DarkSoulsSaveManager_1[.]0[.]4[.]zip

resource
unpack001/DarkSoulsSaveManager/DarkSoulsSaveManager.exe
unpack001/DarkSoulsSaveManager/ffmpeg.dll
unpack001/DarkSoulsSaveManager/libEGL.dll
unpack001/DarkSoulsSaveManager/libGLESv2.dll
unpack001/DarkSoulsSaveManager/node.dll

DarkSoulsSaveManager_1.0.4.zip

.zip

DarkSoulsSaveManager/DarkSoulsSaveManager.exe

.exe windows:5 windows x64 arch:x64

b6248dc8a9f1b150df0211691ef5f8a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

node

?SetAlignedPointerInInternalField@Object@v8@@QEAAXHPEAX@Z

?CreationContext@Object@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ

?ClearWeak@V8@v8@@CAPEAXPEAPEAVObject@internal@2@@Z

?InstanceTemplate@FunctionTemplate@v8@@QEAA?AV?$Local@VObjectTemplate@v8@@@2@XZ

?SetInternalFieldCount@ObjectTemplate@v8@@QEAAXH@Z

?NewInstance@ObjectTemplate@v8@@QEAA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?Copy@Buffer@node@@YA?AV?$MaybeLocal@VObject@v8@@@v8@@PEAVIsolate@4@PEBD_K@Z

?PrototypeTemplate@FunctionTemplate@v8@@QEAA?AV?$Local@VObjectTemplate@v8@@@2@XZ

?SetClassName@FunctionTemplate@v8@@QEAAXV?$Local@VString@v8@@@2@@Z

?Delete@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?New@Uint8Array@v8@@SA?AV?$Local@VUint8Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z

?Value@Boolean@v8@@QEBA_NXZ

?Clone@Object@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?LowMemoryNotification@Isolate@v8@@QEAAXXZ

?MakeCallback@node@@YA?AV?$MaybeLocal@VValue@v8@@@v8@@PEAVIsolate@3@V?$Local@VObject@v8@@@3@PEBDHPEAV?$Local@VValue@v8@@@3@Uasync_context@1@@Z

node_module_register

uv_backend_timeout

uv_stop

uv_loop_init

uv_sem_init

uv_thread_join

?GetContents@ArrayBuffer@v8@@QEAA?AVContents@12@XZ

?New@ArrayBuffer@v8@@SA?AV?$Local@VArrayBuffer@v8@@@2@PEAVIsolate@2@_K@Z

?IsRegExp@Value@v8@@QEBA_NXZ

?IsDate@Value@v8@@QEBA_NXZ

uv_is_closing

uv_walk

?HasCaught@TryCatch@v8@@QEBA_NXZ

??1TryCatch@v8@@QEAA@XZ

??0TryCatch@v8@@QEAA@XZ

?Escape@EscapableHandleScope@v8@@AEAAPEAPEAVObject@internal@2@PEAPEAV342@@Z

uv_sem_post

??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z

??1Utf8Value@String@v8@@QEAA@XZ

??0Utf8Value@String@v8@@QEAA@V?$Local@VValue@v8@@@2@@Z

uv_thread_create

?Value@Int32@v8@@QEBAHXZ

?g_upstream_node_mode@node@@3_NA

?g_standalone_mode@node@@3_NA

uv_sem_destroy

?SetMicrotasksPolicy@Isolate@v8@@QEAAXW4MicrotasksPolicy@2@@Z

uv_loop_close

uv_sem_wait

?GetCodeRange@Isolate@v8@@QEAAXPEAPEAXPEA_K@Z

?Value@Number@v8@@QEBANXZ

?GetIdentityHash@Object@v8@@QEAAHXZ

?HasRealIndexedProperty@Object@v8@@QEAA_NI@Z

?HasInstance@Buffer@node@@YA_NV?$Local@VValue@v8@@@v8@@@Z

?Data@Buffer@node@@YAPEADV?$Local@VValue@v8@@@v8@@@Z

?get_builtin_module@node@@YAPEAUnode_module@1@PEBD@Z

?Set@Object@v8@@QEAA_NIV?$Local@VValue@v8@@@2@@Z

?Length@Buffer@node@@YA_KV?$Local@VValue@v8@@@v8@@@Z

?HasPrivate@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VPrivate@v8@@@2@@Z

?SetPrivate@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VPrivate@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?GetPrivate@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VPrivate@v8@@@2@@Z

?NewFromTwoByte@String@v8@@SA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@PEBGW4NewStringType@12@H@Z

?ToInt32@Value@v8@@QEBA?AV?$Local@VInt32@v8@@@2@XZ

?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@H@Z

?ToNumber@Value@v8@@QEBA?AV?$Local@VNumber@v8@@@2@XZ

?ToBoolean@Value@v8@@QEBA?AV?$Local@VBoolean@v8@@@2@XZ

?ForApi@Private@v8@@SA?AV?$Local@VPrivate@v8@@@2@PEAVIsolate@2@V?$Local@VString@v8@@@2@@Z

?Global@Context@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?Initialize@V8@v8@@SA_NXZ

?ToString@Value@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ

?New@Date@v8@@SA?AV?$Local@VValue@v8@@@2@PEAVIsolate@2@N@Z

?ReThrow@TryCatch@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?Call@Function@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@HQEAV52@@Z

?IsActive@Locker@v8@@SA_NXZ

?Compile@Script@v8@@SA?AV?$Local@VScript@v8@@@2@V?$Local@VString@v8@@@2@PEAVScriptOrigin@2@@Z

?Run@Script@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?ReportExternalAllocationLimitReached@Isolate@v8@@AEAAXXZ

?GetIsolate@Context@v8@@QEAAPEAVIsolate@2@XZ

?ToObject@Value@v8@@QEBA?AV?$Local@VObject@v8@@@2@XZ

?Get@Object@v8@@QEAA?AV?$Local@VValue@v8@@@2@I@Z

?Get@Object@v8@@QEAA?AV?$Local@VValue@v8@@@2@V32@@Z

?GetOwnPropertyNames@Object@v8@@QEAA?AV?$Local@VArray@v8@@@2@XZ

?Length@Array@v8@@QEBAIXZ

?New@Object@v8@@SA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z

?ToDetailString@Value@v8@@QEBA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@@Z

?TypeError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?New@Buffer@node@@YA?AV?$MaybeLocal@VObject@v8@@@v8@@PEAVIsolate@4@_K@Z

?New@Buffer@node@@YA?AV?$MaybeLocal@VObject@v8@@@v8@@PEAVIsolate@4@PEAD_KP6AX1PEAX@Z3@Z

?Error@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?ThrowException@Isolate@v8@@QEAA?AV?$Local@VValue@v8@@@2@V32@@Z

?MakeWeak@V8@v8@@CAXPEAPEAVObject@internal@2@PEAXP6AXAEBV?$WeakCallbackInfo@X@2@@ZW4WeakCallbackType@2@@Z

?New@External@v8@@SA?AV?$Local@VExternal@v8@@@2@PEAVIsolate@2@PEAX@Z

?AdjustAmountOfExternalAllocatedMemory@Isolate@v8@@QEAA_J_J@Z

?GetConstructorName@Object@v8@@QEAA?AV?$Local@VString@v8@@@2@XZ

?New@Date@v8@@SA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@N@Z

?New@Number@v8@@SA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@N@Z

?Utf8Length@String@v8@@QEBAHXZ

?ToObject@Value@v8@@QEBA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?Run@Script@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?IdleNotificationDeadline@Isolate@v8@@QEAA_NN@Z

?Has@Object@v8@@QEAA_NV?$Local@VValue@v8@@@2@@Z

?RequestGarbageCollectionForTesting@Isolate@v8@@QEAAXW4GarbageCollectionType@12@@Z

?GetHeapProfiler@Isolate@v8@@QEAAPEAVHeapProfiler@2@XZ

?TakeHeapSnapshot@HeapProfiler@v8@@QEAAPEBVHeapSnapshot@2@PEAVActivityControl@2@PEAVObjectNameResolver@12@@Z

?Data@Buffer@node@@YAPEADV?$Local@VObject@v8@@@v8@@@Z

?SetPrototype@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?NewInstance@ObjectTemplate@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?New@ObjectTemplate@v8@@SA?AV?$Local@VObjectTemplate@v8@@@2@XZ

?WriteUtf8@String@v8@@QEBAHPEADHPEAHH@Z

?SetAccessorProperty@Template@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VFunctionTemplate@v8@@@2@1W4PropertyAttribute@2@W4AccessControl@2@@Z

?Set@Template@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VData@v8@@@2@W4PropertyAttribute@2@@Z

?ToString@Value@v8@@QEBA?AV?$MaybeLocal@VString@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?IsUint8Array@Value@v8@@QEBA_NXZ

uscript_getScript_59

uscript_getCode_59

uscript_getName_59

?NewFromUtf8@String@v8@@SA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@12@H@Z

?normalize@Normalizer@icu_59@@SAXAEBVUnicodeString@2@W4UNormalizationMode@@HAEAV32@AEAW4UErrorCode@@@Z

??1UnicodeString@icu_59@@UEAA@XZ

?IsFunction@Value@v8@@QEBA_NXZ

?IsArray@Value@v8@@QEBA_NXZ

??0UnicodeString@icu_59@@QEAA@XZ

??0UnicodeString@icu_59@@QEAA@CVConstChar16Ptr@1@H@Z

?IsObject@Value@v8@@QEBA_NXZ

?IsBoolean@Value@v8@@QEBA_NXZ

?IsNumber@Value@v8@@QEBA_NXZ

??1StringCharacterIterator@icu_59@@UEAA@XZ

??0StringCharacterIterator@icu_59@@QEAA@AEBVUnicodeString@1@@Z

?IsExternal@Value@v8@@QEBA_NXZ

udata_setCommonData_59

ubrk_getRuleStatus_59

ubrk_isBoundary_59

ubrk_openRules_59

ubrk_first_59

ubrk_setText_59

ubrk_close_59

ubrk_next_59

ubrk_open_59

u_getIntPropertyValue_59

?createCanonical@Locale@icu_59@@SA?AV12@PEBD@Z

?setDefault@Locale@icu_59@@SAXAEBV12@AEAW4UErrorCode@@@Z

?getDefault@Locale@icu_59@@SAAEBV12@XZ

??1Locale@icu_59@@UEAA@XZ

??0Locale@icu_59@@QEAA@PEBD000@Z

?getUS@Locale@icu_59@@SAAEBV12@XZ

??0ResourceConstraints@v8@@QEAA@XZ

?ConfigureDefaults@ResourceConstraints@v8@@QEAAX_K0@Z

?New@Isolate@v8@@SAPEAV12@AEBUCreateParams@12@@Z

?Dispose@Isolate@v8@@QEAAXXZ

??1SnapshotCreator@v8@@QEAA@XZ

?SetNativesDataBlob@V8@v8@@SAXPEAVStartupData@2@@Z

?SetSnapshotDataBlob@V8@v8@@SAXPEAVStartupData@2@@Z

?SetEntropySource@V8@v8@@SAXP6A_NPEAE_K@Z@Z

?IsArrayBuffer@Value@v8@@QEBA_NXZ

?IsArrayBufferView@Value@v8@@QEBA_NXZ

?IsExternal@ArrayBuffer@v8@@QEBA_NXZ

?Externalize@ArrayBuffer@v8@@QEAA?AVContents@12@XZ

?Buffer@ArrayBufferView@v8@@QEAA?AV?$Local@VArrayBuffer@v8@@@2@XZ

?ByteOffset@ArrayBufferView@v8@@QEAA_KXZ

?ByteLength@ArrayBufferView@v8@@QEAA_KXZ

?Free@Allocator@ArrayBuffer@v8@@UEAAXPEAX_KW4AllocationMode@123@@Z

?Reserve@Allocator@ArrayBuffer@v8@@UEAAPEAX_K@Z

?SetProtection@Allocator@ArrayBuffer@v8@@UEAAXPEAX_KW4Protection@123@@Z

??_7Allocator@ArrayBuffer@v8@@6B@

u_getPropertyValueEnum_59

u_iscntrl_59

u_charType_59

?PerformCheckpoint@MicrotasksScope@v8@@SAXPEAVIsolate@2@@Z

?Enter@Isolate@v8@@QEAAXXZ

?Exit@Isolate@v8@@QEAAXXZ

??0HeapStatistics@v8@@QEAA@XZ

??0HeapSpaceStatistics@v8@@QEAA@XZ

??0HeapObjectStatistics@v8@@QEAA@XZ

??0HeapCodeStatistics@v8@@QEAA@XZ

?GetHeapStatistics@Isolate@v8@@QEAAXPEAVHeapStatistics@2@@Z

?NumberOfHeapSpaces@Isolate@v8@@QEAA_KXZ

?GetHeapSpaceStatistics@Isolate@v8@@QEAA_NPEAVHeapSpaceStatistics@2@_K@Z

?NumberOfTrackedHeapObjectTypes@Isolate@v8@@QEAA_KXZ

?GetHeapObjectStatisticsAtLastGC@Isolate@v8@@QEAA_NPEAVHeapObjectStatistics@2@_K@Z

?GetHeapCodeAndMetadataStatistics@Isolate@v8@@QEAA_NPEAVHeapCodeStatistics@2@@Z

?MemoryPressureNotification@Isolate@v8@@QEAAXW4MemoryPressureLevel@2@@Z

?DumpAndResetStats@Isolate@v8@@QEAAXXZ

?SetCreateHistogramFunction@Isolate@v8@@QEAAXP6APEAXPEBDHH_K@Z@Z

?SetAddHistogramSampleFunction@Isolate@v8@@QEAAXP6AXPEAXH@Z@Z

?IsolateInForegroundNotification@Isolate@v8@@QEAAXXZ

?IsolateInBackgroundNotification@Isolate@v8@@QEAAXXZ

?SetRAILMode@Isolate@v8@@QEAAXW4RAILMode@2@@Z

?ToBoolean@Value@v8@@QEBA?AV?$Local@VBoolean@v8@@@2@PEAVIsolate@2@@Z

?ToObject@Value@v8@@QEBA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z

?ToInt32@Value@v8@@QEBA?AV?$Local@VInt32@v8@@@2@PEAVIsolate@2@@Z

?CreateDataProperty@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VName@v8@@@2@V?$Local@VValue@v8@@@2@@Z

?CreateDataProperty@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z

?CopyContents@ArrayBufferView@v8@@QEAA_KPEAX_K@Z

?ValueOf@Date@v8@@QEBANXZ

??0TryCatch@v8@@QEAA@PEAVIsolate@1@@Z

?RemovePrototype@FunctionTemplate@v8@@QEAAXXZ

?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z

?CopyPersistent@V8@v8@@CAPEAPEAVObject@internal@2@PEAPEAV342@@Z

?DefineOwnProperty@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VName@v8@@@2@V?$Local@VValue@v8@@@2@W4PropertyAttribute@2@@Z

?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@I@Z

?GetScriptOrigin@Function@v8@@QEBA?AVScriptOrigin@2@XZ

?GetFunction@FunctionTemplate@v8@@QEAA?AV?$MaybeLocal@VFunction@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?New@ArrayBuffer@v8@@SA?AV?$Local@VArrayBuffer@v8@@@2@PEAVIsolate@2@PEAX_KW4ArrayBufferCreationMode@2@@Z

?IsBooleanObject@Value@v8@@QEBA_NXZ

?IsNumberObject@Value@v8@@QEBA_NXZ

?IsStringObject@Value@v8@@QEBA_NXZ

?ToNumber@Value@v8@@QEBA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@@Z

?ToString@Value@v8@@QEBA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@@Z

?HasRealNamedCallbackProperty@Object@v8@@QEAA_NV?$Local@VString@v8@@@2@@Z

?Get@Message@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ

?Message@TryCatch@v8@@QEBA?AV?$Local@VMessage@v8@@@2@XZ

?ReferenceError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

??0UnicodeString@icu_59@@QEAA@PEB_W@Z

u_isspace_59

?createWordInstance@BreakIterator@icu_59@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

?setIndex@UCharCharacterIterator@icu_59@@UEAA_SH@Z

?current@UCharCharacterIterator@icu_59@@UEBA_SXZ

?previous@UCharCharacterIterator@icu_59@@UEAA_SXZ

?hasPrevious@UCharCharacterIterator@icu_59@@UEAACXZ

??0UnicodeString@icu_59@@QEAA@PEB_S@Z

?setIndex32@UCharCharacterIterator@icu_59@@UEAAHH@Z

??_7UnicodeString@icu_59@@6B@

?BooleanValue@Value@v8@@QEBA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@@Z

?IntegerValue@Value@v8@@QEBA?AV?$Maybe@_J@2@V?$Local@VContext@v8@@@2@@Z

?NewFromUtf8@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@2@H@Z

?Value@Uint32@v8@@QEBAIXZ

?SetAlignedPointerInInternalFields@Object@v8@@QEAAXHQEAHQEAPEAX@Z

?InternalFieldCount@ObjectTemplate@v8@@QEAAHXZ

?New@ObjectTemplate@v8@@SA?AV?$Local@VObjectTemplate@v8@@@2@PEAVIsolate@2@V?$Local@VFunctionTemplate@v8@@@2@@Z

?SetNamedPropertyHandler@ObjectTemplate@v8@@QEAAXP6AXV?$Local@VString@v8@@@2@AEBV?$PropertyCallbackInfo@VValue@v8@@@2@@ZP6AX0V?$Local@VValue@v8@@@2@1@ZP6AX0AEBV?$PropertyCallbackInfo@VInteger@v8@@@2@@ZP6AX0AEBV?$PropertyCallbackInfo@VBoolean@v8@@@2@@ZP6AXAEBV?$PropertyCallbackInfo@VArray@v8@@@2@@Z3@Z

?SetAlignedPointerInEmbedderData@Context@v8@@QEAAXHPEAX@Z

?New@Resolver@Promise@v8@@SA?AV?$Local@VResolver@Promise@v8@@@3@PEAVIsolate@3@@Z

?GetPromise@Resolver@Promise@v8@@QEAA?AV?$Local@VPromise@v8@@@3@XZ

?Resolve@Resolver@Promise@v8@@QEAAXV?$Local@VValue@v8@@@3@@Z

?Reject@Resolver@Promise@v8@@QEAAXV?$Local@VValue@v8@@@3@@Z

?Length@String@v8@@QEBAHXZ

?Delete@Object@v8@@QEAA_NV?$Local@VValue@v8@@@2@@Z

?GetPropertyNames@Object@v8@@QEAA?AV?$Local@VArray@v8@@@2@XZ

ucnv_setFromUCallBack_59

ucnv_fromUChars_59

ucnv_cbFromUWriteBytes_59

uidna_openUTS46_59

uidna_nameToASCII_59

ublock_getCode_59

ubidi_reorderLogical_59

ubidi_reorderVisual_59

uscript_getShortName_59

uscript_getScriptExtensions_59

utf8_nextCharSafeBody_59

u_errorName_59

u_foldCase_59

uregex_open_59

uregex_close_59

uregex_setText_59

uregex_matches_59

u_strToUpper_59

u_strToLower_59

u_strToUTF8_59

ucol_open_59

ucol_close_59

ucol_strcoll_59

ubrk_current_59

??2UMemory@icu_59@@SAPEAX_K@Z

??3UMemory@icu_59@@SAXPEAX@Z

??0UnicodeSet@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z

??1UnicodeSet@icu_59@@UEAA@XZ

?freeze@UnicodeSet@icu_59@@QEAAPEAVUnicodeFunctor@2@XZ

?spanUTF8@UnicodeSet@icu_59@@QEBAHPEBDHW4USetSpanCondition@@@Z

??8UnicodeSet@icu_59@@UEBACAEBV01@@Z

?add@UnicodeSet@icu_59@@UEAAAEAV12@HH@Z

?addAll@UnicodeSet@icu_59@@UEAAAEAV12@AEBV12@@Z

?addMatchSetTo@UnicodeSet@icu_59@@UEBAXAEAV12@@Z

?clear@UnicodeSet@icu_59@@UEAAAEAV12@XZ

?clone@UnicodeSet@icu_59@@UEBAPEAVUnicodeFunctor@2@XZ

?compact@UnicodeSet@icu_59@@UEAAAEAV12@XZ

?complement@UnicodeSet@icu_59@@UEAAAEAV12@HH@Z

?complement@UnicodeSet@icu_59@@UEAAAEAV12@XZ

?complementAll@UnicodeSet@icu_59@@UEAAAEAV12@AEBV12@@Z

?contains@UnicodeSet@icu_59@@UEBACH@Z

?contains@UnicodeSet@icu_59@@UEBACHH@Z

?containsAll@UnicodeSet@icu_59@@UEBACAEBV12@@Z

?getDynamicClassID@UnicodeSet@icu_59@@UEBAPEAXXZ

?getRangeCount@UnicodeSet@icu_59@@UEBAHXZ

?getRangeEnd@UnicodeSet@icu_59@@UEBAHH@Z

?getRangeStart@UnicodeSet@icu_59@@UEBAHH@Z

?hashCode@UnicodeSet@icu_59@@UEBAHXZ

?isEmpty@UnicodeSet@icu_59@@UEBACXZ

?matches@UnicodeSet@icu_59@@UEAA?AW4UMatchDegree@2@AEBVReplaceable@2@AEAHHC@Z

?matchesIndexValue@UnicodeSet@icu_59@@EEBACE@Z

?next@UCharCharacterIterator@icu_59@@UEAA_SXZ

?removeAll@UnicodeSet@icu_59@@UEAAAEAV12@AEBV12@@Z

?removeAllStrings@UnicodeSet@icu_59@@UEAAAEAV12@XZ

?retain@UnicodeSet@icu_59@@UEAAAEAV12@HH@Z

?retainAll@UnicodeSet@icu_59@@UEAAAEAV12@AEBV12@@Z

?setData@UnicodeFilter@icu_59@@UEAAXPEBVTransliterationRuleData@2@@Z

?size@UnicodeSet@icu_59@@UEBAHXZ

?toMatcher@UnicodeFilter@icu_59@@UEBAPEAVUnicodeMatcher@2@XZ

?toPattern@UnicodeSet@icu_59@@UEBAAEAVUnicodeString@2@AEAV32@C@Z

?toReplacer@UnicodeFunctor@icu_59@@UEBAPEAVUnicodeReplacer@2@XZ

ubidi_open_59

ubidi_close_59

ubidi_setPara_59

ubidi_countRuns_59

ubidi_getVisualRun_59

?createDefault@TimeZone@icu_59@@SAPEAV12@XZ

u_charMirror_59

u_getCombiningClass_59

unorm2_getNFCInstance_59

unorm2_getRawDecomposition_59

unorm2_composePair_59

unorm_normalize_59

u_countChar32_59

u_strToUTF32_59

ucnv_open_59

ucnv_close_59

ucnv_toAlgorithmic_59

?length@UnicodeString@icu_59@@QEBAHXZ

?getBuffer@UnicodeString@icu_59@@QEBAPEB_SXZ

?getAvailableLocales@DateFormat@icu_59@@SAPEBVLocale@2@AEAH@Z

??0DateFormatSymbols@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z

??1DateFormatSymbols@icu_59@@UEAA@XZ

?getShortMonths@DateFormatSymbols@icu_59@@QEBAPEBVUnicodeString@2@AEAH@Z

?Compile@Script@v8@@SA?AV?$MaybeLocal@VScript@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@PEAVScriptOrigin@2@@Z

?GetLineNumber@Message@v8@@QEBA?AV?$Maybe@H@2@V?$Local@VContext@v8@@@2@@Z

?IsTrue@Value@v8@@QEBA_NXZ

?Write@String@v8@@QEBAHPEAGHHH@Z

?NewFromTwoByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBGW4NewStringType@2@H@Z

?NewExternalTwoByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEAVExternalStringResource@12@@Z

?NewExternalOneByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEAVExternalOneByteStringResource@12@@Z

?TerminateExecution@Isolate@v8@@QEAAXXZ

??1Unlocker@v8@@QEAA@XZ

?Initialize@Unlocker@v8@@AEAAXPEAVIsolate@2@@Z

?Dispose@ExternalStringResourceBase@String@v8@@MEAAXXZ

?IsCompressible@ExternalStringResourceBase@String@v8@@UEBA_NXZ

??_7ExternalStringResourceBase@String@v8@@6B@

??_7ExternalStringResource@String@v8@@6B@

??_7ExternalOneByteStringResource@String@v8@@6B@

?ToBoolean@Value@v8@@QEBA?AV?$MaybeLocal@VBoolean@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?ToNumber@Value@v8@@QEBA?AV?$MaybeLocal@VNumber@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?ToInt32@Value@v8@@QEBA?AV?$MaybeLocal@VInt32@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?GetToStringTag@Symbol@v8@@SA?AV?$Local@VSymbol@v8@@@2@PEAVIsolate@2@@Z

?GetPropertyNames@Object@v8@@QEAA?AV?$MaybeLocal@VArray@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?GetPrototype@Object@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?SetCallHandler@FunctionTemplate@v8@@QEAAXP6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@@Z

?SetAccessor@ObjectTemplate@v8@@QEAAXV?$Local@VString@v8@@@2@P6AX0AEBV?$PropertyCallbackInfo@VValue@v8@@@2@@ZP6AX0V?$Local@VValue@v8@@@2@AEBV?$PropertyCallbackInfo@X@2@@Z3W4AccessControl@2@W4PropertyAttribute@2@V?$Local@VAccessorSignature@v8@@@2@@Z

?New@Signature@v8@@SA?AV?$Local@VSignature@v8@@@2@PEAVIsolate@2@V?$Local@VFunctionTemplate@v8@@@2@@Z

?Exception@TryCatch@v8@@QEBA?AV?$Local@VValue@v8@@@2@XZ

?GetIsolate@Object@v8@@QEAAPEAVIsolate@2@XZ

UCNV_FROM_U_CALLBACK_STOP_59

UCNV_FROM_U_CALLBACK_SKIP_59

UCNV_FROM_U_CALLBACK_SUBSTITUTE_59

ucnv_getSubstChars_59

ucnv_setSubstString_59

ucol_getStrength_59

ucol_setStrength_59

usearch_open_59

usearch_close_59

usearch_getMatchedLength_59

usearch_getCollator_59

usearch_first_59

usearch_next_59

usearch_reset_59

??1ByteSink@icu_59@@UEAA@XZ

?toUTF8@UnicodeString@icu_59@@QEBAXAEAVByteSink@2@@Z

??4UnicodeString@icu_59@@QEAAAEAV01@AEBV01@@Z

?detectHostTimeZone@TimeZone@icu_59@@SAPEAV12@XZ

?adoptDefault@TimeZone@icu_59@@SAXPEAV12@@Z

?Flush@ByteSink@icu_59@@UEAAXXZ

?GetAppendBuffer@ByteSink@icu_59@@UEAAPEADHHPEADHPEAH@Z

u_charDirection_59

u_tolower_59

u_toupper_59

u_memcasecmp_59

u_strFoldCase_59

?FindInstanceInPrototypeChain@Object@v8@@QEAA?AV?$Local@VObject@v8@@@2@V?$Local@VFunctionTemplate@v8@@@2@@Z

?HasInstance@FunctionTemplate@v8@@QEAA_NV?$Local@VValue@v8@@@2@@Z

?SetEmbedderHeapTracer@Isolate@v8@@QEAAXPEAVEmbedderHeapTracer@2@@Z

?AddBeforeCallEnteredCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?RemoveBeforeCallEnteredCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?AddMicrotasksCompletedCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?RemoveMicrotasksCompletedCallback@Isolate@v8@@QEAAXP6AXPEAV12@@Z@Z

?RegisterExternallyReferencedObject@V8@v8@@CAXPEAPEAVObject@internal@2@PEAVIsolate@42@@Z

?ContainsOnlyOneByte@String@v8@@QEBA_NXZ

?WriteOneByte@String@v8@@QEBAHPEAEHHH@Z

?MakeExternal@String@v8@@QEAA_NPEAVExternalStringResource@12@@Z

?MakeExternal@String@v8@@QEAA_NPEAVExternalOneByteStringResource@12@@Z

?CanMakeExternal@String@v8@@QEAA_NXZ

?EnqueueMicrotask@Isolate@v8@@QEAAXP6AXPEAX@Z0@Z

?DetachGlobal@Context@v8@@QEAAXXZ

??0ExternalStringResource@String@v8@@IEAA@XZ

??0ExternalOneByteStringResource@String@v8@@IEAA@XZ

UCNV_TO_U_CALLBACK_STOP_59

UCNV_FROM_U_CALLBACK_ESCAPE_59

ucnv_setSubstChars_59

ucnv_getName_59

ucnv_setToUCallBack_59

ucnv_fromUnicode_59

ucnv_toUnicode_59

ucnv_countAvailable_59

ucnv_getAvailableName_59

ucnv_countAliases_59

ucnv_getAlias_59

ucnv_getStandardName_59

ucnv_setFallback_59

?MakeWeak@V8@v8@@CAXPEAPEAPEAVObject@internal@2@@Z

?Reset@TryCatch@v8@@QEAAXXZ

uloc_setKeywordValue_59

?getTraditionalChinese@Locale@icu_59@@SAAEBV12@XZ

??8Locale@icu_59@@QEBACAEBV01@@Z

utrie2_openFromSerialized_59

??0UnicodeString@icu_59@@QEAA@PEBDHW4EInvariant@01@@Z

utext_close_59

utext_openUChars_59

utext_setup_59

?createLineInstance@BreakIterator@icu_59@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

?createCharacterInstance@BreakIterator@icu_59@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

?createSentenceInstance@BreakIterator@icu_59@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z

??0RuleBasedBreakIterator@icu_59@@QEAA@AEBVUnicodeString@1@AEAUUParseError@@AEAW4UErrorCode@@@Z

??1RuleBasedBreakIterator@icu_59@@UEAA@XZ

??8RuleBasedBreakIterator@icu_59@@UEBACAEBVBreakIterator@1@@Z

?adoptText@RuleBasedBreakIterator@icu_59@@UEAAXPEAVCharacterIterator@2@@Z

?clone@RuleBasedBreakIterator@icu_59@@UEBAPEAVBreakIterator@2@XZ

?createBufferClone@RuleBasedBreakIterator@icu_59@@UEAAPEAVBreakIterator@2@PEAXAEAHAEAW4UErrorCode@@@Z

?current@RuleBasedBreakIterator@icu_59@@UEBAHXZ

?first@RuleBasedBreakIterator@icu_59@@UEAAHXZ

?following@RuleBasedBreakIterator@icu_59@@UEAAHH@Z

?getBinaryRules@RuleBasedBreakIterator@icu_59@@UEAAPEBEAEAI@Z

?getDynamicClassID@RuleBasedBreakIterator@icu_59@@UEBAPEAXXZ

?getRuleStatus@RuleBasedBreakIterator@icu_59@@UEBAHXZ

?getRuleStatusVec@RuleBasedBreakIterator@icu_59@@UEAAHPEAHHAEAW4UErrorCode@@@Z

?getRules@RuleBasedBreakIterator@icu_59@@UEBAAEBVUnicodeString@2@XZ

?getText@RuleBasedBreakIterator@icu_59@@UEBAAEAVCharacterIterator@2@XZ

?getUText@RuleBasedBreakIterator@icu_59@@UEBAPEAUUText@@PEAU3@AEAW4UErrorCode@@@Z

?hashCode@RuleBasedBreakIterator@icu_59@@UEBAHXZ

?isBoundary@RuleBasedBreakIterator@icu_59@@UEAACH@Z

?last@RuleBasedBreakIterator@icu_59@@UEAAHXZ

?next@RuleBasedBreakIterator@icu_59@@UEAAHH@Z

?next@RuleBasedBreakIterator@icu_59@@UEAAHXZ

?preceding@RuleBasedBreakIterator@icu_59@@UEAAHH@Z

?previous@RuleBasedBreakIterator@icu_59@@UEAAHXZ

?refreshInputText@RuleBasedBreakIterator@icu_59@@UEAAAEAV12@PEAUUText@@AEAW4UErrorCode@@@Z

?setText@RuleBasedBreakIterator@icu_59@@UEAAXAEBVUnicodeString@2@@Z

?setText@RuleBasedBreakIterator@icu_59@@UEAAXPEAUUText@@AEAW4UErrorCode@@@Z

?NewInstance@Function@v8@@QEBA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@HQEAV?$Local@VValue@v8@@@2@@Z

?IsDead@Isolate@v8@@QEAA_NXZ

?RangeError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?SyntaxError@Exception@v8@@SA?AV?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z

?IsExecutionTerminating@Isolate@v8@@QEAA_NXZ

u_hasBinaryProperty_59

u_getBidiPairedBracket_59

?IncreaseHeapLimitForDebugging@Isolate@v8@@QEAAXXZ

?IsRunningMicrotasks@MicrotasksScope@v8@@SA_NPEAVIsolate@2@@Z

ubidi_getDirection_59

ubidi_getParaLevel_59

ubidi_getLogicalRun_59

u_totitle_59

u_ispunct_59

?SetAllowAtomicsWait@Isolate@v8@@QEAAX_N@Z

?IsHeapLimitIncreasedForDebugging@Isolate@v8@@QEAA_NXZ

?SetErrorMessageForCodeGenerationFromStrings@Context@v8@@QEAAXV?$Local@VString@v8@@@2@@Z

?AllowCodeGenerationFromStrings@Context@v8@@QEAAX_N@Z

?GetExtrasBindingObject@Context@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ

?Evaluate@Module@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@@Z

?VisitWeakHandles@Isolate@v8@@QEAAXPEAVPersistentHandleVisitor@2@@Z

?VisitHandlesWithClassIds@Isolate@v8@@QEAAXPEAVPersistentHandleVisitor@2@@Z

?SetFailedAccessCheckCallbackFunction@Isolate@v8@@QEAAXP6AXV?$Local@VObject@v8@@@2@W4AccessType@2@V?$Local@VValue@v8@@@2@@Z@Z

?AddMessageListenerWithErrorLevel@Isolate@v8@@QEAA_NP6AXV?$Local@VMessage@v8@@@2@V?$Local@VValue@v8@@@2@@ZH1@Z

?SetWasmInstanceCallback@Isolate@v8@@QEAAXP6A_NAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@Z@Z

?SetWasmModuleCallback@Isolate@v8@@QEAAXP6A_NAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@Z@Z

?SetAllowCodeGenerationFromStringsCallback@Isolate@v8@@QEAAXP6A_NV?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@@Z@Z

?SetOOMErrorHandler@Isolate@v8@@QEAAXP6AXPEBD_N@Z@Z

?SetStackLimit@Isolate@v8@@QEAAX_K@Z

?ContextDisposedNotification@Isolate@v8@@QEAAH_N@Z

?SetUseCounterCallback@Isolate@v8@@QEAAXP6AXPEAV12@W4UseCounterFeature@12@@Z@Z

?SetPromiseRejectCallback@Isolate@v8@@QEAAXP6AXVPromiseRejectMessage@2@@Z@Z

?AddGCEpilogueCallback@Isolate@v8@@QEAAXP6AXPEAV12@W4GCType@2@W4GCCallbackFlags@2@@Z1@Z

?AddGCPrologueCallback@Isolate@v8@@QEAAXP6AXPEAV12@W4GCType@2@W4GCCallbackFlags@2@@Z1@Z

?GetEnteredContext@Isolate@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ

?InContext@Isolate@v8@@QEAA_NXZ

?NumberOfPhantomHandleResetsSinceLastCall@Isolate@v8@@QEAA_KXZ

?SetGetRetainerInfosCallback@HeapProfiler@v8@@QEAAXP6A?AURetainerInfos@12@PEAVIsolate@2@@Z@Z

?SetWrapperClassInfoProvider@HeapProfiler@v8@@QEAAXGP6APEAVRetainedObjectInfo@2@GV?$Local@VValue@v8@@@2@@Z@Z

?GetCachedData@StreamedSource@ScriptCompiler@v8@@QEBAPEBUCachedData@23@XZ

??1CachedData@ScriptCompiler@v8@@QEAA@XZ

??0CachedData@ScriptCompiler@v8@@QEAA@PEBEHW4BufferPolicy@012@@Z

?CompileFunctionInContext@ScriptCompiler@v8@@SA?AV?$Local@VFunction@v8@@@2@PEAVIsolate@2@PEAVSource@12@V?$Local@VContext@v8@@@2@_KQEAV?$Local@VString@v8@@@2@3QEAV?$Local@VObject@v8@@@2@@Z

?CompileModule@ScriptCompiler@v8@@SA?AV?$MaybeLocal@VModule@v8@@@2@PEAVIsolate@2@PEAVSource@12@@Z

?CachedDataVersionTag@ScriptCompiler@v8@@SAIXZ

?Compile@ScriptCompiler@v8@@SA?AV?$MaybeLocal@VScript@v8@@@2@V?$Local@VContext@v8@@@2@PEAVSource@12@W4CompileOptions@12@@Z

?Compile@ScriptCompiler@v8@@SA?AV?$MaybeLocal@VScript@v8@@@2@V?$Local@VContext@v8@@@2@PEAVStreamedSource@12@V?$Local@VString@v8@@@2@AEBVScriptOrigin@2@@Z

?CreateMessage@Exception@v8@@SA?AV?$Local@VMessage@v8@@@2@PEAVIsolate@2@V?$Local@VValue@v8@@@2@@Z

?GetScriptName@UnboundScript@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ

?GetCurrentDepth@MicrotasksScope@v8@@SAHPEAVIsolate@2@@Z

?ByteLength@ArrayBuffer@v8@@QEBA_KXZ

?Uint32Value@Value@v8@@QEBA?AV?$Maybe@I@2@V?$Local@VContext@v8@@@2@@Z

?IsWebAssemblyCompiledModule@Value@v8@@QEBA_NXZ

?IsSharedArrayBuffer@Value@v8@@QEBA_NXZ

?ReadRawBytes@ValueDeserializer@v8@@QEAA_N_KPEAPEBX@Z

?ReadDouble@ValueDeserializer@v8@@QEAA_NPEAN@Z

?ReadUint64@ValueDeserializer@v8@@QEAA_NPEA_K@Z

?ReadUint32@ValueDeserializer@v8@@QEAA_NPEAI@Z

?GetWireFormatVersion@ValueDeserializer@v8@@QEBAIXZ

?SetExpectInlineWasm@ValueDeserializer@v8@@QEAAX_N@Z

?SetSupportsLegacyWireFormat@ValueDeserializer@v8@@QEAAX_N@Z

?TransferSharedArrayBuffer@ValueDeserializer@v8@@QEAAXIV?$Local@VSharedArrayBuffer@v8@@@2@@Z

?TransferArrayBuffer@ValueDeserializer@v8@@QEAAXIV?$Local@VArrayBuffer@v8@@@2@@Z

comctl32

ord412

ord410

ord345

ord413

InitCommonControlsEx

comdlg32

PrintDlgExW

GetOpenFileNameW

ChooseColorW

GetSaveFileNameW

wininet

HttpOpenRequestW

InternetQueryDataAvailable

InternetOpenW

HttpQueryInfoW

HttpSendRequestW

InternetCloseHandle

InternetConnectW

InternetReadFile

HttpAddRequestHeadersW

InternetCrackUrlW

uiautomationcore

UiaClientsAreListening

ffmpeg

av_lockmgr_register

avcodec_alloc_context3

av_init_packet

avcodec_decode_video2

av_dict_free

av_dict_set

av_image_check_size

av_dict_get

av_new_packet

av_free

av_seek_frame

av_buffer_get_opaque

av_packet_split_side_data

av_packet_copy_props

avcodec_descriptor_get

av_samples_get_buffer_size

av_strerror

av_rescale_q

av_get_cpu_flags

av_log_set_level

avcodec_parameters_to_context

avcodec_align_dimensions

av_read_frame

av_packet_get_side_data

av_buffer_create

avformat_find_stream_info

avcodec_decode_audio4

avcodec_find_decoder

av_packet_unref

avcodec_open2

avcodec_free_context

av_frame_unref

av_frame_free

av_frame_alloc

av_get_bytes_per_sample

avformat_close_input

avformat_open_input

avformat_free_context

avformat_alloc_context

av_register_all

avio_alloc_context

av_rdft_end

av_rdft_calc

av_malloc

av_rdft_init

avcodec_flush_buffers

dxgi

CreateDXGIFactory1

advapi32

RevertToSelf

CryptSignHashW

ConvertStringSecurityDescriptorToSecurityDescriptorW

GetSecurityDescriptorSacl

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

CreateProcessAsUserW

RegEnumValueW

RegDeleteValueW

RegSetValueExW

RegEnumKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegQueryInfoKeyW

RegNotifyChangeKeyValue

InitializeAcl

InitializeSecurityDescriptor

SetSecurityDescriptorDacl

GetTokenInformation

ConvertSidToStringSidW

OpenProcessToken

StartTraceW

ControlTraceW

SystemFunction036

ImpersonateAnonymousToken

OpenTraceW

ProcessTrace

CloseTrace

GetAce

GetKernelObjectSecurity

GetLengthSid

SetKernelObjectSecurity

SetTokenInformation

SetSecurityInfo

ConvertStringSidToSidW

RegDisablePredefinedCache

CopySid

CreateWellKnownSid

CreateRestrictedToken

DuplicateToken

DuplicateTokenEx

EqualSid

LookupPrivilegeValueW

SetThreadToken

SetEntriesInAclW

GetSecurityInfo

CryptReleaseContext

CryptSetHashParam

CryptGetHashParam

CryptCreateHash

CryptDestroyHash

iphlpapi

NotifyAddrChange

GetAdaptersAddresses

CancelIPChangeNotify

psapi

GetPerformanceInfo

GetProcessMemoryInfo

QueryWorkingSet

EnumProcessModules

QueryWorkingSetEx

GetModuleInformation

shell32

CommandLineToArgvW

GetCurrentProcessExplicitAppUserModelID

SHGetFolderPathW

SetCurrentProcessExplicitAppUserModelID

ShellExecuteW

SHCreateItemFromParsingName

SHGetDesktopFolder

SHAddToRecentDocs

SHGetFileInfoW

Shell_NotifyIconW

Shell_NotifyIconGetRect

ShellExecuteExW

SHChangeNotify

SHGetKnownFolderPath

SHGetPropertyStoreForWindow

DragQueryFileW

SHGetSpecialFolderPathW

SHGetPathFromIDListW

SHBrowseForFolderW

SHFileOperationW

user32

LoadImageW

GetMessageW

DefWindowProcW

PostMessageW

CreateWindowExW

RegisterClassExW

DispatchMessageW

TranslateMessage

PostQuitMessage

UpdateWindow

UnregisterClassW

EnumThreadWindows

ChangeWindowMessageFilterEx

IsWindowVisible

EnableWindow

EnableMenuItem

SetWindowLongW

FlashWindowEx

SetRectEmpty

SetLayeredWindowAttributes

GetSysColor

SetWindowDisplayAffinity

SetClassLongPtrW

SendMessageW

CopyIcon

AdjustWindowRectEx

GetSystemMenu

GetMenuItemInfoW

TrackMouseEvent

FillRect

DeferWindowPos

GetActiveWindow

SetPropW

GetForegroundWindow

RemovePropW

FindWindowExW

GetQueueStatus

MsgWaitForMultipleObjectsEx

PeekMessageW

GetCursorPos

OpenClipboard

CloseClipboard

GetClipboardSequenceNumber

DestroyIcon

GetClipboardData

RegisterClipboardFormatW

EmptyClipboard

IsClipboardFormatAvailable

GetWindowLongW

RegisterHotKey

UnregisterHotKey

GetWindowLongPtrW

IsWindow

DrawIconEx

CreateIconIndirect

GetIconInfo

MapVirtualKeyW

EnumDisplayDevicesW

WindowFromPoint

MonitorFromRect

GetMonitorInfoW

EnumDisplayMonitors

GetAncestor

SetWindowPos

TrackPopupMenu

MapWindowPoints

IsRectEmpty

GetDesktopWindow

GetClassNameW

GetCapture

ShowCursor

SetCursorPos

ClientToScreen

DrawEdge

SendMessageTimeoutW

AllowSetForegroundWindow

PtInRect

GetClientRect

SetWindowsHookExW

UnhookWindowsHookEx

CallNextHookEx

ScreenToClient

GetWindowRect

RegisterWindowMessageW

DestroyWindow

GetKeyState

SetForegroundWindow

SystemParametersInfoW

GetSystemMetrics

MonitorFromWindow

MessageBeep

SetFocus

EnumWindows

SetClipboardData

GetWindowThreadProcessId

DrawFrameControl

LoadIconW

ReleaseDC

KillTimer

EndDeferWindowPos

SetTimer

BeginDeferWindowPos

SetWindowLongPtrW

GetDC

MonitorFromPoint

DrawTextW

UpdateLayeredWindow

LoadCursorW

UpdateLayeredWindowIndirect

SetThreadDesktop

MessageBoxA

BringWindowToTop

EnumDisplaySettingsExW

GetSysColorBrush

GetLayeredWindowAttributes

UnregisterPowerSettingNotification

RegisterPowerSettingNotification

PostThreadMessageW

UnregisterDeviceNotification

RegisterDeviceNotificationW

DefRawInputProc

GetRawInputDeviceList

RegisterRawInputDevices

GetRawInputDeviceInfoW

GetRawInputData

MoveWindow

RegisterClassW

GetProcessWindowStation

SetProcessWindowStation

CreateWindowStationW

GetThreadDesktop

CreateDesktopW

SetCaretPos

DestroyCaret

CreateCaret

GetKeyboardLayoutList

GetKeyboardLayoutNameW

FindWindowW

CallWindowProcW

CloseWindowStation

IsChild

GetUserObjectInformationW

CloseDesktop

OpenInputDesktop

GetCursorInfo

SetParent

GetAsyncKeyState

GetDoubleClickTime

ClipCursor

GetGuiResources

GetWindow

EnumChildWindows

GetParent

OffsetRect

IntersectRect

SetCursor

GetWindowTextLengthW

GetWindowTextW

SetWindowTextW

RedrawWindow

GetWindowRgn

SetWindowRgn

EndPaint

BeginPaint

GetWindowDC

SetMenuDefaultItem

ReleaseCapture

SetCapture

RegisterTouchWindow

CloseTouchInputHandle

GetFocus

IsZoomed

IsIconic

SetWindowPlacement

GetWindowPlacement

ShowWindow

GetMessageTime

GetMessagePos

GetClassInfoExW

GetPropW

NotifyWinEvent

CharNextW

SetKeyboardState

GetKeyboardState

GetKeyboardLayout

ToUnicodeEx

GetMessageExtraInfo

EnumDisplaySettingsW

PrintWindow

MessageBoxW

InvalidateRect

InflateRect

InvertRect

FrameRect

DrawFocusRect

IsWindowEnabled

userenv

CreateEnvironmentBlock

DestroyEnvironmentBlock

ws2_32

socket

gethostname

WSAStartup

accept

listen

setsockopt

shutdown

WSACloseEvent

WSACreateEvent

WSAEnumNetworkEvents

WSAEventSelect

WSAGetOverlappedResult

WSAIoctl

WSAResetEvent

WSASend

getpeername

WSALookupServiceEnd

WSALookupServiceNextW

WSALookupServiceBeginW

WSAGetLastError

ntohl

htonl

ioctlsocket

getsockopt

recvfrom

sendto

WSARecvFrom

WSASendTo

WSASocketW

getaddrinfo

freeaddrinfo

htons

ntohs

send

WSASetEvent

WSAWaitForMultipleEvents

WSASetServiceW

recv

bind

closesocket

connect

getsockname

dbghelp

SymGetModuleBase64

SymSetSearchPathW

SymFromAddr

SymSetOptions

StackWalk64

SymGetSearchPathW

SymInitialize

SymFunctionTableAccess64

SymGetLineFromAddr64

dwmapi

DwmDefWindowProc

DwmExtendFrameIntoClientArea

DwmGetCompositionTimingInfo

DwmIsCompositionEnabled

DwmSetWindowAttribute

gdi32

SetPixelFormat

SwapBuffers

EnumFontFamiliesExW

GetFontData

CreateFontIndirectA

GetCharWidthW

GetOutlineTextMetricsW

CreateFontA

CreatePen

EnumFontFamiliesExA

GetClipBox

GetObjectType

LineTo

SetPolyFillMode

BeginPath

CloseFigure

EndPath

FillPath

SelectClipPath

EqualRgn

StrokeAndFillPath

StrokePath

ChoosePixelFormat

ExtCreatePen

MoveToEx

PolyBezierTo

GetTextFaceA

GetClipRgn

GetRegionData

SetTextAlign

GdiComment

GetCurrentObject

SetDCPenColor

SetROP2

SetDCBrushColor

SetArcDirection

SetBrushOrgEx

RemoveFontMemResourceEx

GetGlyphOutlineW

GetCharABCWidthsW

GetGlyphIndicesW

GetTextExtentPointI

GetFontUnicodeRanges

AddFontMemResourceEx

WidenPath

GetRgnBox

CombineRgn

GetStockObject

CreateRectRgnIndirect

IntersectClipRect

GetTextFaceW

SetMapMode

CreateFontW

SetBkColor

SelectClipRgn

CreateRectRgn

SetAbortProc

EndDoc

StartDocW

CreateDCW

CancelDC

EndPage

StartPage

SaveDC

RestoreDC

SetDIBits

CreateBitmap

GdiAlphaBlend

SetDIBitsToDevice

SetWorldTransform

GetWorldTransform

SetEnhMetaFileBits

PlayEnhMetaFileRecord

PlayEnhMetaFile

GetEnhMetaFileHeader

GetEnhMetaFileBits

EnumEnhMetaFile

StretchDIBits

ModifyWorldTransform

SetGraphicsMode

CreateDIBSection

StretchBlt

CreateDIBitmap

GdiFlush

GetDIBits

GetTextMetricsW

GetTextExtentPoint32W

SetTextColor

SetBkMode

SetStretchBltMode

BitBlt

CreateCompatibleBitmap

CreateCompatibleDC

GetDeviceCaps

DeleteDC

GetObjectW

SelectObject

CloseEnhMetaFile

CreateEnhMetaFileW

DeleteEnhMetaFile

DeleteObject

SetRectRgn

GetICMProfileW

ExtEscape

CreateFontIndirectW

ExtTextOutW

SetMiterLimit

CreateSolidBrush

usp10

ScriptStringAnalyse

ScriptStringFree

ScriptStringOut

ScriptItemize

ScriptFreeCache

ScriptShape

version

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

winspool.drv

EnumPrintersW

OpenPrinterW

ClosePrinter

DeviceCapabilitiesW

ord203

DocumentPropertiesW

GetPrinterW

GetPrinterDriverW

ncrypt

NCryptFreeObject

NCryptSignHash

dwrite

DWriteCreateFactory

msvcp140

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?_Xbad_function_call@std@@YAXXZ

?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

??_7ios_base@std@@6B@

?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z

?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?sync_with_stdio@ios_base@std@@SA_N_N@Z

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??Bid@locale@std@@QEAA_KXZ

?always_noconv@codecvt_base@std@@QEBA_NXZ

?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z

?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z

?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ

?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

??0_Lockit@std@@QEAA@H@Z

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

_Dtest

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

??1_Lockit@std@@QEAA@XZ

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z

?_BADOFF@std@@3_JB

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z

_FDtest

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z

?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z

?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z

?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

?uncaught_exception@std@@YA_NXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

?_Xbad_alloc@std@@YAXXZ

?__ExceptionPtrRethrow@@YAXPEBX@Z

?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

?_XGetLastError@std@@YAXXZ

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

_Mtx_init_in_situ

_Mtx_destroy_in_situ

_Mtx_lock

_Mtx_unlock

?_Throw_C_error@std@@YAXH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z

_Query_perf_frequency

_Query_perf_counter

?classic@locale@std@@SAAEBV12@XZ

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

?__ExceptionPtrToBool@@YA_NPEBX@Z

kernel32

FreeLibrary

CreateThread

ResumeThread

SuspendThread

GetProcessId

ReleaseSemaphore

RtlCaptureContext

ConnectNamedPipe

GetOverlappedResult

ResetEvent

DisconnectNamedPipe

DuplicateHandle

GetCurrentThreadId

InitializeCriticalSection

LeaveCriticalSection

CreateNamedPipeW

RegisterWaitForSingleObject

WriteFile

EnterCriticalSection

ReadFile

GetProcessTimes

GetSystemTimeAsFileTime

ReadProcessMemory

UnregisterWaitEx

UnregisterWait

GetTickCount

GetModuleHandleExW

GetModuleFileNameW

lstrlenW

AssignProcessToJobObject

AttachConsole

CreateProcessW

AllocConsole

TlsSetValue

TlsAlloc

ReleaseMutex

CreateFileW

CreateMutexW

TlsFree

FormatMessageW

GetSystemDirectoryW

GetVolumeInformationW

LoadLibraryW

OpenProcess

SetLastError

PostQueuedCompletionStatus

GetQueuedCompletionStatus

GetErrorMode

SetErrorMode

GetProcAddress

RtlDeleteFunctionTable

RaiseFailFastException

RtlAddFunctionTable

TerminateProcess

GetCurrentProcess

VirtualProtect

GetModuleHandleW

DeleteFileW

SetEvent

Sleep

QueueUserWorkItem

CloseHandle

CreateEventW

WaitForSingleObject

ReleaseSRWLockExclusive

DeleteCriticalSection

FlushInstructionCache

EncodePointer

LoadLibraryExA

InterlockedPushEntrySList

InterlockedPopEntrySList

CreateSemaphoreW

GetTimeFormatW

GetDateFormatW

QueueUserAPC

SleepEx

LocaleNameToLCID

GetTimeZoneInformation

GetSystemPowerStatus

PowerClearRequest

PowerSetRequest

PowerCreateRequest

VerifyVersionInfoW

VerSetConditionMask

FindNextFileA

FindFirstFileExA

GetSystemDirectoryA

SwitchToThread

GetACP

GetWindowsDirectoryA

GetComputerNameExW

LocalAlloc

RemoveVectoredExceptionHandler

OutputDebugStringA

SetNamedPipeHandleState

GetCurrentDirectoryW

FormatMessageA

SetEnvironmentVariableW

GetEnvironmentVariableW

RtlCaptureStackBackTrace

GetCurrentThread

CreateDirectoryW

QueryDosDeviceW

GetLongPathNameW

RemoveDirectoryW

GetTempPathW

GetVolumePathNameW

GetFileAttributesW

UnmapViewOfFile

SetFileAttributesW

GetFileAttributesExW

SetCurrentDirectoryW

MoveFileExW

ReplaceFileW

CopyFileW

CreateFileMappingW

MapViewOfFile

MoveFileW

HeapLock

HeapWalk

GetProcessIoCounters

GetSystemInfo

GlobalMemoryStatusEx

HeapUnlock

SetThreadPriority

GetThreadPriority

GetThreadId

IsDebuggerPresent

GetDiskFreeSpaceExW

ExpandEnvironmentStringsW

GetModuleHandleA

TryAcquireSRWLockExclusive

AcquireSRWLockExclusive

CreateToolhelp32Snapshot

Process32NextW

Process32FirstW

GetPriorityClass

GetExitCodeProcess

QueryThreadCycleTime

TzSpecificLocalTimeToSystemTime

FileTimeToSystemTime

QueryPerformanceFrequency

SystemTimeToFileTime

SystemTimeToTzSpecificLocalTime

QueryPerformanceCounter

TlsGetValue

GetFileSizeEx

OpenThread

VirtualQueryEx

InitializeSListHead

SetUnhandledExceptionFilter

LocalFree

DecodePointer

RaiseException

GetLastError

InitializeCriticalSectionEx

GetCommandLineW

SetFileTime

LockFile

ClearCommBreak

ClearCommError

EscapeCommFunction

SetEndOfFile

GetFileInformationByHandle

UnlockFile

SetFilePointerEx

FlushFileBuffers

GetVersionExW

GetNativeSystemInfo

VirtualQuery

GetUserDefaultLangID

GetModuleHandleExA

FindFirstFileExW

FindNextFileW

FindClose

VirtualFree

VirtualAlloc

FlushViewOfFile

HeapSetInformation

GetWindowsDirectoryW

CreateIoCompletionPort

SizeofResource

LockResource

LoadResource

FindResourceW

WakeAllConditionVariable

WakeConditionVariable

InitializeConditionVariable

ReleaseSRWLockShared

AcquireSRWLockShared

LoadLibraryExW

VirtualProtectEx

WriteProcessMemory

GlobalAlloc

GlobalSize

WaitForMultipleObjects

TransactNamedPipe

WaitNamedPipeW

GetSystemTime

MultiByteToWideChar

WideCharToMultiByte

SetInformationJobObject

SetHandleInformation

SetPriorityClass

GetLocalTime

GetStdHandle

GlobalUnlock

GlobalLock

GlobalFree

GetLocaleInfoW

GetPrivateProfileStringW

ExitProcess

InitializeCriticalSectionAndSpinCount

lstrcmpiW

TerminateJobObject

HeapDestroy

GetUserDefaultLCID

IsProcessInJob

QueryInformationJobObject

InitOnceExecuteOnce

InitializeSRWLock

RtlVirtualUnwind

GetFileType

ProcessIdToSessionId

GetProcessHandleCount

GetProcessHeaps

SignalObjectAndWait

HeapCreate

AreFileApisANSI

GetProcessHeap

GetFileSize

LockFileEx

HeapCompact

HeapAlloc

HeapReAlloc

DeleteFileA

WaitForSingleObjectEx

LoadLibraryA

CreateFileA

OutputDebugStringW

GetFileAttributesA

GetDiskFreeSpaceA

GetTempPathA

HeapSize

HeapValidate

UnlockFileEx

GetFullPathNameA

RtlLookupFunctionEntry

UnhandledExceptionFilter

IsProcessorFeaturePresent

GetStartupInfoW

GetUserDefaultUILanguage

PeekNamedPipe

GetEnvironmentVariableA

lstrcmpiA

FindFirstChangeNotificationW

FindCloseChangeNotification

SetFilePointer

GetDiskFreeSpaceW

GetFullPathNameW

HeapFree

TryEnterCriticalSection

FindFirstFileW

EnumSystemLocalesEx

VirtualAllocEx

VirtualFreeEx

CreateJobObjectW

CreateRemoteThread

GetCurrentProcessId

SleepConditionVariableSRW

GetCommModemStatus

GetCommState

PurgeComm

SetCommBreak

SetCommMask

SetCommState

SetCommTimeouts

WaitCommEvent

GetThreadTimes

QueryUnbiasedInterruptTime

DebugBreak

SearchPathW

SleepConditionVariableCS

AddVectoredExceptionHandler

CancelIo

ole32

CoCreateGuid

CLSIDFromString

RegisterDragDrop

OleUninitialize

OleInitialize

OleDuplicateData

DoDragDrop

RevokeDragDrop

CoTaskMemRealloc

ReleaseStgMedium

GetHGlobalFromStream

CreateStreamOnHGlobal

CoTaskMemAlloc

CoCreateInstance

CoInitializeEx

CoUninitialize

CoTaskMemFree

PropVariantClear

oleaut32

VariantClear

SysFreeString

VariantInit

SysAllocString

LoadRegTypeLi

LoadTypeLi

SysStringLen

VarUI4FromStr

shlwapi

PathFindFileNameW

PathFindExtensionW

PathMatchSpecW

PathRemoveExtensionW

msimg32

AlphaBlend

uxtheme

IsAppThemed

vcruntime140

__std_type_info_compare

strchr

memset

longjmp

wcsstr

__C_specific_handler

_set_purecall_handler

strrchr

memchr

__std_exception_copy

__std_exception_destroy

_purecall

memmove

strstr

__intrinsic_setjmp

_CxxThrowException

memcmp

memcpy

__std_terminate

__CxxFrameHandler3

__vcrt_InitializeCriticalSectionEx

api-ms-win-crt-string-l1-1-0

wcspbrk

strcpy_s

strcat_s

wcsncpy_s

toupper

_wcslwr

iswdigit

_strupr

_strlwr

iswspace

isspace

strnlen

islower

_strdup

wcscpy_s

isprint

isdigit

strcspn

isalpha

strncpy

strncmp

_strnicmp

isxdigit

_wcsicmp

strncpy_s

wcsncpy

_wcsnicmp

wcsnlen

wmemcpy_s

strspn

wcsncmp

_wcsdup

strcmp

iswcntrl

wcscmp

isalnum

_stricmp

isupper

tolower

api-ms-win-crt-environment-l1-1-0

getenv_s

getenv

api-ms-win-crt-heap-l1-1-0

_set_new_mode

malloc

realloc

_get_heap_handle

_aligned_malloc

_aligned_free

_msize

free

_recalloc

_callnewh

calloc

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line

_initterm_e

_c_exit

_register_thread_local_exe_atexit_callback

strerror

abort

_initialize_wide_environment

_errno

_configure_wide_argv

_set_app_type

_seh_filter_exe

exit

_cexit

_crt_atexit

_beginthread

_invalid_parameter_noinfo

_endthread

_controlfp_s

_initterm

_beginthreadex

_register_onexit_function

_initialize_onexit_table

terminate

__fpe_flt_rounds

_set_invalid_parameter_handler

_invalid_parameter_noinfo_noreturn

_set_new_handler

signal

_set_abort_behavior

_exit

api-ms-win-crt-stdio-l1-1-0

getc

__stdio_common_vsprintf

fflush

__stdio_common_vswprintf

fclose

fputwc

clearerr

_wfsopen

_wfopen

ferror

ftell

__stdio_common_vsnprintf_s

_dup2

_fileno

_get_osfhandle

freopen

ungetwc

fputc

__stdio_common_vfscanf

fputs

fgets

_wfopen_s

fgetc

__stdio_common_vsnwprintf_s

__stdio_common_vfprintf

__acrt_iob_func

__stdio_common_vswprintf_s

_ftelli64

fgetwc

fseek

_fsopen

__stdio_common_vsprintf_s

__stdio_common_vsscanf

fwrite

_open_osfhandle

_close

fgetpos

setvbuf

ungetc

__p__commode

fopen

fsetpos

_set_fmode

_fseeki64

fread

_getcwd

_get_stream_buffer_pointers

api-ms-win-crt-convert-l1-1-0

_itoa

_i64tow_s

atol

_fcvt

atoi

_itoa_s

_strtoui64

_wtoi

atof

strtod

strtol

strtoll

strtoul

wcstol

api-ms-win-crt-filesystem-l1-1-0

_wfullpath

_lock_file

_unlock_file

_stat64i32

remove

_mkdir

_wstat64i32

api-ms-win-crt-math-l1-1-0

_fdsign

fminf

nextafter

fmodf

trunc

_dsign

copysign

_j0

fmaxf

tanh

asin

log2

__setusermatherr

hypot

truncf

nextafterf

copysignf

_fdclass

_finite

atanf

sqrtf

expf

atan2f

sinf

_nextafter

tan

sin

fmod

floor

roundf

round

ceil

pow

log

floorf

ceilf

lroundf

cbrt

llroundf

sqrt

acos

_fdtest

llround

ldexp

cosf

modf

atan2

lround

_fdopen

frexp

log10

log10f

exp

_dtest

log2f

_hypotf

tanf

acosf

powf

modff

acoshf

asinhf

atanhf

exp2f

asinf

coshf

sinhf

tanhf

nanf

_dclass

_isnan

logf

cos

api-ms-win-crt-utility-l1-1-0

srand

qsort

bsearch

rand_s

rand

api-ms-win-crt-time-l1-1-0

_gmtime64

_time64

_gmtime64_s

_get_timezone

_mktime64

_localtime64_s

_ftime64

_localtime64

wcsftime

api-ms-win-crt-locale-l1-1-0

setlocale

_configthreadlocale

imm32

ImmSetCompositionWindow

ImmNotifyIME

ImmSetOpenStatus

ImmSetConversionStatus

ImmGetConversionStatus

ImmGetCompositionStringW

ImmAssociateContextEx

ImmReleaseContext

ImmGetContext

ImmSetCandidateWindow

oleacc

AccessibleObjectFromWindow

CreateStdAccessibleObject

LresultFromObject

winmm

waveOutWrite

waveOutPause

waveOutPrepareHeader

waveOutClose

waveOutOpen

midiInReset

midiInStart

midiInGetNumDevs

midiOutLongMsg

midiInUnprepareHeader

midiInPrepareHeader

midiInClose

waveOutRestart

waveOutReset

midiOutShortMsg

midiOutUnprepareHeader

midiOutPrepareHeader

midiOutClose

midiOutOpen

midiOutGetDevCapsW

midiOutGetNumDevs

waveInMessage

waveInGetNumDevs

waveOutGetNumDevs

timeBeginPeriod

timeGetTime

midiInOpen

midiInGetDevCapsW

midiOutReset

waveOutUnprepareHeader

midiInAddBuffer

timeEndPeriod

Exports

GetHandleVerifier

IsSandboxedProcess

_register_atom_browser_app_

_register_atom_browser_auto_updater_

_register_atom_browser_browser_view_

_register_atom_browser_content_tracing_

_register_atom_browser_debugger_

_register_atom_browser_desktop_capturer_

_register_atom_browser_dialog_

_register_atom_browser_download_item_

_register_atom_browser_global_shortcut_

_register_atom_browser_in_app_purchase_

_register_atom_browser_menu_

_register_atom_browser_net_

_register_atom_browser_power_monitor_

_register_atom_browser_power_save_blocker_

_register_atom_browser_protocol_

_register_atom_browser_render_process_preferences_

_register_atom_browser_session_

_register_atom_browser_system_preferences_

_register_atom_browser_tray_

_register_atom_browser_web_contents_

_register_atom_browser_web_view_manager_

_register_atom_browser_window_

_register_atom_common_asar_

_register_atom_common_clipboard_

_register_atom_common_crash_reporter_

_register_atom_common_native_image_

_register_atom_common_notification_

_register_atom_common_screen_

_register_atom_common_shell_

_register_atom_common_v8_util_

_register_atom_renderer_ipc_

_register_atom_renderer_web_frame_

Sections

.text
Size: 49.9MB - Virtual size: 49.9MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

_text32
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 445KB - Virtual size: 703KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 29B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rodata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/LICENSE

DarkSoulsSaveManager/LICENSES.chromium.html

DarkSoulsSaveManager/api-ms-win-core-console-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

fa:4a:78:12:73:83:44:07:88:01:c7:28:58:ab:ce:85:8f:37:74:04:13:18:e3:ce:76:4a:56:6b:cc:35:a4:0d
Signer

Actual PE Digest

fa:4a:78:12:73:83:44:07:88:01:c7:28:58:ab:ce:85:8f:37:74:04:13:18:e3:ce:76:4a:56:6b:cc:35:a4:0d

Digest Algorithm

sha256

PE Digest Matches

true

58:e7:7a:9f:2f:d5:d4:5f:4c:d9:fc:51:d4:3c:2c:19:d9:4c:39:b4
Signer

Actual PE Digest

58:e7:7a:9f:2f:d5:d4:5f:4c:d9:fc:51:d4:3c:2c:19:d9:4c:39:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

AllocConsole

GetConsoleCP

GetConsoleMode

GetConsoleOutputCP

GetNumberOfConsoleInputEvents

PeekConsoleInputA

ReadConsoleA

ReadConsoleInputA

ReadConsoleInputW

ReadConsoleW

SetConsoleCtrlHandler

SetConsoleMode

WriteConsoleA

WriteConsoleW

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-datetime-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

dc:04:53:42:13:7b:ab:f9:d1:22:49:75:84:16:95:85:5c:ae:d4:63:d8:04:49:57:3a:98:4a:5d:f3:dd:dd:20
Signer

Actual PE Digest

dc:04:53:42:13:7b:ab:f9:d1:22:49:75:84:16:95:85:5c:ae:d4:63:d8:04:49:57:3a:98:4a:5d:f3:dd:dd:20

Digest Algorithm

sha256

PE Digest Matches

true

f4:87:8f:48:7a:00:4b:9c:53:35:09:be:69:30:79:67:e5:36:da:0f
Signer

Actual PE Digest

f4:87:8f:48:7a:00:4b:9c:53:35:09:be:69:30:79:67:e5:36:da:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetDateFormatA

GetDateFormatW

GetTimeFormatA

GetTimeFormatW

Sections

.rdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-debug-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cc:f8:9b:a7:5f:1c:49:7b:65:6a:c2:f3:f9:42:7d:73:28:f5:e9:ce:b3:bc:cd:5c:dd:07:ac:92:6c:04:89:70
Signer

Actual PE Digest

cc:f8:9b:a7:5f:1c:49:7b:65:6a:c2:f3:f9:42:7d:73:28:f5:e9:ce:b3:bc:cd:5c:dd:07:ac:92:6c:04:89:70

Digest Algorithm

sha256

PE Digest Matches

true

b2:96:bd:e3:b7:c9:84:f4:1b:45:35:92:65:bd:92:9e:fc:e9:a9:a6
Signer

Actual PE Digest

b2:96:bd:e3:b7:c9:84:f4:1b:45:35:92:65:bd:92:9e:fc:e9:a9:a6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

DebugBreak

IsDebuggerPresent

OutputDebugStringA

OutputDebugStringW

Sections

.rdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-errorhandling-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

13:1c:2c:6c:85:ee:e7:56:54:26:9f:bd:ba:2a:23:7e:b3:20:c9:2f:fe:a5:69:1e:1f:13:78:27:04:5c:29:03
Signer

Actual PE Digest

13:1c:2c:6c:85:ee:e7:56:54:26:9f:bd:ba:2a:23:7e:b3:20:c9:2f:fe:a5:69:1e:1f:13:78:27:04:5c:29:03

Digest Algorithm

sha256

PE Digest Matches

true

71:e5:ac:ce:56:89:b3:f1:c8:64:c4:74:8b:a2:56:23:11:9f:cc:0a
Signer

Actual PE Digest

71:e5:ac:ce:56:89:b3:f1:c8:64:c4:74:8b:a2:56:23:11:9f:cc:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetErrorMode

GetLastError

RaiseException

SetErrorMode

SetLastError

SetUnhandledExceptionFilter

UnhandledExceptionFilter

Sections

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-file-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

38:ce:81:69:3b:90:cb:82:84:8b:5b:62:a6:49:6e:29:bd:d8:d8:f9:ee:07:4c:2a:31:d6:d1:38:6d:32:12:bc
Signer

Actual PE Digest

38:ce:81:69:3b:90:cb:82:84:8b:5b:62:a6:49:6e:29:bd:d8:d8:f9:ee:07:4c:2a:31:d6:d1:38:6d:32:12:bc

Digest Algorithm

sha256

PE Digest Matches

true

9a:1e:c8:9c:13:5e:f0:e5:74:b2:4a:71:0c:8d:d6:db:68:e8:47:64
Signer

Actual PE Digest

9a:1e:c8:9c:13:5e:f0:e5:74:b2:4a:71:0c:8d:d6:db:68:e8:47:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CompareFileTime

CreateDirectoryA

CreateDirectoryW

CreateFileA

CreateFileW

DefineDosDeviceW

DeleteFileA

DeleteFileW

DeleteVolumeMountPointW

FileTimeToLocalFileTime

FindClose

FindCloseChangeNotification

FindFirstChangeNotificationA

FindFirstChangeNotificationW

FindFirstFileA

FindFirstFileExA

FindFirstFileExW

FindFirstFileW

FindFirstVolumeW

FindNextChangeNotification

FindNextFileA

FindNextFileW

FindNextVolumeW

FindVolumeClose

FlushFileBuffers

GetDiskFreeSpaceA

GetDiskFreeSpaceExA

GetDiskFreeSpaceExW

GetDiskFreeSpaceW

GetDriveTypeA

GetDriveTypeW

GetFileAttributesA

GetFileAttributesExA

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileSize

GetFileSizeEx

GetFileTime

GetFileType

GetFinalPathNameByHandleA

GetFinalPathNameByHandleW

GetFullPathNameA

GetFullPathNameW

GetLogicalDriveStringsW

GetLogicalDrives

GetLongPathNameA

GetLongPathNameW

GetShortPathNameW

GetTempFileNameW

GetVolumeInformationByHandleW

GetVolumeInformationW

GetVolumePathNameW

LocalFileTimeToFileTime

LockFile

LockFileEx

QueryDosDeviceW

ReadFile

ReadFileEx

ReadFileScatter

RemoveDirectoryA

RemoveDirectoryW

SetEndOfFile

SetFileAttributesA

SetFileAttributesW

SetFileInformationByHandle

SetFilePointer

SetFilePointerEx

SetFileTime

SetFileValidData

UnlockFile

UnlockFileEx

WriteFile

WriteFileEx

WriteFileGather

Sections

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-file-l1-2-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ff:98:af:c6:5b:df:78:25:20:61:6f:ba:81:ee:ee:7e:8b:68:09:b7:9f:e1:61:cf:33:ff:68:ff:ea:6c:cb:5f
Signer

Actual PE Digest

ff:98:af:c6:5b:df:78:25:20:61:6f:ba:81:ee:ee:7e:8b:68:09:b7:9f:e1:61:cf:33:ff:68:ff:ea:6c:cb:5f

Digest Algorithm

sha256

PE Digest Matches

true

0d:dc:6b:cb:b0:ee:5f:d1:94:1b:aa:2c:d7:e0:c1:03:6c:c4:45:17
Signer

Actual PE Digest

0d:dc:6b:cb:b0:ee:5f:d1:94:1b:aa:2c:d7:e0:c1:03:6c:c4:45:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CreateFile2

GetTempPathW

GetVolumeNameForVolumeMountPointW

GetVolumePathNamesForVolumeNameW

Sections

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-file-l2-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

b6:2c:10:20:ef:39:98:28:50:a4:61:fd:a8:d4:c4:2a:43:cf:52:9f:d5:b5:fe:48:38:c4:27:4e:23:21:0c:b6
Signer

Actual PE Digest

b6:2c:10:20:ef:39:98:28:50:a4:61:fd:a8:d4:c4:2a:43:cf:52:9f:d5:b5:fe:48:38:c4:27:4e:23:21:0c:b6

Digest Algorithm

sha256

PE Digest Matches

true

f0:3f:b2:3c:ec:5b:30:6e:a9:ad:ac:92:fd:5a:d0:b0:92:55:77:e4
Signer

Actual PE Digest

f0:3f:b2:3c:ec:5b:30:6e:a9:ad:ac:92:fd:5a:d0:b0:92:55:77:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CopyFile2

CopyFileExW

CreateDirectoryExW

CreateHardLinkW

CreateSymbolicLinkW

GetFileInformationByHandleEx

MoveFileExW

MoveFileWithProgressW

ReOpenFile

ReadDirectoryChangesW

ReplaceFileW

Sections

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-handle-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c1:09:f8:02:41:bb:4d:aa:dc:00:00:00:00:00:c1
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12E7-3064-6112,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c8:42:c0:f8:28:74:98:dd:ef:d6:3d:ed:9e:af:a8:c6:73:35:c8:3d:e8:32:0b:08:d5:b9:2f:1f:2c:e0:5d:83
Signer

Actual PE Digest

c8:42:c0:f8:28:74:98:dd:ef:d6:3d:ed:9e:af:a8:c6:73:35:c8:3d:e8:32:0b:08:d5:b9:2f:1f:2c:e0:5d:83

Digest Algorithm

sha256

PE Digest Matches

true

aa:9e:9d:e5:65:66:e0:37:56:e1:35:11:14:34:7e:50:7b:b5:30:d3
Signer

Actual PE Digest

aa:9e:9d:e5:65:66:e0:37:56:e1:35:11:14:34:7e:50:7b:b5:30:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CloseHandle

CompareObjectHandles

DuplicateHandle

GetHandleInformation

SetHandleInformation

Sections

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-heap-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2f:1c:e8:d5:fb:d2:79:51:a6:54:92:02:8e:7e:68:44:f9:e1:b9:4a:a0:b8:7d:3c:15:7c:43:44:3e:6f:17:f1
Signer

Actual PE Digest

2f:1c:e8:d5:fb:d2:79:51:a6:54:92:02:8e:7e:68:44:f9:e1:b9:4a:a0:b8:7d:3c:15:7c:43:44:3e:6f:17:f1

Digest Algorithm

sha256

PE Digest Matches

true

95:f8:ad:fd:71:e0:91:45:7a:66:0c:ae:b6:ff:f1:de:b4:5f:ae:bc
Signer

Actual PE Digest

95:f8:ad:fd:71:e0:91:45:7a:66:0c:ae:b6:ff:f1:de:b4:5f:ae:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetProcessHeap

GetProcessHeaps

HeapAlloc

HeapCompact

HeapCreate

HeapDestroy

HeapFree

HeapLock

HeapQueryInformation

HeapReAlloc

HeapSetInformation

HeapSize

HeapSummary

HeapUnlock

HeapValidate

HeapWalk

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-interlocked-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d3:c6:e0:f6:60:55:0f:3d:db:a2:c9:f0:d2:04:13:55:b8:bf:c5:c5:19:e9:a9:7a:e9:20:17:81:a9:45:aa:0f
Signer

Actual PE Digest

d3:c6:e0:f6:60:55:0f:3d:db:a2:c9:f0:d2:04:13:55:b8:bf:c5:c5:19:e9:a9:7a:e9:20:17:81:a9:45:aa:0f

Digest Algorithm

sha256

PE Digest Matches

true

ac:18:88:8a:83:58:96:58:4d:b2:ac:b8:3b:03:09:1f:9b:b5:ba:1b
Signer

Actual PE Digest

ac:18:88:8a:83:58:96:58:4d:b2:ac:b8:3b:03:09:1f:9b:b5:ba:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

InitializeSListHead

InterlockedFlushSList

InterlockedPopEntrySList

InterlockedPushEntrySList

QueryDepthSList

Sections

.rdata
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-libraryloader-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

fc:26:60:a5:70:92:52:db:46:14:6c:69:e4:b3:c0:8e:d8:5a:03:ad:09:cf:77:ed:1e:6e:8c:1b:fc:91:fa:8c
Signer

Actual PE Digest

fc:26:60:a5:70:92:52:db:46:14:6c:69:e4:b3:c0:8e:d8:5a:03:ad:09:cf:77:ed:1e:6e:8c:1b:fc:91:fa:8c

Digest Algorithm

sha256

PE Digest Matches

true

64:a9:e0:1c:4a:cf:d1:e6:10:d1:22:4f:b6:7a:84:af:80:18:3d:41
Signer

Actual PE Digest

64:a9:e0:1c:4a:cf:d1:e6:10:d1:22:4f:b6:7a:84:af:80:18:3d:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

DisableThreadLibraryCalls

FindResourceExW

FindStringOrdinal

FreeLibrary

FreeLibraryAndExitThread

FreeResource

GetModuleFileNameA

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExA

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

LoadLibraryExA

LoadLibraryExW

LoadResource

LockResource

SizeofResource

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-localization-l1-2-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

77:fd:47:6c:34:8d:37:60:af:5a:68:b4:03:d4:cc:e4:17:cf:29:85:bc:58:d7:31:3e:4d:d2:7f:f4:91:2d:78
Signer

Actual PE Digest

77:fd:47:6c:34:8d:37:60:af:5a:68:b4:03:d4:cc:e4:17:cf:29:85:bc:58:d7:31:3e:4d:d2:7f:f4:91:2d:78

Digest Algorithm

sha256

PE Digest Matches

true

ec:4d:a6:a4:fe:cd:ae:77:a9:d5:1f:fc:20:c4:90:34:b7:e0:64:ed
Signer

Actual PE Digest

ec:4d:a6:a4:fe:cd:ae:77:a9:d5:1f:fc:20:c4:90:34:b7:e0:64:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

ConvertDefaultLocale

EnumSystemGeoID

EnumSystemLocalesA

EnumSystemLocalesW

FindNLSString

FindNLSStringEx

FormatMessageA

FormatMessageW

GetACP

GetCPInfo

GetCPInfoExW

GetCalendarInfoEx

GetCalendarInfoW

GetFileMUIInfo

GetFileMUIPath

GetGeoInfoW

GetLocaleInfoA

GetLocaleInfoEx

GetLocaleInfoW

GetNLSVersion

GetNLSVersionEx

GetOEMCP

GetProcessPreferredUILanguages

GetSystemDefaultLCID

GetSystemDefaultLangID

GetSystemPreferredUILanguages

GetThreadLocale

GetThreadPreferredUILanguages

GetThreadUILanguage

GetUILanguageInfo

GetUserDefaultLCID

GetUserDefaultLangID

GetUserDefaultLocaleName

GetUserGeoID

GetUserPreferredUILanguages

IdnToAscii

IdnToUnicode

IsDBCSLeadByte

IsDBCSLeadByteEx

IsNLSDefinedString

IsValidCodePage

IsValidLanguageGroup

IsValidLocale

IsValidLocaleName

IsValidNLSVersion

LCMapStringA

LCMapStringEx

LCMapStringW

LocaleNameToLCID

ResolveLocaleName

SetCalendarInfoW

SetLocaleInfoW

SetProcessPreferredUILanguages

SetThreadLocale

SetThreadPreferredUILanguages

SetThreadUILanguage

SetUserGeoID

VerLanguageNameA

VerLanguageNameW

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-memory-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

46:4b:31:7d:95:1d:17:00:fd:10:6e:d3:97:70:a0:ab:57:6a:b7:00:33:51:28:91:a7:4f:d8:6c:cf:8a:c4:fa
Signer

Actual PE Digest

46:4b:31:7d:95:1d:17:00:fd:10:6e:d3:97:70:a0:ab:57:6a:b7:00:33:51:28:91:a7:4f:d8:6c:cf:8a:c4:fa

Digest Algorithm

sha256

PE Digest Matches

true

c5:c6:b3:0c:35:6d:af:0e:52:3d:1a:68:16:d0:33:a6:52:24:4f:b0
Signer

Actual PE Digest

c5:c6:b3:0c:35:6d:af:0e:52:3d:1a:68:16:d0:33:a6:52:24:4f:b0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CreateFileMappingW

FlushViewOfFile

MapViewOfFile

MapViewOfFileEx

OpenFileMappingW

ReadProcessMemory

UnmapViewOfFile

VirtualAlloc

VirtualAllocEx

VirtualFree

VirtualFreeEx

VirtualProtect

VirtualProtectEx

VirtualQuery

VirtualQueryEx

WriteProcessMemory

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-namedpipe-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0a:1c:97:72:b3:77:ec:ff:37:69:21:1c:f4:99:42:cd:18:bf:a3:38:28:f2:1d:52:54:a6:3c:29:27:45:ac:f7
Signer

Actual PE Digest

0a:1c:97:72:b3:77:ec:ff:37:69:21:1c:f4:99:42:cd:18:bf:a3:38:28:f2:1d:52:54:a6:3c:29:27:45:ac:f7

Digest Algorithm

sha256

PE Digest Matches

true

e1:4b:00:bb:0a:aa:fc:a0:b1:75:ab:8b:6d:9f:1b:f2:e0:07:0e:61
Signer

Actual PE Digest

e1:4b:00:bb:0a:aa:fc:a0:b1:75:ab:8b:6d:9f:1b:f2:e0:07:0e:61

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

ConnectNamedPipe

CreateNamedPipeW

CreatePipe

DisconnectNamedPipe

GetNamedPipeClientComputerNameW

ImpersonateNamedPipeClient

PeekNamedPipe

SetNamedPipeHandleState

TransactNamedPipe

WaitNamedPipeW

Sections

.rdata
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-processenvironment-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a8:19:0e:61:57:9f:91:8d:65:a5:e6:fd:cb:a3:cf:d5:54:c9:28:90:83:af:72:a8:26:62:bd:51:84:08:30:34
Signer

Actual PE Digest

a8:19:0e:61:57:9f:91:8d:65:a5:e6:fd:cb:a3:cf:d5:54:c9:28:90:83:af:72:a8:26:62:bd:51:84:08:30:34

Digest Algorithm

sha256

PE Digest Matches

true

80:c6:e4:fa:08:0b:35:13:28:2e:5a:24:a3:52:5a:9c:7a:23:88:65
Signer

Actual PE Digest

80:c6:e4:fa:08:0b:35:13:28:2e:5a:24:a3:52:5a:9c:7a:23:88:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

ExpandEnvironmentStringsA

ExpandEnvironmentStringsW

FreeEnvironmentStringsA

FreeEnvironmentStringsW

GetCommandLineA

GetCommandLineW

GetCurrentDirectoryA

GetCurrentDirectoryW

GetEnvironmentStrings

GetEnvironmentStringsW

GetEnvironmentVariableA

GetEnvironmentVariableW

GetStdHandle

SearchPathW

SetCurrentDirectoryA

SetCurrentDirectoryW

SetEnvironmentStringsW

SetEnvironmentVariableA

SetEnvironmentVariableW

SetStdHandle

SetStdHandleEx

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-processthreads-l1-1-0.dll

.dll .ps1 windows:10 windows x64 arch:x64 polyglot

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

62:9a:0d:c2:f7:78:b0:3c:b8:c3:c1:2c:ec:c2:95:b4:23:b8:39:99:11:68:e8:53:5e:a9:29:3a:18:39:cc:25
Signer

Actual PE Digest

62:9a:0d:c2:f7:78:b0:3c:b8:c3:c1:2c:ec:c2:95:b4:23:b8:39:99:11:68:e8:53:5e:a9:29:3a:18:39:cc:25

Digest Algorithm

sha256

PE Digest Matches

true

4d:8b:75:9c:fe:41:1f:4b:03:c3:26:e8:b6:e5:b1:2c:0c:f0:2b:ef
Signer

Actual PE Digest

4d:8b:75:9c:fe:41:1f:4b:03:c3:26:e8:b6:e5:b1:2c:0c:f0:2b:ef

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CreateProcessA

CreateProcessAsUserW

CreateProcessW

CreateRemoteThread

CreateRemoteThreadEx

CreateThread

DeleteProcThreadAttributeList

ExitProcess

ExitThread

FlushProcessWriteBuffers

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetExitCodeProcess

GetExitCodeThread

GetPriorityClass

GetProcessId

GetProcessIdOfThread

GetProcessTimes

GetProcessVersion

GetStartupInfoW

GetThreadId

GetThreadPriority

GetThreadPriorityBoost

InitializeProcThreadAttributeList

OpenProcessToken

OpenThread

OpenThreadToken

ProcessIdToSessionId

QueryProcessAffinityUpdateMode

QueueUserAPC

ResumeThread

SetPriorityClass

SetProcessAffinityUpdateMode

SetProcessShutdownParameters

SetThreadPriority

SetThreadPriorityBoost

SetThreadStackGuarantee

SetThreadToken

SuspendThread

SwitchToThread

TerminateProcess

TerminateThread

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UpdateProcThreadAttribute

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-processthreads-l1-1-1.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

04:32:ee:2a:93:b5:9c:44:fc:61:09:12:07:0e:30:ef:22:bf:fc:13:7c:b1:4d:76:fe:88:71:14:36:eb:82:80
Signer

Actual PE Digest

04:32:ee:2a:93:b5:9c:44:fc:61:09:12:07:0e:30:ef:22:bf:fc:13:7c:b1:4d:76:fe:88:71:14:36:eb:82:80

Digest Algorithm

sha256

PE Digest Matches

true

3a:7d:61:e5:bd:d1:4f:72:79:77:22:89:f0:91:8a:1c:bc:59:ef:82
Signer

Actual PE Digest

3a:7d:61:e5:bd:d1:4f:72:79:77:22:89:f0:91:8a:1c:bc:59:ef:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

FlushInstructionCache

GetCurrentProcessorNumber

GetCurrentProcessorNumberEx

GetCurrentThreadStackLimits

GetProcessHandleCount

GetProcessMitigationPolicy

GetThreadContext

GetThreadIdealProcessorEx

GetThreadTimes

IsProcessorFeaturePresent

OpenProcess

SetProcessMitigationPolicy

SetThreadContext

SetThreadIdealProcessorEx

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-profile-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

58:23:b5:d4:1d:d8:00:db:f5:de:44:1d:21:51:92:82:f5:37:45:52:a1:5c:6f:a5:e1:3d:fa:00:0d:32:92:b7
Signer

Actual PE Digest

58:23:b5:d4:1d:d8:00:db:f5:de:44:1d:21:51:92:82:f5:37:45:52:a1:5c:6f:a5:e1:3d:fa:00:0d:32:92:b7

Digest Algorithm

sha256

PE Digest Matches

true

8b:8c:f2:3e:23:48:aa:02:23:84:31:6f:ed:4b:63:aa:cf:36:40:5f
Signer

Actual PE Digest

8b:8c:f2:3e:23:48:aa:02:23:84:31:6f:ed:4b:63:aa:cf:36:40:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

QueryPerformanceCounter

QueryPerformanceFrequency

Sections

.rdata
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-rtlsupport-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5a:f8:58:c2:19:f6:38:67:2e:35:b5:df:92:ca:e0:2c:eb:8a:bb:44:cb:68:08:b3:21:12:0c:47:0b:64:a9:fd
Signer

Actual PE Digest

5a:f8:58:c2:19:f6:38:67:2e:35:b5:df:92:ca:e0:2c:eb:8a:bb:44:cb:68:08:b3:21:12:0c:47:0b:64:a9:fd

Digest Algorithm

sha256

PE Digest Matches

true

c3:b3:6e:b9:40:d6:bf:e9:16:3c:9f:a3:94:83:04:05:1e:13:ce:b8
Signer

Actual PE Digest

c3:b3:6e:b9:40:d6:bf:e9:16:3c:9f:a3:94:83:04:05:1e:13:ce:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

RtlAddFunctionTable

RtlCaptureContext

RtlCaptureStackBackTrace

RtlCompareMemory

RtlDeleteFunctionTable

RtlInstallFunctionTableCallback

RtlLookupFunctionEntry

RtlPcToFileHeader

RtlRaiseException

RtlRestoreContext

RtlUnwind

RtlUnwindEx

RtlVirtualUnwind

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-string-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4f:2a:81:a2:00:d0:27:48:54:96:a4:48:2c:6e:cc:35:09:d3:a6:0b:58:61:d7:51:c4:bd:ae:68:ce:5d:53:82
Signer

Actual PE Digest

4f:2a:81:a2:00:d0:27:48:54:96:a4:48:2c:6e:cc:35:09:d3:a6:0b:58:61:d7:51:c4:bd:ae:68:ce:5d:53:82

Digest Algorithm

sha256

PE Digest Matches

true

ad:01:9a:c8:00:07:f7:4d:44:88:ce:d1:1d:63:c7:47:22:c4:93:6f
Signer

Actual PE Digest

ad:01:9a:c8:00:07:f7:4d:44:88:ce:d1:1d:63:c7:47:22:c4:93:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

CompareStringEx

CompareStringOrdinal

CompareStringW

FoldStringW

GetStringTypeExW

GetStringTypeW

MultiByteToWideChar

WideCharToMultiByte

Sections

.rdata
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-synch-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

a6:9f:0e:34:1a:37:f0:64:35:01:66:6b:4f:59:40:c0:f5:52:62:b4:ff:b0:76:e9:2a:59:eb:25:45:bf:56:38
Signer

Actual PE Digest

a6:9f:0e:34:1a:37:f0:64:35:01:66:6b:4f:59:40:c0:f5:52:62:b4:ff:b0:76:e9:2a:59:eb:25:45:bf:56:38

Digest Algorithm

sha256

PE Digest Matches

true

ad:36:2a:61:8a:60:ec:0a:1c:56:52:e7:f2:61:2f:4f:fc:4e:3a:2b
Signer

Actual PE Digest

ad:36:2a:61:8a:60:ec:0a:1c:56:52:e7:f2:61:2f:4f:fc:4e:3a:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

AcquireSRWLockExclusive

AcquireSRWLockShared

CancelWaitableTimer

CreateEventA

CreateEventExA

CreateEventExW

CreateEventW

CreateMutexA

CreateMutexExA

CreateMutexExW

CreateMutexW

CreateSemaphoreExW

CreateWaitableTimerExW

DeleteCriticalSection

EnterCriticalSection

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeCriticalSectionEx

InitializeSRWLock

LeaveCriticalSection

OpenEventA

OpenEventW

OpenMutexW

OpenSemaphoreW

OpenWaitableTimerW

ReleaseMutex

ReleaseSRWLockExclusive

ReleaseSRWLockShared

ReleaseSemaphore

ResetEvent

SetCriticalSectionSpinCount

SetEvent

SetWaitableTimer

SetWaitableTimerEx

SleepEx

TryAcquireSRWLockExclusive

TryAcquireSRWLockShared

TryEnterCriticalSection

WaitForMultipleObjectsEx

WaitForSingleObject

WaitForSingleObjectEx

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-synch-l1-2-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c2:55:c1:91:d6:1a:e2:9d:51:c0:5d:90:9a:75:83:e7:fd:6d:43:dc:b5:81:a6:08:58:30:28:c3:90:d1:5e:97
Signer

Actual PE Digest

c2:55:c1:91:d6:1a:e2:9d:51:c0:5d:90:9a:75:83:e7:fd:6d:43:dc:b5:81:a6:08:58:30:28:c3:90:d1:5e:97

Digest Algorithm

sha256

PE Digest Matches

true

76:31:76:2b:b7:47:54:03:40:65:ab:8d:4a:79:bf:9f:7e:8d:6f:77
Signer

Actual PE Digest

76:31:76:2b:b7:47:54:03:40:65:ab:8d:4a:79:bf:9f:7e:8d:6f:77

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

DeleteSynchronizationBarrier

EnterSynchronizationBarrier

InitOnceBeginInitialize

InitOnceComplete

InitOnceExecuteOnce

InitOnceInitialize

InitializeConditionVariable

InitializeSynchronizationBarrier

SignalObjectAndWait

Sleep

SleepConditionVariableCS

SleepConditionVariableSRW

WaitOnAddress

WakeAllConditionVariable

WakeByAddressAll

WakeByAddressSingle

WakeConditionVariable

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-sysinfo-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

49:91:03:d8:da:fd:6c:0c:12:87:13:cc:20:13:72:79:96:f9:c0:8a:45:3d:06:ab:0e:5d:7a:21:fc:49:4c:4d
Signer

Actual PE Digest

49:91:03:d8:da:fd:6c:0c:12:87:13:cc:20:13:72:79:96:f9:c0:8a:45:3d:06:ab:0e:5d:7a:21:fc:49:4c:4d

Digest Algorithm

sha256

PE Digest Matches

true

93:23:ba:e9:83:10:78:af:5b:32:dc:36:c7:d3:7f:b5:f4:d1:8d:96
Signer

Actual PE Digest

93:23:ba:e9:83:10:78:af:5b:32:dc:36:c7:d3:7f:b5:f4:d1:8d:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

GetComputerNameExA

GetComputerNameExW

GetLocalTime

GetLogicalProcessorInformation

GetLogicalProcessorInformationEx

GetSystemDirectoryA

GetSystemDirectoryW

GetSystemInfo

GetSystemTime

GetSystemTimeAdjustment

GetSystemTimeAsFileTime

GetSystemWindowsDirectoryA

GetSystemWindowsDirectoryW

GetTickCount

GetTickCount64

GetVersion

GetVersionExA

GetVersionExW

GetWindowsDirectoryA

GetWindowsDirectoryW

GlobalMemoryStatusEx

SetLocalTime

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-timezone-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

35:b6:e7:01:f7:05:25:77:09:ba:9e:95:98:f1:55:9a:6c:89:62:36:a4:d4:32:b6:93:c9:08:e0:59:f7:be:be
Signer

Actual PE Digest

35:b6:e7:01:f7:05:25:77:09:ba:9e:95:98:f1:55:9a:6c:89:62:36:a4:d4:32:b6:93:c9:08:e0:59:f7:be:be

Digest Algorithm

sha256

PE Digest Matches

true

89:e2:21:1c:19:72:b6:84:70:97:1f:09:55:19:b1:57:aa:ab:36:ff
Signer

Actual PE Digest

89:e2:21:1c:19:72:b6:84:70:97:1f:09:55:19:b1:57:aa:ab:36:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

FileTimeToSystemTime

GetDynamicTimeZoneInformation

GetTimeZoneInformation

GetTimeZoneInformationForYear

SetDynamicTimeZoneInformation

SetTimeZoneInformation

SystemTimeToFileTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

Sections

.rdata
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-core-util-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:09:81:2a:00:00:00:00:00:02
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/07/2010, 21:36

Not After

01/07/2025, 21:46

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:af:35:8f:ff:d3:22:45:76:4b:00:00:00:00:00:af
Certificate

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:56

Not After

07/09/2018, 17:56

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

bf:35:a7:99:16:30:82:50:70:63:39:6c:9e:80:ba:f0:68:5a:a9:54:47:27:1b:05:3c:ee:65:7f:11:cc:c6:a0
Signer

Actual PE Digest

bf:35:a7:99:16:30:82:50:70:63:39:6c:9e:80:ba:f0:68:5a:a9:54:47:27:1b:05:3c:ee:65:7f:11:cc:c6:a0

Digest Algorithm

sha256

PE Digest Matches

true

cd:fc:e1:dd:38:75:e3:84:8a:6a:2b:37:83:df:03:c4:0c:c1:a0:ed
Signer

Actual PE Digest

cd:fc:e1:dd:38:75:e3:84:8a:6a:2b:37:83:df:03:c4:0c:c1:a0:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

Beep

DecodePointer

DecodeSystemPointer

EncodePointer

EncodeSystemPointer

Sections

.rdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-conio-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

dd:17:13:e6:e7:da:28:e5:3a:00:7b:5f:6a:8e:b2:41:5a:a3:ab:82:b3:e5:cc:6f:92:8a:0e:68:dc:62:5c:4d
Signer

Actual PE Digest

dd:17:13:e6:e7:da:28:e5:3a:00:7b:5f:6a:8e:b2:41:5a:a3:ab:82:b3:e5:cc:6f:92:8a:0e:68:dc:62:5c:4d

Digest Algorithm

sha256

PE Digest Matches

true

25:f0:a3:7c:af:30:c1:0e:10:29:9d:ab:87:e8:7b:08:ec:c4:d2:01
Signer

Actual PE Digest

25:f0:a3:7c:af:30:c1:0e:10:29:9d:ab:87:e8:7b:08:ec:c4:d2:01

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__conio_common_vcprintf

__conio_common_vcprintf_p

__conio_common_vcprintf_s

__conio_common_vcscanf

__conio_common_vcwprintf

__conio_common_vcwprintf_p

__conio_common_vcwprintf_s

__conio_common_vcwscanf

_cgets

_cgets_s

_cgetws

_cgetws_s

_cputs

_cputws

_getch

_getch_nolock

_getche

_getche_nolock

_getwch

_getwch_nolock

_getwche

_getwche_nolock

_putch

_putch_nolock

_putwch

_putwch_nolock

_ungetch

_ungetch_nolock

_ungetwch

_ungetwch_nolock

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-convert-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

be:1d:9f:e0:3c:3e:80:15:a2:a3:c3:81:78:fc:2b:4b:27:6d:44:e8:e9:1b:49:bb:24:f1:39:d1:84:bb:15:b3
Signer

Actual PE Digest

be:1d:9f:e0:3c:3e:80:15:a2:a3:c3:81:78:fc:2b:4b:27:6d:44:e8:e9:1b:49:bb:24:f1:39:d1:84:bb:15:b3

Digest Algorithm

sha256

PE Digest Matches

true

cb:93:5c:31:b8:01:b4:6a:c0:37:4b:33:49:f4:1b:6d:8c:56:81:e6
Signer

Actual PE Digest

cb:93:5c:31:b8:01:b4:6a:c0:37:4b:33:49:f4:1b:6d:8c:56:81:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__toascii

_atodbl

_atodbl_l

_atof_l

_atoflt

_atoflt_l

_atoi64

_atoi64_l

_atoi_l

_atol_l

_atoldbl

_atoldbl_l

_atoll_l

_ecvt

_ecvt_s

_fcvt

_fcvt_s

_gcvt

_gcvt_s

_i64toa

_i64toa_s

_i64tow

_i64tow_s

_itoa

_itoa_s

_itow

_itow_s

_ltoa

_ltoa_s

_ltow

_ltow_s

_strtod_l

_strtof_l

_strtoi64

_strtoi64_l

_strtoimax_l

_strtol_l

_strtold_l

_strtoll_l

_strtoui64

_strtoui64_l

_strtoul_l

_strtoull_l

_strtoumax_l

_ui64toa

_ui64toa_s

_ui64tow

_ui64tow_s

_ultoa

_ultoa_s

_ultow

_ultow_s

_wcstod_l

_wcstof_l

_wcstoi64

_wcstoi64_l

_wcstoimax_l

_wcstol_l

_wcstold_l

_wcstoll_l

_wcstombs_l

_wcstombs_s_l

_wcstoui64

_wcstoui64_l

_wcstoul_l

_wcstoull_l

_wcstoumax_l

_wctomb_l

_wctomb_s_l

_wtof

_wtof_l

_wtoi

_wtoi64

_wtoi64_l

_wtoi_l

_wtol

_wtol_l

_wtoll

_wtoll_l

atof

atoi

atol

atoll

btowc

c16rtomb

c32rtomb

mbrtoc16

mbrtoc32

mbrtowc

mbsrtowcs

mbsrtowcs_s

mbstowcs

mbstowcs_s

mbtowc

strtod

strtof

strtoimax

strtol

strtold

strtoll

strtoul

strtoull

strtoumax

wcrtomb

wcrtomb_s

wcsrtombs

wcsrtombs_s

wcstod

wcstof

wcstoimax

wcstol

wcstold

wcstoll

wcstombs

wcstombs_s

wcstoul

wcstoull

wcstoumax

wctob

wctomb

wctomb_s

wctrans

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-environment-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f6:1b:d0:3a:2a:42:56:cd:96:c4:4c:03:ce:96:63:43:fd:29:2e:8c:15:a0:85:20:30:77:08:5f:43:cf:5c:b6
Signer

Actual PE Digest

f6:1b:d0:3a:2a:42:56:cd:96:c4:4c:03:ce:96:63:43:fd:29:2e:8c:15:a0:85:20:30:77:08:5f:43:cf:5c:b6

Digest Algorithm

sha256

PE Digest Matches

true

a6:b5:1e:32:ab:31:76:f0:39:84:5c:0f:b1:76:36:d1:82:16:dc:82
Signer

Actual PE Digest

a6:b5:1e:32:ab:31:76:f0:39:84:5c:0f:b1:76:36:d1:82:16:dc:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__p__environ

__p__wenviron

_dupenv_s

_putenv

_putenv_s

_searchenv

_searchenv_s

_wdupenv_s

_wgetcwd

_wgetdcwd

_wgetenv

_wgetenv_s

_wputenv

_wputenv_s

_wsearchenv

_wsearchenv_s

getenv

getenv_s

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-filesystem-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d3:d0:a6:df:52:b3:56:c3:d2:d5:ff:8c:97:c4:f6:42:1f:30:87:5a:e3:cb:e6:c0:b3:91:48:40:64:e5:af:26
Signer

Actual PE Digest

d3:d0:a6:df:52:b3:56:c3:d2:d5:ff:8c:97:c4:f6:42:1f:30:87:5a:e3:cb:e6:c0:b3:91:48:40:64:e5:af:26

Digest Algorithm

sha256

PE Digest Matches

true

66:a1:92:80:e7:27:32:43:09:55:ae:1c:94:a4:1e:57:c6:24:e7:a4
Signer

Actual PE Digest

66:a1:92:80:e7:27:32:43:09:55:ae:1c:94:a4:1e:57:c6:24:e7:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_access

_access_s

_chdir

_chdrive

_chmod

_findclose

_findfirst32

_findfirst32i64

_findfirst64

_findfirst64i32

_findnext32

_findnext32i64

_findnext64

_findnext64i32

_fstat32

_fstat32i64

_fstat64

_fstat64i32

_fullpath

_getdiskfree

_getdrive

_getdrives

_lock_file

_makepath

_makepath_s

_mkdir

_rmdir

_splitpath

_splitpath_s

_stat32

_stat32i64

_stat64

_stat64i32

_umask

_umask_s

_unlink

_unlock_file

_waccess

_waccess_s

_wchdir

_wchmod

_wfindfirst32

_wfindfirst32i64

_wfindfirst64

_wfindfirst64i32

_wfindnext32

_wfindnext32i64

_wfindnext64

_wfindnext64i32

_wfullpath

_wmakepath

_wmakepath_s

_wmkdir

_wremove

_wrename

_wrmdir

_wsplitpath

_wsplitpath_s

_wstat32

_wstat32i64

_wstat64

_wstat64i32

_wunlink

remove

rename

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-heap-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

41:96:8c:df:1b:e0:94:5c:25:1f:ed:0f:9e:b1:c3:25:59:db:4a:fb:99:b1:2d:5a:ac:05:7d:22:6e:df:e9:25
Signer

Actual PE Digest

41:96:8c:df:1b:e0:94:5c:25:1f:ed:0f:9e:b1:c3:25:59:db:4a:fb:99:b1:2d:5a:ac:05:7d:22:6e:df:e9:25

Digest Algorithm

sha256

PE Digest Matches

true

91:a9:e1:85:d6:9a:4e:61:4c:98:ff:eb:89:28:7e:49:bd:b4:42:83
Signer

Actual PE Digest

91:a9:e1:85:d6:9a:4e:61:4c:98:ff:eb:89:28:7e:49:bd:b4:42:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_aligned_free

_aligned_malloc

_aligned_msize

_aligned_offset_malloc

_aligned_offset_realloc

_aligned_offset_recalloc

_aligned_realloc

_aligned_recalloc

_callnewh

_calloc_base

_expand

_free_base

_get_heap_handle

_heapchk

_heapmin

_heapwalk

_malloc_base

_msize

_query_new_handler

_query_new_mode

_realloc_base

_recalloc

_set_new_mode

calloc

free

malloc

realloc

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-locale-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:c0:de:2c:3d:07:94:e4:49:79:00:00:00:00:00:c0
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:7AB5-2DF2-DA3F,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c7:28:01:b0:dd:76:c6:57:0c:a1:cf:e9:f2:54:52:71:6e:f4:e1:9f:ab:27:cd:25:3d:85:cb:63:71:23:64:e8
Signer

Actual PE Digest

c7:28:01:b0:dd:76:c6:57:0c:a1:cf:e9:f2:54:52:71:6e:f4:e1:9f:ab:27:cd:25:3d:85:cb:63:71:23:64:e8

Digest Algorithm

sha256

PE Digest Matches

true

bd:30:cc:97:cc:c0:fc:74:1b:a4:06:58:7e:e0:8e:56:c7:67:a7:0c
Signer

Actual PE Digest

bd:30:cc:97:cc:c0:fc:74:1b:a4:06:58:7e:e0:8e:56:c7:67:a7:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

___lc_codepage_func

___lc_collate_cp_func

___lc_locale_name_func

___mb_cur_max_func

___mb_cur_max_l_func

__initialize_lconv_for_unsigned_char

__pctype_func

__pwctype_func

_configthreadlocale

_create_locale

_free_locale

_get_current_locale

_getmbcp

_lock_locales

_setmbcp

_unlock_locales

_wcreate_locale

_wsetlocale

localeconv

setlocale

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-math-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:09:81:2a:00:00:00:00:00:02
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/07/2010, 21:36

Not After

01/07/2025, 21:46

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:af:35:8f:ff:d3:22:45:76:4b:00:00:00:00:00:af
Certificate

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:56

Not After

07/09/2018, 17:56

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

e1:51:7c:bd:ed:69:ee:95:fb:56:67:f6:9b:c9:ba:98:79:64:b3:ab:91:b5:30:36:24:e2:15:c7:7e:84:10:b7
Signer

Actual PE Digest

e1:51:7c:bd:ed:69:ee:95:fb:56:67:f6:9b:c9:ba:98:79:64:b3:ab:91:b5:30:36:24:e2:15:c7:7e:84:10:b7

Digest Algorithm

sha256

PE Digest Matches

true

ba:be:5d:36:24:ca:af:13:80:2a:dc:8d:01:b5:22:d9:71:45:46:55
Signer

Actual PE Digest

ba:be:5d:36:24:ca:af:13:80:2a:dc:8d:01:b5:22:d9:71:45:46:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_Cbuild

_Cmulcc

_Cmulcr

_FCbuild

_FCmulcc

_FCmulcr

_LCbuild

_LCmulcc

_LCmulcr

__setusermatherr

_cabs

_chgsign

_chgsignf

_copysign

_copysignf

_d_int

_dclass

_dexp

_dlog

_dnorm

_dpcomp

_dpoly

_dscale

_dsign

_dsin

_dtest

_dunscale

_except1

_fd_int

_fdclass

_fdexp

_fdlog

_fdnorm

_fdopen

_fdpcomp

_fdpoly

_fdscale

_fdsign

_fdsin

_fdtest

_fdunscale

_finite

_finitef

_fpclass

_fpclassf

_get_FMA3_enable

_hypot

_hypotf

_isnan

_isnanf

_j0

_j1

_jn

_ld_int

_ldclass

_ldexp

_ldlog

_ldpcomp

_ldpoly

_ldscale

_ldsign

_ldsin

_ldtest

_ldunscale

_logb

_logbf

_nextafter

_nextafterf

_scalb

_scalbf

_set_FMA3_enable

_y0

_y1

_yn

acos

acosf

acosh

acoshf

acoshl

asin

asinf

asinh

asinhf

asinhl

atan

atan2

atan2f

atanf

atanh

atanhf

atanhl

cabs

cabsf

cabsl

cacos

cacosf

cacosh

cacoshf

cacoshl

cacosl

carg

cargf

cargl

casin

casinf

casinh

casinhf

casinhl

casinl

catan

catanf

catanh

catanhf

catanhl

catanl

cbrt

cbrtf

cbrtl

ccos

ccosf

ccosh

ccoshf

ccoshl

ccosl

ceil

ceilf

cexp

cexpf

cexpl

cimag

cimagf

cimagl

clog

clog10

clog10f

clog10l

clogf

clogl

conj

conjf

conjl

copysign

copysignf

copysignl

cos

cosf

cosh

coshf

cpow

cpowf

cpowl

cproj

cprojf

cprojl

creal

crealf

creall

csin

csinf

csinh

csinhf

csinhl

csinl

csqrt

csqrtf

csqrtl

ctan

ctanf

ctanh

ctanhf

ctanhl

ctanl

erf

erfc

erfcf

erfcl

erff

erfl

exp

exp2

exp2f

exp2l

expf

expm1

expm1f

expm1l

fabs

fdim

fdimf

fdiml

floor

floorf

fma

fmaf

fmal

fmax

fmaxf

fmaxl

fmin

fminf

fminl

fmod

fmodf

frexp

hypot

ilogb

ilogbf

ilogbl

ldexp

lgamma

lgammaf

lgammal

llrint

llrintf

llrintl

llround

llroundf

llroundl

log

log10

log10f

log1p

log1pf

log1pl

log2

log2f

log2l

logb

logbf

logbl

logf

lrint

lrintf

lrintl

lround

lroundf

lroundl

modf

modff

nan

nanf

nanl

nearbyint

nearbyintf

nearbyintl

nextafter

nextafterf

nextafterl

nexttoward

nexttowardf

nexttowardl

norm

normf

norml

pow

powf

remainder

remainderf

remainderl

remquo

remquof

remquol

rint

rintf

rintl

round

roundf

roundl

scalbln

scalblnf

scalblnl

scalbn

scalbnf

scalbnl

sin

sinf

sinh

sinhf

sqrt

sqrtf

tan

tanf

tanh

tanhf

tgamma

tgammaf

tgammal

trunc

truncf

truncl

Sections

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-multibyte-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

97:06:92:d4:af:31:dc:f7:0c:4c:78:cb:04:43:4b:64:e4:f6:04:15:65:f4:68:15:d1:12:84:42:78:c4:08:01
Signer

Actual PE Digest

97:06:92:d4:af:31:dc:f7:0c:4c:78:cb:04:43:4b:64:e4:f6:04:15:65:f4:68:15:d1:12:84:42:78:c4:08:01

Digest Algorithm

sha256

PE Digest Matches

true

9d:85:ee:84:38:0a:a9:55:6b:91:11:55:61:ec:a9:37:59:7d:ce:59
Signer

Actual PE Digest

9d:85:ee:84:38:0a:a9:55:6b:91:11:55:61:ec:a9:37:59:7d:ce:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__p__mbcasemap

__p__mbctype

_ismbbalnum

_ismbbalnum_l

_ismbbalpha

_ismbbalpha_l

_ismbbblank

_ismbbblank_l

_ismbbgraph

_ismbbgraph_l

_ismbbkalnum

_ismbbkalnum_l

_ismbbkana

_ismbbkana_l

_ismbbkprint

_ismbbkprint_l

_ismbbkpunct

_ismbbkpunct_l

_ismbblead

_ismbblead_l

_ismbbprint

_ismbbprint_l

_ismbbpunct

_ismbbpunct_l

_ismbbtrail

_ismbbtrail_l

_ismbcalnum

_ismbcalnum_l

_ismbcalpha

_ismbcalpha_l

_ismbcblank

_ismbcblank_l

_ismbcdigit

_ismbcdigit_l

_ismbcgraph

_ismbcgraph_l

_ismbchira

_ismbchira_l

_ismbckata

_ismbckata_l

_ismbcl0

_ismbcl0_l

_ismbcl1

_ismbcl1_l

_ismbcl2

_ismbcl2_l

_ismbclegal

_ismbclegal_l

_ismbclower

_ismbclower_l

_ismbcprint

_ismbcprint_l

_ismbcpunct

_ismbcpunct_l

_ismbcspace

_ismbcspace_l

_ismbcsymbol

_ismbcsymbol_l

_ismbcupper

_ismbcupper_l

_ismbslead

_ismbslead_l

_ismbstrail

_ismbstrail_l

_mbbtombc

_mbbtombc_l

_mbbtype

_mbbtype_l

_mbcasemap

_mbccpy

_mbccpy_l

_mbccpy_s

_mbccpy_s_l

_mbcjistojms

_mbcjistojms_l

_mbcjmstojis

_mbcjmstojis_l

_mbclen

_mbclen_l

_mbctohira

_mbctohira_l

_mbctokata

_mbctokata_l

_mbctolower

_mbctolower_l

_mbctombb

_mbctombb_l

_mbctoupper

_mbctoupper_l

_mblen_l

_mbsbtype

_mbsbtype_l

_mbscat_s

_mbscat_s_l

_mbschr

_mbschr_l

_mbscmp

_mbscmp_l

_mbscoll

_mbscoll_l

_mbscpy_s

_mbscpy_s_l

_mbscspn

_mbscspn_l

_mbsdec

_mbsdec_l

_mbsdup

_mbsicmp

_mbsicmp_l

_mbsicoll

_mbsicoll_l

_mbsinc

_mbsinc_l

_mbslen

_mbslen_l

_mbslwr

_mbslwr_l

_mbslwr_s

_mbslwr_s_l

_mbsnbcat

_mbsnbcat_l

_mbsnbcat_s

_mbsnbcat_s_l

_mbsnbcmp

_mbsnbcmp_l

_mbsnbcnt

_mbsnbcnt_l

_mbsnbcoll

_mbsnbcoll_l

_mbsnbcpy

_mbsnbcpy_l

_mbsnbcpy_s

_mbsnbcpy_s_l

_mbsnbicmp

_mbsnbicmp_l

_mbsnbicoll

_mbsnbicoll_l

_mbsnbset

_mbsnbset_l

_mbsnbset_s

_mbsnbset_s_l

_mbsncat

_mbsncat_l

_mbsncat_s

_mbsncat_s_l

_mbsnccnt

_mbsnccnt_l

_mbsncmp

_mbsncmp_l

_mbsncoll

_mbsncoll_l

_mbsncpy

_mbsncpy_l

_mbsncpy_s

_mbsncpy_s_l

_mbsnextc

_mbsnextc_l

_mbsnicmp

_mbsnicmp_l

_mbsnicoll

_mbsnicoll_l

_mbsninc

_mbsninc_l

_mbsnlen

_mbsnlen_l

_mbsnset

_mbsnset_l

_mbsnset_s

_mbsnset_s_l

_mbspbrk

_mbspbrk_l

_mbsrchr

_mbsrchr_l

_mbsrev

_mbsrev_l

_mbsset

_mbsset_l

_mbsset_s

_mbsset_s_l

_mbsspn

_mbsspn_l

_mbsspnp

_mbsspnp_l

_mbsstr

_mbsstr_l

_mbstok

_mbstok_l

_mbstok_s

_mbstok_s_l

_mbstowcs_l

_mbstowcs_s_l

_mbstrlen

_mbstrlen_l

_mbstrnlen

_mbstrnlen_l

_mbsupr

_mbsupr_l

_mbsupr_s

_mbsupr_s_l

_mbtowc_l

Sections

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-private-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

eb:2d:b5:eb:f2:97:29:fd:dd:e7:55:3d:60:68:92:3a:7b:ee:ac:d7:5d:fe:de:4c:d1:2a:85:da:dc:63:22:05
Signer

Actual PE Digest

eb:2d:b5:eb:f2:97:29:fd:dd:e7:55:3d:60:68:92:3a:7b:ee:ac:d7:5d:fe:de:4c:d1:2a:85:da:dc:63:22:05

Digest Algorithm

sha256

PE Digest Matches

true

17:eb:20:ef:63:dc:3f:39:3b:90:fc:ef:08:c5:74:54:4f:50:41:4d
Signer

Actual PE Digest

17:eb:20:ef:63:dc:3f:39:3b:90:fc:ef:08:c5:74:54:4f:50:41:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_CreateFrameInfo

_CxxThrowException

_FindAndUnlinkFrame

_GetImageBase

_GetThrowImageBase

_IsExceptionObjectToBeDestroyed

_SetImageBase

_SetThrowImageBase

_SetWinRTOutOfMemoryExceptionCallback

__AdjustPointer

__BuildCatchObject

__BuildCatchObjectHelper

__C_specific_handler

__CxxDetectRethrow

__CxxExceptionFilter

__CxxFrameHandler

__CxxFrameHandler2

__CxxFrameHandler3

__CxxQueryExceptionSize

__CxxRegisterExceptionObject

__CxxUnregisterExceptionObject

__DestructExceptionObject

__FrameUnwindFilter

__GetPlatformExceptionInfo

__NLG_Dispatch2

__NLG_Return2

__RTCastToVoid

__RTDynamicCast

__RTtypeid

__TypeMatch

__current_exception

__current_exception_context

__dcrt_get_wide_environment_from_os

__dcrt_initial_narrow_environment

__intrinsic_setjmp

__intrinsic_setjmpex

__processing_throw

__report_gsfailure

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_compare

__std_type_info_destroy_list

__std_type_info_hash

__std_type_info_name

__unDName

__unDNameEx

__uncaught_exception

__uncaught_exceptions

_get_purecall_handler

_get_unexpected

_is_exception_typeof

_local_unwind

_o__Getdays

_o__Getmonths

_o__Gettnames

_o__Strftime

_o__W_Getdays

_o__W_Getmonths

_o__W_Gettnames

_o__Wcsftime

_o____lc_codepage_func

_o____lc_collate_cp_func

_o____lc_locale_name_func

_o____mb_cur_max_func

_o___acrt_iob_func

_o___conio_common_vcprintf

_o___conio_common_vcprintf_p

_o___conio_common_vcprintf_s

_o___conio_common_vcscanf

_o___conio_common_vcwprintf

_o___conio_common_vcwprintf_p

_o___conio_common_vcwprintf_s

_o___conio_common_vcwscanf

_o___daylight

_o___dstbias

_o___fpe_flt_rounds

_o___p___argc

_o___p___argv

_o___p___wargv

_o___p__acmdln

_o___p__commode

_o___p__environ

_o___p__fmode

_o___p__mbcasemap

_o___p__mbctype

_o___p__pgmptr

_o___p__wcmdln

_o___p__wenviron

_o___p__wpgmptr

_o___pctype_func

_o___pwctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___std_type_info_name

_o___stdio_common_vfprintf

_o___stdio_common_vfprintf_p

_o___stdio_common_vfprintf_s

_o___stdio_common_vfscanf

_o___stdio_common_vfwprintf

_o___stdio_common_vfwprintf_p

_o___stdio_common_vfwprintf_s

_o___stdio_common_vfwscanf

_o___stdio_common_vsnprintf_s

_o___stdio_common_vsnwprintf_s

_o___stdio_common_vsprintf

_o___stdio_common_vsprintf_p

_o___stdio_common_vsprintf_s

_o___stdio_common_vsscanf

_o___stdio_common_vswprintf

_o___stdio_common_vswprintf_p

_o___stdio_common_vswprintf_s

_o___stdio_common_vswscanf

_o___timezone

_o___tzname

_o___wcserror

_o__access

_o__access_s

_o__aligned_free

_o__aligned_malloc

_o__aligned_msize

_o__aligned_offset_malloc

_o__aligned_offset_realloc

_o__aligned_offset_recalloc

_o__aligned_realloc

_o__aligned_recalloc

_o__atodbl

_o__atodbl_l

_o__atof_l

_o__atoflt

_o__atoflt_l

_o__atoi64

_o__atoi64_l

_o__atoi_l

_o__atol_l

_o__atoldbl

_o__atoldbl_l

_o__atoll_l

_o__beep

_o__beginthread

_o__beginthreadex

_o__cabs

_o__callnewh

_o__calloc_base

_o__cexit

_o__cgets

_o__cgets_s

_o__cgetws

_o__cgetws_s

_o__chdir

_o__chdrive

_o__chmod

_o__chsize

_o__chsize_s

_o__close

_o__commit

_o__configthreadlocale

_o__configure_narrow_argv

_o__configure_wide_argv

_o__controlfp_s

_o__cputs

_o__cputws

_o__creat

_o__create_locale

_o__crt_atexit

_o__ctime32_s

_o__ctime64_s

_o__cwait

_o__d_int

_o__dclass

_o__difftime32

_o__difftime64

_o__dlog

_o__dnorm

_o__dpcomp

_o__dpoly

_o__dscale

_o__dsign

_o__dsin

_o__dtest

_o__dunscale

_o__dup

_o__dup2

_o__dupenv_s

_o__ecvt

_o__ecvt_s

_o__endthread

_o__endthreadex

_o__eof

_o__errno

_o__except1

_o__execute_onexit_table

_o__execv

_o__execve

_o__execvp

_o__execvpe

_o__exit

_o__expand

_o__fclose_nolock

_o__fcloseall

_o__fcvt

_o__fcvt_s

_o__fd_int

_o__fdclass

_o__fdexp

_o__fdlog

_o__fdopen

_o__fdpcomp

_o__fdpoly

_o__fdscale

_o__fdsign

_o__fdsin

_o__fflush_nolock

_o__fgetc_nolock

_o__fgetchar

_o__fgetwc_nolock

_o__fgetwchar

_o__filelength

_o__filelengthi64

_o__fileno

_o__findclose

_o__findfirst32

_o__findfirst32i64

_o__findfirst64

_o__findfirst64i32

_o__findnext32

_o__findnext32i64

_o__findnext64

_o__findnext64i32

_o__flushall

_o__fpclass

_o__fpclassf

_o__fputc_nolock

_o__fputchar

_o__fputwc_nolock

_o__fputwchar

_o__fread_nolock

_o__fread_nolock_s

_o__free_base

_o__free_locale

_o__fseek_nolock

_o__fseeki64

_o__fseeki64_nolock

_o__fsopen

_o__fstat32

_o__fstat32i64

_o__fstat64

_o__fstat64i32

_o__ftell_nolock

_o__ftelli64

_o__ftelli64_nolock

_o__ftime32

_o__ftime32_s

_o__ftime64

_o__ftime64_s

_o__fullpath

_o__futime32

_o__futime64

_o__fwrite_nolock

_o__gcvt

_o__gcvt_s

_o__get_daylight

_o__get_doserrno

_o__get_dstbias

_o__get_errno

_o__get_fmode

_o__get_heap_handle

_o__get_initial_narrow_environment

_o__get_initial_wide_environment

_o__get_invalid_parameter_handler

_o__get_narrow_winmain_command_line

_o__get_osfhandle

_o__get_pgmptr

_o__get_stream_buffer_pointers

_o__get_terminate

_o__get_thread_local_invalid_parameter_handler

_o__get_timezone

_o__get_tzname

_o__get_wide_winmain_command_line

_o__get_wpgmptr

_o__getc_nolock

_o__getch

_o__getch_nolock

_o__getche

_o__getche_nolock

_o__getcwd

_o__getdcwd

_o__getdiskfree

_o__getdllprocaddr

_o__getdrive

_o__getdrives

_o__getmbcp

_o__getsystime

_o__getw

_o__getwc_nolock

_o__getwch

_o__getwch_nolock

_o__getwche

_o__getwche_nolock

_o__getws

_o__getws_s

_o__gmtime32

_o__gmtime32_s

_o__gmtime64

_o__gmtime64_s

_o__heapchk

_o__heapmin

_o__hypot

_o__hypotf

_o__i64toa

_o__i64toa_s

_o__i64tow

_o__i64tow_s

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__initialize_wide_environment

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__isatty

_o__isctype

_o__isctype_l

_o__isleadbyte_l

_o__ismbbalnum

_o__ismbbalnum_l

_o__ismbbalpha

_o__ismbbalpha_l

_o__ismbbblank

_o__ismbbblank_l

_o__ismbbgraph

_o__ismbbgraph_l

_o__ismbbkalnum

_o__ismbbkalnum_l

_o__ismbbkana

_o__ismbbkana_l

_o__ismbbkprint

_o__ismbbkprint_l

_o__ismbbkpunct

_o__ismbbkpunct_l

_o__ismbblead

_o__ismbblead_l

_o__ismbbprint

_o__ismbbprint_l

_o__ismbbpunct

_o__ismbbpunct_l

_o__ismbbtrail

_o__ismbbtrail_l

_o__ismbcalnum

_o__ismbcalnum_l

_o__ismbcalpha

_o__ismbcalpha_l

_o__ismbcblank

_o__ismbcblank_l

_o__ismbcdigit

_o__ismbcdigit_l

_o__ismbcgraph

_o__ismbcgraph_l

_o__ismbchira

_o__ismbchira_l

_o__ismbckata

_o__ismbckata_l

_o__ismbcl0

_o__ismbcl0_l

_o__ismbcl1

_o__ismbcl1_l

_o__ismbcl2

_o__ismbcl2_l

_o__ismbclegal

_o__ismbclegal_l

_o__ismbclower

_o__ismbclower_l

_o__ismbcprint

_o__ismbcprint_l

_o__ismbcpunct

_o__ismbcpunct_l

_o__ismbcspace

_o__ismbcspace_l

_o__ismbcsymbol

_o__ismbcsymbol_l

_o__ismbcupper

_o__ismbcupper_l

_o__ismbslead

_o__ismbslead_l

_o__ismbstrail

_o__ismbstrail_l

_o__iswctype_l

_o__itoa

_o__itoa_s

_o__itow

_o__itow_s

_o__j0

_o__j1

_o__jn

_o__kbhit

_o__ld_int

_o__ldclass

_o__ldexp

_o__ldlog

_o__ldpcomp

_o__ldpoly

_o__ldscale

_o__ldsign

_o__ldsin

_o__ldtest

_o__ldunscale

_o__lfind

_o__lfind_s

_o__loaddll

_o__localtime32

_o__localtime32_s

_o__localtime64

_o__localtime64_s

_o__lock_file

_o__locking

_o__logb

_o__logbf

_o__lsearch

_o__lsearch_s

_o__lseek

_o__lseeki64

_o__ltoa

_o__ltoa_s

_o__ltow

_o__ltow_s

_o__makepath

_o__makepath_s

_o__malloc_base

_o__mbbtombc

_o__mbbtombc_l

_o__mbbtype

_o__mbbtype_l

_o__mbccpy

_o__mbccpy_l

_o__mbccpy_s

_o__mbccpy_s_l

_o__mbcjistojms

_o__mbcjistojms_l

_o__mbcjmstojis

_o__mbcjmstojis_l

_o__mbclen

_o__mbclen_l

_o__mbctohira

_o__mbctohira_l

_o__mbctokata

_o__mbctokata_l

_o__mbctolower

_o__mbctolower_l

_o__mbctombb

_o__mbctombb_l

_o__mbctoupper

_o__mbctoupper_l

_o__mblen_l

_o__mbsbtype

_o__mbsbtype_l

_o__mbscat_s

_o__mbscat_s_l

_o__mbschr

_o__mbschr_l

_o__mbscmp

_o__mbscmp_l

_o__mbscoll

_o__mbscoll_l

_o__mbscpy_s

_o__mbscpy_s_l

_o__mbscspn

_o__mbscspn_l

_o__mbsdec

_o__mbsdec_l

_o__mbsicmp

_o__mbsicmp_l

_o__mbsicoll

_o__mbsicoll_l

_o__mbsinc

_o__mbsinc_l

_o__mbslen

_o__mbslen_l

_o__mbslwr

_o__mbslwr_l

_o__mbslwr_s

_o__mbslwr_s_l

_o__mbsnbcat

_o__mbsnbcat_l

_o__mbsnbcat_s

_o__mbsnbcat_s_l

_o__mbsnbcmp

_o__mbsnbcmp_l

_o__mbsnbcnt

_o__mbsnbcnt_l

_o__mbsnbcoll

_o__mbsnbcoll_l

_o__mbsnbcpy

_o__mbsnbcpy_l

_o__mbsnbcpy_s

_o__mbsnbcpy_s_l

_o__mbsnbicmp

_o__mbsnbicmp_l

_o__mbsnbicoll

_o__mbsnbicoll_l

_o__mbsnbset

_o__mbsnbset_l

Sections

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-process-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

45:63:ee:b0:b0:53:ea:a2:aa:da:49:f2:7c:6c:69:f4:b2:e0:56:2a:03:c8:91:49:8b:e1:9f:ba:15:49:4e:ff
Signer

Actual PE Digest

45:63:ee:b0:b0:53:ea:a2:aa:da:49:f2:7c:6c:69:f4:b2:e0:56:2a:03:c8:91:49:8b:e1:9f:ba:15:49:4e:ff

Digest Algorithm

sha256

PE Digest Matches

true

4b:ef:86:b5:82:b6:8d:ee:43:d9:93:0f:5f:7f:2b:b7:2d:23:0f:20
Signer

Actual PE Digest

4b:ef:86:b5:82:b6:8d:ee:43:d9:93:0f:5f:7f:2b:b7:2d:23:0f:20

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_beep

_cwait

_execl

_execle

_execlp

_execlpe

_execv

_execve

_execvp

_execvpe

_loaddll

_spawnl

_spawnle

_spawnlp

_spawnlpe

_spawnv

_spawnve

_spawnvp

_spawnvpe

_unloaddll

_wexecl

_wexecle

_wexeclp

_wexeclpe

_wexecv

_wexecve

_wexecvp

_wexecvpe

_wspawnl

_wspawnle

_wspawnlp

_wspawnlpe

_wspawnv

_wspawnve

_wspawnvp

_wspawnvpe

Sections

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-runtime-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:09:81:2a:00:00:00:00:00:02
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/07/2010, 21:36

Not After

01/07/2025, 21:46

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:af:35:8f:ff:d3:22:45:76:4b:00:00:00:00:00:af
Certificate

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:56

Not After

07/09/2018, 17:56

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:2137-37A0-4AAA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

1e:ec:ef:26:23:6c:cc:ce:61:c2:93:ce:a0:90:60:fa:8e:2f:dd:fd:2a:c7:d3:3b:1b:b9:3e:7d:50:c9:90:5c
Signer

Actual PE Digest

1e:ec:ef:26:23:6c:cc:ce:61:c2:93:ce:a0:90:60:fa:8e:2f:dd:fd:2a:c7:d3:3b:1b:b9:3e:7d:50:c9:90:5c

Digest Algorithm

sha256

PE Digest Matches

true

25:f9:42:a3:e1:fd:8d:96:e7:76:1b:a5:9d:70:ce:4a:83:a7:af:50
Signer

Actual PE Digest

25:f9:42:a3:e1:fd:8d:96:e7:76:1b:a5:9d:70:ce:4a:83:a7:af:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_Exit

__doserrno

__fpe_flt_rounds

__fpecode

__p___argc

__p___argv

__p___wargv

__p__acmdln

__p__pgmptr

__p__wcmdln

__p__wpgmptr

__pxcptinfoptrs

__sys_errlist

__sys_nerr

__threadhandle

__threadid

__wcserror

__wcserror_s

_assert

_beginthread

_beginthreadex

_c_exit

_cexit

_clearfp

_configure_narrow_argv

_configure_wide_argv

_control87

_controlfp

_controlfp_s

_crt_at_quick_exit

_crt_atexit

_endthread

_endthreadex

_errno

_execute_onexit_table

_exit

_fpieee_flt

_fpreset

_get_doserrno

_get_errno

_get_initial_narrow_environment

_get_initial_wide_environment

_get_invalid_parameter_handler

_get_narrow_winmain_command_line

_get_pgmptr

_get_terminate

_get_thread_local_invalid_parameter_handler

_get_wide_winmain_command_line

_get_wpgmptr

_getdllprocaddr

_getpid

_initialize_narrow_environment

_initialize_onexit_table

_initialize_wide_environment

_initterm

_initterm_e

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

_invoke_watson

_query_app_type

_register_onexit_function

_register_thread_local_exe_atexit_callback

_resetstkoflw

_seh_filter_dll

_seh_filter_exe

_set_abort_behavior

_set_app_type

_set_controlfp

_set_doserrno

_set_errno

_set_error_mode

_set_invalid_parameter_handler

_set_new_handler

_set_thread_local_invalid_parameter_handler

_seterrormode

_sleep

_statusfp

_strerror

_strerror_s

_wassert

_wcserror

_wcserror_s

_wperror

_wsystem

abort

exit

feclearexcept

fegetenv

fegetexceptflag

fegetround

feholdexcept

fesetenv

fesetexceptflag

fesetround

fetestexcept

perror

quick_exit

raise

set_terminate

signal

strerror

strerror_s

system

terminate

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-stdio-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:b9:bc:0f:4e:57:e3:66:65:38:00:00:00:00:00:b9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:6BF6-2D52-92C1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:f1:d4:2c:17:a3:64:4c:5f:57:b5:fd:6c:78:24:e6:db:ec:7e:f8:d4:af:ab:47:4f:7c:72:13:79:d7:31:e8
Signer

Actual PE Digest

05:f1:d4:2c:17:a3:64:4c:5f:57:b5:fd:6c:78:24:e6:db:ec:7e:f8:d4:af:ab:47:4f:7c:72:13:79:d7:31:e8

Digest Algorithm

sha256

PE Digest Matches

true

75:8f:ac:e5:7a:6f:1a:bc:14:ba:3e:76:cb:d8:15:50:28:b5:b2:1b
Signer

Actual PE Digest

75:8f:ac:e5:7a:6f:1a:bc:14:ba:3e:76:cb:d8:15:50:28:b5:b2:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__acrt_iob_func

__p__commode

__p__fmode

__stdio_common_vfprintf

__stdio_common_vfprintf_p

__stdio_common_vfprintf_s

__stdio_common_vfscanf

__stdio_common_vfwprintf

__stdio_common_vfwprintf_p

__stdio_common_vfwprintf_s

__stdio_common_vfwscanf

__stdio_common_vsnprintf_s

__stdio_common_vsnwprintf_s

__stdio_common_vsprintf

__stdio_common_vsprintf_p

__stdio_common_vsprintf_s

__stdio_common_vsscanf

__stdio_common_vswprintf

__stdio_common_vswprintf_p

__stdio_common_vswprintf_s

__stdio_common_vswscanf

_chsize

_chsize_s

_close

_commit

_creat

_dup

_dup2

_eof

_fclose_nolock

_fcloseall

_fflush_nolock

_fgetc_nolock

_fgetchar

_fgetwc_nolock

_fgetwchar

_filelength

_filelengthi64

_fileno

_flushall

_fputc_nolock

_fputchar

_fputwc_nolock

_fputwchar

_fread_nolock

_fread_nolock_s

_fseek_nolock

_fseeki64

_fseeki64_nolock

_fsopen

_ftell_nolock

_ftelli64

_ftelli64_nolock

_fwrite_nolock

_get_fmode

_get_osfhandle

_get_printf_count_output

_get_stream_buffer_pointers

_getc_nolock

_getcwd

_getdcwd

_getmaxstdio

_getw

_getwc_nolock

_getws

_getws_s

_isatty

_kbhit

_locking

_lseek

_lseeki64

_mktemp

_mktemp_s

_open

_open_osfhandle

_pclose

_pipe

_popen

_putc_nolock

_putw

_putwc_nolock

_putws

_read

_rmtmp

_set_fmode

_set_printf_count_output

_setmaxstdio

_setmode

_sopen

_sopen_dispatch

_sopen_s

_tell

_telli64

_tempnam

_ungetc_nolock

_ungetwc_nolock

_wcreat

_wfdopen

_wfopen

_wfopen_s

_wfreopen

_wfreopen_s

_wfsopen

_wmktemp

_wmktemp_s

_wopen

_wpopen

_write

_wsopen

_wsopen_dispatch

_wsopen_s

_wtempnam

_wtmpnam

_wtmpnam_s

clearerr

clearerr_s

fclose

feof

ferror

fflush

fgetc

fgetpos

fgets

fgetwc

fgetws

fopen

fopen_s

fputc

fputs

fputwc

fputws

fread

fread_s

freopen

freopen_s

fseek

fsetpos

ftell

fwrite

getc

getchar

gets

gets_s

getwc

getwchar

putc

putchar

puts

putwc

putwchar

rewind

setbuf

setvbuf

tmpfile

tmpfile_s

tmpnam

tmpnam_s

ungetc

ungetwc

Sections

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-string-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:ba:6a:36:de:1a:ad:bd:3c:1f:00:00:00:00:00:ba
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

69:01:b0:f7:b4:fe:ab:58:ce:8a:a6:14:b7:81:c4:d9:6a:b4:f4:49:88:ee:55:3f:d3:d6:14:14:fd:ea:84:49
Signer

Actual PE Digest

69:01:b0:f7:b4:fe:ab:58:ce:8a:a6:14:b7:81:c4:d9:6a:b4:f4:49:88:ee:55:3f:d3:d6:14:14:fd:ea:84:49

Digest Algorithm

sha256

PE Digest Matches

true

ad:83:76:63:6b:43:f0:87:20:7e:74:bc:f0:ee:77:0a:1f:a5:20:17
Signer

Actual PE Digest

ad:83:76:63:6b:43:f0:87:20:7e:74:bc:f0:ee:77:0a:1f:a5:20:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

__isascii

__iscsym

__iscsymf

__iswcsym

__iswcsymf

__strncnt

__wcsncnt

_isalnum_l

_isalpha_l

_isblank_l

_iscntrl_l

_isctype

_isctype_l

_isdigit_l

_isgraph_l

_isleadbyte_l

_islower_l

_isprint_l

_ispunct_l

_isspace_l

_isupper_l

_iswalnum_l

_iswalpha_l

_iswblank_l

_iswcntrl_l

_iswcsym_l

_iswcsymf_l

_iswctype_l

_iswdigit_l

_iswgraph_l

_iswlower_l

_iswprint_l

_iswpunct_l

_iswspace_l

_iswupper_l

_iswxdigit_l

_isxdigit_l

_memccpy

_memicmp

_memicmp_l

_strcoll_l

_strdup

_stricmp

_stricmp_l

_stricoll

_stricoll_l

_strlwr

_strlwr_l

_strlwr_s

_strlwr_s_l

_strncoll

_strncoll_l

_strnicmp

_strnicmp_l

_strnicoll

_strnicoll_l

_strnset

_strnset_s

_strrev

_strset

_strset_s

_strupr

_strupr_l

_strupr_s

_strupr_s_l

_strxfrm_l

_tolower

_tolower_l

_toupper

_toupper_l

_towlower_l

_towupper_l

_wcscoll_l

_wcsdup

_wcsicmp

_wcsicmp_l

_wcsicoll

_wcsicoll_l

_wcslwr

_wcslwr_l

_wcslwr_s

_wcslwr_s_l

_wcsncoll

_wcsncoll_l

_wcsnicmp

_wcsnicmp_l

_wcsnicoll

_wcsnicoll_l

_wcsnset

_wcsnset_s

_wcsrev

_wcsset

_wcsset_s

_wcsupr

_wcsupr_l

_wcsupr_s

_wcsupr_s_l

_wcsxfrm_l

_wctype

is_wctype

isalnum

isalpha

isblank

iscntrl

isdigit

isgraph

isleadbyte

islower

isprint

ispunct

isspace

isupper

iswalnum

iswalpha

iswascii

iswblank

iswcntrl

iswctype

iswdigit

iswgraph

iswlower

iswprint

iswpunct

iswspace

iswupper

iswxdigit

isxdigit

mblen

mbrlen

memcpy_s

memmove_s

memset

strcat

strcat_s

strcmp

strcoll

strcpy

strcpy_s

strcspn

strlen

strncat

strncat_s

strncmp

strncpy

strncpy_s

strnlen

strpbrk

strspn

strtok

strtok_s

strxfrm

tolower

toupper

towctrans

towlower

towupper

wcscat

wcscat_s

wcscmp

wcscoll

wcscpy

wcscpy_s

wcscspn

wcslen

wcsncat

wcsncat_s

wcsncmp

wcsncpy

wcsncpy_s

wcsnlen

wcspbrk

wcsspn

wcstok

wcstok_s

wcsxfrm

wctype

wmemcpy_s

wmemmove_s

Sections

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-time-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bb:b6:77:24:71:4a:20:00:20:00:00:00:00:00:bb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:0DE8-2DC5-3CA9,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

43:37:c3:b5:4e:ee:75:4a:d5:dd:12:c0:a6:dc:ad:4c:b3:fd:19:a9:e8:f7:83:ab:83:e7:ab:4c:3a:d7:cc:20
Signer

Actual PE Digest

43:37:c3:b5:4e:ee:75:4a:d5:dd:12:c0:a6:dc:ad:4c:b3:fd:19:a9:e8:f7:83:ab:83:e7:ab:4c:3a:d7:cc:20

Digest Algorithm

sha256

PE Digest Matches

true

20:1b:74:20:c6:2b:6f:93:9d:0f:e7:a3:12:e0:d5:0a:ce:1a:16:3c
Signer

Actual PE Digest

20:1b:74:20:c6:2b:6f:93:9d:0f:e7:a3:12:e0:d5:0a:ce:1a:16:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_Getdays

_Getmonths

_Gettnames

_Strftime

_W_Getdays

_W_Getmonths

_W_Gettnames

_Wcsftime

__daylight

__dstbias

__timezone

__tzname

_ctime32

_ctime32_s

_ctime64

_ctime64_s

_difftime32

_difftime64

_ftime32

_ftime32_s

_ftime64

_ftime64_s

_futime32

_futime64

_get_daylight

_get_dstbias

_get_timezone

_get_tzname

_getsystime

_gmtime32

_gmtime32_s

_gmtime64

_gmtime64_s

_localtime32

_localtime32_s

_localtime64

_localtime64_s

_mkgmtime32

_mkgmtime64

_mktime32

_mktime64

_setsystime

_strdate

_strdate_s

_strftime_l

_strtime

_strtime_s

_time32

_time64

_timespec32_get

_timespec64_get

_tzset

_utime32

_utime64

_wasctime

_wasctime_s

_wcsftime_l

_wctime32

_wctime32_s

_wctime64

_wctime64_s

_wstrdate

_wstrdate_s

_wstrtime

_wstrtime_s

_wutime32

_wutime64

asctime

asctime_s

clock

strftime

wcsftime

Sections

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/api-ms-win-crt-utility-l1-1-0.dll

.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:78:25:5a:b5:cd:23:c6:5f:95:00:01:00:00:01:78
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:4e:3c:f1:73:f4:dd:53:52:a5:00:00:00:00:01:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/11/2016, 21:59

Not After

17/02/2018, 21:59

Subject

CN=Microsoft Corporation,OU=AOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

50:5e:f2:17:e3:1c:c5:63:bb:ad:16:f0:eb:b6:4b:2c:b6:97:ff:48:f7:77:f9:00:de:a3:51:ea:61:e5:c6:ab
Signer

Actual PE Digest

50:5e:f2:17:e3:1c:c5:63:bb:ad:16:f0:eb:b6:4b:2c:b6:97:ff:48:f7:77:f9:00:de:a3:51:ea:61:e5:c6:ab

Digest Algorithm

sha256

PE Digest Matches

true

86:6c:eb:50:19:2a:38:b3:06:1e:03:dd:f3:69:22:38:ec:4e:7b:df
Signer

Actual PE Digest

86:6c:eb:50:19:2a:38:b3:06:1e:03:dd:f3:69:22:38:ec:4e:7b:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Exports

_abs64

_byteswap_uint64

_byteswap_ulong

_byteswap_ushort

_lfind

_lfind_s

_lrotl

_lrotr

_lsearch

_lsearch_s

_rotl

_rotl64

_rotr

_rotr64

_swab

abs

bsearch

bsearch_s

div

imaxabs

imaxdiv

labs

ldiv

llabs

lldiv

qsort

qsort_s

rand

rand_s

srand

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/blink_image_resources_200_percent.pak

DarkSoulsSaveManager/content_resources_200_percent.pak

DarkSoulsSaveManager/content_shell.pak

.js

DarkSoulsSaveManager/d3dcompiler_47.dll

.dll windows:6 windows x64 arch:x64

2ce80dc262aecd9b9f45ee13d6b30c08

Code Sign

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/08/2012, 17:49

Not After

30/11/2013, 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07
Signer

Actual PE Digest

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07

Digest Algorithm

sha256

PE Digest Matches

true

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78
Signer

Actual PE Digest

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

msvcrt

__dllonexit

_unlock

_lock

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

__C_specific_handler

_initterm

_amsg_exit

_XcptFilter

_strtoui64

sscanf

_isnan

strtoul

_vsnprintf

isxdigit

atof

setlocale

_strdup

_mbstrlen

_vsnwprintf

strnlen

modf

strrchr

strncpy_s

memcpy_s

isalnum

_finite

_clearfp

_controlfp

strcpy_s

malloc

_strnicmp

_fpclass

strncmp

isspace

strstr

strchr

free

sprintf_s

_stricmp

_purecall

memmove

qsort

isalpha

toupper

atoi

isdigit

_onexit

??2@YAPEAX_K@Z

getenv

??3@YAXPEAX@Z

wcsncmp

wcsncpy_s

_wcsicmp

memcpy

memset

fclose

strcat_s

bsearch

_CxxThrowException

memcmp

_snwprintf_s

wcschr

iswdigit

__unDName

fread

fseek

_wfsopen

vsprintf_s

wcstol

_wcsnicmp

_wsplitpath_s

towlower

wcscpy_s

??_U@YAPEAX_K@Z

??_V@YAXPEAX@Z

swprintf_s

wcsncat_s

wcsrchr

_wfullpath

_wmakepath_s

_time64

_chsize

_close

_read

_write

_lseeki64

_get_osfhandle

_open_osfhandle

_wcsdup

wcscat_s

ftell

_mbscmp

_memicmp

_wgetenv

tolower

_wsopen

__CxxFrameHandler3

acos

asin

atan

atan2

ceil

cos

cosh

exp

floor

floorf

fmod

log

pow

sin

sinh

sqrt

strcmp

tan

tanh

advapi32

CryptDestroyHash

CryptHashData

CryptCreateHash

CryptGetHashParam

CryptReleaseContext

CryptAcquireContextW

RegOpenKeyExW

RegQueryValueExA

RegEnumKeyExA

RegOpenKeyExA

RegCloseKey

RegQueryValueExW

kernel32

LocalFree

LocalAlloc

GetVersion

GetTickCount

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

SetLastError

CreateFileMappingW

UnmapViewOfFile

GetFileSize

CreateFileA

GetSystemInfo

VirtualAlloc

VirtualFree

GetProcAddress

LoadLibraryExW

GetEnvironmentVariableA

GetFullPathNameA

GetFullPathNameW

TlsFree

TlsGetValue

TlsSetValue

TlsAlloc

Sleep

LCMapStringW

GetFileAttributesW

SetFileAttributesW

CopyFileExW

DeleteFileW

GetFileType

DeviceIoControl

ExpandEnvironmentStringsW

InitializeCriticalSectionAndSpinCount

SetFilePointer

FlushViewOfFile

MapViewOfFileEx

GetModuleFileNameA

MapViewOfFile

DisableThreadLibraryCalls

CreateFileW

GetLastError

GetFileSizeEx

ReadFile

CloseHandle

WriteFile

WideCharToMultiByte

FreeLibrary

lstrcmpiA

MultiByteToWideChar

OutputDebugStringA

QueryPerformanceCounter

HeapCreate

HeapDestroy

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

HeapAlloc

GetProcessHeap

HeapFree

rpcrt4

UuidCreate

Exports

D3DAssemble

D3DCompile

D3DCompile2

D3DCompileFromFile

D3DCompressShaders

D3DCreateBlob

D3DCreateFunctionLinkingGraph

D3DCreateLinker

D3DDecompressShaders

D3DDisassemble

D3DDisassemble10Effect

D3DDisassemble11Trace

D3DDisassembleRegion

D3DGetBlobPart

D3DGetDebugInfo

D3DGetInputAndOutputSignatureBlob

D3DGetInputSignatureBlob

D3DGetOutputSignatureBlob

D3DGetTraceInstructionOffsets

D3DLoadModule

D3DPreprocess

D3DReadFileToBlob

D3DReflect

D3DReflectLibrary

D3DReturnFailure1

D3DSetBlobPart

D3DStripShader

D3DWriteBlobToFile

DebugSetMute

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/ffmpeg.dll

.dll windows:5 windows x64 arch:x64

8107c8aa045ec766ceebc74b2f03a5b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

advapi32

CryptReleaseContext

CryptGenRandom

CryptAcquireContextW

kernel32

InitOnceBeginInitialize

InitOnceComplete

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSectionEx

DeleteCriticalSection

CloseHandle

InitializeConditionVariable

WakeConditionVariable

WakeAllConditionVariable

SleepConditionVariableCS

WaitForSingleObjectEx

GetCurrentProcess

GetProcessAffinityMask

GetStdHandle

GetConsoleScreenBufferInfo

SetConsoleTextAttribute

Sleep

GetSystemTimeAsFileTime

IsDebuggerPresent

InitializeSListHead

DisableThreadLibraryCalls

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

vcruntime140

memset

__std_type_info_destroy_list

__C_specific_handler

memchr

memcpy

memcmp

strrchr

memmove

strchr

strstr

api-ms-win-crt-runtime-l1-1-0

_beginthreadex

_initterm

_initterm_e

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_crt_atexit

_cexit

_errno

abort

api-ms-win-crt-stdio-l1-1-0

fputs

__stdio_common_vsscanf

__stdio_common_vfprintf

_isatty

__acrt_iob_func

__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

atoi

strtod

strtol

strtoul

strtoll

api-ms-win-crt-string-l1-1-0

strspn

strncmp

strcmp

api-ms-win-crt-math-l1-1-0

round

pow

hypot

atan2

acos

asin

_dclass

fabs

sinh

tan

tanh

lrintf

llrint

trunc

ceil

floor

exp

atan

ldexp

exp2

sqrt

sin

cos

log

cosh

frexp

atan2f

atanf

cosf

sinf

sqrtf

log2f

powf

cbrtf

cbrt

api-ms-win-crt-time-l1-1-0

_localtime64

_gmtime64

clock

strftime

_mktime64

api-ms-win-crt-heap-l1-1-0

malloc

_aligned_free

_aligned_malloc

_aligned_realloc

free

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

bsearch

Exports

av_bitstream_filter_close

av_bitstream_filter_filter

av_bitstream_filter_init

av_buffer_create

av_buffer_get_opaque

av_dict_free

av_dict_get

av_dict_set

av_frame_alloc

av_frame_free

av_frame_unref

av_free

av_get_bytes_per_sample

av_get_cpu_flags

av_image_check_size

av_image_fill_linesizes

av_index_search_timestamp

av_init_packet

av_lockmgr_register

av_log_default_callback

av_log_format_line

av_log_set_callback

av_log_set_level

av_malloc

av_max_alloc

av_new_packet

av_opt_get_int

av_packet_copy_props

av_packet_get_side_data

av_packet_split_side_data

av_packet_unref

av_rdft_calc

av_rdft_end

av_rdft_init

av_read_frame

av_register_all

av_register_bitstream_filter

av_rescale_q

av_samples_get_buffer_size

av_seek_frame

av_strerror

avcodec_align_dimensions

avcodec_alloc_context3

avcodec_close

avcodec_decode_audio4

avcodec_decode_video2

avcodec_descriptor_get

avcodec_descriptor_next

avcodec_fill_audio_frame

avcodec_find_decoder

avcodec_flush_buffers

avcodec_free_context

avcodec_get_name

avcodec_open2

avcodec_parameters_to_context

avformat_alloc_context

avformat_close_input

avformat_find_stream_info

avformat_free_context

avformat_open_input

avio_alloc_context

avio_close

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/icudtl.dat

DarkSoulsSaveManager/libEGL.dll

.dll windows:5 windows x64 arch:x64

f96ff72b57f7492ff208844a092ac5bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

libglesv2

?GetCurrentContext@egl@@YAPEAXXZ

?CreateSync@egl@@YAPEAXPEAXIPEB_J@Z

?DestroySync@egl@@YAIPEAX0@Z

?ClientWaitSync@egl@@YAHPEAX0H_K@Z

?GetSyncAttrib@egl@@YAIPEAX0HPEA_J@Z

?CreateImage@egl@@YAPEAXPEAX0I0PEB_J@Z

?DestroyImage@egl@@YAIPEAX0@Z

?GetPlatformDisplay@egl@@YAPEAXIPEAXPEB_J@Z

?CreatePlatformWindowSurface@egl@@YAPEAXPEAX00PEB_J@Z

?CreatePlatformPixmapSurface@egl@@YAPEAXPEAX00PEB_J@Z

?WaitSync@egl@@YAIPEAX0H@Z

?QuerySurfacePointerANGLE@egl@@YAIPEAX0HPEAPEAX@Z

?PostSubBufferNV@egl@@YAIPEAX0HHHH@Z

?GetPlatformDisplayEXT@egl@@YAPEAXIPEAXPEBH@Z

?QueryDisplayAttribEXT@egl@@YAIPEAXHPEA_J@Z

?QueryDeviceAttribEXT@egl@@YAIPEAXHPEA_J@Z

?QueryDeviceStringEXT@egl@@YAPEBDPEAXH@Z

?CreateImageKHR@egl@@YAPEAXPEAX0I0PEBH@Z

?DestroyImageKHR@egl@@YAIPEAX0@Z

?WaitClient@egl@@YAIXZ

?ReleaseDeviceANGLE@egl@@YAIPEAX@Z

?CreateStreamKHR@egl@@YAPEAXPEAXPEBH@Z

?DestroyStreamKHR@egl@@YAIPEAX0@Z

?StreamAttribKHR@egl@@YAIPEAX0IH@Z

?QueryStreamKHR@egl@@YAIPEAX0IPEAH@Z

?QueryStreamu64KHR@egl@@YAIPEAX0IPEA_K@Z

?StreamConsumerGLTextureExternalKHR@egl@@YAIPEAX0@Z

?StreamConsumerAcquireKHR@egl@@YAIPEAX0@Z

?StreamConsumerReleaseKHR@egl@@YAIPEAX0@Z

?StreamConsumerGLTextureExternalAttribsNV@egl@@YAIPEAX0PEB_J@Z

?CreateStreamProducerD3DTextureNV12ANGLE@egl@@YAIPEAX0PEB_J@Z

?StreamPostD3DTextureNV12ANGLE@egl@@YAIPEAX00PEB_J@Z

?GetSyncValuesCHROMIUM@egl@@YAIPEAX0PEA_K11@Z

?SwapBuffersWithDamageEXT@egl@@YAIPEAX0PEAHH@Z

?ProgramCacheGetAttribANGLE@egl@@YAHPEAXI@Z

?ProgramCacheQueryANGLE@egl@@YAXPEAXH0PEAH01@Z

?ProgramCachePopulateANGLE@egl@@YAXPEAXPEBXH1H@Z

?ProgramCacheResizeANGLE@egl@@YAHPEAXHI@Z

?ReleaseThread@egl@@YAIXZ

?CreatePbufferFromClientBuffer@egl@@YAPEAXPEAXI00PEBH@Z

?QueryAPI@egl@@YAIXZ

?BindAPI@egl@@YAII@Z

?SwapInterval@egl@@YAIPEAXH@Z

?SurfaceAttrib@egl@@YAIPEAX0HH@Z

?ReleaseTexImage@egl@@YAIPEAX0H@Z

?BindTexImage@egl@@YAIPEAX0H@Z

?WaitNative@egl@@YAIH@Z

?WaitGL@egl@@YAIXZ

?Terminate@egl@@YAIPEAX@Z

?SwapBuffers@egl@@YAIPEAX0@Z

?QuerySurface@egl@@YAIPEAX0HPEAH@Z

?QueryString@egl@@YAPEBDPEAXH@Z

?QueryContext@egl@@YAIPEAX0HPEAH@Z

?Initialize@egl@@YAIPEAXPEAH1@Z

?MakeCurrent@egl@@YAIPEAX000@Z

?GetProcAddress@egl@@YAP6AXXZPEBD@Z

?GetError@egl@@YAHXZ

?GetDisplay@egl@@YAPEAXPEAUHDC__@@@Z

?GetCurrentSurface@egl@@YAPEAXH@Z

?GetCurrentDisplay@egl@@YAPEAXXZ

?GetConfigs@egl@@YAIPEAXPEAPEAXHPEAH@Z

?GetConfigAttrib@egl@@YAIPEAX0HPEAH@Z

?DestroySurface@egl@@YAIPEAX0@Z

?DestroyContext@egl@@YAIPEAX0@Z

?CreateWindowSurface@egl@@YAPEAXPEAX0PEAUHWND__@@PEBH@Z

?CreatePixmapSurface@egl@@YAPEAXPEAX0PEAUHBITMAP__@@PEBH@Z

?CreatePbufferSurface@egl@@YAPEAXPEAX0PEBH@Z

?CreateContext@egl@@YAPEAXPEAX00PEBH@Z

?CopyBuffers@egl@@YAIPEAX0PEAUHBITMAP__@@@Z

?CreateDeviceANGLE@egl@@YAPEAXHPEAXPEB_J@Z

?ChooseConfig@egl@@YAIPEAXPEBHPEAPEAXHPEAH@Z

vcruntime140

__C_specific_handler

memset

__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_register_onexit_function

_initialize_onexit_table

_crt_atexit

_configure_narrow_argv

_seh_filter_dll

_initterm_e

_initterm

_cexit

_initialize_narrow_environment

kernel32

IsProcessorFeaturePresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

IsDebuggerPresent

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

InitializeSListHead

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

Exports

eglBindAPI

eglBindTexImage

eglChooseConfig

eglClientWaitSync

eglCopyBuffers

eglCreateContext

eglCreateDeviceANGLE

eglCreateImage

eglCreateImageKHR

eglCreatePbufferFromClientBuffer

eglCreatePbufferSurface

eglCreatePixmapSurface

eglCreatePlatformPixmapSurface

eglCreatePlatformWindowSurface

eglCreateStreamKHR

eglCreateStreamProducerD3DTextureNV12ANGLE

eglCreateSync

eglCreateWindowSurface

eglDestroyContext

eglDestroyImage

eglDestroyImageKHR

eglDestroyStreamKHR

eglDestroySurface

eglDestroySync

eglGetConfigAttrib

eglGetConfigs

eglGetCurrentContext

eglGetCurrentDisplay

eglGetCurrentSurface

eglGetDisplay

eglGetError

eglGetPlatformDisplay

eglGetPlatformDisplayEXT

eglGetProcAddress

eglGetSyncAttrib

eglGetSyncValuesCHROMIUM

eglInitialize

eglMakeCurrent

eglPostSubBufferNV

eglProgramCacheGetAttribANGLE

eglProgramCachePopulateANGLE

eglProgramCacheQueryANGLE

eglProgramCacheResizeANGLE

eglQueryAPI

eglQueryContext

eglQueryDeviceAttribEXT

eglQueryDeviceStringEXT

eglQueryDisplayAttribEXT

eglQueryStreamKHR

eglQueryStreamu64KHR

eglQueryString

eglQuerySurface

eglQuerySurfacePointerANGLE

eglReleaseDeviceANGLE

eglReleaseTexImage

eglReleaseThread

eglStreamAttribKHR

eglStreamConsumerAcquireKHR

eglStreamConsumerGLTextureExternalAttribsNV

eglStreamConsumerGLTextureExternalKHR

eglStreamConsumerReleaseKHR

eglStreamPostD3DTextureNV12ANGLE

eglSurfaceAttrib

eglSwapBuffers

eglSwapBuffersWithDamageEXT

eglSwapInterval

eglTerminate

eglWaitClient

eglWaitGL

eglWaitNative

eglWaitSync

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DarkSoulsSaveManager/libGLESv2.dll

.dll windows:5 windows x64 arch:x64

d195b508e742446cb414eb6ad099f7f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

msvcp140

?_Throw_C_error@std@@YAXH@Z

?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z

?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z

?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ

?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ

??0task_continuation_context@Concurrency@@AEAA@XZ

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ

?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z

?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA

?_Xoverflow_error@std@@YAXPEBD@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

_Cnd_unregister_at_thread_exit

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

?classic@locale@std@@SAAEBV12@XZ

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

_Cnd_register_at_thread_exit

_Cnd_broadcast

_Cnd_wait

_Cnd_destroy_in_situ

_Cnd_init_in_situ

_Mtx_unlock

_Mtx_lock

_Mtx_destroy_in_situ

_Mtx_init_in_situ

?_Xbad_function_call@std@@YAXXZ

?_Syserror_map@std@@YAPEBDH@Z