ca11c6bba8796beeef787835fe081df5e49d9f9e5e632604eda294e1a2217f1c[.]zip[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

ca11c6bba8796beeef787835fe081df5e49d9f9e5e632604eda294e1a2217f1c.zip.zip
Size

34.7MB
MD5

73196dbc332cb7838a51cf849b039028
SHA1

a6c45f977f8fd631382eeeed83eaaf10559e1910
SHA256

aa10915e72cf995bcd4d3601d50c90f15b66393377042544ddfea349c6192f25
SHA512

fb530bd77d750eab681af97469e25dff387a481769b783692839c76e984bd6374a787c00b728b612e8b38fbddb917b6b6bacfe6270f790b7c2870cab85064915
SSDEEP

786432:eaodWexqRSBxlrFOtuX9gwxE5nPVPkGGke/9+GUZXE:e9xqk9g+StPGk69cE

Score

1^/10

Malware Config

Signatures

Files

ca11c6bba8796beeef787835fe081df5e49d9f9e5e632604eda294e1a2217f1c.zip.zip
.zip

Password: infected
ca11c6bba8796beeef787835fe081df5e49d9f9e5e632604eda294e1a2217f1c.zip
.zip
_100_4390c02fc1846ea13f1119307845e7ab
_101_04f1d2793c0577ab3d83b192fb4c1367
_102_5ebcacb7f0e1422f0c3fa20bfaa29c3c
.html
_103_665e1985893f9e0701f79dfb1f99a4d7
.html
_104_5188a59973439763252c90d9973fcd78
_105_09b4e586f1641ad6eb6f34665ef1f8f1
_106_5ebcacb7f0e1422f0c3fa20bfaa29c3c
.html
_107_665e1985893f9e0701f79dfb1f99a4d7
.html
_108_4390c02fc1846ea13f1119307845e7ab
_109_04f1d2793c0577ab3d83b192fb4c1367
_110_5ebcacb7f0e1422f0c3fa20bfaa29c3c
.html
_111_665e1985893f9e0701f79dfb1f99a4d7
.html
_112_4390c02fc1846ea13f1119307845e7ab
_113_ccf62d8dd8067bdfc8b8f9d1a81ff246
_114_28353436fc2a08ffd172e8e001c34dbc
.html
_115_cd2ee54ef1b354ebb594683dac1df721
.html
_116_87bbcf0ea575f31bc4c026b445c52dd5
_117_80342dc1e0e15dd6c5d0eb0255ecbebd
_118_b1de3ac480a4cc235839b2715c3159ff
_119_28353436fc2a08ffd172e8e001c34dbc
.html
_120_cd2ee54ef1b354ebb594683dac1df721
.html
_121_2da81646d1fd6d0d480f1e37fb6cd708
_122_b1de3ac480a4cc235839b2715c3159ff
_123_b1de3ac480a4cc235839b2715c3159ff
_124_90444962c73a0957c0b714160a68ef0c
.html
_125_d6ca6183cb0582c86169bd84d40bbeaf
.html
_126_06a966b5be8c3d2858f9053d47ee5241
_127_09b4e586f1641ad6eb6f34665ef1f8f1
_128_b667e13a527a46da3610a05d39950a7a
.html
_129_a16d794dbcbc7fab6c3bce124d1aecf0
.html
_12_81c2d3429004b70b78e78b5fd0f52538
.png
_130_9a5451f67aa40dc53ebf6ba0e748c8cf
_131_0219a7e4827d8eca5bb2b119caf7b321
_132_126b927df1ddfc80574fe0eb1f64fb32
.html
_133_fe2b2e1beb6dcc9bafafe08e09402dba
.html
_134_1a890b8bb04ef19681d7540dc273c0c6
_135_ced8f970acd0f0be568315edf2a98a32
_136_126b927df1ddfc80574fe0eb1f64fb32
.html
_137_fe2b2e1beb6dcc9bafafe08e09402dba
.html
_138_6d81ce932d60e9d10cf21be986fdd78a
_139_3764276b735c2d88101debc5ac9ec201
_13_4ec857b425971913dcff55ad75586b15
.png
_140_126b927df1ddfc80574fe0eb1f64fb32
.html
_141_fe2b2e1beb6dcc9bafafe08e09402dba
.html
_142_1a890b8bb04ef19681d7540dc273c0c6
_143_d2659b8b1f71c589947666d8e0953fba
_144_126b927df1ddfc80574fe0eb1f64fb32
.html
_145_fe2b2e1beb6dcc9bafafe08e09402dba
.html
_146_6d81ce932d60e9d10cf21be986fdd78a
_147_3764276b735c2d88101debc5ac9ec201
_148_3c07f4f478b0e8e0d2904b8eb9514d4e
.html
_149_6f3ca96ac9753ca20a517dac144b7fcc
.html
_14_70d4869d25e879849ab7140d177eb4fd
_150_de68f40b7f6a0d3b1b6cfa25a3c8341d
_151_940dded14d40ee63d9884eb75ce9aaa8
.html
_152_22ce1ef18129918d464ea8847dda1343
.html
_153_c9ddac21047484d4f04e8f9b1065bb3e
_154_09b4e586f1641ad6eb6f34665ef1f8f1
_155_8bb00c0444b907575fc0f951e703fa9f
.html
_156_1d12fdc7aeb40e6f9b1478a645f7d791
.html
_157_9729ff5053afc02ad7647dc8649500a9
_158_3f34b5543af49dbfe4764a2e5eb81e96
_159_fc1836d3933acc4b6e9100a2d109d229
.html
_15_19c05620e2f86c8f931cb861f31ab28e
.exe windows:5 windows x86

91e98dfb08f6cbd239951f240ffbc62e

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2c
Certificate

Issuer

CN=TC TrustCenter Class 2-II L1 CA IV,OU=TC TrustCenter Class 2-II L1 CA,O=TC TrustCenter GmbH,C=DE

Not Before

17-06-2009 15:22

Not After

31-12-2025 19:59

Subject

CN=TC TrustCenter Authenticode Timestamp II,OU=Timestamp,O=TC TrustCenter,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ba:eb:56:b8:f7:a2:f3:98:55:be:af:c4:68:ca:1e:d1:a4:8e:c2:10
Signer

Actual PE Digest

ba:eb:56:b8:f7:a2:f3:98:55:be:af:c4:68:ca:1e:d1:a4:8e:c2:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetCompositionStringW
ImmSetCandidateWindow
ImmAssociateContext
ImmNotifyIME
ImmDestroyContext
ImmCreateContext

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDrawImageRect
GdipFillRectangleI
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipSetInterpolationMode
GdipSetClipPath
GdipFillEllipse
GdipDrawEllipse
GdipSetSmoothingMode
GdipSetCompositingQuality
GdipAddPathEllipse
GdipDeletePath
GdipCreatePath
GdipDeletePen
GdipCreatePen1
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteStringFormat
GdipCloneStringFormat
GdipCloneBrush
GdipIsVisibleRectI
GdipSetClipRectI
GdipDrawImageI
GdipMeasureString
GdipDrawString
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteGraphics
GdipStringFormatGetGenericTypographic
GdipAlloc
GdipFree
GdipDeleteBrush
GdipDeleteFontFamily

comctl32

ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetIcon

sensapi

IsNetworkAlive

adobeowl

OWLDockGetAnchor
OWLGetWorkspaceTarget
OWLGetDocumentArea
OWLWorkspaceSuspendResumeLayout
OWLThemeChangeUIBrightness
OWLThemeHasBrush
OWLThemeChangeFloat
OWLUIVisibilityReset
OWLUIChangeIsActive
OWLAdjustUIVisibility
OWLThemeChangeBoolean
OWLThemeGetBoolean
OWLThemeGetBrush
OWLThemeChangeBrush
OWLThemeGetPen
OWLThemeChangePen
OWLTabPaneChangeMode
OWLTabPaneGetMode
OWLTabPaneGetPreferredIconicLength
OWLDockGetBounds
OWLTabPaneGetLayoutMode
OWLTabPaneChangePreferredIconicLength
OWLTabPaneChangeLayoutMode
OWLTabGroupGetSelectedTabItem
OWLTabGroupChangeSelectedTabItem
OWLWidgetGetOccludedWidgets
OWLPaletteCreate
OWLPaletteHide
OWLPaletteShow
OWLPaletteGetMinimumSize
OWLPaletteGetMaximumSize
OWLPaletteChangeSizes
OWLPaletteChangeIcon
OWLPaletteGetResizeGripper
OWLPaletteGetConstrainedPreferredSize
OWLPaletteGetUnconstrainedPreferredSize
OWLPaletteGetSize
OWLPaletteChangeIsMinimized
OWLPaletteGetIsMinimized
OWLWidgetGetEffectiveVisibility
OWLPaletteChangePreferredSizes
OWLPaletteChangeMaximumSize
OWLPaletteChangeMinimumSize
OWLPaletteChangeMenu
OWLIsPalette
OWLIsDock
OWLDockChangeMode
OWLIsApplicationContainer
OWLApplicationContainerGetPreferredBounds
OWLApplicationContainerGetBounds
OWLApplicationContainerChangePreferredBounds
OWLWin32ApplicationContainerCreate
OWLWidgetCanClose
OWLThemeChangeSize
OWLApplicationContainerGetHostView
OWLApplicationContainerChangeHostViewPreferredSize
OWLInitialize
OWLGetVersion
OWLGetLogLevel
OWLTerminate
OWLWidgetGetChildCount
OWLWidgetChangeIsClosed
OWLWidgetGetIsClosed
OWLThemeChangeString
OWLControlBarChangeOrigin
OWLControlBarChangeSizes
OWLControlBarGetSize
OWLControlBarGetResizeGripper
OWLWidgetMove
OWLWidgetGetParent
OWLIsControlBar
OWLControlBarCreate
OWLControlBarGetOrigin
OWLControlBarGetMaximumSize
OWLControlBarGetMinimumSize
OWLTabGroupCreate
OWLIsTabGroup
OWLTabPaneCreate
OWLIsTabPane
OWLWidgetGetNthChild
OWLDockCreate
OWLApplicationContainerGetDocumentDock
OWLDocumentCreate
OWLDocumentGetBounds
OWLChangeScreenMode
OWLDocumentGetActivationContext
OWLWidgetBringToFront
OWLWidgetShow
OWLWidgetGetOSWindowContainer
OWLDocumentChangeLabel
OWLDocumentChangePreferredWindowBounds
OWLDocumentChangePreferredConstrainedSize
OWLDocumentChangePreferredUnconstrainedSize
OWLDocumentChangeHeightRange
OWLDocumentChangeWidthRange
OWLDocumentGetHeightRange
OWLDocumentGetWidthRange
OWLDockChangePreferredOrigin
OWLToolbarGetBounds
OWLToolbarChangeSizeVariant
OWLToolbarChangeVariantSize
OWLToolbarGetSizeVariant
OWLIsToolbar
OWLToolbarCreate

shlwapi

PathRemoveFileSpecW

adbeape

APEPlayerFromStageHWND
APEPlayerChangeAttributes
APEChangeLogLevel
APEStreamClose
APEStreamWrite
APEPlayerCallExternalInterface
APEPlayerLoadComponent
APEPlayerLoadSWF
APEInitialize
APETerminate

sccore

?remove@SparseArray@ScCore@@QAEHH@Z
?set@SparseArray@ScCore@@QAEXHH@Z
?find@SparseArray@ScCore@@QBEHH@Z
??0SparseArray@ScCore@@QAE@XZ
??1SparseArray@ScCore@@QAE@XZ
??0Variant@ScCore@@QAE@ABVString@1@@Z
?toString@Variant@ScCore@@QBEXAAVString@2@@Z
?get@Encoder@ScCore@@SAPBV12@PBD@Z
?setString@Variant@ScCore@@QAEXPBD@Z
?getFileSpec@Variant@ScCore@@QBEPBVFileSpec@2@XZ
??0FileSpec@ScCore@@QAE@ABV01@@Z
?removeAt@Array@ScCore@@QAEXII@Z
?getKeys@HashTable@ScCore@@QBEXAAV?$TSimpleArray@$$CBVString@ScCore@@@2@@Z
??YString@ScCore@@QAEAAV01@D@Z
?unique@SimpleArray@ScCore@@AAEXXZ
??0SimpleArray@ScCore@@QAE@XZ
?call@LiveComponent@ScCore@@UAEHAAVLiveObject@2@HABVArray@2@AAVVariant@2@PAVError@2@@Z
??1SimpleArray@ScCore@@QAE@XZ
?forEach@SparseArray@ScCore@@QAEXP6A_NHPAHH@ZH@Z
??YString@ScCore@@QAEAAV01@ABV01@@Z
??YString@ScCore@@QAEAAV01@PBD@Z
?getStartupDir@FileUtils@ScCore@@SAHAAVFileSpec@2@@Z
?resolve@FileSpec@ScCore@@QBEHAAV12@@Z
?atExit@InitTerm@ScCore@@SAXP6AXXZ@Z
?toLower@String@ScCore@@QAE_NXZ
ScAtomicInc
?setFileSpec@Variant@ScCore@@QAEXABVFileSpec@2@@Z
?ncmp@String@ScCore@@QBEHPBDH@Z
??0String@ScCore@@QAE@ABV01@@Z
?split@String@ScCore@@QAE?AV12@D@Z
?setPath@FileSpec@ScCore@@QAE_NABVString@2@_N@Z
?getPath@FileSpec@ScCore@@QBE?AVString@2@XZ
??8String@ScCore@@QBE_NABV01@@Z
?getName@FileSpec@ScCore@@QBE?AVString@2@XZ
?changePath@FileSpec@ScCore@@QAE_NABVString@2@@Z
?find@String@ScCore@@QBEHGH_N@Z
?erase@String@ScCore@@QAEXHH@Z
?getCurrentDir@FileUtils@ScCore@@SAHAAVFileSpec@2@@Z
?call@LiveObject@ScCore@@QAEHABVString@2@ABVArray@2@AAVVariant@2@PAVError@2@@Z
?substr@String@ScCore@@QBE?AV12@HH@Z
?getAttributes@FileSpec@ScCore@@QBEFPAH0@Z
??0File@ScCore@@QAE@ABVFileSpec@1@@Z
?open@File@ScCore@@UAEHABVString@2@II@Z
?eof@File@ScCore@@UBE_NXZ
?readln@File@ScCore@@UAEHAAVString@2@@Z
?strip@String@ScCore@@QAEXXZ
??1File@ScCore@@UAE@XZ
?initData@FileSpec@ScCore@@AAEXXZ
?getSpecialDir@FileUtils@ScCore@@SAHHAAVFileSpec@2@@Z
?getAbsoluteURI@FileSpec@ScCore@@QBE?AVString@2@_N@Z
??3Heap@ScCore@@SAXPAX@Z
??2Heap@ScCore@@SAPAXI@Z
?remove@Localizer@ScCore@@SA_NABV12@@Z
?push@Localizer@ScCore@@SAXABV12@@Z
??1String@ScCore@@QAE@XZ
??0String@ScCore@@QAE@PBGH@Z
??1Variant@ScCore@@QAE@XZ
??1LivePropertyManager@ScCore@@UAE@XZ
??1LiveObject@ScCore@@MAE@XZ
??0String@ScCore@@QAE@XZ
??0LivePropertyManager@ScCore@@QAE@PBULivePropertyInfo@1@@Z
??0LiveObject@ScCore@@QAE@PBD_N@Z
?release@Refcountable@ScCore@@UBEXXZ
?getAs@LiveObject@ScCore@@UBEPBXH@Z
?getAs@LiveObject@ScCore@@UAEPAXH@Z
?invalidate@LiveObject@ScCore@@UAEXXZ
?revalidate@LiveObject@ScCore@@UAEXXZ
?getErrorText@LiveBase@ScCore@@UBEHAAVString@2@HPBV32@@Z
?getErrorText@LiveBase@ScCore@@UBEHAAVString@2@HH_N@Z
?createProperty@LiveObject@ScCore@@MAEPAVLiveProperty@2@ABVString@2@HI@Z
?createLocal@LiveObject@ScCore@@UAEHPAPAV12@ABVString@2@H@Z
?clone@LiveObject@ScCore@@UBEHPAPAV12@_N@Z
?initialize@LiveObject@ScCore@@UAEHABVArray@2@PAVError@2@@Z
?getClassName@LiveObject@ScCore@@UBEABVString@2@XZ
??8LiveObject@ScCore@@UBE_NABV01@@Z
?setData@LiveObject@ScCore@@UAEXPAVRoot@2@@Z
?getData@LiveObject@ScCore@@UBEPAVRoot@2@XZ
?addComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?removeComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?getIDForName@LiveObject@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?createIDForName@LiveObject@ScCore@@UAEHABVString@2@AAHH@Z
?defineIDForName@LiveObject@ScCore@@UAEHABVString@2@HH@Z
?getNameForID@LiveObject@ScCore@@UBEHHAAVString@2@H@Z
?deleteDynamicProperties@LiveObject@ScCore@@UAEX_N@Z
?hasOperators@LiveObject@ScCore@@UBE_NXZ
?deleteID@LiveObject@ScCore@@UAEHH@Z
?reset@LiveObject@ScCore@@UAEXXZ
?enumerate@LiveObject@ScCore@@UBEHAAVSimpleArray@2@H@Z
?getType@LiveObject@ScCore@@UBE?AW4InfoType@2@H@Z
?getClassInfo@LiveObject@ScCore@@UBEPBVClassInfo@2@H@Z
?apply@LiveObject@ScCore@@UBEHAAV12@HABVArray@2@AAVVariant@2@PAVError@2@@Z
?valueOf@LiveObject@ScCore@@UBEXAAVVariant@2@@Z
?toString@LiveObject@ScCore@@UBEXAAVString@2@@Z
?notify@LiveObject@ScCore@@UAE_NAAVMessage@2@@Z
?encode@String@ScCore@@QBEPBDPBVEncoder@2@@Z
?put@LiveObject@ScCore@@UAEHHABVVariant@2@PAVError@2@@Z
?call@LiveObject@ScCore@@UAEHHABVArray@2@AAVVariant@2@PAVError@2@@Z
?setError@LiveBase@ScCore@@QBEHHHPAVError@2@_N@Z
??4Error@ScCore@@QAEAAV01@ABV01@@Z
?get@LiveObject@ScCore@@UBEHHAAVVariant@2@PAVError@2@@Z
?setInteger@Variant@ScCore@@QAEXH@Z
?get@LiveObject@ScCore@@QAEHABVString@2@AAVVariant@2@PAVError@2@@Z
?setString@Variant@ScCore@@QAEXABVString@2@@Z
?clear@String@ScCore@@QAEXXZ
??4String@ScCore@@QAEAAV01@ABV01@@Z
?doToString@Variant@ScCore@@IBEXH@Z
??1Array@ScCore@@UAE@XZ
?length@Array@ScCore@@UBEIXZ
??4Variant@ScCore@@QAEAAV01@ABV01@@Z
??AArray@ScCore@@QAEAAVVariant@1@I@Z
??0Variant@ScCore@@QAE@ABV01@@Z
?getArray@Variant@ScCore@@QBE_NAAVArray@2@@Z
??0Array@ScCore@@QAE@XZ
?getDataType@Variant@ScCore@@QBE?AW4VariantType@2@XZ
?toString@Variant@ScCore@@QBE?AVString@2@XZ
??ABasicArray@ScCore@@QBEABVVariant@1@I@Z
??1LiveComponent@ScCore@@MAE@XZ
??0LiveComponent@ScCore@@IAE@XZ
?getAs@LiveBase@ScCore@@UBEPBXH@Z
?getAs@LiveBase@ScCore@@UAEPAXH@Z
?invalidate@LiveBase@ScCore@@UAEXXZ
?revalidate@LiveBase@ScCore@@UAEXXZ
?reset@LiveComponent@ScCore@@UAEXXZ
?getIDForName@LiveComponent@ScCore@@UBEHABVLiveObject@2@ABVString@2@AAHAAW4InfoType@2@H@Z
?getNameForID@LiveComponent@ScCore@@UBEHABVLiveObject@2@HAAVString@2@H@Z
?getType@LiveComponent@ScCore@@UBE?AW4InfoType@2@ABVLiveObject@2@H@Z
?hasOperators@LiveComponent@ScCore@@UBE_NXZ
?enumerate@LiveComponent@ScCore@@UBEHABVLiveObject@2@AAVSimpleArray@2@H@Z
?getServiceInfo@LiveComponent@ScCore@@UBEPBVServiceInfo@2@ABVLiveObject@2@HH@Z
?put@LiveComponent@ScCore@@UAEHAAVLiveObject@2@HABVVariant@2@PAVError@2@@Z
?isGeneric@LiveComponent@ScCore@@UBE_NH@Z
?isIndexable@LiveComponent@ScCore@@UBE_NXZ
?getLength@LiveComponent@ScCore@@UBEHABVLiveObject@2@AAI@Z
?putLength@LiveComponent@ScCore@@UAEHAAVLiveObject@2@I@Z
?getByIndex@LiveComponent@ScCore@@UBEHABVLiveObject@2@IAAVVariant@2@PAVError@2@@Z
?putByIndex@LiveComponent@ScCore@@UAEHAAVLiveObject@2@IABVVariant@2@PAVError@2@@Z
?deleteByIndex@LiveComponent@ScCore@@UAEHAAVLiveObject@2@I@Z
?setLiveObject@Variant@ScCore@@QAEXPAVLiveObject@2@H@Z
?setLiveObject@Variant@ScCore@@QAEXAAVLiveObject@2@H@Z
?setBool@Variant@ScCore@@QAEX_N@Z
?getBool@Variant@ScCore@@QBE_NXZ
??1HashTable@ScCore@@QAE@XZ
??0HashTable@ScCore@@QAE@XZ
??4String@ScCore@@QAEAAV01@PBD@Z
?getAs@LiveCollection@ScCore@@UBEPBXH@Z
?getAs@LiveCollection@ScCore@@UAEPAXH@Z
?getClassName@LiveCollection@ScCore@@UBEABVString@2@XZ
?getNameForID@LiveCollection@ScCore@@UBEHHAAVString@2@H@Z
?enumerate@LiveCollection@ScCore@@UBEHAAVSimpleArray@2@H@Z
?getType@LiveCollection@ScCore@@UBE?AW4InfoType@2@H@Z
?putLength@LiveCollection@ScCore@@UAEHI@Z
?deleteByIndex@LiveCollection@ScCore@@UAEHI@Z
?set@HashTable@ScCore@@QAEABVString@2@ABV32@H_N@Z
?getNextID@LiveBase@ScCore@@SAHXZ
?hasKey@HashTable@ScCore@@QBE_NABVString@2@_N@Z
?getIDForName@LiveCollection@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?setString@Variant@ScCore@@QAEXPBG@Z
?findKey@HashTable@ScCore@@QBEPBVString@2@H@Z
?getLiveObject@Variant@ScCore@@QBEPAVLiveObject@2@XZ
?cmp@String@ScCore@@QBEHPBD@Z
?get@Array@ScCore@@UBEPAVVariant@2@I@Z
?setNull@Variant@ScCore@@QAEXXZ
??0LiveArray@ScCore@@QAE@PBDH_N@Z
?getAs@LiveArray@ScCore@@UBEPBXH@Z
?getAs@LiveArray@ScCore@@UAEPAXH@Z
?reset@LiveArray@ScCore@@UAEXXZ
?get@LiveCollection@ScCore@@UBEHHAAVVariant@2@PAVError@2@@Z
?put@LiveCollection@ScCore@@UAEHHABVVariant@2@PAVError@2@@Z
?toString@LiveArray@ScCore@@UBEXAAVString@2@@Z
?getLength@LiveArray@ScCore@@UBEHAAI@Z
?putLength@LiveArray@ScCore@@UAEHI@Z
?getByIndex@LiveArray@ScCore@@UBEHIAAVVariant@2@PAVError@2@@Z
?putByIndex@LiveArray@ScCore@@UAEHIABVVariant@2@PAVError@2@@Z
??1LiveArray@ScCore@@UAE@XZ
??0Array@ScCore@@QAE@ABV01@@Z
?addFactory@LiveObject@ScCore@@SAHAAV12@H@Z
?getFactory@LiveObject@ScCore@@SAPAV12@ABVString@2@H@Z
??0String@ScCore@@QAE@PBD@Z
?removeFactory@LiveObject@ScCore@@SAXABVString@2@@Z
?registerProperty@LivePropertyManager@ScCore@@QAEXPBDHH0@Z
?getInteger@Variant@ScCore@@QBEHXZ
?doGetDouble@Variant@ScCore@@IBENXZ
?setDouble@Variant@ScCore@@QAEXN@Z
?isInteger@Variant@ScCore@@QBE_NXZ
?setString@Variant@ScCore@@QAEXPBDPAVEncoder@2@@Z
?get@Encoder@ScCore@@SAPBV12@PBG@Z
??0String@ScCore@@QAE@PBDPBVEncoder@1@@Z
?getEncodedLength@String@ScCore@@SAHXZ
?getUtf8@Encoder@ScCore@@SAABV12@XZ
?get@LiveComponent@ScCore@@UBEHABVLiveObject@2@HAAVVariant@2@PAVError@2@@Z
?replaceAll@String@ScCore@@QAEHABV12@0H@Z
?find@String@ScCore@@QBEHPBDH_N@Z
?erase@HashTable@ScCore@@QAEXXZ
??1FileSpec@ScCore@@QAE@XZ
?getErrorMsg@Localizer@ScCore@@MBE_NHAAVString@2@@Z
?localizedCompare@Localizer@ScCore@@MBEHABVString@2@0@Z
?localizedCaseConvert@Localizer@ScCore@@MBE_NAAVString@2@_N@Z
?localizeText@Localizer@ScCore@@MBE_NAAVString@2@@Z
?getLocale@Localizer@ScCore@@MBE_NAAVString@2@@Z
??1Root@ScCore@@UAE@XZ
??1Localizer@ScCore@@UAE@XZ
?forEach@HashTable@ScCore@@QAEXP6A_NABVString@2@PAHH@ZH@Z
?find@HashTable@ScCore@@QBEHABVString@2@_N@Z
?get@Callbacks@ScCore@@SAPAV12@XZ
?erase@String@ScCore@@QAEXXZ
?put@LiveObject@ScCore@@QAEHABVString@2@ABVVariant@2@HPAVError@2@@Z
?print@String@ScCore@@QAAXPBDZZ
??0LiveObject@ScCore@@QAE@ABVString@1@_N@Z
?doErase@Variant@ScCore@@IAEXXZ

extendscript

?getProperties@Dispatcher@ScScript@@UBEXHHAAV?$TSimpleArray@$$CBVPropInfo@ScScript@@@ScCore@@@Z
?call@Dispatcher@ScScript@@UAEXAAUArguments@2@P6AX0@Z@Z
?put@Dispatcher@ScScript@@UAEXAAUArguments@2@@Z
?get@Dispatcher@ScScript@@UAEXAAUArguments@2@@Z
?getEnumNames@Dispatcher@ScScript@@UBEXABVVariant@ScCore@@AAV?$TSimpleArray@VString@ScCore@@@4@@Z
?hasProperty@Dispatcher@ScScript@@UBEPBUPropEntry@2@ABVVariant@ScCore@@0_N@Z
?findProperty@Dispatcher@ScScript@@UBEPBVPropInfo@2@HHPAVRoot@ScCore@@_N1@Z
?createEngine@Engine@ScScript@@SAPAV12@W4Type@12@@Z
?setName@Engine@ScScript@@QAE_NABVString@ScCore@@@Z
??0FileDisp@ScScript@@QAE@XZ
?setLocalizer@Engine@ScScript@@QAEXPBVLocalizer@ScCore@@@Z
?setIncludePath@ParserAPI@ScScript@@QBEXABVString@ScCore@@@Z
?getGlobalObject@LiveObjectAPI@ScScript@@QBEAAVLiveObject@ScCore@@XZ
??0GlobalDialogs@ScScript@@QAE@XZ
?getClassInfo@Dispatcher@ScScript@@UAEPBVClassInfo@ScCore@@ABVString@4@@Z
?call@GlobalDialogs@ScScript@@UAEHAAVLiveObject@ScCore@@HABVArray@4@AAVVariant@4@PAVError@4@@Z
??1FileDisp@ScScript@@UAE@XZ
?getCurrent@Engine@ScScript@@SAPAV12@XZ
?invalidateClassAll@Engine@ScScript@@SAXABVString@ScCore@@@Z
?getEnumerableProperties@Dispatcher@ScScript@@UBEXABVVariant@ScCore@@AAVSimpleArray@4@H@Z

kernel32

MultiByteToWideChar
IsValidCodePage
EnumLanguageGroupLocalesW
GetLocaleInfoW
GetLocaleInfoA
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
CloseHandle
CreateMutexW
GetLastError
GetTempPathW
GetModuleFileNameW
GetPrivateProfileStringW
GetCommandLineW
LocalFree
WideCharToMultiByte
GetProcAddress
LoadLibraryW
ReadFile
CreateFileW
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
FreeLibrary
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetModuleHandleA
GetModuleHandleW
GetFileAttributesW
GetVersion
SetLastError
OutputDebugStringA
SetErrorMode
GetSystemDirectoryA
GetSystemTimeAsFileTime
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
LoadLibraryA
GetModuleFileNameA
ReleaseMutex
CreateMutexA
GetCurrentProcessId
EnumSystemLanguageGroupsW

user32

ScreenToClient
ClientToScreen
GetAncestor
GetCursorPos
GetMessageTime
GetDoubleClickTime
SetTimer
KillTimer
GetKeyboardLayout
GetKeyboardLayoutList
ActivateKeyboardLayout
ReleaseDC
GetDC
ScrollDC
GetClientRect
SetWindowPos
SetFocus
PtInRect
IsWindowVisible
PostMessageW
IsWindowEnabled
DestroyWindow
CreateWindowExW
LockWindowUpdate
MoveWindow
GetWindowTextW
IsZoomed
GetWindowRect
GetWindowLongW
GetParent
GetFocus
SetActiveWindow
SystemParametersInfoW
TrackMouseEvent
ToUnicode
GetKeyboardState
WindowFromPoint
EndPaint
BeginPaint
UpdateWindow
DestroyIcon
DrawIconEx
wsprintfA
DrawEdge
DrawTextW
DrawFrameControl
EnableWindow
IsWindow
FillRect
GetSysColor
MessageBoxW
SetParent
RegisterWindowMessageW
EnumWindows
SendMessageW
SendMessageTimeoutW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsIconic
ShowWindow
SetForegroundWindow
PeekMessageW
DispatchMessageW

gdi32

SetTextColor
SetBkColor
SelectObject
DeleteObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
GdiFlush
TranslateCharsetInfo
GetTextFaceA
CreateFontIndirectW
DPtoLP
GetDeviceCaps
SetBkMode
GetTextExtentPointW
GetTextMetricsW
TextOutW
SetTextAlign
GetWorldTransform
GetGraphicsMode
StretchBlt
SetStretchBltMode
CreateSolidBrush
EnumFontFamiliesW
BitBlt

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW

ole32

CreateStreamOnHGlobal

oleaut32

SysAllocString
SysFreeString

dccore

ord4441
ord4457
ord4458
ord4442
ord4446
ord4447
ord4448
ord4443
ord4411
ord4444
ord8214
ord8233
ord8230
ord8234
ord8231
ord8232
ord4685
ord4675
ord4681
ord4682
ord4684
ord4666
ord4664
ord4615
ord4649
ord4663
ord4600
ord4605
ord4662
ord4606
ord4601
ord4602
ord4603
ord4604
ord4665
ord4408
ord4455
ord8123
ord3505
ord3552
ord3550
ord3551
ord899
ord900
ord901
ord834
ord836
ord835
ord1008
ord837
ord838
ord839
ord840
ord841
ord842
ord4454
ord4453
ord4452
ord4451
ord4450
ord4449
ord4445
ord4440
ord4439
ord3520
ord3580
ord3579
ord3567
ord3543
ord4548
ord4511
ord4512
ord3581
ord3582
ord3544
ord3572
ord3545
ord608
ord676
ord4692
ord4693
ord4696
ord7561
ord3565
ord3539
ord3566
ord3561
ord3554
ord3422
ord3423
ord3433
ord3432
ord3361
ord3438
ord4553
ord8122
ord8121
ord3057
ord512
ord514
ord515
ord510
ord7593
ord696
ord697
ord7713
ord6356
ord3530
ord3527
ord3531
ord6355
ord3501
ord698
ord8105
ord7562
ord8059
ord8096
ord8124
ord8053
ord8171
ord4574
ord4543
ord9664
ord9674
ord9673
ord9672
ord9671
ord843
ord9668
ord9676
ord9666
ord9667
ord9665
ord9661
ord9675
ord8213
ord8212
ord8211
ord8210
ord8209
ord8172
ord4525
ord4536
ord4564
ord4497
ord9653
ord9658
ord9657
ord9656
ord9659
ord9660
ord9655
ord9654
ord9650
ord9641
ord9640
ord9645
ord9642
ord9637
ord8056
ord8057
ord8058
ord7570
ord7563
ord3583
ord3548
ord3546
ord7720
ord7205
ord3516
ord3498
ord3532
ord7725
ord7202
ord7206
ord7203
ord679
ord4470
ord4544
ord4587
ord4535
ord761
ord3155
ord4546
ord4557
ord4496
ord4513
ord980
ord773
ord796
ord772
ord771
ord990
ord939
ord937
ord936
ord935
ord844
ord933
ord932
ord931
ord930
ord924
ord928
ord929
ord927
ord926
ord925
ord923
ord898
ord897
ord896
ord895
ord894
ord893
ord892
ord833
ord832
ord1007
ord831
ord830
ord828
ord827
ord826
ord829
ord1006
ord1005
ord903
ord902
ord1026
ord992
ord812
ord811
ord810
ord948
ord947
ord946
ord819
ord818
ord817
ord824
ord997
ord822
ord823
ord995
ord996
ord993
ord994
ord816
ord815
ord814
ord813
ord991
ord809
ord808
ord807
ord806
ord802
ord801
ord800
ord805
ord804
ord803
ord797
ord795
ord794
ord793
ord1021
ord1019
ord949
ord792
ord791
ord790
ord788
ord922
ord921
ord920
ord919
ord918
ord915
ord916
ord917
ord912
ord913
ord914
ord911
ord910
ord909
ord908
ord907
ord906
ord1014
ord1013
ord905
ord904
ord799
ord798
ord890
ord891
ord889
ord888
ord884
ord886
ord887
ord885
ord883
ord882
ord881
ord880
ord1025
ord1012
ord870
ord879
ord878
ord877
ord875
ord876
ord874
ord869
ord872
ord873
ord871
ord868
ord867
ord866
ord1024
ord1011
ord856
ord862
ord861
ord860
ord859
ord858
ord857
ord864
ord865
ord863
ord855
ord854
ord787
ord789
ord786
ord785
ord784
ord783
ord988
ord962
ord1018
ord4549
ord3159
ord3143
ord3158
ord3523
ord3522
ord3517
ord3499
ord3495
ord675
ord671
ord677
ord3247
ord3248
ord674
ord3236
ord610
ord845
ord846
ord9670
ord934
ord853
ord1023
ord1010
ord852
ord850
ord851
ord849
ord848
ord847
ord611
ord3078
ord3249
ord609
ord624
ord694
ord3237
ord695
ord606
ord699
ord3246
ord3152
ord3151
ord3507
ord3496
ord3514
ord3562
ord4695
ord3156
ord3154
ord3153
ord3080

scl

ord3107
ord4872
ord3041
ord4044
ord4042
ord4043
ord7800
ord9946
ord3100
ord2950
ord8467
ord8604
ord8583
ord8581
ord8479
ord8580
ord8565
ord8562
ord8572
ord8571
ord8570
ord8569
ord8568
ord8567
ord8566
ord8603
ord8596
ord8573
ord8577
ord8578
ord8576
ord8575
ord8574
ord8601
ord8590
ord8589
ord8561
ord8560
ord8559
ord8558
ord8550
ord8597
ord8549
ord8548
ord8547
ord8546
ord8534
ord8533
ord8532
ord8545
ord8543
ord8544
ord8530
ord8531
ord8528
ord8529
ord8516
ord8517
ord8490
ord8489
ord8526
ord8484
ord8483
ord8553
ord8541
ord8540
ord8537
ord8536
ord8539
ord8538
ord8579
ord8525
ord8523
ord8522
ord8521
ord8515
ord8519
ord8485
ord8527
ord8507
ord8593
ord8506
ord8505
ord8600
ord8551
ord8592
ord8504
ord8503
ord8502
ord8501
ord8500
ord8499
ord8492
ord8497
ord8498
ord8535
ord8494
ord8552
ord8491
ord8591
ord8496
ord8495
ord8599
ord8598
ord8588
ord8587
ord8555
ord8554
ord8602
ord8557
ord8556
ord8514
ord8595
ord8513
ord8512
ord8524
ord8520
ord8518
ord8488
ord8586
ord4462
ord4461
ord4460
ord4436
ord4435
ord4457
ord4448
ord8594
ord4469
ord4443
ord8508
ord8509
ord8510
ord8511
ord4447
ord4444
ord4445
ord4440
ord4459
ord4458
ord4456
ord4455
ord4454
ord4453
ord4452
ord4451
ord4450
ord4449
ord8585
ord8542
ord8487
ord4428
ord8478
ord4439
ord8482
ord8584
ord4434
ord4432
ord8582
ord8470
ord7334
ord3384
ord4045
ord4015
ord3216
ord3270
ord3604
ord4131
ord4030
ord4132
ord4032
ord4031
ord4029
ord4129
ord4127
ord4128
ord4126
ord4125
ord4130
ord4124
ord4142
ord4140
ord4113
ord5404
ord5406
ord9896
ord5407
ord9897
ord7812
ord223
ord7433
ord5604
ord420
ord4166
ord5991
ord5992
ord243
ord335
ord213
ord5318
ord9895
ord9057
ord7817
ord233
ord5671
ord5669
ord5674
ord5987
ord5988
ord5989
ord5676
ord5677
ord5990
ord5687
ord6010
ord6003
ord6004
ord5678
ord5679
ord5680
ord5681
ord5682
ord5683
ord5684
ord5685
ord5686
ord5745
ord5746
ord5688
ord5689
ord5690
ord5715
ord5716
ord5717
ord5718
ord5719
ord5720
ord5721
ord5722
ord5723
ord5724
ord5725
ord5726
ord5727
ord5728
ord5729
ord5730
ord5731
ord5732
ord5737
ord5733
ord5734
ord5735
ord5736
ord5738
ord5739
ord5740
ord5741
ord5742
ord5743
ord5744
ord5692
ord5693
ord5694
ord5695
ord5696
ord5697
ord5698
ord5699
ord5700
ord5701
ord5702
ord5703
ord5704
ord5705
ord5706
ord5707
ord5708
ord5709
ord5710
ord5711
ord5712
ord5713
ord5714
ord5747
ord5748
ord264
ord237
ord588
ord9893
ord1723
ord307
ord3055
ord3101
ord3096
ord3020
ord2968
ord249
ord250
ord251
ord9940
ord252
ord255
ord9794
ord242
ord197
ord532
ord419
ord254
ord253
ord275
ord5691
ord216
ord217
ord218
ord343
ord543
ord545
ord544
ord228
ord229
ord230
ord231
ord232
ord235
ord236
ord398
ord238
ord239
ord240
ord241
ord244
ord245
ord246
ord247
ord248
ord399
ord256
ord400
ord257
ord401
ord402
ord403
ord404
ord409
ord259
ord261
ord262
ord263
ord219
ord220
ord267
ord268
ord270
ord429
ord431
ord271
ord272
ord273
ord274
ord377
ord380
ord378
ord542
ord379
ord221
ord282
ord283
ord284
ord285
ord286
ord287
ord288
ord478
ord482
ord484
ord289
ord290
ord291
ord486
ord492
ord536
ord294
ord295
ord301
ord302
ord303
ord304
ord305
ord306
ord315
ord339
ord374
ord397
ord9928
ord9947
ord2914
ord9531
ord9532
ord9937
ord2947
ord9894
ord430
ord3040
ord3043
ord3044
ord3079
ord3086
ord3046
ord9921
ord9848
ord53
ord9059
ord693
ord5484
ord7825
ord7826
ord7787
ord425
ord7676
ord9855
ord9857
ord7058
ord336
ord9854
ord914
ord194
ord901
ord9924
ord9887
ord7804
ord9905
ord9923
ord3085
ord5675
ord4965
ord4978
ord5447
ord9154
ord5611
ord5614
ord5610
ord5642
ord5589
ord5448
ord4977
ord4986
ord50
ord5373
ord43
ord4979
ord9912
ord9885
ord4975
ord9922
ord5668
ord9904
ord525
ord6001
ord6002
ord5993
ord1721
ord1722
ord7811
ord7989
ord7815
ord7849
ord9913
ord9910
ord9909
ord9941
ord9882
ord7848
ord9919
ord9911
ord9884
ord9883
ord9123
ord9437
ord9216
ord9420
ord9406
ord9226
ord9298
ord9313
ord9335
ord9336
ord9314
ord9315
ord9316
ord9320
ord9322
ord9324
ord9325
ord9415
ord9328
ord9329
ord9317
ord9431
ord9310

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

msvcr90

_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
strcpy
??0exception@std@@QAE@ABQBDH@Z
strlen
qsort
memmove_s
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
atol
_CIasin
_CIsin
_configthreadlocale
malloc
strstr
__RTDynamicCast
printf
free
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_wgetenv
_wstat64i32
_errno
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
floor
sscanf
wcstod
towlower
memmove
tolower
iswdigit
_wtoi
memset
memcpy
??_V@YAXPAX@Z
wcsncpy
_wtol
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler3
_purecall
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_CIcos

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_160_e42d92bc44e149f957737a12f4eddbd4
.html
_161_7cbfa7e7bbf741b67816193f59b22dc9
_162_3a24b9cfaa3278cf26c884f112cc1d11
_163_915889fb05c189e9322ab6b1912c2efe
.html
_164_5672ca4f20b403ee1845a2511f946a84
.html
_165_5bf1568b5cc1a75fa8e2207a85ad4cdb
_166_18c0b5b1a0aa01128f74b681e32e812c
_167_93a79c3cc6d0442edb81c3fe8d0053b3
.html
_168_399f2d999cc5589b18d6546801701e1b
.html
_169_6eb72e5174632f6fb76515e5658a50c7
_16_c6b93ce279e83f50a34da3812ebf9863
_170_2f2d13b86ffabd4e68263a697645e474
_171_cdd3a8fabecf187f7946d128755bcffd
.html
_172_4d43c9b8381d4ad96d3d01c7055bf819
.html
_173_854aad3eabc37c906f839a08af885222
_174_09b4e586f1641ad6eb6f34665ef1f8f1
_175_8c6123b5fdb96e1102c435809b80de93
.html
_176_eced45b77f778dab40b0b5f4a4e871e1
.html
_177_9ff89ed016e263d3184d594c723c0801
_178_09b4e586f1641ad6eb6f34665ef1f8f1
_179_ef145fcb367ca77f1c7022881de8939b
.html
_17_9bcae225581aa5d049542b9d16b8b75f
_180_5a4e7bf980fecdcf08ae666ea220022a
.html
_181_498b4c5bda85803e913e5336701362a9
_182_01a302cb743af53ab10f42ef2683e976
_183_d3d443d5bc31b393c7783d0d6ec339d0
.html
_184_7bce0fbfbc1f2f0b6bfe6102872b666b
.html
_185_30321b8b7e9c807e53d4f13d43a51265
_186_b7ce071250716c018c945174ca528c33
_187_da41e06fe286cc372dfa139d33dbe312
.html
_188_38839b4b6a55f9afb0016b6d7a77c65e
.html
_189_b3c780d6a06d71afc4367187b951c822
_18_b50b353d31228062822c95696f75eda7
_190_ee43552ab8c1d86e4b01a7565a1b7793
_191_673c26ad693378ddad7bb28c589e4346
.html
_192_ca26d9580cdd693b678073ec6ceaa805
.html
_193_ae3699e79f2868fc6501bfbf94b4256a
_194_a1fc1c301d478cff87bcecdd87b19804
_195_26235f873952010dc67e9859e0ce8e61
.html
_196_7c33746b871d8d8b435d72c5d357cc6e
.html
_197_011bcecd4c28702fb40bd149025cf0fa
_198_bb9a7e502ea8119856d188468507e78f
_199_cd1fc2b93dcacce724364856642f5dbd
.html
_19_2f3de9f62934b62602a9854424ef5c6d
_200_18f37b95232087ef8c493db890833741
.html
_201_2ac8175f25b6c25d8ceb9024c5446d87
_202_914ad87b9cad3820a476115eea4925f4
_203_431690d1164c2933eab308c28f2d59d0
.html
_204_f60036a731b0787cbc2ca1d57e0fd9e3
.html
_205_c154ee9bace9e39879001491b1d0b4a6
_206_09b4e586f1641ad6eb6f34665ef1f8f1
_207_c40b83453a22bb28bcfd50f02af5707a
.html
_208_c4ee287898074a6ef01003bdc4a83480
.html
_209_000e66b480a0aa25182676db197c7533
_20_8c888f74c382a20e2caf3163f4d59fb2
_210_09b4e586f1641ad6eb6f34665ef1f8f1
_211_a25744a45c839944f15cde6b5a78eb27
.html
_212_2a35f75ba35605e5e7498beed3f522c1
.html
_213_ae0e97099d5cece119ec741bad2b3728
_214_9c746d94bcccfc309d2493c4555c2099
_215_6ce2480836f738d53762df31b44656a6
.html
_216_83286e3c30b67bc883669f59541dbbc8
.html
_217_ea8d9e6d19b15cd3bcdfd7193fa74173
_218_05d6c754e437854a034478205af4ae30
_219_ce5f0c53eb33f88713b247e8177a2cca
.html
_21_cf9a2a91690a18b2a62332d3f4c34a32
.dll windows:5 windows x86

3294e0ae979d4068a8fd1fef36e5c61e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d2:ec:92:00:7a:02:b7:cd:1a:38:11:1c:4f:f8:25:d6:22:ab:02:36
Signer

Actual PE Digest

d2:ec:92:00:7a:02:b7:cd:1a:38:11:1c:4f:f8:25:d6:22:ab:02:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

shell32

SHGetFolderPathW

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
??2@YAPAXI@Z
strlen
memset
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memmove_s
_CxxThrowException

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

APEAtomCoerce
APEAtomFromBool
APEAtomFromDouble
APEAtomFromHostObject
APEAtomFromInt32
APEAtomFromUTF16
APEAtomFromUTF8
APEAtomGetCanonical
APEAtomGetKind
APEAtomIsNull
APEAtomToBool
APEAtomToDouble
APEAtomToHostObject
APEAtomToInt32
APEAtomToUTF16
APEAtomToUTF8
APEAtomWatch
APEByteArrayCreate
APEByteArrayGetBuffer
APEChangeLogLevel
APEGetBuildBranch
APEGetBuildDate
APEGetBuildVersion
APEGetLogLevel
APEGetVersion
APEInitialize
APEObjectAddEventListener
APEObjectCreate
APEObjectDeleteProperty
APEObjectDisconnect
APEObjectEnumerate
APEObjectGetClassName
APEObjectGetClassObject
APEObjectGetProperty
APEObjectGetPropertyFlags
APEObjectGetRoot
APEObjectInvokeMethod
APEObjectLock
APEObjectPutProperty
APEObjectRemoveEventListener
APEPlayerAddPluginObjectModel
APEPlayerCallExternalInterface
APEPlayerChangeAttributes
APEPlayerDisconnectObjectModelExtension
APEPlayerExtendObjectModel
APEPlayerFromStageHWND
APEPlayerGetAttributes
APEPlayerInstallComponent
APEPlayerLoadComponent
APEPlayerLoadSWF
APEPlayerRetrieveException
APEPlayerSetException
APEPlayerSetStandardException
APEPlayerSuspendResumeAtomCacheFlushing
APEStreamClose
APEStreamWrite
APETerminate

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_220_36f5371c7c4380aaaa0f0d855269fe9d
.html
_221_632a670978290313d55f2985ea0baf44
_222_0d50e5f5065245c27e354e97011ea6c2
_223_5c2740d52ee7cdc266065daa1ef0cf97
_224_8f843d8ee8bf8d6bc72fef59ac2c5783
_225_658bcc1f0bb9e615bf83c2358f3bd71b
_226_41081efd26a1e0c4acb313489480c10a
_227_988f358398bc118540499638ba979d62
.html
_228_522a9bd77691d5677fc3d41959404641
.html
_229_f601e048fb8bf6dea6e2402c05bb5f60
_22_3aae3b61cfa76ead10e8414b2d257394
.dll windows:5 windows x86

819de0de1df032ba6b4fe671503bf259

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2b:fa:a0:c4:70:08:67:1f:4f:c5:9f:f9:90:8b:99:f5:0f:55:f4:8b
Signer

Actual PE Digest

2b:fa:a0:c4:70:08:67:1f:4f:c5:9f:f9:90:8b:99:f5:0f:55:f4:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdiplus

GdipGetImageVerticalResolution
GdipBitmapSetResolution
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipGetImageWidth
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipSetPenLineJoin
GdipGetCompositingQuality
GdipSetPixelOffsetMode
GdipReleaseDC
GdipGetPenStartCap
GdipSetClipPath
GdipRestoreGraphics
GdipStringFormatGetGenericTypographic
GdipGetCellAscent
GdipGetPathLastPoint
GdipGetPenWidth
GdipSetCompositingQuality
GdipCreateFontFamilyFromName
GdipCreateRegion
GdipFillRectangle
GdipTranslateWorldTransform
GdipGetWorldTransform
GdipGetDC
GdipCloneStringFormat
GdipGetCellDescent
GdipCreateImageAttributes
GdipGetGenericFontFamilySansSerif
GdipGetTextRenderingHint
GdipGetTextContrast
GdipGetPenDashArray
GdipGetFontSize
GdipGetPenDashCount
GdipCreateFont
GdipSetPenWidth
GdipAddPathEllipse
GdipCreateMatrix2
GdipSetMatrixElements
GdipSaveGraphics
GdipDisposeImageAttributes
GdipSetPenMiterLimit
GdipDeleteFontFamily
GdipAddPathBezier
GdipGetFamily
GdipSetLinePresetBlend
GdipGetPathGradientPointCount
GdipFlush
GdipClosePathFigure
GdipGetVisibleClipBoundsI
GdipSetSmoothingMode
GdipSetPenLineCap197819
GdipGetPenMiterLimit
GdipSetWorldTransform
GdipGetMatrixElements
GdipSetStringFormatAlign
GdipCreateLineBrush
GdipMultiplyWorldTransform
GdipGetFontStyle
GdipSetPathFillMode
GdipSetClipRectI
GdipAddPathRectangle
GdipDeleteFont
GdipGetClip
GdipDrawPath
GdipIsInfiniteRegion
GdipSetPathGradientSurroundColorsWithCount
GdipSetTextContrast
GdipGetFamilyName
GdipGetPenLineJoin
GdipStringFormatGetGenericDefault
GdipGetEmHeight
GdipSetImageAttributesColorMatrix
GdipGetRegionHRgn
GdipGetSmoothingMode
GdipSetPathGradientCenterColor
GdipGetInterpolationMode
GdipDrawImageRectRect
GdipSetStringFormatFlags
GdipDrawString
GdipSetTextRenderingHint
GdipMeasureString
GdipDeleteStringFormat
GdipCreateStringFormat
GdipSetStringFormatHotkeyPrefix
GdipFillPath
GdipSetClipRect
GdipDeleteMatrix
GdipCreateMatrix
GdipSetPathGradientFocusScales
GdipSetPathGradientPresetBlend
GdipCreatePathGradientFromPath
GdipAddPathLine
GdipAddPathArc
GdipDeletePath
GdipCreatePath
GdipDrawImageI
GdipCreateBitmapFromHICON
GdipGraphicsClear
GdipSetClipHrgn
GdipFillRegion
GdipSetCompositingMode
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCombineRegionRegion
GdipCreateRegionRectI
GdipDeleteRegion
GdipCreateRegionHrgn
GdipSetPenDashArray
GdipSetPenDashStyle
GdipDrawRectangleI
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateBitmapFromStream
GdiplusStartup
GdiplusShutdown
GdipDrawImageRect
GdipSetInterpolationMode
GdipDeleteGraphics
GdipGetImageGraphicsContext

kernel32

CompareStringW
lstrlenW
lstrcpyW
Sleep
GetVersion
FormatMessageA
LocalFree
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
HeapFree
GetProcessHeap
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetLastError
GetCurrentProcess
GetCurrentProcessId
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryW
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
GetCurrentThreadId
VerifyVersionInfoW
VerSetConditionMask
InterlockedDecrement
InterlockedIncrement
GetTickCount
LCMapStringW
MultiByteToWideChar
GetLastError

user32

GetMenuItemInfoW
GetMenuInfo
SetMenu
GetAncestor
RegisterWindowMessageW
SendMessageW
GetMonitorInfoW
EnumDisplayMonitors
IsWindow
DestroyWindow
ReleaseDC
GetDC
GetMenuStringW
CheckMenuItem
GetMenuItemCount
InflateRect
SetClassLongW
GetDoubleClickTime
CopyRect
EnableMenuItem
GetSystemMenu
MonitorFromPoint
CreatePopupMenu
NotifyWinEvent
LoadCursorW
IsZoomed
EnableWindow
InvalidateRect
RedrawWindow
GetClassInfoExW
IsRectEmpty
EndPaint
BeginPaint
GetPropW
RegisterClipboardFormatW
SetActiveWindow
GetActiveWindow
FindWindowW
GetSysColorBrush
GetSysColor
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowTextW
TrackPopupMenuEx
LockWindowUpdate
MessageBeep
MonitorFromRect
GetCursorPos
WindowFromPoint
BringWindowToTop
AttachThreadInput
SetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
SystemParametersInfoW
WaitMessage
SetWindowPos
ChildWindowFromPointEx
SetFocus
GetWindowInfo
InvalidateRgn
SetWindowRgn
ValidateRect
GetUpdateRgn
GetWindowRgn
MapWindowPoints
IntersectRect
GetWindowLongW
OffsetRect
ClientToScreen
DispatchMessageW
PeekMessageW
SetWindowLongW
SetParent
GetDesktopWindow
CallWindowProcW
DefDlgProcW
UnregisterClassW
RegisterClassExW
DefWindowProcW
GetWindow
IsWindowEnabled
GetParent
GetPropA
ReleaseCapture
GetFocus
SetCapture
GetCapture
TrackMouseEvent
ScreenToClient
PtInRect
AppendMenuW
DestroyMenu
KillTimer
SetTimer
CallNextHookEx
PostMessageW
SetWindowsHookExW
UnhookWindowsHookEx
UpdateLayeredWindow
ShowWindow
SetPropA
RemovePropA
CreateWindowExW
IsIconic
IsWindowVisible
FillRect
SetCursor
LoadImageW
DestroyCursor
GetClientRect
GetWindowRect
UpdateWindow
GetAsyncKeyState
GetKeyState
EnumWindows
GetSystemMetrics
CreateMenu

gdi32

GetStockObject
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteObject
ExtCreateRegion
CreateSolidBrush
FillRgn
BitBlt
GetViewportOrgEx
SetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
CreateRectRgn
EqualRgn
PtInRegion
GetClipBox
ExcludeClipRect
CreatePolygonRgn
OffsetRgn
CreateRectRgnIndirect
CombineRgn
GetRgnBox
RectInRegion
CreateRoundRectRgn
DeleteDC

ole32

OleDuplicateData
ReleaseStgMedium
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CoCreateInstance
RevokeDragDrop
RegisterDragDrop

msvcp90

?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_Xlen@_String_base@std@@SAXXZ
?_Xran@_String_base@std@@SAXXZ
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?push_back@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXG@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?deallocate@?$allocator@G@std@@QAEXPAGI@Z
?allocate@?$allocator@G@std@@QAEPAGI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
??0locale@std@@QAE@XZ
??1locale@std@@QAE@XZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?construct@?$allocator@G@std@@QAEXPAGABG@Z
?destroy@?$allocator@G@std@@QAEXPAG@Z
?construct@?$allocator@D@std@@QAEXPADABD@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr90

fabs
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strcmp
memmove_s
memset
wcslen
??0exception@std@@QAE@ABQBDH@Z
??8type_info@@QBE_NABV0@@Z
_purecall
wcscmp
strlen
free
malloc
memcpy
ceil
memcmp
labs
??_V@YAXPAX@Z
wcscpy
pow
sqrt
isspace
wcsncpy
sin
log
isdigit
__RTDynamicCast
isxdigit
ispunct
__RTtypeid
_invalid_parameter_noinfo
strerror
abort
_CxxThrowException
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
floor

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
OWLActivationContextGetActiveDocument
OWLAdjustUIVisibility
OWLApplicationContainerApplyDocumentLayoutCommand
OWLApplicationContainerCallDefaultProc
OWLApplicationContainerChangeApplicationMenu
OWLApplicationContainerChangeHostViewPreferredSize
OWLApplicationContainerChangeIcon
OWLApplicationContainerChangePreferredBounds
OWLApplicationContainerChangeWorkspaceMenu
OWLApplicationContainerChangeWorkspaceMenuSelection
OWLApplicationContainerGetApplicationMenu
OWLApplicationContainerGetBounds
OWLApplicationContainerGetDocumentDock
OWLApplicationContainerGetHostView
OWLApplicationContainerGetHostViewBounds
OWLApplicationContainerGetHostViewPreferredSize
OWLApplicationContainerGetIcon
OWLApplicationContainerGetPreferredBounds
OWLApplicationContainerGetWorkspaceMenu
OWLApplicationContainerGetWorkspaceMenuSelection
OWLApplicationContainerIsApplicationMenuActive
OWLApplicationContainerRefreshApplicationMenu
OWLApplicationContainerRefreshWorkspaceMenu
OWLCastToControlBarControl
OWLCastToControlRef
OWLCastToDocumentControl
OWLCastToPaletteControl
OWLCastToToolbarControl
OWLChangeLastTargetDisplay
OWLChangeLockDocumentFocus
OWLChangeLogLevel
OWLChangeScreenMode
OWLCloseDrawer
OWLControlBarChangeOrigin
OWLControlBarChangeSizes
OWLControlBarCreate
OWLControlBarGetMaximumSize
OWLControlBarGetMinimumSize
OWLControlBarGetOrigin
OWLControlBarGetPreferredSize
OWLControlBarGetResizeGripper
OWLControlBarGetSize
OWLControlBarPaneCreate
OWLCreateSnapContext
OWLDebugGetLayoutCount
OWLDebugPrintWidget
OWLDebugPrintWidgetInfo
OWLDestroyAllPalettePanes
OWLDestroySnapContext
OWLDockChangeMode
OWLDockChangePreferredOrigin
OWLDockCreate
OWLDockGetAnchor
OWLDockGetBounds
OWLDockGetContent
OWLDockGetMode
OWLDockGetPreferredOrigin
OWLDocumentActivate
OWLDocumentChangeHeightRange
OWLDocumentChangeIsModified
OWLDocumentChangeLabel
OWLDocumentChangePreferredConstrainedSize
OWLDocumentChangePreferredUnconstrainedSize
OWLDocumentChangePreferredWindowBounds
OWLDocumentChangeWidthRange
OWLDocumentCopyLabel
OWLDocumentCreate
OWLDocumentFocusIsLocked
OWLDocumentGetActivationContext
OWLDocumentGetBounds
OWLDocumentGetHeightRange
OWLDocumentGetPreferredConstrainedSize
OWLDocumentGetPreferredUnconstrainedSize
OWLDocumentGetStatusbar
OWLDocumentGetWidthRange
OWLDocumentIsActive
OWLDocumentIsModified
OWLDocumentSetCursorForTrackResize
OWLDocumentTrackResize
OWLDocumentWindowArrange
OWLExecuteTest
OWLGetBuildBranch
OWLGetBuildDate
OWLGetBuildToolInformation
OWLGetBuildVersion
OWLGetDocumentArea
OWLGetKeyboardFocus
OWLGetLastTargetDisplay
OWLGetLogLevel
OWLGetNullKeyboardFocus
OWLGetNumberOfInstantiatedWidgets
OWLGetScreenMode
OWLGetSnapTargetEdges
OWLGetTargetActivationContext
OWLGetVersion
OWLGetWindowGroup
OWLGetWorkspaceTarget
OWLInitialize
OWLIsApplicationContainer
OWLIsApplicationContainerControlBar
OWLIsControlBar
OWLIsControlBarPane
OWLIsDock
OWLIsDocument
OWLIsPalette
OWLIsTabGroup
OWLIsTabPane
OWLIsToolbar
OWLIsWorkspace
OWLKeyboardFocusIsNull
OWLPaletteChangeCurrentState
OWLPaletteChangeIcon
OWLPaletteChangeIsMinimized
OWLPaletteChangeLabel
OWLPaletteChangeMaximumSize
OWLPaletteChangeMenu
OWLPaletteChangeMinimumSize
OWLPaletteChangePreferredSizes
OWLPaletteChangeSizes
OWLPaletteChangeStateCount
OWLPaletteChangeVerticalStepSize
OWLPaletteCopyLabel
OWLPaletteCreate
OWLPaletteGetConstrainedPreferredSize
OWLPaletteGetCurrentState
OWLPaletteGetIcon
OWLPaletteGetIsMinimized
OWLPaletteGetMaximumSize
OWLPaletteGetMenu
OWLPaletteGetMinimumSize
OWLPaletteGetResizeGripper
OWLPaletteGetSize
OWLPaletteGetStateCount
OWLPaletteGetUnconstrainedPreferredSize
OWLPaletteGetVerticalStepSize
OWLPaletteHide
OWLPaletteIdentify
OWLPaletteShow
OWLRegisterSnapTargetWindow
OWLSetKeyboardFocus
OWLSnap
OWLTabGroupChangeSelectedTabItem
OWLTabGroupCreate
OWLTabGroupGetIsDrawerOpen
OWLTabGroupGetSelectedTabItem
OWLTabGroupGetTabItemAtLocation
OWLTabGroupSelectNextOpenTabItem
OWLTabPaneChangeLayoutMode
OWLTabPaneChangeMode
OWLTabPaneChangePreferredIconicLength
OWLTabPaneCreate
OWLTabPaneGetBounds
OWLTabPaneGetLayoutMode
OWLTabPaneGetMode
OWLTabPaneGetPreferredIconicLength
OWLTerminate
OWLTestIsAvailable
OWLThemeAddBoolean
OWLThemeAddBrush
OWLThemeAddFloat
OWLThemeAddFont
OWLThemeAddInterpolator
OWLThemeAddPen
OWLThemeAddSize
OWLThemeAddString
OWLThemeChangeBoolean
OWLThemeChangeBrush
OWLThemeChangeFloat
OWLThemeChangeFont
OWLThemeChangeInterpolator
OWLThemeChangeIsBrightnessAware
OWLThemeChangePen
OWLThemeChangeSize
OWLThemeChangeSourceUIBrightness
OWLThemeChangeString
OWLThemeChangeUIBrightness
OWLThemeGetBoolean
OWLThemeGetBrush
OWLThemeGetFloat
OWLThemeGetFont
OWLThemeGetInterpolator
OWLThemeGetIsBrightnessAware
OWLThemeGetKeys
OWLThemeGetPen
OWLThemeGetSize
OWLThemeGetSourceUIBrightness
OWLThemeGetString
OWLThemeGetUIBrightness
OWLThemeHasBoolean
OWLThemeHasBrush
OWLThemeHasFloat
OWLThemeHasFont
OWLThemeHasInterpolator
OWLThemeHasPen
OWLThemeHasSize
OWLThemeHasString
OWLToolbarChangeIcon
OWLToolbarChangeMenu
OWLToolbarChangeSizeVariant
OWLToolbarChangeVariantSize
OWLToolbarCreate
OWLToolbarGetBounds
OWLToolbarGetIcon
OWLToolbarGetMenu
OWLToolbarGetSizeVariant
OWLToolbarGetVariantSize
OWLUIChangeIsActive
OWLUIGetIsActive
OWLUIVisibilityReset
OWLUnregisterSnapTargetWindow
OWLWINThemeChangeBrushColorSource
OWLWINThemeChangePenColorSource
OWLWINThemeGetBrushColorSource
OWLWINThemeGetPenColorSource
OWLWidgetBringToFront
OWLWidgetCanClose
OWLWidgetChangeIsClosed
OWLWidgetCreateFocusSpecifier
OWLWidgetDestroy
OWLWidgetGetChildCount
OWLWidgetGetEffectiveVisibility
OWLWidgetGetIsClosed
OWLWidgetGetLatentVisibility
OWLWidgetGetLayoutContextKind
OWLWidgetGetMetrics
OWLWidgetGetNthChild
OWLWidgetGetOSWindowContainer
OWLWidgetGetOccludedWidgets
OWLWidgetGetParent
OWLWidgetMove
OWLWidgetShow
OWLWin32ApplicationContainerCreate
OWLWindowAddToGroup
OWLWindowBringToFront
OWLWindowGetGroup
OWLWindowRemoveFromGroup
OWLWorkspaceBookmarkAssignFromBuffer
OWLWorkspaceBookmarkCreate
OWLWorkspaceBookmarkDestroy
OWLWorkspaceBookmarkGetBuffer
OWLWorkspaceBookmarkRestore
OWLWorkspaceBookmarkSnapshot
OWLWorkspaceChangeLocaleTextDirection
OWLWorkspaceGetLocaleTextDirection
OWLWorkspaceInvalidateUI
OWLWorkspaceIsLayoutSuspended
OWLWorkspaceIsPerformingLayout
OWLWorkspaceLayoutIsValid
OWLWorkspacePerformChildLayout
OWLWorkspacePerformLayout
OWLWorkspaceSuspendResumeLayout
_DllMain@12

Sections

.text
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_230_2d389e7689f4155502e5866919968b20
_231_34f50e6ce4bf44eaad0e42a002966824
.xml
_232_090b0ebe64e864da5ddc783a95dd8095
.dll windows:4 windows x86

10990bf32f3f347546594d1661711cab

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

45:f4:e3:5f:5b:12:82:16:72:4a:d4:5d:d9:f6:09:a3:2f:d3:96:8f
Signer

Actual PE Digest

45:f4:e3:5f:5b:12:82:16:72:4a:d4:5d:d9:f6:09:a3:2f:d3:96:8f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

sin
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
cos
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
log
pow
malloc
free
memcpy
memmove
memset
??2@YAPAXI@Z
_CIsqrt
_CIsin
??3@YAXPAX@Z
__CppXcptFilter
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

DI_CreateSoundDecompressor
DI_DecompressSound
DI_DestroySoundDecompressor
DI_GetSupportedFormats
DI_SetupDecoderLibrary
DI_SetupSoundDecompressor

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_233_4e357842edfe2c29421dd7b2efacb3fb
.dll windows:4 windows x86

8ff53486910d3586ce4d31ca9b8656a8

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

69:e1:6a:d5:65:5f:13:54:e3:25:16:3d:d7:35:19:dc:2f:5f:33:1d
Signer

Actual PE Digest

69:e1:6a:d5:65:5f:13:54:e3:25:16:3d:d7:35:19:dc:2f:5f:33:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
memmove
memset
__CxxFrameHandler3
??3@YAXPAX@Z
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_234_8288279c49471c97789c21d00ee2a90f
.dll windows:4 windows x86

9e25c0642c8fc2ebf3ce46818aa10890

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

29:4a:90:53:05:78:0b:ea:5c:24:83:8a:38:bf:32:b8:74:21:36:ba
Signer

Actual PE Digest

29:4a:90:53:05:78:0b:ea:5c:24:83:8a:38:bf:32:b8:74:21:36:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
memset
__CxxFrameHandler3
??3@YAXPAX@Z
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_235_39aa5af9a0dc7a233e3b2e5ab388ddd3
.dll windows:4 windows x86

e74273ee1af3aa726ae852cbcbb714ad

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ce:30:0a:74:22:f2:a1:fd:32:18:ab:fb:e0:65:ab:12:f6:d8:b0:81
Signer

Actual PE Digest

ce:30:0a:74:22:f2:a1:fd:32:18:ab:fb:e0:65:ab:12:f6:d8:b0:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
GetCPInfo
IsDBCSLeadByte
GetTickCount
RtlUnwind
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
ReadFile
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetOEMCP
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
VirtualQuery
InitializeCriticalSection
FlushFileBuffers
SetStdHandle
VirtualProtect
GetSystemInfo
CloseHandle
HeapSize
RaiseException

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetVersion
FI_GetVersionInfo
FI_RegisterCallbacks

Sections

.text
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_236_545c874f161f0becbd2d6b7462d2d762
.dll windows:4 windows x86

e74273ee1af3aa726ae852cbcbb714ad

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:c2:47:ff:20:0b:6c:bd:ce:19:1b:c3:ca:91:0f:28:2f:b2:fc:78
Signer

Actual PE Digest

08:c2:47:ff:20:0b:6c:bd:ce:19:1b:c3:ca:91:0f:28:2f:b2:fc:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
GetCPInfo
IsDBCSLeadByte
GetTickCount
RtlUnwind
ExitProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
ReadFile
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetOEMCP
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
VirtualQuery
InitializeCriticalSection
FlushFileBuffers
SetStdHandle
VirtualProtect
GetSystemInfo
CloseHandle
HeapSize
RaiseException

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetVersion
FI_GetVersionInfo
FI_RegisterCallbacks

Sections

.text
Size: 456KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_237_3ff8b5516746ac62da5c0678fa9ff0cc
.dll windows:4 windows x86

2c5037c7df5f19055cb6f19e1defaf3f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3c:92:e5:53:c2:98:e3:4d:a0:b0:df:89:6e:03:33:0b:ac:3b:27:38
Signer

Actual PE Digest

3c:92:e5:53:c2:98:e3:4d:a0:b0:df:89:6e:03:33:0b:ac:3b:27:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetEnvironmentStringsW
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetCPInfo
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetVersion

Sections

.text
Size: 624KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_238_c51587cba8fb65f7edc48bbb7f6833f6
.dll windows:4 windows x86

a784492c12098d3530f6443f43a9fa49

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

de:de:c9:b3:ad:09:a4:61:b0:06:68:22:08:6f:b5:7e:e5:e2:42:63
Signer

Actual PE Digest

de:de:c9:b3:ad:09:a4:61:b0:06:68:22:08:6f:b5:7e:e5:e2:42:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetEnvironmentStringsW
SetEnvironmentVariableA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
UnhandledExceptionFilter
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
GetLocaleInfoW
FlushFileBuffers
CloseHandle
CompareStringA
CompareStringW

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetVersion

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_239_a089d6afac38d9646d4b4160531eed89
.dll windows:4 windows x86

28e342bac6e7fabd6cc6f3a97b1821ed

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ed:03:f9:26:1f:26:c2:9b:cb:89:42:ad:c3:0d:33:c0:71:0f:83:83
Signer

Actual PE Digest

ed:03:f9:26:1f:26:c2:9b:cb:89:42:ad:c3:0d:33:c0:71:0f:83:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
InterlockedExchange
VirtualQuery
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo

Exports

Exports

DI_CreateSoundDecompressor
DI_DecompressSound
DI_DestroySoundDecompressor
DI_GetSupportedFormats
DI_SetupDecoderLibrary
DI_SetupSoundDecompressor

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_23_92070fc943a7f7671d252995bd34c03c
.dll windows:5 windows x86

4f17a5347b2b01c4343c91e89c564fc2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

49:ef:bf:97:a1:ef:db:ad:36:dd:d5:d5:b0:db:24:e9:a9:b0:f2:13
Signer

Actual PE Digest

49:ef:bf:97:a1:ef:db:ad:36:dd:d5:d5:b0:db:24:e9:a9:b0:f2:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyW
RegCreateKeyExA
RegOpenCurrentUser
RegEnumValueW
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyExW
RegCloseKey
RegSetValueExW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW

gdiplus

GdiplusStartup
GdiplusShutdown

kernel32

InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
MulDiv
FindResourceW
LoadResource
SizeofResource
LockResource
MultiByteToWideChar
CreateDirectoryW
OpenProcess
Sleep
CreateFileW
GetLastError
LoadLibraryA
CloseHandle
DeleteFileW
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetFileAttributesW
TerminateProcess
InterlockedCompareExchange

user32

GetClientRect
RemovePropW
EndPaint
GetDlgCtrlID
SendMessageW
SetWindowPos
EndDialog
GetDlgItem
BeginPaint
GetDC
DialogBoxParamW
DrawTextW
GetWindowRect
ShowWindow
ReleaseCapture
SetPropW
PtInRect
LoadCursorW
SetCapture
SetCursor
ClientToScreen
SetWindowLongW
GetPropW
CallWindowProcW
InvalidateRect
GetCapture

gdi32

DeleteObject
GetDeviceCaps
SetTextColor
CreateFontIndirectW
SetBkColor
GetObjectW
SetDCBrushColor
SelectObject
Rectangle
SetDCPenColor
GetStockObject

msvcp90

?width@ios_base@std@@QBEHXZ
?width@ios_base@std@@QAEHH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WU_Size_type_nosscl@01@@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

msvcr90

strcpy
__CxxFrameHandler3
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
abort
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
_ctime64
_time64
wcscmp
memset
strncpy
memcmp
memcpy
??_V@YAXPAX@Z
wcslen
_CxxThrowException
strlen
strcmp
sprintf
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z

Exports

Exports

AdobePIPDisplayOptInOutDialog
AdobePIPEnableCrashDetection
AdobePIPGetLogHandle
AdobePIPInitializeW
AdobePIPSetProductDisplayNameW
AdobePIPTerminate

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 449KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_240_ffd6ccedefb678b7a3e7a98c1005cdab
.dll windows:4 windows x86

2c5037c7df5f19055cb6f19e1defaf3f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3b:35:7e:3b:99:30:bf:a1:b4:ce:2c:00:07:ec:a2:a3:04:cb:cc:66
Signer

Actual PE Digest

3b:35:7e:3b:99:30:bf:a1:b4:ce:2c:00:07:ec:a2:a3:04:cb:cc:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetEnvironmentStringsW
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetCPInfo
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetVersion

Sections

.text
Size: 652KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_241_8b1a67db7fed0b3e7213acdfe703a681
.dll windows:4 windows x86

a784492c12098d3530f6443f43a9fa49

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9c:e2:84:d7:09:c0:f1:a6:8d:8b:46:8a:7b:3b:54:03:e0:e8:c9:a7
Signer

Actual PE Digest

9c:e2:84:d7:09:c0:f1:a6:8d:8b:46:8a:7b:3b:54:03:e0:e8:c9:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetEnvironmentStringsW
SetEnvironmentVariableA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
UnhandledExceptionFilter
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
RtlUnwind
GetStringTypeA
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
GetLocaleInfoW
FlushFileBuffers
CloseHandle
CompareStringA
CompareStringW

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetVersion

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_242_960a7be576405e6a4d16983b67d31b45
.dll windows:4 windows x86

d6225125376fe4105ecffe0f4fe13127

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8d:07:75:0a:bc:6b:61:c1:c6:ab:5c:93:28:4c:d7:5a:69:9e:8e:ca
Signer

Actual PE Digest

8d:07:75:0a:bc:6b:61:c1:c6:ab:5c:93:28:4c:d7:5a:69:9e:8e:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
SystemTimeToFileTime
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId

msvcr80

pow
fabs
sqrt
log
ceil
floor
fmod
memset
frexp
strcmp
strncmp
strlen
_time64
memcmp
memmove
strcat
strchr
strrchr
_strdup
_stricmp
_strnicmp
strstr
exp
strncpy
mbstowcs
wcstombs
wcslen
wcscpy
wcscmp
_wcsicmp
_vsnprintf
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
atan2
atan
asin
acos
tan
sin
cos
sprintf
_purecall
strcpy

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 584KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_243_f6edd78e803654299a78a892e46ceb1b
.dll windows:4 windows x86

d6225125376fe4105ecffe0f4fe13127

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:9e:43:a7:3d:66:6a:d6:78:06:b6:c7:b5:8f:26:d1:49:e9:20:66
Signer

Actual PE Digest

03:9e:43:a7:3d:66:6a:d6:78:06:b6:c7:b5:8f:26:d1:49:e9:20:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
SystemTimeToFileTime
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId

msvcr80

pow
fabs
sqrt
log
ceil
floor
fmod
memset
frexp
strcmp
strncmp
strlen
_time64
memcmp
memmove
strcat
strchr
strrchr
_strdup
_stricmp
_strnicmp
strstr
exp
strncpy
mbstowcs
wcstombs
wcslen
wcscpy
wcscmp
_wcsicmp
_vsnprintf
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
atan2
atan
asin
acos
tan
sin
cos
sprintf
_purecall
strcpy

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 576KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_244_c010d2ddd44d04fa9c998ad1fea5d9e7
.dll windows:4 windows x86

d9aea61a1255abe27e5cde644a11e95c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

75:85:4e:44:4a:28:8d:81:8e:df:0e:e8:4d:49:86:b9:25:a8:87:4c
Signer

Actual PE Digest

75:85:4e:44:4a:28:8d:81:8e:df:0e:e8:4d:49:86:b9:25:a8:87:4c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId

msvcr80

pow
fabs
sqrt
log
ceil
floor
fmod
memset
frexp
strcmp
strncmp
strlen
strstr
memcmp
memmove
strcat
strchr
_stricmp
_strnicmp
exp
strncpy
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
atan2
atan
asin
acos
tan
sin
cos
sprintf
_purecall
strcpy

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 648KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_245_3d274f0c79a6be832f762ca264e38362
.dll windows:4 windows x86

c23ddcffc50b13c2924e98ee6bba28dc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6f:7b:d3:ab:ce:37:a4:c9:f6:a8:1e:93:95:e9:22:92:69:7f:d5:32
Signer

Actual PE Digest

6f:7b:d3:ab:ce:37:a4:c9:f6:a8:1e:93:95:e9:22:92:69:7f:d5:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
SystemTimeToFileTime
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId

msvcr80

pow
fabs
sqrt
log
ceil
floor
fmod
memset
frexp
strcmp
strncmp
strlen
strstr
_time64
memcmp
memmove
strcat
strchr
strrchr
_strdup
_stricmp
_strnicmp
exp
strncpy
mbstowcs
wcstombs
wcslen
wcscpy
wcscmp
_wcsicmp
_vsnprintf
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
atan2
atan
asin
acos
tan
sin
cos
sprintf
_purecall
strcpy

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_246_f4394dceb6e0d6b9aa9ed7c5b1464b2f
.dll windows:4 windows x86

1e7f0732ed1e6cfd8b6814aeaf91318e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

29:53:e0:64:c6:8f:3d:e8:4b:cc:5c:cb:fc:6c:95:5c:2f:0e:79:bc
Signer

Actual PE Digest

29:53:e0:64:c6:8f:3d:e8:4b:cc:5c:cb:fc:6c:95:5c:2f:0e:79:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CloseHandle
CreateEventA
ResetEvent
SetEvent
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr80

_initterm_e
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
__CxxFrameHandler3
??3@YAXPAX@Z
_purecall
memmove
memcpy
memset
_amsg_exit

Exports

Exports

RegisterComponents

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_247_d802c026b6c84f522719d75cad91eaa9
.dll windows:4 windows x86

18268e7096dfcc19969cbef4232562bd

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

70:f6:5a:9f:41:ec:58:cc:cc:80:d2:93:fa:be:d1:c0:ff:48:41:a2
Signer

Actual PE Digest

70:f6:5a:9f:41:ec:58:cc:cc:80:d2:93:fa:be:d1:c0:ff:48:41:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
memcpy
memset
__CxxFrameHandler3
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_248_0353e38939a6e13e8cf4895fef3d2644
.dll windows:4 windows x86

c12a73150caa1e218dd500b46fe4a2db

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:66:68:bc:ef:36:55:ad:7b:fa:73:ba:36:14:ef:76:4a:f3:f3:3e
Signer

Actual PE Digest

0a:66:68:bc:ef:36:55:ad:7b:fa:73:ba:36:14:ef:76:4a:f3:f3:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
memmove
memset
__CxxFrameHandler3
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_249_ca367fc6e48ae48f9e588ce60bdf530a
.dll windows:4 windows x86

3eac04ec19d9d4f21995b03fd1943e70

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

58:2a:45:3d:6e:e1:68:6c:50:f4:9a:f7:cc:e6:6d:34:93:d1:a8:e6
Signer

Actual PE Digest

58:2a:45:3d:6e:e1:68:6c:50:f4:9a:f7:cc:e6:6d:34:93:d1:a8:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeSetEvent
timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
SystemTimeToFileTime
VirtualQuery
GetTimeZoneInformation
GetSystemTime
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetSystemInfo
VirtualAlloc
VirtualFree
QueryPerformanceFrequency
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

user32

CreateWindowExA

msvcr80

sprintf
cos
sin
tan
acos
asin
atan
atan2
exp
pow
fabs
sqrt
log
ceil
floor
_setjmp3
memcpy
fmod
strcmp
memset
frexp
strncmp
strstr
_purecall
strchr
memmove
strrchr
_stricmp
_strnicmp
strncpy
wcslen
wcscmp
strtol
abort
longjmp
exit
vsprintf
getenv
fclose
fprintf
fopen
memchr
__CxxFrameHandler3
_vsnprintf
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 824KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_24_a0e3c740426bcae1a9e0a1e2d137cc58
.dll windows:5 windows x86

a324509dcab5e708cf49f5cde4e825a4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8d:c9:1d:5e:aa:11:9e:3e:0d:ce:3e:ab:7d:fc:b7:92:4c:40:eb:e1
Signer

Actual PE Digest

8d:c9:1d:5e:aa:11:9e:3e:0d:ce:3e:ab:7d:fc:b7:92:4c:40:eb:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoTaskMemFree

shlwapi

PathAppendW
PathRemoveBackslashW
PathStripPathW
PathFileExistsW

shell32

SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW

advapi32

AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
FreeSid
GetNamedSecurityInfoW

kernel32

LCMapStringW
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
GetFullPathNameA
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetLastError
CloseHandle
LocalFree
GetCurrentProcess
SystemTimeToFileTime
GetFileAttributesExW
GetFileAttributesW
SetFileAttributesW
FlushFileBuffers
CreateFileW
CopyFileW
lstrlenW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
AreFileApisANSI
Sleep
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
GetFileSize
UnlockFile
LockFile
GetFileAttributesA
DeleteFileA
DeleteFileW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
DeleteCriticalSection
LockFileEx
InterlockedIncrement
InitializeCriticalSection
GetTempPathA
GetTempPathW
FormatMessageA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
GetModuleHandleA
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA

Exports

Exports

GetSetupManifest
capsBackup
capsCloseSession
capsGetCollection
capsGetCollectionData
capsGetCollectionDataKeys
capsGetCollectionDataKeysAndValues
capsGetCollectionPayloads
capsGetCollections
capsGetInstallState
capsGetLastModTime
capsGetPayload
capsGetPayloadCollections
capsGetPayloadCollectionsAcrossUpgrades
capsGetPayloadConstraint
capsGetPayloadData
capsGetPayloadDataKeys
capsGetPayloadDataKeysAndValues
capsGetPayloads
capsGetUpgradedPayloadsKeysAndValues
capsOpenSession
capsOpenSessionNoCreate
capsRemoveCollectionData
capsRemoveCollectionDomainData
capsRemovePayloadData
capsRemovePayloadDomainData
capsSessionCommit
capsSessionRollback
capsSetCollectionData
capsSetPayloadData
mdbCloseSession
mdbGetBrandingData
mdbGetDependencyData
mdbGetDependencyDataEx
mdbGetEulaData
mdbGetEulaLanguageList
mdbGetPayload
mdbGetPayloadData
mdbGetProduct
mdbGetProductIDList
mdbGetProductPayloads
mdbOpenSession
mdbOpenSessionNoCreate
mdbOpenSessionWithPath
mdbSessionRollback
pcdCacheGetLastModTime
pcdCloseSession
pcdGetDomainData
pcdGetDomainDataKeys
pcdGetDomainDataSubdomains
pcdGetLastModTime
pcdOpenCacheSession
pcdOpenCacheSessionNoCreate
pcdOpenSession
pcdOpenSessionNoCreate
pcdRemoveDomainData
pcdSessionCommit
pcdSessionRollback
pcdSetDomainData
pdbCloseSession
pdbGetInstallState
pdbGetLastModTime
pdbGetPayload
pdbGetPayloadData
pdbGetPayloadDataKeys
pdbGetPayloadDataKeysAndValues
pdbGetPayloadDependency
pdbGetPayloadDependencyKeysAndValues
pdbGetPayloadDependencyReverse
pdbGetPayloads
pdbGetUpgradedPayloadsKeysAndValues
pdbGetUserAction
pdbOpenSession
pdbOpenSessionNoCreate
pdbSessionRollback

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_250_704745ada1e61811630709dee5d9675f
.dll windows:4 windows x86

3eac04ec19d9d4f21995b03fd1943e70

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f4:df:1b:b3:ff:b3:42:8b:e1:32:7d:61:db:25:43:4e:07:b3:51:15
Signer

Actual PE Digest

f4:df:1b:b3:ff:b3:42:8b:e1:32:7d:61:db:25:43:4e:07:b3:51:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeSetEvent
timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
InterlockedCompareExchange
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
SystemTimeToFileTime
VirtualQuery
GetTimeZoneInformation
GetSystemTime
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetSystemInfo
VirtualAlloc
VirtualFree
QueryPerformanceFrequency
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

user32

CreateWindowExA

msvcr80

sprintf
cos
sin
tan
acos
asin
atan
atan2
exp
pow
fabs
sqrt
log
ceil
floor
_setjmp3
memcpy
fmod
strcmp
memset
frexp
strncmp
strstr
_purecall
strchr
memmove
strrchr
_stricmp
_strnicmp
strncpy
wcslen
wcscmp
strtol
abort
longjmp
exit
vsprintf
getenv
fclose
fprintf
fopen
memchr
__CxxFrameHandler3
_vsnprintf
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 1.8MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 824KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_251_8fb6b3c50e1a7b90a3d92c298cc582a2
.dll windows:4 windows x86

1e7f0732ed1e6cfd8b6814aeaf91318e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

db:36:76:14:89:2d:28:e2:2e:51:38:89:86:ce:1e:d4:1c:72:cb:37
Signer

Actual PE Digest

db:36:76:14:89:2d:28:e2:2e:51:38:89:86:ce:1e:d4:1c:72:cb:37

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CloseHandle
CreateEventA
ResetEvent
SetEvent
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr80

_initterm_e
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
__CxxFrameHandler3
??3@YAXPAX@Z
_purecall
memmove
memcpy
memset
_amsg_exit

Exports

Exports

RegisterComponents

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_252_cb2c33181840e41ab92972eebf9b633e
.dll windows:4 windows x86

c12a73150caa1e218dd500b46fe4a2db

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

55:7d:c3:2c:19:77:ec:8c:a9:a5:d4:00:05:10:8e:22:f4:18:61:cc
Signer

Actual PE Digest

55:7d:c3:2c:19:77:ec:8c:a9:a5:d4:00:05:10:8e:22:f4:18:61:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
memmove
memset
__CxxFrameHandler3
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_253_b9a8bfa5b26ea29cc51d24901e551344
.dll windows:4 windows x86

c12a73150caa1e218dd500b46fe4a2db

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c6:46:59:44:ec:bf:0c:e2:6f:d5:f4:73:0c:ec:8f:cf:36:37:89:a0
Signer

Actual PE Digest

c6:46:59:44:ec:bf:0c:e2:6f:d5:f4:73:0c:ec:8f:cf:36:37:89:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
memmove
memset
__CxxFrameHandler3
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_254_5f0940ca05de06d944e10a735589a3f0
.dll windows:4 windows x86

c23ddcffc50b13c2924e98ee6bba28dc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c9:86:14:1c:48:56:01:2c:14:21:56:a0:69:fe:33:66:35:08:94:c2
Signer

Actual PE Digest

c9:86:14:1c:48:56:01:2c:14:21:56:a0:69:fe:33:66:35:08:94:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
SystemTimeToFileTime
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId

msvcr80

pow
fabs
sqrt
log
ceil
floor
fmod
memset
frexp
strcmp
strncmp
strlen
strstr
_time64
memcmp
memmove
strcat
strchr
strrchr
_strdup
_stricmp
_strnicmp
exp
strncpy
mbstowcs
wcstombs
wcslen
wcscpy
wcscmp
_wcsicmp
_vsnprintf
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
atan2
atan
asin
acos
tan
sin
cos
sprintf
_purecall
strcpy

Exports

Exports

FI_CheckSWFDataBufferValidity
FI_CreatePlayer
FI_GetDisplayFormat
FI_GetMetaData
FI_GetSharedObjectGUID
FI_GetSwfInfo
FI_GetVersion
FI_SetMaxVideoFramesToProcess

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_255_7eaefd45cc3e8ef4ec2b44203fa7b5d3
.dll windows:4 windows x86

1e7f0732ed1e6cfd8b6814aeaf91318e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

29:53:e0:64:c6:8f:3d:e8:4b:cc:5c:cb:fc:6c:95:5c:2f:0e:79:bc
Signer

Actual PE Digest

29:53:e0:64:c6:8f:3d:e8:4b:cc:5c:cb:fc:6c:95:5c:2f:0e:79:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CloseHandle
CreateEventA
ResetEvent
SetEvent
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr80

_initterm_e
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
__CxxFrameHandler3
??3@YAXPAX@Z
_purecall
memmove
memcpy
memset
_amsg_exit

Exports

Exports

RegisterComponents

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_256_834ac352238ad0ed00d52a009ccc8346
.dll windows:4 windows x86

18268e7096dfcc19969cbef4232562bd

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

70:f6:5a:9f:41:ec:58:cc:cc:80:d2:93:fa:be:d1:c0:ff:48:41:a2
Signer

Actual PE Digest

70:f6:5a:9f:41:ec:58:cc:cc:80:d2:93:fa:be:d1:c0:ff:48:41:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
memcpy
memset
__CxxFrameHandler3
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_257_adf26161bda28cf76c0916b810bd76d4
.dll windows:4 windows x86

c12a73150caa1e218dd500b46fe4a2db

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:66:68:bc:ef:36:55:ad:7b:fa:73:ba:36:14:ef:76:4a:f3:f3:3e
Signer

Actual PE Digest

0a:66:68:bc:ef:36:55:ad:7b:fa:73:ba:36:14:ef:76:4a:f3:f3:3e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
memmove
memset
__CxxFrameHandler3
__clean_type_info_names_internal
_purecall

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

RegisterComponents

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_258_ae04ed4061d50d4a2ed4f925d2907e3b
.dll regsvr32 windows:5 windows x86

b0c464204824e05cbafddca15dd3c614

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a8:8f:74:6c:d6:90:0c:28:88:cf:a8:b9:2d:25:5a:16:a7:97:d8:6b
Signer

Actual PE Digest

a8:8f:74:6c:d6:90:0c:28:88:cf:a8:b9:2d:25:5a:16:a7:97:d8:6b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

timeGetTime
waveOutGetPosition
waveInOpen
waveInPrepareHeader
waveOutOpen
waveInUnprepareHeader
waveInClose
waveOutClose
waveInStop
timeSetEvent
timeKillEvent
waveInAddBuffer
waveInStart
waveOutReset
waveInGetNumDevs
waveOutGetNumDevs
waveInGetDevCapsW
waveOutGetDevCapsW
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
waveInReset

wininet

HttpQueryInfoW

crypt32

CertCreateCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertCloseStore
CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertFreeCertificateContext

rpcrt4

RpcStringFreeA
UuidToStringA

urlmon

CopyStgMedium

dsound

ord8

kernel32

GlobalSize
GlobalAlloc
FreeLibrary
GetSystemInfo
GetModuleHandleW
MoveFileExW
DeleteFileW
GetFileAttributesW
VirtualQuery
GetUserDefaultUILanguage
WriteFile
FindResourceExA
SetUnhandledExceptionFilter
GetTempPathW
FindClose
FindNextFileW
FindFirstFileW
InterlockedIncrement
InterlockedDecrement
GetTimeZoneInformation
GetSystemTime
SystemTimeToFileTime
WaitForSingleObject
ReleaseSemaphore
ResetEvent
WaitForMultipleObjects
SetEvent
CreateSemaphoreW
CreateEventW
GetTempFileNameW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetACP
MultiByteToWideChar
CreateProcessW
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
GetFileAttributesA
CreateDirectoryA
DeleteFileA
CreateMutexA
SetFilePointerEx
GetFileSizeEx
GetCurrentProcessId
GetFileInformationByHandle
GetVolumeInformationW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
ExpandEnvironmentStringsW
CreateDirectoryW
RaiseException
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
SetLastError
SetThreadPriority
GetSystemDirectoryA
TerminateThread
lstrcpyA
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
GetCPInfo
IsDBCSLeadByte
SetThreadAffinityMask
GetCurrentThread
VirtualAlloc
VirtualFree
LocalFree
FormatMessageW
GetModuleHandleA
FormatMessageA
CreateEventA
ConnectNamedPipe
CreateNamedPipeA
FlushFileBuffers
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
OutputDebugStringA
VirtualProtect
CreateSemaphoreA
GetNumberFormatW
GetCurrencyFormatW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetCommandLineA
GlobalLock
TlsAlloc
GlobalUnlock
GetCurrentProcess
GetProcessTimes
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
lstrlenW
CreateProcessA
LCMapStringW
GetTickCount
GetCurrentThreadId
GetLocaleInfoW
LoadLibraryW
FindResourceA
SizeofResource
CreateThread
ExitThread
LoadLibraryA
GetProcAddress
GetLastError
ReadFile
GetVersionExW
CreateFileW
CreateFileA
GetFileSize
SetFilePointer
CloseHandle
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
GlobalFree
GetUserDefaultLangID
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
InterlockedCompareExchange
Sleep
UnhandledExceptionFilter
SetStdHandle
TlsGetValue
TlsSetValue
TlsFree
GetFileType
GetStdHandle
HeapCreate
HeapDestroy
HeapReAlloc
TerminateProcess
IsDebuggerPresent
GetOEMCP
IsValidCodePage
LCMapStringA
RtlUnwind
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
SetEndOfFile
GetFileAttributesExW

user32

CreateMenu
SetMenuInfo
MapVirtualKeyW
GetForegroundWindow
WaitForInputIdle
MessageBoxA
DialogBoxParamW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
EndDialog
GetParent
GetDesktopWindow
SetWindowPos
LoadIconW
SendMessageW
DestroyMenu
SetWindowTextW
SetRectEmpty
FillRect
MonitorFromWindow
GetMonitorInfoW
GetDoubleClickTime
GetSystemMetrics
GetClipboardFormatNameA
RegisterClipboardFormatA
SetFocus
GetMenuItemInfoW
CopyRect
DdeInitializeW
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
GetWindowRect
SendInput
GetKeyboardLayout
ReleaseDC
TrackPopupMenu
CreatePopupMenu
DrawMenuBar
InsertMenuItemW
SetMenuItemInfoW
GetDlgItem
RemoveMenu
ClientToScreen
SetTimer
SendMessageTimeoutW
PostMessageW
CreateWindowExA
DefWindowProcW
SystemParametersInfoW
LoadStringW
WindowFromPoint
GetKeyState
GetCursorPos
ScreenToClient
GetClientRect
GetWindowThreadProcessId
RegisterClipboardFormatW
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
LoadCursorW
SetCursor
GetWindowLongW
SetWindowLongW
IsWindow
DestroyWindow
PeekMessageW
TranslateMessage
DispatchMessageW
KillTimer
LoadImageW
MsgWaitForMultipleObjects
GetWindowInfo
GetDC

gdi32

GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
GetTextColor
SetTextCharacterExtra
GetTextExtentPoint32W
CreateFontIndirectA
SetBkColor
GetBkColor
SetTextColor
ExtTextOutW
ExtTextOutA
SelectClipRgn
IntersectClipRect
SetTextAlign
SetBkMode
EnumFontFamiliesA
CreateFontIndirectW
SetWorldTransform
LineTo
MoveToEx
CreatePen
GetCurrentObject
GetTextMetricsW
DPtoLP
GetTextExtentPoint32A
GetWorldTransform
CreatePalette
LPtoDP
StartDocW
EndDoc
CreateSolidBrush
StrokePath
ExtCreatePen
FillPath
RestoreDC
StretchDIBits
SelectClipPath
SaveDC
StartPage
EndPage
SetPolyFillMode
BeginPath
EndPath
PolyBezierTo
GetStockObject
SelectObject
DeleteObject
CreateDCA
DeleteDC
GetDIBits
CreateCompatibleDC
GetObjectW
GdiFlush
CreateCompatibleBitmap
GetDeviceCaps
CreateDIBSection
EnumFontFamiliesW
GetFontData
EnumFontFamiliesExW
SetGraphicsMode
GetICMProfileA

comdlg32

GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
GetSaveFileNameW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey

shell32

SHGetFolderPathW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetDiskFreeSpaceExW

ole32

CoInitialize
ReleaseStgMedium
OleUninitialize
CreateBindCtx
OleSetClipboard
OleIsCurrentClipboard
OleInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleFlushClipboard
OleGetClipboard

oleaut32

LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
SysFreeString
LoadRegTypeLi
SysStringLen

mscms

OpenColorProfileW
CloseColorProfile
TranslateBitmapBits
DeleteColorTransform
CreateColorTransformW

ws2_32

WSACloseEvent
getsockname
inet_addr
gethostbyname
WSACleanup
closesocket
WSAAsyncSelect
WSAGetLastError
ntohs
WSAIoctl
socket
WSASocketW
WSAStartup
recv
send
setsockopt
ntohl
select
gethostname
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
htons
inet_ntoa

Exports

Exports

CreateInstance
DllRegisterServer
DllUnregisterServer
ExternalPlayer_Initialize
FPP_SetCrashLoggerEnabled

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_259_142949df56ea8ae0be8b5306971900a4
_25_0306cc64ba4b817d476cac53e05921e9
.dll windows:5 windows x86

b2d8bd517f48c4cd67621f6cb7d5961a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9f:00:83:db:0c:7a:17:7a:72:0d:a5:00:0f:1a:5e:42:33:f2:ae:0a
Signer

Actual PE Digest

9f:00:83:db:0c:7a:17:7a:72:0d:a5:00:0f:1a:5e:42:33:f2:ae:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessW
WideCharToMultiByte
GetModuleFileNameW
GetLastError
CloseHandle
GetTempPathW
QueryPerformanceCounter
MultiByteToWideChar
IsDBCSLeadByteEx
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
CreateDirectoryW
GetFileAttributesW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ReadFile
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
GetSystemTimeAsFileTime
CreateFileA
GetFileAttributesA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetModuleHandleA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
LoadLibraryA
CreateFileW
SetEndOfFile
GetProcessHeap
WriteConsoleA
DeleteFileA

user32

MessageBoxW

shell32

SHGetFolderPathW

Exports

Exports

adobe_oobe_launcher

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_260_c0e190d8267e36708f955d7ab048990d
_261_7acb9273e9f58eb4f782850945390ce0
.zip
_262_c5f029b355b0cc5d43420e72d36de3bc
_263_2f70ed8d1edea667a06669e248b3dd8f
_264_60649e4365437442732ee45233b18f0c
_265_bc6ffed8fb7a685bbde406ae360e2277
_266_242851abf2e0046bf1b3630d9407d5a9
.xml
_267_a2258c303d21161dd512614a5ff3fda0
_268_5ed5f9ea642611e7adbe3cfcdb686847
_269_1bf1d63a95fc3a5a294a88993177908d
.xml
_26_057cb0ae15d01e2aed916b6db8018303
.dll windows:5 windows x86

c8aafd5786b87ccc84ce90c08d71729c

Code Sign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2c
Certificate

Issuer

CN=TC TrustCenter Class 2-II L1 CA IV,OU=TC TrustCenter Class 2-II L1 CA,O=TC TrustCenter GmbH,C=DE

Not Before

17-06-2009 15:22

Not After

31-12-2025 19:59

Subject

CN=TC TrustCenter Authenticode Timestamp II,OU=Timestamp,O=TC TrustCenter,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

76:57:f9:cb:ca:c1:ea:95:04:83:8e:3e:d9:35:5d:2d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

24-10-2008 00:00

Not After

10-12-2009 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2a:5c:f1:76:fc:ca:b6:53:3c:44:da:e2:1f:ac:5e:3b:38:a6:b4:f4
Signer

Actual PE Digest

2a:5c:f1:76:fc:ca:b6:53:3c:44:da:e2:1f:ac:5e:3b:38:a6:b4:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
WSACleanup
getaddrinfo
socket
connect
freeaddrinfo

wininet

InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle

shlwapi

AssocQueryStringW

kernel32

GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
MultiByteToWideChar
ExpandEnvironmentStringsA
GetFileAttributesExW
GetLastError
ReadFile
GlobalFree
CreatePipe
GetStdHandle
GlobalAlloc
GetEnvironmentVariableW
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateProcessW

user32

wsprintfW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetFolderPathW

msvcr90

_itoa
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
strncpy_s
strstr
wcsstr
wcslen
wcsncpy_s
wcsncat_s
wcscpy
wcscat
wcscpy_s
wcscat_s
malloc
free
_wfopen_s
fclose
memmove_s
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_CxxThrowException
??3@YAXPAX@Z
_invalid_parameter_noinfo
memcpy
??_U@YAPAXI@Z
memset
sprintf
??_V@YAXPAX@Z
strlen
toupper
__CxxFrameHandler3
__CppXcptFilter

msvcp90

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
?exceptions@ios_base@std@@QAEXH@Z
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?eof@ios_base@std@@QBE_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$allocator@_W@std@@QAE@XZ
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??0?$allocator@D@std@@QAE@XZ
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?rdbuf@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_filebuf@DU?$char_traits@D@std@@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq@?$char_traits@D@std@@SA_NABD0@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z

Exports

Exports

AdobeHelpEncodeURIComponent
DisplayAdobeHelpClientPage
GetAdobeHelpClientOnlineStatus
GetAdobeHelpClientVersion
InitializeAdobeHelpClient
OpenURL
Search
SearchHelp

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_270_6a3437bf52a9d82854554303c4db34c8
.xml
_271_503ab95b668bea1f2889c1dd2fd30ab3
.js
_272_c86c325642ad399a93ff273a4f289320
_273_93c43351710ccd8111a9c0ad9eaedf12
_274_60649e4365437442732ee45233b18f0c
_275_cd6b5ad25df77a06bdf0395b3aab50c5
_276_131a06fc665e3a6581623e6f613bfe2d
.xml
_277_a2258c303d21161dd512614a5ff3fda0
_278_5ed5f9ea642611e7adbe3cfcdb686847
_279_72669af5b149d50a4251e78cf5af90b1
_27_e1282c945145a2367646287167a1a694
.dll windows:5 windows x86

b84d139ddad796762aa258f74fb91984

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6e:01:3b:e5:ae:61:54:4b:1b:35:2f:54:7f:26:bf:56:5b:8d:02:ae
Signer

Actual PE Digest

6e:01:3b:e5:ae:61:54:4b:1b:35:2f:54:7f:26:bf:56:5b:8d:02:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
GetEnvironmentVariableA
GetModuleFileNameW
CreateSemaphoreW
ReleaseSemaphore
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
CreateThread
SetEvent
OpenEventW
QueryPerformanceCounter
GetVersionExW
GetComputerNameExW
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetTempPathW
TryEnterCriticalSection
SwitchToThread
ResumeThread
IsDBCSLeadByteEx
GetFileAttributesW
CompareStringW
CompareStringA
GetProcAddress
LocalFree
LoadLibraryW
FreeLibrary
FormatMessageW
SetLastError
GetCurrentThread
GetLastError
GetCurrentProcess
GetTimeZoneInformation
CloseHandle
GetProcessHeap
SetEndOfFile
CreateFileW
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
HeapFree
HeapAlloc
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameW
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
DeleteFileW
CreateDirectoryW
MoveFileA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
GetModuleHandleA
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
ReadFile
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCurrentDirectoryA
SetCurrentDirectoryA
SetStdHandle
CreateFileA
GetFileAttributesA
SetFilePointer
GetDriveTypeA
GetFullPathNameA
GetLocaleInfoA
GetStringTypeA
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA

user32

MessageBoxW

advapi32

GetNamedSecurityInfoW
SetNamedSecurityInfoW
OpenThreadToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
OpenProcessToken
SetTokenInformation
SetEntriesInAclW

shell32

ShellExecuteA
SHGetFolderPathW

Exports

Exports

AMTBackgroundUpdateCheck
AMTForegroundUpdateCheck
AMTForegroundUpdateCheckEnabled
AMTGetLibVersion
AMTGetParentLEIDLicenseStatus
AMTGetProductClearSerialNumber
AMTObtainProductLicense
AMTPlugPlugRequest
AMTPreObtainProductLicense
AMTPreValidateProductLicense
AMTReleaseProductLicense
AMTSuppressBackgroundUpdateChecks
AMTValidateProductLicense

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_280_b698983ca07705d6dbf15193d04555cb
.js
_281_a4bbf130e873a07e8cdc584855f9c600
_282_59178b258376e1013f4905db71ee31d7
_283_043f57081a647f4595a724d44d7d7a31
_284_d17978bb54f94efb17ab6c46496a27bb
_285_74cc79e5429ebc72658f96fcc73c8bab
.js
_286_855869571cfb78785e8d6b236e655ea5
_287_1999b678b199610c8fc7d8e90c9cf28f
.js
_288_d45747fba93c81d80de88bf6e56fff1c
_289_93bfb509aba9c2ba63703cd87e351bbb
.js
_28_669c5c7fff99e8348ad18b613a59d4a3
.dll windows:5 windows x86

4834a240f0ca94c342001417e5d30c2d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:44:30:ad:03:1b:fc:0a:56:82:19:1a:a4:11:a7:9c:bf:8a:e2:60
Signer

Actual PE Digest

0c:44:30:ad:03:1b:fc:0a:56:82:19:1a:a4:11:a7:9c:bf:8a:e2:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

iphlpapi

GetIfTable

winhttp

WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetStatusCallback
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCloseHandle

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status

kernel32

lstrlenW
lstrlenA
GlobalFree
FindNextFileW
SetFileAttributesW
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringW
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetProcAddress
GetTempPathW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentVariableA
QueryPerformanceCounter
QueryPerformanceFrequency
OutputDebugStringA
InitializeCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CloseHandle
ResetEvent
WaitForMultipleObjects
SetEvent
SwitchToThread
ResumeThread
CreateThread
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetFullPathNameW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileAttributesW
DeleteFileW
CreateDirectoryW
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
HeapSize
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetStdHandle
CreateFileA
GetFileAttributesA
SetFilePointer
ReadFile
GetTimeZoneInformation
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileW
SetEndOfFile
GetProcessHeap
CompareStringA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
SetSecurityInfo
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueExW

shell32

SHGetFolderPathW

ole32

CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeEx

oleaut32

SysStringLen
SysFreeString
VariantClear
SysAllocStringByteLen
GetErrorInfo
VariantChangeType
CreateErrorInfo
SetErrorInfo
VariantInit
SysAllocString

Exports

Exports

C_AMTAUMServiceCreate
C_AMTAUMServiceGetLEIDXml
C_AMTAUMServiceGetLibVersion
C_AMTAUMServiceIsUpdaterEnabled
C_AMTAUMServiceNotificationsRelease
C_AMTConfigurationGetLoadTrial
C_AMTConfigurationGetRunningLocale
C_AMTConfigurationIsAppAllowedtobeRelaunched
C_AMTConfigurationIsRegistrationSuppressed
C_AMTConfigurationServiceAMTConfigInstallPath
C_AMTConfigurationServiceAMTConfigPath
C_AMTConfigurationServiceAMTConfigRelativePath
C_AMTConfigurationServiceAMTDirectoryPath
C_AMTConfigurationServiceAppLicensingCode
C_AMTConfigurationServiceAppPayloadCode
C_AMTConfigurationServiceApplicationDirectoryPath
C_AMTConfigurationServiceApplicationPath
C_AMTConfigurationServiceBaseConfigPath
C_AMTConfigurationServiceBridgeTalkCodeAtIndex
C_AMTConfigurationServiceBridgeTalkCodeCount
C_AMTConfigurationServiceCanonicalLEID
C_AMTConfigurationServiceCheckSerialNumber
C_AMTConfigurationServiceCreate
C_AMTConfigurationServiceCurrentLicense
C_AMTConfigurationServiceDominatingLEsForLEID
C_AMTConfigurationServiceDriverLicensingCode
C_AMTConfigurationServiceDriverPayloadCode
C_AMTConfigurationServiceInstallDate
C_AMTConfigurationServiceInstalledLocales
C_AMTConfigurationServiceIsInstalled
C_AMTConfigurationServiceIsSerialNumberRegisteredAsRejected
C_AMTConfigurationServiceIsSubscription
C_AMTConfigurationServiceLocale
C_AMTConfigurationServiceMapCLEToLEID
C_AMTConfigurationServiceMappedLEIDForCLE
C_AMTConfigurationServiceMediaTag
C_AMTConfigurationServicePathForLocalizedResource
C_AMTConfigurationServicePathForLocalizedResourceInDirectory
C_AMTConfigurationServicePathForResource
C_AMTConfigurationServicePathForResourceInDirectory
C_AMTConfigurationServicePrecedenceValueForEnigmaID
C_AMTConfigurationServiceProductName
C_AMTConfigurationServiceRegisterSerialNumberAsRejected
C_AMTConfigurationServiceRemoveKey
C_AMTConfigurationServiceRemoveKeyInLocale
C_AMTConfigurationServiceRemoveSerialNumber
C_AMTConfigurationServiceSerialNumber
C_AMTConfigurationServiceSetApplicationPath
C_AMTConfigurationServiceSetCurrentLicense
C_AMTConfigurationServiceSetDefaultConfigurationService
C_AMTConfigurationServiceSetInstalledLocales
C_AMTConfigurationServiceSetLocale
C_AMTConfigurationServiceSetSerialNumber
C_AMTConfigurationServiceSetValueForKey
C_AMTConfigurationServiceSetValueForKeyInLocale
C_AMTConfigurationServiceUpdaterCode
C_AMTConfigurationServiceValueForKey
C_AMTConfigurationServiceValueForKeyInLocale
C_AMTEnigmaServiceAllLocales
C_AMTEnigmaServiceCreate
C_AMTEnigmaServiceDecryptSerialNumber
C_AMTEnigmaServiceDefaultLocale
C_AMTEnigmaServiceEncryptSerialNumber
C_AMTEnigmaServiceExpirationDateData
C_AMTEnigmaServiceGetProductID
C_AMTEnigmaServiceGetProductInfo
C_AMTEnigmaServiceGetProductVersion
C_AMTEnigmaServiceGetProductVersionString
C_AMTEnigmaServiceGetScenarioKey
C_AMTEnigmaServiceGetUpgradeScenario
C_AMTEnigmaServiceIsEnigmaSerialNumber
C_AMTErrnoServiceALMErrno
C_AMTErrnoServiceCreate
C_AMTErrnoServiceErrno
C_AMTErrnoServiceSetALMErrno
C_AMTErrnoServiceSetErrno
C_AMTGetTypeID
C_AMTLog
C_AMTLogAll
C_AMTLoggerCreateFileLoggerWithFile
C_AMTLoggerCreateFileLoggerWithPath
C_AMTLoggerCreateFileLoggerWithPathAndSize
C_AMTLoggingServiceAddGroupLogger
C_AMTLoggingServiceAddLogger
C_AMTLoggingServiceCleanUpResource
C_AMTLoggingServiceCreateWithID
C_AMTLogv
C_AMTLogvAll
C_AMTPCDServiceAllKeysInSubDomain
C_AMTPCDServiceAllKeysInSubDomainForLocale
C_AMTPCDServiceAllSubDomains
C_AMTPCDServiceBeginTransaction
C_AMTPCDServiceCachePCDIsWritable
C_AMTPCDServiceCheckDatabase
C_AMTPCDServiceCreate
C_AMTPCDServiceEndTransaction
C_AMTPCDServiceInstallDateForAdobeCode
C_AMTPCDServiceLicensingCodeForAdobeCode
C_AMTPCDServiceMasterHiveExistsForSubDomain
C_AMTPCDServiceMasterPCDExists
C_AMTPCDServiceMasterPCDIsWritable
C_AMTPCDServiceOwnerAdobeCodeForAdobeCode
C_AMTPCDServicePopulatedLocalesForSubDomain
C_AMTPCDServicePrimarySubDomains
C_AMTPCDServiceRemoveAllKeysInSubDomain
C_AMTPCDServiceRemoveAllKeysInSubDomainForLocale
C_AMTPCDServiceRemoveKeyInSubDomain
C_AMTPCDServiceRemoveKeyInSubDomainForLocale
C_AMTPCDServiceRemoveKeyWithPropertyInSubDomain
C_AMTPCDServiceRemoveKeyWithPropertyInSubDomainForLocale
C_AMTPCDServiceSetMode
C_AMTPCDServiceSetValueForKeyInSubDomain
C_AMTPCDServiceSetValueForKeyInSubDomainForLocale
C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomain
C_AMTPCDServiceSetValueForKeyWithPropertyInSubDomainForLocale
C_AMTPCDServiceSubDomainExists
C_AMTPCDServiceSubDomainForLocaleExists
C_AMTPCDServiceSubDomainsForPrimarySubDomain
C_AMTPCDServiceValueForKeyInSubDomain
C_AMTPCDServiceValueForKeyInSubDomainForLocale
C_AMTPCDServiceValueForKeyWithPropertyInSubDomain
C_AMTPCDServiceValueForKeyWithPropertyInSubDomainForLocale
C_AMTRegistrationServiceCreate
C_AMTRegistrationServiceHasDataToSend
C_AMTRegistrationServiceNeedsToShowRegistrationScreen
C_AMTRegistrationServiceSendData
C_AMTRegistrationServiceShowRegistrationDialog
C_AMTRelease
C_AMTRetain
C_AMTStringListAddString
C_AMTStringListCopyInto
C_AMTStringListCount
C_AMTStringListCreate
C_AMTStringListCreateWithConstStrings
C_AMTStringListCreateWithStrings
C_AMTStringListIndexOfString
C_AMTStringListNextString
C_AMTStringListRemoveAllStrings
C_AMTStringListRewind
C_AMTStringListStringAtIndex
C_AMTUISwitchIsUpdateAvailable
C_AMTUISwitchIsUpdateCheckEnabled
C_AMTUISwitchServiceCreate
C_AMTUISwitchServiceGetMode
C_AMTUISwitchServiceSetLaunchContext
C_AMTUISwitchServiceSetMode
C_AMTUISwitchServiceSetParentWindow
C_AMTUISwitchShowCreateAdobeID
C_AMTUISwitchShowEULA
C_AMTUISwitchShowProvisioningUI
C_AMTUISwitchShowRegistration
C_AMTUISwitchShowUpdatesUI
C_AMTUISwitchSuppressUpdates
C_AMTUISwitchTriggerUpdateCheck
C_AMTUpdaterNotificationsLaunchAAMNotifierOnQuitIfReqd
C_AMTUpgradeServiceAcceptsChallengeResponse
C_AMTUpgradeServiceCloseSession
C_AMTUpgradeServiceCreate
C_AMTUpgradeServiceGetChallengeString
C_AMTUpgradeServiceGetQualifyingSerialNumbers
C_AMTUpgradeServiceGetUpgradeStatus
C_AMTUpgradeServiceIsQualifyingSerialNumberForAnyProduct
C_AMTUpgradeServiceIsQualifyingSerialNumberForProduct
C_AMTUpgradeServiceNeedsUpgradeCheck
C_AMTUpgradeServiceNextProduct
C_AMTUpgradeServiceSetQualifyingSerialNumbers
C_EULAServiceCreate
C_EULA_GetEULAFolder
C_EULA_GetState
C_EULA_SetState
C_LC_GetCacheStatus
C_LC_LaunchTypeForCache
C_LC_SetCacheStatus
C_LaunchCacheServiceCreate
C_SLCoreServiceActivateLicense
C_SLCoreServiceActivateSerial
C_SLCoreServiceCreate
C_SLCoreServiceCreateBusinessLogic
C_SLCoreServiceCreateDictionary
C_SLCoreServiceCreateLicenseScope
C_SLCoreServiceDeactivateLicense
C_SLCoreServiceDeactivateSerial
C_SLCoreServiceDeleteLicense
C_SLCoreServiceDestroy
C_SLCoreServiceDestroyBusinessLogic
C_SLCoreServiceDestroyDictionary
C_SLCoreServiceDestroyLicenseScope
C_SLCoreServiceGetAllDictionaryKeysValues
C_SLCoreServiceGetAllLicenses
C_SLCoreServiceGetDictionaryValue
C_SLCoreServiceGetErrorString
C_SLCoreServiceGetFeatures
C_SLCoreServiceGetLicenseDurationFromProductConfig
C_SLCoreServiceGetLicenseInfo
C_SLCoreServiceGetLicenseUserData
C_SLCoreServiceGetMachineIDHash
C_SLCoreServiceGetVersion
C_SLCoreServiceLoadLicenseFromProductConfig
C_SLCoreServiceLoadSLR
C_SLCoreServiceQueryFeatures
C_SLCoreServiceRefreshLicense
C_SLCoreServiceResetTrialLicense
C_SLCoreServiceSetDictionaryValue
C_SLCoreServiceSetKeyValuePairToBusinessLogic
C_SLCoreServiceSetLEID
C_SLCoreServiceSetLicenseUserData
C_SLCoreServiceSynchronize

Sections

.text
Size: 881KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_290_c3c02a845cea727e46a4b7aff1a1762b
.js
_291_2a3721284e2b8ae76789a1cf0beeba81
.js
_292_f470476b8535d7ed54ff7a2be9bd41a9
_293_73db76a1123bf2bc6ec960a5ce3250d5
.js
_294_d2f5f884e2dd341def89df0ab2bb348e
.js
_295_a1388cd1b066d006d5e8f043a7d9f270
.js
_296_1a19e6a79b691cc2a25af8cd68381c60
.js
_297_26b98d885726ca94458d6b99d5a42019
.js
_298_8d155751fbc686fafaf6859ca4f51364
.xml
_299_eeea108f075290e4802574dab10afb78
.js
_29_ff4f229bc63a0e9a7583b39663d9c59b
.exe windows:5 windows x86

4030711b75d5db0c62a1f3511e0c22ed

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:36:78:f6:2d:28:f5:8f:09:d1:6a:dd:15:b9:c0:71
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

03-10-2006 00:00

Not After

02-10-2009 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Universal Client,O=Adobe Systems Incorporated,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:33:51:dc:7c:2d:e6:a3:58:8a:1a:16:9d:95:98:22:2e:28:ab:5a
Signer

Actual PE Digest

7c:33:51:dc:7c:2d:e6:a3:58:8a:1a:16:9d:95:98:22:2e:28:ab:5a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord205
ord173
ord90

shlwapi

StrChrA
StrDupW
PathAppendW
PathRemoveFileSpecW

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
LocalFree
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
Sleep
GetLastError
GetModuleHandleW
GetProcAddress
ExitProcess
LoadLibraryW
RaiseException
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapReAlloc
VirtualAlloc
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapSize
GetLocaleInfoA
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_300_ebada75cc80678caa270e3ebb3177cc8
_301_9111ed59c11ae9e0af7fe49a5ffe3dfb
.js
_302_52ab004e05e6ae1c9b756b507c9c812e
.js
_303_96e8d0b3219a8dd384d210854f53ffce
.js
_304_ea7c2ff7e2c32f11c93643974c15288c
.js
_305_d389cc2167abb4e9640ca32ca34150df
.js
_306_650acdecf3d339f79db6d2ad88abf923
_307_0726c2d56009ac3d6db85b48a834799c
_308_4126aff2ffaa9ac3a2611f51b66920ac
_309_35dbe19a0e39d799999d811de53282e6
_30_f9f1ca4970201fec6d53c69b23c2ff1a
.dll windows:5 windows x86

785d273c7cac083d4d0a3beae368461e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

22:e7:83:35:dd:e4:90:bf:3c:9d:42:0a:34:2d:1d:47:80:a9:cb:9b
Signer

Actual PE Digest

22:e7:83:35:dd:e4:90:bf:3c:9d:42:0a:34:2d:1d:47:80:a9:cb:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
GetLastError
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetFullPathNameA
GetCurrentDirectoryA
ReadFile
CloseHandle
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetTimeZoneInformation
SetStdHandle
CreateFileW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

??0AsnDll@@QAE@XZ
??4AsnDll@@QAEAAV0@ABV0@@Z
?dllMain@AsnDll@@SAHPAXK0@Z
GetAsnVersion
_Java_com_adobe_asn_AsnEndUser_doDecrypt@20
_Java_com_adobe_asn_AsnEndUser_doEncrypt@20
_Java_com_adobe_asn_AsnEndUser_exit@16
_Java_com_adobe_asn_AsnEndUser_getAsnProductInfo@20
_Java_com_adobe_asn_AsnEndUser_getVersion@12
_Java_com_adobe_asn_AsnEndUser_init@16
_Java_com_adobe_asn_AsnEndUser_makeChecksum@12
_Java_com_adobe_asn_AsnEndUser_makePrivateEx@16
_Java_com_adobe_asn_AsnEndUser_verifyChecksum@12
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makeChecksum
asn_makePrivate
asn_makePrivateEx
asn_verifyChecksum

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_310_fdea0171305ebbfb8987e5640568859e
_311_81ef711c3c5fa5b11ef624db39efd28e
_312_bc636101b72229459dca0f0fb6f36c56
_313_311fbc88211faf12a72cda41cc9586e4
_314_4ea490c3b8c6d2da1466bf66a23e1ec3
_315_6e8f4efa534e830de5ff677ee841b802
_316_2af772f8d9c3971d99575914f460871d
_317_6d3cc250f390641a342019f68e4d266d
_318_42e3743949e173b32527b635d7f00c70
_319_060b9411794b34ab53e216200a1837e1
_31_b6ac542e1c5ed4d69f62ecd7e0b1b92a
.dll windows:5 windows x86

35621aa8ff3db0330b526e4ba1ccb151

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2c
Certificate

Issuer

CN=TC TrustCenter Class 2-II L1 CA IV,OU=TC TrustCenter Class 2-II L1 CA,O=TC TrustCenter GmbH,C=DE

Not Before

17-06-2009 15:22

Not After

31-12-2025 19:59

Subject

CN=TC TrustCenter Authenticode Timestamp II,OU=Timestamp,O=TC TrustCenter,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

42:0f:89:bb:d7:14:be:53:ae:52:d5:b9:7b:e3:0c:03:b7:69:d8:58
Signer

Actual PE Digest

42:0f:89:bb:d7:14:be:53:ae:52:d5:b9:7b:e3:0c:03:b7:69:d8:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

extendscript

?call@GlobalDialogs@ScScript@@UAEHAAVLiveObject@ScCore@@HABVArray@4@AAVVariant@4@PAVError@4@@Z
??0GlobalDialogs@ScScript@@QAE@XZ
??1FileDisp@ScScript@@UAE@XZ
?getClassInfo@Dispatcher@ScScript@@UAEPBVClassInfo@ScCore@@ABVString@4@@Z
?getEnumerableProperties@Dispatcher@ScScript@@UBEXABVVariant@ScCore@@AAVSimpleArray@4@H@Z
?setContextLevel@DebugAPI@ScScript@@QAEXH@Z
?executeStaticXML@DebugAPI@ScScript@@SAPAVXML@ScCore@@ABV34@AAVError@4@@Z
?command@DebugAPI@ScScript@@QAEXW4Cmd@12@_N@Z
?getScript@DebugAPI@ScScript@@QBEPAVScript@2@XZ
?getIncludePath@ParserAPI@ScScript@@QBEABVString@ScCore@@XZ
?setDebugLevel@Engine@ScScript@@QAEXH@Z
?getProperties@Dispatcher@ScScript@@UBEXHHAAV?$TSimpleArray@$$CBVPropInfo@ScScript@@@ScCore@@@Z
??0Debugger@ScScript@@QAE@XZ
??1Debugger@ScScript@@UAE@XZ
?getProfilerData@DebugAPI@ScScript@@QAEXPAV?$TSimpleArray@VProfilerData@ScScript@@@ScCore@@_N@Z
?getID@Engine@ScScript@@QBEIXZ
?getName@Engine@ScScript@@QBEABVString@ScCore@@XZ
?executeXML@DebugAPI@ScScript@@QAEPAVXML@ScCore@@ABV34@AAVError@4@@Z
?getSourceFileID@DebugAPI@ScScript@@QBEHXZ
?get@DataPool@ScScript@@SAAAV12@XZ
?getSymbol@DataPool@ScScript@@QBE?AVString@ScCore@@H@Z
?getSourceLine@DebugAPI@ScScript@@QBEHXZ
?getStackDepth@DebugAPI@ScScript@@QBEHXZ
?findEngine@Engine@ScScript@@SAPAV12@ABVString@ScCore@@@Z
?setProfilingLevel@Engine@ScScript@@QAEXH@Z
??0ScriptContainer@ScScript@@QAE@_N@Z
?execute@ScriptContainer@ScScript@@QAEHAAVEngine@2@H@Z
??1ScriptContainer@ScScript@@UAE@XZ
?getCurrent@Engine@ScScript@@SAPAV12@XZ
?compile@ScriptContainer@ScScript@@QAEHABVFileSpec@ScCore@@_NP6A_N0@Z@Z
?invalidateClassAll@Engine@ScScript@@SAXABVString@ScCore@@@Z
?errorMessage@ScriptContainer@ScScript@@SA?AVString@ScCore@@ABVError@4@@Z
?call@Dispatcher@ScScript@@UAEXAAUArguments@2@P6AX0@Z@Z
?put@Dispatcher@ScScript@@UAEXAAUArguments@2@@Z
?get@Dispatcher@ScScript@@UAEXAAUArguments@2@@Z
?getEnumNames@Dispatcher@ScScript@@UBEXABVVariant@ScCore@@AAV?$TSimpleArray@VString@ScCore@@@4@@Z
?hasProperty@Dispatcher@ScScript@@UBEPBUPropEntry@2@ABVVariant@ScCore@@0_N@Z
?findProperty@Dispatcher@ScScript@@UBEPBVPropInfo@2@HHPAVRoot@ScCore@@_N1@Z
?createEngine@Engine@ScScript@@SAPAV12@W4Type@12@@Z
?setName@Engine@ScScript@@QAE_NABVString@ScCore@@@Z
??0FileDisp@ScScript@@QAE@XZ
?setIncludePath@ParserAPI@ScScript@@QBEXABVString@ScCore@@@Z
?getGlobalObject@LiveObjectAPI@ScScript@@QBEAAVLiveObject@ScCore@@XZ
?exit@InitTerm@ScScript@@SAXXZ
?getAll@Engine@ScScript@@SAXAAV?$TSimpleArray@VEngine@ScScript@@@ScCore@@@Z
?init@InitTerm@ScScript@@SAXXZ

sccore

?emptyString@String@ScCore@@SAABV12@XZ
?push@Localizer@ScCore@@SAXABV12@@Z
??0HashTable@ScCore@@QAE@XZ
??1HashTable@ScCore@@QAE@XZ
??0Folder@ScCore@@QAE@ABVFileSpec@1@@Z
?iterate@Folder@ScCore@@QAEHAAVFileFilter@2@H@Z
??1Folder@ScCore@@QAE@XZ
?find@HashTable@ScCore@@QBEHABVString@2@_N@Z
?set@HashTable@ScCore@@QAEABVString@2@ABV32@H_N@Z
??0Lock@ScCore@@QAE@XZ
??1Lock@ScCore@@QAE@XZ
??0Variant@ScCore@@QAE@AAVLiveObject@1@H@Z
?removeListener@Broadcaster@ScCore@@QAEXAAVListener@2@H@Z
?addListener@Broadcaster@ScCore@@QAEXAAVListener@2@H@Z
?getExtension@FileSpec@ScCore@@QBE?AVString@2@XZ
?getName@FileSpec@ScCore@@QBE?AVString@2@XZ
??0FileSpec@ScCore@@QAE@ABV01@@Z
?test@FileFilter@ScCore@@UBE_NABVFileSpec@2@@Z
??0FileFilter@ScCore@@QAE@ABVString@1@@Z
??1FileFilter@ScCore@@UAE@XZ
ScAtomicInc
?setInteger@Variant@ScCore@@QAEXI@Z
?append@SimpleArray@ScCore@@QAEXH@Z
?unique@SimpleArray@ScCore@@AAEXXZ
??0SimpleArray@ScCore@@QAE@XZ
?initData@FileSpec@ScCore@@AAEXXZ
?remove@Localizer@ScCore@@SA_NABV12@@Z
?addFactory@LiveObject@ScCore@@SAHAAV12@H@Z
?erase@String@ScCore@@QAEXHH@Z
?insert@XML@ScCore@@QAE_NABV12@H_N@Z
?setName@XML@ScCore@@QAE_NABVString@2@@Z
??0XML@ScCore@@QAE@HABVString@1@@Z
?init@InitTerm@ScCore@@SAXXZ
?exit@InitTerm@ScCore@@SAXXZ
?getSpecialDir@FileUtils@ScCore@@SAHHAAVFileSpec@2@@Z
??0String@ScCore@@QAE@PBGH@Z
?changePath@FileSpec@ScCore@@QAE_NABVString@2@@Z
??3Heap@ScCore@@SAXPAX@Z
??2Heap@ScCore@@SAPAXI@Z
??1String@ScCore@@QAE@XZ
??0String@ScCore@@QAE@PBD@Z
??YArray@ScCore@@QAEAAV01@ABVVariant@1@@Z
?invoke@LiveObject@ScCore@@QBEHABVString@2@AAVVariant@2@PAVError@2@@Z
?canInvoke@LiveObject@ScCore@@QBE_NABVString@2@@Z
?remove@HashTable@ScCore@@QAEHABVString@2@_N@Z
?substr@String@ScCore@@QBE?AV12@HH@Z
?find@String@ScCore@@QBEHGH_N@Z
?eof@File@ScCore@@UBE_NXZ
?readln@File@ScCore@@UAEHAAVString@2@@Z
?strip@String@ScCore@@QAEXXZ
?replaceAll@String@ScCore@@QAEHABV12@0H@Z
?erase@HashTable@ScCore@@QAEXXZ
?getErrorMsg@Localizer@ScCore@@MBE_NHAAVString@2@@Z
?localizedCompare@Localizer@ScCore@@MBEHABVString@2@0@Z
?localizedCaseConvert@Localizer@ScCore@@MBE_NAAVString@2@_N@Z
?localizeText@Localizer@ScCore@@MBE_NAAVString@2@@Z
?getLocale@Localizer@ScCore@@MBE_NAAVString@2@@Z
??1Localizer@ScCore@@UAE@XZ
?get@Callbacks@ScCore@@SAPAV12@XZ
?getServiceInfo@LivePropertyManager@ScCore@@UBEPBVServiceInfo@2@HH@Z
?getServiceInfo@LivePropertyManager@ScCore@@UBEPBVServiceInfo@2@ABVString@2@H@Z
?getConstructor@LivePropertyManager@ScCore@@UBEPBVServiceInfo@2@H@Z
?enumerate@LivePropertyManager@ScCore@@UBEHAAVSimpleArray@2@H@Z
?getType@LivePropertyManager@ScCore@@UBE?AW4InfoType@2@H@Z
?getNameForID@LivePropertyManager@ScCore@@UBEHHAAVString@2@H@Z
?getIDForName@LivePropertyManager@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?split@String@ScCore@@QAE?AV12@ABV12@@Z
?push@Error@ScCore@@QAEXHABVString@2@PBVCloneable@2@_N@Z
?getTicks@Time@ScCore@@SAIXZ
?ncmp@String@ScCore@@QBEHABV12@H@Z
?cmp@String@ScCore@@QBEHABV12@@Z
?push@Error@ScCore@@QAEXHPBVCloneable@2@@Z
?getPath@FileSpec@ScCore@@QBE?AVString@2@XZ
??4Error@ScCore@@QAEAAV01@ABV01@@Z
?getUTCTime@Time@ScCore@@SANXZ
?add@XML@ScCore@@QAEPAV12@ABVString@2@0@Z
?getStartupDir@FileUtils@ScCore@@SAHAAVFileSpec@2@@Z
?get@Context@ScCore@@SAAAV12@XZ
?setSize@SimpleArray@ScCore@@QAEXH@Z
?insert@SimpleArray@ScCore@@QAEXHH@Z
?forEach@HashTable@ScCore@@QAEXP6A_NABVString@2@PAHH@ZH@Z
?remove@SimpleArray@ScCore@@QAEXH@Z
??4SimpleArray@ScCore@@QAEAAV01@ABV01@@Z
??0Error@ScCore@@QAE@XZ
?parse@XML@ScCore@@SAPAV12@ABVString@2@AAHAAVError@2@_N33@Z
?print@String@ScCore@@QAAXPBDZZ
?getBool@XML@ScCore@@QBE_NABVString@2@@Z
?get_r@XML@ScCore@@QBEPAV12@ABVString@2@H@Z
?length@XML@ScCore@@QBEHXZ
?getText@XML@ScCore@@QBE?AVString@2@ABV32@@Z
?getChild@XML@ScCore@@QBEPAV12@H@Z
?getInteger@XML@ScCore@@QBEHABVString@2@@Z
?toString@XML@ScCore@@QBE?AVString@2@H@Z
?replace@String@ScCore@@QAEHPBD0H@Z
?toXMLString@XML@ScCore@@QBE?AVString@2@H@Z
?watol@UnicodeUtils@ScCore@@SAHPBG@Z
?sleep@Thread@ScCore@@SAXI@Z
?find@String@ScCore@@QBEHPBDH_N@Z
?resolve@FileSpec@ScCore@@QBEHAAV12@@Z
??0XML@ScCore@@QAE@H@Z
?ncmp@String@ScCore@@QBEHPBDH@Z
??1Variant@ScCore@@QAE@XZ
?setEncoding@File@ScCore@@QAEXABVString@2@@Z
?getSystem@Encoder@ScCore@@SAABV12@XZ
?split@String@ScCore@@QAE?AV12@PBD@Z
?seek@File@ScCore@@UAEHHH@Z
?getEncoding@File@ScCore@@QBEABVString@2@XZ
?isValidObject@Variant@ScCore@@QBE_NXZ
?getLiveObject@Variant@ScCore@@QBEPAVLiveObject@2@XZ
??0File@ScCore@@QAE@ABVFileSpec@1@@Z
?open@File@ScCore@@UAEHABVString@2@II@Z
?read@File@ScCore@@UAEHHAAVString@2@@Z
??1File@ScCore@@UAE@XZ
??0XML@ScCore@@QAE@ABVString@1@@Z
?put@XML@ScCore@@QAEPAV12@ABVString@2@0@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@@Z
??0SparseArray@ScCore@@QAE@XZ
??1Root@ScCore@@UAE@XZ
??1SparseArray@ScCore@@QAE@XZ
??0String@ScCore@@QAE@ABV01@@Z
?encode@String@ScCore@@QBEPBDPBVEncoder@2@@Z
?getEncodedLength@String@ScCore@@SAHXZ
?setup@String@ScCore@@QAEXGH@Z
?getBinary@Encoder@ScCore@@SAABV12@XZ
?setString@Variant@ScCore@@QAEXABVString@2@@Z
?registerProperty@LivePropertyManager@ScCore@@QAEXABULivePropertyInfo@2@@Z
??4String@ScCore@@QAEAAV01@ABV01@@Z
?getFullText@Error@ScCore@@QBEXAAVString@2@@Z
?put@LiveCollection@ScCore@@UAEHHABVVariant@2@PAVError@2@@Z
??4Variant@ScCore@@QAEAAV01@ABV01@@Z
?get@LiveCollection@ScCore@@UBEHHAAVVariant@2@PAVError@2@@Z
?registerProperty@LivePropertyManager@ScCore@@QAEXPBDHH0@Z
??0LiveCollection@ScCore@@QAE@PBDH_N@Z
??0LivePropertyManager@ScCore@@QAE@XZ
??1LiveCollection@ScCore@@UAE@XZ
??0String@ScCore@@QAE@XZ
?erase@String@ScCore@@QAEXXZ
?getAscii@Encoder@ScCore@@SAABV12@XZ
?decode@String@ScCore@@QAEHPBDHPBVEncoder@2@@Z
?get@LiveComponent@ScCore@@UBEHABVLiveObject@2@HAAVVariant@2@PAVError@2@@Z
?doErase@Variant@ScCore@@IAEXXZ
?setLiveObject@Variant@ScCore@@QAEXAAVLiveObject@2@H@Z
?setError@LiveBase@ScCore@@QBEHHHPAVError@2@_N@Z
??1XML@ScCore@@EAE@XZ
??1LivePropertyManager@ScCore@@UAE@XZ
?deleteByIndex@LiveComponent@ScCore@@UAEHAAVLiveObject@2@I@Z
?putByIndex@LiveComponent@ScCore@@UAEHAAVLiveObject@2@IABVVariant@2@PAVError@2@@Z
?getByIndex@LiveComponent@ScCore@@UBEHABVLiveObject@2@IAAVVariant@2@PAVError@2@@Z
?putLength@LiveComponent@ScCore@@UAEHAAVLiveObject@2@I@Z
?getLength@LiveComponent@ScCore@@UBEHABVLiveObject@2@AAI@Z
?isIndexable@LiveComponent@ScCore@@UBE_NXZ
?isGeneric@LiveComponent@ScCore@@UBE_NH@Z
?put@LiveComponent@ScCore@@UAEHAAVLiveObject@2@HABVVariant@2@PAVError@2@@Z
?getServiceInfo@LiveComponent@ScCore@@UBEPBVServiceInfo@2@ABVLiveObject@2@HH@Z
?enumerate@LiveComponent@ScCore@@UBEHABVLiveObject@2@AAVSimpleArray@2@H@Z
?hasOperators@LiveComponent@ScCore@@UBE_NXZ
?getType@LiveComponent@ScCore@@UBE?AW4InfoType@2@ABVLiveObject@2@H@Z
?getNameForID@LiveComponent@ScCore@@UBEHABVLiveObject@2@HAAVString@2@H@Z
?getIDForName@LiveComponent@ScCore@@UBEHABVLiveObject@2@ABVString@2@AAHAAW4InfoType@2@H@Z
?reset@LiveComponent@ScCore@@UAEXXZ
?revalidate@LiveBase@ScCore@@UAEXXZ
?invalidate@LiveBase@ScCore@@UAEXXZ
?getAs@LiveBase@ScCore@@UAEPAXH@Z
?getAs@LiveBase@ScCore@@UBEPBXH@Z
??0LiveComponent@ScCore@@IAE@XZ
??0LivePropertyManager@ScCore@@QAE@PBULivePropertyInfo@1@@Z
??1LiveComponent@ScCore@@MAE@XZ
?doGetDouble@Variant@ScCore@@IBENXZ
?notify@LiveObject@ScCore@@UAE_NAAVMessage@2@@Z
?deleteByIndex@LiveCollection@ScCore@@UAEHI@Z
?putLength@LiveCollection@ScCore@@UAEHI@Z
?toString@LiveObject@ScCore@@UBEXAAVString@2@@Z
?valueOf@LiveObject@ScCore@@UBEXAAVVariant@2@@Z
?apply@LiveObject@ScCore@@UBEHAAV12@HABVArray@2@AAVVariant@2@PAVError@2@@Z
?getClassInfo@LiveObject@ScCore@@UBEPBVClassInfo@2@H@Z
?getType@LiveCollection@ScCore@@UBE?AW4InfoType@2@H@Z
?enumerate@LiveCollection@ScCore@@UBEHAAVSimpleArray@2@H@Z
?reset@LiveObject@ScCore@@UAEXXZ
?deleteID@LiveObject@ScCore@@UAEHH@Z
?hasOperators@LiveObject@ScCore@@UBE_NXZ
?deleteDynamicProperties@LiveObject@ScCore@@UAEX_N@Z
?getNameForID@LiveCollection@ScCore@@UBEHHAAVString@2@H@Z
?defineIDForName@LiveObject@ScCore@@UAEHABVString@2@HH@Z
?createIDForName@LiveObject@ScCore@@UAEHABVString@2@AAHH@Z
?getIDForName@LiveCollection@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?removeComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?addComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?getData@LiveObject@ScCore@@UBEPAVRoot@2@XZ
?setData@LiveObject@ScCore@@UAEXPAVRoot@2@@Z
??8LiveObject@ScCore@@UBE_NABV01@@Z
?getClassName@LiveCollection@ScCore@@UBEABVString@2@XZ
?initialize@LiveObject@ScCore@@UAEHABVArray@2@PAVError@2@@Z
?clone@LiveObject@ScCore@@UBEHPAPAV12@_N@Z
?createLocal@LiveObject@ScCore@@UAEHPAPAV12@ABVString@2@H@Z
?createProperty@LiveObject@ScCore@@MAEPAVLiveProperty@2@ABVString@2@HI@Z
?getErrorText@LiveBase@ScCore@@UBEHAAVString@2@HH_N@Z
?getErrorText@LiveBase@ScCore@@UBEHAAVString@2@HPBV32@@Z
?revalidate@LiveObject@ScCore@@UAEXXZ
?invalidate@LiveObject@ScCore@@UAEXXZ
?getAs@LiveCollection@ScCore@@UAEPAXH@Z
?getAs@LiveCollection@ScCore@@UBEPBXH@Z
?release@Refcountable@ScCore@@UBEXXZ
?getBool@Variant@ScCore@@QBE_NXZ
?getInteger@Variant@ScCore@@QBEHXZ
?setLiveObject@Variant@ScCore@@QAEXPAVLiveObject@2@H@Z
?setBool@Variant@ScCore@@QAEX_N@Z
?setInteger@Variant@ScCore@@QAEXH@Z
?setNull@Variant@ScCore@@QAEXXZ
?setString@Variant@ScCore@@QAEXPBG@Z
??4String@ScCore@@QAEAAV01@PBD@Z
??AArray@ScCore@@QAEAAVVariant@1@I@Z
?doToString@Variant@ScCore@@IBEXH@Z
??0Array@ScCore@@QAE@ABV01@@Z
??1Array@ScCore@@UAE@XZ
??1LiveObject@ScCore@@MAE@XZ
?getNextID@LiveBase@ScCore@@SAHXZ
?get@Encoder@ScCore@@SAPBV12@PBD@Z
??0LiveObject@ScCore@@QAE@PBD_N@Z
?getAs@LiveObject@ScCore@@UBEPBXH@Z
?getAs@LiveObject@ScCore@@UAEPAXH@Z
?getClassName@LiveObject@ScCore@@UBEABVString@2@XZ
?getNameForID@LiveObject@ScCore@@UBEHHAAVString@2@H@Z
?enumerate@LiveObject@ScCore@@UBEHAAVSimpleArray@2@H@Z
?getType@LiveObject@ScCore@@UBE?AW4InfoType@2@H@Z
?call@LiveObject@ScCore@@UAEHHABVArray@2@AAVVariant@2@PAVError@2@@Z
?getIDForName@LiveObject@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?toString@Variant@ScCore@@QBEXAAVString@2@@Z
??YString@ScCore@@QAEAAV01@ABV01@@Z
??YString@ScCore@@QAEAAV01@D@Z
??8String@ScCore@@QBE_NABV01@@Z
?split@String@ScCore@@QAE?AV12@D@Z
??0Variant@ScCore@@QAE@ABVString@1@@Z
?cmp@String@ScCore@@QBEHPBD@Z
??ABasicArray@ScCore@@QBEABVVariant@1@I@Z
?getFactory@LiveObject@ScCore@@SAPAV12@ABVString@2@H@Z
?toString@Variant@ScCore@@QBE?AVString@2@XZ
?put@LiveObject@ScCore@@UAEHHABVVariant@2@PAVError@2@@Z
?getUtf8@Encoder@ScCore@@SAABV12@XZ
??YArray@ScCore@@QAEAAV01@ABVString@1@@Z
?removeAt@Array@ScCore@@QAEXII@Z
?scanDouble@Variant@ScCore@@SANABVString@2@HPAV32@@Z
?setArray@Variant@ScCore@@QAEXABVArray@2@@Z
??0Array@ScCore@@QAE@XZ
?toLower@String@ScCore@@QAE_NXZ
?setString@Variant@ScCore@@QAEXPBD@Z
??0String@ScCore@@QAE@PBDPBVEncoder@1@@Z
?get@LiveObject@ScCore@@UBEHHAAVVariant@2@PAVError@2@@Z
?replaceAll@String@ScCore@@QAEHPBD0H@Z
?invoke@LiveObject@ScCore@@QBEHABVString@2@ABVArray@2@PAVError@2@@Z
??YArray@ScCore@@QAEAAV01@AAVLiveObject@1@@Z
??1Error@ScCore@@QAE@XZ
??0Error@ScCore@@QAE@ABV01@@Z
??0Variant@ScCore@@QAE@PBD@Z
??0Variant@ScCore@@QAE@HABVString@1@PAVRoot@1@@Z
?removeFactory@LiveObject@ScCore@@SAXABVString@2@@Z
??1SimpleArray@ScCore@@QAE@XZ
??1FileSpec@ScCore@@QAE@XZ
?setPath@FileSpec@ScCore@@QAE_NABVString@2@_N@Z
?getAttributes@FileSpec@ScCore@@QBEFPAH0@Z
??0FileSpec@ScCore@@QAE@ABVString@1@_N@Z
??YString@ScCore@@QAEAAV01@PBD@Z
?getAbsoluteURI@FileSpec@ScCore@@QBE?AVString@2@_N@Z

ws2_32

inet_addr
getaddrinfo
ioctlsocket
getsockopt
select
htons
socket
WSAAsyncSelect
connect
freeaddrinfo
WSACancelAsyncRequest
closesocket
recv
send
WSAGetLastError
WSAStartup
__WSAFDIsSet
WSACleanup

shlwapi

UrlGetLocationW
UrlIsW
UrlGetPartW

wininet

InternetCrackUrlW

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateFromHDC
GdipCloneImage
GdipAlloc
GdipGraphicsClear
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipScaleWorldTransform
GdipDrawImageRectI

zlib1

get_crc_table
inflateInit2_
deflateParams
deflateInit2_
deflateReset
deflateEnd
deflate
inflateInit_
inflate
inflateReset
crc32
uncompress
compress
inflateEnd

libcurl

curl_easy_cleanup
curl_slist_append
curl_easy_init
curl_global_init
curl_global_cleanup
curl_slist_free_all
curl_easy_getinfo
curl_easy_setopt
curl_easy_perform

libeay32

ord1804
ord188
ord197
ord181

amtlib

AMTReleaseProductLicense
AMTValidateProductLicense
AMTObtainProductLicense
AMTPreValidateProductLicense

ahclient

DisplayAdobeHelpClientPage
InitializeAdobeHelpClient

winmm

waveOutPause
waveOutReset
waveOutClose
waveOutRestart
waveOutPrepareHeader
waveOutWrite
waveOutGetDevCapsW
PlaySoundW
waveOutUnprepareHeader
waveOutOpen

scl

ord5713
ord5714
ord5747
ord5748
ord5671
ord5674
ord5731
ord5677
ord5668
ord1838
ord1837
ord9908
ord4978
ord8636
ord8618
ord8634
ord9937
ord9928
ord5407
ord9915
ord9887
ord7783
ord588
ord9935
ord7863
ord7848
ord7850
ord7818
ord7787
ord1705
ord3055
ord3032
ord3107
ord3101
ord3106
ord7789
ord7811
ord3099
ord4977
ord7861
ord7856
ord7864
ord7860
ord6945
ord7781
ord7862
ord9916
ord9883
ord9946
ord9941
ord9905
ord9936
ord9924
ord9923
ord2947
ord2960
ord2934
ord2959
ord2968
ord9911
ord9884
ord9940
ord7815
ord9886
ord7816
ord2914
ord9913
ord910
ord3020
ord5857
ord5855
ord5856
ord9925
ord7824
ord7825
ord7983
ord7844
ord7849
ord3087
ord1828
ord1835
ord5405
ord207
ord9942
ord9882
ord9907
ord3096
ord9922
ord909
ord4984
ord7903
ord7796
ord7843
ord7906
ord872
ord870
ord4151
ord4160
ord4167
ord4168
ord4173
ord4293
ord4316
ord5373
ord4149
ord2646
ord4816
ord4862
ord4855
ord4854
ord43
ord9903
ord1723
ord8614
ord9929
ord4979
ord54
ord7699
ord7681
ord7690
ord7702
ord3040
ord3044
ord3079
ord3086
ord3046
ord3108
ord3039
ord3043
ord3080
ord3115
ord3038
ord7987
ord7989
ord7826
ord9930
ord9885
ord9881
ord4976
ord7782
ord7813
ord3085
ord2940
ord2939
ord3025
ord9943
ord9914
ord7958
ord7845
ord7960
ord7788
ord1844
ord1841
ord1843
ord10567
ord7967
ord7847
ord7256
ord7259
ord9909
ord6308
ord6311
ord6319
ord6312
ord6314
ord6315
ord6317
ord6313
ord6320
ord6318
ord6305
ord7021
ord1836
ord7831
ord7786
ord7754
ord335
ord10565
ord10568
ord10561
ord10359
ord5404
ord5712
ord5406
ord4975
ord4965
ord5711
ord5710
ord5709
ord5708
ord5707
ord5706
ord5705
ord5704
ord5703
ord5702
ord5701
ord5700
ord5699
ord5698
ord5697
ord5696
ord5695
ord5694
ord5693
ord5692
ord5691
ord5744
ord5743
ord5742
ord5741
ord5740
ord5739
ord5738
ord5736
ord5735
ord5734
ord5733
ord5737
ord5732
ord5730
ord5729
ord5728
ord5727
ord5726
ord5725
ord5724
ord5723
ord5722
ord5721
ord5720
ord5719
ord5718
ord5717
ord5716
ord5715
ord5690
ord5689
ord5688
ord5746
ord5745
ord5686
ord5685
ord5684
ord5683
ord5682
ord5681
ord5680
ord5679
ord5678
ord5687
ord5676
ord5675
ord7124
ord7128
ord5408
ord9919
ord53
ord52
ord9920
ord7819
ord4650
ord6952
ord901
ord5973
ord914
ord4986
ord9894
ord9893
ord9896
ord9897
ord7804
ord7817
ord9947
ord7812
ord9123
ord5982
ord6393
ord5983
ord213
ord5993
ord5318
ord9895
ord9057
ord8608
ord6966
ord6981
ord6980
ord6969
ord2645
ord6965
ord9904
ord5984
ord6000
ord5987
ord5988
ord5989
ord6001
ord6002
ord7676
ord9921
ord6004
ord6003
ord6010
ord5992
ord5991
ord5990

winhttp

WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpCloseHandle

kernel32

OpenProcess
GetCurrentProcessId
MultiByteToWideChar
EnumSystemLocalesW
GetModuleHandleW
GetUserDefaultUILanguage
GetACP
GetModuleHandleA
GetFileAttributesW
GetVersion
GetSystemTimeAsFileTime
LocalFree
GetCommandLineW
GetExitCodeProcess
SetLastError
GetModuleFileNameW
LoadLibraryA
CreateProcessW
GetStdHandle
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetEvent
CreateEventA
ResumeThread
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateMailslotA
WriteFile
CreateFileA
GetMailslotInfo
ReadFile
GetSystemDirectoryA
GetModuleFileNameA
CreateMutexA
GlobalAlloc
WaitForSingleObject
ReleaseMutex
FileTimeToLocalFileTime
GetSystemTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
EnumSystemLanguageGroupsW
IsValidCodePage
EnumLanguageGroupLocalesW
GetLastError
GetLocaleInfoW
GetLocaleInfoA
GetWindowsDirectoryW
CreateFileW
CreateFileMappingW
GetFileSize
OutputDebugStringA
GlobalFree
CreateThread
UnmapViewOfFile
CloseHandle
CreateFileMappingA
MapViewOfFile
GetTimeFormatW
FileTimeToSystemTime
GetDateFormatW
GetSystemInfo
VirtualQuery
Sleep
LoadLibraryW
GetTickCount
GetProcAddress
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CreateMutexW

user32

GetDC
wsprintfA
FindWindowW
GetWindowThreadProcessId
GetKeyState
GetKeyboardState
PostMessageW
SetWindowLongW
CreateWindowExW
DestroyWindow
IsWindow
DefWindowProcW
GetWindowLongW
RegisterClassExW
GetKeyboardLayout
GetKeyboardLayoutList
ActivateKeyboardLayout
ReleaseDC
AllowSetForegroundWindow
GetWindow
GetWindowLongA
GetTopWindow
IsWindowEnabled
SystemParametersInfoA
InvalidateRect
SetForegroundWindow
ShowWindow
IsIconic
AttachThreadInput
GetForegroundWindow
EnumThreadWindows

gdi32

SetTextAlign
SetTextColor
SetBkColor
SetBkMode
TextOutW
GetTextMetricsW
GetTextExtentPointW
GetCurrentObject
GetObjectW
GetDeviceCaps
DPtoLP
CreateFontIndirectW
GetTextFaceA
DeleteObject
TranslateCharsetInfo
CreateCompatibleDC
SelectObject
SetStretchBltMode
StretchBlt
BitBlt
DeleteDC
GetGlyphOutlineW

advapi32

RegQueryValueExA
RegOpenKeyA
RegOpenKeyExW
CryptReleaseContext
CryptDestroyHash
CryptAcquireContextA
CryptGenRandom
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
CryptGetHashParam
CryptHashData
CryptCreateHash
RegOpenKeyExA

shell32

ShellExecuteA
SHCreateDirectoryExW
CommandLineToArgvW
ShellExecuteW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

msvcp90

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

__CxxFrameHandler3
_purecall
_CIpow
memset
??3@YAXPAX@Z
??_V@YAXPAX@Z
sprintf
??2@YAPAXI@Z
strncpy
iswspace
free
memcpy
wcstod
_CIacos
_CIsqrt
sscanf
malloc
_setjmp3
longjmp
isprint
realloc
__RTDynamicCast
memmove
_wtol
_CIlog10
_wtoi
iswdigit
tolower
strstr
fclose
fopen
fread
fprintf
__iob_func
fwrite
atoi
_fdopen
_wsopen_s
_findclose
_wfindnext64i32
_wfindfirst64i32
rewind
ftell
fseek
_wrename
_wremove
remove
_time64
ferror
feof
rename
strchr
strrchr
fflush
isdigit
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
_localtime64
fputs
_free_locale
_wcsupr_s_l
_create_locale
_wcslwr_s_l
__CxxLongjmpUnwind
exit
tmpfile
getenv
abort
strtod
_gmtime64
ungetc
fgetc
_setmode
_fileno
strtoul
wcstoul
isalnum
toupper
_errno
_vsnprintf
fputc
clearerr
rand
srand
strcmp
strlen
atof
_access
wcscat_s
wcscpy_s
strcpy
wcslen
_fpreset
_beginthreadex
strftime
strtok
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
strncmp
_strdup

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_320_9599774c3a9bed05ed7e09d97cc16a6d
_321_16fd859249ea88288fe4f3c457c52985
_322_7316d66c8f8deb2c6f389638fc40c4ff
_323_c7feb13b4dd9292f64b9dce4089f6583
_324_e158abe23ec28d462b9ade877db0efe4
_325_638d16b0115cdf349c06c7049ee09a4b
_326_cb2591fb32dbde50eb10fce9aee40484
_327_517f25891c3a5eb054ce07845ddfa830
_328_dd4bbbb16636b8dbc0bbe8845fe0bd52
_329_1a9f9fe4a04da7c5f7fa8dbb2e79f456
_32_dfa8a53e4facfaabda48b758394e68bc
.dll windows:5 windows x86

2282a5595d434b08b1c05024439c3100

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

86:b2:b4:eb:78:04:32:72:9b:34:f9:b3:25:49:a5:4e:89:98:e7:70
Signer

Actual PE Digest

86:b2:b4:eb:78:04:32:72:9b:34:f9:b3:25:49:a5:4e:89:98:e7:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIexp
_CIlog
_CIpow
rand
srand
_CIsin
_CIsqrt
_CItan
_CIlog10
_fpreset
_wgetenv
_wputenv
?terminate@@YAXXZ
ceil
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
floor
_CIfmod
_time64
_ctime64
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
__RTDynamicCast
getenv
_CxxThrowException
memset
??2@YAPAXI@Z
memcpy
__CxxFrameHandler3
??_V@YAXPAX@Z
??3@YAXPAX@Z
_unlock
_purecall

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleA
GetProcAddress
GetVersionExA
GetSystemInfo
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

GetMonitorInfoA
GetWindowThreadProcessId
SetForegroundWindow
EnumDisplayMonitors

sccore

?getPathSeparator@FileUtils@ScCore@@SADXZ
?doToString@Variant@ScCore@@IBEXH@Z
?getAttributes@FileSpec@ScCore@@QBEFPAH0@Z
?initData@FileSpec@ScCore@@AAEXXZ
??0Rect@ScCore@@QAE@NNNN@Z
??0Root@ScCore@@QAE@XZ
??1Root@ScCore@@UAE@XZ
??3Heap@ScCore@@SAXPAX@Z
??_VHeap@ScCore@@SAXPAX@Z
??0Lockable@ScCore@@QAE@ABV01@@Z
??4Lockable@ScCore@@QAEAAV01@ABV01@@Z
??0Refcountable@ScCore@@IAE@XZ
?release@Refcountable@ScCore@@UBEXXZ
??0Heap@ScCore@@QAE@XZ
??1LiveComponent@ScCore@@MAE@XZ
??1LivePropertyManager@ScCore@@UAE@XZ
?length@SimpleArray@ScCore@@QBEHXZ
??4Variant@ScCore@@QAEAAV01@ABV01@@Z
?setJSObject@Variant@ScCore@@QAEXPAVObject@ScScript@@@Z
??ASimpleArray@ScCore@@QAEAAHH@Z
?setInteger@Variant@ScCore@@QAEXI@Z
??YSimpleArray@ScCore@@QAEAAV01@H@Z
??1String@ScCore@@QAE@XZ
??1ParamInfo@ScCore@@UAE@XZ
?parse@TypeInfo@ScCore@@SAPAV12@ABVString@2@HPAV32@11PAPAV12@@Z
??0String@ScCore@@QAE@XZ
??0ParamInfo@ScCore@@QAE@XZ
??1Refcountable@ScCore@@MAE@XZ
??4String@ScCore@@QAEAAV01@ABV01@@Z
??1ServiceInfo@ScCore@@UAE@XZ
??0String@ScCore@@QAE@ABV01@@Z
??0ServiceInfo@ScCore@@QAE@XZ
?getTypeInfo2@ServiceInfo@ScCore@@UBEABVTypeInfo@2@XZ
?getSampleCode@ServiceInfo@ScCore@@UBE_NAAVFileSpec@2@@Z
?getSampleCode@ServiceInfo@ScCore@@UBE_NAAVString@2@@Z
??0ClassInfo@ScCore@@QAE@XZ
?getDescription@ClassInfo@ScCore@@UBEX_NAAVString@2@@Z
?getSampleCode@ClassInfo@ScCore@@UBE_NAAVFileSpec@2@@Z
?getSampleCode@ClassInfo@ScCore@@UBE_NAAVString@2@@Z
??1Variant@ScCore@@QAE@XZ
??0Variant@ScCore@@QAE@HABVString@1@PAVRoot@1@@Z
??2Heap@ScCore@@SAPAXI@Z
??0String@ScCore@@QAE@PBDPBVEncoder@1@@Z
??BString@ScCore@@QBEPBGXZ
??8String@ScCore@@QBE_NABV01@@Z
??1TypeInfo@ScCore@@UAE@XZ
??0TypeInfo@ScCore@@QAE@XZ
?getDataTypeAsString@TypeInfo@ScCore@@UBEXAAVString@2@@Z
?isCollection@TypeInfo@ScCore@@UBE_NXZ
?getValidRange@TypeInfo@ScCore@@UBE_NAAN0@Z
?getDefaultValue@TypeInfo@ScCore@@UBE_NAAVVariant@2@@Z
?getDescription@TypeInfo@ScCore@@UBEXAAVString@2@@Z
?getString@Variant@ScCore@@QBEABVString@2@XZ
?getLiveObject@Variant@ScCore@@QBEPAVLiveObject@2@XZ
?getType@Variant@ScCore@@QBE?AW4VariantType@2@XZ
?erase@String@ScCore@@QAEXXZ
??4String@ScCore@@QAEAAV01@PBG@Z
?wstr@String@ScCore@@QBEPBGXZ
?getDescription@ParamInfo@ScCore@@UBEX_NAAVString@2@@Z
??1SimpleArray@ScCore@@QAE@XZ
?findKey@SparseArray@ScCore@@QBEHH@Z
??0SimpleArray@ScCore@@QAE@XZ
?getDescription@ServiceInfo@ScCore@@UBEX_NAAVString@2@@Z
??ASimpleArray@ScCore@@QBEHH@Z
?append@SimpleArray@ScCore@@QAEXH@Z
??0Variant@ScCore@@QAE@XZ
?print@String@ScCore@@QAAXPBDZZ
?length@String@ScCore@@QBEHXZ
??1ClassInfo@ScCore@@UAE@XZ
?getFlags@LiveObject@ScCore@@QBEIXZ
??0Variant@ScCore@@QAE@ABVString@1@@Z
??0String@ScCore@@QAE@PBD@Z
?setIncrement@SimpleArray@ScCore@@QAEXH@Z
strlen16
?insert@SimpleArray@ScCore@@QAEXHH@Z
strcmp16
?acquire@Lock@ScCore@@QAEXXZ
?release@Lock@ScCore@@QAEXXZ
?getUInteger@Variant@ScCore@@QBEIXZ
?isUInteger@Variant@ScCore@@QBE_NXZ
??0Variant@ScCore@@QAE@N@Z
?toString@Variant@ScCore@@QBE?AVString@2@XZ
?isNaN@Variant@ScCore@@QBE_NXZ
?setDouble@Variant@ScCore@@QAEXN@Z
?scanDouble@Variant@ScCore@@SANABVString@2@HPAV32@@Z
??4Variant@ScCore@@QAEAAV01@PBG@Z
?isInteger@Variant@ScCore@@QBE_NXZ
?convert@Variant@ScCore@@QAEXW4VariantType@2@@Z
?getDouble@Variant@ScCore@@QBENXZ
?setString@Variant@ScCore@@QAEXABVString@2@@Z
??4String@ScCore@@QAEAAV01@G@Z
?setInteger@Variant@ScCore@@QAEXH@Z
?setNull@Variant@ScCore@@QAEXXZ
?setBool@Variant@ScCore@@QAEX_N@Z
??YString@ScCore@@QAEAAV01@D@Z
?setString@Variant@ScCore@@QAEXPBG@Z
?getInteger@Variant@ScCore@@QBEHXZ
??0Lockable@ScCore@@QAE@XZ
??1Lockable@ScCore@@QAE@XZ
??4Variant@ScCore@@QAEAAV01@ABVString@1@@Z
?alert@Dialogs@ScCore@@SAXABVString@2@0@Z
??YString@ScCore@@QAEAAV01@ABV01@@Z
??YString@ScCore@@QAEAAV01@PBD@Z
?erase@Variant@ScCore@@QAEXXZ
?isDefined@Variant@ScCore@@QBE_NXZ
??4String@ScCore@@QAEAAV01@PBD@Z
??1FileSpec@ScCore@@QAE@XZ
?getPath@FileSpec@ScCore@@QBE?AVString@2@XZ
?changePath@FileSpec@ScCore@@QAE_NABVString@2@@Z
?getAbsoluteURI@FileSpec@ScCore@@QBE?AVString@2@_N@Z
??1File@ScCore@@UAE@XZ
?ncmp@String@ScCore@@QBEHPBDH@Z
?close@File@ScCore@@UAEHXZ
?read@File@ScCore@@UAEHHAAVString@2@@Z
?open@File@ScCore@@UAEHABVString@2@II@Z
??0File@ScCore@@QAE@ABVFileSpec@1@@Z
?isAlias@FileSpec@ScCore@@QBE_NXZ
?isFile@FileSpec@ScCore@@QBE_NXZ
??0FileSpec@ScCore@@QAE@ABVString@1@_N@Z
??ABasicArray@ScCore@@QBEABVVariant@1@I@Z
?setString@Variant@ScCore@@QAEXPBD@Z
?sleep@Thread@ScCore@@SAXI@Z
?setObject@Variant@ScCore@@QAEXHABVString@2@PAVRoot@2@@Z
?get@Dictionary@ScCore@@SAPAV12@ABVString@2@@Z
??1Array@ScCore@@UAE@XZ
?getRect@Variant@ScCore@@QBEPBVRect@2@XZ
??AArray@ScCore@@QAEAAVVariant@1@I@Z
?length@Array@ScCore@@UBEIXZ
??0Array@ScCore@@QAE@XZ
?colorPicker@Dialogs@ScCore@@SAHH@Z
??1RegExp@ScCore@@QAE@XZ
?watol@UnicodeUtils@ScCore@@SAHPBG@Z
?substr@String@ScCore@@QBE?AV12@HH@Z
?match@RegExp@ScCore@@QBE_NABVString@2@HAAVCapture@2@@Z
?createCaptureList@RegExp@ScCore@@QBEPAVCapture@2@XZ
??0RegExp@ScCore@@QAE@ABVString@1@H@Z
?getLocale@Localizer@ScCore@@SA?AVString@2@XZ
?convertLF@String@ScCore@@QAEHW4CRLFEncoding@12@@Z
??8String@ScCore@@QBE_NPBD@Z
?split@String@ScCore@@QAE?AV12@D@Z
?getDefault@Encoder@ScCore@@SAABV12@XZ
?getHiResTimer@Thread@ScCore@@SA_JXZ
?get@Dictionary@ScCore@@SAPAV12@XZ
?getCacheSize@Heap@ScCore@@SAHXZ
??4Variant@ScCore@@QAEAAV01@_N@Z
??4Variant@ScCore@@QAEAAV01@I@Z
?decode@String@ScCore@@QAEHPBDHPBVEncoder@2@@Z
?setDefault@Encoder@ScCore@@SAXABV12@@Z
?get@Encoder@ScCore@@SAPBV12@PBG@Z
?append@String@ScCore@@QAEXG@Z
?setCacheSize@Heap@ScCore@@SAXH@Z
?getBool@Variant@ScCore@@QBE_NXZ
?alert@Dialogs@ScCore@@SAXABVString@2@@Z
??0String@ScCore@@QAE@PBGH@Z
??1SparseArray@ScCore@@QAE@XZ
??0Dictionary@ScCore@@QAE@H@Z
?addTable@Dictionary@ScCore@@UAEXABULivePropertyInfo@2@PBD1@Z
?addTables@Dictionary@ScCore@@UAEXPBULivePropertyInfos@2@@Z
?getDateTimeStampAsISO@Dictionary@ScCore@@UBE?AVString@2@XZ
??1Dictionary@ScCore@@UAE@XZ
?indexOf@SimpleArray@ScCore@@QBEHH@Z
??0SparseArray@ScCore@@QAE@XZ
?find@SparseArray@ScCore@@QBEHH@Z
?set@SparseArray@ScCore@@QAEXHH@Z
?removeAt@SimpleArray@ScCore@@QAEHH@Z
?getAscii@Encoder@ScCore@@SAABV12@XZ
?emptyString@String@ScCore@@SAABV12@XZ
?erase@SimpleArray@ScCore@@QAEXXZ
?getObjectData@Variant@ScCore@@QBEPAVRoot@2@XZ
??ZSimpleArray@ScCore@@QAEAAV01@H@Z
?lock@Lockable@ScCore@@QBEXXZ
?unlock@Lockable@ScCore@@QBEXXZ
?getFullText@Error@ScCore@@QBEXAAVString@2@@Z
?getLength@ErrorInfo@ScCore@@QBEGXZ
?getColumn@ErrorInfo@ScCore@@QBEHXZ
?getOffset@ErrorInfo@ScCore@@QBEHXZ
?getLine@ErrorInfo@ScCore@@QBEHXZ
?getSource@ErrorInfo@ScCore@@QBEABVString@2@XZ
?getError@Error@ScCore@@QBEPBVErrorInfo@2@XZ
?getCode@Error@ScCore@@QBEHXZ
?get@Context@ScCore@@SAAAV12@XZ
?erase@Error@ScCore@@QAEXXZ
??4Error@ScCore@@QAEAAV01@ABV01@@Z
?remove@SimpleArray@ScCore@@QAEXH@Z
??4SimpleArray@ScCore@@QAEAAV01@ABV01@@Z
ScAtomicInc
??1Error@ScCore@@QAE@XZ
??1Broadcaster@ScCore@@QAE@XZ
??0Error@ScCore@@QAE@XZ
??0Broadcaster@ScCore@@QAE@XZ
?getFile@ErrorInfo@ScCore@@QBEABVString@2@XZ
?setMoreInfo@Error@ScCore@@QAEXABVString@2@HHHG@Z
?push@Error@ScCore@@QAEXHABVString@2@PBVCloneable@2@_N@Z
?set@Localizer@ScCore@@SAXPBV12@@Z
?get@Localizer@ScCore@@SAABV12@XZ
?getUTCTime@Time@ScCore@@SANXZ
?setJSObject@Variant@ScCore@@QAEXAAVObject@ScScript@@@Z
??1BasicArray@ScCore@@MAE@XZ
??0BasicArray@ScCore@@IAE@XZ
?setLiveObject@Variant@ScCore@@QAEXAAVLiveObject@2@H@Z
?set@Callbacks@ScCore@@SAXPAV12@@Z
?get@Globals@ScCore@@SAPAU12@XZ
?getVersion@ScCore@@YAHXZ
?isInitialized@InitTerm@ScCore@@SA_NXZ
ScAtomicDec
?addRef@Refcountable@ScCore@@QBEXXZ
?create@LiveObject@ScCore@@SAHPAPAV12@ABVString@2@H@Z
?setLiveObject@Variant@ScCore@@QAEXPAVLiveObject@2@H@Z
??1Message@ScCore@@UAE@XZ
??0Message@ScCore@@QAE@H@Z
?getRefCount@Refcountable@ScCore@@QBEHXZ
??1HashTable@ScCore@@QAE@XZ
??0Variant@ScCore@@QAE@ABV01@@Z
?getExtError@LiveMessage@ScCore@@QBEPAVError@2@XZ
?getError@LiveMessage@ScCore@@QAEAAHXZ
?getArgs@LiveMessage@ScCore@@QBEABVArray@2@XZ
?getID@Message@ScCore@@QBEHXZ
?remove@SparseArray@ScCore@@QAEHH@Z
?forEach@SparseArray@ScCore@@QAEXP6A_NHPAHH@ZH@Z
??0HashTable@ScCore@@QAE@ABV01@@Z
?set@HashTable@ScCore@@QAEABVString@2@ABV32@H_N@Z
?forEach@HashTable@ScCore@@QAEXP6A_NABVString@2@PAHH@ZH@Z
?erase@String@ScCore@@QAEXHH@Z
?getKeys@HashTable@ScCore@@QBEXAAV?$TSimpleArray@$$CBVString@ScCore@@@2@@Z
??AHashTable@ScCore@@QBEHABVString@1@@Z
??0HashTable@ScCore@@QAE@XZ
?addListener@Broadcaster@ScCore@@QAEXAAVListener@2@H@Z
?isValid@LiveBase@ScCore@@QBE_NXZ
?removeListener@Broadcaster@ScCore@@QAEXAAVListener@2@H@Z
?setAutostore@LiveObject@ScCore@@QBEXPAV12@H@Z
?setLength@Array@ScCore@@QAEXI@Z
?setSize@SimpleArray@ScCore@@QAEXH@Z
?merge@SimpleArray@ScCore@@QAEXABV12@_N@Z
??0Error@ScCore@@QAE@ABV01@@Z
?erase@Array@ScCore@@QAEXXZ
??YArray@ScCore@@QAEAAV01@ABVVariant@1@@Z
?isErrorClass@Error@ScCore@@SA_NABVString@2@@Z
?getFactory@LiveObject@ScCore@@SAPAV12@ABVString@2@H@Z
??1Listener@ScCore@@UAE@XZ
?isFolder@FileSpec@ScCore@@QBE_NXZ
?isWS@UnicodeUtils@ScCore@@SA_NG@Z
?append@String@ScCore@@QAEXPBGH@Z
??4FileSpec@ScCore@@QAEAAV01@ABV01@@Z
?strip@String@ScCore@@QAEXXZ
?findAny@String@ScCore@@QBEHPBDH@Z
?getCurrentDir@FileUtils@ScCore@@SAHAAVFileSpec@2@@Z
??0FileSpec@ScCore@@QAE@XZ
?exists@FileSpec@ScCore@@QBE_NXZ
?setPath@FileSpec@ScCore@@QAE_NABVString@2@_N@Z
?decodeURI@String@ScCore@@QAE_NXZ
?find@HashTable@ScCore@@QBEHABVString@2@_N@Z
?insert@String@ScCore@@QAEXABV12@H@Z
?push@Error@ScCore@@QAEXHPBVCloneable@2@@Z
?parse@String@ScCore@@QAE_NAAV12@@Z
??YString@ScCore@@QAEAAV01@G@Z
?erase@HashTable@ScCore@@QAEXXZ
?hasUnassignedObjectData@Variant@ScCore@@QBE_NXZ
?getHiResTimer@Time@ScCore@@SA_JXZ
?getNext@ErrorInfo@ScCore@@QBEPBV12@XZ
?getErrorData@ErrorInfo@ScCore@@QBEABVVariant@2@XZ
?getTicks@Time@ScCore@@SAIXZ
??4SparseArray@ScCore@@QAEAAV01@ABV01@@Z
?getData@SparseArray@ScCore@@QBEXAAVSimpleArray@2@@Z
??4Array@ScCore@@QAEAAV01@ABV01@@Z
?isRethrow@Allocator@ScCore@@QBE_NXZ
?get@Allocator@ScCore@@SAPAV12@XZ
??YArray@ScCore@@QAEAAV01@ABVString@1@@Z
?getErrorDefinition@Error@ScCore@@SA_NHAAVString@2@0@Z
?getCode@ErrorInfo@ScCore@@QBEHXZ
?get@Array@ScCore@@UBEPAVVariant@2@I@Z
??0Array@ScCore@@QAE@I@Z
?setRegExp@Variant@ScCore@@QAEXABVRegExp@2@@Z
??0Array@ScCore@@QAE@ABV01@@Z
?getArray@Variant@ScCore@@QBEPBVArray@2@XZ
??YArray@ScCore@@QAEAAV01@N@Z
?getPoint@Variant@ScCore@@QBEPBVPoint@2@XZ
?setObjectData@Variant@ScCore@@QAEXPAVRoot@2@@Z
??0FileWrapper@ScCore@@QAE@ABVFileSpec@1@@Z
?getFileSpec@Variant@ScCore@@QBEPBVFileSpec@2@XZ
?clone@FileWrapper@ScCore@@UBEHPAPAVCloneable@2@_N@Z
??1FileWrapper@ScCore@@UAE@XZ
?erase@SparseArray@ScCore@@QAEXXZ
?broadcast@Broadcaster@ScCore@@QBE_NH@Z
??0LiveObject@ScCore@@QAE@PBD_N@Z
?getAs@LiveObject@ScCore@@UBEPBXH@Z
?getAs@LiveObject@ScCore@@UAEPAXH@Z
?invalidate@LiveObject@ScCore@@UAEXXZ
?revalidate@LiveObject@ScCore@@UAEXXZ
?getErrorText@LiveBase@ScCore@@UBEHAAVString@2@HPBV32@@Z
?getErrorText@LiveBase@ScCore@@UBEHAAVString@2@HH_N@Z
?createProperty@LiveObject@ScCore@@MAEPAVLiveProperty@2@ABVString@2@HI@Z
?createLocal@LiveObject@ScCore@@UAEHPAPAV12@ABVString@2@H@Z
?clone@LiveObject@ScCore@@UBEHPAPAV12@_N@Z
?initialize@LiveObject@ScCore@@UAEHABVArray@2@PAVError@2@@Z
?getClassName@LiveObject@ScCore@@UBEABVString@2@XZ
??8LiveObject@ScCore@@UBE_NABV01@@Z
?setData@LiveObject@ScCore@@UAEXPAVRoot@2@@Z
?getData@LiveObject@ScCore@@UBEPAVRoot@2@XZ
?addComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?removeComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?getIDForName@LiveObject@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?createIDForName@LiveObject@ScCore@@UAEHABVString@2@AAHH@Z
?defineIDForName@LiveObject@ScCore@@UAEHABVString@2@HH@Z
?getNameForID@LiveObject@ScCore@@UBEHHAAVString@2@H@Z
?deleteDynamicProperties@LiveObject@ScCore@@UAEX_N@Z
?hasOperators@LiveObject@ScCore@@UBE_NXZ
?deleteID@LiveObject@ScCore@@UAEHH@Z
?reset@LiveObject@ScCore@@UAEXXZ
?enumerate@LiveObject@ScCore@@UBEHAAVSimpleArray@2@H@Z
?getType@LiveObject@ScCore@@UBE?AW4InfoType@2@H@Z
?getClassInfo@LiveObject@ScCore@@UBEPBVClassInfo@2@H@Z
?get@LiveObject@ScCore@@UBEHHAAVVariant@2@PAVError@2@@Z
?put@LiveObject@ScCore@@UAEHHABVVariant@2@PAVError@2@@Z
?call@LiveObject@ScCore@@UAEHHABVArray@2@AAVVariant@2@PAVError@2@@Z
?apply@LiveObject@ScCore@@UBEHAAV12@HABVArray@2@AAVVariant@2@PAVError@2@@Z
?valueOf@LiveObject@ScCore@@UBEXAAVVariant@2@@Z
?toString@LiveObject@ScCore@@UBEXAAVString@2@@Z
?notify@LiveObject@ScCore@@UAE_NAAVMessage@2@@Z
??1LiveObject@ScCore@@MAE@XZ
??0Callbacks@ScCore@@QAE@XZ
??1Callbacks@ScCore@@UAE@XZ
??4Variant@ScCore@@QAEAAV01@PBD@Z
??0Variant@ScCore@@QAE@PBD@Z
?getGroups@Dictionary@ScCore@@UAEXAAV?$TSimpleArray@$$CBVString@ScCore@@@2@@Z
?getClasses@Dictionary@ScCore@@UAEXABVString@2@AAV?$TSimpleArray@$$CBVString@ScCore@@@2@@Z
?getClassInfo@Dictionary@ScCore@@UAEPBVClassInfo@2@ABVString@2@@Z
?push@Error@ScCore@@QAEXABV12@@Z
?write@File@ScCore@@UAEHABVString@2@_N@Z
?setup@String@ScCore@@QAEXGH@Z
?tell@File@ScCore@@UBEHXZ
?setEncoding@File@ScCore@@QAEXABVString@2@@Z
?seek@File@ScCore@@UAEHHH@Z
??1Folder@ScCore@@QAE@XZ
?create@Folder@ScCore@@QAEHXZ
??0Folder@ScCore@@QAE@ABVFileSpec@1@@Z
?getSpecialDir@FileUtils@ScCore@@SAHHAAVFileSpec@2@@Z
?localize@String@ScCore@@QAEXPBVArray@2@@Z
?getText@ErrorInfo@ScCore@@QBEABVString@2@XZ
??YArray@ScCore@@QAEAAV01@H@Z
??1FileFilter@ScCore@@UAE@XZ
??0FileFilter@ScCore@@QAE@ABVString@1@@Z
?test@FileFilter@ScCore@@UBE_NABVFileSpec@2@@Z
??0FileSpec@ScCore@@QAE@ABV01@@Z
??MString@ScCore@@QBE_NABV01@@Z
??9String@ScCore@@QBE_NPBD@Z
?getExtension@FileSpec@ScCore@@QBE?AVString@2@XZ
?isVisible@FileSpec@ScCore@@QBE_NXZ
?getName@FileSpec@ScCore@@QBE?AVString@2@XZ
?alert@Dialogs@ScCore@@SAXABVString@2@0_N@Z
?iterate@Folder@ScCore@@QAEHAAVFileFilter@2@H@Z
?setCurrentDir@FileUtils@ScCore@@SAHABVFileSpec@2@@Z
?split@String@ScCore@@QAE?AV12@PBD@Z
?getSystem@Encoder@ScCore@@SAABV12@XZ
?resolve@FileSpec@ScCore@@QAEHXZ
??ASparseArray@ScCore@@QBEHH@Z
?isDefined@Array@ScCore@@UBE_NI@Z
??YSimpleArray@ScCore@@QAEAAV01@ABV01@@Z
??4String@ScCore@@QAEAAV01@D@Z
?escape@String@ScCore@@QBE?AV12@_N@Z
?getKeys@SparseArray@ScCore@@QBEXAAVSimpleArray@2@@Z
?insert@String@ScCore@@QAEXPBDH@Z
?set@String@ScCore@@QAEXHG@Z
?setDefaultNamespaceURI@XML@ScCore@@SA?AVString@2@ABV32@@Z
?setFlags@LiveObject@ScCore@@QBEXI@Z
?setPropertyManager@LiveBase@ScCore@@QAEXPBVLivePropertyManager@2@@Z
??0LivePropertyManager@ScCore@@QAE@PBULivePropertyInfo@1@@Z
?setValue@XML@ScCore@@QAE_NABVString@2@@Z
??0XML@ScCore@@QAE@H@Z
??1XML@ScCore@@EAE@XZ
?checkSymbolSyntax@XML@ScCore@@SA_NABVString@2@@Z
??0XML@ScCore@@QAE@HABVString@1@@Z
??1LiveCollection@ScCore@@UAE@XZ
??0LiveCollection@ScCore@@QAE@PBDH_N@Z
?getClassName@LiveCollection@ScCore@@UBEABVString@2@XZ
?enumerate@LiveCollection@ScCore@@UBEHAAVSimpleArray@2@H@Z
?putLength@LiveCollection@ScCore@@UAEHI@Z
?asElementNode@XML@ScCore@@QAEPAV12@XZ
?getChild@XML@ScCore@@QBEPAV12@H@Z
?length@XML@ScCore@@QBEHXZ
?insert@String@ScCore@@QAEXGH@Z
?find@String@ScCore@@QBEHPBDH_N@Z
?getAs@LiveCollection@ScCore@@UBEPBXH@Z
?getAs@LiveCollection@ScCore@@UAEPAXH@Z
?getIDForName@LiveCollection@ScCore@@UBEHABVString@2@AAHAAW4InfoType@2@H@Z
?getType@LiveCollection@ScCore@@UBE?AW4InfoType@2@H@Z
?getNameForID@LiveCollection@ScCore@@UBEHHAAVString@2@H@Z
?remove@XML@ScCore@@QAEHABVString@2@@Z
?setCurrentNamespace_r@XML@ScCore@@SAPBV12@PBV12@@Z
?remove@XML@ScCore@@QAEXAAV12@@Z
?get_r@XML@ScCore@@QBEPAV12@ABVString@2@H@Z
?getPropertyManager@LiveBase@ScCore@@QBEPBVLivePropertyManager@2@XZ
?put@XML@ScCore@@QAEPAV12@ABVString@2@ABV12@_N@Z
?insert@XML@ScCore@@QAE_NABV12@H_N@Z
?copy_r@XML@ScCore@@QBEPAV12@_N@Z
?put@XML@ScCore@@QAEPAV12@ABVString@2@0@Z
?toString@XML@ScCore@@QBE?AVString@2@H@Z
?setNamespace@XML@ScCore@@QAE_NPBV12@@Z
?indexOf@XML@ScCore@@QBEHABV12@_N@Z
?remove@XML@ScCore@@QAEXHH@Z
?toXMLString@XML@ScCore@@QBE?AVString@2@H@Z
?isEqual@XML@ScCore@@QBE_NABV12@_N@Z
?setArray@Variant@ScCore@@QAEXABVArray@2@@Z
??YArray@ScCore@@QAEAAV01@AAVLiveObject@1@@Z
?get_r@XML@ScCore@@QBEPAV12@HH@Z
?namespaces_r@XML@ScCore@@QBEPAV12@XZ
??4Variant@ScCore@@QAEAAV01@AAVLiveObject@1@@Z
?getNS@XML@ScCore@@QBEPBV12@PBVString@2@0_N@Z
?setName@XML@ScCore@@QAE_NABVString@2@@Z
?removeNS@XML@ScCore@@QAE_NABV12@_N@Z
?addFactory@LiveObject@ScCore@@SAHAAV12@H@Z
?removeFactory@LiveObject@ScCore@@SAXABVString@2@@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@@Z
?parse@XML@ScCore@@SAPAV12@ABVString@2@AAHAAVError@2@_N33@Z
?find@String@ScCore@@QBEHGH_N@Z
?isNull@Variant@ScCore@@QBE_NXZ
?insertChild@XML@ScCore@@QAE_NABV12@H_N@Z
?xpath_r@XML@ScCore@@QBEPAV12@ABVString@2@AAVVariant@2@AAVError@2@PBV?$THashTable@VString@ScCore@@@2@@Z
?normalize@XML@ScCore@@QAEXXZ
?getTypeAsString@XML@ScCore@@QBEPBDXZ
?isSimple@XML@ScCore@@QBE_NXZ
?descendants_r@XML@ScCore@@QBEPAV12@XZ
?contains@XML@ScCore@@QBE_NABV12@_N@Z
?encodeURI@String@ScCore@@QAE_NPBD@Z
?getAbsoluteURI@FileWrapper@ScCore@@QBE?AVString@2@_N@Z
?getDisplayName@FileWrapper@ScCore@@QBE?AVString@2@XZ
?getRelativeURI@FileWrapper@ScCore@@QBE?AVString@2@XZ
?getRelativeURI@FileWrapper@ScCore@@QBE?AVString@2@ABV12@@Z
??0FileWrapper@ScCore@@QAE@ABVString@1@_N@Z
?getPath@FileWrapper@ScCore@@QBE?AVString@2@XZ
?getFileSystem@FileUtils@ScCore@@SAPBDXZ
?getParentSpec@FileSpec@ScCore@@QBE_NAAV12@@Z
?getFileSpec@FileWrapper@ScCore@@QBEABVFileSpec@2@XZ
?setAttributes@FileWrapper@ScCore@@QAE_NH@Z
?getAttributes@FileWrapper@ScCore@@QBEHPAH0@Z
?setError@FileWrapper@ScCore@@QAEXABVString@2@@Z
?getError@FileWrapper@ScCore@@QBEABVString@2@XZ
?changePath@FileWrapper@ScCore@@QAE_NABVString@2@@Z
?getSpecialDir@FileWrapper@ScCore@@SAPAV12@H@Z
?getType@FileWrapper@ScCore@@QBE?AVString@2@XZ
?getCreator@FileWrapper@ScCore@@QBE?AVString@2@XZ
?setLF@FileWrapper@ScCore@@QAEXH@Z
?toLower@String@ScCore@@QAE_NXZ
?getLF@FileWrapper@ScCore@@QBEHXZ
?setEncoding@FileWrapper@ScCore@@QAEXABVString@2@@Z
?getEncoding@FileWrapper@ScCore@@QBEABVString@2@XZ
?eof@FileWrapper@ScCore@@QBE_NXZ
?close@FileWrapper@ScCore@@QAE_NXZ
?ucmp@String@ScCore@@QBEHPBD@Z
?read@FileWrapper@ScCore@@QAE_NHAAVString@2@@Z
?readch@FileWrapper@ScCore@@QAEHXZ
?readln@FileWrapper@ScCore@@QAE_NAAVString@2@@Z
?seek@FileWrapper@ScCore@@QAE_NHH@Z
??4Variant@ScCore@@QAEAAV01@H@Z
?tell@FileWrapper@ScCore@@QBEHXZ
?chooseFile@FileSpec@ScCore@@QAE_NABVString@2@_NPBV32@PAVFileFilter@2@PAVArray@2@@Z
?chooseSaveFile@FileSpec@ScCore@@QAE_NABVString@2@PBV32@PAVFileFilter@2@@Z
?isUIEnabled@InitTerm@ScCore@@SA_NXZ
?chooseFolder@FileSpec@ScCore@@QAE_NABVString@2@@Z
??0Error@ScCore@@QAE@HABVString@1@_N@Z
?resolve@FileSpec@ScCore@@QBEHAAV12@@Z
?createAlias@FileWrapper@ScCore@@QAE_NABVString@2@_N@Z
?getCurrentDir@FileWrapper@ScCore@@SAPAV12@XZ
?getFiles@FileWrapper@ScCore@@QAE_NAAV?$TSimpleArray@VFileWrapper@ScCore@@@2@PBVString@2@@Z
?makeDir@FileWrapper@ScCore@@QAE_NXZ
?rename@FileWrapper@ScCore@@QAE_NABVString@2@@Z
?remove@FileWrapper@ScCore@@QAE_NXZ
?setSize@FileWrapper@ScCore@@QAE_NH@Z
?getSize@FileWrapper@ScCore@@QBEHXZ
?open@FileWrapper@ScCore@@QAE_NABVString@2@PBV32@1@Z
?write@FileWrapper@ScCore@@QAE_NABVString@2@_N@Z
?copy@FileWrapper@ScCore@@QBE_NABVString@2@@Z
?execute@FileWrapper@ScCore@@QAE_NXZ
??0XML@ScCore@@QAE@ABVString@1@@Z
?getEncoding@File@ScCore@@QBEABVString@2@XZ
?toXML@Dictionary@ScCore@@QAEPAVXML@2@PBVString@2@@Z
?getText@XML@ScCore@@QBE?AVString@2@ABV32@@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@0@Z
?hasKey@HashTable@ScCore@@QBE_NABVString@2@_N@Z
?getInteger@XML@ScCore@@QBEHABVString@2@@Z
?getBool@XML@ScCore@@QBE_NABVString@2@@Z
?indexOf@XML@ScCore@@QBEHABVString@2@_N@Z
?isDefault@Dictionary@ScCore@@QBE_NXZ
?getAll@Dictionary@ScCore@@SAABV?$THashTable@$$CBVDictionary@ScCore@@@2@XZ
?getClassXML@Dictionary@ScCore@@QAEPAVXML@2@ABVString@2@@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@ABV12@_N@Z
??0LiveComponent@ScCore@@IAE@XZ
?getAs@LiveBase@ScCore@@UBEPBXH@Z
?getAs@LiveBase@ScCore@@UAEPAXH@Z
?invalidate@LiveBase@ScCore@@UAEXXZ
?revalidate@LiveBase@ScCore@@UAEXXZ
?reset@LiveComponent@ScCore@@UAEXXZ
?getIDForName@LiveComponent@ScCore@@UBEHABVLiveObject@2@ABVString@2@AAHAAW4InfoType@2@H@Z
?getNameForID@LiveComponent@ScCore@@UBEHABVLiveObject@2@HAAVString@2@H@Z
?getType@LiveComponent@ScCore@@UBE?AW4InfoType@2@ABVLiveObject@2@H@Z
?hasOperators@LiveComponent@ScCore@@UBE_NXZ
?enumerate@LiveComponent@ScCore@@UBEHABVLiveObject@2@AAVSimpleArray@2@H@Z
?getServiceInfo@LiveComponent@ScCore@@UBEPBVServiceInfo@2@ABVLiveObject@2@HH@Z
?get@LiveComponent@ScCore@@UBEHABVLiveObject@2@HAAVVariant@2@PAVError@2@@Z
?put@LiveComponent@ScCore@@UAEHAAVLiveObject@2@HABVVariant@2@PAVError@2@@Z
?isGeneric@LiveComponent@ScCore@@UBE_NH@Z

Exports

Exports

??0API@ScScript@@IAE@AAVEngine@1@H@Z
??0BinaryNode@ScScript@@QAE@ABUScanInfo@1@PAVNode@1@1@Z
??0BreakpointInfo@ScScript@@QAE@ABV01@@Z
??0BreakpointInfo@ScScript@@QAE@XZ
??0Callback@ScScript@@QAE@XZ
??0DataPool@ScScript@@QAE@XZ
??0DebugAPI@ScScript@@AAE@AAVEngine@1@@Z
??0Debugger@ScScript@@QAE@ABV01@@Z
??0Debugger@ScScript@@QAE@XZ
??0Dispatcher@ScScript@@QAE@PBD@Z
??0ESContext@ScScript@@IAE@XZ
??0EmptyNode@ScScript@@QAE@ABUScanInfo@1@@Z
??0Engine@ScScript@@IAE@XZ
??0FileDisp@ScScript@@QAE@XZ
??0GlobalDialogs@ScScript@@QAE@XZ
??0HiliteAPI@ScScript@@AAE@AAVEngine@1@@Z
??0LabelNode@ScScript@@QAE@ABUScanInfo@1@@Z
??0ListNode@ScScript@@QAE@ABUScanInfo@1@@Z
??0LiveObjectAPI@ScScript@@AAE@AAVEngine@1@@Z
??0Node@ScScript@@QAE@ABUScanInfo@1@@Z
??0ParserAPI@ScScript@@AAE@AAVEngine@1@@Z
??0Preprocessor@ScScript@@QAE@XZ
??0ProfilerData@ScScript@@QAE@XZ
??0RuntimeError@ScScript@@QAE@ABV01@@Z
??0RuntimeError@ScScript@@QAE@XZ
??0ScopeInfo@ScScript@@QAE@XZ
??0ScopeNode@ScScript@@QAE@ABUScanInfo@1@@Z
??0Script@ScScript@@QAE@XZ
??0ScriptContainer@ScScript@@QAE@XZ
??0ScriptContainer@ScScript@@QAE@_N@Z
??0TernaryNode@ScScript@@QAE@ABUScanInfo@1@PAVNode@1@11@Z
??0UnaryNode@ScScript@@QAE@ABUScanInfo@1@PAVNode@1@@Z
??0ValidateData@ScScript@@QAE@ABV01@@Z
??0ValidateData@ScScript@@QAE@XZ
??1API@ScScript@@UAE@XZ
??1BinaryNode@ScScript@@UAE@XZ
??1BreakpointInfo@ScScript@@UAE@XZ
??1Callback@ScScript@@UAE@XZ
??1DataPool@ScScript@@QAE@XZ
??1DebugAPI@ScScript@@UAE@XZ
??1Debugger@ScScript@@UAE@XZ
??1Dispatcher@ScScript@@UAE@XZ
??1ESContext@ScScript@@MAE@XZ
??1EmptyNode@ScScript@@UAE@XZ
??1Engine@ScScript@@UAE@XZ
??1FileDisp@ScScript@@UAE@XZ
??1GlobalDialogs@ScScript@@UAE@XZ
??1HiliteAPI@ScScript@@UAE@XZ
??1LabelNode@ScScript@@UAE@XZ
??1ListNode@ScScript@@UAE@XZ
??1LiveObjectAPI@ScScript@@UAE@XZ
??1Node@ScScript@@UAE@XZ
??1ParserAPI@ScScript@@UAE@XZ
??1Preprocessor@ScScript@@UAE@XZ
??1RuntimeError@ScScript@@UAE@XZ
??1ScopeInfo@ScScript@@UAE@XZ
??1ScopeNode@ScScript@@UAE@XZ
??1Script@ScScript@@MAE@XZ
??1ScriptContainer@ScScript@@UAE@XZ
??1TernaryNode@ScScript@@UAE@XZ
??1UnaryNode@ScScript@@UAE@XZ
??1ValidateData@ScScript@@UAE@XZ
??4BreakpointInfo@ScScript@@QAEAAV01@ABV01@@Z
??4Debugger@ScScript@@QAEAAV01@ABV01@@Z
??4InitTerm@ScScript@@QAEAAV01@ABV01@@Z
??4RuntimeError@ScScript@@QAEAAV01@ABV01@@Z
??4ValidateData@ScScript@@QAEAAV01@ABV01@@Z
??_7API@ScScript@@6B@
??_7BinaryNode@ScScript@@6B@
??_7BreakpointInfo@ScScript@@6B@
??_7Callback@ScScript@@6B@
??_7DebugAPI@ScScript@@6B@
??_7Debugger@ScScript@@6B@
??_7Dispatcher@ScScript@@6B@
??_7ESContext@ScScript@@6B@
??_7EmptyNode@ScScript@@6B@
??_7Engine@ScScript@@6B@
??_7FileDisp@ScScript@@6B@
??_7GlobalDialogs@ScScript@@6B@
??_7HiliteAPI@ScScript@@6B@
??_7LabelNode@ScScript@@6B@
??_7ListNode@ScScript@@6B@
??_7LiveObjectAPI@ScScript@@6B@
??_7Node@ScScript@@6B@
??_7ParserAPI@ScScript@@6B@
??_7Preprocessor@ScScript@@6B@
??_7RuntimeError@ScScript@@6B@
??_7ScopeInfo@ScScript@@6B@
??_7ScopeNode@ScScript@@6B@
??_7Script@ScScript@@6B@
??_7ScriptContainer@ScScript@@6B@
??_7TernaryNode@ScScript@@6B@
??_7UnaryNode@ScScript@@6B@
??_7ValidateData@ScScript@@6B@
??_FDispatcher@ScScript@@QAEXXZ
?_isInteger@DataPool@ScScript@@ABE_NH@Z
?_isUInteger@DataPool@ScScript@@ABE_NH@Z
?add@DataPool@ScScript@@QAEHABVVariant@ScCore@@@Z
?add@DataPool@ScScript@@QAEHG@Z
?add@DataPool@ScScript@@QAEHI@Z
?add@DataPool@ScScript@@QAEHN@Z
?add@DataPool@ScScript@@QAEHPBD@Z
?add@DataPool@ScScript@@QAEHPBG@Z
?add@ScriptContainer@ScScript@@QAEXABV12@_N@Z
?addClass@Dispatcher@ScScript@@QAEXABVString@ScCore@@@Z
?addClass@Dispatcher@ScScript@@QAEXPBD@Z
?addProperties@Dispatcher@ScScript@@QAEXHPBUPropEntry@2@PBD@Z
?atExit@InitTerm@ScScript@@SAXP6AXXZ@Z
?call@Dispatcher@ScScript@@QAEXAAUArguments@2@PBD@Z
?call@Dispatcher@ScScript@@UAEXAAUArguments@2@P6AX0@Z@Z
?call@GlobalDialogs@ScScript@@UAEHAAVLiveObject@ScCore@@HABVArray@4@AAVVariant@4@PAVError@4@@Z
?checkStack@ESContext@ScScript@@QBE_NXZ
?clearError@Engine@ScScript@@UAEXXZ
?clone@Engine@ScScript@@UBEHPAPAV12@@Z
?command@DebugAPI@ScScript@@QAEXW4Cmd@12@_N@Z
?compile@ScriptContainer@ScScript@@QAEHABVFileSpec@ScCore@@_NP6A_N0@Z@Z
?compile@ScriptContainer@ScScript@@QAEHABVString@ScCore@@0@Z
?createEngine@Engine@ScScript@@SAPAV12@W4Type@12@@Z
?createFile@FileDisp@ScScript@@QAE_NAAVVariant@ScCore@@ABVString@4@@Z
?createFolder@FileDisp@ScScript@@QAE_NAAVVariant@ScCore@@ABVString@4@@Z
?createValidateVTable@ValidateData@ScScript@@SAPAVHashTable@ScCore@@XZ
?debugBreak@DebugAPI@ScScript@@QBEXABVString@ScCore@@@Z
?decRef@ScopeInfo@ScScript@@QBEXXZ
?decompile@ParserAPI@ScScript@@QBE?AVString@ScCore@@ABVScopeNode@2@@Z
?directive@Preprocessor@ScScript@@AAE_NAAUProcData@12@@Z
?doProcess@Preprocessor@ScScript@@AAE_NAAUProcData@12@@Z
?dump@BinaryNode@ScScript@@UAEXAAVEngine@2@H@Z
?dump@LabelNode@ScScript@@UAEXAAVEngine@2@H@Z
?dump@ListNode@ScScript@@UAEXAAVEngine@2@H@Z
?dump@Node@ScScript@@UAEXAAVEngine@2@H@Z
?dump@ScopeNode@ScScript@@UAEXAAVEngine@2@H@Z
?dump@TernaryNode@ScScript@@UAEXAAVEngine@2@H@Z
?dump@UnaryNode@ScScript@@UAEXAAVEngine@2@H@Z
?enablePreProcessor@ParserAPI@ScScript@@QAE_N_N@Z
?engineNotify@Callback@ScScript@@UAEXAAVEngine@2@HH@Z
?enterDebugMode@Callback@ScScript@@UAEXAAVEngine@2@@Z
?erase@ScriptContainer@ScScript@@QAEXXZ
?errorAlert@ScriptContainer@ScScript@@QBEXXZ
?errorAlert@ScriptContainer@ScScript@@SAXABVError@ScCore@@@Z
?errorMessage@ScriptContainer@ScScript@@QBE?AVString@ScCore@@XZ
?errorMessage@ScriptContainer@ScScript@@SA?AVString@ScCore@@ABVError@4@@Z
?eval@DebugAPI@ScScript@@QAEHABVString@ScCore@@AAVVariant@4@@Z
?execute@ScriptContainer@ScScript@@QAEHAAVEngine@2@H@Z
?executeStaticXML@DebugAPI@ScScript@@SAPAVXML@ScCore@@ABV34@AAVError@4@@Z
?executeXML@DebugAPI@ScScript@@QAEPAVXML@ScCore@@ABV34@AAVError@4@@Z
?exit@InitTerm@ScScript@@SAXXZ
?findEngine@Engine@ScScript@@SAPAV12@ABVString@ScCore@@@Z
?findProperty@Dispatcher@ScScript@@UBEPBVPropInfo@2@HHPAVRoot@ScCore@@_N1@Z
?foldConstants@BinaryNode@ScScript@@UAEPAVNode@2@XZ
?foldConstants@ListNode@ScScript@@UAEPAVNode@2@XZ
?foldConstants@Node@ScScript@@UAEPAV12@XZ
?foldConstants@TernaryNode@ScScript@@UAEPAVNode@2@XZ
?foldConstants@UnaryNode@ScScript@@UAEPAVNode@2@XZ
?garbageCollecting@Callback@ScScript@@UAE_NAAVEngine@2@@Z
?gcAll@Engine@ScScript@@SAXXZ
?get@DataPool@ScScript@@SAAAV12@XZ
?get@Dispatcher@ScScript@@UAEXAAUArguments@2@@Z
?get@ESContext@ScScript@@SAAAV12@XZ
?getAll@Engine@ScScript@@SAXAAV?$TSimpleArray@VEngine@ScScript@@@ScCore@@@Z
?getBreakpoints@DebugAPI@ScScript@@QBEXAAV?$TSimpleArray@VBreakpointInfo@ScScript@@@ScCore@@@Z
?getCallback@Engine@ScScript@@QBEPAVCallback@2@XZ
?getClass@Dispatcher@ScScript@@QBEABVString@ScCore@@H@Z
?getClassCount@Dispatcher@ScScript@@QBEHXZ
?getClassID@Dispatcher@ScScript@@ABEHH@Z
?getClassInfo@Dispatcher@ScScript@@UAEPBVClassInfo@ScCore@@ABVString@4@@Z
?getClassObject@Callback@ScScript@@UAEPAVLiveObject@ScCore@@AAVEngine@2@ABVString@4@AAI@Z
?getConstant@Node@ScScript@@QBEPBVVariant@ScCore@@XZ
?getContextInfo@DebugAPI@ScScript@@QBEHHAAVString@ScCore@@AAVArray@4@@Z
?getContextLevel@DebugAPI@ScScript@@QBEHXZ
?getCurrent@Engine@ScScript@@SAPAV12@XZ
?getDebugFlags@Engine@ScScript@@QBEHXZ
?getDebugLevel@Engine@ScScript@@QBEHXZ
?getDebugState@DebugAPI@ScScript@@QBE?AW4State@12@XZ
?getDictionary@Engine@ScScript@@UBEPAVDictionary@ScCore@@XZ
?getDirective@Preprocessor@ScScript@@QBEPBVString@ScCore@@ABV34@@Z
?getEngine@API@ScScript@@QBEAAVEngine@2@XZ
?getEnumNames@Dispatcher@ScScript@@UBEXABVVariant@ScCore@@AAV?$TSimpleArray@VString@ScCore@@@4@@Z
?getEnumerableProperties@Dispatcher@ScScript@@UBEXABVVariant@ScCore@@AAVSimpleArray@4@H@Z
?getError@Engine@ScScript@@UBEABVError@ScCore@@XZ
?getError@ScriptContainer@ScScript@@QBEAAVError@ScCore@@XZ
?getErrorInfo@Engine@ScScript@@UBEABVRuntimeError@2@XZ
?getGlobalObject@LiveObjectAPI@ScScript@@QBEAAVLiveObject@ScCore@@XZ
?getID@Engine@ScScript@@QBEIXZ
?getIncludePath@ParserAPI@ScScript@@QBEABVString@ScCore@@XZ
?getIncludes@Preprocessor@ScScript@@QBEABVString@ScCore@@XZ
?getInteger@DataPool@ScScript@@QBEHH@Z
?getLocalizer@Engine@ScScript@@QBEPBVLocalizer@ScCore@@XZ
?getName@API@ScScript@@QBEHXZ
?getName@Engine@ScScript@@QBEABVString@ScCore@@XZ
?getNode@ListNode@ScScript@@QBEPAVNode@2@H@Z
?getNumber@DataPool@ScScript@@QBENH@Z
?getOutputStream@DebugAPI@ScScript@@QBEPAVFile@ScCore@@XZ
?getParent@Dispatcher@ScScript@@QBEPAV12@XZ
?getProfilerData@DebugAPI@ScScript@@QAEXPAV?$TSimpleArray@VProfilerData@ScScript@@@ScCore@@_N@Z
?getProfilingLevel@Engine@ScScript@@QBEHXZ
?getProperties@DebugAPI@ScScript@@QAE_NABVVariant@ScCore@@AAV?$THashTable@VVariant@ScCore@@@4@H@Z
?getProperties@DebugAPI@ScScript@@QAE_NABVVariant@ScCore@@AAV?$THashTable@VVariant@ScCore@@@4@_N2@Z
?getProperties@Dispatcher@ScScript@@UBEXHHAAV?$TSimpleArray@$$CBVPropInfo@ScScript@@@ScCore@@@Z
?getPropertyTable@GlobalDialogs@ScScript@@SAABULivePropertyInfo@ScCore@@XZ
?getScript@DebugAPI@ScScript@@QBEPAVScript@2@XZ
?getScript@ScriptContainer@ScScript@@QBEPAVScript@2@H@Z
?getSecurityFlags@FileDisp@ScScript@@QBEHXZ
?getSource@DebugAPI@ScScript@@QBE?AVString@ScCore@@XZ
?getSourceFileID@DebugAPI@ScScript@@QBEHXZ
?getSourceLine@DebugAPI@ScScript@@QBEHXZ
?getStackDepth@DebugAPI@ScScript@@QBEHXZ
?getStackTrace@DebugAPI@ScScript@@QBE?AVString@ScCore@@HH@Z
?getSymbol@DataPool@ScScript@@QBE?AVString@ScCore@@H@Z
?getTable@Dispatcher@ScScript@@ABEPBVTableEntry@2@H@Z
?getUInteger@DataPool@ScScript@@QBEIH@Z
?getUserData@Dispatcher@ScScript@@QBEPAVRoot@ScCore@@XZ
?getUserData@Engine@ScScript@@QBEPAVRoot@ScCore@@XZ
?getValue@DataPool@ScScript@@QBEXHAAVVariant@ScCore@@@Z
?getVersion@Engine@ScScript@@SAHXZ
?getWatchpointInfo@DebugAPI@ScScript@@QAE_NAAVVariant@ScCore@@00@Z
?getXML@LiveObjectAPI@ScScript@@QBEPAVXML@ScCore@@ABVVariant@4@@Z
?hasDotProperties@Dispatcher@ScScript@@QBE_NH@Z
?hasOperators@Dispatcher@ScScript@@ABE_NH@Z
?hasProperty@Dispatcher@ScScript@@UBEPBUPropEntry@2@ABVVariant@ScCore@@0_N@Z
?incRef@ScopeInfo@ScScript@@QBEXXZ
?init@InitTerm@ScScript@@SAXXZ
?init@ValidateData@ScScript@@SAXXZ
?insert@ScriptContainer@ScScript@@QAEXAAVScript@2@H@Z
?invalidateClassAll@Engine@ScScript@@SAXABVString@ScCore@@@Z
?isClass@Dispatcher@ScScript@@QBE_NABVString@ScCore@@@Z
?isClass@Dispatcher@ScScript@@QBE_NH@Z
?isClass@Dispatcher@ScScript@@QBE_NPBD@Z
?isCommandEnabled@DebugAPI@ScScript@@QAE_NW4Cmd@12@@Z
?isContinueOnError@ScriptContainer@ScScript@@QBE_NXZ
?isEmpty@Node@ScScript@@QBE_NXZ
?isInitialized@InitTerm@ScScript@@SA_NXZ
?isInteger@DataPool@ScScript@@QBE_NH@Z
?isNumber@DataPool@ScScript@@QBE_NH@Z
?isReadOnly@DebugAPI@ScScript@@QAE_NABVVariant@ScCore@@ABVString@4@@Z
?isUInteger@DataPool@ScScript@@QBE_NH@Z
?isUpperCase@DataPool@ScScript@@SA_NH@Z
?isValidClassName@Callback@ScScript@@UAE_NAAVEngine@2@ABVString@ScCore@@@Z
?isValidLine@Script@ScScript@@SA_NABV12@H@Z
?leaveDebugMode@Callback@ScScript@@UAEXAAVEngine@2@_N@Z
?length@ListNode@ScScript@@QBEHXZ
?length@ScriptContainer@ScScript@@QBEJXZ
?load@ScriptContainer@ScScript@@QAEHAAVEngine@2@@Z
?lockRef@Engine@ScScript@@QAEXABVVariant@ScCore@@@Z
?makeXMLObject@LiveObjectAPI@ScScript@@QBEXABVXML@ScCore@@AAVVariant@4@@Z
?next@HiliteAPI@ScScript@@QAE_NPAVHiliteAPIData@2@AAUHiliteRange@2@@Z
?parse@ParserAPI@ScScript@@QBEPAVScopeNode@2@ABVString@ScCore@@@Z
?process@Preprocessor@ScScript@@QAEHABVString@ScCore@@0AAV34@PAVError@4@@Z
?put@Dispatcher@ScScript@@UAEXAAUArguments@2@@Z
?registerProperties@Dispatcher@ScScript@@QAEXHPBUPropEntry@2@@Z
?registerProperties@Dispatcher@ScScript@@QAEXHPBUPropEntry@2@ABVString@ScCore@@@Z
?registerProperties@Dispatcher@ScScript@@QAEXHPBUPropEntry@2@PBD@Z
?restoreError@Engine@ScScript@@UAEXABVError@ScCore@@@Z
?running@Callback@ScScript@@UAEXAAVEngine@2@@Z
?runtimeError@Callback@ScScript@@UAEXAAVEngine@2@@Z
?set@RuntimeError@ScScript@@QAEXABVError@ScCore@@@Z
?setBreakpoints@DebugAPI@ScScript@@QAEXPBV?$TSimpleArray@VBreakpointInfo@ScScript@@@ScCore@@@Z
?setCallback@Engine@ScScript@@QAEXPAVCallback@2@@Z
?setContextLevel@DebugAPI@ScScript@@QAEXH@Z
?setDebugFlags@Engine@ScScript@@QAEXH@Z
?setDebugLevel@Engine@ScScript@@QAEXH@Z
?setDictionary@Engine@ScScript@@UAEXPAVDictionary@ScCore@@@Z
?setError@Engine@ScScript@@UAEXABVError@ScCore@@@Z
?setError@Engine@ScScript@@UAEXABVRuntimeError@2@@Z
?setError@Engine@ScScript@@UAEXH@Z
?setError@Engine@ScScript@@UAEXHABVLiveObject@ScCore@@H_NH@Z
?setError@Engine@ScScript@@UAEXHABVString@ScCore@@H_N@Z
?setGlobalObject@LiveObjectAPI@ScScript@@QBEXAAVLiveObject@ScCore@@@Z
?setIncludePath@ParserAPI@ScScript@@QBEXABVString@ScCore@@@Z
?setIncludes@Preprocessor@ScScript@@QAEXABVString@ScCore@@@Z
?setLocalizer@Engine@ScScript@@QAEXPBVLocalizer@ScCore@@@Z
?setName@Engine@ScScript@@QAE_NABVString@ScCore@@@Z
?setOutputStream@DebugAPI@ScScript@@QAEXPAVFile@ScCore@@@Z
?setProfilingLevel@Engine@ScScript@@QAEXH@Z
?setSecurityFlags@FileDisp@ScScript@@QAEXH@Z
?setStackBottom@ESContext@ScScript@@QAEXH@Z
?setUserData@Dispatcher@ScScript@@QAEXPAVRoot@ScCore@@_N@Z
?setUserData@Engine@ScScript@@QAEXPAVRoot@ScCore@@_N@Z
?start@HiliteAPI@ScScript@@QAEPAVHiliteAPIData@2@ABVString@ScCore@@HH@Z
?stop@HiliteAPI@ScScript@@QAEXPAVHiliteAPIData@2@@Z
?subClass@Dispatcher@ScScript@@QAEXAAV12@@Z
?test_1@ValidateData@ScScript@@UAEXXZ
?test_2@ValidateData@ScScript@@UAEXXZ
?test_3@ValidateData@ScScript@@UAEXXZ
?throwException@ValidateData@ScScript@@SAXXZ
?toBinaryNode@BinaryNode@ScScript@@UBEPBV12@XZ
?toBinaryNode@Node@ScScript@@UBEPBVBinaryNode@2@XZ
?toLabelNode@LabelNode@ScScript@@UBEPBV12@XZ
?toLabelNode@Node@ScScript@@UBEPBVLabelNode@2@XZ
?toListNode@ListNode@ScScript@@UBEPBV12@XZ
?toListNode@Node@ScScript@@UBEPBVListNode@2@XZ
?toScopeNode@Node@ScScript@@UBEPBVScopeNode@2@XZ
?toScopeNode@ScopeNode@ScScript@@UBEPBV12@XZ
?toString@BinaryNode@ScScript@@UBE?AVString@ScCore@@XZ
?toString@LabelNode@ScScript@@UBE?AVString@ScCore@@XZ
?toString@ListNode@ScScript@@UBE?AVString@ScCore@@XZ
?toString@Node@ScScript@@UBE?AVString@ScCore@@XZ
?toString@ScopeNode@ScScript@@UBE?AVString@ScCore@@XZ
?toString@TernaryNode@ScScript@@UBE?AVString@ScCore@@XZ
?toString@UnaryNode@ScScript@@UBE?AVString@ScCore@@XZ
?toTernaryNode@Node@ScScript@@UBEPBVTernaryNode@2@XZ
?toTernaryNode@TernaryNode@ScScript@@UBEPBV12@XZ
?toUnaryNode@Node@ScScript@@UBEPBVUnaryNode@2@XZ
?toUnaryNode@UnaryNode@ScScript@@UBEPBV12@XZ
?undefinedError@Callback@ScScript@@UAE_NAAVEngine@2@ABVVariant@ScCore@@1AAV45@@Z
?unlockRef@Engine@ScScript@@QAEXABVVariant@ScCore@@@Z
?watchpoint@DebugAPI@ScScript@@QBE_NABVVariant@ScCore@@0W4WatchAction@12@@Z

Sections

.text
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_330_86de8937613707ee30e8bdb31e4b9ff5
_331_af4aa934fcec34e1f5c485cb0b85acaf
_332_dd35afd7ac1116cb534af39841e26069
_333_7e0b6e72e3f0e49e7a6a67e033c9ce66
_334_5de72dcd796b577f957beffa7a67632a
.js
_335_aa966fba2e468ff6cd478de3827ef61c
.js
_336_27d77326c5e8b6a0e870e0e4885a217a
.js
_337_c9532fa83723be72c46e520bc8bc7e89
_338_7d0567260ba21bfbb92a04a2df3f49cc
.js
_339_2b458d3ad07dd76f1983bf6344b4f84a
_33_bc7356ea14224c2d471f8c47fa6a8ec3
.dll windows:4 windows x86

194d4556bc904e5152edd4667e91d99a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:76:0a:a5:39:3b:7c:44:c9:da:43:c3:0a:e9:ed:18:36:af:00:31
Signer

Actual PE Digest

61:76:0a:a5:39:3b:7c:44:c9:da:43:c3:0a:e9:ed:18:36:af:00:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

recvfrom
sendto
select
__WSAFDIsSet
gethostname
connect
getprotobyname
setsockopt
getsockopt
inet_ntoa
recv
send
WSAStartup
WSACleanup
socket
bind
listen
getsockname
accept
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl
inet_addr
gethostbyname
WSAGetLastError
ioctlsocket
closesocket

winmm

timeGetTime

libeay32

ord281
ord280
ord654
ord467
ord657
ord1015
ord2291
ord298
ord224
ord254
ord181
ord2442
ord188
ord1951
ord566
ord578
ord579
ord1216
ord2023
ord2075
ord1653
ord1654
ord1958
ord223
ord227
ord680
ord653
ord641
ord1
ord808
ord809
ord784
ord2435
ord2436
ord2437
ord340
ord342
ord341
ord464
ord468
ord466
ord2254
ord585

ssleay32

ord48
ord78
ord108
ord242
ord61
ord157
ord43
ord58
ord127
ord130
ord110
ord116
ord113
ord172
ord12
ord243
ord6
ord15
ord141
ord21
ord90
ord87
ord31
ord96
ord86
ord8
ord76
ord74
ord183
ord235
ord17
ord222
ord30
ord24
ord75
ord49
ord126
ord5
ord77

zlib1

inflateInit_
inflate
inflateReset
inflateEnd
zlibVersion
inflateInit2_

msvcr80

_strnicmp
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
__sys_nerr
strerror
realloc
_fstat64
_lseeki64
memmove
tolower
toupper
fwrite
fputc
sprintf
_beginthreadex
getenv
isalpha
isalnum
_mktime64
fflush
_stricmp
_strdup
_open
strncpy
_read
_close
_itoa
_putenv
memcpy
_time64
_strtoi64
strrchr
atoi
sscanf
strchr
fclose
fgets
fopen
__iob_func
strncmp
fputs
fseek
fread
isspace
memchr
memset
_errno
strstr
strtol
_stat64
rand
srand
strcpy_s
calloc
free
strncpy_s
strtoul
sprintf_s
strcat_s
_gmtime64
isdigit
isxdigit
malloc

kernel32

FreeLibrary
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
FormatMessageA
SleepEx
GetTickCount
TerminateThread
GetExitCodeThread
SetLastError
CreateMutexA
CreateEventA
SetEvent
ReleaseMutex
WaitForSingleObject
GetCurrentProcess
DuplicateHandle
CloseHandle
ExpandEnvironmentStringsA
GetLastError
GetStdHandle
GetFileType
WaitForMultipleObjects
PeekNamedPipe
LoadLibraryA
GetSystemDirectoryA
ReadFile
GetProcAddress

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_reset
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_340_955826f913d53badd20d80f24a045a24
_341_64af90f4a3a18330ee80bde13bb23e40
_342_4c6098653f0278c4fac749ec8f2f8e89
_343_905135ef98b0294137d11e17a3941eb7
_344_5992cc7b633f60b72b65b07bc936c542
_345_5f263db363831eb93ea739a880bd5b11
_346_b011c208bbc3055db5d92f5b5b4a68da
_347_1d99de510f35378b18223d6feb2ecae5
_348_24903d6202e7214d988bec3eb728ddbf
_349_5f263db363831eb93ea739a880bd5b11
_34_ad691d607ffd27b8d83244b3cf928aab
.dll windows:4 windows x86

f46d08eb93ab873c6931f25effcc9aee

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

15:00:e1:4f:06:58:ea:f6:a1:57:fb:8a:ea:23:ed:82:d8:32:bc:b3
Signer

Actual PE Digest

15:00:e1:4f:06:58:ea:f6:a1:57:fb:8a:ea:23:ed:82:d8:32:bc:b3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

connect
recv
WSAGetLastError
shutdown
send
WSASetLastError
inet_ntoa
recvfrom
sendto
bind
listen
accept
ntohl
closesocket
WSACancelBlockingCall
WSACleanup
WSAStartup
gethostbyname
getsockopt
getservbyname
ntohs
htons
htonl
socket
setsockopt

gdi32

CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC

advapi32

RegisterEventSourceA
ReportEventA
DeregisterEventSource

user32

GetUserObjectInformationW
GetDesktopWindow
MessageBoxA
GetProcessWindowStation

zlib1

inflateEnd
deflateInit_
inflateInit_
deflate
inflate
deflateEnd

msvcr80

_fileno
_chmod
_getch
_write
_read
sprintf
wcsstr
_vsnprintf
vfprintf
__iob_func
abort
free
realloc
malloc
memcpy
memchr
_localtime64
_time64
memset
_gmtime64
strncpy
_errno
memmove
isxdigit
isdigit
fprintf
strstr
fputs
fclose
ferror
fread
fwrite
_getpid
fopen
_setmode
ftell
feof
fseek
fgets
atoi
perror
qsort
strcmp
_stat64i32
getenv
strerror
strchr
isalnum
isspace
strncmp
strtoul
strrchr
tolower
isupper
sscanf
exit
strtol
signal
printf
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
fflush

kernel32

InterlockedExchange
FlushConsoleInputBuffer
GetVersionExA
CloseHandle
GlobalMemoryStatus
Sleep
QueryPerformanceCounter
GetTickCount
SetLastError
LoadLibraryA
FreeLibrary
ExitProcess
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetFileType
GetVersion
GetLastError
GetCurrentThreadId
GetModuleHandleA
GetCurrentProcessId
FindClose
FindFirstFileA
FindNextFileA
GetThreadTimes
GetCurrentThread
GetStdHandle
GetProcAddress

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_cfbr_encrypt_block
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
ASN1_ANY_it
ASN1_BIT_STRING_asn1_meth
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_HEADER_free
ASN1_HEADER_new
ASN1_IA5STRING_asn1_meth
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_encode
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_sign
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_callback_ctrl
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_new
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_cipher
BIO_set_ex_data
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_add
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_memdup
BUF_strdup
BUF_strlcat
BUF_strlcpy
BUF_strndup
CAST_cbc_encrypt
CAST_cfb64_encrypt
CAST_decrypt
CAST_ecb_encrypt
CAST_encrypt
CAST_ofb64_encrypt
CAST_set_key
CBIGNUM_it
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
COMP_CTX_free
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_rle
COMP_zlib
CONF_dump_bio
CONF_dump_fp
CONF_free
CONF_get1_default_config_file
CONF_get_number
CONF_get_section
CONF_get_string
CONF_imodule_get_flags
CONF_imodule_get_module
CONF_imodule_get_name
CONF_imodule_get_usr_data
CONF_imodule_get_value
CONF_imodule_set_flags
CONF_imodule_set_usr_data
CONF_load
CONF_load_bio
CONF_load_fp
CONF_module_add
CONF_module_get_usr_data
CONF_module_set_usr_data
CONF_modules_finish
CONF_modules_free
CONF_modules_load
CONF_modules_load_file

Sections

.text
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_350_5f263db363831eb93ea739a880bd5b11
_351_6444a9cae6c8363f7ea12260e2ec1bdc
_352_d669ea72252082529bc5f87b973512ce
_353_0fa973d9fbad358bfdf079ab4fc28373
_354_0fa973d9fbad358bfdf079ab4fc28373
_355_5f263db363831eb93ea739a880bd5b11
_356_9246bb00e82620a56a71d96780fc8286
_357_d04b6ba33df05747c8022b979bdd6476
_358_84ff1e17317c8db648eafda176f412a5
_359_77fd99a8f5e4021af53f36a874599597
_35_ad1c8b1a6ff6765b230859f7bbfc76a9
.dll windows:5 windows x86

5a1daf17216486e731f70bc6a3c43767

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

fb:ed:97:aa:2a:4a:47:8b:e0:a6:09:f5:70:6e:a9:a2:20:81:cb:0c
Signer

Actual PE Digest

fb:ed:97:aa:2a:4a:47:8b:e0:a6:09:f5:70:6e:a9:a2:20:81:cb:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

VerLanguageNameW
WriteFile
CreateFileW
CloseHandle
FindFirstFileW
CreateProcessW
MoveFileExW
CompareFileTime
GetEnvironmentStringsW
LoadLibraryW
CopyFileW
GetDiskFreeSpaceW
FindClose
FreeEnvironmentStringsW
FindNextFileW
GetFileAttributesExW
GetVersionExA
DeleteFileW
GetExitCodeThread
MultiByteToWideChar
FindResourceA
LoadResource
FindResourceExA
SizeofResource
LockResource
GetModuleFileNameW
GetLocaleInfoA
GlobalMemoryStatusEx
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
WideCharToMultiByte
WriteProcessMemory
VirtualProtect
GetCurrentProcess
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetLastError
GetSystemDirectoryA
FreeLibrary
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
SuspendThread
InterlockedExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
Sleep

user32

EnumDisplayMonitors
GetSystemMetrics
GetMonitorInfoA

advapi32

CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
CryptHashData

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

ole32

CoCreateGuid

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?uncaught_exception@std@@YA_NXZ
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?width@ios_base@std@@QAEHH@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?bad@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
??Bios_base@std@@QBEPAXXZ
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?length@?$char_traits@D@std@@SAIPBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?max_size@?$allocator@_W@std@@QBEIXZ
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?max_size@?$allocator@D@std@@QBEIXZ
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??0?$allocator@_W@std@@QAE@ABV01@@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
??0?$allocator@_W@std@@QAE@XZ
??0?$allocator@D@std@@QAE@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??7ios_base@std@@QBE_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?classic@locale@std@@SAABV12@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?max@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@J@std@@SAJXZ
?precision@ios_base@std@@QAEHH@Z
?unsetf@ios_base@std@@QAEXH@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@ABV01@@Z
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
??0id@locale@std@@QAE@I@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

shlwapi

PathFileExistsW
PathIsDirectoryW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

msvcr90

_vscwprintf
wcsnlen
vswprintf_s
wcscmp
_time64
_beginthreadex
strnlen
_ismbcspace
vsprintf_s
_mbsinc
_vscprintf
_time32
strtok_s
_getpid
strftime
_gmtime32_s
_mbslwr_s
_mbsstr
_wgetenv_s
_wtoi
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
isspace
ispunct
_localtime64
abort
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
memcpy_s
_purecall
??_V@YAXPAX@Z
tolower
_wassert
??2@YAPAXI@Z
toupper
strcmp
memset
_invalid_parameter_noinfo
strncpy
strlen
malloc
free
memcmp
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
strncat
memmove_s
memcpy
??3@YAXPAX@Z
_stricmp
__CxxFrameHandler3
_CxxThrowException
strncpy_s

Exports

Exports

UTAddToGroup
UTAddToSession
UTCloseSession
UTGetDemographic
UTGetNonDefaultDemographic
UTGetOptIn
UTInitialize
UTLogEvent
UTNewDataGroup
UTOptInGet
UTOptInSet
UTSetDemographic
UTSetNonDefaultDemographic
UTSetOptIn
UTSetSerializationState
UTStartSession

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_360_fd27d22c06fd81e559b1dd8115468200
_361_47b3b3e9362cff7c25d2cd75c07b49ea
_362_18b347fa46924c275b40a6048f27d175
_363_a71af372272dd94b32c6db4b48a52813
_364_440bc89764092165e4d04b4bd1c4ade1
_365_3d5c3b910012266a48d3237ee2aac630
_366_1146dc46d164541b638996bf9b1539d1
_367_6b0a3b0538f1ac22fa1e738ae32c0cdd
_368_9bc51ed9cf4bc069376f5bbc23286add
_369_b40f072edb382b07d975213c1e49229a
_36_84cca7b4118d27787529ac1fed81608d
.exe windows:5 windows x86

ebe78eed18ef664e985ce9e23853e56b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:85:3d:2e:d9:8f:97:c6:06:aa:5d:19:00:6e:16:52:56:4e:43:27
Signer

Actual PE Digest

64:85:3d:2e:d9:8f:97:c6:06:aa:5d:19:00:6e:16:52:56:4e:43:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
PathIsDirectoryW

wininet

InternetCloseHandle
HttpOpenRequestW
InternetSetStatusCallbackW
InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetReadFile
InternetCrackUrlW
InternetQueryDataAvailable
InternetQueryOptionW
InternetOpenW
HttpQueryInfoW

kernel32

MultiByteToWideChar
FindFirstFileW
FreeLibrary
CompareFileTime
LoadLibraryW
CopyFileW
GetVersionExW
CreateFileW
GetProcAddress
FindClose
FindNextFileW
GetFileTime
GetFileAttributesExW
CloseHandle
FileTimeToLocalFileTime
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
SizeofResource
LockResource
GetLastError
ReadFile
GetModuleFileNameW
Sleep
HeapAlloc
HeapFree
GetProcessHeap
lstrlenW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
CreateMutexA
ReleaseMutex
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringA
LoadLibraryA
DeleteFileW
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapReAlloc
HeapSize
LocalFree
FormatMessageA
GetUserDefaultLCID
GetStringTypeExA
InterlockedCompareExchange

advapi32

RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameW

shell32

SHFileOperationW
SHGetFolderPathW
SHCreateDirectoryExW

ole32

CoCreateGuid

msvcp90

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?uncaught_exception@std@@YA_NXZ
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?close@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?open@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@JH@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??_D?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?classic@locale@std@@SAABV12@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?tolower@?$ctype@D@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?construct@?$allocator@D@std@@QAEXPADABD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z

msvcr90

_close
_time32
strtok_s
_getpid
strftime
_gmtime32_s
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
pow
signal
exit
sprintf_s
isspace
atoi
ispunct
_localtime64
_time64
rand
srand
__CxxFrameHandler3
_CxxThrowException
fwrite
ferror
fread
_errno
fclose
free
fputc
malloc
strerror
ftell
fprintf
_fdopen
fopen
sprintf
abort
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
iswspace
memcpy_s
wcslen
vswprintf_s
wcsnlen
_vscwprintf
wcscmp
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
??_V@YAXPAX@Z
_invalid_parameter_noinfo
tolower
strlen
??8type_info@@QBE_NABV0@@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memmove_s
memcpy
memmove
_wsopen_s

user32

LoadStringA

Sections

.text
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_370_a47fae45bd6117bd951a6b9ba296b4f0
_371_fbe02c6cf35d0a9144e2ab2a43cd0d16
.png
_372_d7b780898391e72d38735071dbceda4e
.png
_373_54ae251c47b454139da0c4926fa80b78
.xml
_374_ec5e8f613d52c6bd4f977e6878a0dcdf
.png
_375_b531a2a0176f499fd78945a7f7c0ac59
.png
_376_eb03a200b0676b581ef5be896713c972
.png
_377_68a98c85b702a7e4ed872b456b546cb5
.xml
_378_a63933856523caac27ea15667a79c973
.png
_379_eea2bf1f1b5b51c835aff7580edc0d6c
.png
_37_c7ad9b6b2f25203500c52e16fc777287
.dll windows:4 windows x86

e505a4edd4f511bde9992986218889e3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7f:8c:99:35:6f:71:87:b2:e1:92:b5:8c:bc:a0:77:2d:5b:34:01:e3
Signer

Actual PE Digest

7f:8c:99:35:6f:71:87:b2:e1:92:b5:8c:bc:a0:77:2d:5b:34:01:e3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

WideCharToMultiByte
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
SetFilePointer
MultiByteToWideChar
VirtualProtect
GetSystemInfo
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
HeapSize
FlushFileBuffers

Exports

Exports

Hw_Generate
Hw_GenerateEx
Hw_GetInfo
Hw_Initialize
Hw_ReadReg
Hw_SetInfo
Hw_Terminate
Hw_WriteReg

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_380_14a4f8ee4949709f915f660d04581e96
.png
_381_a7c432cbf7ed4e5f4b435d719b97d903
.xml
_382_0f469cb17d76fa953eccd77c03ae9743
.png
_383_5936fba0b5422cbd2792b86198829f0a
.png
_384_b326c11baf5804f93519a50f927d0e1e
.png
_385_5a9a719379153ca27df4a7591fbb06e0
.xml
_386_d34c14c88b2e0bc59e5a9aa5e64316bb
.png
_387_4bf961b081da3a2b4cc270b31dcaf7eb
.xml
_388_263529d40cb1d8caea269b7a6f358a83
_389_f4216bf8868e017e92cc114cb2465443
_38_946fe341c3a04d0db1c8c90f7d6ad884
.dll windows:4 windows x86

07af930fdf6e567c74deebede913f893

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

de:00:26:94:f7:07:78:ab:13:f7:de:2f:a3:c9:29:78:d6:bf:08:17
Signer

Actual PE Digest

de:00:26:94:f7:07:78:ab:13:f7:de:2f:a3:c9:29:78:d6:bf:08:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeEndPeriod
timeGetDevCaps
timeBeginPeriod

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

dsound

ord1

kernel32

GlobalFlags
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetCommandLineA
ExitProcess
TerminateProcess
ExitThread
CreateThread
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedIncrement
RaiseException
SetErrorMode
lstrcatA
InterlockedDecrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
SuspendThread
ResumeThread
SetThreadPriority
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
SetLastError
GlobalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
Sleep
GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
FreeLibrary
ResetEvent
WaitForSingleObject
LoadLibraryExA
GetProcAddress
QueryPerformanceCounter
SetEvent
CreateEventA
QueryPerformanceFrequency
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection

user32

SetPropA
GetClassInfoExA
GetClassLongA
CreateWindowExA
GetCapture
WinHelpA
RegisterWindowMessageA
DestroyMenu
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
SetWindowLongA
GetPropA
GetDlgItem
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowTextA
SetWindowTextA
GetClassNameA
wsprintfA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
UnregisterClassA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SendMessageA
SetCursor
PostMessageA
RemovePropA
PostQuitMessage
GetMenuState
GetTopWindow
DestroyWindow
GetMenuItemID
GetMenuItemCount
GetSubMenu
PeekMessageA
GetForegroundWindow
GetDesktopWindow
GetSysColorBrush

gdi32

Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetClipBox
TextOutA
RectVisible
PtVisible
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
GetDeviceCaps
ExtTextOutA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA

oleaut32

VariantInit
VariantChangeType
VariantClear

Exports

Exports

MaSmw_Check
MaSmw_Close
MaSmw_Ctrl
MaSmw_DevCtrl
MaSmw_GetInfo
MaSmw_Init
MaSmw_Open
MaSmw_Seek
MaSmw_Start
MaSmw_Stop
MaSmw_Term
MaSound_Close
MaSound_Control
MaSound_Create
MaSound_Delete
MaSound_DeviceControl
MaSound_DeviceControlEx
MaSound_Initialize
MaSound_Load
MaSound_Open
MaSound_Pause
MaSound_Restart
MaSound_Seek
MaSound_Standby
MaSound_Start
MaSound_Stop
MaSound_Terminate
MaSound_Unload
Mapi_CheckLoad
Mapi_CheckUnload
Mapi_DeviceControl
Mapi_DeviceControlEx
Mapi_Din_Close
Mapi_Din_Control
Mapi_Din_Open
Mapi_Din_Standby
Mapi_Din_Start
Mapi_Din_Stop
Mapi_Dtmf_Close
Mapi_Dtmf_Control
Mapi_Dtmf_Open
Mapi_Dtmf_Standby
Mapi_Dtmf_Start
Mapi_Dtmf_Stop
Mapi_EmuGenerate
Mapi_EmuGetDinInfo
Mapi_EmuGetInfo
Mapi_EmuInitialize
Mapi_EmuSetDinInfo
Mapi_EmuSetInfo
Mapi_EmuSetPath
Mapi_EmuTerminate
Mapi_GetContentsData
Mapi_GetKaraokeData
Mapi_GetMode
Mapi_GetOpenMode
Mapi_GetPhraseList
Mapi_Hvs_Close
Mapi_Hvs_Control
Mapi_Hvs_Load
Mapi_Hvs_Open
Mapi_Hvs_Seek
Mapi_Hvs_Standby
Mapi_Hvs_Start
Mapi_Hvs_Stop
Mapi_Hvs_Unload
Mapi_Initialize
Mapi_Melody_Close
Mapi_Melody_Control
Mapi_Melody_Load
Mapi_Melody_Open
Mapi_Melody_OpenArgInit
Mapi_Melody_Seek
Mapi_Melody_Standby
Mapi_Melody_Start
Mapi_Melody_Stop
Mapi_Melody_Unload
Mapi_Melody_WaitReady
Mapi_Phrase_AudioClose
Mapi_Phrase_AudioControl
Mapi_Phrase_AudioLoad
Mapi_Phrase_AudioOpen
Mapi_Phrase_AudioSeek
Mapi_Phrase_AudioStandby
Mapi_Phrase_AudioStart
Mapi_Phrase_AudioStop
Mapi_Phrase_AudioUnload
Mapi_Phrase_CheckData
Mapi_Phrase_GetInfo
Mapi_Phrase_GetLength
Mapi_Phrase_GetLink
Mapi_Phrase_GetPanpot
Mapi_Phrase_GetPosition
Mapi_Phrase_GetStatus
Mapi_Phrase_GetVolume
Mapi_Phrase_Kill
Mapi_Phrase_Pause
Mapi_Phrase_Play
Mapi_Phrase_RemoveData
Mapi_Phrase_Restart
Mapi_Phrase_Seek
Mapi_Phrase_SetData
Mapi_Phrase_SetEvHandler
Mapi_Phrase_SetLink
Mapi_Phrase_SetPanpot
Mapi_Phrase_SetVolume
Mapi_Phrase_Stop
Mapi_Rec_Close
Mapi_Rec_Control
Mapi_Rec_Load
Mapi_Rec_Open
Mapi_Rec_Standby
Mapi_Rec_Start
Mapi_Rec_Stop
Mapi_Rec_Unload
Mapi_ResetMode
Mapi_SetMode
Mapi_Stm_Close
Mapi_Stm_Control
Mapi_Stm_Load
Mapi_Stm_Open
Mapi_Stm_Seek
Mapi_Stm_Standby
Mapi_Stm_Start
Mapi_Stm_Stop
Mapi_Stm_Unload
Mapi_Terminate

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_390_2c5155a3bf3ade2bdb4151553779f6b6
.png
_391_f4bc062ce0eb1e3627a6e5aef9e9ec75
.png
_392_1b6e0c805acd8eea4badad39893756d3
.png
_393_da4fbeec81a2237de6ae0cdb14128ca9
.png
_394_5b2574088a90982eb5eb1b60f9d130f0
.dll windows:5 windows x86

03caf08892137e3c4f3df82aa0e98571

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

75:43:66:b7:ad:03:bf:d6:48:e7:b0:c1:85:a2:b2:3e:99:83:c5:2b
Signer

Actual PE Digest

75:43:66:b7:ad:03:bf:d6:48:e7:b0:c1:85:a2:b2:3e:99:83:c5:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSACleanup
WSAStartup
WSAAsyncSelect
WSAAddressToStringW
WSALookupServiceNextW
WSALookupServiceEnd
WSALookupServiceBeginW
getsockopt
connect
WSAGetLastError
recv
socket
closesocket
send
WSAStringToAddressW

bthprops.cpl

BluetoothFindRadioClose
BluetoothFindFirstRadio

kernel32

DeleteCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
EnterCriticalSection
CreateThread
LeaveCriticalSection
GetFileSize
ReadFile
CreateFileW
MultiByteToWideChar
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
WideCharToMultiByte
InitializeCriticalSection

user32

DestroyWindow
PostMessageW
RegisterClassExW
GetWindowLongW
SetWindowLongW
IsWindow
CreateWindowExW
DefWindowProcW

msvcp90

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$allocator@D@std@@QAE@XZ
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$allocator@_W@std@@QAE@XZ
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

msvcr90

_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
__CxxFrameHandler3
_CxxThrowException
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
memmove_s
_wassert
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
free

Exports

Exports

JSAEntry
JSAExit
JSAMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_395_e139ead0e5ce9da45383ad5819f47fcc
.js
_396_916c4fdcf9226e92123149469aa81ba6
.png
_397_57af7620d147ce6174a6c9fa8ea3a4b0
.xml
_398_f95c613992b0849bc0ec24e0072714d0
.js
_399_7db647d12e001513882493b955cbacef
_39_28f935a0a792ac2e3bcacd8fbcc3f17d
.dll windows:5 windows x86

73cecf906a8ef473bba53e9694186dcc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2c:79:52:2c:fd:04:88:d9:c7:f2:a0:ec:50:53:ec:89:99:40:ae:c7
Signer

Actual PE Digest

2c:79:52:2c:fd:04:88:d9:c7:f2:a0:ec:50:53:ec:89:99:40:ae:c7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr90

_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_decode_pointer
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_encoded_null
_malloc_crt
_encode_pointer
_except_handler4_common
?terminate@@YAXXZ
_CIsqrt
strtod
isalnum
ceil
tolower
??2@YAPAXI@Z
_tzset
_localtime64
_beginthreadex
_fpclass
malloc
_fpreset
isdigit
wcsncpy
iswalpha
towupper
towlower
getenv
_wremove
_wrename
_wrmdir
_wmkdir
_wgetcwd
_wchdir
_wfopen
toupper
floor
_CIlog10
modf
_CIpow
_errno
_CIfmod
sprintf
memmove
__RTDynamicCast
??0exception@std@@QAE@ABQBDH@Z
fread
fgetc
fflush
fwrite
ferror
clearerr
feof
ftell
fseek
fclose
strchr
memcpy
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
memset
__CxxFrameHandler3
??_V@YAXPAX@Z
??3@YAXPAX@Z
_purecall
free
realloc
?_type_info_dtor_internal_method@type_info@@QAEXXZ

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
QueryPerformanceFrequency
Sleep
ResumeThread
GetCurrentProcessId
GetLocaleInfoA
CreateEventA
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
FindFirstFileW
GetVersionExA
GetLogicalDrives
FindNextFileW
FindClose
CreateFileW
SetFilePointer
SetEndOfFile
CloseHandle
SetFileAttributesW
GetFileAttributesExW
GetFullPathNameW
GetUserDefaultLangID
MulDiv
VirtualQuery
SetErrorMode
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
FreeLibrary
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetCurrentThreadId

user32

PostMessageA
KillTimer
CallNextHookEx
SetTimer
UnhookWindowsHookEx
SetWindowLongA
SetWindowsHookExA
GetFocus
SetFocus
GetWindow
GetWindowLongA
GetWindowThreadProcessId
EnumWindows
MessageBoxIndirectW
GetForegroundWindow
GetActiveWindow
SystemParametersInfoA
SetForegroundWindow
AttachThreadInput
FindWindowA
GetClassNameA
GetWindowTextA
GetParent
EndDialog
SetWindowTextW
GetDC
ReleaseDC
DialogBoxParamW
GetDlgItem
SendMessageA
SetDlgItemTextW
IsWindowEnabled
GetDlgItemTextW

gdi32

CreateFontIndirectA
GetDeviceCaps
EnumFontFamiliesExA

shell32

ShellExecuteExW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

??0ASInterface@ScCore@@QAE@HABVString@1@AAVEngine@ScScript@@_N@Z
??0ASInterface@ScCore@@QAE@HABVString@1@PAVLiveObject@1@_N@Z
??0ASPackage@ScCore@@QAE@AAVASInterface@1@ABVString@1@@Z
??0Allocator@ScCore@@QAE@XZ
??0Array@ScCore@@QAE@ABV01@@Z
??0Array@ScCore@@QAE@I@Z
??0Array@ScCore@@QAE@XZ
??0BasicArray@ScCore@@IAE@XZ
??0Broadcaster@ScCore@@QAE@ABV01@@Z
??0Broadcaster@ScCore@@QAE@XZ
??0Callbacks@ScCore@@QAE@ABV01@@Z
??0Callbacks@ScCore@@QAE@XZ
??0ClassInfo@ScCore@@QAE@XZ
??0Cloneable@ScCore@@QAE@XZ
??0Context@ScCore@@IAE@XZ
??0ConversionTuple@ScCore@@QAE@ABV01@@Z
??0ConversionTuple@ScCore@@QAE@II_N@Z
??0ConversionTuple@ScCore@@QAE@XZ
??0CriticalSection@ScCore@@QAE@PAVLock@1@@Z
??0DataMessage@ScCore@@QAE@H@Z
??0DataMessage@ScCore@@QAE@HABVString@1@@Z
??0DataMessage@ScCore@@QAE@HABVVariant@1@@Z
??0DataMessage@ScCore@@QAE@HH@Z
??0DataMessage@ScCore@@QAE@HN@Z
??0DataMessage@ScCore@@QAE@HPAVLiveObject@1@@Z
??0DataMessage@ScCore@@QAE@HPBD@Z
??0DataMessage@ScCore@@QAE@HPBG@Z
??0DataMessage@ScCore@@QAE@H_N@Z
??0DialogModality@ScCore@@QAE@XZ
??0Dictionary@ScCore@@QAE@ABVString@1@H@Z
??0Dictionary@ScCore@@QAE@ABVString@1@_NH@Z
??0Dictionary@ScCore@@QAE@H@Z
??0Encoder@ScCore@@QAE@XZ
??0Error@ScCore@@QAE@ABV01@@Z
??0Error@ScCore@@QAE@HABVString@1@_N@Z
??0Error@ScCore@@QAE@XZ
??0ErrorInfo@ScCore@@AAE@ABV01@@Z
??0ErrorInfo@ScCore@@AAE@HABVString@1@PBVCloneable@1@_N@Z
??0ErrorInfo@ScCore@@AAE@HABVVariant@1@PBVCloneable@1@@Z
??0Event@ScCore@@QAE@XZ
??0File@ScCore@@QAE@ABV01@@Z
??0File@ScCore@@QAE@ABVFileSpec@1@@Z
??0FileFilter@ScCore@@QAE@ABVString@1@@Z
??0FileFilter@ScCore@@QAE@XZ
??0FileSpec@ScCore@@IAE@PAVSpecData@1@@Z
??0FileSpec@ScCore@@QAE@ABV01@@Z
??0FileSpec@ScCore@@QAE@ABV01@ABVString@1@@Z
??0FileSpec@ScCore@@QAE@ABVString@1@_N@Z
??0FileSpec@ScCore@@QAE@XZ
??0FileWrapper@ScCore@@QAE@ABV01@@Z
??0FileWrapper@ScCore@@QAE@ABVFileSpec@1@@Z
??0FileWrapper@ScCore@@QAE@ABVString@1@_N@Z
??0FileWrapper@ScCore@@QAE@XZ
??0Folder@ScCore@@QAE@ABV01@@Z
??0Folder@ScCore@@QAE@ABVFileSpec@1@@Z
??0HashTable@ScCore@@QAE@ABV01@@Z
??0HashTable@ScCore@@QAE@XZ
??0Heap@ScCore@@AAE@ABV01@@Z
??0Heap@ScCore@@QAE@XZ
??0Listener@ScCore@@QAE@ABV01@@Z
??0Listener@ScCore@@QAE@XZ
??0LiveArray@ScCore@@QAE@ABVArray@1@PBDH_N@Z
??0LiveArray@ScCore@@QAE@PBDH_N@Z
??0LiveBase@ScCore@@IAE@XZ
??0LiveCollection@ScCore@@QAE@PBDH_N@Z
??0LiveComponent@ScCore@@IAE@XZ
??0LiveMessage@ScCore@@QAE@ABVLiveObject@1@HAAVSimpleArray@1@@Z
??0LiveMessage@ScCore@@QAE@ABVLiveObject@1@HHABVArray@1@PAVError@1@@Z
??0LiveMessage@ScCore@@QAE@ABVLiveObject@1@HHABVVariant@1@PAVError@1@@Z
??0LiveMessage@ScCore@@QAE@ABVLiveObject@1@HHPAVError@1@@Z
??0LiveObject@ScCore@@QAE@ABVString@1@_N@Z
??0LiveObject@ScCore@@QAE@PBD_N@Z
??0LivePropertyManager@ScCore@@QAE@PBULivePropertyInfo@1@@Z
??0LivePropertyManager@ScCore@@QAE@XZ
??0Localizer@ScCore@@QAE@XZ
??0Lock@ScCore@@QAE@XZ
??0LockRef@ScCore@@QAE@PAVLock@1@@Z
??0Lockable@ScCore@@QAE@ABV01@@Z
??0Lockable@ScCore@@QAE@XZ
??0Message@ScCore@@QAE@H@Z
??0ParamInfo@ScCore@@QAE@XZ
??0Point@ScCore@@QAE@ABV01@@Z
??0Point@ScCore@@QAE@NN@Z
??0Point@ScCore@@QAE@XZ
??0Rect@ScCore@@QAE@ABV01@@Z
??0Rect@ScCore@@QAE@ABVPoint@1@0@Z
??0Rect@ScCore@@QAE@NNNN@Z
??0Rect@ScCore@@QAE@XZ
??0Refcountable@ScCore@@IAE@XZ
??0RegExp@ScCore@@QAE@ABV01@@Z
??0RegExp@ScCore@@QAE@ABVString@1@H@Z
??0RegExp@ScCore@@QAE@XZ
??0Root@ScCore@@QAE@XZ
??0ServiceInfo@ScCore@@QAE@XZ
??0SimpleArray@ScCore@@QAE@ABV01@@Z
??0SimpleArray@ScCore@@QAE@XZ
??0SparseArray@ScCore@@QAE@ABV01@@Z
??0SparseArray@ScCore@@QAE@XZ
??0String@ScCore@@QAE@ABV01@@Z
??0String@ScCore@@QAE@PBD@Z
??0String@ScCore@@QAE@PBDPBVEncoder@1@@Z
??0String@ScCore@@QAE@PBGH@Z
??0String@ScCore@@QAE@PBIH@Z
??0String@ScCore@@QAE@XZ
??0Thread@ScCore@@QAE@XZ
??0TypeInfo@ScCore@@QAE@XZ
??0UnitConverter@ScCore@@QAE@XZ
??0UnitConverterTable@ScCore@@QAE@XZ
??0UnitValue@ScCore@@QAE@ABV01@@Z
??0UnitValue@ScCore@@QAE@ABVString@1@@Z
??0UnitValue@ScCore@@QAE@I@Z
??0UnitValue@ScCore@@QAE@IN@Z
??0UnitValue@ScCore@@QAE@XZ
??0Variant@ScCore@@QAE@AAVLiveObject@1@H@Z
??0Variant@ScCore@@QAE@ABV01@@Z
??0Variant@ScCore@@QAE@ABVArray@1@@Z
??0Variant@ScCore@@QAE@ABVFileSpec@1@@Z
??0Variant@ScCore@@QAE@ABVPoint@1@@Z
??0Variant@ScCore@@QAE@ABVRect@1@@Z
??0Variant@ScCore@@QAE@ABVRegExp@1@@Z
??0Variant@ScCore@@QAE@ABVString@1@@Z
??0Variant@ScCore@@QAE@ABVUnitValue@1@@Z
??0Variant@ScCore@@QAE@H@Z
??0Variant@ScCore@@QAE@HABVString@1@PAVRoot@1@@Z
??0Variant@ScCore@@QAE@N@Z
??0Variant@ScCore@@QAE@PAVLiveObject@1@H@Z
??0Variant@ScCore@@QAE@PBD@Z
??0Variant@ScCore@@QAE@PBDPAVEncoder@1@@Z
??0Variant@ScCore@@QAE@PBG@Z
??0Variant@ScCore@@QAE@PBV01@@Z
??0Variant@ScCore@@QAE@XZ
??0Variant@ScCore@@QAE@_N@Z
??0WeakRefBase@ScCore@@IAE@XZ
??0XML@ScCore@@QAE@ABVString@1@@Z
??0XML@ScCore@@QAE@ABVString@1@ABV01@@Z
??0XML@ScCore@@QAE@H@Z
??0XML@ScCore@@QAE@HABVString@1@@Z
??1ASInterface@ScCore@@UAE@XZ
??1ASPackage@ScCore@@UAE@XZ
??1Allocator@ScCore@@UAE@XZ
??1ArgumentsMessage@ScCore@@UAE@XZ
??1Array@ScCore@@UAE@XZ
??1BasicArray@ScCore@@MAE@XZ
??1Broadcaster@ScCore@@QAE@XZ
??1Callbacks@ScCore@@UAE@XZ
??1ClassInfo@ScCore@@UAE@XZ
??1Cloneable@ScCore@@UAE@XZ
??1Context@ScCore@@IAE@XZ
??1CriticalSection@ScCore@@QAE@XZ
??1DataMessage@ScCore@@UAE@XZ
??1DialogModality@ScCore@@QAE@XZ
??1Dictionary@ScCore@@UAE@XZ
??1Encoder@ScCore@@UAE@XZ
??1Error@ScCore@@QAE@XZ
??1ErrorInfo@ScCore@@AAE@XZ
??1Event@ScCore@@QAE@XZ
??1File@ScCore@@UAE@XZ
??1FileFilter@ScCore@@UAE@XZ
??1FileSpec@ScCore@@QAE@XZ
??1FileWrapper@ScCore@@UAE@XZ
??1Folder@ScCore@@QAE@XZ
??1HashTable@ScCore@@QAE@XZ
??1Listener@ScCore@@UAE@XZ
??1LiveArray@ScCore@@UAE@XZ
??1LiveBase@ScCore@@MAE@XZ
??1LiveCollection@ScCore@@UAE@XZ
??1LiveComponent@ScCore@@MAE@XZ
??1LiveMessage@ScCore@@UAE@XZ
??1LiveObject@ScCore@@MAE@XZ
??1LivePropertyManager@ScCore@@UAE@XZ
??1Localizer@ScCore@@UAE@XZ
??1Lock@ScCore@@QAE@XZ
??1LockRef@ScCore@@QAE@XZ
??1Lockable@ScCore@@QAE@XZ
??1Message@ScCore@@UAE@XZ
??1ParamInfo@ScCore@@UAE@XZ
??1Refcountable@ScCore@@MAE@XZ
??1RegExp@ScCore@@QAE@XZ
??1Root@ScCore@@UAE@XZ
??1ServiceInfo@ScCore@@UAE@XZ
??1SimpleArray@ScCore@@QAE@XZ
??1SparseArray@ScCore@@QAE@XZ
??1String@ScCore@@QAE@XZ
??1Thread@ScCore@@UAE@XZ
??1TypeInfo@ScCore@@UAE@XZ
??1UnitConverter@ScCore@@MAE@XZ
??1Variant@ScCore@@QAE@XZ
??1WeakRefBase@ScCore@@IAE@XZ
??1XML@ScCore@@EAE@XZ
??2Heap@ScCore@@SAPAXI@Z
??2Heap@ScCore@@SAPAXIPAX@Z
??2Heap@ScCore@@SAPAXIPBDH@Z
??3Heap@ScCore@@SAXPAX0@Z
??3Heap@ScCore@@SAXPAX@Z
??3Heap@ScCore@@SAXPAXPBDH@Z
??4Array@ScCore@@QAEAAV01@ABV01@@Z
??4Array@ScCore@@QAEAAV01@H@Z
??4Broadcaster@ScCore@@QAEAAV01@ABV01@@Z
??4Callbacks@ScCore@@QAEAAV01@ABV01@@Z
??4ConversionTuple@ScCore@@QAEAAV01@ABV01@@Z
??4Dialogs@ScCore@@QAEAAV01@ABV01@@Z
??4Error@ScCore@@QAEAAV01@ABV01@@Z
??4File@ScCore@@QAEAAV01@ABV01@@Z
??4FileSpec@ScCore@@QAEAAV01@ABV01@@Z
??4FileUtils@ScCore@@QAEAAV01@ABV01@@Z
??4FileWrapper@ScCore@@QAEAAV01@ABV01@@Z
??4Folder@ScCore@@AAEAAV01@ABV01@@Z
??4Globals@ScCore@@QAEAAU01@ABU01@@Z
??4HashTable@ScCore@@QAEAAV01@ABV01@@Z
??4Heap@ScCore@@AAEAAV01@ABV01@@Z
??4InitTerm@ScCore@@QAEAAV01@ABV01@@Z
??4Listener@ScCore@@QAEAAV01@ABV01@@Z
??4Lockable@ScCore@@QAEAAV01@ABV01@@Z
??4Point@ScCore@@QAEAAV01@ABV01@@Z
??4Rect@ScCore@@QAEAAV01@ABV01@@Z
??4RegExp@ScCore@@QAEAAV01@ABV01@@Z
??4SimpleArray@ScCore@@QAEAAV01@ABV01@@Z
??4SparseArray@ScCore@@QAEAAV01@ABV01@@Z
??4String@ScCore@@QAEAAV01@ABV01@@Z
??4String@ScCore@@QAEAAV01@D@Z
??4String@ScCore@@QAEAAV01@G@Z
??4String@ScCore@@QAEAAV01@PBD@Z
??4String@ScCore@@QAEAAV01@PBG@Z
??4String@ScCore@@QAEAAV01@PBI@Z
??4Time@ScCore@@QAEAAV01@ABV01@@Z
??4UnicodeUtils@ScCore@@QAEAAV01@ABV01@@Z
??4UnitValue@ScCore@@QAEAAV01@ABV01@@Z
??4UnitValue@ScCore@@QAEAAV01@ABVString@1@@Z
??4Variant@ScCore@@QAEAAV01@AAVLiveObject@1@@Z
??4Variant@ScCore@@QAEAAV01@ABV01@@Z
??4Variant@ScCore@@QAEAAV01@ABVArray@1@@Z
??4Variant@ScCore@@QAEAAV01@ABVFileSpec@1@@Z
??4Variant@ScCore@@QAEAAV01@ABVPoint@1@@Z
??4Variant@ScCore@@QAEAAV01@ABVRect@1@@Z
??4Variant@ScCore@@QAEAAV01@ABVRegExp@1@@Z
??4Variant@ScCore@@QAEAAV01@ABVString@1@@Z
??4Variant@ScCore@@QAEAAV01@ABVUnitValue@1@@Z
??4Variant@ScCore@@QAEAAV01@H@Z
??4Variant@ScCore@@QAEAAV01@I@Z
??4Variant@ScCore@@QAEAAV01@N@Z
??4Variant@ScCore@@QAEAAV01@PAVLiveObject@1@@Z
??4Variant@ScCore@@QAEAAV01@PBD@Z
??4Variant@ScCore@@QAEAAV01@PBG@Z
??4Variant@ScCore@@QAEAAV01@_N@Z
??8Array@ScCore@@QBE_NABV01@@Z
??8FileSpec@ScCore@@QBE_NABV01@@Z
??8HashTable@ScCore@@QBE_NABV01@@Z
??8LiveObject@ScCore@@UBE_NABV01@@Z
??8Point@ScCore@@QBE_NABV01@@Z
??8Rect@ScCore@@QBE_NABV01@@Z
??8SimpleArray@ScCore@@QBE_NABV01@@Z
??8SparseArray@ScCore@@QBE_NABV01@@Z
??8String@ScCore@@QBE_NABV01@@Z
??8String@ScCore@@QBE_NPBD@Z
??8String@ScCore@@QBE_NPBG@Z
??8UnitValue@ScCore@@QBE_NABV01@@Z
??8Variant@ScCore@@QBE_NABV01@@Z
??8XML@ScCore@@QBE_NABV01@@Z
??9Array@ScCore@@QBE_NABV01@@Z
??9FileSpec@ScCore@@QBE_NABV01@@Z
??9HashTable@ScCore@@QBE_NABV01@@Z
??9Point@ScCore@@QBE_NABV01@@Z
??9Rect@ScCore@@QBE_NABV01@@Z
??9SimpleArray@ScCore@@QBE_NABV01@@Z
??9SparseArray@ScCore@@QBE_NABV01@@Z
??9String@ScCore@@QBE_NABV01@@Z
??9String@ScCore@@QBE_NPBD@Z
??9String@ScCore@@QBE_NPBG@Z
??9UnitValue@ScCore@@QBE_NABV01@@Z
??9Variant@ScCore@@QBE_NABV01@@Z
??9XML@ScCore@@QBE_NABV01@@Z
??AArray@ScCore@@QAEAAVVariant@1@I@Z
??ABasicArray@ScCore@@QBEABVVariant@1@I@Z
??AHashTable@ScCore@@QBEHABVString@1@@Z
??ASimpleArray@ScCore@@QAEAAHH@Z
??ASimpleArray@ScCore@@QBEHH@Z
??ASparseArray@ScCore@@QBEHH@Z
??BString@ScCore@@QBEPBGXZ
??HString@ScCore@@QBE?AV01@ABV01@@Z
??HString@ScCore@@QBE?AV01@D@Z
??HString@ScCore@@QBE?AV01@G@Z
??HString@ScCore@@QBE?AV01@PBD@Z
??HString@ScCore@@QBE?AV01@PBG@Z
??MFileSpec@ScCore@@QBE_NABV01@@Z
??MString@ScCore@@QBE_NABV01@@Z
??MString@ScCore@@QBE_NPBD@Z
??MString@ScCore@@QBE_NPBG@Z
??MUnitValue@ScCore@@QBE_NABV01@@Z
??MVariant@ScCore@@QBEHABV01@@Z
??NString@ScCore@@QBE_NABV01@@Z
??NString@ScCore@@QBE_NPBD@Z
??NString@ScCore@@QBE_NPBG@Z
??OString@ScCore@@QBE_NABV01@@Z
??OString@ScCore@@QBE_NPBD@Z
??OString@ScCore@@QBE_NPBG@Z
??PString@ScCore@@QBE_NABV01@@Z
??PString@ScCore@@QBE_NPBD@Z
??PString@ScCore@@QBE_NPBG@Z
??YArray@ScCore@@QAEAAV01@AAV01@@Z
??YArray@ScCore@@QAEAAV01@AAVFileSpec@1@@Z
??YArray@ScCore@@QAEAAV01@AAVLiveObject@1@@Z
??YArray@ScCore@@QAEAAV01@ABVPoint@1@@Z
??YArray@ScCore@@QAEAAV01@ABVRect@1@@Z
??YArray@ScCore@@QAEAAV01@ABVString@1@@Z
??YArray@ScCore@@QAEAAV01@ABVVariant@1@@Z
??YArray@ScCore@@QAEAAV01@H@Z
??YArray@ScCore@@QAEAAV01@N@Z
??YArray@ScCore@@QAEAAV01@PAVLiveObject@1@@Z
??YArray@ScCore@@QAEAAV01@PBD@Z
??YArray@ScCore@@QAEAAV01@_N@Z
??YHashTable@ScCore@@QAEAAV01@ABV01@@Z
??YSimpleArray@ScCore@@QAEAAV01@ABV01@@Z
??YSimpleArray@ScCore@@QAEAAV01@H@Z
??YSparseArray@ScCore@@QAEAAV01@ABV01@@Z
??YString@ScCore@@QAEAAV01@ABV01@@Z
??YString@ScCore@@QAEAAV01@D@Z
??YString@ScCore@@QAEAAV01@G@Z
??YString@ScCore@@QAEAAV01@PBD@Z
??YString@ScCore@@QAEAAV01@PBG@Z
??ZSimpleArray@ScCore@@QAEAAV01@H@Z
??_7ASInterface@ScCore@@6BListener@1@@
??_7ASInterface@ScCore@@6BLiveBase@1@@
??_7ASPackage@ScCore@@6BListener@1@@
??_7ASPackage@ScCore@@6BLiveBase@1@@
??_7Allocator@ScCore@@6B@
??_7Array@ScCore@@6B@
??_7BasicArray@ScCore@@6B@
??_7Callbacks@ScCore@@6B@
??_7ClassInfo@ScCore@@6B@
??_7Cloneable@ScCore@@6B@
??_7DataMessage@ScCore@@6B@
??_7Dictionary@ScCore@@6B@
??_7Encoder@ScCore@@6B@
??_7File@ScCore@@6B@
??_7FileFilter@ScCore@@6B@
??_7FileWrapper@ScCore@@6B@
??_7Listener@ScCore@@6B@
??_7LiveArray@ScCore@@6BListener@1@@
??_7LiveArray@ScCore@@6BLiveBase@1@@
??_7LiveBase@ScCore@@6B@
??_7LiveCollection@ScCore@@6BListener@1@@
??_7LiveCollection@ScCore@@6BLiveBase@1@@
??_7LiveComponent@ScCore@@6B@
??_7LiveMessage@ScCore@@6B@
??_7LiveObject@ScCore@@6BListener@1@@
??_7LiveObject@ScCore@@6BLiveBase@1@@
??_7LivePropertyManager@ScCore@@6B@
??_7Localizer@ScCore@@6B@
??_7Message@ScCore@@6B@
??_7ParamInfo@ScCore@@6B@
??_7Refcountable@ScCore@@6B@
??_7ServiceInfo@ScCore@@6B@
??_7Thread@ScCore@@6B@
??_7TypeInfo@ScCore@@6B@
??_7UnitConverter@ScCore@@6B@
??_7XML@ScCore@@6B@
??_FDictionary@ScCore@@QAEXXZ
??_FLiveArray@ScCore@@QAEXXZ
??_FLiveCollection@ScCore@@QAEXXZ
??_FLiveObject@ScCore@@QAEXXZ
??_FXML@ScCore@@QAEXXZ
??_UHeap@ScCore@@SAPAXI@Z
??_UHeap@ScCore@@SAPAXIPBDH@Z
??_VHeap@ScCore@@SAXPAX@Z
??_VHeap@ScCore@@SAXPAXPBDH@Z
?DebugAlert@ScCore@@YAXPBD0H@Z
?ScGetErrorMsg@@YAXHAAVString@ScCore@@@Z
?ScGetTopWindow@@YAPAUHWND__@@XZ
?acquire@Lock@ScCore@@QAEXXZ
?add@Encoder@ScCore@@SAXABV12@@Z
?add@UnitConverterTable@ScCore@@SAHQAPBVConversionTuple@2@IABVUnitConverter@2@@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@0@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@@Z
?add@XML@ScCore@@QAEPAV12@ABVString@2@ABV12@_N@Z
?addAlias@Encoder@ScCore@@SA_NABV12@PBD@Z
?addAlias@Encoder@ScCore@@SA_NPBD0@Z
?addComponent@LiveObject@ScCore@@UAEHAAVLiveComponent@2@@Z
?addFactory@LiveObject@ScCore@@SAHAAV12@H@Z
?addListener@Broadcaster@ScCore@@QAEXAAVListener@2@H@Z
?addRef@Refcountable@ScCore@@QBEXXZ
?addSubDictionary@Dictionary@ScCore@@QAEXAAV12@@Z
?addTable@Dictionary@ScCore@@UAEXABULivePropertyInfo@2@PBD1@Z
?addTables@Dictionary@ScCore@@UAEXPBULivePropertyInfos@2@@Z
?adjust@String@ScCore@@QAEXH@Z
?alert@Dialogs@ScCore@@SAXABVString@2@0@Z
?alert@Dialogs@ScCore@@SAXABVString@2@0_N@Z
?alert@Dialogs@ScCore@@SAXABVString@2@@Z
?allocMem@Allocator@ScCore@@UAEPAXIPBDH@Z
?ancestors_r@XML@ScCore@@QBEPAV12@_N@Z
?appToFront@FileUtils@ScCore@@SAXXZ
?append@SimpleArray@ScCore@@QAEXABV12@@Z
?append@SimpleArray@ScCore@@QAEXH@Z
?append@String@ScCore@@QAEXABV12@@Z
?append@String@ScCore@@QAEXD@Z
?append@String@ScCore@@QAEXG@Z
?append@String@ScCore@@QAEXPBDH@Z
?append@String@ScCore@@QAEXPBGH@Z
?apply@LiveObject@ScCore@@UBEHAAV12@HABVArray@2@AAVVariant@2@PAVError@2@@Z
?arrayIsEqual@XML@ScCore@@CA_NABV?$TISimpleArray@VXML@ScCore@@@2@0_N@Z
?asElementNode@XML@ScCore@@QAEPAV12@XZ
?asElementNode@XML@ScCore@@QBEPBV12@XZ
?assign@WeakRefBase@ScCore@@IAEPAVRefcountable@2@PAV32@@Z
?atExit@InitTerm@ScCore@@SAXP6AXXZ@Z
?attrsAreEqual@XML@ScCore@@CA_NABV?$TISimpleArray@VXML@ScCore@@@2@0_N@Z
?attrsToString@XML@ScCore@@ABEXAAVString@2@PAX@Z
?broadcast@Broadcaster@ScCore@@QBE_NAAVMessage@2@@Z
?broadcast@Broadcaster@ScCore@@QBE_NH@Z
?call@LiveComponent@ScCore@@UAEHAAVLiveObject@2@HABVArray@2@AAVVariant@2@PAVError@2@@Z
?call@LiveObject@ScCore@@QAEHABVString@2@AAVVariant@2@PAVError@2@@Z
?call@LiveObject@ScCore@@QAEHABVString@2@ABVArray@2@AAVVariant@2@PAVError@2@@Z
?call@LiveObject@ScCore@@QAEHABVString@2@ABVArray@2@PAVError@2@@Z
?call@LiveObject@ScCore@@QAEHABVString@2@PAVError@2@@Z
?call@LiveObject@ScCore@@QAEHH@Z
?call@LiveObject@ScCore@@QAEHHAAVVariant@2@@Z
?call@LiveObject@ScCore@@QAEHHABVArray@2@@Z
?call@LiveObject@ScCore@@UAEHHABVArray@2@AAVVariant@2@PAVError@2@@Z
?canInvoke@LiveObject@ScCore@@QBE_NABVString@2@@Z
?caseConvert@Localizer@ScCore@@SA?AVString@2@ABV32@_N@Z
?changePath@FileSpec@ScCore@@QAE_NABVString@2@@Z
?changePath@FileWrapper@ScCore@@QAE_NABVString@2@@Z
?checkError@FileWrapper@ScCore@@ABE_NH@Z
?checkSymbolSyntax@XML@ScCore@@SA_NABVString@2@@Z
?chooseFile@FileSpec@ScCore@@QAE_NABVString@2@_NPBV32@PAVFileFilter@2@PAVArray@2@@Z
?chooseFolder@FileSpec@ScCore@@QAE_NABVString@2@@Z
?chooseSaveFile@FileSpec@ScCore@@QAE_NABVString@2@PBV32@PAVFileFilter@2@@Z
?clear@SimpleArray@ScCore@@QAEXXZ
?clear@String@ScCore@@QAEXXZ
?clone@FileWrapper@ScCore@@UBEHPAPAVCloneable@2@_N@Z
?clone@LiveObject@ScCore@@UBEHPAPAV12@_N@Z
?cloneContent@LiveObject@ScCore@@IBEHAAV12@_N@Z
?close@File@ScCore@@UAEHXZ
?close@FileWrapper@ScCore@@QAE_NXZ
?cmp@Point@ScCore@@QBEHABV12@@Z
?cmp@Rect@ScCore@@QBEHABV12@@Z
?cmp@String@ScCore@@QBEHABV12@@Z
?cmp@String@ScCore@@QBEHPBD@Z
?cmp@String@ScCore@@QBEHPBG@Z
?cmp@UnitValue@ScCore@@QBEHABV12@@Z
?colorPicker@Dialogs@ScCore@@SAHH@Z
?combine@Rect@ScCore@@QAE_NABV12@0@Z
?compare@Localizer@ScCore@@SAHABVString@2@0@Z
?compare@Variant@ScCore@@QBEHABV12@@Z
?confirm@Dialogs@ScCore@@SA_NABVString@2@0_N@Z
?confirm@Dialogs@ScCore@@SA_NABVString@2@_N@Z
?contains@XML@ScCore@@QBE_NABV12@_N@Z
?convert@UnitConverterTable@ScCore@@SAHABVUnitValue@2@IAANPAVError@2@@Z
?convert@UnitConverterTable@ScCore@@SAHABVUnitValue@2@IAAV32@PAVError@2@@Z
?convert@UnitValue@ScCore@@QAE_NI@Z
?convert@UnitValue@ScCore@@QBE_NIAAV12@@Z
?convert@Variant@ScCore@@QAEXW4VariantType@2@@Z
?convertDataTypeToString@TypeInfo@ScCore@@SAPBDW4VariantType@2@@Z
?convertLF@String@ScCore@@QAEHW4CRLFEncoding@12@@Z
?convertToBase@UnitConverterTable@ScCore@@SAHABVUnitValue@2@AAV32@PAVError@2@@Z
?convertToBase@UnitValue@ScCore@@QAEHXZ
?convertToBase@UnitValue@ScCore@@QBEHAAV12@@Z
?copy@FileWrapper@ScCore@@QBE_NABVString@2@@Z
?copy@SimpleArray@ScCore@@QBE?AV12@HH@Z
?copy@XML@ScCore@@ABEPAV12@PBV12@0_N@Z
?copyArray@XML@ScCore@@CAPAV?$TISimpleArray@VXML@ScCore@@@2@PBV12@PBV32@@Z
?copyTo@File@ScCore@@UBEHABVFileSpec@2@@Z
?copy_r@XML@ScCore@@QBEPAV12@_N@Z
?create@Folder@ScCore@@QAEHXZ
?create@LiveObject@ScCore@@SAHPAPAV12@ABVString@2@H@Z
?create@LiveObject@ScCore@@SAHPAPAV12@HH@Z
?createASObject@ASInterface@ScCore@@QAEPAVLiveObject@2@ABVString@2@ABVArray@2@_NPAVError@2@@Z
?createAlias@FileSpec@ScCore@@QAEHABVString@2@_N@Z
?createAlias@FileWrapper@ScCore@@QAE_NABVString@2@_N@Z
?createCaptureList@RegExp@ScCore@@QBEPAVCapture@2@XZ
?createIDForName@LiveObject@ScCore@@UAEHABVString@2@AAHH@Z
?createLocal@LiveObject@ScCore@@UAEHPAPAV12@ABVString@2@H@Z
?createLock@Lockable@ScCore@@QAEXXZ
?createProperty@LiveObject@ScCore@@MAEPAVLiveProperty@2@ABVString@2@HI@Z
?decode@FileWrapper@ScCore@@SAXABVString@2@AAV32@@Z
?decode@String@ScCore@@QAEHPBDHPBVEncoder@2@@Z
?decode@String@ScCore@@QAEHPBI@Z
?decodeURI@String@ScCore@@QAE_NXZ
?decrement@Lock@ScCore@@SAHAAH@Z
?defineError@Error@ScCore@@SAXHABVString@2@PBD@Z
?defineIDForName@LiveObject@ScCore@@UAEHABVString@2@HH@Z
?deleteAt@Array@ScCore@@QAEXI@Z
?deleteByIndex@LiveCollection@ScCore@@UAEHI@Z
?deleteByIndex@LiveComponent@ScCore@@UAEHAAVLiveObject@2@I@Z
?deleteDynamicProperties@LiveObject@ScCore@@UAEX_N@Z
?deleteID@LiveObject@ScCore@@UAEHH@Z
?descendants_r@XML@ScCore@@QBEPAV12@XZ
?doErase@Variant@ScCore@@IAEXXZ
?doGetDouble@Variant@ScCore@@IBENXZ
?doIsFinite@Variant@ScCore@@IBE_NXZ
?doIsMinus0@Variant@ScCore@@IBE_NXZ
?doIsNaN@Variant@ScCore@@IBE_NXZ
?doSetNumAttrs@Variant@ScCore@@IBEXXZ
?doToString@Variant@ScCore@@IBEXH@Z
?emptyString@String@ScCore@@SAABV12@XZ
?enableUI@InitTerm@ScCore@@SAX_N@Z
?encode@FileWrapper@ScCore@@SAXABVString@2@AAV32@@Z
?encode@String@ScCore@@QBEHAAPBDAAHPBVEncoder@2@@Z
?encode@String@ScCore@@QBEPBDPBVEncoder@2@@Z
?encodeURI@String@ScCore@@QAE_NPBD@Z
?encodeURI@String@ScCore@@QAE_NPBG@Z
?encodeUtf32@String@ScCore@@QBEPBIXZ

Sections

.text
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_400_7a7e356b98f53b495edd747bd4c2e5ee
_401_08b9b510d91d44986b6a72d3d3a9ddf4
_402_c1473df5091ac8422aaf3b94ffc96a01
_403_c8e71056c9640f9f3dfbbed656812259
_404_8affd689070d2edbd17f50c0383d4fd9
_405_114abf69c249df4203055b68ac9dda23
_406_f89335ba3aceaaf6197138170ef75a0a
_407_64cf466e4080c11fcf75a15580a7440c
_408_0686080bb9825b1cf0b7116c3ebaa014
_409_aa89d77d7e4fb4c84eaa0a0898e36658
_40_dae8ec561b9d9691898ffa12477a7ada
.dll windows:5 windows x86

45530c231ddef0f7fc6e56d36e10906d

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2c
Certificate

Issuer

CN=TC TrustCenter Class 2-II L1 CA IV,OU=TC TrustCenter Class 2-II L1 CA,O=TC TrustCenter GmbH,C=DE

Not Before

17-06-2009 15:22

Not After

31-12-2025 19:59

Subject

CN=TC TrustCenter Authenticode Timestamp II,OU=Timestamp,O=TC TrustCenter,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:82:dc:4a:62:17:9a:20:0b:08:64:9a:36:40:5a:3d:4f:e3:62:40
Signer

Actual PE Digest

7b:82:dc:4a:62:17:9a:20:0b:08:64:9a:36:40:5a:3d:4f:e3:62:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmNotifyIME
ImmGetContext
ImmGetCompositionStringW
ImmGetCompositionFontW
ImmGetOpenStatus
ImmReleaseContext

oledlg

OleUIInsertObjectW

shlwapi

PathRemoveBackslashW
PathRemoveBackslashA
PathAppendW
PathAddBackslashW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

comctl32

ImageList_Add
ImageList_Create
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Replace
ImageList_Draw
ImageList_Remove
ImageList_DrawEx
ImageList_GetIconSize
InitCommonControlsEx
ImageList_ReplaceIcon

kernel32

GlobalMemoryStatus
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GlobalAddAtomA
GlobalGetAtomNameA
GlobalUnlock
GlobalLock
GlobalSize
GetCurrentProcessId
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree
FormatMessageA
CreateDirectoryW
GlobalAddAtomW
FindResourceW
GetModuleFileNameW
LoadLibraryW
GlobalDeleteAtom
GetLocaleInfoW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageW
GetLastError
SetFilePointer
ReadFile
WriteFile
GetFileSize
SetEndOfFile
CloseHandle
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
CreateFileW
GetSystemTimeAsFileTime
FindNextFileW
FindClose
GetCurrentDirectoryW
GetCurrentDirectoryA
GetDiskFreeSpaceW
GetCompressedFileSizeW
SetFileAttributesW
GetFileAttributesW
GetFileTime
SetFileTime
DeleteFileW
RemoveDirectoryW
FindFirstFileW
SetCurrentDirectoryW
GetFileAttributesA
SetCurrentDirectoryA
MultiByteToWideChar
CreateDirectoryA
MoveFileW
SystemTimeToFileTime
FileTimeToSystemTime
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
Sleep
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
WaitForSingleObject
PulseEvent
CreateMutexW
ReleaseMutex
CreateMutexA
CreateSemaphoreW
ReleaseSemaphore
CreateThread
ResumeThread
TerminateThread
SuspendThread
GetThreadPriority
SetThreadPriority
GetSystemTime
MulDiv
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalFree
GetACP
lstrcpyW
LoadResource
FindResourceExW
GetUserDefaultUILanguage
GetModuleHandleA
SizeofResource
LockResource
GetProfileStringW
GetLocaleInfoA
GetLocalTime
GetDateFormatA
GetComputerNameW
EnumResourceNamesW
GetCurrentThreadId

user32

EndPaint
GetDCEx
RedrawWindow
FrameRect
RegisterClassW
GetParent
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ScrollWindowEx
DrawIconEx
ShowScrollBar
GetScrollInfo
BeginPaint
GetClipCursor
wsprintfW
CreateAcceleratorTableW
DestroyAcceleratorTable
GetMenuItemInfoW
DrawMenuBar
SetMenu
DestroyMenu
CreatePopupMenu
CreateMenu
SetMenuItemInfoW
InsertMenuItemW
TrackPopupMenu
PostMessageA
GetWindow
GetMenu
ValidateRect
SetRect
IntersectRect
GetActiveWindow
IsZoomed
GetWindowTextW
SetForegroundWindow
GetWindowPlacement
MessageBeep
GetCaretBlinkTime
SetScrollPos
GetMessageTime
GetAsyncKeyState
DispatchMessageW
PeekMessageW
ClipCursor
MonitorFromRect
InvalidateRgn
CascadeWindows
EnumDisplayMonitors
GetScrollPos
RemoveMenu
SetLayeredWindowAttributes
GetClassInfoW
CreateIconFromResourceEx
GetIconInfo
InvertRect
DestroyCursor
LoadImageW
DrawStateW
LoadCursorW
SetClipboardData
IsClipboardFormatAvailable
GetClipboardData
GetClipboardFormatNameW
OpenClipboard
EmptyClipboard
CloseClipboard
RegisterClipboardFormatW
WindowFromPoint
GetDesktopWindow
DestroyIcon
GetWindowDC
DrawTextA
GetWindowTextLengthW
GetKeyboardLayout
SendMessageA
SetScrollInfo
KillTimer
SetTimer
AdjustWindowRectEx
TrackMouseEvent
IsWindowVisible
CreateWindowExW
SetWindowLongW
GetSysColorBrush
FillRect
UpdateWindow
GetFocus
SetParent
DestroyWindow
GetSystemMetrics
GetDoubleClickTime
GetCapture
ReleaseCapture
ClientToScreen
SetCapture
GetWindowRect
DrawTextW
GetCursorPos
ScreenToClient
GetClientRect
PtInRect
GetSysColor
DrawEdge
DrawFrameControl
InflateRect
DrawFocusRect
MessageBoxW
MessageBoxA
LoadStringW
MsgWaitForMultipleObjectsEx
TranslateMDISysAccel
CallMsgFilterW
TranslateAcceleratorW
TranslateMessage
SetWindowTextW
UnregisterClassW
EnableMenuItem
WinHelpW
SetWindowPos
LockWindowUpdate
SetFocus
BringWindowToTop
SetActiveWindow
CallWindowProcW
ShowWindow
IsIconic
GetDlgItem
SetCursor
GetWindowLongW
DefMDIChildProcW
DefFrameProcW
DefWindowProcW
MapVirtualKeyW
GetKeyboardState
ToUnicode
IsChild
IsWindowEnabled
EnableWindow
GetForegroundWindow
GetWindowThreadProcessId
SystemParametersInfoW
MonitorFromPoint
GetMonitorInfoW
UnpackDDElParam
ReuseDDElParam
PostMessageW
SendMessageW
GetDC
InvalidateRect
ReleaseDC
GetKeyState
GetClassNameA

gdi32

CreatePatternBrush
Ellipse
Arc
InvertRgn
FillRgn
GetCurrentPositionEx
GdiFlush
CreatePalette
CreateFontIndirectW
GetTextFaceA
BitBlt
SetStretchBltMode
StretchBlt
DeleteDC
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SetWorldTransform
GetStockObject
CreateRectRgn
CombineRgn
SetROP2
GetWorldTransform
GetRgnBox
OffsetRgn
TranslateCharsetInfo
GetDeviceCaps
CreatePen
MoveToEx
LineTo
CreateBitmap
SetBkColor
SetTextColor
SelectObject
PatBlt
SetViewportOrgEx
SetBkMode
DeleteObject
RemoveFontResourceW
AddFontResourceW
CreateHalftonePalette
SelectPalette
RealizePalette
GetClipRgn
SelectClipRgn
ExtCreateRegion
GetBkColor
CreateRectRgnIndirect
ExcludeClipRect
LPtoDP
GetWindowOrgEx
SetBrushOrgEx
CreateDIBPatternBrushPt
RectVisible
StartDocW
EndDoc
EndPage
StartPage
ModifyWorldTransform
SetGraphicsMode
CreateDCW
GetRegionData
RoundRect
GetCurrentObject
Polygon
EnumFontFamiliesExW
GetTextMetricsW
CreateSolidBrush
DPtoLP
GetGraphicsMode
SetWindowOrgEx
FrameRgn
CreateDIBSection
GetPaletteEntries
SetPaletteEntries
GetDIBColorTable
SetDIBColorTable
BeginPath
AbortPath
PathToRegion
EndPath
SetRectRgn
PtInRegion
SetDIBitsToDevice
GetClipBox

comdlg32

PageSetupDlgW
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegOpenKeyExW
GetUserNameW
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegSetValueExA
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
RegSetValueW
RegCreateKeyW
RegSetValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA

shell32

SHGetPathFromIDListA
SHGetFolderPathW
SHGetMalloc
SHBrowseForFolderW
SHGetFileInfoW
DragQueryFileW
SHChangeNotify
SHGetDesktopFolder
SHGetPathFromIDListW

ole32

ReleaseStgMedium
OleSetContainedObject
DoDragDrop
RegisterDragDrop
CoCreateInstance
OleUninitialize
OleInitialize

oleaut32

VariantClear
VariantChangeType
SysFreeString
VariantInit
DispGetParam
SysAllocString

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

__CxxFrameHandler3
_purecall
strncpy
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
??_V@YAXPAX@Z
_wtoi
sprintf
_wcsicmp
isalpha
isupper
islower
isdigit
isxdigit
isspace
ispunct
isalnum
_wcsnicmp
isprint
isgraph
iscntrl
toupper
tolower
_CxxThrowException
wcsncpy
_wsplitpath
_splitpath
towupper
iswdigit
memmove
memcpy
qsort
iswcntrl
towlower
_wtol
_CIcos
_CIsin
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
exit
?_set_new_mode@@YAHH@Z
_snprintf
atol
atof
strncmp
_strupr_s
_strlwr_s
vsprintf_s
_vscprintf
iswspace
wcstod
sscanf
wcsncmp
_snwprintf
_wcsupr_s
_wcslwr_s
vswprintf_s
_vscwprintf
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__RTDynamicCast
_CIsqrt
strstr
floor
_CIpow
_wcsicoll
atoi
_control87
ceil
longjmp
abort
_setjmp3
memcmp
abs
fabs
pow
malloc
free
strtod
strlen
strcpy
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_malloc_crt
__clean_type_info_names_internal
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_stricmp
_strnicmp
??0exception@std@@QAE@ABV01@@Z

Sections

.text
Size: 894KB - Virtual size: 893KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_410_a688edec33d23b4b5adadbf6e8ceaecc
_411_706270111d62b3ff7b1a9d232cb04e8a
_412_97ce1dd142a383fedb6a21ea329bc3db
_413_0ae186e7c6c7df3a6b0d02a0ca394e7c
_414_db45321e3c5bda9a1d66b883c726a890
_415_8be32590d300f9c9b96e4a0470756057
_416_3dada2d685d78133fd5f6a1bea616680
_417_8c464d0795294bee24b2e07b0975a9a7
.png
_418_2b4a69ef1df5b2dcb5f52faac78ea3d0
.js
_419_7c6d6c12bbe25578a9f38d11c58bb60b
.xml
_41_c9df4c9c9c6509488a0b3282355ed41a
.dll windows:4 windows x86

81b39c5342446e415e5842838f7bd572

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5a:a0:1b:8f:fd:61:18:d0:27:95:7a:35:3d:37:8d:e4:97:ca:1e:2c
Signer

Actual PE Digest

5a:a0:1b:8f:fd:61:18:d0:27:95:7a:35:3d:37:8d:e4:97:ca:1e:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libeay32

ord269
ord3109
ord2630
ord910
ord2411
ord754
ord490
ord222
ord168
ord169
ord85
ord52
ord167
ord2201
ord289
ord493
ord911
ord464
ord3245
ord354
ord2936
ord3244
ord323
ord3067
ord2894
ord961
ord89
ord109
ord202
ord3239
ord866
ord110
ord3422
ord2929
ord3644
ord3570
ord2578
ord111
ord3010
ord3480
ord2924
ord3459
ord3512
ord3608
ord3575
ord3663
ord123
ord201
ord118
ord3666
ord219
ord498
ord285
ord635
ord912
ord909
ord3724
ord313
ord495
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3719
ord216
ord206
ord497
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord481
ord3729
ord333
ord2915
ord256
ord1096
ord1097
ord2589
ord1145
ord1144
ord1081
ord2292
ord622
ord627
ord657
ord653
ord623
ord2784
ord965
ord964
ord2572
ord2747
ord188
ord3758
ord3767
ord3647
ord3766
ord3365
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3559
ord3399
ord636
ord914
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord316
ord629
ord892
ord74
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord679
ord2524
ord3595
ord1023
ord3505
ord401
ord93
ord3396
ord3657
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord86
ord88
ord1101
ord293
ord322
ord2996
ord3155
ord2927
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord181
ord654
ord290
ord281
ord2821
ord641
ord176
ord857
ord2206
ord252
ord903
ord1654
ord1653
ord904
ord901
ord3704
ord905

msvcr80

__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
_errno
__iob_func
fprintf
strncmp
memmove
memset
memcpy
_time64
_adjust_fdiv

kernel32

GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_420_fda59d9e26ef6ea9e22a114327c59bb0
_421_feedf23cfc3d7efd855bcf195b08d0e2
_422_3836b5ee2ac412f9af10db90edabbcbf
_423_c4ab615180685a344e00a1bbd73589f7
_424_d96b910548be2656e776fd0d32789bdb
_425_8a3152359db3ccb34fba87fea76f226b
_426_045912f87f61a5b2cb9c8729bd963e97
_427_9355f85be8e64b256404121283f049ac
_428_6641da33c7ba85c628776fe49014b6a7
_429_e1fbf71c86a82b6bb5b9504ba9cbac78
_42_798dc0e54c8992ef4901df177e3b220c
.dll windows:5 windows x86

dfffdccd3cd36fb9750763e01f87cc9e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

83:99:d8:eb:89:f8:35:76:ab:83:fb:b5:28:e6:88:a6:70:fb:70:43
Signer

Actual PE Digest

83:99:d8:eb:89:f8:35:76:ab:83:fb:b5:28:e6:88:a6:70:fb:70:43

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership
SetNamedSecurityInfoW
SetEntriesInAclW

netapi32

NetApiBufferFree
NetWkstaUserGetInfo

kernel32

SetEndOfFile
GetProcessHeap
GetLocalTime
CreateProcessW
GetLastError
SystemTimeToFileTime
InterlockedDecrement
WaitForSingleObject
TerminateThread
FileTimeToSystemTime
GetExitCodeThread
CloseHandle
CreateThread
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
InterlockedIncrement
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
RaiseException
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleFileNameA
GetTimeZoneInformation
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
FreeLibrary
InterlockedExchange
LoadLibraryA
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
GetModuleHandleA
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
ReleaseMutex
CreateMutexA
DeleteFileW
CreateFileW
CopyFileW
FileTimeToLocalFileTime
GetFileTime
SetFileAttributesW
LocalFree
GetVersionExW
LoadLibraryW
CreateDirectoryW
lstrlenA
InitializeCriticalSection
InterlockedCompareExchange

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW

ole32

CoInitializeEx
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoUninitialize
CoCreateInstance

oleaut32

SysStringByteLen
SysFreeString
VariantInit
SysAllocString
VariantClear
SysAllocStringByteLen

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathIsFileSpecW
SHGetValueW

Exports

Exports

UpdaterNotificationsGetLEIDList
UpdaterNotificationsGetLibVersion
UpdaterNotificationsIsUpdaterEnabled
UpdaterNotificationsLaunchAAMNotifierOnQuitIfReqd
UpdaterNotificationsRelease

Sections

.text
Size: 450KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_430_f70dfd55bdc3b42cd1e531240ea3a612
_431_8c18fe63920123b30a4f368f627bf4fe
_432_c347d155e81f6f89d1e7ab2d29b57af9
_433_3ebc47964dbc3b455fe95fcb51d096f6
_434_7327ccafc2ba7a30977a0e3b5ae770bd
_435_84caa4051c616ecf0892b1335e42c833
_436_1e2702eb2c1dd807d4c30ecb049bcc96
_437_2d0c9e4ac117d3dca0d1a061125095ea
_438_53eac357fb15fd2c6e6e971cf877609d
.png
_439_6eb4c40178a9a5889dc87b3d1237cf07
.js
_43_3090501a1336f734c1aac93177f1206f
.dll windows:5 windows x86

89799b5541867dcd21d6faaddc8d7278

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2c
Certificate

Issuer

CN=TC TrustCenter Class 2-II L1 CA IV,OU=TC TrustCenter Class 2-II L1 CA,O=TC TrustCenter GmbH,C=DE

Not Before

17-06-2009 15:22

Not After

31-12-2025 19:59

Subject

CN=TC TrustCenter Authenticode Timestamp II,OU=Timestamp,O=TC TrustCenter,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

82:50:e3:8a:0c:f4:57:05:ba:74:26:f3:79:af:2a:f4:2c:b3:2c:6a
Signer

Actual PE Digest

82:50:e3:8a:0c:f4:57:05:ba:74:26:f3:79:af:2a:f4:2c:b3:2c:6a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetCurrentProcessId
GetFileType
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetFullPathNameA
GetCurrentDirectoryA
GetFullPathNameW
FlushFileBuffers
LCMapStringA
GetLocaleInfoA
GetStringTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
SetStdHandle
CreateDirectoryA
FindFirstFileW
GetDriveTypeW
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetDateFormatA
GetTimeFormatA
LoadLibraryA
InterlockedExchange
ExitProcess
Sleep
GetModuleHandleW
GetTimeZoneInformation
HeapReAlloc
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
GetSystemTimeAsFileTime
GetLastError
FormatMessageW
LocalFree
GetFileAttributesA
GetVersionExW
MultiByteToWideChar
GetLocaleInfoW
GetCurrentDirectoryW
SetCurrentDirectoryW
FreeLibrary
GetFileAttributesExW
GetModuleHandleA
VirtualProtect
CreateFileW
GetFileSize
ReadFile
LoadLibraryW
GetProcAddress
FoldStringW
LCMapStringW
InterlockedDecrement
InterlockedIncrement
GetSystemInfo
GetStringTypeW
GetCurrentThread
GetThreadTimes
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteFileA
CreateFileA
SetFilePointer
WriteFile
CloseHandle
VirtualAlloc
VirtualFree
GetTickCount
CompareStringW

user32

GetFocus
IsChild
GetWindowLongW
SetWindowLongW
GetCursor
ReleaseCapture
SetCapture
CallWindowProcW
SetParent
CreateWindowExW
DefWindowProcA
SetWindowLongA
SetPropW
DestroyWindow
SystemParametersInfoW
SetWindowRgn
MoveWindow
UpdateWindow
ShowWindow
SetFocus
GetUpdateRect
IntersectRect
EqualRect
GetWindowRgn
DefWindowProcW
LoadCursorW
RegisterClassExW
GetLastInputInfo
ReleaseDC
GetDC
InvalidateRect
GetPropW
GetClientRect
FillRect
PostMessageW

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
GdiFlush
DeleteDC
GetDeviceCaps
GetGlyphIndicesW
GetCharWidthI
GetTextMetricsW
GetOutlineTextMetricsW
GetGlyphOutlineW
SelectObject
CreateEnhMetaFileW
CloseEnhMetaFile
EnumEnhMetaFile
DeleteEnhMetaFile
GetTextFaceW
GetFontUnicodeRanges
EnumFontFamiliesExW
GetObjectW
CreateFontIndirectW
IntersectClipRect
ModifyWorldTransform
RestoreDC
SaveDC
SetGraphicsMode
GetWorldTransform
SetWorldTransform
GetClipBox
CreateRectRgn
GetRgnBox
StretchBlt
PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateSolidBrush
ExtTextOutW
SetBkMode
SetTextAlign
SetTextColor
GetClipRgn
GetGraphicsMode
SelectClipRgn
ExtSelectClipRgn
ExtCreateRegion
CreateCompatibleBitmap
GetStockObject
SetMapMode
GetFontData
GetCharWidth32W
ExtEscape
SelectClipPath
EndPath
CloseFigure
MoveToEx
BeginPath
LineTo
PolyBezierTo
SetPolyFillMode
WidenPath
StrokePath
ExtCreatePen
SetMiterLimit
FillPath
DeleteObject
StretchDIBits
SetStretchBltMode

usp10

ScriptStringFree
ScriptStringOut
ScriptStringAnalyse
ScriptShape
ScriptXtoCP
ScriptPlace
ScriptItemize
ScriptFreeCache

urlmon

FindMimeFromData

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msimg32

GradientFill

winmm

timeEndPeriod
timeBeginPeriod

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

ole32

CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

Exports

Exports

WebKitGetAPI
cairo_append_path
cairo_arc
cairo_arc_negative
cairo_clip
cairo_clip_extents
cairo_clip_preserve
cairo_close_path
cairo_copy_clip_rectangle_list
cairo_copy_page
cairo_copy_path
cairo_copy_path_flat
cairo_create
cairo_curve_to
cairo_destroy
cairo_device_to_user
cairo_device_to_user_distance
cairo_fill
cairo_fill_extents
cairo_fill_preserve
cairo_font_extents
cairo_font_face_destroy
cairo_font_face_get_reference_count
cairo_font_face_get_type
cairo_font_face_get_user_data
cairo_font_face_reference
cairo_font_face_set_user_data
cairo_font_face_status
cairo_font_options_copy
cairo_font_options_create
cairo_font_options_destroy
cairo_font_options_equal
cairo_font_options_get_antialias
cairo_font_options_get_hint_metrics
cairo_font_options_get_hint_style
cairo_font_options_get_subpixel_order
cairo_font_options_hash
cairo_font_options_merge
cairo_font_options_set_antialias
cairo_font_options_set_hint_metrics
cairo_font_options_set_hint_style
cairo_font_options_set_subpixel_order
cairo_font_options_status
cairo_format_stride_for_width
cairo_get_antialias
cairo_get_current_point
cairo_get_dash
cairo_get_dash_count
cairo_get_fill_rule
cairo_get_font_face
cairo_get_font_matrix
cairo_get_font_options
cairo_get_group_target
cairo_get_line_cap
cairo_get_line_join
cairo_get_line_width
cairo_get_matrix
cairo_get_miter_limit
cairo_get_operator
cairo_get_reference_count
cairo_get_scaled_font
cairo_get_source
cairo_get_target
cairo_get_tolerance
cairo_get_user_data
cairo_glyph_allocate
cairo_glyph_extents
cairo_glyph_free
cairo_glyph_path
cairo_has_current_point
cairo_identity_matrix
cairo_image_surface_create
cairo_image_surface_create_for_data
cairo_image_surface_create_from_png
cairo_image_surface_create_from_png_stream
cairo_image_surface_get_data
cairo_image_surface_get_format
cairo_image_surface_get_height
cairo_image_surface_get_stride
cairo_image_surface_get_width
cairo_in_fill
cairo_in_stroke
cairo_line_to
cairo_mask
cairo_mask_surface
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_init_scale
cairo_matrix_init_translate
cairo_matrix_invert
cairo_matrix_multiply
cairo_matrix_rotate
cairo_matrix_scale
cairo_matrix_transform_distance
cairo_matrix_transform_point
cairo_matrix_translate
cairo_move_to
cairo_new_path
cairo_new_sub_path
cairo_paint
cairo_paint_with_alpha
cairo_path_destroy
cairo_path_extents
cairo_pattern_add_color_stop_rgb
cairo_pattern_add_color_stop_rgba
cairo_pattern_create_for_surface
cairo_pattern_create_linear
cairo_pattern_create_radial
cairo_pattern_create_rgb
cairo_pattern_create_rgba
cairo_pattern_destroy
cairo_pattern_get_color_stop_count
cairo_pattern_get_color_stop_rgba
cairo_pattern_get_extend
cairo_pattern_get_filter
cairo_pattern_get_linear_points
cairo_pattern_get_matrix
cairo_pattern_get_radial_circles
cairo_pattern_get_reference_count
cairo_pattern_get_rgba
cairo_pattern_get_surface
cairo_pattern_get_type
cairo_pattern_get_user_data
cairo_pattern_reference
cairo_pattern_set_extend
cairo_pattern_set_filter
cairo_pattern_set_matrix
cairo_pattern_set_user_data
cairo_pattern_status
cairo_pop_group
cairo_pop_group_to_source
cairo_push_group
cairo_push_group_with_content
cairo_rectangle
cairo_rectangle_list_destroy
cairo_reference
cairo_rel_curve_to
cairo_rel_line_to
cairo_rel_move_to
cairo_reset_clip
cairo_restore
cairo_rotate
cairo_save
cairo_scale
cairo_scaled_font_create
cairo_scaled_font_destroy
cairo_scaled_font_extents
cairo_scaled_font_get_ctm
cairo_scaled_font_get_font_face
cairo_scaled_font_get_font_matrix
cairo_scaled_font_get_font_options
cairo_scaled_font_get_reference_count
cairo_scaled_font_get_scale_matrix
cairo_scaled_font_get_type
cairo_scaled_font_get_user_data
cairo_scaled_font_glyph_extents
cairo_scaled_font_reference
cairo_scaled_font_set_user_data
cairo_scaled_font_status
cairo_scaled_font_text_extents
cairo_scaled_font_text_to_glyphs
cairo_select_font_face
cairo_set_antialias
cairo_set_dash
cairo_set_fill_rule
cairo_set_font_face
cairo_set_font_matrix
cairo_set_font_options
cairo_set_font_size
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_matrix
cairo_set_miter_limit
cairo_set_operator
cairo_set_scaled_font
cairo_set_source
cairo_set_source_rgb
cairo_set_source_rgba
cairo_set_source_surface
cairo_set_tolerance
cairo_set_user_data
cairo_show_glyphs
cairo_show_page
cairo_show_text
cairo_show_text_glyphs
cairo_status
cairo_status_to_string
cairo_stroke
cairo_stroke_extents
cairo_stroke_preserve
cairo_surface_copy_page
cairo_surface_create_similar
cairo_surface_destroy
cairo_surface_finish
cairo_surface_flush
cairo_surface_get_content
cairo_surface_get_device_offset
cairo_surface_get_fallback_resolution
cairo_surface_get_font_options
cairo_surface_get_reference_count
cairo_surface_get_type
cairo_surface_get_user_data
cairo_surface_has_show_text_glyphs
cairo_surface_mark_dirty
cairo_surface_mark_dirty_rectangle
cairo_surface_reference
cairo_surface_set_device_offset
cairo_surface_set_fallback_resolution
cairo_surface_set_user_data
cairo_surface_show_page
cairo_surface_status
cairo_surface_write_to_png
cairo_surface_write_to_png_stream
cairo_text_cluster_allocate
cairo_text_cluster_free
cairo_text_extents
cairo_text_path
cairo_toy_font_face_create
cairo_toy_font_face_get_family
cairo_toy_font_face_get_slant
cairo_toy_font_face_get_weight
cairo_transform
cairo_translate
cairo_user_font_face_create
cairo_user_font_face_get_init_func
cairo_user_font_face_get_render_glyph_func
cairo_user_font_face_get_text_to_glyphs_func
cairo_user_font_face_get_unicode_to_glyph_func
cairo_user_font_face_set_init_func
cairo_user_font_face_set_render_glyph_func
cairo_user_font_face_set_text_to_glyphs_func
cairo_user_font_face_set_unicode_to_glyph_func
cairo_user_to_device
cairo_user_to_device_distance
cairo_version
cairo_version_string
cairo_win32_font_face_create_for_hfont
cairo_win32_font_face_create_for_logfontw
cairo_win32_font_face_create_for_logfontw_hfont
cairo_win32_printing_surface_create
cairo_win32_scaled_font_done_font
cairo_win32_scaled_font_get_device_to_logical
cairo_win32_scaled_font_get_logical_to_device
cairo_win32_scaled_font_get_metrics_factor
cairo_win32_scaled_font_select_font
cairo_win32_surface_create
cairo_win32_surface_create_with_ddb
cairo_win32_surface_create_with_dib
cairo_win32_surface_get_dc
cairo_win32_surface_get_image

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 663KB - Virtual size: 662KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unwante
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_440_f9c1878ebe7fbf924e569755ba5fbe2b
.xml
_441_cd03dee09ef0c79e62f1049c5a683426
_442_eb1118b7e8d7a44d381c38cf87c34da4
_443_826663ceb8f9685d6f84467b3461523f
_444_23e8c16cb69632b894588e53af3b73c5
_445_c0c6deac87efdf5e3f4adf580736b429
_446_8738eea68e084eb59470bee1194dc9d3
_447_040d51f28d481a43b9de99eb74562313
_448_11315d64287c44686e22e86b31140478
_449_888ef8d419bd6e4ae53b4e4b7228b933
_44_ebf39c8f47dd8c51779752dd1883b7cd
.dll windows:4 windows x86

27c9b006501fec3cc390cfaca463424e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-11-2009 00:00

Not After

10-12-2010 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2c:7e:ad:ab:a2:7a:aa:c2:87:fd:fa:c4:58:bf:45:ba:9f:70:97:e8
Signer

Actual PE Digest

2c:7e:ad:ab:a2:7a:aa:c2:87:fd:fa:c4:58:bf:45:ba:9f:70:97:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr80

ftell
fprintf
_fdopen
fopen
sprintf
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
clearerr
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strerror
malloc
fputc
fseek
fflush
_vsnprintf
free
fclose
_errno
fread
ferror
fwrite
memset
_initterm_e
memcpy

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_450_e240aa3c4afb2d25a8f7adab7fd2446c
_451_1d979b9f2ea4ccc905557e1d90db2676
_452_b4988d4dd6150461e3440ae0cd0afd53
_453_1da4d6179d70644838efc88a6bcd0c5e
_454_c1d965ce0701a832f3df390a5997ff2e
_455_8e4032e074f6db6fa62baed505c1c412
_456_a9781b8c73f4ebd4f9d8d4c86b483b2a
_457_07883a0614770db3218cd17f7978e6e1
_458_4f7895ff8ed593a63f659d6c0b5a5b8a
_459_0918720d34d558d19bb3c1c9b1912dc2
_45_df4bf4db741577ee63e70d3e8b2d218e
.xml
_460_9c8527d17f148a7f9d2ad0539d458706
.zip
_461_a61a3f0ef128cdc3bd9665695e44f95f
_462_5e4a31a833868415a0931eca254eabc8
.zip
_463_0f2b181d241503b09d2d948346a99dbd
.html
_464_60649e4365437442732ee45233b18f0c
_465_faecd355dc8725a13354eacec3036bd5
_466_cd6b5ad25df77a06bdf0395b3aab50c5
_467_9f8fa89ba2db69819def3193b3738a85
.xml
_468_a2258c303d21161dd512614a5ff3fda0
_469_5ed5f9ea642611e7adbe3cfcdb686847
_46_6d288c9b9a228b4467113aa7fda9e634
_47_5ea099ba36f56e0b6c6ce12796303ca7
_48_d708780a377d1e71cd903d8f96caa97b
_49_8053eaa892a468bdcb7511606c664d1e
_50_ce2566396ffc1fa6a4ada2c51af599de
_51_4896ce38c5661689453617033ed4cc17
_52_7789dba36afd4cd80be21c186475c20e
_53_2569afc1e2a040593fde2555c7f2d61e
_54_dd9f126e83a035c2f6b2b5d2d5526286
_55_2569afc1e2a040593fde2555c7f2d61e
_56_a1b71695c9927405b6eeb8abe0a9f810
_57_10fcbeabdac9822bb4521bf11af729a9
_58_e94f877a636204ff892f3382025cad17
_59_e94f877a636204ff892f3382025cad17
_60_b6e454c97fc07b403ff767ff7bb0294a
_61_b8ce0cfb00567a81395d0d33c17846ad
_62_9de83aec7b013820694a9106fc59cbee
_63_1000b55b8f0ec1512caf69f34becec9b
_64_fcbeaa9ad4177666c5229a344160a695
_65_8a3f6e0784bd5139ed03f4e95f8e8816
_66_adaa7ecca10be627d3849b019e7c1026
_67_5045832d3b82e9e3e82c6dbcb3e07f72
_68_b5d2130b5487464b273c0e297b36ad42
_69_927bcf26a8bf4c7fa59d46368ee60661
_70_a2b8e1582f354759b9d97e0fc44cda8c
_71_a391bcf1df5678eeeea7487ed0f76e20
_72_17a4396b8773db75a8d3c3f7c8aa4be2
_73_af28ff21522ea00ca817e8f0114833fe
_74_ed7b39d777d9df343e3db6d61e444332
_75_5d92dd173aed923a77043c09067c7723
.xml
_76_e8d6ed9dfd168040856585c3e491920c
.html
_77_c0e7bde62780c17aacc2dd7a364725e9
.html
_78_045490ac8f0c33379dd442fb66ffbb3f
_79_c7a1c7ad22f55945883f6088598ddad2
.html
_80_015be0e6ecb2135ba75e4904b9dc15da
.html
_81_c193a187b9f3fd1838a346f72cd78ca0
_82_09b4e586f1641ad6eb6f34665ef1f8f1
_83_bc21a0d2dd6bf447543cf973992774c5
.html
_84_874e53d2bd349b1f98b08367b6dc8c3b
.html
_85_919352a5292500ebb6e499b48380dc1c
_86_aafae81d8c2fe0f7ca2c50e65d0ff410
_87_e5385a09f8b439becbeb8c4fe5b04092
.html
_88_2470698e1ebe7b8966f420bdd23bad1b
.html
_89_5e330c054b630127be01e42d6294a814
_90_137d6ba899c44efdae3dca3270878cd9
_91_f5f4a59c696e5a77349fef6bb0400bbb
.html
_92_1eba6aeaec0e67abc3c9e6949a53c3ba
.html
_93_070b22d458a0c4ba4b30dabe97c859b5
_94_39dadb6b4b9c7208d0a35c8ec87d2b51
_95_4c13864f285824753e0613422191d29b
.html
_96_79c0e8623022b5f788df9d7d741c61e0
.html
_97_a204af0412729afe95c5067ac120aea7
_98_5ebcacb7f0e1422f0c3fa20bfaa29c3c
.html
_99_665e1985893f9e0701f79dfb1f99a4d7
.html

Sharing

General

Malware Config

Signatures

Files

Password: infected

91e98dfb08f6cbd239951f240ffbc62e

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2cCertificate

Extended Key Usages

Key Usages

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1Certificate

Extended Key Usages

Key Usages

ba:eb:56:b8:f7:a2:f3:98:55:be:af:c4:68:ca:1e:d1:a4:8e:c2:10Signer

Headers

DLL Characteristics

File Characteristics

Imports

imm32

gdiplus

comctl32

sensapi

adobeowl

shlwapi

adbeape

sccore

extendscript

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

dccore

scl

msvcp90

msvcr90

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 442KB - Virtual size: 441KB

.data Size: 13KB - Virtual size: 23KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 154KB - Virtual size: 153KB

3294e0ae979d4068a8fd1fef36e5c61e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1Certificate

Extended Key Usages

Key Usages

d2:ec:92:00:7a:02:b7:cd:1a:38:11:1c:4f:f8:25:d6:22:ab:02:36Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

msvcr90

msvcp90

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

819de0de1df032ba6b4fe671503bf259

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

9f:63:00:01:00:02:1f:a8:dc:56:b5:ea:e7:2c
Certificate

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

ba:eb:56:b8:f7:a2:f3:98:55:be:af:c4:68:ca:1e:d1:a4:8e:c2:10
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 442KB - Virtual size: 441KB

.data
Size: 13KB - Virtual size: 23KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 154KB - Virtual size: 153KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

d2:ec:92:00:7a:02:b7:cd:1a:38:11:1c:4f:f8:25:d6:22:ab:02:36
Signer

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

2b:fa:a0:c4:70:08:67:1f:4f:c5:9f:f9:90:8b:99:f5:0f:55:f4:8b
Signer

.text
Size: 879KB - Virtual size: 878KB

.rdata
Size: 292KB - Virtual size: 291KB

.data
Size: 38KB - Virtual size: 55KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 99KB - Virtual size: 99KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

45:f4:e3:5f:5b:12:82:16:72:4a:d4:5d:d9:f6:09:a3:2f:d3:96:8f
Signer

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 120KB - Virtual size: 118KB

.data
Size: 4KB - Virtual size: 44KB

.rsrc
Size: 4KB - Virtual size: 428B

.reloc
Size: 4KB - Virtual size: 2KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate