Data1[.]cab | Triage

resource
unpack001/Accessibility.api_NON_OPT
unpack001/AcroForm.api__NON_OPT
unpack001/AcroPDFImpl.rus
unpack001/AdobePDF417.pmp
unpack001/Annots.api
unpack001/Checkers.api
unpack001/DVA.api
unpack001/DataMatrix.pmp
unpack001/DigSig.api
unpack001/EScript.api
unpack001/Flash.mpp
unpack001/IA32.api
unpack001/MCIMPP.mpp
unpack001/MakeAccessible.api_NON_OPT
unpack001/Multimedia.api_NON_OPT
unpack001/PDDom.api_NON_OPT
unpack001/PPKLite.api
unpack001/QRCode.pmp
unpack001/QuickTime.mpp
unpack001/ReadOutLoud.api
unpack001/SaveAsRTF.api_NON_OPT
unpack001/Search.api
unpack001/SendMail.api
unpack001/Spelling.api
unpack001/Updater.api_NON_OPT
unpack001/WindowsMedia.mpp
unpack001/accessibility.rus
unpack001/acroform.rus
unpack001/acropdf.rus
unpack001/adobecollabsync.rus
unpack001/annots.rus
unpack001/brdlang32.rus
unpack001/ccme_asym.dll
unpack001/ccme_base.dll
unpack001/ccme_base_non_fips.dll
unpack001/ccme_ecc.dll
unpack001/ccme_ecdrbg.dll
unpack001/checkers.rus
unpack001/cryptocme.dll
unpack001/digsig.rus
unpack001/dva.rus
unpack001/eBook.api
unpack001/ebook.rus
unpack001/escript.rus
unpack001/flash.rus
unpack001/ia32.rus
unpack001/makeaccessible.rus
unpack001/mcimpp.rus
unpack001/multimedia.rus
unpack001/nppdf32.rus
unpack001/nppdf32.rus1
unpack001/pddom.rus
unpack001/ppklite.rus
unpack001/quicktime.rus
unpack001/rdlang32.rus
unpack001/readoutloud.rus
unpack001/reflow.api_NON_OPT
unpack001/reflow.rus
unpack001/saveasrtf.rus
unpack001/search.rus
unpack001/sendmail.rus
unpack001/spelling.rus
unpack001/stopwords2
unpack001/stopwords9
unpack001/updater.rus
unpack001/weblink.api
unpack001/weblink.rus
unpack001/windowsmedia.rus

Data1.cab

.cab

AGM.dll

.dll windows x86

70b9b8f72012a26afdcc3401dd57509b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

Not Before

07/06/2012, 00:00

Not After

06/06/2022, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

75:fb:51:c8:76:8e:f6:92:7b:f4:1d:a1:a2:34:a1:d9
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

30/07/2013, 00:00

Not After

25/07/2015, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems\, Incorporated,OU=AcrobatXI,O=Adobe Systems\, Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a8:1c:d8:71:52:74:8b:c9:38:13:77:04:6a:08:ba:5b:63:d0:6b:ee
Signer

Actual PE Digest

a8:1c:d8:71:52:74:8b:c9:38:13:77:04:6a:08:ba:5b:63:d0:6b:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetWindowsDirectoryA

VerSetConditionMask

IsProcessorFeaturePresent

VerifyVersionInfoW

GetCurrentDirectoryA

IsDebuggerPresent

DecodePointer

EncodePointer

LoadLibraryExA

RaiseException

GetFileSize

ReadFile

GetLastError

SetCurrentDirectoryA

GlobalSize

GetProfileStringW

GetSystemDefaultLCID

GetLocaleInfoA

GetACP

GetFileTime

CreateFileA

LoadLibraryA

FreeLibrary

FindNextFileA

FindFirstFileA

FindClose

GetUserDefaultLangID

GetThreadLocale

GetTimeFormatW

GetTimeFormatA

GetDateFormatW

GetDateFormatA

GetCurrentProcess

DuplicateHandle

CreateSemaphoreA

GetVersionExA

GetThreadPriority

SetThreadPriority

GetCurrentThread

lstrcmpW

GetEnvironmentVariableW

GlobalHandle

GetTempFileNameW

GetTempPathW

DeleteFileW

WideCharToMultiByte

MultiByteToWideChar

lstrlenW

GlobalFree

GlobalAlloc

LoadLibraryW

GetLocalTime

GlobalUnlock

GlobalLock

GetProcAddress

GetModuleHandleA

DeleteCriticalSection

InitializeCriticalSection

SwitchToThread

LeaveCriticalSection

EnterCriticalSection

SystemTimeToFileTime

CreateWaitableTimerA

GetSystemInfo

TlsFree

TlsSetValue

TlsGetValue

TlsAlloc

ResumeThread

SetWaitableTimer

HeapFree

HeapAlloc

GetProcessHeap

ResetEvent

SetEvent

GetCurrentThreadId

GetCurrentProcessId

GetTickCount

Sleep

ReleaseSemaphore

WaitForMultipleObjects

WaitForSingleObject

CloseHandle

OpenEventA

CreateEventA

GetSystemTimeAsFileTime

FormatMessageA

QueryPerformanceCounter

user32

GetSystemMetrics

GetDesktopWindow

DefWindowProcA

RegisterClassA

UnregisterClassA

CreateWindowExA

DestroyWindow

SetWindowPos

LoadCursorA

LoadIconA

GetActiveWindow

SetActiveWindow

CharNextW

ScrollWindowEx

GetWindowRect

ReleaseDC

GetDC

WindowFromDC

GetClientRect

gdi32

SetMiterLimit

SelectClipPath

PolyDraw

FillPath

EndPath

CloseFigure

BeginPath

ModifyWorldTransform

SetWorldTransform

GetWorldTransform

SetROP2

SetPolyFillMode

SetGraphicsMode

SetDIBits

Rectangle

LineTo

IntersectClipRect

GetStockObject

GetGraphicsMode

GetCurrentObject

GetClipBox

Escape

CreatePatternBrush

CreateBitmap

StretchBlt

SelectPalette

RealizePalette

PatBlt

CreatePalette

CreateBrushIndirect

CreateDIBSection

BitBlt

StrokePath

SelectClipRgn

OffsetRgn

GetRgnBox

CreateRectRgn

CombineRgn

GetObjectA

SetStretchBltMode

StretchDIBits

SelectObject

ExtSelectClipRgn

SaveDC

RestoreDC

GetViewportOrgEx

GetDeviceCaps

DeleteObject

DeleteDC

CreatePolyPolygonRgn

CreateCompatibleDC

CreateCompatibleBitmap

AbortDoc

StartDocW

EndDoc

StartPage

EndPage

CreateDCW

ExtEscape

ResetDCW

CreateICW

ExtCreatePen

MoveToEx

PolyBezierTo

PolylineTo

GetDIBColorTable

SetBrushOrgEx

advapi32

RegQueryValueExA

RegOpenKeyExA

RegCreateKeyExA

RegCloseKey

RegSetValueExA

ole32

CreateStreamOnHGlobal

msvcp120

??0_Container_base12@std@@QAE@XZ

??1_Container_base12@std@@QAE@XZ

?_Orphan_all@_Container_base12@std@@QAEXXZ

?flags@ios_base@std@@QBEHXZ

?width@ios_base@std@@QBE_JXZ

?width@ios_base@std@@QAE_J_J@Z

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z

?_Xbad_alloc@std@@YAXXZ

?_Xlength_error@std@@YAXPBD@Z

?_Xout_of_range@std@@YAXPBD@Z

?_Syserror_map@std@@YAPBDH@Z

?_Winerror_map@std@@YAPBDH@Z

?_Orphan_all@_Container_base0@std@@QAEXXZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ

?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ

?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z

?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z

?_BADOFF@std@@3_JB

??0_Lockit@std@@QAE@H@Z

??1_Lockit@std@@QAE@XZ

?uncaught_exception@std@@YA_NXZ

??Bid@locale@std@@QAEIXZ

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

?always_noconv@codecvt_base@std@@QBE_NXZ

?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z

?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z

?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z

?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z

?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ

?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

?id@?$codecvt@_WDH@std@@2V0locale@2@A

??_7ios_base@std@@6B@

??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@

?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A

?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?getloc@ios_base@std@@QBE?AVlocale@2@XZ

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z

?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

?id@?$ctype@D@std@@2V0locale@2@A

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

?widen@?$ctype@_W@std@@QBE_WD@Z

?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z

?id@?$ctype@_W@std@@2V0locale@2@A

?is@?$ctype@_W@std@@QBE_NF_W@Z

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z

msvcr120

_wfopen_s

_stricmp

__clean_type_info_names_internal

_initterm_e

_initterm

_malloc_crt

_amsg_exit

__CppXcptFilter

_except_handler4_common

__crtTerminateProcess

__crtUnhandledException

_crt_debugger_hook

_except1

?terminate@@YAXXZ

??1type_info@@UAE@XZ

_onexit

free

malloc

realloc

_hypot

memcpy

strtok_s

_ltoa_s

_purecall

memmove

strerror

_CxxThrowException

__CxxFrameHandler3

memset

??0exception@std@@QAE@ABQBD@Z

??0exception@std@@QAE@ABQBDH@Z

??0exception@std@@QAE@ABV01@@Z

??1exception@std@@UAE@XZ

?what@exception@std@@UBEPBDXZ

_gmtime64

_beginthreadex

__RTDynamicCast

exit

_libm_sse2_log10_precise

_libm_sse2_sqrt_precise

ceil

floor

memcmp

_control87

fclose

_localtime64

_time64

fflush

fgetc

fgetpos

fsetpos

_fseeki64

fwrite

setvbuf

ungetc

fgetwc

fputwc

ungetwc

_lock_file

_unlock_file

memcpy_s

??0bad_cast@std@@QAE@PBD@Z

??0bad_cast@std@@QAE@ABV01@@Z

??1bad_cast@std@@UAE@XZ

_wcsicmp

fread

fseek

ftell

rewind

fgets

strstr

wcscpy_s

??0exception@std@@QAE@XZ

??8type_info@@QBE_NABV0@@Z

_wcsnicmp

clearerr

ferror

strcpy_s

wcschr

_vsnwprintf

sprintf_s

qsort

_libm_sse2_cos_precise

_libm_sse2_sin_precise

_libm_sse2_log_precise

_libm_sse2_pow_precise

ldexp

_CIatan2

wcsncpy

strncpy

vsprintf

_isnan

_CIfmod

modf

atoi

strchr

sscanf

strncmp

feof

fopen

fputs

remove

rename

setbuf

isdigit

freopen

getc

strtol

wcsstr

memchr

tolower

calloc

__iob_func

fprintf

_libm_sse2_atan_precise

_lock

_unlock

_calloc_crt

__dllonexit

Exports

AGMGetVersion

AGMInitialize

AGMTerminate

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

AGMGPUOptIn.ini

AXE8SharedExpat.dll

.dll windows x86

6811f6079de0f4c113561db2f966f06e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

Not Before

07/06/2012, 00:00

Not After

06/06/2022, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

75:fb:51:c8:76:8e:f6:92:7b:f4:1d:a1:a2:34:a1:d9
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

30/07/2013, 00:00

Not After

25/07/2015, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems\, Incorporated,OU=AcrobatXI,O=Adobe Systems\, Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e3:15:ee:74:73:32:c5:4c:bb:0e:76:67:bc:46:6b:0d:94:a8:0b:5a
Signer

Actual PE Digest

e3:15:ee:74:73:32:c5:4c:bb:0e:76:67:bc:46:6b:0d:94:a8:0b:5a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

EncodePointer

DecodePointer

RaiseException

RtlUnwind

GetSystemTimeAsFileTime

GetLastError

HeapFree

HeapAlloc

HeapReAlloc

GetCommandLineA

GetCurrentThreadId

IsDebuggerPresent

IsProcessorFeaturePresent

ExitProcess

GetModuleHandleExW

GetProcAddress

MultiByteToWideChar

WideCharToMultiByte

HeapSize

SetLastError

GetProcessHeap

GetStdHandle

WriteFile

GetModuleFileNameW

GetFileType

DeleteCriticalSection

GetStartupInfoW

GetModuleFileNameA

QueryPerformanceCounter

GetCurrentProcessId

GetEnvironmentStringsW

FreeEnvironmentStringsW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

InitializeCriticalSectionAndSpinCount

Sleep

GetCurrentProcess

TerminateProcess

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

GetModuleHandleW

IsValidCodePage

GetACP

GetOEMCP

GetCPInfo

EnterCriticalSection

LeaveCriticalSection

LoadLibraryExW

OutputDebugStringW

GetStringTypeW

LCMapStringW

FlushFileBuffers

GetConsoleCP

GetConsoleMode

SetStdHandle

SetFilePointerEx

WriteConsoleW

CloseHandle

CreateFileW

Exports

AXE8_ExpatGetVersion

AXE8_ExpatInit

AXE8_ExpatTerminate

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

AXSLE.dll

.dll windows x86

9b94be84275f59e417886ac2cad0c9fc

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

Not Before

07/06/2012, 00:00

Not After

06/06/2022, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

75:fb:51:c8:76:8e:f6:92:7b:f4:1d:a1:a2:34:a1:d9
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

30/07/2013, 00:00

Not After

25/07/2015, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems\, Incorporated,OU=AcrobatXI,O=Adobe Systems\, Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1b:16:ef:e5:e5:1c:f1:fc:60:5c:60:ea:bb:c6:9f:6d:52:52:e5:10
Signer

Actual PE Digest

1b:16:ef:e5:e5:1c:f1:fc:60:5c:60:ea:bb:c6:9f:6d:52:52:e5:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

SwitchToThread

EncodePointer

DecodePointer

RaiseException

RtlUnwind

GetLastError

HeapFree

HeapAlloc

HeapReAlloc

GetCommandLineA

GetCurrentThreadId

GetSystemTimeAsFileTime

IsDebuggerPresent

IsProcessorFeaturePresent

ExitProcess

GetModuleHandleExW

GetProcAddress

MultiByteToWideChar

WideCharToMultiByte

HeapSize

SetLastError

GetProcessHeap

GetStdHandle

WriteFile

GetModuleFileNameW

GetFileType

DeleteCriticalSection

GetStartupInfoW

GetModuleFileNameA

QueryPerformanceCounter

GetCurrentProcessId

GetEnvironmentStringsW

FreeEnvironmentStringsW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

InitializeCriticalSectionAndSpinCount

Sleep

GetCurrentProcess

TerminateProcess

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

GetModuleHandleW

IsValidCodePage

GetACP

GetOEMCP

GetCPInfo

EnterCriticalSection

LeaveCriticalSection

LoadLibraryExW

GetConsoleCP

GetConsoleMode

SetFilePointerEx

OutputDebugStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

GetStringTypeW

SetStdHandle

WriteConsoleW

FlushFileBuffers

CreateFileW

CloseHandle

Exports

AXE_TransformerGetVersion

AXE_TransformerInit

AXE_TransformerTerminate

Sections

.text
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Accessibility.api_NON_OPT

.dll regsvr32 windows x86

ede1a3bdcb9bfcd5a2f88bf1b64a1af4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA

SetLastError

GetSystemDirectoryA

GetModuleFileNameW

GetModuleHandleW

LoadLibraryA

LoadLibraryW

DecodePointer

EncodePointer

GetThreadLocale

SetThreadLocale

FreeResource

LockResource

IsDBCSLeadByte

lstrcpyA

lstrlenA

GetTickCount

FindAtomW

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsProcessorFeaturePresent

OutputDebugStringW

IsDebuggerPresent

WideCharToMultiByte

MultiByteToWideChar

FindResourceA

lstrcmpiA

RaiseException

SizeofResource

LoadResource

LoadLibraryExA

GetProcAddress

GetModuleHandleA

GetModuleFileNameA

FreeLibrary

DeleteCriticalSection

InitializeCriticalSectionEx

LeaveCriticalSection

EnterCriticalSection

GetLastError

user32

GetWindowThreadProcessId

GetGUIThreadInfo

NotifyWinEvent

GetFocus

CharNextW

wsprintfA

GetWindowTextA

MoveWindow

SetFocus

GetPropW

IsWindow

SetPropW

SystemParametersInfoA

CharNextA

FindWindowA

GetWindowRect

OffsetRect

IsRectEmpty

GetClassNameA

advapi32

RegSetValueExA

RegQueryInfoKeyW

RegOpenKeyExA

RegEnumKeyExA

RegDeleteValueA

RegDeleteKeyA

RegCreateKeyExA

RegCloseKey

RegQueryInfoKeyA

ole32

CoCreateInstance

CoDisconnectObject

CoTaskMemFree

CoTaskMemRealloc

CoTaskMemAlloc

StringFromGUID2

oleaut32

SysFreeString

SysStringLen

VariantClear

VarUI4FromStr

LoadTypeLi

LoadRegTypeLi

SysAllocString

VariantInit

SysStringByteLen

RegisterTypeLi

UnRegisterTypeLi

msvcp120

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

?width@ios_base@std@@QAE_J_J@Z

?width@ios_base@std@@QBE_JXZ

?flags@ios_base@std@@QBEHXZ

?good@ios_base@std@@QBE_NXZ

?uncaught_exception@std@@YA_NXZ

?_Orphan_all@_Container_base12@std@@QAEXXZ

??1_Container_base12@std@@QAE@XZ

??0_Container_base12@std@@QAE@XZ

?id@?$codecvt@DDH@std@@2V0locale@2@A

?_BADOFF@std@@3_JB

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ

?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ

?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

??0id@locale@std@@QAE@I@Z

?_Winerror_map@std@@YAPBDH@Z

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z

??_7ios_base@std@@6B@

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

??Bios_base@std@@QBE_NXZ

?_Syserror_map@std@@YAPBDH@Z

?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z

?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z

?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z

?always_noconv@codecvt_base@std@@QBE_NXZ

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

??Bid@locale@std@@QAEIXZ

?_Xbad_alloc@std@@YAXXZ

?_Orphan_all@_Container_base0@std@@QAEXXZ

??1_Lockit@std@@QAE@XZ

??0_Lockit@std@@QAE@H@Z

?_Xout_of_range@std@@YAXPBD@Z

?_Xlength_error@std@@YAXPBD@Z

msvcr120

setvbuf

strcpy_s

_mbsnbcat_s

wcscmp

vsprintf_s

_mbsstr

_mbsnbcpy_s

??_V@YAXPAX@Z

_resetstkoflw

_recalloc

malloc

__clean_type_info_names_internal

_initterm_e

_initterm

_malloc_crt

_amsg_exit

__CppXcptFilter

_except_handler4_common

?terminate@@YAXXZ

__crtTerminateProcess

__crtUnhandledException

_crt_debugger_hook

_onexit

__dllonexit

_calloc_crt

_unlock

_lock

??1type_info@@UAE@XZ

_vsnprintf_s

strncmp

_time64

_localtime64

_gmtime64

isdigit

atoi

isalpha

strchr

_wtoi

wcsncpy_s

??3@YAXPAX@Z

memcmp

memcpy

memset

strlen

memmove

strpbrk

strrchr

strstr

_CxxThrowException

__CxxFrameHandler3

_purecall

??2@YAPAXI@Z

memcpy_s

fclose

fflush

fgetc

fgetpos

fputc

fsetpos

_fseeki64

fwrite

free

ungetc

_lock_file

_unlock_file

??0bad_cast@std@@QAE@PBD@Z

??0bad_cast@std@@QAE@ABV01@@Z

??0exception@std@@QAE@ABV01@@Z

??1bad_cast@std@@UAE@XZ

__RTDynamicCast

tolower

strcmp

_set_invalid_parameter_handler

memchr

wcslen

strcat_s

Exports

DllRegisterServer

DllUnregisterServer

PlugInMain

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Ace.dll_NON_OPT

.dll windows x86

4e4b05cad20fe53b1300d53ec79b7e81

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Certificate

Issuer

Not Before

07/06/2012, 00:00

Not After

06/06/2022, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

75:fb:51:c8:76:8e:f6:92:7b:f4:1d:a1:a2:34:a1:d9
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

30/07/2013, 00:00

Not After

25/07/2015, 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Systems\, Incorporated,OU=AcrobatXI,O=Adobe Systems\, Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

19:52:8d:d3:4d:c5:bf:b8:93:2b:e4:73:05:74:a6:e6:ac:26:74:69
Signer

Actual PE Digest

19:52:8d:d3:4d:c5:bf:b8:93:2b:e4:73:05:74:a6:e6:ac:26:74:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection

GetSystemTime

GetModuleFileNameW

GetModuleHandleA

SystemTimeToFileTime

InitializeCriticalSection

DeleteCriticalSection

GetSystemDirectoryA

FreeLibrary

GetProcAddress

GlobalMemoryStatus

LoadLibraryA

GetProfileStringA

CreateDirectoryW

MultiByteToWideChar

CreateFileW

DeleteFileW

FindClose

EnterCriticalSection

FindNextFileW

GetFileAttributesW

ReadFile

SetFilePointerEx

WriteFile

GetLastError

MoveFileExW

FileTimeToSystemTime

WideCharToMultiByte

IsValidCodePage

GetACP

Sleep

GetCurrentProcess

GetProcessAffinityMask

SetProcessAffinityMask

GetCurrentThreadId

GetCurrentProcessId

CreateSemaphoreA

ReleaseSemaphore

CreateThread

CloseHandle

WaitForSingleObject

VerifyVersionInfoW

GetSystemInfo

IsProcessorFeaturePresent

FindFirstFileW

VerSetConditionMask

QueryPerformanceCounter

IsDebuggerPresent

DecodePointer

EncodePointer

GetSystemTimeAsFileTime

user32

LoadStringA

gdi32

GetICMProfileW

DeleteDC

CreateDCW

CreateDCA

advapi32

RegQueryInfoKeyA

RegOpenKeyExA

RegEnumValueA

RegCloseKey

RegQueryValueExA

shell32

SHGetFolderPathW

ole32

CoCreateInstance

msvcp120

?_Xlength_error@std@@YAXPBD@Z

?_Xout_of_range@std@@YAXPBD@Z

?_Syserror_map@std@@YAPBDH@Z

?_Winerror_map@std@@YAPBDH@Z

?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z

?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z

?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ

?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?_Xbad_alloc@std@@YAXXZ

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

?_BADOFF@std@@3_JB

??_7ios_base@std@@6B@

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z

msvcr120

memcpy

memset

??3@YAXPAX@Z

memcpy_s

strcmp

strlen

??0exception@std@@QAE@XZ

??0exception@std@@QAE@ABQBDH@Z

??0exception@std@@QAE@ABV01@@Z

??1exception@std@@UAE@XZ

?what@exception@std@@UBEPBDXZ

_CxxThrowException

__CxxFrameHandler3

__RTDynamicCast

vsprintf_s

memcmp

memmove

free

malloc

realloc

_purecall

??2@YAPAXI@Z

__iob_func

fprintf

strtoul

strncmp

strncpy

strstr

fabs

pow

??_V@YAXPAX@Z

sscanf

sprintf

_gmtime64

_time64

qsort

strcpy

strcat

wcslen

wcsstr

wcstok_s

log

wcscmp

towupper

sqrt

strnlen

_vsnprintf

log10

_lock

_unlock

_calloc_crt

__dllonexit

_onexit

_crt_debugger_hook

__crtUnhandledException

__crtTerminateProcess

??1type_info@@UAE@XZ

_except1

__CppXcptFilter

_amsg_exit

_malloc_crt

_initterm

_initterm_e

_except_handler4_common

?terminate@@YAXXZ

__clean_type_info_names_internal

Exports

ACEGetVersion

ACEHasFeature

ACEInitDelayed

ACEInitialize

ACEInitializeEx

ACETerminate

Sections

.text
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

AcroForm.api__NON_OPT

.dll regsvr32 windows x86

7535755417467ad9360551cf093f446d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

bib

ord5

kernel32

FindClose

FindFirstFileW

SearchPathA

Sleep

CloseHandle

SetEvent

ResetEvent

WaitForSingleObject

CreateEventA

CreateThread

LocalFree

MulDiv

GetDriveTypeW

GetComputerNameExW

GetFullPathNameA

IsProcessorFeaturePresent

GetSystemInfo

GetCurrentProcess

TerminateProcess

QueryPerformanceCounter

QueryPerformanceFrequency

GetSystemDefaultLangID

CreateSemaphoreA

TlsFree

lstrcatA

TlsGetValue

TlsAlloc

GlobalFindAtomA

GetSystemDirectoryA

IsDBCSLeadByte

FindResourceA

lstrcmpiA

SizeofResource

GlobalAddAtomA

GlobalDeleteAtom

GlobalSize

DisableThreadLibraryCalls

GetLocaleInfoW

lstrcpyA

OutputDebugStringW

GetCurrentThreadId

IsDebuggerPresent

EncodePointer

GetComputerNameA

GetTickCount64

GlobalMemoryStatusEx

GetSystemTime

GetThreadLocale

FormatMessageA

LocalAlloc

GetLocalTime

GetSystemTimeAsFileTime

LoadResource

LoadLibraryExA

FreeLibrary

GetModuleFileNameA

lstrcpynA

GetLocaleInfoA

GetTickCount

FindAtomW

GetTempPathW

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

GetCurrentProcessId

MultiByteToWideChar

WideCharToMultiByte

OutputDebugStringA

DecodePointer

RaiseException

GetLastError

SetLastError

InitializeCriticalSectionEx

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleW

GetProcAddress

LoadLibraryW

VerifyVersionInfoW

LockResource

FreeResource

VerSetConditionMask

EnumSystemLocalesA

GetUserDefaultLCID

GetACP

GlobalFree

GlobalUnlock

GlobalLock

GlobalAlloc

LoadLibraryA

lstrlenA

TlsSetValue

user32

wsprintfW

MsgWaitForMultipleObjects

SetClipboardData

RegisterClipboardFormatA

EmptyClipboard

IsClipboardFormatAvailable

ActivateKeyboardLayout

GetKeyboardLayoutList

CreateWindowExA

DestroyWindow

IsWindowVisible

IsWindowUnicode

GetWindowTextLengthA

OffsetRect

GetWindowTextA

SetWindowTextA

SendMessageA

PeekMessageA

DispatchMessageA

TranslateMessage

GetWindowLongA

GetKeyState

GetClipboardData

CloseClipboard

OpenClipboard

SetWindowLongA

InvalidateRect

GetKeyboardLayout

SetWindowPos

GetDesktopWindow

ReleaseDC

GetDC

wsprintfA

DestroyCursor

LoadCursorA

LoadBitmapA

FillRect

GetSysColor

MessageBeep

SetWindowLongW

GetWindowLongW

FindWindowExA

DdeInitializeA

DdeConnect

MoveWindow

SetFocus

DdeDisconnect

DdeCreateStringHandleA

DdeFreeStringHandle

GetAsyncKeyState

LoadKeyboardLayoutA

GetFocus

SetPropW

GetPropW

GetWindowRect

FindWindowA

GetSystemMetrics

LoadStringA

AttachThreadInput

ShowWindow

IsIconic

RemovePropA

GetPropA

SetPropA

CallWindowProcA

CharNextW

CharNextA

GetWindowThreadProcessId

GetParent

SetForegroundWindow

GetForegroundWindow

MessageBoxA

gdi32

DeleteDC

CreateFontIndirectA

CreateCompatibleDC

MoveToEx

SelectObject

LineTo

CreateSolidBrush

CreatePen

GetCharWidthA

DeleteObject

GetStockObject

SetBkColor

SetTextColor

GetTextMetricsA

GetDeviceCaps

CreateFontIndirectW

EnumFontFamiliesA

GetTextAlign

GetFontLanguageInfo

GetCharacterPlacementA

SetTextAlign

advapi32

RegQueryValueA

RegOpenKeyA

RegEnumKeyExW

RegQueryValueExA

RegSetValueExA

RegQueryInfoKeyW

RegQueryInfoKeyA

RegOpenKeyExA

RegEnumKeyExA

RegDeleteValueA

RegDeleteKeyA

RegCreateKeyExA

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

RegCreateKeyExW

ole32

CoInitializeEx

CoUninitialize

CoTaskMemRealloc

CoTaskMemAlloc

StringFromGUID2

CoCreateInstance

CoRevokeClassObject

CoRegisterClassObject

CoTaskMemFree

ProgIDFromCLSID

CLSIDFromProgID

CoInitialize

oleaut32

VariantInit

VariantCopy

VariantClear

SafeArrayCreateVector

VariantChangeType

GetErrorInfo

SafeArrayUnaccessData

SafeArrayAccessData

SysFreeString

SysStringLen

LoadTypeLi

LoadRegTypeLi

SetErrorInfo

CreateErrorInfo

SysAllocString

VarUI4FromStr

RegisterTypeLi

UnRegisterTypeLi

SysStringByteLen

SysAllocStringByteLen

SafeArrayGetDim

SafeArrayGetUBound

SafeArrayGetLBound

sensapi

IsNetworkAlive

msvcp120

?classic@locale@std@@SAABV12@XZ

?always_noconv@codecvt_base@std@@QBE_NXZ

?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z

?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z

?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z

?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?exceptions@ios_base@std@@QAEXH@Z

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

?id@?$codecvt@DDH@std@@2V0locale@2@A

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z

?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z

?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z

?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

??_7ios_base@std@@6B@

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

?setf@ios_base@std@@QAEHHH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?eof@ios_base@std@@QBE_NXZ

?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z

?setf@ios_base@std@@QAEHH@Z

?_Init@locale@std@@CAPAV_Locimp@12@_N@Z

?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z

?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z

?c_str@?$_Yarn@D@std@@QBEPBDXZ

?_Getname@_Locinfo@std@@QBEPBDXZ

??1_Locinfo@std@@QAE@XZ

??0_Locinfo@std@@QAE@HPBD@Z

?_Xruntime_error@std@@YAXPBD@Z

?_Orphan_all@_Container_base12@std@@QAEXXZ

??1_Container_base12@std@@QAE@XZ

??0_Container_base12@std@@QAE@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z

?precision@ios_base@std@@QAE_J_J@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

?_Winerror_map@std@@YAPBDH@Z

?_Xlength_error@std@@YAXPBD@Z

?_Xout_of_range@std@@YAXPBD@Z

??0_Lockit@std@@QAE@H@Z

??1_Lockit@std@@QAE@XZ

?uncaught_exception@std@@YA_NXZ

?_Orphan_all@_Container_base0@std@@QAEXXZ

?_Xbad_alloc@std@@YAXXZ

??Bid@locale@std@@QAEIXZ

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

?is@?$ctype@D@std@@QBE_NFD@Z

?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Syserror_map@std@@YAPBDH@Z

?good@ios_base@std@@QBE_NXZ

?fail@ios_base@std@@QBE_NXZ