QPDFFormFieldObjectHelper@@QAE?AVQPDFObjectHandle@@XZ
?getDefaultValue@QPDFFormFieldObjectHelper@@QAE?AVQPDFObjectHandle@@XZ
?getQuadding@QPDFFormFieldObjectHelper@@QAEHXZ
?getFlags@QPDFFormFieldObjectHelper@@QAEHXZ
?isText@QPDFFormFieldObjectHelper@@QAE_NXZ
?isCheckbox@QPDFFormFieldObjectHelper@@QAE_NXZ
?isRadioButton@QPDFFormFieldObjectHelper@@QAE_NXZ
?isChoice@QPDFFormFieldObjectHelper@@QAE_NXZ
?getChoices@QPDFFormFieldObjectHelper@@QAE?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
??1Members@QPDFFormFieldObjectHelper@@QAE@XZ
??0QPDFAcroFormDocumentHelper@@QAE@AAVQPDF@@@Z
?hasAcroForm@QPDFAcroFormDocumentHelper@@QAE_NXZ
?getWidgetAnnotationsForPage@QPDFAcroFormDocumentHelper@@QAE?AV?$vector@VQPDFAnnotationObjectHelper@@V?$allocator@VQPDFAnnotationObjectHelper@@@std@@@std@@VQPDFPageObjectHelper@@@Z
?getFieldForAnnotation@QPDFAcroFormDocumentHelper@@QAE?AVQPDFFormFieldObjectHelper@@VQPDFAnnotationObjectHelper@@@Z
?getNeedAppearances@QPDFAcroFormDocumentHelper@@QAE_NXZ
?generateAppearancesIfNeeded@QPDFAcroFormDocumentHelper@@QAEXXZ
??0QPDF@@QAE@XZ
?getRegisteredImpls@QPDFCryptoProvider@@SA?AV?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?getDefaultProvider@QPDFCryptoProvider@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0QPDFWriter@@QAE@AAVQPDF@@@Z
??0QPDFWriter@@QAE@AAVQPDF@@PBD@Z
??1QPDFWriter@@QAE@XZ
?setOutputPipeline@QPDFWriter@@QAEXPAVPipeline@@@Z
?setObjectStreamMode@QPDFWriter@@QAEXW4qpdf_object_stream_e@@@Z
?setStreamDataMode@QPDFWriter@@QAEXW4qpdf_stream_data_e@@@Z
?setCompressStreams@QPDFWriter@@QAEX_N@Z
?setDecodeLevel@QPDFWriter@@QAEXW4qpdf_stream_decode_level_e@@@Z
?setRecompressFlate@QPDFWriter@@QAEX_N@Z
?setContentNormalization@QPDFWriter@@QAEX_N@Z
?setQDFMode@QPDFWriter@@QAEX_N@Z
?setPreserveUnreferencedObjects@QPDFWriter@@QAEX_N@Z
?setNewlineBeforeEndstream@QPDFWriter@@QAEX_N@Z
?setMinimumPDFVersion@QPDFWriter@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?forcePDFVersion@QPDFWriter@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?setDeterministicID@QPDFWriter@@QAEX_N@Z
?setStaticID@QPDFWriter@@QAEX_N@Z
?setStaticAesIV@QPDFWriter@@QAEX_N@Z
?setSuppressOriginalObjectIDs@QPDFWriter@@QAEX_N@Z
?setPreserveEncryption@QPDFWriter@@QAEX_N@Z
?copyEncryptionParameters@QPDFWriter@@QAEXAAVQPDF@@@Z
?setR3EncryptionParameters@QPDFWriter@@QAEXPBD0_N11111W4qpdf_r3_print_e@@@Z
?setR4EncryptionParameters@QPDFWriter@@QAEXPBD0_N11111W4qpdf_r3_print_e@@11@Z
?setR5EncryptionParameters@QPDFWriter@@QAEXPBD0_N11111W4qpdf_r3_print_e@@1@Z
?setR6EncryptionParameters@QPDFWriter@@QAEXPBD0_N11111W4qpdf_r3_print_e@@1@Z
?setR2EncryptionParameters@QPDFWriter@@QAEXPBD0_N111@Z
?setLinearization@QPDFWriter@@QAEX_N@Z
?setLinearizationPass1Filename@QPDFWriter@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?registerProgressReporter@QPDFWriter@@QAEXV?$PointerHolder@VProgressReporter@QPDFWriter@@@@@Z
?write@QPDFWriter@@QAEXXZ
?QPDFVersion@QPDF@@SAABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?newNull@QPDFObjectHandle@@SA?AV1@XZ
?parse@QPDFObjectHandle@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?wrapInArray@QPDFObjectHandle@@QAE?AV1@XZ
?isIndirect@QPDFObjectHandle@@QAE_NXZ
?isStream@QPDFObjectHandle@@QAE_NXZ
?isDictionary@QPDFObjectHandle@@QAE_NXZ
?isArray@QPDFObjectHandle@@QAE_NXZ
?isName@QPDFObjectHandle@@QAE_NXZ
?isInteger@QPDFObjectHandle@@QAE_NXZ
??0QPDFObjectHandle@@QAE@XZ
?contentSize@ParserCallbacks@QPDFObjectHandle@@UAEXI@Z
?handleObject@ParserCallbacks@QPDFObjectHandle@@UAEXV2@II@Z
?handleObject@ParserCallbacks@QPDFObjectHandle@@UAEXV2@@Z
?provideStreamData@StreamDataProvider@QPDFObjectHandle@@UAE_NHHPAVPipeline@@_N1@Z
?provideStreamData@StreamDataProvider@QPDFObjectHandle@@UAEXHHPAVPipeline@@@Z
??0StreamDataProvider@QPDFObjectHandle@@QAE@_N@Z
??1Members@JSON@@QAE@XZ
?checkSchema@JSON@@QAE_NV1@AAV?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?makeNull@JSON@@SA?AV1@XZ
?makeBool@JSON@@SA?AV1@_N@Z
?makeInt@JSON@@SA?AV1@_J@Z
?makeString@JSON@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?addArrayElement@JSON@@QAE?AV1@ABV1@@Z
?makeArray@JSON@@SA?AV1@XZ
?addDictionaryMember@JSON@@QAE?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV1@@Z
?makeDictionary@JSON@@SA?AV1@XZ
?unparse@JSON@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getGen@QPDFObjGen@@QBEHXZ
?getObj@QPDFObjGen@@QBEHXZ
??MQPDFObjGen@@QBE_NABV0@@Z
??0QPDFObjGen@@QAE@HH@Z
?getErrorCode@QPDFExc@@QBE?AW4qpdf_error_code_e@@XZ
?setCompressionLevel@Pl_Flate@@SAXH@Z
?getCount@Pl_Count@@QBE_JXZ
??1Pl_Count@@UAE@XZ
??0Pl_Count@@QAE@PBDPAVPipeline@@@Z
??0Pl_DCT@@QAE@PBDPAVPipeline@@IIHW4J_COLOR_SPACE@@PAVCompressConfig@0@@Z
??1Pl_Discard@@UAE@XZ
??0Pl_Discard@@QAE@XZ
??1Pl_StdioFile@@UAE@XZ
??0Pl_StdioFile@@QAE@PBDPAU_iobuf@@@Z
?setFilename@FileInputSource@@QAEXPBD@Z
??0FileInputSource@@QAE@XZ
?stayOpen@ClosedFileInputSource@@QAEX_N@Z
??0ClosedFileInputSource@@QAE@PBD@Z
?TC@QTC@@YAXQBD0H@Z
?call_main_from_wmain@QUtil@@YAHHQAPA_WV?$function@$$A6AHHPAPAD@Z@std@@@Z
?parse_numrange@QUtil@@YA?AV?$vector@HV?$allocator@H@std@@@std@@PBDH@Z
?is_digit@QUtil@@YA_ND@Z
?is_space@QUtil@@YA_ND@Z
?str_compare_nocase@QUtil@@YAHPBD0@Z
?read_lines_from_file@QUtil@@YA?AV?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@AAV?$basic_istream@DU?$char_traits@D@std@@@3@_N@Z
?read_lines_from_file@QUtil@@YA?AV?$list@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@PBD_N@Z
?possible_repaired_encodings@QUtil@@YA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?analyze_encoding@QUtil@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AA_N11@Z
?utf8_to_pdf_doc@QUtil@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@D@Z
?get_env@QUtil@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV23@@Z
?getWhoami@QUtil@@YAPADPAD@Z
?setLineBuf@QUtil@@YAXPAU_iobuf@@@Z
?binary_stdout@QUtil@@YAXXZ
?hex_decode@QUtil@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?hex_encode@QUtil@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?copy_string@QUtil@@YAPADABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?rename_file@QUtil@@YAXPBD0@Z
?remove_file@QUtil@@YAXPBD@Z
?warnIfPossible@QPDFObjectHandle@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?getJSON@QPDFObjectHandle@@QAE?AVJSON@@_N@Z
?unparseResolved@QPDFObjectHandle@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?unparse@QPDFObjectHandle@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getGeneration@QPDFObjectHandle@@QBEHXZ
?getObjectID@QPDFObjectHandle@@QBEHXZ
?same_file@QUtil@@YA_NPBD0@Z
?safe_fopen@QUtil@@YAPAU_iobuf@@PBD0@Z
?getObjGen@QPDFObjectHandle@@QBE?AVQPDFObjGen@@XZ
?replaceStreamData@QPDFObjectHandle@@QAEXV?$PointerHolder@VStreamDataProvider@QPDFObjectHandle@@@@ABV1@1@Z
?replaceDict@QPDFObjectHandle@@QAEXV1@@Z
?pipeStreamData@QPDFObjectHandle@@QAE_NPAVPipeline@@HW4qpdf_stream_decode_level_e@@_N2@Z
?getDict@QPDFObjectHandle@@QAE?AV1@XZ
?removeKey@QPDFObjectHandle@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?replaceKey@QPDFObjectHandle@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V1@@Z
?appendItem@QPDFObjectHandle@@QAEXABV1@@Z
?shallowCopy@QPDFObjectHandle@@QAE?AV1@XZ
?getUniqueResourceName@QPDFObjectHandle@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@AAH@Z
?mergeResources@QPDFObjectHandle@@QAEXV1@@Z
?getKeys@QPDFObjectHandle@@QAE?AV?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?getKey@QPDFObjectHandle@@QAE?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?hasKey@QPDFObjectHandle@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getArrayAsRectangle@QPDFObjectHandle@@QAE?AVRectangle@1@XZ
?getArrayItem@QPDFObjectHandle@@QAE?AV1@H@Z
?getArrayNItems@QPDFObjectHandle@@QAEHXZ
?getName@QPDFObjectHandle@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getNumericValue@QPDFObjectHandle@@QAENXZ
?isNumber@QPDFObjectHandle@@QAE_NXZ
?getUIntValueAsUInt@QPDFObjectHandle@@QAEIXZ
?getIntValueAsInt@QPDFObjectHandle@@QAEHXZ
?getIntValue@QPDFObjectHandle@@QAE_JXZ
?newStream@QPDFObjectHandle@@SA?AV1@PAVQPDF@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?string_to_uint@QUtil@@YAIPBD@Z
?string_to_int@QUtil@@YAHPBD@Z
?newStream@QPDFObjectHandle@@SA?AV1@PAVQPDF@@@Z
?uint_to_string@QUtil@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KH@Z
?newDictionary@QPDFObjectHandle@@SA?AV1@XZ
?newArray@QPDFObjectHandle@@SA?AV1@ABV?$vector@VQPDFObjectHandle@@V?$allocator@VQPDFObjectHandle@@@std@@@std@@@Z
??1Members@QPDFAcroFormDocumentHelper@@QAE@XZ
?newArray@QPDFObjectHandle@@SA?AV1@XZ
??0QPDFPageLabelDocumentHelper@@QAE@AAVQPDF@@@Z
?int_to_string@QUtil@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JH@Z
msvcp140
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
vcruntime140
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
strchr
strstr
_CxxThrowException
__CxxFrameHandler3
memchr
memcpy
memmove
memset
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
exit
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
terminate
_controlfp_s
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_exit
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-stdio-l1-1-0
fclose
__acrt_iob_func
__p__commode
_set_fmode
api-ms-win-crt-string-l1-1-0
strncmp
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
api-ms-win-crt-math-l1-1-0
__setusermatherr
_except1
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
txtonly.dll.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Exports
Exports
CBFilterGraphics
bInitProc
bSetFuncAddr
Sections
.text Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 122B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ