VPN Tools & Utilities PACK[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

VPN Tools & Utilities PACK.rar
Size

310.2MB
MD5

925db01f0646777d4eb951d1535c5546
SHA1

c764e331ded0866ec5d6dd24141e359e8295c5b2
SHA256

2415c5f7af1249e7a0d4c8c76f910af88b27a4807fe15473b8a6fac1b2102df7
SHA512

4a5a950845bbf1301d781ac1230b050f37ac2d37a04768da7d73d4e39810a3d4a1e4158d26d6a6e4c872842652f5108e69a0ace56adcb65015b73a0583a617b9
SSDEEP

6291456:mTgywYZESdeezGJMmRtfcA163wxtqdJZh/WAMJn9JFrqoA2Efn2uhY7:GgydSezGKuk6HCPh/WBn9Jgosn2B

Score

7^/10

themida upx

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/sxs.exe	themida

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/nssdbm3.exe	upx
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/utils.exe	upx
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/forms.exe	upx

Unsigned PE 212 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/Acrylic.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/WSDApi.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/BFE.DLL
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/Colorful.Console.exe
unpack005/$PLUGINSDIR/InstallOptions.dll
unpack005/AcrylicConsole.exe
unpack005/AcrylicService.exe
unpack005/AcrylicUI.exe
unpack005/Uninstall.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/node.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/sqlite3.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/avira_en_avpn0___maj.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/nssckbi.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/BFE.DLL
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/BetternetForWindows.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/xpt_dump.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/Proxy Searcher 5.1.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/security-prefs.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/ccproxysetup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/setup_chrispc_anonymous_connection_2_20.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/ssl3.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/setup_chrispc_anonymous_proxy_pro_8_25.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/ssl3.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/setup_chrispc_free_vpn_connection_2_14_20_mg.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/CEVPNSetup_XPVista_x64.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/xulrunner-stub.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/xulrunner-stub.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/cgsetup_en_nKwmL3CyQuXBCvjTVGH2.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/DNSCrypt-Proxy 2.0.45.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/sys.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/WPFToolkit.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/fci.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/WPFToolkit.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/DXCore.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/FreeHideIP-4.2.0.6.Setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/ProxySocket.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/LiteDB.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/tcbloader.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/BFE.DLL
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/freevpntest.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/xpcshell.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/CPFilters.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/LiteDB.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/npnul32.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/fg790p.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/newdev.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/aepic.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/Hola-Setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/msvcr71.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/Hide.me-Setup-3.7.2.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/tcbloader/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/tcbloader/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/Http Proxy Scanner.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/i2pinstall_0.9.49_windows.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/Ipvanish ProxyExtractor V1.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/debug.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/KoiVMHelper.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/NordVPNSetup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/KoiVMHelper.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/xpidl.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/xpidl.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/OnionFruit.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/compreg/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/compreg/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/CPFilters.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/schannel.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/xul.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/Privoxy.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/ntdll.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/ProtonVPN_win_v1.18.5.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/msi.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/msi.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/cdp.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/proxy_mask_setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/cdp.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/ntdll.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/xpidl.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/Setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/opengl32.EXE
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/wpnclient.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/DXCore.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/ProxyUnsetter.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/sqlite3.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/psiphon3.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/sqlite3.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/SSTap-beta-setup-1.1.0.1.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/forms.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/xpcshell.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/SafeIP.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/msvcr71.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/SimpleDNSCrypt64.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/urlmon.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/SkyVPNSetup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/sas.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/BFE.DLL
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/ssleay32.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/smart_dns_changer_setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/SurfAnonymousFree-2.6.1.6.Setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/ssleay32.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/WPFToolkit.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/ssleay32.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/sxs.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/SurfsharkSetup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/bcastdvr.proxy.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/Traceless.me_Setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/msi.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/ProxySocket.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/u1902.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/UnblockDoom.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/sysmain.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/Jint.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/VPN Connection Indicator Setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/xul.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/ssl3.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/ieproxy.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/node.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/vpnpro_setup.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/VirtualWiFiSetup-3.2.1.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/aepic.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/xpti.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/Jint.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/wireguard-amd64-0.3.8.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/sas.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/BFE.DLL
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/Ionic.Zip.dll
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/Launcher.exe
unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/x-proxy.exe

NSIS installer 10 IoCs

installer

resource	yara_rule
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/tcbloader.exe	nsis_installer_1
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/tcbloader.exe	nsis_installer_2
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/WinPcap/WinPcap.exe	nsis_installer_1
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/WinPcap/WinPcap.exe	nsis_installer_2
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/WinPcap/WinPcap.exe	nsis_installer_1
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/WinPcap/WinPcap.exe	nsis_installer_2
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/sxs.exe	nsis_installer_1
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/sxs.exe	nsis_installer_2
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/xpti.exe	nsis_installer_1
static1/unpack001/VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/xpti.exe	nsis_installer_2

Files

VPN Tools & Utilities PACK.rar
.rar

Password: vp
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/Acrylic.exe
.exe windows:4 windows x86 arch:x86

Password: vp

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/WSDApi.dll
.dll windows:10 windows x64 arch:x64

Password: vp

e3d3af6e0b819e6e4e57a42ba9c239b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WSDApi.pdb

Imports

msvcrt

__dllonexit
_onexit
strncmp
_unlock
_wtol
_stricmp
vfwprintf_s
strcmp
fwprintf_s
_wfsopen
_wcserror
iswdigit
memset
_get_errno
fclose
_strnicmp
memcpy
time
memmove_s
wcstok_s
_callnewh
_XcptFilter
_amsg_exit
_vsnprintf
_initterm
tolower
free
_lock
__C_specific_handler
_purecall
wcsstr
wcsncmp
towlower
_wcsdup
_localtime64
_time64
_vsnwprintf
memcpy_s
_wcsnicmp
wcschr
malloc
_wcsicmp
memcmp
wcscmp

ntdll

EtwGetTraceLoggerHandle
EtwGetTraceEnableFlags
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwTraceMessage
RtlIpv6StringToAddressExW
RtlIpv4StringToAddressExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
EtwGetTraceEnableLevel

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
GetModuleHandleW
FreeLibrary
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryExW
DisableThreadLibraryCalls

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolIo
CloseThreadpoolWork
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
WaitForThreadpoolWorkCallbacks
CreateThreadpoolWork
SubmitThreadpoolWork
StartThreadpoolIo
TrySubmitThreadpoolCallback
SetThreadpoolThreadMinimum
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
CancelThreadpoolIo
CloseThreadpool
CreateThreadpool
WaitForThreadpoolTimerCallbacks
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
SetThreadpoolThreadMaximum
CloseThreadpoolTimer
CreateThreadpoolCleanupGroup
SetThreadpoolTimer
CreateThreadpoolTimer

api-ms-win-core-synch-l1-1-0

AcquireSRWLockShared
ReleaseSemaphore
ResetEvent
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForSingleObject
SetEvent
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateSemaphoreExW
CreateMutexExW
InitializeCriticalSection
InitializeSRWLock
CreateWaitableTimerExW
CancelWaitableTimer
SetWaitableTimer
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SleepEx
ReleaseSRWLockShared
CreateEventW
WaitForMultipleObjectsEx

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
GetLastError

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcessId
CreateThread
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

rpcrt4

UuidCreate
UuidFromStringA

ws2_32

htons
setsockopt
ntohs
WSASocketW
WSAStringToAddressW
getsockname
socket
WSAIoctl
closesocket
WSACleanup
GetAddrInfoW
FreeAddrInfoW
WSAAddressToStringW
WSASendTo
WSADuplicateSocketW
WSARecvFrom
shutdown
WSAStartup
WSAGetLastError
bind

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl
EventWriteTransfer
EventUnregister
EventSetInformation
EventRegister

api-ms-win-core-synch-l1-2-0

InitOnceComplete
WakeAllConditionVariable
InitOnceBeginInitialize
Sleep
SleepConditionVariableSRW

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-core-heap-l2-1-0

GlobalFree

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExA

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

iphlpapi

CancelMibChangeNotify2
GetBestRoute2
ConvertInterfaceGuidToLuid
GetAdaptersAddresses
NotifyUnicastIpAddressChange

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx
QueueUserWorkItem

nsi

NsiGetParameter

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

webservices

WsWriteChars
WsWriteEndAttribute
WsSetWriterPosition
WsGetWriterPosition
WsMoveWriter
WsWriteStartElement
WsWriteBytes
WsWriteEndElement
WsMoveReader
WsWriteXmlnsAttribute
WsWriteEndStartElement
WsWriteValue
WsWriteCharsUtf8
WsWriteText
WsReadStartElement
WsEndWriterCanonicalization
WsSetOutputToBuffer
WsGetWriterProperty
WsFreeReader
WsCopyNode
WsGetReaderNode
WsSetOutput
WsCreateWriter
WsSetInputToBuffer
WsCreateReader
WsFreeHeap
WsStartWriterCanonicalization
WsCreateXmlBuffer
WsCreateHeap
WsFreeWriter
WsWriteStartAttribute
WsReadBytes
WsReadChars
WsEndReaderCanonicalization
WsStartReaderCanonicalization
WsReadEndAttribute
WsReadStartAttribute
WsFindAttribute
WsSkipNode
WsReadNode
WsSetInput
WsReadEndElement
WsReadToStartElement

firewallapi

FWGetConfig
FWQueryFirewallRules
IcfChangeNotificationDestroy
IsFirewallInCoExistanceMode
IcfChangeNotificationCreate
FWOpenPolicyStore
IcfAddrChangeNotificationCreate
FWFreeFirewallRules
FWClosePolicyStore
FWGetGlobalConfig
FWResetIndicatedTupleInUse
FWIndicateTupleInUse

api-ms-win-core-com-l1-1-0

CoUninitialize
CoInitializeEx
CoWaitForMultipleHandles

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

WSDAddFirewallCheck
WSDAllocateLinkedMemory
WSDAttachLinkedMemory
WSDCancelNetworkChangeNotify
WSDCompareEndpoints
WSDCopyEndpoint
WSDCopyNameList
WSDCreateDeviceHost
WSDCreateDeviceHost2
WSDCreateDeviceHostAdvanced
WSDCreateDeviceProxy
WSDCreateDeviceProxy2
WSDCreateDeviceProxyAdvanced
WSDCreateDiscoveryProvider
WSDCreateDiscoveryProvider2
WSDCreateDiscoveryPublisher
WSDCreateDiscoveryPublisher2
WSDCreateHttpAddress
WSDCreateHttpMessageParameters
WSDCreateHttpTransport
WSDCreateMetadataAgent
WSDCreateOutboundAttachment
WSDCreateUdpAddress
WSDCreateUdpMessageParameters
WSDCreateUdpTransport
WSDDetachLinkedMemory
WSDFreeLinkedMemory
WSDGenerateFault
WSDGenerateFaultEx
WSDGenerateRandomDelay
WSDGetConfigurationOption
WSDNotifyNetworkChange
WSDProcessFault
WSDRemoveFirewallCheck
WSDSetConfigurationOption
WSDUriDecode
WSDUriEncode
WSDXMLAddChild
WSDXMLAddSibling
WSDXMLBuildAnyForSingleElement
WSDXMLCleanupElement
WSDXMLCompareNames
WSDXMLCreateContext
WSDXMLGetNameFromBuiltinNamespace
WSDXMLGetValueFromAny

Sections

.text
Size: 564KB - Virtual size: 563KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/BFE.DLL
.dll windows:10 windows x64 arch:x64

Password: vp

af3ccebee341bc1634b9269a2d4ab01d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

bfe.pdb

Imports

msvcrt

_initterm
__C_specific_handler
wcscspn
_wcslwr
bsearch
_ultoa_s
strpbrk
strstr
sprintf_s
isprint
_ltoa_s
_i64toa_s
_ui64toa_s
wprintf
memmove
memcpy
malloc
memcmp
log
wcstoul
_vsnprintf
_vsnwprintf
_wcsicmp
free
wcstol
qsort
_amsg_exit
iswctype
_XcptFilter
wcschr
_wcsnicmp
_ultow
tolower
wcsnlen
memset

ntdll

NtQueryObject
RtlGetSaclSecurityDescriptor
RtlValidRelativeSecurityDescriptor
RtlNumberOfSetBits
RtlInitializeBitMap
WinSqmIsOptedIn
WinSqmSetDWORD
WinSqmAddToStream
RtlValidSid
RtlLengthSid
NtDeviceIoControlFile
RtlAllocateHeap
RtlInitializeSRWLock
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlGetCurrentServiceSessionId
RtlCreateHashTable
RtlDeleteHashTable
RtlInsertEntryHashTable
RtlRemoveEntryHashTable
RtlLookupEntryHashTable
RtlGetNextEntryHashTable
RtlInitEnumerationHashTable
RtlEnumerateEntryHashTable
RtlEndEnumerationHashTable
RtlContractHashTable
RtlGetOwnerSecurityDescriptor
RtlAdjustPrivilege
RtlAbsoluteToSelfRelativeSD
RtlSetOwnerSecurityDescriptor
RtlSelfRelativeToAbsoluteSD2
RtlCreateServiceSid
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlSubAuthorityCountSid
TpReleaseTimer
TpWaitForTimer
RtlFreeHeap
RtlIpv4AddressToStringA
RtlIpv6AddressToStringA
RtlEthernetAddressToStringA
TpSetTimer
TpIsTimerSet
TpAllocTimer
RtlEqualSid
RtlLengthSecurityDescriptor
RtlApplicationVerifierStop
EtwEventEnabled
EtwEventWriteTransfer
EtwEventWrite
EtwEventActivityIdControl
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
EtwTraceMessage
RtlExpandHashTable
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
RtlSetThreadPreferredUILanguages

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
LoadStringW
DisableThreadLibraryCalls
GetProcAddress

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
CreateThread
TlsGetValue
GetCurrentThread
OpenThreadToken
TlsSetValue
GetCurrentProcess
TerminateProcess
TlsFree
TlsAlloc
GetProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-synch-l1-1-0

CreateEventW
CreateSemaphoreExW
ReleaseSRWLockShared
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ReleaseSemaphore
AcquireSRWLockShared
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
SetEvent
InitializeSRWLock
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockExclusive

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
DeleteTimerQueueTimer
UnregisterWaitEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-security-base-l1-1-0

DestroyPrivateObjectSecurity
GetPrivateObjectSecurity
GetSecurityDescriptorControl
CreatePrivateObjectSecurityEx
GetSecurityDescriptorLength
SetSecurityDescriptorControl
SetPrivateObjectSecurityEx
MapGenericMask
PrivilegeCheck
EqualSid
CopySid
InitializeSecurityDescriptor
AllocateAndInitializeSid
CreateWellKnownSid
FreeSid
InitializeAcl
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorDacl

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapDestroy
HeapFree
GetProcessHeap
HeapSize
HeapCreate
HeapReAlloc

rpcrt4

RpcRaiseException
RpcImpersonateClient
RpcServerInqCallAttributesW
UuidCreate
RpcGetAuthorizationContextForClient
RpcBindingVectorFree
RpcServerUnregisterIfEx
RpcFreeAuthorizationContext
RpcEpUnregister
NdrServerCallAll
NdrServerCall2
RpcServerUseProtseqW
RpcServerRegisterIf3
I_RpcExceptionFilter
MesHandleFree
RpcServerInqBindings
MesEncodeDynBufferHandleCreate
MesDecodeBufferHandleCreate
UuidFromStringW
RpcRevertToSelf
NdrMesTypeEncode3
NdrMesTypeDecode3
I_RpcBindingInqLocalClientPID
RpcEpRegisterW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

authz

AuthzGetInformationFromContext
AuthzAccessCheck
AuthziFreeAuditEventType
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzFreeAuditEvent
AuthziLogAuditEvent
AuthziInitializeAuditEventType
AuthziInitializeAuditParamsFromArray
AuthziInitializeAuditEvent

ws2_32

htonl

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

iphlpapi

GetCurrentThreadCompartmentId

api-ms-win-core-file-l1-1-0

WriteFile
CreateFileW
DeleteFileW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-perfcounters-l1-1-0

PerfCreateInstance
PerfStartProvider
PerfSetULongLongCounterValue
PerfSetULongCounterValue
PerfStopProvider
PerfSetCounterSetInfo

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegEnumValueW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWork

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-eventing-controller-l1-1-0

StartTraceW
EnableTraceEx2
ControlTraceW

api-ms-win-eventing-consumer-l1-1-0

ProcessTrace
OpenTraceW
CloseTrace

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

BfeGetDirectDispatchTable
BfeOnServiceStartTypeChange
BfeServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/Colorful.Console.exe
.exe windows:5 windows x86 arch:x86

Password: vp

be41bf7b8cc010b614bd36bbca606973

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:5 windows x86 arch:x86

Password: vp

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc

user32

OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow

gdi32

SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
AcrylicConfiguration.ini
AcrylicConsole.exe
.exe windows:4 windows x86 arch:x86

Password: vp

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AcrylicHosts.txt
AcrylicService.exe
.exe windows:4 windows x86 arch:x86

Password: vp

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 614KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AcrylicUI.exe
.exe windows:4 windows x86 arch:x86

Password: vp

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AcrylicUI.exe.manifest
.xml
ActivateAcrylicDebugLog.bat
DeactivateAcrylicDebugLog.bat
InstallAcrylicService.bat
License.txt
OpenAcrylicConfigurationFile.bat
OpenAcrylicHostsFile.bat
PurgeAcrylicCacheData.bat
ReadMe.txt
RestartAcrylicService.bat
StartAcrylicService.bat
StopAcrylicService.bat
Uninstall.exe
.exe windows:5 windows x86 arch:x86

be41bf7b8cc010b614bd36bbca606973

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UninstallAcrylicService.bat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/comctl32/msacm32.dll
.dll windows:10 windows x86 arch:x86

d708117077f81f5ebb8a7ce8dab0b96b

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9
Signer

Actual PE Digest

e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msacm32.pdb

Imports

msvcrt

_vsnwprintf
memcmp
_initterm
_except_handler4_common
memcpy
free
_amsg_exit
_XcptFilter
iswctype
malloc
memset

ntdll

NtClose
RtlOpenCurrentUser

api-ms-win-core-registry-l1-1-0

RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegEnumValueA
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExA

api-ms-win-core-privateprofile-l1-1-0

WritePrivateProfileStringW
GetProfileStringW
GetPrivateProfileStringW

api-ms-win-core-processthreads-l1-1-0

TlsFree
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TlsGetValue
TerminateProcess
TlsAlloc
TlsSetValue

api-ms-win-core-registry-l2-1-0

RegDeleteKeyA
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyA
RegOpenKeyA

api-ms-win-core-string-l2-1-0

CharNextW
CharLowerBuffW
CharPrevW

api-ms-win-core-libraryloader-l1-2-0

LockResource
GetModuleFileNameW
LoadResource
FreeResource
LoadStringW
GetProcAddress
GetModuleHandleW
SizeofResource

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
SetEvent
CreateEventW
EnterCriticalSection
InitializeCriticalSection
ResetEvent
DeleteCriticalSection
WaitForSingleObject

api-ms-win-core-heap-l2-1-0

GlobalFree
LocalFree
GlobalAlloc
LocalAlloc

api-ms-win-core-string-obsolete-l1-1-0

lstrlenA
lstrcmpW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalLock

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-localization-l1-2-0

GetACP

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-mm-misc-l1-1-0

SendDriverMessage
CloseDriver
OpenDriver

api-ms-win-mm-mme-l1-1-0

waveInGetDevCapsW
waveOutGetNumDevs
waveOutGetDevCapsW
waveOutOpen
waveInOpen
waveInGetNumDevs

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

XRegThunkEntry
acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFilterTagEnumA
acmFilterTagEnumW
acmFormatChooseA
acmFormatChooseW
acmFormatDetailsA
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMessage32
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/node.dll
.dll windows:6 windows x64 arch:x64

fceb67ce2537baf79947374d7a09ebb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\electron\out\R\node.dll.pdb

Imports

ws2_32

shutdown
closesocket
htons
ntohl
inet_addr
setsockopt
ioctlsocket
recvfrom
connect
socket
bind
GetAddrInfoW
WSASetLastError
GetNameInfoW
getsockopt
WSASocketW
select
WSAIoctl
WSARecv
getsockname
getpeername
listen
WSADuplicateSocketW
WSASend
WSARecvFrom
WSASendTo
WSAStartup
send
FreeAddrInfoW
ntohs
gethostname
WSAGetLastError
htonl
recv

msvcp140

??Bid@locale@std@@QEAA_KXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_BADOFF@std@@3_JB
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

kernel32

RtlVirtualUnwind
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
SleepConditionVariableSRW
SuspendThread
GetThreadContext
OpenThread
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleA
DebugBreak
CancelIo
WaitNamedPipeW
SwitchToThread
GetNamedPipeHandleStateW
PeekNamedPipe
CreateNamedPipeW
CreateNamedPipeA
SetNamedPipeHandleState
LoadLibraryExW
FormatMessageA
GetExitCodeProcess
CreateProcessW
LCMapStringW
UnregisterWaitEx
CreateJobObjectW
TerminateProcess
AssignProcessToJobObject
SetInformationJobObject
SetConsoleCursorPosition
GetNumberOfConsoleInputEvents
FillConsoleOutputAttribute
WriteConsoleInputW
ReadConsoleW
ReadConsoleInputW
FillConsoleOutputCharacterW
SetConsoleCursorInfo
GetConsoleCursorInfo
SetConsoleMode
UnregisterWait
RegisterWaitForSingleObject
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
CreateSemaphoreW
ResumeThread
WaitForMultipleObjects
GetProcessTimes
SetConsoleTitleW
VerifyVersionInfoW
GlobalMemoryStatusEx
VerSetConditionMask
SetCurrentDirectoryW
GetProcessIoCounters
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetTempPathW
GetConsoleTitleW
GetModuleFileNameW
ConnectNamedPipe
DuplicateHandle
GetStartupInfoW
FlushFileBuffers
CopyFileW
MoveFileExW
SetFilePointerEx
GetFileInformationByHandle
CreateHardLinkW
SetFileTime
RemoveDirectoryW
DeviceIoControl
ReadFile
CreateDirectoryW
ReadDirectoryChangesW
GetCurrentDirectoryW
GetCurrentProcessId
GetStdHandle
SetEnvironmentVariableW
GetEnvironmentVariableW
WaitForSingleObject
OpenFileMappingW
FreeEnvironmentStringsW
UnmapViewOfFile
OpenProcess
MultiByteToWideChar
FormatMessageW
GetLastError
CloseHandle
WriteConsoleW
LocalFree
CreateRemoteThread
GetFileType
MapViewOfFile
GetEnvironmentStringsW
GetVersionExW
SetConsoleCtrlHandler
CreateFileMappingW
ReleaseSemaphore
CreateSemaphoreA
SetThreadPriority
QueryThreadCycleTime
Sleep
GetCurrentThread
QueryPerformanceFrequency
GetThreadPriority
GetSystemTimeAsFileTime
QueryPerformanceCounter
TlsSetValue
VirtualProtect
VirtualFree
GetCurrentProcess
OutputDebugStringA
VirtualAlloc
GetCurrentThreadId
GetTempPathA
GetTimeZoneInformation
CreateFileA
TlsAlloc
DeleteFileA
GetSystemInfo
LoadLibraryW
GetProcAddress
GetFileSize
SystemTimeToFileTime
WideCharToMultiByte
TlsGetValue
GetThreadTimes
TlsFree
GetTempFileNameA
TryEnterCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
LeaveCriticalSection
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
FreeLibrary
LoadLibraryA
GetUserDefaultLocaleName
GetLocaleInfoEx
GetNumberFormatEx
GetCurrencyFormatEx
ResolveLocaleName
GetGeoInfoW
GetUserGeoID
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeFormatEx
GetDateFormatEx
WriteFile
GetModuleHandleW
SetLastError
GlobalMemoryStatus
GetTickCount
FlushConsoleInputBuffer
GetSystemTime
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetConsoleMode
SetHandleInformation
PostQueuedCompletionStatus
QueueUserWorkItem
CreateIoCompletionPort
SetErrorMode
GetQueuedCompletionStatus
GetLongPathNameW
GetShortPathNameW
CreateFileW
GetFileAttributesW

vcruntime140

_purecall
memmove
__std_exception_destroy
memchr
wcschr
strchr
_CxxThrowException
memset
memcmp
__RTtypeid
__std_type_info_compare
__RTDynamicCast
__std_type_info_name
strrchr
wcsstr
wcsrchr
__std_terminate
__CxxFrameHandler3
__C_specific_handler
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
__std_exception_copy
memcpy
strstr

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
raise
_beginthreadex
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_exit
strerror
_execute_onexit_table
_register_onexit_function
exit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
signal
_set_invalid_parameter_handler
_errno
__doserrno
abort
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

fclose
_sopen_dispatch
_close
_fileno
_open_osfhandle
__p__fmode
ftell
_read
fopen
_lseeki64
__stdio_common_vswprintf
fseek
rewind
fgets
_open
__stdio_common_vsprintf
_wopen
fread
fputs
feof
fputc
_wfopen
_setmode
__stdio_common_vsscanf
fsetpos
ferror
__acrt_iob_func
fflush
_fseeki64
_get_stream_buffer_pointers
setvbuf
ungetc
fopen_s
__stdio_common_vsnprintf_s
_get_osfhandle
fgetpos
__stdio_common_vfprintf
_write
fwrite
fgetc

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
malloc
free
realloc
_aligned_malloc
_aligned_free

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_unlock_file
_lock_file
_wchmod
_wrmdir
_wmkdir
_umask

api-ms-win-crt-string-l1-1-0

strncpy_s
isdigit
strncpy
isprint
isxdigit
isupper
tolower
_strnicmp
isspace
wcsncpy
_wcsnicmp
strncmp
strncat
wcsncmp
wcspbrk
_wcsrev
_wcsdup
_stricmp
strcmp
_strdup

api-ms-win-crt-convert-l1-1-0

strtol
wcstombs
strtoul
atol
strtoll
atoi
strtod
_strtod_l

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

log
modf
copysignf
fmod
pow
ceil
_fdtest
acos
asin
atan
atan2
_fdsign
copysign
cos
sin
truncf
sqrt
tan
trunc
nearbyintf
_dtest
ldexp
sqrtf
nearbyint
_dsign
scalbn
floor
ceilf
exp
floorf
lrint

api-ms-win-crt-utility-l1-1-0

rand_s
bsearch
qsort
rand

api-ms-win-crt-time-l1-1-0

_tzset
_localtime64_s
__timezone
__tzname
_gmtime64
_time64

api-ms-win-crt-locale-l1-1-0

_create_locale
_free_locale

api-ms-win-crt-conio-l1-1-0

_getch

psapi

GetProcessMemoryInfo

user32

GetUserObjectInformationW
TranslateMessage
GetMessageW
MapVirtualKeyW
GetProcessWindowStation
DispatchMessageW
MessageBoxW

advapi32

RegisterEventSourceW
OpenProcessToken
GetUserNameW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegEnumKeyExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ReportEventW
RegOpenKeyExW
DeregisterEventSource
RegQueryValueExW

iphlpapi

GetAdaptersAddresses

userenv

GetUserProfileDirectoryW

winmm

timeGetTime

Exports

Exports

??$CallRuntime@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1111@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11111@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111111@Z
??$CallStubR@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@222222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2222222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22222222222@Z
??$CheckEQImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckEQImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckGEImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckGEImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckGTImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckGTImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckLEImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckLEImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckLTImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckLTImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckNEImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckNEImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$MakeCheckOpString@HH@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HHPEBD@Z
??$MakeCheckOpString@II@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IIPEBD@Z
??$MakeCheckOpString@JJ@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@JJPEBD@Z
??$MakeCheckOpString@KK@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KKPEBD@Z
??$MakeCheckOpString@PEBXPEBX@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBX0PEBD@Z
??$MakeCheckOpString@_J_J@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J0PEBD@Z
??$MakeCheckOpString@_K_K@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K0PEBD@Z
??$PrintCheckOperand@C@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@C@Z
??$PrintCheckOperand@D@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@D@Z
??$PrintCheckOperand@E@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@E@Z
??$PrintCheckOperand@H@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@H@Z
??$PrintCheckOperand@I@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@I@Z
??$PrintCheckOperand@J@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@J@Z
??$PrintCheckOperand@K@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@K@Z
??$PrintCheckOperand@PEAC@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEAC@Z
??$PrintCheckOperand@PEAD@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEAD@Z
??$PrintCheckOperand@PEAE@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEAE@Z
??$PrintCheckOperand@PEBC@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBC@Z
??$PrintCheckOperand@PEBD@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBD@Z
??$PrintCheckOperand@PEBE@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBE@Z
??$PrintCheckOperand@PEBX@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBX@Z
??$PrintCheckOperand@_J@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_J@Z
??$PrintCheckOperand@_K@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_K@Z
??$SignedDivisionByConstant@I@base@v8@@YA?AU?$MagicNumbersForDivision@I@01@I@Z
??$SignedDivisionByConstant@_K@base@v8@@YA?AU?$MagicNumbersForDivision@_K@01@_K@Z
??$Start@$00@LookupIterator@internal@v8@@AEAAXXZ
??$Start@$0A@@LookupIterator@internal@v8@@AEAAXXZ
??$TailCallBytecodeDispatch@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111@Z
??$TailCallRuntime@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1111@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11111@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111111@Z
??$TailCallStub@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11111111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111111111111@Z
??$UnsignedDivisionByConstant@I@base@v8@@YA?AU?$MagicNumbersForDivision@I@01@II@Z
??$UnsignedDivisionByConstant@_K@base@v8@@YA?AU?$MagicNumbersForDivision@_K@01@_KI@Z
??0?$CacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@AEBV01@@Z
??0?$CacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@XZ
??0?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$03@icu_59@@QEAA@AEBV01@@Z
??0?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$03@icu_59@@QEAA@XZ
??0?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAD@@icu_59@@QEAA@AEBV01@@Z
??0?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAD@@icu_59@@QEAA@XZ
??0?$LocaleCacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@AEBV01@@Z
??0?$LocaleCacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@AEBVLocale@1@@Z
??0?$MagicNumbersForDivision@I@base@v8@@QEAA@II_N@Z
??0?$MagicNumbersForDivision@_K@base@v8@@QEAA@_KI_N@Z
??0?$MaybeStackArray@D$0CI@@icu_59@@AEAA@AEBV01@@Z
??0?$MaybeStackArray@D$0CI@@icu_59@@QEAA@XZ
??0?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_59@@AEAA@AEBV01@@Z
??0?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_59@@QEAA@XZ
??0?$ParserBase@VParser@internal@v8@@@internal@v8@@QEAA@PEAVZone@12@PEAVScanner@12@_KPEAVExtension@2@PEAVAstValueFactory@12@PEAVRuntimeCallStats@12@_N@Z
??0?$PerThreadAssertScope@$00$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$00$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$01$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$01$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$02$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$02$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$03$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$03$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$0A@$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$0A@$0A@@internal@v8@@QEAA@XZ
??0?$PluralMap@VDigitAffix@icu_59@@@icu_59@@QEAA@AEBV01@@Z
??0?$PluralMap@VDigitAffix@icu_59@@@icu_59@@QEAA@AEBVDigitAffix@1@@Z
??0?$PluralMap@VDigitAffix@icu_59@@@icu_59@@QEAA@XZ
??0?$TimeBase@VThreadTicks@base@v8@@@time_internal@base@v8@@IEAA@_J@Z
??0?$TimeBase@VTime@base@v8@@@time_internal@base@v8@@IEAA@_J@Z
??0?$TimeBase@VTimeTicks@base@v8@@@time_internal@base@v8@@IEAA@_J@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@AEBV012@@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@PEAVZone@12@@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@_KPEAVMoveOperands@compiler@12@PEAVZone@12@@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@_KPEAVZone@12@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@@std@@QEAA@AEBV01@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@@std@@QEAA@XZ
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@@std@@QEAA@AEBV01@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@@std@@QEAA@XZ
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@@std@@QEAA@AEBV01@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@@std@@QEAA@XZ
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@$$QEAV01@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@$$QEAV01@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@AEBV01@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@AEBV01@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@V?$initializer_list@PEAVMoveOperands@compiler@internal@v8@@@1@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@XZ
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@_K@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@_KAEBQEAVMoveOperands@compiler@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@_KAEBQEAVMoveOperands@compiler@internal@v8@@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@45@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@$$QEAV01@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@$$QEAV01@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@AEBV01@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@AEBV01@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@1@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@XZ
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@_K@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptFrame@v8@@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptFrame@v8@@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@$$QEAV01@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@$$QEAV01@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@AEBV01@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@AEBV01@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@1@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@XZ
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@_K@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptInfo@v8@@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptInfo@v8@@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0AccountingAllocator@internal@v8@@QEAA@XZ
??0ActivityControl@v8@@QEAA@AEBV01@@Z
??0ActivityControl@v8@@QEAA@XZ
??0AffixPattern@icu_59@@QEAA@$$QEAV01@@Z
??0AffixPattern@icu_59@@QEAA@AEBV01@@Z
??0AffixPattern@icu_59@@QEAA@XZ
??0AffixPatternIterator@icu_59@@QEAA@XZ
??0AffixPatternParser@icu_59@@QEAA@$$QEAV01@@Z
??0AffixPatternParser@icu_59@@QEAA@AEBV01@@Z
??0AffixPatternParser@icu_59@@QEAA@AEBVDecimalFormatSymbols@1@@Z
??0AffixPatternParser@icu_59@@QEAA@XZ
??0Agent@inspector@node@@QEAA@PEAVEnvironment@2@@Z
??0AllocationProfile@v8@@QEAA@AEBV01@@Z
??0AllocationProfile@v8@@QEAA@XZ
??0Allocator@ArrayBuffer@v8@@QEAA@AEBV012@@Z
??0Allocator@ArrayBuffer@v8@@QEAA@XZ
??0AllowJavascriptExecutionScope@Isolate@v8@@QEAA@PEAV12@@Z
??0AnnualTimeZoneRule@icu_59@@QEAA@AEBV01@@Z
??0AnnualTimeZoneRule@icu_59@@QEAA@AEBVUnicodeString@1@HHAEBVDateTimeRule@1@HH@Z
??0AnnualTimeZoneRule@icu_59@@QEAA@AEBVUnicodeString@1@HHPEAVDateTimeRule@1@HH@Z
??0Appendable@icu_59@@QEAA@AEBV01@@Z
??0Appendable@icu_59@@QEAA@XZ
??0AsmCallableType@wasm@internal@v8@@IEAA@XZ
??0AsmFFIType@wasm@internal@v8@@AEAA@XZ
??0AsmFunctionTableType@wasm@internal@v8@@AEAA@_KPEAVAsmType@123@@Z
??0AsmFunctionType@wasm@internal@v8@@IEAA@PEAVZone@23@PEAVAsmType@123@@Z
??0AsmJsScanner@internal@v8@@QEAA@XZ
??0AsmOverloadedFunctionType@wasm@internal@v8@@AEAA@PEAVZone@23@@Z
??0BasicBlock@compiler@internal@v8@@QEAA@PEAVZone@23@VId@0123@@Z
??0BasicTimeZone@icu_59@@IEAA@AEBV01@@Z
??0BasicTimeZone@icu_59@@IEAA@AEBVUnicodeString@1@@Z
??0BasicTimeZone@icu_59@@IEAA@XZ
??0BlockBuilder@interpreter@internal@v8@@QEAA@PEAVBytecodeArrayBuilder@123@PEAVBlockCoverageBuilder@123@PEAVBreakableStatement@23@@Z
??0BlockData@Coverage@debug@v8@@AEAA@PEAUCoverageBlock@internal@3@@Z
??0BranchElimination@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0BranchElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVJSGraph@123@PEAVZone@23@@Z
??0BranchMatcher@compiler@internal@v8@@QEAA@PEAVNode@123@@Z
??0BreakIterator@icu_59@@IEAA@AEBV01@@Z
??0BreakIterator@icu_59@@IEAA@AEBVLocale@1@0@Z
??0BreakIterator@icu_59@@IEAA@XZ
??0BreakLocation@debug@v8@@QEAA@HHW4BreakLocationType@12@@Z
??0BreakableControlFlowBuilder@interpreter@internal@v8@@QEAA@PEAVBytecodeArrayBuilder@123@@Z
??0ByteSink@icu_59@@QEAA@XZ
??0BytecodeAnalysis@compiler@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@PEAVZone@23@_N@Z
??0BytecodeArrayAccessor@interpreter@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@H@Z
??0BytecodeArrayBuilder@interpreter@internal@v8@@QEAA@PEAVIsolate@23@PEAVZone@23@HHPEAVFunctionLiteral@23@W4RecordingMode@SourcePositionTableBuilder@23@@Z
??0BytecodeArrayIterator@interpreter@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@@Z
??0BytecodeArrayRandomIterator@interpreter@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@PEAVZone@23@@Z
??0BytecodeArrayWriter@interpreter@internal@v8@@QEAA@PEAVZone@23@PEAVConstantArrayBuilder@123@W4RecordingMode@SourcePositionTableBuilder@23@@Z
??0BytecodeIterator@wasm@internal@v8@@QEAA@$$QEAV0123@@Z
??0BytecodeIterator@wasm@internal@v8@@QEAA@AEBV0123@@Z
??0BytecodeIterator@wasm@internal@v8@@QEAA@PEBE0PEAUBodyLocalDecls@123@@Z
??0BytecodeJumpTable@interpreter@internal@v8@@QEAA@_KHHPEAVZone@23@@Z
??0BytecodeLabel@interpreter@internal@v8@@QEAA@XZ
??0BytecodeLabels@interpreter@internal@v8@@QEAA@PEAVZone@23@@Z
??0BytecodeLivenessMap@compiler@internal@v8@@QEAA@HPEAVZone@23@@Z
??0BytecodeLoopAssignments@compiler@internal@v8@@QEAA@HHPEAVZone@23@@Z
??0BytecodeNode@interpreter@internal@v8@@AEAA@W4Bytecode@123@HW4OperandScale@123@VBytecodeSourceInfo@123@IIIII@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIIIIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIIIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@VBytecodeSourceInfo@123@@Z
??0BytecodeRegisterOptimizer@interpreter@internal@v8@@QEAA@PEAVZone@23@PEAVBytecodeRegisterAllocator@123@HHPEAVBytecodeWriter@0123@@Z
??0BytesDictionaryMatcher@icu_59@@QEAA@AEBV01@@Z
??0BytesDictionaryMatcher@icu_59@@QEAA@PEBDHPEAUUDataMemory@@@Z
??0BytesTrie@icu_59@@AEAA@PEAXPEBX@Z
??0BytesTrie@icu_59@@QEAA@AEBV01@@Z
??0BytesTrie@icu_59@@QEAA@PEBX@Z
??0CECalendar@icu_59@@IEAA@AEBV01@@Z
??0CECalendar@icu_59@@IEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0CPU@base@v8@@QEAA@XZ
??0CacheKeyBase@icu_59@@QEAA@AEBV01@@Z
??0CacheKeyBase@icu_59@@QEAA@XZ
??0CachedData@ScriptCompiler@v8@@QEAA@PEBEHW4BufferPolicy@012@@Z
??0CachedData@ScriptCompiler@v8@@QEAA@XZ
??0Calendar@icu_59@@IEAA@AEAW4UErrorCode@@@Z
??0Calendar@icu_59@@IEAA@AEBV01@@Z
??0Calendar@icu_59@@IEAA@AEBVTimeZone@1@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0Calendar@icu_59@@IEAA@PEAVTimeZone@1@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0CalendarAstronomer@icu_59@@QEAA@N@Z
??0CalendarAstronomer@icu_59@@QEAA@NN@Z
??0CalendarAstronomer@icu_59@@QEAA@XZ
??0CallDescriptor@compiler@internal@v8@@QEAA@W4Kind@0123@VMachineType@23@VLinkageLocation@123@PEAV?$Signature@VLinkageLocation@compiler@internal@v8@@@23@_KV?$Flags@W4Property@Operator@compiler@internal@v8@@E@base@3@IIV?$Flags@W4Flag@CallDescriptor@compiler@internal@v8@@H@93@PEBD@Z
??0CallInterfaceDescriptor@internal@v8@@QEAA@AEBV012@@Z
??0CallInterfaceDescriptor@internal@v8@@QEAA@PEAVIsolate@12@W4Key@CallDescriptors@12@@Z
??0CallInterfaceDescriptor@internal@v8@@QEAA@XZ
??0CallInterfaceDescriptorData@internal@v8@@QEAA@XZ
??0CallbackScope@node@@QEAA@PEAVIsolate@v8@@V?$Local@VObject@v8@@@3@Uasync_context@1@@Z
??0Cancelable@internal@v8@@QEAA@PEAVCancelableTaskManager@12@@Z
??0CancelableTask@internal@v8@@QEAA@PEAVCancelableTaskManager@12@@Z
??0CancelableTask@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0CancelableTaskManager@internal@v8@@QEAA@XZ
??0CanonicalHandleScope@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0CanonicalIterator@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0Channel@V8Inspector@v8_inspector@@QEAA@AEBV012@@Z
??0Channel@V8Inspector@v8_inspector@@QEAA@XZ
??0Char16Ptr@icu_59@@QEAA@$$T@Z
??0Char16Ptr@icu_59@@QEAA@PEAG@Z
??0Char16Ptr@icu_59@@QEAA@PEA_S@Z
??0Char16Ptr@icu_59@@QEAA@PEA_W@Z
??0CharString@icu_59@@QEAA@AEBV01@AEAW4UErrorCode@@@Z
??0CharString@icu_59@@QEAA@PEBDHAEAW4UErrorCode@@@Z
??0CharString@icu_59@@QEAA@VStringPiece@1@AEAW4UErrorCode@@@Z
??0CharString@icu_59@@QEAA@XZ
??0CharacterIterator@icu_59@@IEAA@AEBV01@@Z
??0CharacterIterator@icu_59@@IEAA@H@Z
??0CharacterIterator@icu_59@@IEAA@HH@Z
??0CharacterIterator@icu_59@@IEAA@HHHH@Z
??0CharacterIterator@icu_59@@IEAA@XZ
??0CheckElimination@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0CheckElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVJSGraph@123@@Z
??0CheckedArrayByteSink@icu_59@@QEAA@PEADH@Z
??0CheckpointElimination@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0CheckpointElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@@Z
??0ChineseCalendar@icu_59@@IEAA@AEBVLocale@1@HPEBVTimeZone@1@AEAW4UErrorCode@@@Z
??0ChineseCalendar@icu_59@@QEAA@AEBV01@@Z
??0ChineseCalendar@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0ChoiceFormat@icu_59@@AEAA@AEBVUnicodeString@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0ChoiceFormat@icu_59@@QEAA@AEBV01@@Z
??0ChoiceFormat@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0ChoiceFormat@icu_59@@QEAA@PEBNPEBCPEBVUnicodeString@1@H@Z
??0ChoiceFormat@icu_59@@QEAA@PEBNPEBVUnicodeString@1@H@Z
??0CodeAssembler@compiler@internal@v8@@QEAA@PEAVCodeAssemblerState@123@@Z
??0CodeAssemblerState@compiler@internal@v8@@AEAA@PEAVIsolate@23@PEAVZone@23@PEAVCallDescriptor@123@IPEBD@Z
??0CodeAssemblerState@compiler@internal@v8@@QEAA@PEAVIsolate@23@PEAVZone@23@AEBVCallInterfaceDescriptor@23@IPEBD_K@Z
??0CodeAssemblerState@compiler@internal@v8@@QEAA@PEAVIsolate@23@PEAVZone@23@HIPEBD@Z
??0CodeStubAssembler@internal@v8@@QEAA@PEAVCodeAssemblerState@compiler@12@@Z
??0CollationBuilder@icu_59@@QEAA@PEBUCollationTailoring@1@AEAW4UErrorCode@@@Z
??0CollationData@icu_59@@QEAA@AEBVNormalizer2Impl@1@@Z
??0CollationDataBuilder@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0CollationElementIterator@icu_59@@AEAA@AEBVCharacterIterator@1@PEBVRuleBasedCollator@1@AEAW4UErrorCode@@@Z
??0CollationElementIterator@icu_59@@AEAA@AEBVUnicodeString@1@PEBVRuleBasedCollator@1@AEAW4UErrorCode@@@Z
??0CollationElementIterator@icu_59@@QEAA@AEBV01@@Z
??0CollationFastLatinBuilder@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0CollationIterator@icu_59@@IEAA@AEBV01@@Z
??0CollationIterator@icu_59@@QEAA@PEBUCollationData@1@C@Z
??0CollationKey@icu_59@@QEAA@AEBV01@@Z
??0CollationKey@icu_59@@QEAA@PEBEH@Z
??0CollationKey@icu_59@@QEAA@XZ
??0CollationRootElements@icu_59@@QEAA@PEBIH@Z
??0CollationRuleParser@icu_59@@QEAA@PEBUCollationData@1@AEAW4UErrorCode@@@Z
??0CollationSettings@icu_59@@QEAA@AEBU01@@Z
??0CollationSettings@icu_59@@QEAA@XZ
??0CollationTailoring@icu_59@@QEAA@PEBUCollationSettings@1@@Z
??0CollationWeights@icu_59@@QEAA@XZ
??0Collator@icu_59@@IEAA@AEBV01@@Z
??0Collator@icu_59@@IEAA@W4UColAttributeValue@@W4UNormalizationMode@@@Z
??0Collator@icu_59@@IEAA@XZ
??0CollatorFactory@icu_59@@QEAA@AEBV01@@Z
??0CollatorFactory@icu_59@@QEAA@XZ
??0CommonOperatorBuilder@compiler@internal@v8@@QEAA@PEAVZone@23@@Z
??0CommonOperatorReducer@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0CommonOperatorReducer@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVGraph@123@PEAVCommonOperatorBuilder@123@PEAVMachineOperatorBuilder@123@@Z
??0CompactionSpace@internal@v8@@QEAA@PEAVHeap@12@W4AllocationSpace@12@W4Executability@12@@Z
??0CompilationInfo@internal@v8@@AEAA@PEAVParseInfo@12@V?$Vector@$$CBD@12@IW4Mode@012@PEAVIsolate@12@PEAVZone@12@@Z
??0CompilationInfo@internal@v8@@QEAA@PEAVZone@12@PEAVParseInfo@12@PEAVIsolate@12@V?$Handle@VJSFunction@internal@v8@@@12@@Z
??0CompilationInfo@internal@v8@@QEAA@V?$Vector@$$CBD@12@PEAVIsolate@12@PEAVZone@12@I@Z
??0CompilationJob@internal@v8@@QEAA@AEBV012@@Z
??0CompilationJob@internal@v8@@QEAA@PEAVIsolate@12@PEAVCompilationInfo@12@PEBDW4State@012@@Z
??0CompileJobFinishCallback@internal@v8@@QEAA@AEBV012@@Z
??0CompileJobFinishCallback@internal@v8@@QEAA@XZ
??0CompilerDispatcher@internal@v8@@QEAA@PEAVIsolate@12@PEAVPlatform@2@_K@Z
??0CompilerDispatcherJob@internal@v8@@QEAA@PEAVCompilerDispatcherTracer@12@_KV?$Handle@VString@internal@v8@@@12@HHW4LanguageMode@12@H_N44IPEAVAccountingAllocator@12@HPEBVAstStringConstants@12@PEAVCompileJobFinishCallback@12@@Z
??0CompilerDispatcherJob@internal@v8@@QEAA@PEAVIsolate@12@PEAVCompilerDispatcherTracer@12@V?$Handle@VScript@internal@v8@@@12@V?$Handle@VSharedFunctionInfo@internal@v8@@@12@PEAVFunctionLiteral@12@V?$shared_ptr@VZone@internal@v8@@@std@@V?$shared_ptr@VDeferredHandles@internal@v8@@@9@6_K@Z
??0CompilerDispatcherJob@internal@v8@@QEAA@PEAVIsolate@12@PEAVCompilerDispatcherTracer@12@V?$Handle@VSharedFunctionInfo@internal@v8@@@12@_K@Z
??0CompilerDispatcherTracer@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0CompoundTransliterator@icu_59@@AEAA@AEAVUVector@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@AEAA@AEAVUVector@1@HAEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@AEAA@AEBVUnicodeString@1@AEAVUVector@1@PEAVUnicodeFilter@1@HAEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@QEAA@AEBV01@@Z
??0CompoundTransliterator@icu_59@@QEAA@AEBVUnicodeString@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@QEAA@AEBVUnicodeString@1@W4UTransDirection@@PEAVUnicodeFilter@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@QEAA@QEBQEAVTransliterator@1@HPEAVUnicodeFilter@1@@Z
??0ConditionVariable@base@v8@@QEAA@XZ
??0ConstChar16Ptr@icu_59@@QEAA@$$T@Z
??0ConstChar16Ptr@icu_59@@QEAA@PEBG@Z
??0ConstChar16Ptr@icu_59@@QEAA@PEB_S@Z
??0ConstChar16Ptr@icu_59@@QEAA@PEB_W@Z
??0Constant@compiler@internal@v8@@QEAA@H@Z
??0Constant@compiler@internal@v8@@QEAA@M@Z
??0Constant@compiler@internal@v8@@QEAA@N@Z
??0Constant@compiler@internal@v8@@QEAA@V?$Handle@VHeapObject@internal@v8@@@23@@Z
??0Constant@compiler@internal@v8@@QEAA@VExternalReference@23@@Z
??0Constant@compiler@internal@v8@@QEAA@VRelocatablePtrConstantInfo@123@@Z
??0Constant@compiler@internal@v8@@QEAA@VRpoNumber@123@@Z
??0Constant@compiler@internal@v8@@QEAA@_J@Z
??0ConstantArrayBuilder@interpreter@internal@v8@@QEAA@PEAVZone@23@@Z
??0Contents@ArrayBuffer@v8@@QEAA@XZ
??0Contents@SharedArrayBuffer@v8@@QEAA@XZ
??0ControlEquivalence@compiler@internal@v8@@QEAA@$$QEAV0123@@Z
??0ControlEquivalence@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0ControlEquivalence@compiler@internal@v8@@QEAA@PEAVZone@23@PEAVGraph@123@@Z
??0ControlFlowBuilder@interpreter@internal@v8@@QEAA@PEAVBytecodeArrayBuilder@123@@Z
??0ControlFlowOptimizer@compiler@internal@v8@@QEAA@PEAVGraph@123@PEAVCommonOperatorBuilder@123@PEAVMachineOperatorBuilder@123@PEAVZone@23@@Z
??0Coverage@debug@v8@@AEAA@PEAV0internal@2@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@$$QEAU01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@AEBU01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@XZ
??0CurrencyAffixInfo@icu_59@@QEAA@$$QEAV01@@Z
??0CurrencyAffixInfo@icu_59@@QEAA@AEBV01@@Z
??0CurrencyAffixInfo@icu_59@@QEAA@XZ
??0CurrencyAmount@icu_59@@QEAA@AEBV01@@Z
??0CurrencyAmount@icu_59@@QEAA@AEBVFormattable@1@VConstChar16Ptr@1@AEAW4UErrorCode@@@Z
??0CurrencyAmount@icu_59@@QEAA@NVConstChar16Ptr@1@AEAW4UErrorCode@@@Z
??0CurrencyPluralInfo@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0CurrencyPluralInfo@icu_59@@QEAA@AEBV01@@Z
??0CurrencyPluralInfo@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0CurrencyUnit@icu_59@@QEAA@AEBV01@@Z
??0CurrencyUnit@icu_59@@QEAA@VConstChar16Ptr@1@AEAW4UErrorCode@@@Z
??0DateFmtBestPattern@icu_59@@QEAA@AEBV01@@Z
??0DateFmtBestPattern@icu_59@@QEAA@AEBVUnicodeString@1@@Z
??0DateFmtBestPatternKey@icu_59@@QEAA@AEBV01@@Z
??0DateFmtBestPatternKey@icu_59@@QEAA@AEBVLocale@1@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0DateFormat@icu_59@@IEAA@AEBV01@@Z
??0DateFormat@icu_59@@IEAA@XZ
??0DateFormatSymbols@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_59@@QEAA@AEBV01@@Z
??0DateFormatSymbols@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_59@@QEAA@AEBVLocale@1@PEBDAEAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_59@@QEAA@PEBDAEAW4UErrorCode@@@Z
??0DateInterval@icu_59@@QEAA@AEBV01@@Z
??0DateInterval@icu_59@@QEAA@NN@Z
??0DateIntervalFormat@icu_59@@AEAA@AEBVLocale@1@PEAVDateIntervalInfo@1@PEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0DateIntervalFormat@icu_59@@AEAA@XZ
??0DateIntervalFormat@icu_59@@IEAA@AEBV01@@Z
??0DateIntervalInfo@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DateIntervalInfo@icu_59@@QEAA@AEBV01@@Z
??0DateIntervalInfo@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DateTimePatternGenerator@icu_59@@AEAA@AEAW4UErrorCode@@@Z
??0DateTimePatternGenerator@icu_59@@AEAA@AEBV01@@Z
??0DateTimePatternGenerator@icu_59@@AEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DateTimeRule@icu_59@@QEAA@AEBV01@@Z
??0DateTimeRule@icu_59@@QEAA@HHHCHW4TimeRuleType@01@@Z
??0DateTimeRule@icu_59@@QEAA@HHHHW4TimeRuleType@01@@Z
??0DateTimeRule@icu_59@@QEAA@HHHW4TimeRuleType@01@@Z
??0DeadCodeElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVGraph@123@PEAVCommonOperatorBuilder@123@@Z
??0DebugOptions@node@@QEAA@$$QEAV01@@Z
??0DebugOptions@node@@QEAA@AEBV01@@Z
??0DebugOptions@node@@QEAA@XZ
??0DecimalFormat@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBV01@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@AEBVDecimalFormatSymbols@1@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@PEAVDecimalFormatSymbols@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@PEAVDecimalFormatSymbols@1@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@PEAVDecimalFormatSymbols@1@W4UNumberFormatStyle@@AEAW4UErrorCode@@@Z
??0DecimalFormatSymbols@icu_59@@AEAA@XZ
??0DecimalFormatSymbols@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DecimalFormatSymbols@icu_59@@QEAA@AEBV01@@Z
??0DecimalFormatSymbols@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DeclarationScope@internal@v8@@QEAA@PEAVZone@12@PEAVAstValueFactory@12@@Z
??0DeclarationScope@internal@v8@@QEAA@PEAVZone@12@PEAVScope@12@W4ScopeType@12@W4FunctionKind@12@@Z
??0DeclarationScope@internal@v8@@QEAA@PEAVZone@12@W4ScopeType@12@V?$Handle@VScopeInfo@internal@v8@@@12@@Z
??0DeferredHandleScope@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0DeferredHandles@internal@v8@@AEAA@PEAPEAVObject@12@PEAVIsolate@12@@Z
??0Delegate@ValueDeserializer@v8@@QEAA@AEBV012@@Z
??0Delegate@ValueDeserializer@v8@@QEAA@XZ
??0Delegate@ValueSerializer@v8@@QEAA@AEBV012@@Z
??0Delegate@ValueSerializer@v8@@QEAA@XZ
??0DiamondMatcher@compiler@internal@v8@@QEAA@PEAVNode@123@@Z
??0DictionaryMatcher@icu_59@@QEAA@AEBV01@@Z
??0DictionaryMatcher@icu_59@@QEAA@XZ
??0DigitAffix@icu_59@@QEAA@$$QEAV01@@Z
??0DigitAffix@icu_59@@QEAA@AEBV01@@Z
??0DigitAffix@icu_59@@QEAA@PEB_SHH@Z
??0DigitAffix@icu_59@@QEAA@XZ
??0DigitAffixesAndPadding@icu_59@@QEAA@$$QEAV01@@Z
??0DigitAffixesAndPadding@icu_59@@QEAA@AEBV01@@Z
??0DigitAffixesAndPadding@icu_59@@QEAA@XZ
??0DigitFormatter@icu_59@@QEAA@$$QEAV01@@Z
??0DigitFormatter@icu_59@@QEAA@AEBV01@@Z
??0DigitFormatter@icu_59@@QEAA@AEBVDecimalFormatSymbols@1@@Z
??0DigitFormatter@icu_59@@QEAA@XZ
??0DigitFormatterIntOptions@icu_59@@QEAA@XZ
??0DigitFormatterOptions@icu_59@@QEAA@XZ
??0DigitGrouping@icu_59@@QEAA@XZ
??0DigitInterval@icu_59@@QEAA@XZ
??0DigitList@icu_59@@QEAA@AEBV01@@Z
??0DigitList@icu_59@@QEAA@XZ
??0DisallowJavascriptExecutionScope@Isolate@v8@@QEAA@PEAV12@W4OnFailure@012@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@XZ
??0DummyFormat@MessageFormat@icu_59@@QEAA@$$QEAV012@@Z
??0DummyFormat@MessageFormat@icu_59@@QEAA@AEBV012@@Z
??0DummyFormat@MessageFormat@icu_59@@QEAA@XZ
??0Ecliptic@CalendarAstronomer@icu_59@@QEAA@NN@Z
??0Edits@icu_59@@QEAA@XZ
??0EffectControlLinearizer@compiler@internal@v8@@QEAA@PEAVJSGraph@123@PEAVSchedule@123@PEAVZone@23@PEAVSourcePositionTable@123@@Z
??0EhFrameIterator@internal@v8@@QEAA@PEBE0@Z
??0EhFrameWriter@internal@v8@@QEAA@PEAVZone@12@@Z
??0EmbedderHeapTracer@v8@@QEAA@AEBV01@@Z
??0EmbedderHeapTracer@v8@@QEAA@XZ
??0Equatorial@CalendarAstronomer@icu_59@@QEAA@NN@Z
??0ErrorThrower@wasm@internal@v8@@QEAA@$$QEAV0123@@Z
??0ErrorThrower@wasm@internal@v8@@QEAA@PEAVIsolate@23@PEBD@Z
??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0EscapeAnalysis@compiler@internal@v8@@QEAA@PEAVGraph@123@PEAVCommonOperatorBuilder@123@PEAVZone@23@@Z
??0EscapeAnalysisReducer@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVJSGraph@123@PEAVEscapeAnalysis@123@PEAVZone@23@@Z
??0EventListener@icu_59@@QEAA@AEBV01@@Z
??0EventListener@icu_59@@QEAA@XZ
??0ExplicitOperand@compiler@internal@v8@@QEAA@W4LocationKind@LocationOperand@123@W4MachineRepresentation@23@H@Z
??0Extension@v8@@QEAA@PEBD0HPEAPEBDH@Z
??0ExtensionConfiguration@v8@@QEAA@HQEAPEBD@Z
??0ExtensionConfiguration@v8@@QEAA@XZ
??0ExternalOneByteStringResource@String@v8@@IEAA@XZ
??0ExternalOneByteStringResourceImpl@v8@@QEAA@PEBD_K@Z
??0ExternalOneByteStringResourceImpl@v8@@QEAA@XZ
??0ExternalResourceVisitor@v8@@QEAA@AEBV01@@Z
??0ExternalResourceVisitor@v8@@QEAA@XZ
??0ExternalSourceStream@ScriptCompiler@v8@@QEAA@AEBV012@@Z
??0ExternalSourceStream@ScriptCompiler@v8@@QEAA@XZ
??0ExternalStringResource@String@v8@@IEAA@XZ
??0ExternalStringResourceBase@String@v8@@IEAA@XZ
??0FCDUIterCollationIterator@icu_59@@QEAA@AEBV01@@Z
??0FCDUIterCollationIterator@icu_59@@QEAA@PEBUCollationData@1@CAEAUUCharIterator@@H@Z
??0FCDUTF16CollationIterator@icu_59@@QEAA@AEBV01@@Z
??0FCDUTF16CollationIterator@icu_59@@QEAA@AEBV01@PEB_S@Z
??0FCDUTF16CollationIterator@icu_59@@QEAA@PEBUCollationData@1@CPEB_S11@Z
??0FCDUTF8CollationIterator@icu_59@@QEAA@AEBV01@@Z
??0FCDUTF8CollationIterator@icu_59@@QEAA@PEBUCollationData@1@CPEBEHH@Z
??0FieldPosition@icu_59@@QEAA@AEBV01@@Z
??0FieldPosition@icu_59@@QEAA@H@Z
??0FieldPosition@icu_59@@QEAA@XZ
??0FieldPositionHandler@icu_59@@QEAA@AEBV01@@Z
??0FieldPositionHandler@icu_59@@QEAA@XZ
??0FieldPositionIterator@icu_59@@QEAA@AEBV01@@Z
??0FieldPositionIterator@icu_59@@QEAA@XZ
??0FilteredBreakIteratorBuilder@icu_59@@IEAA@XZ
??0FilteredBreakIteratorBuilder@icu_59@@QEAA@AEBV01@@Z
??0FilteredNormalizer2@icu_59@@QEAA@AEBV01@@Z
??0FilteredNormalizer2@icu_59@@QEAA@AEBVNormalizer2@1@AEBVUnicodeSet@1@@Z
??0FixedDecimal@icu_59@@QEAA@AEBV01@@Z
??0FixedDecimal@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0FixedDecimal@icu_59@@QEAA@AEBVVisibleDigits@1@@Z
??0FixedDecimal@icu_59@@QEAA@N@Z
??0FixedDecimal@icu_59@@QEAA@NH@Z
??0FixedDecimal@icu_59@@QEAA@NH_J@Z
??0FixedDecimal@icu_59@@QEAA@XZ
??0FixedPrecision@icu_59@@QEAA@$$QEAV01@@Z
??0FixedPrecision@icu_59@@QEAA@AEBV01@@Z
??0FixedPrecision@icu_59@@QEAA@XZ
??0Format@icu_59@@IEAA@AEBV01@@Z
??0Format@icu_59@@IEAA@XZ
??0Formattable@icu_59@@QEAA@AEBV01@@Z
??0Formattable@icu_59@@QEAA@AEBVUnicodeString@1@@Z
??0Formattable@icu_59@@QEAA@H@Z
??0Formattable@icu_59@@QEAA@N@Z
??0Formattable@icu_59@@QEAA@NW4ISDATE@01@@Z

Sections

.text
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Acrylic DNS Proxy 2.0.0/sqlite3.dll
.dll windows:4 windows x86 arch:x86

9ff5e67e3fd580db0ffca5c778aab906

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\db\sqlite3\src\sqlite3.pdb

Imports

kernel32

Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
GetLastError
SetFilePointer
CloseHandle
ReadFile
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
UnlockFile
LockFile
LockFileEx
UnlockFileEx
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetFileAttributesExW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
UnmapViewOfFile
GetTempPathA
GetTempPathW
LocalFree
FormatMessageA
FormatMessageW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
CreateFileW
MapViewOfFile
CreateFileMappingA
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
GetCurrentThreadId

mozcrt19

memmove
qsort
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strncmp
atoi
memcpy
memset
malloc
free
_localtime64_s
realloc

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_module
sqlite3_data_count
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_load_extension
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_nomem
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_sql
sqlite3_step
sqlite3_stmt_status
sqlite3_thread_cleanup
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf

Sections

.text
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/CertUtils.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/WPFToolkit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8
Signer

Actual PE Digest

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\obj\Release\WPFToolkit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/avira_en_avpn0___maj.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/nssckbi.dll
.dll windows:4 windows x86 arch:x86

56ed15a990d58148d7b09af9a12bb6bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\nss\nssckbi\nssckbi.pdb

Imports

plc4

PL_strlen

plds4

PL_ArenaAllocate
PL_HashTableEnumerateEntries
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableAdd
PL_HashTableDestroy
PL_CompareValues
PL_NewHashTable
PL_FinishArenaPool
PL_InitArenaPool

nspr4

PR_CallOnce
PR_GetThreadPrivate
PR_SetThreadPrivate
PR_NewThreadPrivateIndex
PR_Free
PR_Calloc
PR_Unlock
PR_Lock
PR_DestroyLock
PR_NewLock

mozcrt19

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
memcpy
memset
memcmp
memmove
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange

Exports

Exports

C_GetFunctionList

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/CertUtils.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/wpnclient.exe
.exe windows:5 windows x86 arch:x86

d18cde94cdc6e930f022e2819d39a2bd

Code Sign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:eb:54:56:b9:e0:c2:c6:83:57:c4:29:75:b9:82:24
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/10/2016, 00:00

Not After

12/10/2019, 23:59

Subject

SERIALNUMBER=HRA 722586,CN=Avira Operations GmbH & Co. KG,O=Avira Operations GmbH & Co. KG,L=Tettnang,ST=Baden-Wuerttemberg,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#1303556c6d,1.3.6.1.4.1.311.60.2.1.2=#1312426164656e2d577565727474656d62657267,1.3.6.1.4.1.311.60.2.1.3=#13024445

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:4e:c3:95:47:42:83:ef:8b:6b:5f:47:4a:d8:4f:91:01:17:0e:80:99:90:a3:50:29:f7:c2:2b:55:bc:b1:b4
Signer

Actual PE Digest

44:4e:c3:95:47:42:83:ef:8b:6b:5f:47:4a:d8:4f:91:01:17:0e:80:99:90:a3:50:29:f7:c2:2b:55:bc:b1:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\bamboo-build\LAUN-WCC171-JOB1\3rdParty\wix\wix3.10.4-sources\build\ship\x86\burn.pdb

Imports

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
CheckTokenMembership
RegCloseKey
RegOpenKeyExW
CreateWellKnownSid
InitializeAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
DecryptFileW
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetEntriesInAclA
SetSecurityDescriptorGroup
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
MessageBoxW
GetMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage
PostQuitMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

StretchBlt
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
GetObjectW

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

TerminateProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetFileType
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
LoadLibraryExW
GetStdHandle
DecodePointer
EncodePointer
SetLastError
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineW
SystemTimeToFileTime
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
RtlUnwind
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcess
GetVersionExW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
FreeLibrary
GlobalAlloc
GlobalFree
GetFileSizeEx
ReadFile
SetFilePointerEx
SetFileTime
CopyFileW
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
VerSetConditionMask
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
GetModuleHandleA
ExitProcess
LoadLibraryExA
RaiseException
FlushFileBuffers

rpcrt4

UuidCreate

Sections

.text
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/viewsource/xpti.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Avira Phantom VPN 2.37.1/xpti.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/BFE.DLL
.dll windows:10 windows x64 arch:x64

af3ccebee341bc1634b9269a2d4ab01d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

bfe.pdb

Imports

msvcrt

_initterm
__C_specific_handler
wcscspn
_wcslwr
bsearch
_ultoa_s
strpbrk
strstr
sprintf_s
isprint
_ltoa_s
_i64toa_s
_ui64toa_s
wprintf
memmove
memcpy
malloc
memcmp
log
wcstoul
_vsnprintf
_vsnwprintf
_wcsicmp
free
wcstol
qsort
_amsg_exit
iswctype
_XcptFilter
wcschr
_wcsnicmp
_ultow
tolower
wcsnlen
memset

ntdll

NtQueryObject
RtlGetSaclSecurityDescriptor
RtlValidRelativeSecurityDescriptor
RtlNumberOfSetBits
RtlInitializeBitMap
WinSqmIsOptedIn
WinSqmSetDWORD
WinSqmAddToStream
RtlValidSid
RtlLengthSid
NtDeviceIoControlFile
RtlAllocateHeap
RtlInitializeSRWLock
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlGetCurrentServiceSessionId
RtlCreateHashTable
RtlDeleteHashTable
RtlInsertEntryHashTable
RtlRemoveEntryHashTable
RtlLookupEntryHashTable
RtlGetNextEntryHashTable
RtlInitEnumerationHashTable
RtlEnumerateEntryHashTable
RtlEndEnumerationHashTable
RtlContractHashTable
RtlGetOwnerSecurityDescriptor
RtlAdjustPrivilege
RtlAbsoluteToSelfRelativeSD
RtlSetOwnerSecurityDescriptor
RtlSelfRelativeToAbsoluteSD2
RtlCreateServiceSid
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlSubAuthorityCountSid
TpReleaseTimer
TpWaitForTimer
RtlFreeHeap
RtlIpv4AddressToStringA
RtlIpv6AddressToStringA
RtlEthernetAddressToStringA
TpSetTimer
TpIsTimerSet
TpAllocTimer
RtlEqualSid
RtlLengthSecurityDescriptor
RtlApplicationVerifierStop
EtwEventEnabled
EtwEventWriteTransfer
EtwEventWrite
EtwEventActivityIdControl
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
EtwTraceMessage
RtlExpandHashTable
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
RtlSetThreadPreferredUILanguages

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
LoadStringW
DisableThreadLibraryCalls
GetProcAddress

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
CreateThread
TlsGetValue
GetCurrentThread
OpenThreadToken
TlsSetValue
GetCurrentProcess
TerminateProcess
TlsFree
TlsAlloc
GetProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-synch-l1-1-0

CreateEventW
CreateSemaphoreExW
ReleaseSRWLockShared
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ReleaseSemaphore
AcquireSRWLockShared
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
SetEvent
InitializeSRWLock
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockExclusive

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
DeleteTimerQueueTimer
UnregisterWaitEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-security-base-l1-1-0

DestroyPrivateObjectSecurity
GetPrivateObjectSecurity
GetSecurityDescriptorControl
CreatePrivateObjectSecurityEx
GetSecurityDescriptorLength
SetSecurityDescriptorControl
SetPrivateObjectSecurityEx
MapGenericMask
PrivilegeCheck
EqualSid
CopySid
InitializeSecurityDescriptor
AllocateAndInitializeSid
CreateWellKnownSid
FreeSid
InitializeAcl
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorDacl

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapDestroy
HeapFree
GetProcessHeap
HeapSize
HeapCreate
HeapReAlloc

rpcrt4

RpcRaiseException
RpcImpersonateClient
RpcServerInqCallAttributesW
UuidCreate
RpcGetAuthorizationContextForClient
RpcBindingVectorFree
RpcServerUnregisterIfEx
RpcFreeAuthorizationContext
RpcEpUnregister
NdrServerCallAll
NdrServerCall2
RpcServerUseProtseqW
RpcServerRegisterIf3
I_RpcExceptionFilter
MesHandleFree
RpcServerInqBindings
MesEncodeDynBufferHandleCreate
MesDecodeBufferHandleCreate
UuidFromStringW
RpcRevertToSelf
NdrMesTypeEncode3
NdrMesTypeDecode3
I_RpcBindingInqLocalClientPID
RpcEpRegisterW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

authz

AuthzGetInformationFromContext
AuthzAccessCheck
AuthziFreeAuditEventType
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzFreeAuditEvent
AuthziLogAuditEvent
AuthziInitializeAuditEventType
AuthziInitializeAuditParamsFromArray
AuthziInitializeAuditEvent

ws2_32

htonl

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

iphlpapi

GetCurrentThreadCompartmentId

api-ms-win-core-file-l1-1-0

WriteFile
CreateFileW
DeleteFileW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-perfcounters-l1-1-0

PerfCreateInstance
PerfStartProvider
PerfSetULongLongCounterValue
PerfSetULongCounterValue
PerfStopProvider
PerfSetCounterSetInfo

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegEnumValueW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWork

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-eventing-controller-l1-1-0

StartTraceW
EnableTraceEx2
ControlTraceW

api-ms-win-eventing-consumer-l1-1-0

ProcessTrace
OpenTraceW
CloseTrace

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

BfeGetDirectDispatchTable
BfeOnServiceStartTypeChange
BfeServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/BetternetForWindows.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/en-US.aff
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/designmode.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/nets.exe
.exe windows:4 windows x86 arch:x86

6e7f9a29f2c85394521a08b9f31f6275

Code Sign

4f:e6:1f:a5:0f:40:bb:a8:41:2f:0d:f4:11:5b:40:f0
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/04/2020, 00:00

Not After

04/04/2023, 23:59

Subject

CN=BetterNet LLC,O=BetterNet LLC,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:96:1d:c2:98:08:92:3b:d3:cf:92:99:92:f0:90:26:61:8f:e2:10:f6:96:e0:ef:c1:70:a4:10:f7:33:a1:b1
Signer

Actual PE Digest

ee:96:1d:c2:98:08:92:3b:d3:cf:92:99:92:f0:90:26:61:8f:e2:10:f6:96:e0:ef:c1:70:a4:10:f7:33:a1:b1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
SetWindowPos
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersion
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CopyFileW
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Betternet for Windows 6.8.0/msi/xpt_dump.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xpcom\typelib\xpt\tools\xpt_dump.pdb

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/Proxy Searcher 5.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/XPCOMUtils.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/components.list
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/XPCOMUtils.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/components.list
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Burd's Proxy Searcher 5.1/xpti/security-prefs.exe
.exe windows:5 windows x86 arch:x86

c6a582b57969dd0489704a84e030f4c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\CodeBases\isdev\src\Runtime\MSI\Shared\Setup\Setup___Win32_Release_Prerequisites_Unicode\setupPreReq.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

comctl32

ord17

kernel32

IsValidLocale
GetLocaleInfoW
ExitThread
lstrcpyA
GetCommandLineW
GetExitCodeProcess
GetSystemDefaultLangID
GetUserDefaultLangID
lstrcmpW
lstrcmpiW
VerLanguageNameW
FindClose
FindNextFileW
CompareFileTime
FindFirstFileW
MoveFileW
GetPrivateProfileStringW
CreateDirectoryW
SetFileAttributesW
GetSystemTimeAsFileTime
LocalFree
FormatMessageW
GetSystemInfo
MulDiv
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetModuleHandleW
GetVersion
GetLocalTime
GetFileAttributesW
FileTimeToLocalFileTime
GetFileTime
GetCurrentDirectoryW
VirtualQuery
IsBadReadPtr
FlushFileBuffers
SetEndOfFile
GetDriveTypeW
GetCurrentThread
GetProcAddress
LocalAlloc
InterlockedExchange
LoadLibraryA
FreeLibrary
LoadLibraryW
GetTempFileNameW
lstrcatW
QueryPerformanceFrequency
InterlockedDecrement
CreateEventW
CompareStringW
CompareStringA
GetVersionExW
InterlockedIncrement
CopyFileW
CreateThread
GetExitCodeThread
GetTickCount
GlobalFree
GlobalLock
GlobalUnlock
FindResourceW
LoadResource
SizeofResource
GlobalAlloc
LockResource
ExpandEnvironmentStringsW
GetTempPathW
SetErrorMode
SetEnvironmentVariableA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapDestroy
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
FatalAppExitA
GetModuleHandleA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetWindowsDirectoryW
lstrcpyW
GetSystemDirectoryW
SetCurrentDirectoryW
CreateProcessW
WaitForSingleObject
DeleteFileW
RemoveDirectoryW
Sleep
ExitProcess
GetCurrentProcess
DuplicateHandle
GetPrivateProfileSectionW
TerminateProcess
MoveFileExW
GetThreadContext
VirtualProtectEx
WriteProcessMemory
FlushInstructionCache
SetThreadContext
ResumeThread
GetModuleFileNameW
lstrlenW
lstrcpynW
GetProcessHeap
HeapAlloc
HeapFree
WriteFile
ReadFile
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
lstrlenA
GetLastError
SetLastError
GetShortPathNameW
WritePrivateProfileSectionW
GetDiskFreeSpaceW
GetModuleFileNameA
GetStdHandle
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
FreeResource
lstrcmpiA
GetPrivateProfileSectionNamesA
GetPrivateProfileIntA
lstrcatA
GetPrivateProfileStringA
lstrcpynA
lstrcmpA
SearchPathW
VirtualProtect
SystemTimeToFileTime
QueryPerformanceCounter
SetEvent
ResetEvent
GetCurrentProcessId
GetEnvironmentVariableW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetDateFormatW
GetTimeFormatW
FindResourceExW
OpenProcess
GetProcessTimes

user32

DispatchMessageW
PostMessageW
KillTimer
PostQuitMessage
SetTimer
DefWindowProcW
TranslateMessage
wvsprintfW
CharPrevW
LoadImageW
CreateDialogParamW
MoveWindow
GetParent
GetWindowTextW
SetCursor
GetDlgItemTextW
GetWindow
SetFocus
SetDlgItemTextW
SetForegroundWindow
SetActiveWindow
GetDlgCtrlID
GetDC
FillRect
GetSysColor
GetSysColorBrush
GetSystemMetrics
SetRect
FindWindowW
IntersectRect
SubtractRect
CreateDialogIndirectParamW
CharNextW
EnableWindow
FindWindowExW
GetWindowRect
ScreenToClient
SendMessageW
IsDialogMessageW
IsWindow
DestroyWindow
SendDlgItemMessageW
MessageBoxW
WaitForInputIdle
GetWindowLongW
SetWindowLongW
GetClientRect
ClientToScreen
ExitWindowsEx
CharUpperW
CallWindowProcW
MapWindowPoints
GetPropW
DrawFocusRect
InflateRect
DrawTextW
CopyRect
GetClassNameW
RemovePropW
SetPropW
EnumChildWindows
UpdateWindow
InvalidateRect
DrawIcon
MapDialogRect
wsprintfA
RegisterClassExW
SetWindowPos
GetWindowDC
ReleaseDC
EndPaint
BeginPaint
EndDialog
SetWindowTextW
GetDlgItem
ShowWindow
DialogBoxIndirectParamW
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageW
wsprintfW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
GetMessageW

gdi32

CreateHalftonePalette
UnrealizeObject
SelectPalette
RealizePalette
CreateFontW
SetBkMode
GetDeviceCaps
CreateSolidBrush
GetDIBColorTable
CreateFontIndirectW
TranslateCharsetInfo
CreateCompatibleDC
SelectObject
BitBlt
CreateDIBitmap
DeleteDC
DeleteObject
GetStockObject
RestoreDC
GetTextExtentPoint32W
CreatePalette
CreatePatternBrush
CreateCompatibleBitmap
CreateDCW
DeleteMetaFile
SetMetaFileBitsEx
SetStretchBltMode
SelectClipRgn
CreateRectRgn
SetPixel
PatBlt
PlayMetaFile
SetBkColor
StretchBlt
CreateBitmap
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
SaveDC
GetSystemPaletteEntries
GetObjectW
SetTextColor

advapi32

OpenThreadToken
OpenProcessToken
RegEnumKeyW
RegCreateKeyW
LookupPrivilegeValueW
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
RegOpenKeyW

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW

ole32

CoCreateInstance
CLSIDFromProgID
CoTaskMemAlloc
CoCreateGuid
CreateItemMoniker
ProgIDFromCLSID
CoTaskMemFree
CoInitialize
CoUninitialize
CoInitializeSecurity
GetRunningObjectTable
CoTaskMemRealloc
StringFromGUID2

oleaut32

GetErrorInfo
VarUI4FromStr
SystemTimeToVariantTime
LoadTypeLi
RegisterTypeLi
SetErrorInfo
CreateErrorInfo
VarBstrCmp
VariantChangeType
VariantClear
VarBstrFromDate
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VarBstrCat
SysStringLen
SysReAllocStringLen
SysAllocStringLen
SysFreeString

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW
UuidFromStringW

Sections

.text
Size: 907KB - Virtual size: 907KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/ccproxysetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/wincharset.properties
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/CertUtils.exe
.exe windows:1 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

72:d5:ca:f5:9a:3c:c6:44:c5:73:e1:3e:a0:89:2e:ab
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

26/03/2015, 00:00

Not After

14/05/2018, 23:59

Subject

CN=Youngzsoft Co.\, Ltd.,OU=Software Development,O=Youngzsoft Co.\, Ltd.,L=Changsha,ST=Hunan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e8:70:f6:93:bd:1d:06:26:e8:2f:6e:e9:88:c2:c3:ec:cc:f5:f2:24
Signer

Actual PE Digest

e8:70:f6:93:bd:1d:06:26:e8:2f:6e:e9:88:c2:c3:ec:cc:f5:f2:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/wincharset.properties
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xNet/xhtml11.dtd
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CCProxy 2018.09.14/xhtml11.dtd
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/DXCore.exe
.exe windows:1 windows x86 arch:x86

Code Sign

9c:cc:14:56:b4:4b:16:1a:dd:7c:4f:21:63:a7:5a:d5
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/12/2015, 00:00

Not After

21/12/2020, 23:59

Subject

CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400184,STREET=Str. PARIS 19-21,L=Cluj-Napoca,ST=Cluj,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9c:cc:14:56:b4:4b:16:1a:dd:7c:4f:21:63:a7:5a:d5
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/12/2015, 00:00

Not After

21/12/2020, 23:59

Subject

CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400184,STREET=Str. PARIS 19-21,L=Cluj-Napoca,ST=Cluj,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:9f:1d:3e:72:86:8b:63:1d:fb:bf:01:8f:5a:59:01:d1:4a:4d:99:a4:97:46:6f:9d:c0:5c:ad:ac:bf:c0:1a
Signer

Actual PE Digest

80:9f:1d:3e:72:86:8b:63:1d:fb:bf:01:8f:5a:59:01:d1:4a:4d:99:a4:97:46:6f:9d:c0:5c:ad:ac:bf:c0:1a

Digest Algorithm

sha256

PE Digest Matches

true

9f:04:95:c2:09:e4:91:f5:68:2f:90:74:13:6c:2d:a7:ea:a3:b6:a9
Signer

Actual PE Digest

9f:04:95:c2:09:e4:91:f5:68:2f:90:74:13:6c:2d:a7:ea:a3:b6:a9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/SendToOneNote.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/all.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/NcaSvc/ua.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/SendToOneNote.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/all.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/setup_chrispc_anonymous_connection_2_20.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Connection 2.20/ua.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/SendToOneNote.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/ssl3.dll
.dll windows:4 windows x86 arch:x86

1f5dd6cab148898853798a9c54fe2055

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\nss\ssl\ssl3.pdb

Imports

nss3

NSS_RegisterShutdown
PK11_Finalize
CERT_FreeDistNames
CERT_GetSSLCACerts
SECKEY_CacheStaticFlags
CERT_DupCertList
PK11_MapSignKeyType
PK11_CopyTokenPrivKeyToSessionPrivKey
PK11_ReferenceSlot
PK11_WrapSymKey
CERT_DupDistNames
CERT_GetDefaultCertDB
CERT_FreeNicknames
CERT_CheckCertValidTimes
CERT_GetCertNicknames
PK11_FindKeyByAnyCert
CERT_FindUserCertByUsage
CERT_FindCertByName
PK11_UnwrapSymKey
PK11_SaveContextAlloc
PK11_DigestKey
PK11_RestoreContext
PK11_CreateDigestContext
PK11_Derive
PK11_GetSlotFromKey
PK11_SymKeyFromHandle
NSS_VersionCheck
SECMOD_LookupSlot
PK11_IsPresent
PK11_GetSlotSeries
PK11_GetSlotID
PK11_GetModuleID
PK11_NeedLogin
PK11_IsLoggedIn
PK11_DigestBegin
PK11_DigestOp
PK11_DigestFinal
PK11_CreateContextBySymKey
PK11_IVFromParam
PK11_CipherOp
PK11_ParamFromIV
PK11_DestroyContext
PK11_HashBuf
SECKEY_SignatureLen
DSAU_DecodeDerSigToLen
DSAU_DecodeDerSig
PK11_Verify
PK11_SignatureLen
PK11_Sign
DSAU_EncodeDerSigWithLen
PK11_GenerateRandom
PK11_TokenExists
CERT_ExtractPublicKey
SECKEY_GetPrivateKeyType
VFY_CreateContext
VFY_Begin
VFY_Update
VFY_End
VFY_DestroyContext
SGN_NewContext
SGN_Begin
SGN_Update
SGN_End
SGN_DestroyContext
PK11_PubEncryptRaw
PK11_PubDecryptRaw
PK11_GetBestSlot
__PK11_CreateContextByRawKey
HASH_GetHashObject
CERT_VerifyCertName
CERT_NameToAscii
SECKEY_CopyPrivateKey
CERT_NewTempCertificate
SECKEY_UpdateCertPQG
CERT_VerifyCertNow
PK11_UnwrapSymKeyWithFlags
PK11_ImportSymKey
SECKEY_CreateDHPrivateKey
PK11_PubDerive
CERT_DupCertificate
CERT_CertChainFromCert
PK11_GetSlotFromPrivateKey
PK11_GetInternalSlot
PK11_GetKeyData
CERT_DestroyCertificateList
SECKEY_CreateRSAPrivateKey
PK11_GetCurrentWrapIndex
PK11_GetWrapKey
PK11_GetBestWrapMechanism
PK11_SetWrapKey
PK11_GetMechanism
CERT_DestroyCertificate
PK11_VerifyKeyOK
PK11_ReferenceSymKey
PK11_GetBestKeyLength
PK11_FreeSymKey
SECKEY_PublicKeyStrengthInBits
PK11_GetPrivateModulusLen
PK11_GetBestSlotMultiple
PK11_KeyGen
PK11_FreeSlot
SECKEY_PublicKeyStrength
PK11_PubWrapSymKey
PK11_PrivDecryptPKCS1
PK11_PubUnwrapSymKey
SECKEY_CreateECPrivateKey
SECKEY_DestroyPrivateKey
SECKEY_DestroyPublicKey
PK11_PubDeriveWithKDF
PK11_DeriveWithFlags
PK11_ExtractKeyValue
CERT_DistNamesFromCertList

nssutil3

PORT_ArenaAlloc_Util
PORT_SetError_Util
SECOID_FindOID_Util
SECOID_FindOIDByTag_Util
SECITEM_DupItem_Util
DER_Lengths_Util
NSSRWLock_New_Util
NSSRWLock_Destroy_Util
ATOB_AsciiToData_Util
BTOA_DataToAscii_Util
NSS_PutEnv_Util
SECITEM_Hash
SECOID_GetAlgorithmTag_Util
PORT_Realloc_Util
SECITEM_AllocItem_Util
SECITEM_ZfreeItem_Util
NSS_SecureMemcmp
PORT_ZFree_Util
PORT_NewArena_Util
PORT_ArenaZAlloc_Util
PORT_GetError_Util
PORT_FreeArena_Util
PORT_ZAlloc_Util
SECITEM_CopyItem_Util
PORT_Strdup_Util
SECITEM_CompareItem_Util
NSSRWLock_LockRead_Util
NSSRWLock_UnlockRead_Util
NSSRWLock_LockWrite_Util
NSSRWLock_UnlockWrite_Util
PORT_Alloc_Util
PORT_Free_Util
SECITEM_FreeItem_Util

plc4

PL_strdup

nspr4

PR_FindFunctionSymbol
PR_UnloadLibrary
PR_GetLibraryFilePathname
PR_Free
PR_GetDirectorySeparator
PR_LoadLibraryWithFlags
PR_Now
PR_Close
PR_NewMonitor
PR_CreateIOLayerStub
PR_PushIOLayer
PR_GetUniqueIdentity
PR_GetDefaultIOMethods
PR_GetSocketOption
PR_ConvertIPv4AddrToIPv6
PR_SetError
PR_DestroyMonitor
PR_GetIdentitiesLayer
PR_EmulateAcceptRead
PR_EmulateSendFile
PR_ImportFileMapFromString
PR_ExportFileMapAsString
PR_smprintf
PR_OpenAnonFileMap
PR_smprintf_free
PR_MemMap
PR_MemUnmap
PR_CloseFileMap
PR_StringToNetAddr
PR_CallOnce
PR_CallOnceWithArg
PR_PopIOLayer
PR_GetCurrentThread
PR_ExitMonitor
PR_Sleep
PR_EnterMonitor
PR_GetError
PR_NewLock
PR_Lock
PR_Unlock
PR_DestroyLock
PR_GetEnv

mozcrt19

_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
memcpy
memset
strcmp
memmove
_getpid
memcmp
strstr
strlen
_time64
strchr
getenv
strcpy
strrchr
_encode_pointer
__clean_type_info_names_internal
_malloc_crt

kernel32

GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
GetSystemTimeAsFileTime

Exports

Exports

NSSSSL_VersionCheck
NSS_CmpCertChainWCANames
NSS_FindCertKEAType
NSS_GetClientAuthData
NSS_SetDomesticPolicy
NSS_SetExportPolicy
NSS_SetFrancePolicy
SSL_AuthCertificate
SSL_AuthCertificateHook
SSL_BadCertHook
SSL_CanBypass
SSL_CertDBHandleSet
SSL_CipherPolicyGet
SSL_CipherPolicySet
SSL_CipherPrefGet
SSL_CipherPrefGetDefault
SSL_CipherPrefSet
SSL_CipherPrefSetDefault
SSL_ClearSessionCache
SSL_ConfigMPServerSIDCache
SSL_ConfigSecureServer
SSL_ConfigServerSessionIDCache
SSL_ConfigServerSessionIDCacheWithOpt
SSL_DataPending
SSL_ForceHandshake
SSL_ForceHandshakeWithTimeout
SSL_GetChannelInfo
SSL_GetCipherSuiteInfo
SSL_GetClientAuthDataHook
SSL_GetImplementedCiphers
SSL_GetMaxServerCacheLocks
SSL_GetNegotiatedHostInfo
SSL_GetNumImplementedCiphers
SSL_GetSessionID
SSL_GetStatistics
SSL_HandshakeCallback
SSL_HandshakeNegotiatedExtension
SSL_ImplementedCiphers
SSL_ImportFD
SSL_InheritMPServerSIDCache
SSL_InvalidateSession
SSL_LocalCertificate
SSL_NumImplementedCiphers
SSL_OptionGet
SSL_OptionGetDefault
SSL_OptionSet
SSL_OptionSetDefault
SSL_PeerCertificate
SSL_PreencryptedFileToStream
SSL_PreencryptedStreamToFile
SSL_ReHandshake
SSL_ReHandshakeWithTimeout
SSL_ReconfigFD
SSL_ResetHandshake
SSL_RestartHandshakeAfterCertReq
SSL_RestartHandshakeAfterServerCert
SSL_RevealCert
SSL_RevealPinArg
SSL_RevealURL
SSL_SNISocketConfigHook
SSL_SecurityStatus
SSL_SetMaxServerCacheLocks
SSL_SetPKCS11PinArg
SSL_SetSockPeerID
SSL_SetTrustAnchors
SSL_SetURL
SSL_ShutdownServerSessionIDCache

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/RESOURCES/xpti.exe
.exe windows:1 windows x86 arch:x86

Code Sign

9c:cc:14:56:b4:4b:16:1a:dd:7c:4f:21:63:a7:5a:d5
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/12/2015, 00:00

Not After

21/12/2020, 23:59

Subject

CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400184,STREET=Str. PARIS 19-21,L=Cluj-Napoca,ST=Cluj,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9c:cc:14:56:b4:4b:16:1a:dd:7c:4f:21:63:a7:5a:d5
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

22/12/2015, 00:00

Not After

21/12/2020, 23:59

Subject

CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400184,STREET=Str. PARIS 19-21,L=Cluj-Napoca,ST=Cluj,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:03:4c:07:c1:21:29:b3:26:c6:d8:ea:85:45:dc:c1:a3:79:8f:ea:26:98:75:2a:8d:66:ef:b1:45:cd:2d:e1
Signer

Actual PE Digest

62:03:4c:07:c1:21:29:b3:26:c6:d8:ea:85:45:dc:c1:a3:79:8f:ea:26:98:75:2a:8d:66:ef:b1:45:cd:2d:e1

Digest Algorithm

sha256

PE Digest Matches

true

ec:65:fd:48:23:a8:27:12:48:b8:c2:f3:2d:30:23:c6:ae:f6:b1:82
Signer

Actual PE Digest

ec:65:fd:48:23:a8:27:12:48:b8:c2:f3:2d:30:23:c6:ae:f6:b1:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/SendToOneNote.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/setup_chrispc_anonymous_proxy_pro_8_25.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Anonymous Proxy Pro 8.25/ssl3.dll
.dll windows:4 windows x86 arch:x86

1f5dd6cab148898853798a9c54fe2055

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\nss\ssl\ssl3.pdb

Imports

nss3

NSS_RegisterShutdown
PK11_Finalize
CERT_FreeDistNames
CERT_GetSSLCACerts
SECKEY_CacheStaticFlags
CERT_DupCertList
PK11_MapSignKeyType
PK11_CopyTokenPrivKeyToSessionPrivKey
PK11_ReferenceSlot
PK11_WrapSymKey
CERT_DupDistNames
CERT_GetDefaultCertDB
CERT_FreeNicknames
CERT_CheckCertValidTimes
CERT_GetCertNicknames
PK11_FindKeyByAnyCert
CERT_FindUserCertByUsage
CERT_FindCertByName
PK11_UnwrapSymKey
PK11_SaveContextAlloc
PK11_DigestKey
PK11_RestoreContext
PK11_CreateDigestContext
PK11_Derive
PK11_GetSlotFromKey
PK11_SymKeyFromHandle
NSS_VersionCheck
SECMOD_LookupSlot
PK11_IsPresent
PK11_GetSlotSeries
PK11_GetSlotID
PK11_GetModuleID
PK11_NeedLogin
PK11_IsLoggedIn
PK11_DigestBegin
PK11_DigestOp
PK11_DigestFinal
PK11_CreateContextBySymKey
PK11_IVFromParam
PK11_CipherOp
PK11_ParamFromIV
PK11_DestroyContext
PK11_HashBuf
SECKEY_SignatureLen
DSAU_DecodeDerSigToLen
DSAU_DecodeDerSig
PK11_Verify
PK11_SignatureLen
PK11_Sign
DSAU_EncodeDerSigWithLen
PK11_GenerateRandom
PK11_TokenExists
CERT_ExtractPublicKey
SECKEY_GetPrivateKeyType
VFY_CreateContext
VFY_Begin
VFY_Update
VFY_End
VFY_DestroyContext
SGN_NewContext
SGN_Begin
SGN_Update
SGN_End
SGN_DestroyContext
PK11_PubEncryptRaw
PK11_PubDecryptRaw
PK11_GetBestSlot
__PK11_CreateContextByRawKey
HASH_GetHashObject
CERT_VerifyCertName
CERT_NameToAscii
SECKEY_CopyPrivateKey
CERT_NewTempCertificate
SECKEY_UpdateCertPQG
CERT_VerifyCertNow
PK11_UnwrapSymKeyWithFlags
PK11_ImportSymKey
SECKEY_CreateDHPrivateKey
PK11_PubDerive
CERT_DupCertificate
CERT_CertChainFromCert
PK11_GetSlotFromPrivateKey
PK11_GetInternalSlot
PK11_GetKeyData
CERT_DestroyCertificateList
SECKEY_CreateRSAPrivateKey
PK11_GetCurrentWrapIndex
PK11_GetWrapKey
PK11_GetBestWrapMechanism
PK11_SetWrapKey
PK11_GetMechanism
CERT_DestroyCertificate
PK11_VerifyKeyOK
PK11_ReferenceSymKey
PK11_GetBestKeyLength
PK11_FreeSymKey
SECKEY_PublicKeyStrengthInBits
PK11_GetPrivateModulusLen
PK11_GetBestSlotMultiple
PK11_KeyGen
PK11_FreeSlot
SECKEY_PublicKeyStrength
PK11_PubWrapSymKey
PK11_PrivDecryptPKCS1
PK11_PubUnwrapSymKey
SECKEY_CreateECPrivateKey
SECKEY_DestroyPrivateKey
SECKEY_DestroyPublicKey
PK11_PubDeriveWithKDF
PK11_DeriveWithFlags
PK11_ExtractKeyValue
CERT_DistNamesFromCertList

nssutil3

PORT_ArenaAlloc_Util
PORT_SetError_Util
SECOID_FindOID_Util
SECOID_FindOIDByTag_Util
SECITEM_DupItem_Util
DER_Lengths_Util
NSSRWLock_New_Util
NSSRWLock_Destroy_Util
ATOB_AsciiToData_Util
BTOA_DataToAscii_Util
NSS_PutEnv_Util
SECITEM_Hash
SECOID_GetAlgorithmTag_Util
PORT_Realloc_Util
SECITEM_AllocItem_Util
SECITEM_ZfreeItem_Util
NSS_SecureMemcmp
PORT_ZFree_Util
PORT_NewArena_Util
PORT_ArenaZAlloc_Util
PORT_GetError_Util
PORT_FreeArena_Util
PORT_ZAlloc_Util
SECITEM_CopyItem_Util
PORT_Strdup_Util
SECITEM_CompareItem_Util
NSSRWLock_LockRead_Util
NSSRWLock_UnlockRead_Util
NSSRWLock_LockWrite_Util
NSSRWLock_UnlockWrite_Util
PORT_Alloc_Util
PORT_Free_Util
SECITEM_FreeItem_Util

plc4

PL_strdup

nspr4

PR_FindFunctionSymbol
PR_UnloadLibrary
PR_GetLibraryFilePathname
PR_Free
PR_GetDirectorySeparator
PR_LoadLibraryWithFlags
PR_Now
PR_Close
PR_NewMonitor
PR_CreateIOLayerStub
PR_PushIOLayer
PR_GetUniqueIdentity
PR_GetDefaultIOMethods
PR_GetSocketOption
PR_ConvertIPv4AddrToIPv6
PR_SetError
PR_DestroyMonitor
PR_GetIdentitiesLayer
PR_EmulateAcceptRead
PR_EmulateSendFile
PR_ImportFileMapFromString
PR_ExportFileMapAsString
PR_smprintf
PR_OpenAnonFileMap
PR_smprintf_free
PR_MemMap
PR_MemUnmap
PR_CloseFileMap
PR_StringToNetAddr
PR_CallOnce
PR_CallOnceWithArg
PR_PopIOLayer
PR_GetCurrentThread
PR_ExitMonitor
PR_Sleep
PR_EnterMonitor
PR_GetError
PR_NewLock
PR_Lock
PR_Unlock
PR_DestroyLock
PR_GetEnv

mozcrt19

_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
memcpy
memset
strcmp
memmove
_getpid
memcmp
strstr
strlen
_time64
strchr
getenv
strcpy
strrchr
_encode_pointer
__clean_type_info_names_internal
_malloc_crt

kernel32

GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
GetSystemTimeAsFileTime

Exports

Exports

NSSSSL_VersionCheck
NSS_CmpCertChainWCANames
NSS_FindCertKEAType
NSS_GetClientAuthData
NSS_SetDomesticPolicy
NSS_SetExportPolicy
NSS_SetFrancePolicy
SSL_AuthCertificate
SSL_AuthCertificateHook
SSL_BadCertHook
SSL_CanBypass
SSL_CertDBHandleSet
SSL_CipherPolicyGet
SSL_CipherPolicySet
SSL_CipherPrefGet
SSL_CipherPrefGetDefault
SSL_CipherPrefSet
SSL_CipherPrefSetDefault
SSL_ClearSessionCache
SSL_ConfigMPServerSIDCache
SSL_ConfigSecureServer
SSL_ConfigServerSessionIDCache
SSL_ConfigServerSessionIDCacheWithOpt
SSL_DataPending
SSL_ForceHandshake
SSL_ForceHandshakeWithTimeout
SSL_GetChannelInfo
SSL_GetCipherSuiteInfo
SSL_GetClientAuthDataHook
SSL_GetImplementedCiphers
SSL_GetMaxServerCacheLocks
SSL_GetNegotiatedHostInfo
SSL_GetNumImplementedCiphers
SSL_GetSessionID
SSL_GetStatistics
SSL_HandshakeCallback
SSL_HandshakeNegotiatedExtension
SSL_ImplementedCiphers
SSL_ImportFD
SSL_InheritMPServerSIDCache
SSL_InvalidateSession
SSL_LocalCertificate
SSL_NumImplementedCiphers
SSL_OptionGet
SSL_OptionGetDefault
SSL_OptionSet
SSL_OptionSetDefault
SSL_PeerCertificate
SSL_PreencryptedFileToStream
SSL_PreencryptedStreamToFile
SSL_ReHandshake
SSL_ReHandshakeWithTimeout
SSL_ReconfigFD
SSL_ResetHandshake
SSL_RestartHandshakeAfterCertReq
SSL_RestartHandshakeAfterServerCert
SSL_RevealCert
SSL_RevealPinArg
SSL_RevealURL
SSL_SNISocketConfigHook
SSL_SecurityStatus
SSL_SetMaxServerCacheLocks
SSL_SetPKCS11PinArg
SSL_SetSockPeerID
SSL_SetTrustAnchors
SSL_SetURL
SSL_ShutdownServerSessionIDCache

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/WPFToolkit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8
Signer

Actual PE Digest

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\obj\Release\WPFToolkit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/compreg.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/setup_chrispc_free_vpn_connection_2_14_20_mg.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/WPFToolkit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8
Signer

Actual PE Digest

78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\obj\Release\WPFToolkit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/compreg.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ChrisPC Free VPN Connection 2.14.20/toolkit/xpinstall.exe
.exe windows:1 windows x86 arch:x86

Code Sign

b3:25:7d:17:82:c2:0a:71:8d:79:5b:a1:88:fc:b2:12
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06/01/2021, 00:00

Not After

06/01/2024, 23:59

Subject

CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b3:25:7d:17:82:c2:0a:71:8d:79:5b:a1:88:fc:b2:12
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06/01/2021, 00:00

Not After

06/01/2024, 23:59

Subject

CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:6b:7f:0e:66:ad:2a:ca:b3:ea:be:8e:20:ce:cb:d8:5f:7e:54:a0:1a:90:9a:a2:79:fd:af:98:17:d8:4f:69
Signer

Actual PE Digest

d5:6b:7f:0e:66:ad:2a:ca:b3:ea:be:8e:20:ce:cb:d8:5f:7e:54:a0:1a:90:9a:a2:79:fd:af:98:17:d8:4f:69

Digest Algorithm

sha256

PE Digest Matches

true

ed:4b:37:a2:94:69:7f:e6:68:9f:bd:d6:65:61:e2:8e:0a:23:3c:ec
Signer

Actual PE Digest

ed:4b:37:a2:94:69:7f:e6:68:9f:bd:d6:65:61:e2:8e:0a:23:3c:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/CEVPNSetup_XPVista_x64.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/quirk.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/LICENSE.exe
.exe windows:4 windows x64 arch:x64

6c2cfef02684cd126436a87c6f4cab2a

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a5:9f:51:84:24:a1:91:fc:34:e8:b6:37:f7:fb:20:c3
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

08/04/2009, 00:00

Not After

07/04/2012, 23:59

Subject

CN=Comodo Security Solutions\, Inc.,O=Comodo Security Solutions\, Inc.,POSTALCODE=07310,STREET=525 Washington Blvd,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7f:f2:92:43:2b:14:47:20:b2:c1:36:e1:2e:8e:bd:2f:cb:e4:2c:1a
Signer

Actual PE Digest

7f:f2:92:43:2b:14:47:20:b2:c1:36:e1:2e:8e:bd:2f:cb:e4:2c:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\Users\lukel\E3\Installer\setup\x64\Release\setup.pdb

Imports

shlwapi

PathFileExistsW
SHDeleteKeyW
PathIsDirectoryW

user32

ShowWindow
SetForegroundWindow
MessageBoxW
FindWindowW
UnregisterClassA

shell32

SHGetSpecialFolderPathW
SHCreateDirectoryExW

advapi32

RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

kernel32

WriteConsoleW
WriteConsoleA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileA
GetConsoleOutputCP
GetModuleHandleA
CreateDirectoryW
LoadResource
ReleaseMutex
WriteFile
GetProcAddress
CreateProcessW
ResumeThread
FreeResource
SizeofResource
CreateMutexW
EnterCriticalSection
WaitForSingleObject
lstrlenA
LoadLibraryA
OpenMutexW
GetModuleHandleW
CreateProcessA
FindResourceExW
FindResourceW
CreateFileW
CloseHandle
GetLastError
MultiByteToWideChar
RaiseException
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
Sleep
GetExitCodeProcess
LockResource
DeleteFileW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
__C_specific_handler
DeleteCriticalSection
GetStartupInfoW
MoveFileW
SetUnhandledExceptionFilter
RtlPcToFileHeader
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetCPInfo
GetOEMCP
IsValidCodePage
RtlUnwindEx
GetFileAttributesW
ReadFile
RtlVirtualUnwind
RtlLookupFunctionEntry
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/quirk.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/wpnclient/xulrunner-stub.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xulrunner\stub\xulrunner-stub.pdb

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Comodo EasyVPN 2.3.7.6/xulrunner-stub.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xulrunner\stub\xulrunner-stub.pdb

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/cgsetup_en_nKwmL3CyQuXBCvjTVGH2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/compreg.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/compreg.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/sas.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:ed:b0:ba:e5:a5:b8:09:6e:db:c9:e9:ee:e6:a6:b7
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

06/06/2018, 00:00

Not After

05/06/2020, 23:59

Subject

CN=CYBERGHOST S.A.,O=CYBERGHOST S.A.,POSTALCODE=030195,STREET=Str. DIONISIE LUPU 70-72,L=Bucuresti,ST=Bucuresti,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d7:f9:22:43:0a:73:14:62:3c:c8:77:d2:8e:e9:02:d5:77:b1:3b:cb
Signer

Actual PE Digest

d7:f9:22:43:0a:73:14:62:3c:c8:77:d2:8e:e9:02:d5:77:b1:3b:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\CDev\Projects\CyberGhost\CyberGhost 7\WebBootstrapper\obj\Release\WebBootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/skci/xpti.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/CyberGhost VPN 7.2.4294/xpti.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/DNSCrypt-Proxy 2.0.45.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/LICENSE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/LICENSE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-allowed-ips.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-allowed-names.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-blocked-ips.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-blocked-names.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-captive-portals.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-cloaking-rules.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-dnscrypt-proxy.toml
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/example-forwarding-rules.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/localhost.pem
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/service-install.bat
.bat .vbs
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/service-restart.bat
.bat .vbs
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/service-uninstall.bat
.bat .vbs
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/data/sys.exe
.exe windows:6 windows x64 arch:x64

22e48e3d4222e5413a3ad6df382921f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 655KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-allowed-ips.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-allowed-names.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-blocked-ips.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-blocked-names.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-captive-portals.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-cloaking-rules.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-dnscrypt-proxy.toml
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/example-forwarding-rules.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/localhost.pem
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/service-install.bat
.bat .vbs
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/service-restart.bat
.bat .vbs
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/DNSCrypt-Proxy 2.0.45/service-uninstall.bat
.bat .vbs
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/WPFToolkit.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\ipc\app\plugin-container.pdb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/fci.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/html.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/WPFToolkit.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\ipc\app\plugin-container.pdb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/html.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FastCache 1.03/xul/schannel.exe
.exe windows:4 windows x86 arch:x86

56ed6084c5ecd8784553be57502cda76

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

16/11/2006, 01:54

Not After

16/11/2026, 01:54

Subject

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ae:55:a5:f8:0e:e0
Certificate

Issuer

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

21/05/2009, 18:07

Not After

21/05/2010, 16:58

Subject

CN=AnalogX\, LLC,O=AnalogX\, LLC,L=Tempe,ST=AZ,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:67:fd:67:f3:09:51:ad:0d:d9:d8:e7:b8:77:27:86:44:b1:be:54
Signer

Actual PE Digest

30:67:fd:67:f3:09:51:ad:0d:d9:d8:e7:b8:77:27:86:44:b1:be:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA
ShellExecuteExA
SHGetDesktopFolder

kernel32

FindClose
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
MultiByteToWideChar
GetVersionExA
LoadLibraryExA
GetDiskFreeSpaceA
GetExitCodeProcess
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetEndOfFile
DeleteFileA
CreateDirectoryA
GetCommandLineA
QueryPerformanceFrequency
LCMapStringA
GetLocaleInfoA
HeapSize
GetCurrentProcessId
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
FreeEnvironmentStringsA
GetFullPathNameA
RaiseException
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetHandleCount
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetTimeZoneInformation
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetProcessHeap
ReadFile
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetDriveTypeA
SetEnvironmentVariableA
HeapFree
HeapAlloc
CreateFileA
GetFileType
SetFilePointer
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
FlushFileBuffers
ExitProcess
GetModuleHandleA
GetSystemTimeAsFileTime
AllocConsole
GetStdHandle
SetConsoleTitleA
LocalFree
LocalAlloc
CreateEventA
GetLastError
SetEvent
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
WriteFile
Sleep
LoadLibraryA
GetProcAddress
GetCurrentProcess
FreeLibrary
CloseHandle
CreateMutexA
WaitForSingleObject
ReleaseMutex
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
GetEnvironmentStrings

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

PostQuitMessage
LoadIconA
GetSysColorBrush
DestroyIcon
CreateDialogParamA
ShowWindowAsync
DestroyWindow
DialogBoxParamA
SetWindowTextA
EndDialog
GetParent
GetSystemMetrics
GetDesktopWindow
SetWindowPos
GetWindowRect
PeekMessageA
GetMessageA
DispatchMessageA
SetForegroundWindow
EnumWindows
IsWindow
GetClassNameA
GetWindowTextA
ShowWindow
CreateWindowExA
TranslateMessage
GetDlgItemTextA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
UnregisterClassA
LoadCursorA
RegisterClassExA
GetUpdateRect
BeginPaint
EndPaint
GetClientRect
SendMessageA
DefWindowProcA
InvalidateRect
UpdateWindow
GetWindowLongA
SetWindowLongA
MessageBoxA

ole32

CoInitialize
CoUninitialize
OleUninitialize
CoCreateInstance
OleInitialize

gdi32

GdiFlush
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
AddFontResourceA
RemoveFontResourceA
CreateDIBSection

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/DXCore.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xpcom\typelib\xpt\tools\xpt_dump.pdb

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/FreeHideIP-4.2.0.6.Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/ProxySocket.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

V:\Development\Viking.ApplicationFramework\ProxySocket\src\obj\Release\ProxySocket.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/AudioSes.dll
.dll regsvr32 windows:10 windows x86 arch:x86

3914a82d5955b5043566f9cffe3b46f7

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed
Signer

Actual PE Digest

52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

audioses.pdb

Imports

msvcp_win

_Mtx_unlock
_Mtx_lock
_Mtx_init_in_situ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__localtime64_s
_o__purecall
_o__recalloc
_o__register_onexit_function
_o__resetstkoflw
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
memmove
_o__wsplitpath_s
_o__wtof
_o__wtoi
_o_calloc
_o_ceil
_o_floor
_o_free
_o_log2
_o_malloc
_o_realloc
_o_terminate
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wmemcpy_s
wcschr
_except_handler4_common
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__CIsqrt
_o__CIsin
_o__CIpow
_o__CIlog10
_o__cexit
_o__aligned_malloc
_o__aligned_free
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler3
_CxxThrowException
memcmp
memcpy

rpcrt4

NdrDllUnregisterProxy
CStdStubBuffer_Connect
NdrClientCall4
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
IUnknown_QueryInterface_Proxy
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
I_RpcExceptionFilter
RpcSmDestroyClientContext
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
I_RpcMapWin32Status
NdrDllCanUnloadNow
RpcBindingFree
NdrDllGetClassObject
NdrDllRegisterProxy

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient19
ObjectStublessClient7
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
ObjectStublessClient5
ObjectStublessClient20
ObjectStublessClient18
ObjectStublessClient17
ObjectStublessClient3
ObjectStublessClient10
ObjectStublessClient22
ObjectStublessClient15
ObjectStublessClient11
ObjectStublessClient14
ObjectStublessClient12
ObjectStublessClient16
ObjectStublessClient4
ObjectStublessClient21
ObjectStublessClient13

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
BSTR_UserSize
BSTR_UserFree
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
BSTR_UserUnmarshal
VarUI4FromStr
BSTR_UserMarshal
LPSAFEARRAY_UserMarshal

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
FindResourceExW
GetModuleHandleExW
GetModuleHandleW
FreeLibrary
LockResource
LoadLibraryExW
SizeofResource
GetModuleFileNameA
DisableThreadLibraryCalls
LoadResource
GetProcAddress

api-ms-win-core-localization-l1-2-0

GetThreadLocale
FormatMessageW
SetThreadLocale

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceExecuteOnce
Sleep
InitOnceInitialize
InitOnceComplete

api-ms-win-core-synch-l1-1-0

CreateEventExW
DeleteCriticalSection
SetEvent
AcquireSRWLockShared
CreateMutexExW
ReleaseSemaphore
InitializeSRWLock
WaitForSingleObject
InitializeCriticalSection
InitializeCriticalSectionEx
CreateSemaphoreExW
CancelWaitableTimer
ReleaseSRWLockShared
TryEnterCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForMultipleObjectsEx
ReleaseSRWLockExclusive
ResetEvent
OpenSemaphoreW
CreateWaitableTimerExW
EnterCriticalSection
SetWaitableTimer
AcquireSRWLockExclusive
CreateEventW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapSize
HeapReAlloc
HeapAlloc
HeapFree
HeapDestroy
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull

api-ms-win-core-com-l1-1-0

CLSIDFromString
CoUninitialize
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
PropVariantCopy
CoTaskMemAlloc
CoWaitForMultipleHandles
CoTaskMemFree
CoInitializeEx
CoGetApartmentType
PropVariantClear

api-ms-win-core-registry-l1-1-0

RegSetValueExW
RegOpenKeyExW
RegGetValueW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteValueW

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventUnregister
EventActivityIdControl
EventWriteTransfer
EventRegister

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
RegisterTraceGuidsW
TraceEvent
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage
GetTraceLoggerHandle

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateThread
GetCurrentThread
SetThreadPriority

api-ms-win-core-string-l2-1-0

IsCharAlphaW
CharNextW

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateErrorW
SetRestrictedErrorInfo
RoOriginateError

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
CloseThreadpoolWork
CreateThreadpool
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
SubmitThreadpoolWork
TrySubmitThreadpoolCallback
CreateThreadpoolTimer
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolCleanupGroup
CreateThreadpoolWork
CloseThreadpool

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrcmpW

mmdevapi

ord29
ord11
ord30
ord5
ord10

api-ms-win-power-base-l1-1-0

PowerRegisterSuspendResumeNotification
PowerUnregisterSuspendResumeNotification

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
MapViewOfFileEx

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-file-l1-1-0

GetFileSize
CreateFileW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-winrt-robuffer-l1-1-0

RoGetBufferMarshaler

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-memory-l1-1-1

GetProcessWorkingSetSizeEx
VirtualLock
VirtualUnlock
SetProcessWorkingSetSizeEx
PrefetchVirtualMemory

api-ms-win-devices-config-l1-1-1

CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate
IsErrorPropagationEnabled
RoGetMatchingRestrictedErrorInfo

api-ms-win-service-management-l1-1-0

CloseServiceHandle
OpenServiceW
OpenSCManagerW

api-ms-win-service-winsvc-l1-1-0

QueryServiceStatus

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-mm-time-l1-1-0

timeBeginPeriod

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy
IsProcessorFeaturePresent

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-featurestaging-l1-1-0

GetFeatureEnabledState
SubscribeFeatureStateChangeNotification
UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

ntdll

RtlLockMemoryZone
RtlFreeMemoryBlockLookaside
RtlCreateMemoryZone
RtlDestroyMemoryBlockLookaside
RtlExtendMemoryBlockLookaside
EtwRegisterTraceGuidsW
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
RtlQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlEqualWnfChangeStamps
ShipAssert
RtlQueryPackageClaims
RtlCreateMemoryBlockLookaside
RtlDestroyMemoryZone
RtlAllocateMemoryBlockLookaside
RtlAllocateMemoryZone
RtlUnlockMemoryZone
NtQueryInformationThread
NtAlpcConnectPort
RtlInitUnicodeStringEx
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
AlpcInitializeMessageAttribute
AlpcGetMessageAttribute
NtAlpcSendWaitReceivePort
NtSetInformationThread
NtQueryInformationProcess
RtlNtStatusToDosError

api-ms-win-service-private-l1-1-0

SubscribeServiceChangeNotifications
UnsubscribeServiceChangeNotifications

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 969KB - Virtual size: 969KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 512B - Virtual size: 327B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_BSS
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RT_CONST
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RT_DATA
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/LiteDB.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Git\LiteDB\LiteDB\obj\Release\net40\LiteDB.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/config/tcbloader.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free Hide IP 4.2.0.6/html.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/BFE.DLL
.dll windows:10 windows x64 arch:x64

af3ccebee341bc1634b9269a2d4ab01d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

bfe.pdb

Imports

msvcrt

_initterm
__C_specific_handler
wcscspn
_wcslwr
bsearch
_ultoa_s
strpbrk
strstr
sprintf_s
isprint
_ltoa_s
_i64toa_s
_ui64toa_s
wprintf
memmove
memcpy
malloc
memcmp
log
wcstoul
_vsnprintf
_vsnwprintf
_wcsicmp
free
wcstol
qsort
_amsg_exit
iswctype
_XcptFilter
wcschr
_wcsnicmp
_ultow
tolower
wcsnlen
memset

ntdll

NtQueryObject
RtlGetSaclSecurityDescriptor
RtlValidRelativeSecurityDescriptor
RtlNumberOfSetBits
RtlInitializeBitMap
WinSqmIsOptedIn
WinSqmSetDWORD
WinSqmAddToStream
RtlValidSid
RtlLengthSid
NtDeviceIoControlFile
RtlAllocateHeap
RtlInitializeSRWLock
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlGetCurrentServiceSessionId
RtlCreateHashTable
RtlDeleteHashTable
RtlInsertEntryHashTable
RtlRemoveEntryHashTable
RtlLookupEntryHashTable
RtlGetNextEntryHashTable
RtlInitEnumerationHashTable
RtlEnumerateEntryHashTable
RtlEndEnumerationHashTable
RtlContractHashTable
RtlGetOwnerSecurityDescriptor
RtlAdjustPrivilege
RtlAbsoluteToSelfRelativeSD
RtlSetOwnerSecurityDescriptor
RtlSelfRelativeToAbsoluteSD2
RtlCreateServiceSid
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlSubAuthorityCountSid
TpReleaseTimer
TpWaitForTimer
RtlFreeHeap
RtlIpv4AddressToStringA
RtlIpv6AddressToStringA
RtlEthernetAddressToStringA
TpSetTimer
TpIsTimerSet
TpAllocTimer
RtlEqualSid
RtlLengthSecurityDescriptor
RtlApplicationVerifierStop
EtwEventEnabled
EtwEventWriteTransfer
EtwEventWrite
EtwEventActivityIdControl
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
EtwTraceMessage
RtlExpandHashTable
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
RtlSetThreadPreferredUILanguages

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
LoadStringW
DisableThreadLibraryCalls
GetProcAddress

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
CreateThread
TlsGetValue
GetCurrentThread
OpenThreadToken
TlsSetValue
GetCurrentProcess
TerminateProcess
TlsFree
TlsAlloc
GetProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-synch-l1-1-0

CreateEventW
CreateSemaphoreExW
ReleaseSRWLockShared
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ReleaseSemaphore
AcquireSRWLockShared
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
SetEvent
InitializeSRWLock
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockExclusive

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
DeleteTimerQueueTimer
UnregisterWaitEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-security-base-l1-1-0

DestroyPrivateObjectSecurity
GetPrivateObjectSecurity
GetSecurityDescriptorControl
CreatePrivateObjectSecurityEx
GetSecurityDescriptorLength
SetSecurityDescriptorControl
SetPrivateObjectSecurityEx
MapGenericMask
PrivilegeCheck
EqualSid
CopySid
InitializeSecurityDescriptor
AllocateAndInitializeSid
CreateWellKnownSid
FreeSid
InitializeAcl
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorDacl

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapDestroy
HeapFree
GetProcessHeap
HeapSize
HeapCreate
HeapReAlloc

rpcrt4

RpcRaiseException
RpcImpersonateClient
RpcServerInqCallAttributesW
UuidCreate
RpcGetAuthorizationContextForClient
RpcBindingVectorFree
RpcServerUnregisterIfEx
RpcFreeAuthorizationContext
RpcEpUnregister
NdrServerCallAll
NdrServerCall2
RpcServerUseProtseqW
RpcServerRegisterIf3
I_RpcExceptionFilter
MesHandleFree
RpcServerInqBindings
MesEncodeDynBufferHandleCreate
MesDecodeBufferHandleCreate
UuidFromStringW
RpcRevertToSelf
NdrMesTypeEncode3
NdrMesTypeDecode3
I_RpcBindingInqLocalClientPID
RpcEpRegisterW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

authz

AuthzGetInformationFromContext
AuthzAccessCheck
AuthziFreeAuditEventType
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzFreeAuditEvent
AuthziLogAuditEvent
AuthziInitializeAuditEventType
AuthziInitializeAuditParamsFromArray
AuthziInitializeAuditEvent

ws2_32

htonl

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

iphlpapi

GetCurrentThreadCompartmentId

api-ms-win-core-file-l1-1-0

WriteFile
CreateFileW
DeleteFileW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-perfcounters-l1-1-0

PerfCreateInstance
PerfStartProvider
PerfSetULongLongCounterValue
PerfSetULongCounterValue
PerfStopProvider
PerfSetCounterSetInfo

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegEnumValueW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWork

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-eventing-controller-l1-1-0

StartTraceW
EnableTraceEx2
ControlTraceW

api-ms-win-eventing-consumer-l1-1-0

ProcessTrace
OpenTraceW
CloseTrace

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

BfeGetDirectDispatchTable
BfeOnServiceStartTypeChange
BfeServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/all.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/freevpntest.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/DXCore.exe
.exe windows:5 windows x86 arch:x86

20dd26497880c05caed9305b3c8b9109

Code Sign

e7:60:cf:47:e9:b2:8b:2c:e7:df:39:0f:bb:cd:91:e6
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

18/04/2018, 00:00

Not After

16/04/2020, 23:59

Subject

CN=My Privacy Tools\, Inc.,O=My Privacy Tools\, Inc.,POSTALCODE=92122,STREET=STE 113-644+STREET=7770 Regents Rd,L=San Diego,ST=California,C=US,2.5.4.18=#13053932313232

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

15:fd:85:81:70:d2:62:a7:2b:5f:3d:48:62:d6:ba:cd:c2:6c:5b:13:37:de:07:f5:c1:25:c8:00:22:98:d2:74
Signer

Actual PE Digest

15:fd:85:81:70:d2:62:a7:2b:5f:3d:48:62:d6:ba:cd:c2:6c:5b:13:37:de:07:f5:c1:25:c8:00:22:98:d2:74

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/compreg.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/mathml.dtd
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/security-prefs/vertdll.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:02:29:e8:93:3c:c4:14:fa:f5:7c:00:00:00:00:02:29
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2019, 19:21

Not After

27/03/2020, 19:21

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72
Signer

Actual PE Digest

1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vertdll.pdb

Exports

Exports

AcquireSRWLockExclusive
AcquireSRWLockShared
CallEnclave
CloseHandle
CreateEventW
DbgPrint
DelayLoadFailureHook
DeleteCriticalSection
DeleteSynchronizationBarrier
DeviceIoControl
DisableThreadLibraryCalls
EnclaveGetAttestationReport
EnclaveGetEnclaveInformation
EnclaveSealData
EnclaveUnsealData
EnclaveVerifyAttestationReport
EnterCriticalSection
EnterSynchronizationBarrier
EtwEventRegister
EtwEventUnregister
EtwEventWrite
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwTraceMessage
EtwUnregisterTraceGuids
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
ExpInterlockedPopEntrySListEnd
ExpInterlockedPopEntrySListFault
ExpInterlockedPopEntrySListResume
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnabledXStateFeatures
GetFipsModeFromIumKernelState
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
GetProcessHeap
GetProcessHeaps
GetSeedFromIumKernelState
GetSystemDirectoryW
GetSystemInfo
GetXStateFeaturesMask
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InitializeSynchronizationBarrier
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedPushListSList
InterlockedPushListSListEx
KiUserExceptionDispatcher
LdrDisableThreadCalloutsForDll
LdrResolveDelayLoadedAPI
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocateXStateFeature
NtClose
NtDeviceIoControlFile
NtOpenFile
NtOpenKey
NtQueryInformationProcess
NtQueryValueKey
NtTerminateProcess
OpenProcessToken
OutputDebugStringW
PrivilegeCheck
QueryDepthSList
QueryFullProcess
QueryFullProcessImageNameW
RaiseException
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegisterWaitForSingleObjectEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResolveDelayLoadedAPI
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAllocateHeap
RtlAssert
RtlCallEnclaveReturn
RtlCaptureContext
RtlCompareUnicodeString
RtlDeleteCriticalSection
RtlDeleteResource
RtlEnclaveCallDispatch
RtlEnclaveCallDispatchReturn
RtlEnterCriticalSection
RtlFreeHeap
RtlGetCurrentProcessorNumberEx
RtlGetLastNtStatus
RtlImageNtHeader
RtlInitUnicodeString
RtlInitializeCriticalSection
RtlInitializeResource
RtlLeaveCriticalSection
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlPcToFileHeader
RtlRaiseStatus
RtlReleaseResource
RtlReleaseResourceShared
RtlTimeFieldsToTime
RtlUnhandledExceptionFilter
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SleepConditionVariableCS
SleepConditionVariableSRW
TerminateEnclave
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
__C_specific_handler
__chkstk
_local_unwind
_vsnwprintf
_wcsicmp
memcmp
memcpy
memmove
memset
qsort
wcscmp
wcscpy_s
wcsncmp

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Free VPN Test 1.1.0.7/xpcshell.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\js\src\xpconnect\shell\xpcshell.pdb

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/CPFilters.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/LiteDB.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Git\LiteDB\LiteDB\obj\Release\net40\LiteDB.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/forms/npnul32.dll
.dll windows:4 windows x86 arch:x86

0fd9166414b5501757f98738cd675bbc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\modules\plugin\default\windows\npnul32.pdb

Imports

kernel32

GetLocaleInfoA
MultiByteToWideChar
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
WriteFile
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
lstrcmpiA
lstrcatA
lstrcmpA
lstrlenA
LoadLibraryA
lstrcpyA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree

user32

GetDC
SendMessageA
ReleaseDC
MessageBoxA
SetWindowTextA
SetDlgItemTextA
GetDlgItem
EnableWindow
GetWindowRect
SetWindowPos
ScreenToClient
SetForegroundWindow
IsWindow
CreateWindowExA
ShowWindow
RegisterClassA
GetWindowLongA
DefWindowProcA
SetWindowLongA
CreateDialogParamA
BeginPaint
GetClientRect
DrawIcon
GetSysColor
DrawIconEx
EndPaint
DrawTextA
InvalidateRect
UpdateWindow
wsprintfA
DestroyWindow
DestroyIcon
LoadIconA
LoadStringA
UnregisterClassA

gdi32

Polyline
DeleteObject
GetStockObject
SelectObject
GetTextExtentPoint32A
LPtoDP
SetBkMode
SetTextColor
CreatePen

advapi32

RegSetValueExA
RegCreateKeyA
RegQueryValueExA

Exports

Exports

NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/FreeProxy 4.10 Build 1751/user32.dll
.dll windows:10 windows x64 arch:x64

63e7bd072c2cd3402682cfbb77326f78

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:85:ff:73:ab:01:51:a0:d8:c3:07:f3:20:34:57:ba:7a:12:13:4d:e0:f0:fd:42:4a:73:53:63:0c:40:42:f1
Signer

Actual PE Digest

c7:85:ff:73:ab:01:51:a0:d8:c3:07:f3:20:34:57:ba:7a:12:13:4d:e0:f0:fd:42:4a:73:53:63:0c:40:42:f1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

user32.pdb

Imports

win32u

NtUserGetClipboardFormatName
NtUserRegisterWindowMessage
NtUserGetKeyNameText
NtUserMapVirtualKeyEx
NtUserEnumDisplayDevices
NtUserGetClassInfoEx
NtUserChangeDisplaySettings
NtUserRemoveProp
NtUserUnregisterClass
NtUserEnumDisplaySettings
NtUserGetAltTabInfo
NtUserSetClassLong
NtUserGetMessage
NtUserGetKeyboardLayoutName
NtUserDrawCaptionTemp
NtUserSetProp
NtUserVkKeyScanEx
NtUserCallMsgFilter
NtUserCallHwndLockSafe
NtUserSetImeOwnerWindow
NtUserNotifyIMEStatus
NtUserUpdateInputContext
NtUserCountClipboardFormats
NtUserGetPriorityClipboardFormat
NtUserGetClipboardOwner
NtUserGetClipboardSequenceNumber
NtUserGetClipboardViewer
NtUserSetClipboardViewer
NtUserChangeClipboardChain
NtUserAddClipboardFormatListener
NtUserRemoveClipboardFormatListener
NtUserGetUpdatedClipboardFormats
NtUserSetWindowCompositionAttribute
NtUserWOWCleanup
NtUserTranslateAccelerator
NtUserGetClipboardData
NtUserSetClipboardData
NtUserDrawIconEx
NtUserGetUpdateRgn
NtUserGetUpdateRect
NtUserWaitForInputIdle
NtUserMsgWaitForMultipleObjectsEx
NtUserWaitForMsgAndEvent
NtUserSetObjectInformation
NtUserCreateWindowStation
NtUserOpenWindowStation
NtUserCreateDesktopEx
NtUserOpenDesktop
NtUserSwitchDesktop
NtUserYieldTask
NtUserGetMenuIndex
NtUserCallHwndOpt
NtUserUnloadKeyboardLayout
NtUserGetKeyboardLayout
NtUserPostThreadMessage
NtUserGetProcessDpiAwarenessContext
NtUserSetProcessDpiAwarenessContext
NtUserGetDpiForMonitor
NtUserShutdownBlockReasonCreate
NtUserGetCurrentDpiInfoForWindow
NtUserCallHwndSafe
NtUserTransformPoint
NtUserSystemParametersInfoForDpi
NtCreateCompositionInputSink
NtUserCreatePalmRejectionDelayZone
NtUserDestroyPalmRejectionDelayZone
NtUserSystemParametersInfo
NtUserGetProp
NtUserGetHDevName
NtUserGetRawInputDeviceInfo
NtUserUpdatePerUserSystemParameters
NtUserEvent
NtUserGetWOWClass
NtUserConvertMemHandle
NtUserCreateLocalMemHandle
NtUserSetWindowsHookEx
NtUserSetWinEventHook
NtUserNotifyWinEvent
NtUserRegisterUserApiHook
NtUserDrawCaption
NtUserGetAsyncKeyState
NtUserGetKeyState
NtUserOpenClipboard
NtUserPeekMessage
NtUserSetWindowLong
NtUserTranslateMessage
NtUserSetWindowRgn
NtUserSetWindowRgnEx
NtUserInternalGetWindowText
NtUserInternalGetWindowIcon
NtUserSetWindowStationUser
NtUserSetSystemCursor
NtUserFindExistingCursorIcon
NtUserSetCursorIconData
NtUserDefSetText
NtUserToUnicodeEx
NtUserLoadKeyboardLayoutEx
NtUserModifyWindowTouchCapability
NtUserPaintDesktop
NtUserEnableMenuItem
NtUserCallNextHookEx
NtGdiDdDDIEscape
NtUserDisplayConfigGetDeviceInfo
NtUserGetDisplayConfigBufferSizes
NtUserSetDisplayConfig
NtUserQueryDisplayConfig
NtUserDisplayConfigSetDeviceInfo
NtUserFunctionalizeDisplayConfig
NtUserRegisterClassExWOW
NtUserFindWindowEx
NtUserUpdateLayeredWindow
NtUserSBGetParms
NtUserSetScrollInfo
NtUserGetClassName
NtUserTransformRect
NtUserTestForInteractiveUser
NtUserEnableScrollBar
NtMITSetLastInputRecipient
NtMITSetInputDelegationMode
NtMITGetCursorUpdateHandle
NtMITSynthesizeTouchInput
NtUserHwndSetRedirectionInfo
NtUserHwndQueryRedirectionInfo
NtUserSetSysColors
NtUserGetOpenClipboardWindow
NtUserActivateKeyboardLayout
NtUserSetThreadDesktop
NtUserCallTwoParam
NtUserCallNoParam
NtUserCallHwnd
NtUserModifyUserStartupInfoFlags
NtUserMNDragLeave
NtUserMNDragOver
NtUserDrawMenuBarTemp
NtUserThunkedMenuInfo
NtUserCheckMenuItem
NtUserMinMaximize
NtUserSetWindowLongPtr
NtUserCheckAccessForIntegrityLevel
NtUserScrollWindowEx
NtUserCallHwndParamLock
NtUserDeferWindowPosAndBand
NtUserInitializeClientPfnArrays
NtUserProcessConnect
gDispatchTableValues
NtUserDisableProcessWindowFiltering
NtUserSetProcessUIAccessZorder
NtUserGetRawInputBuffer
NtUserScrollDC
NtUserSetSystemTimer
NtUserCloseClipboard
NtUserEmptyClipboard
NtUserIsClipboardFormatAvailable
NtUserShowCaret
NtUserCreateCaret
NtUserHideCaret
NtUserGetControlColor
NtUserSetCursor
NtUserSetThreadState
NtUserQueryWindow
NtUserFillWindow
NtUserDdeInitialize
NtUserUpdateInstance
NtUserConsoleControl
NtUserSetInformationThread
NtUserSetParent
NtUserReleaseDC
NtUserCallHwndParamLockSafe
NtUserPostMessage
NtUserGetTouchInputInfo
NtUserLockCursor
NtUserLinkDpiCursor
NtUserGetRequiredCursorSizes
NtUserGetCursorFrameInfo
NtUserGetIconInfo
NtUserDestroyAcceleratorTable
NtUserReportInertia
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserRegisterEdgy
NtUserRegisterPointerInputTarget
NtUserGetPointerInfoList
NtUserGetCPD
NtUserCallOneParam
NtUserValidateTimerCallback
NtUserDispatchMessage
NtUserAutoPromoteMouseInPointer
NtUserGetDManipHookInitFunction
NtUserCallHwndLock
NtUserSetMenu
NtUserSetMenuFlagRtoL
NtUserThunkedMenuItemInfo
NtUserSetWindowsHookAW
NtUserUnhookWindowsHookEx
NtUserRealWaitMessageEx
NtUserRealInternalGetMessage
NtUserMessageCall
NtUserInjectGesture
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserBuildNameList
NtUserBuildPropList
NtUserBuildHwndList
NtUserGetAtomName
NtUserCallHwndParam
NtUserAlterWindowStyle
NtUserSetWindowFNID
NtUserBitBltSysBmp
NtUserGetOemBitmapSize
NtUserGetIconSize
NtUserGetThreadState
NtUserGetDC
NtUserGetControlBrush
NtUserDestroyCursor
NtUserCreateEmptyCursorObject
NtUserSetImeHotKey
NtUserGetImeHotKey
NtUserWindowFromPoint
NtUserWindowFromPhysicalPoint
NtUserWindowFromDC
NtUserWaitMessage
NtUserWaitForRedirectionStartComplete
NtUserSetClassLongPtr
NtUserWaitAvailableMessageEx
NtUserValidateRect
NtUserUserHandleGrantAccess
NtUserUpdateWindowTrackingInfo
NtUserUpdateWindowInputSinkHints
NtUserUpdateDefaultDesktopThumbnail
NtUserUnregisterUserApiHook
NtUserUnregisterSessionPort
NtUserUnregisterHotKey
NtUserUnlockWindowStation
NtUserUnhookWinEvent
NtUserUndelegateInput
NtUserTrackPopupMenuEx
NtUserTrackMouseEvent
NtUserSoundSentry
NtUserSlicerControl
NtUserDiscardPointerFrameMessages
NtUserSignalRedirectionStartComplete
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserShowWindowAsync
NtUserShowWindow
NtUserShowSystemCursor
NtUserShowScrollBar
NtUserShowCursor
NtUserSetWindowWord
NtUserSetWindowShowState
NtUserSetWindowPos
NtUserSetWindowPlacement
NtUserSetWindowGroup
NtUserSetWindowFeedbackSetting
NtUserSetWindowDisplayAffinity
NtUserSetWindowCompositionTransition
NtUserSetWindowBand
NtUserSetWindowArrangement
NtUserSetThreadInputBlocked
NtUserSetTargetForResourceBrokering
NtUserSetSystemMenu
NtUserSetShellWindowEx
NtSetShellCursorState
NtUserSetProcessWindowStation
NtUserSetProcessRestrictionExemption
NtUserSetProcessMousewheelRoutingMode
NtUserSetProcessInteractionFlags
NtUserSetPrecisionTouchPadConfiguration
NtSetPointerDeviceInputSpace
NtUserSetMirrorRendering
NtUserSetMenuDefaultItem
NtUserSetMenuContextHelpId
NtUserMagSetContextInformation
NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated
NtUserSetLayeredWindowAttributes
NtUserSetKeyboardState
NtUserSetInternalWindowPos
NtUserSetInteractiveCtrlRotationAngle
NtUserSetInteractiveControlFocus
NtUserSetGestureConfig
NtUserSetForegroundWindowForApplication
NtUserSetFocus
NtUserSetFeatureReportResponse
NtUserSetFallbackForeground
NtUserSetDisplayMapping
NtUserSetDisplayAutoRotationPreferences
NtUserSetDialogControlDpiChangeBehavior
NtUserSetDesktopColorTransform
NtUserSetCursorPos
NtSetCursorInputSpace
NtUserSetCursorContents
NtUserSetCoreWindowPartner
NtUserSetCoreWindow
NtUserSetTimer
NtUserSetClassWord
NtUserSetChildWindowNoActivate
NtUserSetCapture
NtUserSetCalibrationData
NtUserSetBrokeredForeground
NtUserSetBridgeWindowChild
NtUserSetAutoRotation
NtUserSetActiveWindow
NtUserSetActiveProcessForMonitor
NtUserSetActivationFilter
NtUserSendInteractiveControlHapticsReport
NtUserSendInput
NtUserSendEventMessage
NtUserRestoreWindowDpiChanges
NtUserResolveDesktopForWOW
NtUserRequestMoveSizeOperation
NtUserRemoveVisualIdentifier
NtUserRemoveMenu
NtUserReleaseDwmHitTestWaiters
NtUserRegisterTouchPadCapable
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTasklist
NtUserRegisterShellPTPListener
NtUserRegisterSessionPort
NtUserRegisterServicesProcess
NtUserRegisterRawInputDevices
NtUserRegisterPointerDeviceNotifications
NtUserRegisterHotKey
NtUserRegisterErrorReportingDialog
NtUserRegisterDManipHook
NtUserRegisterBSDRWindow
NtUserRedrawWindow
NtUserRealChildWindowFromPoint
NtRIMUpdateInputObserverRegistration
NtRIMUnregisterForInput
NtRIMSetTestModeStatus
NtRIMSetExtendedDeviceProperty
NtRIMRemoveInputObserver
NtRIMRegisterForInput
NtRIMReadInput
NtRIMOnTimerNotification
NtRIMOnPnpNotification
NtRIMObserveNextInput
NtRIMGetSourceProcessId
NtRIMGetPhysicalDeviceRect
NtRIMGetDevicePropertiesLockfree
NtRIMGetDeviceProperties
NtRIMGetDevicePreparsedDataLockfree
NtRIMGetDevicePreparsedData
NtRIMFreeInputBuffer
NtRIMEnableMonitorMappingForDevice
NtRIMDeviceIoControl
NtRIMAreSiblingDevices
NtRIMAddInputObserver
NtUserQuerySendMessage
NtUserQueryBSDRWindow
NtUserQueryActivationObject
NtUserPromotePointer
NtUserProcessInkFeedbackCommand
NtUserPrintWindow
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPhysicalToLogicalDpiPointForWindow
NtUserPaintMonitor
NtUserPaintMenuBar
NtUserOpenThreadDesktop
NtUserOpenInputDesktop
NtUserNavigateFocus
NtUserMoveWindow
NtUserMenuItemFromPoint
NtMapVisualRelativePoints
NtUserMapPointsByVisualIdentifier
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserLogicalToPhysicalDpiPointForWindow
NtUserLockWorkStation
NtUserLockWindowUpdate
NtUserLockWindowStation
NtUserLayoutCompleted
NtUserKillTimer
NtUserIsWindowGDIScaledDpiMessageEnabled
NtUserIsWindowBroadcastingDpiToChildren
NtUserIsTouchWindow
NtUserIsTopLevelWindow
NtUserIsResizeLayoutSynchronizationEnabled
NtIsOneCoreTransformMode
NtUserIsNonClientDpiScalingEnabled
NtUserIsMouseInputEnabled
NtUserIsMouseInPointerEnabled
NtUserIsChildWindowDpiMessageEnabled
NtUserInvalidateRgn
NtUserInvalidateRect
NtUserInteractiveControlQueryUsage
NtUserInjectTouchInput
NtUserInjectPointerInput
NtUserInjectMouseInput
NtUserInjectKeyboardInput
NtUserInjectGenericHidInput
NtUserInjectDeviceInput
NtUserInitializeTouchInjection
NtUserInitializePointerDeviceInjectionEx
NtUserInitializePointerDeviceInjection
NtUserInitializeInputDeviceInjection
NtUserInitializeGenericHidInjection
NtUserInheritWindowMonitor
NtUserImpersonateDdeClientWindow
NtUserHungWindowFromGhostWindow
NtUserHiliteMenuItem
NtUserHidePointerContactVisualization
NtUserHandleDelegatedInput
NtUserGhostWindowFromHungWindow
NtUserGetWindowRgnEx
NtUserGetWindowProcessHandle
NtUserGetWindowPlacement
NtUserGetWindowMinimizeRect
NtUserGetWindowGroupId
NtUserGetWindowFeedbackSetting
NtUserGetWindowDisplayAffinity
NtUserGetWindowDC
NtUserGetWindowCompositionInfo
NtUserGetWindowCompositionAttribute
NtUserGetWindowBand
NtUserGetObjectInformation
NtUserGetUniformSpaceMapping
NtUserGetTouchValidationStatus
NtUserGetTopLevelWindow
NtUserGetTitleBarInfo
NtUserGetThreadDesktop
NtUserGetSystemMenu
NtUserGetSystemDpiForProcess
NtUserGetScrollBarInfo
NtUserGetResizeDCompositionSynchronizationObject
NtUserGetRegisteredRawInputDevices
NtUserGetRawPointerDeviceData
NtUserGetRawInputDeviceList
NtUserGetRawInputData
NtUserGetQueueStatusReadonly
NtUserGetProcessWindowStation
NtUserGetProcessUIContextInformation
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPointerType
NtUserGetPointerProprietaryId
NtUserGetPointerInputTransform
NtUserGetPointerFrameTimes
NtUserGetPointerDevices
NtUserGetPointerDeviceRects
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceOrientation
NtUserGetPointerDeviceCursors
NtUserGetPointerDevice
NtUserGetPointerCursorId
NtUserGetPhysicalDeviceRect
NtUserGetOwnerTransformedMonitorRect
NtUserGetMouseMovePointsEx
NtUserGetMenuItemRect
NtUserGetMenuBarInfo
NtUserMagGetContextInformation
NtUserGetListBoxInfo
NtUserGetLayeredWindowAttributes
NtUserGetKeyboardState
NtUserGetKeyboardLayoutList
NtUserGetInternalWindowPos
NtUserGetInteractiveCtrlSupportedWaveforms
NtUserGetInteractiveControlInfo
NtUserGetInteractiveControlDeviceInfo
NtUserGetInputLocaleInfo
NtUserGetInputContainerId
NtUserGetGuiResources
NtUserGetGestureConfig
NtUserGetGUIThreadInfo
NtUserGetForegroundWindow
NtUserGetExtendedPointerDeviceProperty
NtUserGetDoubleClickTime
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayAutoRotationPreferences
NtUserGetDesktopID
NtUserGetDCEx
NtUserGetCursorInfo
NtUserGetCursor
NtUserGetCurrentInputMessageSource
NtUserGetComboBoxInfo
NtUserGetClipboardAccessToken
NtUserGetClipCursor
NtUserGetCaretPos
NtUserGetCaretBlinkTime
NtUserGetCIMSSM
NtUserGetAutoRotationState
NtUserGetAncestor
NtUserGetActiveProcessesDpis
NtUserFrostCrashedWindow
NtUserForceWindowToDpiForTest
NtUserFlashWindowEx
NtUserExcludeUpdateRgn
NtUserEnumDisplayMonitors
NtUserEndPaint
NtUserEndMenu
NtUserEndDeferWindowPosEx
NtUserEnableWindowResizeOptimization
NtUserEnableWindowGroupPolicy
NtUserEnableWindowGDIScaledDpiMessage
NtUserEnableTouchPad
NtUserEnableSoftwareCursorForScreenCapture
NtUserEnableResizeLayoutSynchronization
NtEnableOneCoreTransformMode
NtUserEnableNonClientDpiScaling
NtUserEnableMouseInputForCursorSuppression
NtUserEnableMouseInPointer

ntdll

memcpy
memcmp
wcscmp
toupper
RtlSetLastWin32Error
NlsAnsiCodePage
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
_wtoi
NtPowerInformation
RtlMultiByteToUnicodeSize
LdrFlushAlternateResourceModules
RtlRaiseException
NtYieldExecution
NtDeleteValueKey
NtSetValueKey
NtCreateKey
wcstoul
NtVdmControl
RtlFreeUnicodeString
RtlCreateUnicodeStringFromAsciiz
NtOpenDirectoryObject
NtSetSecurityObject
NtQuerySecurityObject
NtQueryInformationProcess
wcstol
ZwQueryWnfStateData
wcsncmp
wcsnlen
RtlDeleteHashTable
RtlInitStrongEnumerationHashTable
RtlLookupEntryHashTable
RtlStronglyEnumerateEntryHashTable
strnlen
RtlInsertEntryHashTable
RtlInitEnumerationHashTable
RtlRemoveEntryHashTable
strncmp
RtlEndStrongEnumerationHashTable
RtlCreateHashTable
RtlEndEnumerationHashTable
RtlEnumerateEntryHashTable
RtlQueryPackageClaims
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
wcsncpy_s
iswspace
qsort
RtlImageNtHeader
wcsrchr
RtlPcToFileHeader
NtRaiseHardError
NtCallbackReturn
wcsncat_s
RtlRetrieveNtUserPfn
RtlInitializeNtUserPfn
_stricmp
RtlGetIntegerAtom
RtlDeleteCriticalSection
RtlResetNtUserPfn
RtlQueryInformationActiveActivationContext
RtlQueryElevationFlags
NtQuerySystemInformation
RtlInitializeCriticalSection
RtlEqualUnicodeString
LdrQueryImageFileExecutionOptions
isspace
CsrClientConnectToServer
sscanf_s
strrchr
strcpy_s
RtlSizeHeap
RtlGetThreadLangIdByIndex
RtlRunEncodeUnicodeString
RtlRunDecodeUnicodeString
_wcsicmp
RtlReAllocateHeap
RtlNtStatusToDosError
RtlGetActiveConsoleId
CsrFreeCaptureBuffer
CsrClientCallServer
CsrAllocateMessagePointer
CsrAllocateCaptureBuffer
NtOpenProcessToken
NtOpenThreadToken
RtlFreeSid
NtQueryInformationToken
RtlAllocateAndInitializeSid
NtQueryVirtualMemory
_vsnwprintf
RtlUnicodeToMultiByteSize
RtlIsThreadWithinLoaderCallout
RtlReleaseActivationContext
RtlFindActivationContextSectionString
RtlDeactivateActivationContextUnsafeFast
RtlActivateActivationContextUnsafeFast
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeN
RtlEnterCriticalSection
RtlLeaveCriticalSection
__C_specific_handler
wcscat_s
wcscpy_s
NtQueryValueKey
NtEnumerateKey
NtClose
NtOpenKey
RtlOpenCurrentUser
RtlUnicodeStringToInteger
RtlInitUnicodeString
swprintf_s
RtlFreeHeap
RtlAllocateHeap
memset
memmove

api-ms-win-core-localization-l1-2-0

IsDBCSLeadByteEx
GetLocaleInfoW
GetACP
GetOEMCP
GetSystemDefaultLangID
IsDBCSLeadByte
GetCPInfo
IsValidLocale
ConvertDefaultLocale
GetUserDefaultLCID
GetThreadLocale

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyExW
RegGetValueW
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalLock
LocalUnlock
GlobalAlloc
LocalFree
LocalReAlloc
GlobalFree

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleFileNameA
FindResourceExW
FreeLibrary
LoadLibraryExW
EnumResourceNamesExW
GetModuleFileNameW
GetModuleHandleA
SizeofResource
LoadResource
GetModuleHandleExW
GetModuleHandleW
DisableThreadLibraryCalls

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventActivityIdControl
EventWriteTransfer
EventWrite
EventSetInformation
EventProviderEnabled

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThread
ProcessIdToSessionId
GetCurrentProcessId
CreateThread
CreateProcessW
GetExitCodeThread
GetCurrentThreadId
TerminateProcess
ExitThread

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive
EnterCriticalSection
InitializeSRWLock
SetEvent
OpenEventW
AcquireSRWLockShared
LeaveCriticalSection
ReleaseSRWLockExclusive
ReleaseSRWLockShared

api-ms-win-core-string-l1-1-0

CompareStringW
GetStringTypeW
CompareStringOrdinal
MultiByteToWideChar
FoldStringW
WideCharToMultiByte

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetVersionExW
GetTickCount

api-ms-win-security-base-l1-1-0

CheckTokenMembership

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError

api-ms-win-core-string-l2-1-0

CharLowerBuffW
CharPrevW
IsCharLowerW
IsCharAlphaNumericW
IsCharAlphaW
CharLowerW
IsCharUpperW
CharUpperBuffW
CharUpperW
CharNextW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processenvironment-l1-1-0

GetCurrentDirectoryW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
SearchPathW

api-ms-win-core-file-l1-1-0

FindClose
GetLogicalDrives
SetFileTime
GetFileSize
FindFirstFileW
FindNextFileW
ReadFile
CreateFileW

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
MapViewOfFileEx
VirtualQueryEx

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap

api-ms-win-core-memory-l1-1-3

SetProcessValidCallTargets

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileStringW
WritePrivateProfileStringW

api-ms-win-core-atoms-l1-1-0

AddAtomW
GlobalGetAtomNameA
DeleteAtom
GlobalDeleteAtom
AddAtomA
GetAtomNameA
GlobalGetAtomNameW
GlobalAddAtomA
GlobalFindAtomW
GetAtomNameW
GlobalAddAtomW
GlobalFindAtomA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
LocalSize
GlobalHandle
GlobalSize
GlobalUnlock
GlobalFlags
GlobalReAlloc

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrlenA
lstrlenW

api-ms-win-core-localization-obsolete-l1-2-0

GetStringTypeA

api-ms-win-core-stringansi-l1-1-0

CharUpperA
IsCharUpperA
CharLowerA
IsCharLowerA
IsCharAlphaNumericA
CharUpperBuffA
CharLowerBuffA
CharPrevExA
CharPrevA
CharNextA
CharNextExA
IsCharAlphaA

api-ms-win-core-sidebyside-l1-1-0

QueryActCtxSettingsW

api-ms-win-core-kernel32-private-l1-1-0

RegisterWaitForInputIdle

kernelbase

LoadStringBaseExW
WTSGetServiceSessionId

api-ms-win-core-kernel32-legacy-l1-1-0

FindResourceExA
MulDiv

api-ms-win-core-appinit-l1-1-0

LoadAppInitDlls

gdi32

SetStretchBltMode
SetBkMode
SelectObject
IntersectClipRect
SetTextAlign
GetTextAlign
GetStockObject
SetBkColor
SetTextColor
GetObjectW
GetBkColor
GetLayout
GdiGetBitmapBitsSize
GetMapMode
GetHFONT
ExtSelectClipRgn
GetClipRgn
SetGraphicsMode
GetDCOrgEx
GdiTrackHDelete
GdiFixUpHandle
GdiPrinterThunk
GdiLoadType1Fonts
GdiAddFontResourceW
GetRgnBox
ExtCreateRegion
GetRegionData
EnableEUDC
TextOutA
GdiReleaseDC
GdiConvertBitmapV5
GdiConvertToDevmodeW
GetClipBox
MirrorRgn
OffsetRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreateRectRgn
GetBoundsRect
SetLayout
PlayEnhMetaFile
ExcludeClipRect
StretchBlt
Ellipse
CreateEllipticRgn
Rectangle
CreatePen
CreateBrushIndirect
PolyPatBlt
SetViewportOrgEx
GetViewportOrgEx
GetCurrentObject
GetTextCharacterExtra
SetTextCharacterExtra
SetLayoutWidth
GdiConvertAndCheckDC
SetBoundsRect
CreateSolidBrush
GdiProcessSetup
GdiDllInitialize
CopyEnhMetaFileW
CopyMetaFileW
SetPaletteEntries
CreatePalette
GetPaletteEntries
DeleteEnhMetaFile
DeleteMetaFile
GetPixel
GetTextCharsetInfo
QueryFontAssocStatus
ExtTextOutA
GetCharWidthInfo
GetCharWidthA
GetTextExtentPointA
GetTextFaceW
GetCharABCWidthsW
GetCharABCWidthsA
SetBrushOrgEx
GetDCDpiScaleValue
GetTextFaceAliasW
EnumFontsW
CreateFontIndirectW
TranslateCharsetInfo
GdiCreateLocalEnhMetaFile
GdiCreateLocalMetaFilePict
GdiConvertEnhMetaFile
GdiConvertMetaFilePict
GetTextColor
GetTextMetricsW
TextOutW
GetWindowExtEx
GetViewportExtEx
GetBkMode
GdiGetCharDimensions
GetTextCharset
GdiGetCodePage
GetTextExtentPointW
ExtTextOutW
RestoreDC
OffsetWindowOrgEx
SaveDC
GetObjectType
GetDIBits
SetDIBits
GetDIBColorTable
CreateDIBSection
PatBlt
CreateCompatibleBitmap
CreateDIBitmap
CreateDCW
GdiTrackHCreate
DeleteDC
BitBlt
CreateCompatibleDC
DeleteObject
CreateBitmap
GdiValidateHandle
StretchDIBits
GetDeviceCaps

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

ActivateKeyboardLayout
AddClipboardFormatListener
AddVisualIdentifier
AdjustWindowRect
AdjustWindowRectEx
AdjustWindowRectExForDpi
AlignRects
AllowForegroundActivation
AllowSetForegroundWindow
AnimateWindow
AnyPopup
AppendMenuA
AppendMenuW
AreDpiAwarenessContextsEqual
ArrangeIconicWindows
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BlockInput
BringWindowToTop
BroadcastSystemMessage
BroadcastSystemMessageA
BroadcastSystemMessageExA
BroadcastSystemMessageExW
BroadcastSystemMessageW
BuildReasonArray
CalcMenuBar
CalculatePopupWindowPosition
CallMsgFilter
CallMsgFilterA
CallMsgFilterW
CallNextHookEx
CallWindowProcA
CallWindowProcW
CancelShutdown
CascadeChildWindows
CascadeWindows
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuA
ChangeMenuW
ChangeWindowMessageFilter
ChangeWindowMessageFilterEx
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextA
CharNextExA
CharNextW
CharPrevA
CharPrevExA
CharPrevW
CharToOemA
CharToOemBuffA
CharToOemBuffW
CharToOemW
CharUpperA
CharUpperBuffA
CharUpperBuffW
CharUpperW
CheckBannedOneCoreTransformApi
CheckDBCSEnabledExt
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckProcessForClipboardAccess
CheckProcessSession
CheckRadioButton
CheckWindowThreadDesktop
ChildWindowFromPoint
ChildWindowFromPointEx
CliImmSetHotKey
ClientThreadSetup
ClientToScreen
ClipCursor
CloseClipboard
CloseDesktop
CloseGestureInfoHandle
CloseTouchInputHandle
CloseWindow
CloseWindowStation
ConsoleControl
ControlMagnification
CopyAcceleratorTableA
CopyAcceleratorTableW
CopyIcon
CopyImage
CopyRect
CountClipboardFormats
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateCaret
CreateCursor
CreateDCompositionHwndTarget
CreateDesktopA
CreateDesktopExA
CreateDesktopExW
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogIndirectParamAorW
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateIcon
CreateIconFromResource
CreateIconFromResourceEx
CreateIconIndirect
CreateMDIWindowA
CreateMDIWindowW
CreateMenu
CreatePopupMenu
CreateSyntheticPointerDevice
CreateSystemThreads
CreateWindowExA
CreateWindowExW
CreateWindowInBand
CreateWindowInBandEx
CreateWindowIndirect
CreateWindowStationA
CreateWindowStationW
CsrBroadcastSystemMessageExW
CtxInitUser32
DdeAbandonTransaction
DdeAccessData
DdeAddData
DdeClientTransaction
DdeCmpStringHandles
DdeConnect
DdeConnectList
DdeCreateDataHandle
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeDisconnect
DdeDisconnectList
DdeEnableCallback
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeGetQualityOfService
DdeImpersonateClient
DdeInitializeA
DdeInitializeW
DdeKeepStringHandle
DdeNameService
DdePostAdvise
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringA
DdeQueryStringW
DdeReconnect
DdeSetQualityOfService
DdeSetUserHandle
DdeUnaccessData
DdeUninitialize
DefDlgProcA
DefDlgProcW
DefFrameProcA
DefFrameProcW
DefMDIChildProcA
DefMDIChildProcW
DefRawInputProc
DefWindowProcA
DefWindowProcW
DeferWindowPos
DeferWindowPosAndBand
DelegateInput
DeleteMenu
DeregisterShellHookWindow
DestroyAcceleratorTable
DestroyCaret
DestroyCursor
DestroyDCompositionHwndTarget
DestroyIcon
DestroyMenu
DestroyReasons
DestroySyntheticPointerDevice
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamAorW
DialogBoxIndirectParamW
DialogBoxParamA
DialogBoxParamW
DisableProcessWindowsGhosting
DispatchMessageA
DispatchMessageW
DisplayConfigGetDeviceInfo
DisplayConfigSetDeviceInfo
DisplayExitWindowsWarnings
DlgDirListA
DlgDirListComboBoxA
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DlgDirSelectExW
DoSoundConnect
DoSoundDisconnect
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawCaptionTempA
DrawCaptionTempW
DrawEdge
DrawFocusRect
DrawFrame
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawMenuBarTemp
DrawStateA
DrawStateW
DrawTextA
DrawTextExA
DrawTextExW
DrawTextW
DwmGetDxRgn
DwmGetDxSharedSurface
DwmGetRemoteSessionOcclusionEvent
DwmGetRemoteSessionOcclusionState
DwmKernelShutdown
DwmKernelStartup
DwmLockScreenUpdates
DwmValidateWindow
EditWndProc
EmptyClipboard
EnableMenuItem
EnableMouseInPointer
EnableNonClientDpiScaling
EnableOneCoreTransformMode
EnableScrollBar
EnableSessionForMMCSS
EnableWindow
EndDeferWindowPos
EndDeferWindowPosEx
EndDialog
EndMenu
EndPaint
EndTask
EnterReaderModeHelper
EnumChildWindows
EnumClipboardFormats
EnumDesktopWindows
EnumDesktopsA
EnumDesktopsW
EnumDisplayDevicesA
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsA
EnumDisplaySettingsExA
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumPropsA
EnumPropsExA
EnumPropsExW
EnumPropsW
EnumThreadWindows
EnumWindowStationsA
EnumWindowStationsW
EnumWindows
EqualRect
EvaluateProximityToPolygon
EvaluateProximityToRect
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FindWindowA
FindWindowExA
FindWindowExW
FindWindowW
FlashWindow
FlashWindowEx
FrameRect
FreeDDElParam
FrostCrashedWindow
GetActiveWindow
GetAltTabInfo
GetAltTabInfoA
GetAltTabInfoW
GetAncestor
GetAppCompatFlags
GetAppCompatFlags2
GetAsyncKeyState
GetAutoRotationState
GetAwarenessFromDpiAwarenessContext
GetCIMSSM
GetCapture
GetCaretBlinkTime
GetCaretPos
GetClassInfoA
GetClassInfoExA
GetClassInfoExW
GetClassInfoW
GetClassLongA
GetClassLongPtrA
GetClassLongPtrW
GetClassLongW
GetClassNameA
GetClassNameW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardAccessToken
GetClipboardData
GetClipboardFormatNameA
GetClipboardFormatNameW
GetClipboardOwner
GetClipboardSequenceNumber
GetClipboardViewer
GetComboBoxInfo
GetCurrentInputMessageSource
GetCursor
GetCursorFrameInfo
GetCursorInfo
GetCursorPos
GetDC
GetDCEx
GetDesktopID
GetDesktopWindow
GetDialogBaseUnits
GetDialogControlDpiChangeBehavior
GetDialogDpiChangeBehavior
GetDisplayAutoRotationPreferences
GetDisplayConfigBufferSizes
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDlgItemTextW
GetDoubleClickTime
GetDpiAwarenessContextForProcess
GetDpiForMonitorInternal
GetDpiForSystem
GetDpiForWindow
GetDpiFromDpiAwarenessContext
GetExtendedPointerDeviceProperty
GetFocus
GetForegroundWindow
GetGUIThreadInfo
GetGestureConfig
GetGestureExtraArgs
GetGestureInfo
GetGuiResources
GetIconInfo
GetIconInfoExA
GetIconInfoExW
GetInputDesktop
GetInputLocaleInfo
GetInputState
GetInternalWindowPos
GetKBCodePage
GetKeyNameTextA
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardLayoutNameW
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetLastInputInfo
GetLayeredWindowAttributes
GetListBoxInfo
GetMagnificationDesktopColorEffect
GetMagnificationDesktopMagnification
GetMagnificationDesktopSamplingMode
GetMagnificationLensCtxInformation
GetMenu
GetMenuBarInfo
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuInfo
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuItemInfoW
GetMenuItemRect
GetMenuState
GetMenuStringA
GetMenuStringW
GetMessageA
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetMessageW
GetMonitorInfoA
GetMonitorInfoW
GetMouseMovePointsEx
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetParent
GetPhysicalCursorPos
GetPointerCursorId
GetPointerDevice
GetPointerDeviceCursors
GetPointerDeviceOrientation
GetPointerDeviceProperties
GetPointerDeviceRects
GetPointerDevices
GetPointerFrameArrivalTimes
GetPointerFrameInfo
GetPointerFrameInfoHistory
GetPointerFramePenInfo
GetPointerFramePenInfoHistory
GetPointerFrameTimes
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerInfo
GetPointerInfoHistory
GetPointerInputTransform
GetPointerPenInfo
GetPointerPenInfoHistory
GetPointerTouchInfo
GetPointerTouchInfoHistory
GetPointerType
GetPriorityClipboardFormat
GetProcessDefaultLayout
GetProcessDpiAwarenessInternal
GetProcessUIContextInformation
GetProcessWindowStation
GetProgmanWindow
GetPropA
GetPropW
GetQueueStatus
GetRawInputBuffer
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceInfoW
GetRawInputDeviceList
GetRawPointerDeviceData
GetReasonTitleFromReasonCode
GetRegisteredRawInputDevices
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetScrollRange
GetSendMessageReceiver
GetShellChangeNotifyWindow
GetShellWindow
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDpiForProcess
GetSystemMenu
GetSystemMetrics
GetSystemMetricsForDpi
GetTabbedTextExtentA
GetTabbedTextExtentW
GetTaskmanWindow
GetThreadDesktop
GetThreadDpiAwarenessContext
GetThreadDpiHostingBehavior
GetTitleBarInfo
GetTopLevelWindow
GetTopWindow
GetTouchInputInfo
GetUnpredictedMessagePos
GetUpdateRect
GetUpdateRgn
GetUpdatedClipboardFormats
GetUserObjectInformationA
GetUserObjectInformationW
GetUserObjectSecurity
GetWinStationInfo
GetWindow
GetWindowBand
GetWindowCompositionAttribute
GetWindowCompositionInfo
GetWindowContextHelpId
GetWindowDC
GetWindowDisplayAffinity
GetWindowDpiAwarenessContext
GetWindowDpiHostingBehavior
GetWindowFeedbackSetting
GetWindowInfo
GetWindowLongA
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowMinimizeRect
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowModuleFileNameW
GetWindowPlacement
GetWindowProcessHandle
GetWindowRect
GetWindowRgn
GetWindowRgnBox
GetWindowRgnEx
GetWindowTextA

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 900KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/Newtonsoft.Json.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81
Signer

Actual PE Digest

8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/fg790p.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/newdev.dll
.dll windows:10 windows x64 arch:x64

2509f4d5d8765270f617b28d9480441f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

newdev.pdb

Imports

msvcrt

_callnewh
_wcsnicmp
wcsrchr
wcscpy_s
wcsnlen
wcsstr
_wcslwr
_XcptFilter
_resetstkoflw
_vsnprintf
toupper
wcschr
free
_wcsicmp
memmove
memcpy
_amsg_exit
_initterm
iswctype
malloc
swscanf
_vsnwprintf
__C_specific_handler
memset

ntdll

RtlRandomEx
NtQueryInformationFile
NtSetInformationFile
RtlFormatCurrentUserKeyPath
RtlFreeUnicodeString
NtClose
NtOpenKey
NtCreateKey
NtQueryValueKey
NtSetValueKey
NtDeleteValueKey
NtQueryInformationToken
NtOpenThreadToken
RtlGetVersion
RtlNtStatusToDosErrorNoTeb
NtQuerySystemInformation
RtlMultiByteToUnicodeN
RtlMultiByteToUnicodeSize
RtlUnicodeToMultiByteN
RtlUnicodeToMultiByteSize
NtOpenProcessToken
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WinSqmSetDWORD
RtlSetThreadErrorMode
WinSqmAddToStream
NtQueryInformationProcess
RtlNtStatusToDosError
RtlValidSid
DbgPrint
RtlInitUnicodeString

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
SetLastError
GetLastError

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW

api-ms-win-core-file-l1-1-0

SetFileAttributesW
RemoveDirectoryW
DeleteFileW
GetFileAttributesW
FindNextFileW
FindClose
CreateDirectoryW
FindFirstFileW
GetFullPathNameW
CompareFileTime

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW
FreeLibrary
GetModuleHandleExW

api-ms-win-security-base-l1-1-0

CheckTokenMembership
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAceEx
GetLengthSid

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
GetTraceEnableFlags
GetTraceLoggerHandle
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW

api-ms-win-core-synch-l1-1-0

SetEvent
ReleaseMutex
CreateEventW
WaitForSingleObject
WaitForSingleObjectEx
SleepEx
CreateMutexW
ResetEvent

api-ms-win-core-heap-l2-1-0

LocalReAlloc
LocalFree
LocalAlloc

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
CreateThread
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
GetExitCodeThread
OpenProcessToken
GetExitCodeProcess
ProcessIdToSessionId

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-sysinfo-l1-1-0

GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
GetSystemInfo

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
GetCommandLineW

api-ms-win-core-com-l1-1-0

CoInitializeEx
CoUninitialize
CoCreateInstance

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-devices-config-l1-1-1

CM_Get_Device_IDW
CM_Get_DevNode_PropertyW
CM_MapCrToWin32Err
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Locate_DevNodeW
CM_Query_And_Remove_SubTreeW
CM_Set_DevNode_PropertyW
CM_Get_Parent
CM_Get_DevNode_Status

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoGetActivationFactory
RoInitialize

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

kernel32

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetThreadLocale
SetErrorMode
LCMapStringW
GetFileInformationByHandle
CreateHardLinkW
SetFilePointer
GetFileSize
SetEndOfFile
MoveFileExW
CompareStringW
WideCharToMultiByte
GetLocalTime
WriteFile
HeapReAlloc
CreateFileW
DeviceIoControl
FileTimeToLocalFileTime
GetCommandLineA
LoadLibraryExW
FlushFileBuffers
lstrcmpW
GetModuleFileNameA
lstrcmpiW
QueryActCtxW
DeactivateActCtx
FindActCtxSectionStringW
ActivateActCtx
CreateActCtxW
WaitForMultipleObjectsEx

cfgmgr32

CM_Get_First_Log_Conf_Ex
CM_Get_DevNode_Status_Ex
CM_MapCrToSpErr
CM_Install_DriverW
CM_Install_DevNode_ExW
CM_Install_DevNodeW
CM_Locate_DevNode_ExW

setupapi

SetupDiEnumDeviceInfo
SetupGetThreadLogToken
SetupDiCallClassInstaller
SetupSetThreadLogToken
SetupDiDestroyDeviceInfoList
SetupDiBuildDriverInfoList
SetupFindFirstLineW
SetupOpenInfFileW
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupGetLineCountW
SetupCloseInfFile
SetupDiGetDeviceInfoListDetailW
SetupDiSetDevicePropertyW
SetupDiGetClassDescriptionW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiLoadDeviceIcon
SetupDiSetClassInstallParamsW
SetupDiSetSelectedDriverW
SetupGetNonInteractiveMode
SetupDiGetSelectedDriverW
SetupDiSetDeviceInstallParamsW
SetupDiCancelDriverInfoSearch
SetupGetInfPublishedNameW
SetupDiGetDriverInfoDetailW
SetupDiSetDriverInstallParamsW
SetupDiGetDriverInstallParamsW
SetupDiReportDriverNotFoundError
SetupDiGetDeviceInstanceIdW
SetupDiGetActualModelsSectionW
SetupWriteTextLog
SetupFindNextLine
SetupDiCreateDeviceInfoList
SetupCopyOEMInfW
SetupDiOpenDeviceInfoW
SetupDiBuildClassInfoList
SetupDiGetClassInstallParamsW
SetupDiGetWizardPage
SetupDiGetSelectedDevice
SetupDiGetActualSectionToInstallW
SetupDiGetClassImageIndex
SetupFreeSourceListW
SetupDiGetDevicePropertyW
SetupQuerySourceListW
SetupGetFieldCount
pSetupDiEnumSelectedDrivers
pSetupDiGetStrongNameForDriverNode
SetupSetNonInteractiveMode
SetupDiSetSelectedDevice
SetupDiDestroyClassImageList
pSetupDiGetDriverInfoExtensionId
DriverStoreAddDriverPackageW
SetupAddToSourceListW
DriverStoreFindDriverPackageW
DriverStoreDeleteDriverPackageW
pSetupDiInvalidateHelperModules
SetupWriteTextLogError
pSetupStringFromGuid
SetupGetInfDriverStoreLocationW
pSetupDiBuildInfoDataFromStrongName
SetupDiCreateDeviceInfoListExW
SetupDiGetClassImageList
SetupDiDestroyDriverInfoList
SetupDiEnumDriverInfoW

api-ms-win-devices-query-l1-1-0

DevCreateObjectQuery
DevCloseObjectQuery

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

devrtl

DevRtlGetThreadLogToken
DevRtlWriteTextLog

Exports

Exports

CheckDriverSoftwareDependenciesSatisfied
DeviceInternetSettingUiW
DiInstallDevice
DiInstallDriverA
DiInstallDriverW
DiRollbackDriver
DiShowUpdateDevice
DiShowUpdateDriver
DiUninstallDevice
DiUninstallDriverA
DiUninstallDriverW
GetInternetPolicies
InstallNewDevice
InstallSelectedDriver
InstallWindowsUpdateDriver
InstallWindowsUpdateDriverEx
InstallWindowsUpdateDrivers
QueryWindowsUpdateDriverStatus
SetInternetPolicies
UpdateDriverForPlugAndPlayDevicesA
UpdateDriverForPlugAndPlayDevicesW
pDiDoDeviceInstallAsAdmin
pDiDoNullDriverInstall
pDiRunFinishInstallOperations

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/aepic.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xulrunner\stub\xulrunner-stub.pdb

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/prefcalls.js
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Freegate 7.90/sysmain/sxs.exe
.exe windows:5 windows x86 arch:x86

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

34:14:8d:c5:1f:9e:ee:7c:0e:06:12:1e
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

24/09/2019, 13:46

Not After

26/10/2022, 18:41

Subject

CN=Dynamic Internet Technology Inc.,O=Dynamic Internet Technology Inc.,L=Middletown,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e2:1e:10:1f:8b:5c:be:cf:72:28:d3:4f:2c:c0:e0:60:7c:13:a4:ad
Signer

Actual PE Digest

e2:1e:10:1f:8b:5c:be:cf:72:28:d3:4f:2c:c0:e0:60:7c:13:a4:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 2.8MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 552KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 132KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 37KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 153KB - Virtual size: 970KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/Hola-Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/freebl3.chk
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/nssdbm3.exe
.exe windows:4 windows x86 arch:x86

Code Sign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3b:e5:45:18:04:5f:ef:7a:19:54:ac:67:5c:e0:1e:d5
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

13/10/2020, 00:00

Not After

13/10/2022, 23:59

Subject

CN=Hola VPN Ltd,O=Hola VPN Ltd,POSTALCODE=4250713,STREET=3 Hamachshev,L=Netanya,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/08/2013, 20:26

Not After

15/08/2023, 20:36

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:ea:28:70:5b:f4:ec:ed:0c:36:63:09:80:61:43:36
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:e6:3a:c9:92:ef:67:ba
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

09/09/2020, 07:00

Not After

09/09/2025, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d1:e5:3c:3e:8f:70:ab:7e:48:7d:f7:77:75:ae:b2:e6:09:af:50:41
Signer

Actual PE Digest

d1:e5:3c:3e:8f:70:ab:7e:48:7d:f7:77:75:ae:b2:e6:09:af:50:41

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/lib/security-prefs.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/HOLA VPN Proxy Unblocker for Windows/msvcr71.dll
.dll windows:4 windows x86 arch:x86

7acc8c379c768a1ecd81ec502ff5f33e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr71.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
RtlUnwind
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPAGIPBGPAD@Z
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CppXcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_purecall_handler
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/Hide.me-Setup-3.7.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/ctypes.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/tcbloader/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/tcbloader/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/tcbloader/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Hide.me VPN 3.7.2/tcbloader/sysmain.exe
.exe windows:6 windows x86 arch:x86

5a594319a0d69dbc452e748bcf05892e

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d1:14:d3:c6:8e:68:36:63:47:7d:2d:88:db:fc:51
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/08/2020, 00:00

Not After

06/09/2023, 12:00

Subject

SERIALNUMBER=LL09685,CN=eVenture Limited,O=eVenture Limited,L=Labuan,C=MY,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024d59

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d3:62:fa:f7:cb:a1:32:34:a4:ea:b5:1e:5a:92:f6:8e:6c:0e:a8:6b
Signer

Actual PE Digest

d3:62:fa:f7:cb:a1:32:34:a4:ea:b5:1e:5a:92:f6:8e:6c:0e:a8:6b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

comctl32

InitCommonControls

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW

oleaut32

SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate

netapi32

NetWkstaGetInfo
NetApiBufferFree

advapi32

RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenProcessToken
RegOpenKeyExW

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 718KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/Bin/HttpScanner.exe
.exe windows:4 windows x86 arch:x86

69408d7dc904d55ec5538cec16ee3972

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

24
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

24/10/2007, 22:01

Not After

24/10/2017, 22:01

Subject

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:53
Certificate

Issuer

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

26/05/2011, 14:01

Not After

26/05/2013, 14:23

Subject

CN=Sergey Korobov,L=Belgorod,ST=Belgorod Oblast,C=RU,1.2.840.113549.1.9.1=#0c19646576656c6f706572406d796c616e7669657765722e636f6d,2.5.4.13=#13173433343839342d67307173573162764f675733457a5271

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

63:03:50:29:ce:98:88:51:b4:74:35:5b:09:a9:56:0a:53:af:cc:c6
Signer

Actual PE Digest

63:03:50:29:ce:98:88:51:b4:74:35:5b:09:a9:56:0a:53:af:cc:c6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

GetAdaptersInfo
GetIpNetTable
SendARP

ws2_32

shutdown
setsockopt
ntohs
inet_ntoa
inet_addr
htons
htonl
gethostname
gethostbyname
gethostbyaddr
closesocket
WSAStartup
WSASocketA
WSASend
WSARecv
WSAConnect
WSACleanup

wpcap

pcap_close
pcap_findalldevs_ex
pcap_freealldevs
pcap_next_ex
pcap_open
pcap_sendpacket

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegFlushKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CompareStringA
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLCID
GetSystemDefaultLangID
GetThreadLocale
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ResetEvent
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_Write
ord17
_TrackMouseEvent

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

BitBlt
CombineRgn
CopyEnhMetaFileA
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
ExcludeClipRect
ExtTextOutA
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StretchBlt
UnrealizeObject

shell32

ShellExecuteA

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharLowerBuffA
CharNextA
CharNextW
CharToOemA
CharUpperBuffA
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextA
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumChildWindows
EnumThreadWindows
EnumWindows
EqualRect
ExitWindowsEx
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessagePos
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadStringA
LockWindowUpdate
MapVirtualKeyA
MapWindowPoints
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongA
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WindowFromPoint
wsprintfA

ole32

CLSIDFromString
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

oleaut32

GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantCopyInd
VariantInit

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
@@Unit3@Finalize
@@Unit3@Initialize
@@Unitformstart@Finalize
@@Unitformstart@Initialize
_FormOptions
_FormRegister
_FormScanner
_FormStart
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 10.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/Dangerous IP ranges!!!.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/Http Proxy Scanner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Argentina.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Australia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Austria.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Belgium.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Brazil.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Canada.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/China.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Colombia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Costa Rica.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Croatia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Czech Republic.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Denmark.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Egypt.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/European Union.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Finland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/France.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Germany.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Greece.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/India.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Indonesia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Ireland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Israel.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Italy.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Japan.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Korea.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Mexico.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Netherlands.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/New Zealand.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Norway.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Pakistan.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Poland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Portugal.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Romania.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Russia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Saudi Arabia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/South Africa.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Spain.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Sweden.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Switzerland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Taiwan.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Turkey.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Ukraine.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/United Arab Emirates.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/United Kindom.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/United States.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/IP-ranges/Vietnam.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Bin/HttpScanner.exe
.exe windows:4 windows x86 arch:x86

69408d7dc904d55ec5538cec16ee3972

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

24
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

24/10/2007, 22:01

Not After

24/10/2017, 22:01

Subject

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:53
Certificate

Issuer

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

26/05/2011, 14:01

Not After

26/05/2013, 14:23

Subject

CN=Sergey Korobov,L=Belgorod,ST=Belgorod Oblast,C=RU,1.2.840.113549.1.9.1=#0c19646576656c6f706572406d796c616e7669657765722e636f6d,2.5.4.13=#13173433343839342d67307173573162764f675733457a5271

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

63:03:50:29:ce:98:88:51:b4:74:35:5b:09:a9:56:0a:53:af:cc:c6
Signer

Actual PE Digest

63:03:50:29:ce:98:88:51:b4:74:35:5b:09:a9:56:0a:53:af:cc:c6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

GetAdaptersInfo
GetIpNetTable
SendARP

ws2_32

shutdown
setsockopt
ntohs
inet_ntoa
inet_addr
htons
htonl
gethostname
gethostbyname
gethostbyaddr
closesocket
WSAStartup
WSASocketA
WSASend
WSARecv
WSAConnect
WSACleanup

wpcap

pcap_close
pcap_findalldevs_ex
pcap_freealldevs
pcap_next_ex
pcap_open
pcap_sendpacket

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegFlushKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CompareStringA
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLCID
GetSystemDefaultLangID
GetThreadLocale
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ResetEvent
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_Write
ord17
_TrackMouseEvent

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

BitBlt
CombineRgn
CopyEnhMetaFileA
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
ExcludeClipRect
ExtTextOutA
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StretchBlt
UnrealizeObject

shell32

ShellExecuteA

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharLowerBuffA
CharNextA
CharNextW
CharToOemA
CharUpperBuffA
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextA
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumChildWindows
EnumThreadWindows
EnumWindows
EqualRect
ExitWindowsEx
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetCapture
GetClassInfoA
GetClassLongA
GetClassNameA
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessagePos
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadStringA
LockWindowUpdate
MapVirtualKeyA
MapWindowPoints
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongA
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WindowFromPoint
wsprintfA

ole32

CLSIDFromString
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

oleaut32

GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantCopyInd
VariantInit

Exports

Exports

@@Unit1@Finalize
@@Unit1@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
@@Unit3@Finalize
@@Unit3@Initialize
@@Unitformstart@Finalize
@@Unitformstart@Initialize
_FormOptions
_FormRegister
_FormScanner
_FormStart
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 10.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Dangerous IP ranges!!!.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Argentina.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Australia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Austria.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Belgium.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Brazil.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Canada.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/China.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Colombia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Costa Rica.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Croatia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Czech Republic.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Denmark.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Egypt.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/European Union.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Finland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/France.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Germany.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Greece.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/India.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Indonesia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Ireland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Israel.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Italy.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Japan.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Korea.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Mexico.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Netherlands.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/New Zealand.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Norway.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Pakistan.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Poland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Portugal.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Romania.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Russia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Saudi Arabia.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/South Africa.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Spain.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Sweden.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Switzerland.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Taiwan.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Turkey.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Ukraine.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/United Arab Emirates.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/United Kindom.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/United States.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/IP-ranges/Vietnam.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/Readme!!!.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/WinPcap/WinPcap.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:96:13:e7:dd:69:64:b1:52:a4:e8:f7:18:13:e7:6a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

07/05/2008, 00:00

Not After

07/05/2011, 23:59

Subject

CN=CACE Technologies\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=CACE Technologies\, Inc.,L=Davis,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:81:34:65:11:f2:8e:6d:2b:c2:77:ce:2c:9a:9f:35:9f:36:b1:6c
Signer

Actual PE Digest

83:81:34:65:11:f2:8e:6d:2b:c2:77:ce:2c:9a:9f:35:9f:36:b1:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/LiteDB/node.exe
.exe windows:4 windows x86 arch:x86

be6c33ecf1dca90f4b8e62280125e438

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

24
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

24/10/2007, 22:01

Not After

24/10/2017, 22:01

Subject

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:53
Certificate

Issuer

CN=StartCom Class 2 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

26/05/2011, 14:01

Not After

26/05/2013, 14:23

Subject

CN=Sergey Korobov,L=Belgorod,ST=Belgorod Oblast,C=RU,1.2.840.113549.1.9.1=#0c19646576656c6f706572406d796c616e7669657765722e636f6d,2.5.4.13=#13173433343839342d67307173573162764f675733457a5271

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3e:eb:32:89:37:cf:58:43:4f:c5:12:32:30:a9:9c:db:1d:50:53:8d
Signer

Actual PE Digest

3e:eb:32:89:37:cf:58:43:4f:c5:12:32:30:a9:9c:db:1d:50:53:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegFlushKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FindClose
FindFirstFileA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetThreadLocale
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
RaiseException
ReadFile
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpyA
lstrcpynA
lstrlenA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_Write
_TrackMouseEvent
ImageList_Create

gdi32

BitBlt
CopyEnhMetaFileA
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
ExcludeClipRect
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWinMetaFileBits
SetWindowOrgEx
StretchBlt
UnrealizeObject

shell32

ShellExecuteA
ord680

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharLowerBuffA
CharNextA
CharToOemA
CheckMenuItem
ClientToScreen
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextA
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumChildWindows
EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetCapture
GetClassInfoA
GetClassLongA
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessagePos
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyA
MapWindowPoints
MessageBoxA
OemToCharA
OffsetRect
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetClassLongA
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WindowFromPoint
wsprintfA
GetSystemMetrics

oleaut32

SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit

Exports

Exports

@@Unit2@Finalize
@@Unit2@Initialize
_FormLaunch
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 448KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/Readme!!!.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Http Proxy Scanner 1.6/WinPcap/WinPcap.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:96:13:e7:dd:69:64:b1:52:a4:e8:f7:18:13:e7:6a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

07/05/2008, 00:00

Not After

07/05/2011, 23:59

Subject

CN=CACE Technologies\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=CACE Technologies\, Inc.,L=Davis,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:81:34:65:11:f2:8e:6d:2b:c2:77:ce:2c:9a:9f:35:9f:36:b1:6c
Signer

Actual PE Digest

83:81:34:65:11:f2:8e:6d:2b:c2:77:ce:2c:9a:9f:35:9f:36:b1:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/System.Net.Http.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:f8:97:e7:60:fb:03:a3:90:c1:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:90:33:a6:c1:b7:be:3d:30:8b:bb:3f:1a:84:77:39:b0:fc:28:e3:17:3f:87:bb:7f:e1:50:73:14:de:0d:ad
Signer

Actual PE Digest

d2:90:33:a6:c1:b7:be:3d:30:8b:bb:3f:1a:84:77:39:b0:fc:28:e3:17:3f:87:bb:7f:e1:50:73:14:de:0d:ad

Digest Algorithm

sha256

PE Digest Matches

true

de:4c:71:7c:95:f1:fb:7e:dd:68:98:86:fa:0a:cd:7e:c6:04:4e:1e
Signer

Actual PE Digest

de:4c:71:7c:95:f1:fb:7e:dd:68:98:86:fa:0a:cd:7e:c6:04:4e:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\4417\s\bin\obj\Windows_NT.AnyCPU.Release\System.Net.Http\net46\System.Net.Http.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/XPCOMUtils.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/i2pinstall_0.9.49_windows.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/mathml.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/ctypes.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/I2P 0.9.49/urlmon/mathml.exe
.exe windows:4 windows x86 arch:x86

a63d48c3ce8aa43e0eb4aa1523dfe1e0

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29/10/2015, 11:30

Not After

09/06/2027, 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

13:46:a8:9b:f9:da:cf:86:e9:d4:a9:f4:06:58:99:c0
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

10/09/2020, 05:19

Not After

10/09/2021, 05:19

Subject

CN=Open Source Developer\, Zlatin Balevsky,O=Open Source Developer,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

94:6d:03:f5:8e:ea:c0:42:35:e1:76:ad:0c:ca:51:86:9f:46:e3:f6:4f:ca:59:b8:36:fd:38:d3:57:27:57:a4
Signer

Actual PE Digest

94:6d:03:f5:8e:ea:c0:42:35:e1:76:ad:0c:ca:51:86:9f:46:e3:f6:4f:ca:59:b8:36:fd:38:d3:57:27:57:a4

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

KillTimer
SendMessageA
GetDlgItem
SetTimer
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
SetWindowTextW
SetWindowTextA
LoadStringW
LoadStringA
CharUpperW
CharUpperA
DestroyWindow
EndDialog
PostMessageA
ShowWindow
MessageBoxW

oleaut32

VariantClear
SysAllocString

shell32

ShellExecuteExA

comctl32

ord17

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapReAlloc
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
GetCPInfo
WaitForSingleObject
CloseHandle
CreateProcessA
SetCurrentDirectoryA
GetCommandLineW
GetVersionExA
lstrlenA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
GetStdHandle
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/Ipvanish ProxyExtractor V1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/main/debug.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\btf28\documents\visual studio 2010\Projects\ipvanish proxy extractor ultra V1\ipvanish proxy extractor ultra V1\obj\x86\Debug\ipvanish proxy extractor ultra V1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 225B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/sys.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Ipvanish ProxyExtractor V1/user32.dll
.dll windows:10 windows x64 arch:x64

63e7bd072c2cd3402682cfbb77326f78

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c7:85:ff:73:ab:01:51:a0:d8:c3:07:f3:20:34:57:ba:7a:12:13:4d:e0:f0:fd:42:4a:73:53:63:0c:40:42:f1
Signer

Actual PE Digest

c7:85:ff:73:ab:01:51:a0:d8:c3:07:f3:20:34:57:ba:7a:12:13:4d:e0:f0:fd:42:4a:73:53:63:0c:40:42:f1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

user32.pdb

Imports

win32u

NtUserGetClipboardFormatName
NtUserRegisterWindowMessage
NtUserGetKeyNameText
NtUserMapVirtualKeyEx
NtUserEnumDisplayDevices
NtUserGetClassInfoEx
NtUserChangeDisplaySettings
NtUserRemoveProp
NtUserUnregisterClass
NtUserEnumDisplaySettings
NtUserGetAltTabInfo
NtUserSetClassLong
NtUserGetMessage
NtUserGetKeyboardLayoutName
NtUserDrawCaptionTemp
NtUserSetProp
NtUserVkKeyScanEx
NtUserCallMsgFilter
NtUserCallHwndLockSafe
NtUserSetImeOwnerWindow
NtUserNotifyIMEStatus
NtUserUpdateInputContext
NtUserCountClipboardFormats
NtUserGetPriorityClipboardFormat
NtUserGetClipboardOwner
NtUserGetClipboardSequenceNumber
NtUserGetClipboardViewer
NtUserSetClipboardViewer
NtUserChangeClipboardChain
NtUserAddClipboardFormatListener
NtUserRemoveClipboardFormatListener
NtUserGetUpdatedClipboardFormats
NtUserSetWindowCompositionAttribute
NtUserWOWCleanup
NtUserTranslateAccelerator
NtUserGetClipboardData
NtUserSetClipboardData
NtUserDrawIconEx
NtUserGetUpdateRgn
NtUserGetUpdateRect
NtUserWaitForInputIdle
NtUserMsgWaitForMultipleObjectsEx
NtUserWaitForMsgAndEvent
NtUserSetObjectInformation
NtUserCreateWindowStation
NtUserOpenWindowStation
NtUserCreateDesktopEx
NtUserOpenDesktop
NtUserSwitchDesktop
NtUserYieldTask
NtUserGetMenuIndex
NtUserCallHwndOpt
NtUserUnloadKeyboardLayout
NtUserGetKeyboardLayout
NtUserPostThreadMessage
NtUserGetProcessDpiAwarenessContext
NtUserSetProcessDpiAwarenessContext
NtUserGetDpiForMonitor
NtUserShutdownBlockReasonCreate
NtUserGetCurrentDpiInfoForWindow
NtUserCallHwndSafe
NtUserTransformPoint
NtUserSystemParametersInfoForDpi
NtCreateCompositionInputSink
NtUserCreatePalmRejectionDelayZone
NtUserDestroyPalmRejectionDelayZone
NtUserSystemParametersInfo
NtUserGetProp
NtUserGetHDevName
NtUserGetRawInputDeviceInfo
NtUserUpdatePerUserSystemParameters
NtUserEvent
NtUserGetWOWClass
NtUserConvertMemHandle
NtUserCreateLocalMemHandle
NtUserSetWindowsHookEx
NtUserSetWinEventHook
NtUserNotifyWinEvent
NtUserRegisterUserApiHook
NtUserDrawCaption
NtUserGetAsyncKeyState
NtUserGetKeyState
NtUserOpenClipboard
NtUserPeekMessage
NtUserSetWindowLong
NtUserTranslateMessage
NtUserSetWindowRgn
NtUserSetWindowRgnEx
NtUserInternalGetWindowText
NtUserInternalGetWindowIcon
NtUserSetWindowStationUser
NtUserSetSystemCursor
NtUserFindExistingCursorIcon
NtUserSetCursorIconData
NtUserDefSetText
NtUserToUnicodeEx
NtUserLoadKeyboardLayoutEx
NtUserModifyWindowTouchCapability
NtUserPaintDesktop
NtUserEnableMenuItem
NtUserCallNextHookEx
NtGdiDdDDIEscape
NtUserDisplayConfigGetDeviceInfo
NtUserGetDisplayConfigBufferSizes
NtUserSetDisplayConfig
NtUserQueryDisplayConfig
NtUserDisplayConfigSetDeviceInfo
NtUserFunctionalizeDisplayConfig
NtUserRegisterClassExWOW
NtUserFindWindowEx
NtUserUpdateLayeredWindow
NtUserSBGetParms
NtUserSetScrollInfo
NtUserGetClassName
NtUserTransformRect
NtUserTestForInteractiveUser
NtUserEnableScrollBar
NtMITSetLastInputRecipient
NtMITSetInputDelegationMode
NtMITGetCursorUpdateHandle
NtMITSynthesizeTouchInput
NtUserHwndSetRedirectionInfo
NtUserHwndQueryRedirectionInfo
NtUserSetSysColors
NtUserGetOpenClipboardWindow
NtUserActivateKeyboardLayout
NtUserSetThreadDesktop
NtUserCallTwoParam
NtUserCallNoParam
NtUserCallHwnd
NtUserModifyUserStartupInfoFlags
NtUserMNDragLeave
NtUserMNDragOver
NtUserDrawMenuBarTemp
NtUserThunkedMenuInfo
NtUserCheckMenuItem
NtUserMinMaximize
NtUserSetWindowLongPtr
NtUserCheckAccessForIntegrityLevel
NtUserScrollWindowEx
NtUserCallHwndParamLock
NtUserDeferWindowPosAndBand
NtUserInitializeClientPfnArrays
NtUserProcessConnect
gDispatchTableValues
NtUserDisableProcessWindowFiltering
NtUserSetProcessUIAccessZorder
NtUserGetRawInputBuffer
NtUserScrollDC
NtUserSetSystemTimer
NtUserCloseClipboard
NtUserEmptyClipboard
NtUserIsClipboardFormatAvailable
NtUserShowCaret
NtUserCreateCaret
NtUserHideCaret
NtUserGetControlColor
NtUserSetCursor
NtUserSetThreadState
NtUserQueryWindow
NtUserFillWindow
NtUserDdeInitialize
NtUserUpdateInstance
NtUserConsoleControl
NtUserSetInformationThread
NtUserSetParent
NtUserReleaseDC
NtUserCallHwndParamLockSafe
NtUserPostMessage
NtUserGetTouchInputInfo
NtUserLockCursor
NtUserLinkDpiCursor
NtUserGetRequiredCursorSizes
NtUserGetCursorFrameInfo
NtUserGetIconInfo
NtUserDestroyAcceleratorTable
NtUserReportInertia
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserRegisterEdgy
NtUserRegisterPointerInputTarget
NtUserGetPointerInfoList
NtUserGetCPD
NtUserCallOneParam
NtUserValidateTimerCallback
NtUserDispatchMessage
NtUserAutoPromoteMouseInPointer
NtUserGetDManipHookInitFunction
NtUserCallHwndLock
NtUserSetMenu
NtUserSetMenuFlagRtoL
NtUserThunkedMenuItemInfo
NtUserSetWindowsHookAW
NtUserUnhookWindowsHookEx
NtUserRealWaitMessageEx
NtUserRealInternalGetMessage
NtUserMessageCall
NtUserInjectGesture
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserBuildNameList
NtUserBuildPropList
NtUserBuildHwndList
NtUserGetAtomName
NtUserCallHwndParam
NtUserAlterWindowStyle
NtUserSetWindowFNID
NtUserBitBltSysBmp
NtUserGetOemBitmapSize
NtUserGetIconSize
NtUserGetThreadState
NtUserGetDC
NtUserGetControlBrush
NtUserDestroyCursor
NtUserCreateEmptyCursorObject
NtUserSetImeHotKey
NtUserGetImeHotKey
NtUserWindowFromPoint
NtUserWindowFromPhysicalPoint
NtUserWindowFromDC
NtUserWaitMessage
NtUserWaitForRedirectionStartComplete
NtUserSetClassLongPtr
NtUserWaitAvailableMessageEx
NtUserValidateRect
NtUserUserHandleGrantAccess
NtUserUpdateWindowTrackingInfo
NtUserUpdateWindowInputSinkHints
NtUserUpdateDefaultDesktopThumbnail
NtUserUnregisterUserApiHook
NtUserUnregisterSessionPort
NtUserUnregisterHotKey
NtUserUnlockWindowStation
NtUserUnhookWinEvent
NtUserUndelegateInput
NtUserTrackPopupMenuEx
NtUserTrackMouseEvent
NtUserSoundSentry
NtUserSlicerControl
NtUserDiscardPointerFrameMessages
NtUserSignalRedirectionStartComplete
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserShowWindowAsync
NtUserShowWindow
NtUserShowSystemCursor
NtUserShowScrollBar
NtUserShowCursor
NtUserSetWindowWord
NtUserSetWindowShowState
NtUserSetWindowPos
NtUserSetWindowPlacement
NtUserSetWindowGroup
NtUserSetWindowFeedbackSetting
NtUserSetWindowDisplayAffinity
NtUserSetWindowCompositionTransition
NtUserSetWindowBand
NtUserSetWindowArrangement
NtUserSetThreadInputBlocked
NtUserSetTargetForResourceBrokering
NtUserSetSystemMenu
NtUserSetShellWindowEx
NtSetShellCursorState
NtUserSetProcessWindowStation
NtUserSetProcessRestrictionExemption
NtUserSetProcessMousewheelRoutingMode
NtUserSetProcessInteractionFlags
NtUserSetPrecisionTouchPadConfiguration
NtSetPointerDeviceInputSpace
NtUserSetMirrorRendering
NtUserSetMenuDefaultItem
NtUserSetMenuContextHelpId
NtUserMagSetContextInformation
NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated
NtUserSetLayeredWindowAttributes
NtUserSetKeyboardState
NtUserSetInternalWindowPos
NtUserSetInteractiveCtrlRotationAngle
NtUserSetInteractiveControlFocus
NtUserSetGestureConfig
NtUserSetForegroundWindowForApplication
NtUserSetFocus
NtUserSetFeatureReportResponse
NtUserSetFallbackForeground
NtUserSetDisplayMapping
NtUserSetDisplayAutoRotationPreferences
NtUserSetDialogControlDpiChangeBehavior
NtUserSetDesktopColorTransform
NtUserSetCursorPos
NtSetCursorInputSpace
NtUserSetCursorContents
NtUserSetCoreWindowPartner
NtUserSetCoreWindow
NtUserSetTimer
NtUserSetClassWord
NtUserSetChildWindowNoActivate
NtUserSetCapture
NtUserSetCalibrationData
NtUserSetBrokeredForeground
NtUserSetBridgeWindowChild
NtUserSetAutoRotation
NtUserSetActiveWindow
NtUserSetActiveProcessForMonitor
NtUserSetActivationFilter
NtUserSendInteractiveControlHapticsReport
NtUserSendInput
NtUserSendEventMessage
NtUserRestoreWindowDpiChanges
NtUserResolveDesktopForWOW
NtUserRequestMoveSizeOperation
NtUserRemoveVisualIdentifier
NtUserRemoveMenu
NtUserReleaseDwmHitTestWaiters
NtUserRegisterTouchPadCapable
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTasklist
NtUserRegisterShellPTPListener
NtUserRegisterSessionPort
NtUserRegisterServicesProcess
NtUserRegisterRawInputDevices
NtUserRegisterPointerDeviceNotifications
NtUserRegisterHotKey
NtUserRegisterErrorReportingDialog
NtUserRegisterDManipHook
NtUserRegisterBSDRWindow
NtUserRedrawWindow
NtUserRealChildWindowFromPoint
NtRIMUpdateInputObserverRegistration
NtRIMUnregisterForInput
NtRIMSetTestModeStatus
NtRIMSetExtendedDeviceProperty
NtRIMRemoveInputObserver
NtRIMRegisterForInput
NtRIMReadInput
NtRIMOnTimerNotification
NtRIMOnPnpNotification
NtRIMObserveNextInput
NtRIMGetSourceProcessId
NtRIMGetPhysicalDeviceRect
NtRIMGetDevicePropertiesLockfree
NtRIMGetDeviceProperties
NtRIMGetDevicePreparsedDataLockfree
NtRIMGetDevicePreparsedData
NtRIMFreeInputBuffer
NtRIMEnableMonitorMappingForDevice
NtRIMDeviceIoControl
NtRIMAreSiblingDevices
NtRIMAddInputObserver
NtUserQuerySendMessage
NtUserQueryBSDRWindow
NtUserQueryActivationObject
NtUserPromotePointer
NtUserProcessInkFeedbackCommand
NtUserPrintWindow
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPhysicalToLogicalDpiPointForWindow
NtUserPaintMonitor
NtUserPaintMenuBar
NtUserOpenThreadDesktop
NtUserOpenInputDesktop
NtUserNavigateFocus
NtUserMoveWindow
NtUserMenuItemFromPoint
NtMapVisualRelativePoints
NtUserMapPointsByVisualIdentifier
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserLogicalToPhysicalDpiPointForWindow
NtUserLockWorkStation
NtUserLockWindowUpdate
NtUserLockWindowStation
NtUserLayoutCompleted
NtUserKillTimer
NtUserIsWindowGDIScaledDpiMessageEnabled
NtUserIsWindowBroadcastingDpiToChildren
NtUserIsTouchWindow
NtUserIsTopLevelWindow
NtUserIsResizeLayoutSynchronizationEnabled
NtIsOneCoreTransformMode
NtUserIsNonClientDpiScalingEnabled
NtUserIsMouseInputEnabled
NtUserIsMouseInPointerEnabled
NtUserIsChildWindowDpiMessageEnabled
NtUserInvalidateRgn
NtUserInvalidateRect
NtUserInteractiveControlQueryUsage
NtUserInjectTouchInput
NtUserInjectPointerInput
NtUserInjectMouseInput
NtUserInjectKeyboardInput
NtUserInjectGenericHidInput
NtUserInjectDeviceInput
NtUserInitializeTouchInjection
NtUserInitializePointerDeviceInjectionEx
NtUserInitializePointerDeviceInjection
NtUserInitializeInputDeviceInjection
NtUserInitializeGenericHidInjection
NtUserInheritWindowMonitor
NtUserImpersonateDdeClientWindow
NtUserHungWindowFromGhostWindow
NtUserHiliteMenuItem
NtUserHidePointerContactVisualization
NtUserHandleDelegatedInput
NtUserGhostWindowFromHungWindow
NtUserGetWindowRgnEx
NtUserGetWindowProcessHandle
NtUserGetWindowPlacement
NtUserGetWindowMinimizeRect
NtUserGetWindowGroupId
NtUserGetWindowFeedbackSetting
NtUserGetWindowDisplayAffinity
NtUserGetWindowDC
NtUserGetWindowCompositionInfo
NtUserGetWindowCompositionAttribute
NtUserGetWindowBand
NtUserGetObjectInformation
NtUserGetUniformSpaceMapping
NtUserGetTouchValidationStatus
NtUserGetTopLevelWindow
NtUserGetTitleBarInfo
NtUserGetThreadDesktop
NtUserGetSystemMenu
NtUserGetSystemDpiForProcess
NtUserGetScrollBarInfo
NtUserGetResizeDCompositionSynchronizationObject
NtUserGetRegisteredRawInputDevices
NtUserGetRawPointerDeviceData
NtUserGetRawInputDeviceList
NtUserGetRawInputData
NtUserGetQueueStatusReadonly
NtUserGetProcessWindowStation
NtUserGetProcessUIContextInformation
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPointerType
NtUserGetPointerProprietaryId
NtUserGetPointerInputTransform
NtUserGetPointerFrameTimes
NtUserGetPointerDevices
NtUserGetPointerDeviceRects
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceOrientation
NtUserGetPointerDeviceCursors
NtUserGetPointerDevice
NtUserGetPointerCursorId
NtUserGetPhysicalDeviceRect
NtUserGetOwnerTransformedMonitorRect
NtUserGetMouseMovePointsEx
NtUserGetMenuItemRect
NtUserGetMenuBarInfo
NtUserMagGetContextInformation
NtUserGetListBoxInfo
NtUserGetLayeredWindowAttributes
NtUserGetKeyboardState
NtUserGetKeyboardLayoutList
NtUserGetInternalWindowPos
NtUserGetInteractiveCtrlSupportedWaveforms
NtUserGetInteractiveControlInfo
NtUserGetInteractiveControlDeviceInfo
NtUserGetInputLocaleInfo
NtUserGetInputContainerId
NtUserGetGuiResources
NtUserGetGestureConfig
NtUserGetGUIThreadInfo
NtUserGetForegroundWindow
NtUserGetExtendedPointerDeviceProperty
NtUserGetDoubleClickTime
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayAutoRotationPreferences
NtUserGetDesktopID
NtUserGetDCEx
NtUserGetCursorInfo
NtUserGetCursor
NtUserGetCurrentInputMessageSource
NtUserGetComboBoxInfo
NtUserGetClipboardAccessToken
NtUserGetClipCursor
NtUserGetCaretPos
NtUserGetCaretBlinkTime
NtUserGetCIMSSM
NtUserGetAutoRotationState
NtUserGetAncestor
NtUserGetActiveProcessesDpis
NtUserFrostCrashedWindow
NtUserForceWindowToDpiForTest
NtUserFlashWindowEx
NtUserExcludeUpdateRgn
NtUserEnumDisplayMonitors
NtUserEndPaint
NtUserEndMenu
NtUserEndDeferWindowPosEx
NtUserEnableWindowResizeOptimization
NtUserEnableWindowGroupPolicy
NtUserEnableWindowGDIScaledDpiMessage
NtUserEnableTouchPad
NtUserEnableSoftwareCursorForScreenCapture
NtUserEnableResizeLayoutSynchronization
NtEnableOneCoreTransformMode
NtUserEnableNonClientDpiScaling
NtUserEnableMouseInputForCursorSuppression
NtUserEnableMouseInPointer

ntdll

memcpy
memcmp
wcscmp
toupper
RtlSetLastWin32Error
NlsAnsiCodePage
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
_wtoi
NtPowerInformation
RtlMultiByteToUnicodeSize
LdrFlushAlternateResourceModules
RtlRaiseException
NtYieldExecution
NtDeleteValueKey
NtSetValueKey
NtCreateKey
wcstoul
NtVdmControl
RtlFreeUnicodeString
RtlCreateUnicodeStringFromAsciiz
NtOpenDirectoryObject
NtSetSecurityObject
NtQuerySecurityObject
NtQueryInformationProcess
wcstol
ZwQueryWnfStateData
wcsncmp
wcsnlen
RtlDeleteHashTable
RtlInitStrongEnumerationHashTable
RtlLookupEntryHashTable
RtlStronglyEnumerateEntryHashTable
strnlen
RtlInsertEntryHashTable
RtlInitEnumerationHashTable
RtlRemoveEntryHashTable
strncmp
RtlEndStrongEnumerationHashTable
RtlCreateHashTable
RtlEndEnumerationHashTable
RtlEnumerateEntryHashTable
RtlQueryPackageClaims
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
wcsncpy_s
iswspace
qsort
RtlImageNtHeader
wcsrchr
RtlPcToFileHeader
NtRaiseHardError
NtCallbackReturn
wcsncat_s
RtlRetrieveNtUserPfn
RtlInitializeNtUserPfn
_stricmp
RtlGetIntegerAtom
RtlDeleteCriticalSection
RtlResetNtUserPfn
RtlQueryInformationActiveActivationContext
RtlQueryElevationFlags
NtQuerySystemInformation
RtlInitializeCriticalSection
RtlEqualUnicodeString
LdrQueryImageFileExecutionOptions
isspace
CsrClientConnectToServer
sscanf_s
strrchr
strcpy_s
RtlSizeHeap
RtlGetThreadLangIdByIndex
RtlRunEncodeUnicodeString
RtlRunDecodeUnicodeString
_wcsicmp
RtlReAllocateHeap
RtlNtStatusToDosError
RtlGetActiveConsoleId
CsrFreeCaptureBuffer
CsrClientCallServer
CsrAllocateMessagePointer
CsrAllocateCaptureBuffer
NtOpenProcessToken
NtOpenThreadToken
RtlFreeSid
NtQueryInformationToken
RtlAllocateAndInitializeSid
NtQueryVirtualMemory
_vsnwprintf
RtlUnicodeToMultiByteSize
RtlIsThreadWithinLoaderCallout
RtlReleaseActivationContext
RtlFindActivationContextSectionString
RtlDeactivateActivationContextUnsafeFast
RtlActivateActivationContextUnsafeFast
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeN
RtlEnterCriticalSection
RtlLeaveCriticalSection
__C_specific_handler
wcscat_s
wcscpy_s
NtQueryValueKey
NtEnumerateKey
NtClose
NtOpenKey
RtlOpenCurrentUser
RtlUnicodeStringToInteger
RtlInitUnicodeString
swprintf_s
RtlFreeHeap
RtlAllocateHeap
memset
memmove

api-ms-win-core-localization-l1-2-0

IsDBCSLeadByteEx
GetLocaleInfoW
GetACP
GetOEMCP
GetSystemDefaultLangID
IsDBCSLeadByte
GetCPInfo
IsValidLocale
ConvertDefaultLocale
GetUserDefaultLCID
GetThreadLocale

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyExW
RegGetValueW
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalLock
LocalUnlock
GlobalAlloc
LocalFree
LocalReAlloc
GlobalFree

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleFileNameA
FindResourceExW
FreeLibrary
LoadLibraryExW
EnumResourceNamesExW
GetModuleFileNameW
GetModuleHandleA
SizeofResource
LoadResource
GetModuleHandleExW
GetModuleHandleW
DisableThreadLibraryCalls

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventActivityIdControl
EventWriteTransfer
EventWrite
EventSetInformation
EventProviderEnabled

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThread
ProcessIdToSessionId
GetCurrentProcessId
CreateThread
CreateProcessW
GetExitCodeThread
GetCurrentThreadId
TerminateProcess
ExitThread

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive
EnterCriticalSection
InitializeSRWLock
SetEvent
OpenEventW
AcquireSRWLockShared
LeaveCriticalSection
ReleaseSRWLockExclusive
ReleaseSRWLockShared

api-ms-win-core-string-l1-1-0

CompareStringW
GetStringTypeW
CompareStringOrdinal
MultiByteToWideChar
FoldStringW
WideCharToMultiByte

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GetVersionExW
GetTickCount

api-ms-win-security-base-l1-1-0

CheckTokenMembership

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError

api-ms-win-core-string-l2-1-0

CharLowerBuffW
CharPrevW
IsCharLowerW
IsCharAlphaNumericW
IsCharAlphaW
CharLowerW
IsCharUpperW
CharUpperBuffW
CharUpperW
CharNextW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processenvironment-l1-1-0

GetCurrentDirectoryW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
SearchPathW

api-ms-win-core-file-l1-1-0

FindClose
GetLogicalDrives
SetFileTime
GetFileSize
FindFirstFileW
FindNextFileW
ReadFile
CreateFileW

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
MapViewOfFileEx
VirtualQueryEx

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap

api-ms-win-core-memory-l1-1-3

SetProcessValidCallTargets

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileStringW
WritePrivateProfileStringW

api-ms-win-core-atoms-l1-1-0

AddAtomW
GlobalGetAtomNameA
DeleteAtom
GlobalDeleteAtom
AddAtomA
GetAtomNameA
GlobalGetAtomNameW
GlobalAddAtomA
GlobalFindAtomW
GetAtomNameW
GlobalAddAtomW
GlobalFindAtomA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
LocalSize
GlobalHandle
GlobalSize
GlobalUnlock
GlobalFlags
GlobalReAlloc

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrlenA
lstrlenW

api-ms-win-core-localization-obsolete-l1-2-0

GetStringTypeA

api-ms-win-core-stringansi-l1-1-0

CharUpperA
IsCharUpperA
CharLowerA
IsCharLowerA
IsCharAlphaNumericA
CharUpperBuffA
CharLowerBuffA
CharPrevExA
CharPrevA
CharNextA
CharNextExA
IsCharAlphaA

api-ms-win-core-sidebyside-l1-1-0

QueryActCtxSettingsW

api-ms-win-core-kernel32-private-l1-1-0

RegisterWaitForInputIdle

kernelbase

LoadStringBaseExW
WTSGetServiceSessionId

api-ms-win-core-kernel32-legacy-l1-1-0

FindResourceExA
MulDiv

api-ms-win-core-appinit-l1-1-0

LoadAppInitDlls

gdi32

SetStretchBltMode
SetBkMode
SelectObject
IntersectClipRect
SetTextAlign
GetTextAlign
GetStockObject
SetBkColor
SetTextColor
GetObjectW
GetBkColor
GetLayout
GdiGetBitmapBitsSize
GetMapMode
GetHFONT
ExtSelectClipRgn
GetClipRgn
SetGraphicsMode
GetDCOrgEx
GdiTrackHDelete
GdiFixUpHandle
GdiPrinterThunk
GdiLoadType1Fonts
GdiAddFontResourceW
GetRgnBox
ExtCreateRegion
GetRegionData
EnableEUDC
TextOutA
GdiReleaseDC
GdiConvertBitmapV5
GdiConvertToDevmodeW
GetClipBox
MirrorRgn
OffsetRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreateRectRgn
GetBoundsRect
SetLayout
PlayEnhMetaFile
ExcludeClipRect
StretchBlt
Ellipse
CreateEllipticRgn
Rectangle
CreatePen
CreateBrushIndirect
PolyPatBlt
SetViewportOrgEx
GetViewportOrgEx
GetCurrentObject
GetTextCharacterExtra
SetTextCharacterExtra
SetLayoutWidth
GdiConvertAndCheckDC
SetBoundsRect
CreateSolidBrush
GdiProcessSetup
GdiDllInitialize
CopyEnhMetaFileW
CopyMetaFileW
SetPaletteEntries
CreatePalette
GetPaletteEntries
DeleteEnhMetaFile
DeleteMetaFile
GetPixel
GetTextCharsetInfo
QueryFontAssocStatus
ExtTextOutA
GetCharWidthInfo
GetCharWidthA
GetTextExtentPointA
GetTextFaceW
GetCharABCWidthsW
GetCharABCWidthsA
SetBrushOrgEx
GetDCDpiScaleValue
GetTextFaceAliasW
EnumFontsW
CreateFontIndirectW
TranslateCharsetInfo
GdiCreateLocalEnhMetaFile
GdiCreateLocalMetaFilePict
GdiConvertEnhMetaFile
GdiConvertMetaFilePict
GetTextColor
GetTextMetricsW
TextOutW
GetWindowExtEx
GetViewportExtEx
GetBkMode
GdiGetCharDimensions
GetTextCharset
GdiGetCodePage
GetTextExtentPointW
ExtTextOutW
RestoreDC
OffsetWindowOrgEx
SaveDC
GetObjectType
GetDIBits
SetDIBits
GetDIBColorTable
CreateDIBSection
PatBlt
CreateCompatibleBitmap
CreateDIBitmap
CreateDCW
GdiTrackHCreate
DeleteDC
BitBlt
CreateCompatibleDC
DeleteObject
CreateBitmap
GdiValidateHandle
StretchDIBits
GetDeviceCaps

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

ActivateKeyboardLayout
AddClipboardFormatListener
AddVisualIdentifier
AdjustWindowRect
AdjustWindowRectEx
AdjustWindowRectExForDpi
AlignRects
AllowForegroundActivation
AllowSetForegroundWindow
AnimateWindow
AnyPopup
AppendMenuA
AppendMenuW
AreDpiAwarenessContextsEqual
ArrangeIconicWindows
AttachThreadInput
BeginDeferWindowPos
BeginPaint
BlockInput
BringWindowToTop
BroadcastSystemMessage
BroadcastSystemMessageA
BroadcastSystemMessageExA
BroadcastSystemMessageExW
BroadcastSystemMessageW
BuildReasonArray
CalcMenuBar
CalculatePopupWindowPosition
CallMsgFilter
CallMsgFilterA
CallMsgFilterW
CallNextHookEx
CallWindowProcA
CallWindowProcW
CancelShutdown
CascadeChildWindows
CascadeWindows
ChangeClipboardChain
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuA
ChangeMenuW
ChangeWindowMessageFilter
ChangeWindowMessageFilterEx
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextA
CharNextExA
CharNextW
CharPrevA
CharPrevExA
CharPrevW
CharToOemA
CharToOemBuffA
CharToOemBuffW
CharToOemW
CharUpperA
CharUpperBuffA
CharUpperBuffW
CharUpperW
CheckBannedOneCoreTransformApi
CheckDBCSEnabledExt
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
CheckProcessForClipboardAccess
CheckProcessSession
CheckRadioButton
CheckWindowThreadDesktop
ChildWindowFromPoint
ChildWindowFromPointEx
CliImmSetHotKey
ClientThreadSetup
ClientToScreen
ClipCursor
CloseClipboard
CloseDesktop
CloseGestureInfoHandle
CloseTouchInputHandle
CloseWindow
CloseWindowStation
ConsoleControl
ControlMagnification
CopyAcceleratorTableA
CopyAcceleratorTableW
CopyIcon
CopyImage
CopyRect
CountClipboardFormats
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateCaret
CreateCursor
CreateDCompositionHwndTarget
CreateDesktopA
CreateDesktopExA
CreateDesktopExW
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogIndirectParamAorW
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateIcon
CreateIconFromResource
CreateIconFromResourceEx
CreateIconIndirect
CreateMDIWindowA
CreateMDIWindowW
CreateMenu
CreatePopupMenu
CreateSyntheticPointerDevice
CreateSystemThreads
CreateWindowExA
CreateWindowExW
CreateWindowInBand
CreateWindowInBandEx
CreateWindowIndirect
CreateWindowStationA
CreateWindowStationW
CsrBroadcastSystemMessageExW
CtxInitUser32
DdeAbandonTransaction
DdeAccessData
DdeAddData
DdeClientTransaction
DdeCmpStringHandles
DdeConnect
DdeConnectList
DdeCreateDataHandle
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeDisconnect
DdeDisconnectList
DdeEnableCallback
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeGetQualityOfService
DdeImpersonateClient
DdeInitializeA
DdeInitializeW
DdeKeepStringHandle
DdeNameService
DdePostAdvise
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringA
DdeQueryStringW
DdeReconnect
DdeSetQualityOfService
DdeSetUserHandle
DdeUnaccessData
DdeUninitialize
DefDlgProcA
DefDlgProcW
DefFrameProcA
DefFrameProcW
DefMDIChildProcA
DefMDIChildProcW
DefRawInputProc
DefWindowProcA
DefWindowProcW
DeferWindowPos
DeferWindowPosAndBand
DelegateInput
DeleteMenu
DeregisterShellHookWindow
DestroyAcceleratorTable
DestroyCaret
DestroyCursor
DestroyDCompositionHwndTarget
DestroyIcon
DestroyMenu
DestroyReasons
DestroySyntheticPointerDevice
DestroyWindow
DialogBoxIndirectParamA
DialogBoxIndirectParamAorW
DialogBoxIndirectParamW
DialogBoxParamA
DialogBoxParamW
DisableProcessWindowsGhosting
DispatchMessageA
DispatchMessageW
DisplayConfigGetDeviceInfo
DisplayConfigSetDeviceInfo
DisplayExitWindowsWarnings
DlgDirListA
DlgDirListComboBoxA
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExA
DlgDirSelectExW
DoSoundConnect
DoSoundDisconnect
DragDetect
DragObject
DrawAnimatedRects
DrawCaption
DrawCaptionTempA
DrawCaptionTempW
DrawEdge
DrawFocusRect
DrawFrame
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawMenuBarTemp
DrawStateA
DrawStateW
DrawTextA
DrawTextExA
DrawTextExW
DrawTextW
DwmGetDxRgn
DwmGetDxSharedSurface
DwmGetRemoteSessionOcclusionEvent
DwmGetRemoteSessionOcclusionState
DwmKernelShutdown
DwmKernelStartup
DwmLockScreenUpdates
DwmValidateWindow
EditWndProc
EmptyClipboard
EnableMenuItem
EnableMouseInPointer
EnableNonClientDpiScaling
EnableOneCoreTransformMode
EnableScrollBar
EnableSessionForMMCSS
EnableWindow
EndDeferWindowPos
EndDeferWindowPosEx
EndDialog
EndMenu
EndPaint
EndTask
EnterReaderModeHelper
EnumChildWindows
EnumClipboardFormats
EnumDesktopWindows
EnumDesktopsA
EnumDesktopsW
EnumDisplayDevicesA
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsA
EnumDisplaySettingsExA
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumPropsA
EnumPropsExA
EnumPropsExW
EnumPropsW
EnumThreadWindows
EnumWindowStationsA
EnumWindowStationsW
EnumWindows
EqualRect
EvaluateProximityToPolygon
EvaluateProximityToRect
ExcludeUpdateRgn
ExitWindowsEx
FillRect
FindWindowA
FindWindowExA
FindWindowExW
FindWindowW
FlashWindow
FlashWindowEx
FrameRect
FreeDDElParam
FrostCrashedWindow
GetActiveWindow
GetAltTabInfo
GetAltTabInfoA
GetAltTabInfoW
GetAncestor
GetAppCompatFlags
GetAppCompatFlags2
GetAsyncKeyState
GetAutoRotationState
GetAwarenessFromDpiAwarenessContext
GetCIMSSM
GetCapture
GetCaretBlinkTime
GetCaretPos
GetClassInfoA
GetClassInfoExA
GetClassInfoExW
GetClassInfoW
GetClassLongA
GetClassLongPtrA
GetClassLongPtrW
GetClassLongW
GetClassNameA
GetClassNameW
GetClassWord
GetClientRect
GetClipCursor
GetClipboardAccessToken
GetClipboardData
GetClipboardFormatNameA
GetClipboardFormatNameW
GetClipboardOwner
GetClipboardSequenceNumber
GetClipboardViewer
GetComboBoxInfo
GetCurrentInputMessageSource
GetCursor
GetCursorFrameInfo
GetCursorInfo
GetCursorPos
GetDC
GetDCEx
GetDesktopID
GetDesktopWindow
GetDialogBaseUnits
GetDialogControlDpiChangeBehavior
GetDialogDpiChangeBehavior
GetDisplayAutoRotationPreferences
GetDisplayConfigBufferSizes
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDlgItemTextW
GetDoubleClickTime
GetDpiAwarenessContextForProcess
GetDpiForMonitorInternal
GetDpiForSystem
GetDpiForWindow
GetDpiFromDpiAwarenessContext
GetExtendedPointerDeviceProperty
GetFocus
GetForegroundWindow
GetGUIThreadInfo
GetGestureConfig
GetGestureExtraArgs
GetGestureInfo
GetGuiResources
GetIconInfo
GetIconInfoExA
GetIconInfoExW
GetInputDesktop
GetInputLocaleInfo
GetInputState
GetInternalWindowPos
GetKBCodePage
GetKeyNameTextA
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardLayoutNameW
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetLastInputInfo
GetLayeredWindowAttributes
GetListBoxInfo
GetMagnificationDesktopColorEffect
GetMagnificationDesktopMagnification
GetMagnificationDesktopSamplingMode
GetMagnificationLensCtxInformation
GetMenu
GetMenuBarInfo
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuInfo
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuItemInfoW
GetMenuItemRect
GetMenuState
GetMenuStringA
GetMenuStringW
GetMessageA
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetMessageW
GetMonitorInfoA
GetMonitorInfoW
GetMouseMovePointsEx
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetParent
GetPhysicalCursorPos
GetPointerCursorId
GetPointerDevice
GetPointerDeviceCursors
GetPointerDeviceOrientation
GetPointerDeviceProperties
GetPointerDeviceRects
GetPointerDevices
GetPointerFrameArrivalTimes
GetPointerFrameInfo
GetPointerFrameInfoHistory
GetPointerFramePenInfo
GetPointerFramePenInfoHistory
GetPointerFrameTimes
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerInfo
GetPointerInfoHistory
GetPointerInputTransform
GetPointerPenInfo
GetPointerPenInfoHistory
GetPointerTouchInfo
GetPointerTouchInfoHistory
GetPointerType
GetPriorityClipboardFormat
GetProcessDefaultLayout
GetProcessDpiAwarenessInternal
GetProcessUIContextInformation
GetProcessWindowStation
GetProgmanWindow
GetPropA
GetPropW
GetQueueStatus
GetRawInputBuffer
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceInfoW
GetRawInputDeviceList
GetRawPointerDeviceData
GetReasonTitleFromReasonCode
GetRegisteredRawInputDevices
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetScrollRange
GetSendMessageReceiver
GetShellChangeNotifyWindow
GetShellWindow
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDpiForProcess
GetSystemMenu
GetSystemMetrics
GetSystemMetricsForDpi
GetTabbedTextExtentA
GetTabbedTextExtentW
GetTaskmanWindow
GetThreadDesktop
GetThreadDpiAwarenessContext
GetThreadDpiHostingBehavior
GetTitleBarInfo
GetTopLevelWindow
GetTopWindow
GetTouchInputInfo
GetUnpredictedMessagePos
GetUpdateRect
GetUpdateRgn
GetUpdatedClipboardFormats
GetUserObjectInformationA
GetUserObjectInformationW
GetUserObjectSecurity
GetWinStationInfo
GetWindow
GetWindowBand
GetWindowCompositionAttribute
GetWindowCompositionInfo
GetWindowContextHelpId
GetWindowDC
GetWindowDisplayAffinity
GetWindowDpiAwarenessContext
GetWindowDpiHostingBehavior
GetWindowFeedbackSetting
GetWindowInfo
GetWindowLongA
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowMinimizeRect
GetWindowModuleFileName
GetWindowModuleFileNameA
GetWindowModuleFileNameW
GetWindowPlacement
GetWindowProcessHandle
GetWindowRect
GetWindowRgn
GetWindowRgnBox
GetWindowRgnEx
GetWindowTextA

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 900KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/KoiVMHelper.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/NordVPNSetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/KoiVMHelper.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/nssckbi.exe
.exe windows:6 windows x86 arch:x86

5a594319a0d69dbc452e748bcf05892e

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:29:15:27:00:00:00:00:00:2a
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:55

Not After

15/04/2021, 20:05

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:0f:70:49:63:4b:d8:fd:7f:77:a5:80
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

14/05/2019, 12:05

Not After

13/06/2021, 12:05

Subject

SERIALNUMBER=155628861,CN=TEFINCOM S.A.,O=TEFINCOM S.A.,STREET=50th Street\, Global Plaza Tower\, 19th Floor\, Suite H,L=Panama,ST=Panama,C=PA,1.2.840.113549.1.9.1=#0c1161646d696e406e6f726476706e2e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025041,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b1:44:3e:e1:dd:11:26:e1:cf:8f:e8:a8:18:3d:c8:71:0d:5c:b3:a5:6f:e8:b3:f0:ce:1f:ba:01:45:87:8e:bf
Signer

Actual PE Digest

b1:44:3e:e1:dd:11:26:e1:cf:8f:e8:a8:18:3d:c8:71:0d:5c:b3:a5:6f:e8:b3:f0:ce:1f:ba:01:45:87:8e:bf

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

comctl32

InitCommonControls

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW

oleaut32

SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate

netapi32

NetWkstaGetInfo
NetApiBufferFree

advapi32

RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenProcessToken
RegOpenKeyExW

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 718KB - Virtual size: 717KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/svg/xpidl.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xpcom\typelib\xpidl\xpidl.pdb

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/NordVPN 6.34.5.0/xpidl.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xpcom\typelib\xpidl\xpidl.pdb

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/OnionFruit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/compreg/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/compreg/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/compreg/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/compreg/vertdll.exe
.exe windows:6 windows x86 arch:x86

e6f4169f2a5c3a8f93171d9f593bd22a

Code Sign

0b:b6:4a:ae:9e:b6:92:69
Certificate

Issuer

CN=DragonFruit Network CA

Not Before

01/01/2021, 00:00

Not After

31/12/2023, 23:59

Subject

CN=DragonFruit Network,O=DragonFruit Network,C=GB,1.2.840.113549.1.9.1=#0c19696e626f7840647261676f6e66727569742e6e6574776f726b

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageKeyEncipherment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ea:10:9d:1a:45:7f:66:67:08:48:69:0c:c0:f1:a0:2c:d8:f1:74:6c
Signer

Actual PE Digest

ea:10:9d:1a:45:7f:66:67:08:48:69:0c:c0:f1:a0:2c:d8:f1:74:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ani\code\squirrel\squirrel.windows\build\Release\Win32\Setup.pdb

Imports

kernel32

LoadResource
FindResourceW
lstrlenW
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
GetTempPathW
GetLastError
GetTempFileNameW
MoveFileW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
DeleteFileW
GetModuleFileNameW
GetCurrentProcess
LoadLibraryW
FreeLibrary
InitializeCriticalSectionEx
GetFileAttributesW
CreateFileW
SetFilePointer
ReadFile
VerSetConditionMask
GetCurrentDirectoryW
MultiByteToWideChar
LocalFileTimeToFileTime
WideCharToMultiByte
CreateDirectoryW
WriteFile
SetFileTime
FreeResource
SizeofResource
LockResource
CreateProcessW
GetSystemDirectoryW
SetDefaultDllDirectories
GetCurrentThreadId
DecodePointer
RaiseException
LeaveCriticalSection
EnterCriticalSection
lstrcmpiW
LoadLibraryExW
GetConsoleMode
GetConsoleCP
SystemTimeToFileTime
VerifyVersionInfoW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetStdHandle
HeapFree
HeapAlloc
GetFileType
CompareStringW
LCMapStringW
HeapSize
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteConsoleW

shlwapi

PathIsUNCW

comctl32

InitCommonControlsEx

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16.1MB - Virtual size: 16.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OnionFruit Connect 2021.306.0/manifest.xml
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/CPFilters.dll
.dll regsvr32 windows:10 windows x64 arch:x64

7afea2ed1708d746b6cb468206853322

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

CPFilters.pdb

Imports

msvcrt

_wtol
tolower
_CxxThrowException
wcschr
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
__CxxFrameHandler3
_onexit
_wcsnicmp
realloc
_XcptFilter
??1type_info@@UEAA@XZ
memcpy
memset
memcmp
_wcsicmp
memmove
sscanf_s
wcsncmp
isupper
wcsstr
swscanf
_beginthreadex
_endthread
swprintf_s
iswxdigit
swscanf_s
srand
wcsncpy_s
strnlen
strcat_s
wcstoul
wcscat_s
strncpy_s
wcsnlen
_time32
time
rand
??0exception@@QEAA@XZ
_vsnwprintf_s
_callnewh
malloc
free
__C_specific_handler
_vsnwprintf
memmove_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
_purecall
memcpy_s
wcspbrk
wcscmp

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlGetPersistedStateLocation
RtlCaptureContext

advapi32

RegDeleteKeyW
CryptAcquireContextA
TraceMessage
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
CryptGenRandom
RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW

crypt32

CertGetCertificateChain
CertFreeCertificateChain
CertGetNameStringW
CertVerifyCertificateChainPolicy

kernel32

DebugBreak
LocalAlloc
GlobalAlloc
GlobalFree
GetVersion
GetEnvironmentStringsW
GlobalMemoryStatusEx
GetProcessHeap
HeapAlloc
FreeEnvironmentStringsW
DeviceIoControl
GetDiskFreeSpaceW
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringA
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
QueryPerformanceCounter
GetSystemTime
GetGeoInfoA
IsDebuggerPresent
RaiseException
WriteFile
ReadFile
lstrlenW
SetFilePointer
GlobalLock
GetFileSize
GlobalUnlock
CompareStringW
lstrlenA
FreeEnvironmentStringsA
TerminateProcess
ExpandEnvironmentStringsW
WaitForMultipleObjects
WaitForSingleObject
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DecodeSystemPointer
Sleep
OutputDebugStringW
EncodeSystemPointer
DeleteCriticalSection
GetCurrentProcessId
VirtualProtect
GetCurrentProcess
GetModuleFileNameW
ResumeThread
GetLastError
RaiseFailFastException
GetCurrentThread
CloseHandle
GetModuleHandleW
LoadLibraryExW
DisableThreadLibraryCalls
GetVersionExW
GetModuleFileNameA
MultiByteToWideChar
lstrcmpW
CreateEventW
ResetEvent
GetCurrentThreadId
SetEvent
CreateThread
GetTickCount
SetThreadPriority
lstrcmpiW
CompareFileTime
GetSystemTimeAsFileTime
WideCharToMultiByte
GetLocalTime
SystemTimeToFileTime
GetSystemFirmwareTable
LocalFree
GetTickCount64
GetModuleHandleExW
CreateFileW

ole32

CoFileTimeNow
PropVariantClear
CLSIDFromString
PropVariantCopy
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
CoInitializeEx
StringFromGUID2
CoCreateInstance
CoCreateGuid
CoTaskMemFree

oleaut32

SafeArrayGetUBound
SafeArrayDestroy
VariantCopy
VariantChangeType
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayAccessData
SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
VariantClear
VariantInit
SafeArrayCreate
SysStringByteLen

slc

SLGetWindowsInformationDWORD

winmm

timeGetTime

wintrust

CryptCATCatalogInfoFromContext
WinVerifyTrust
WTHelperProvDataFromStateData

mfplat

MFCreateCollection

ws2_32

htonl

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
UpdatePlayready

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/OpenVPN-2.5.1-I601-amd64.msi
.msi
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/CoreShell.msi
.msi
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/schannel.dll
.dll windows:10 windows x64 arch:x64

166370ad4a8a46f66866e94f4d503b7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

schannel.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-string-l1-1-0

memset
wcscmp
strcmp
wcsnlen
wcsncmp
memmove_s

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__stricmp
_o__wcsicmp
memmove
_o__wcsnicmp
_o__wsplitpath_s
_o_free
_o_malloc
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o__execute_onexit_table
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vsnwprintf_s
_o___std_type_info_destroy_list
wcschr
__C_specific_handler
memcmp
memcpy
__CxxFrameHandler3
__std_terminate
wcsrchr
wcsstr

crypt32

I_CertProcessSslHandshake
CertSerializeCertificateStoreElement
CertSaveStore
CertOpenStore
CertCloseStore
CertAddSerializedElementToStore
CertCreateCertificateChainEngine
CertFreeCertificateContext
CertGetServerOcspResponseContext
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertFindCertificateInStore
CryptEncodeObject
CertFindCTLInStore
CertFreeCTLContext
CertNameToStrW
CertCloseServerOcspResponse
CertCreateCertificateContext
CertNameToStrA
CertGetPublicKeyLength
CertDuplicateCertificateContext
CertSetCertificateContextProperty
CertOpenServerOcspResponse
CertGetIntendedKeyUsage
CryptDecodeObjectEx
CertGetNameStringW
CryptImportPublicKeyInfoEx2
CryptImportPublicKeyInfoEx
CertGetCertificateChain
CertFreeCertificateChain
CertCompareCertificateName
CertFindExtension
CertFindChainInStore
CertDuplicateStore
CertControlStore
CryptObjectLocatorGetUpdated
CryptObjectLocatorIsChanged
CryptObjectLocatorRelease
CryptObjectLocatorInitialize
I_CertFinishSslHandshake
CertFreeServerOcspResponseContext
I_CertWnfEnableFlushCache
CryptObjectLocatorGetContent
CryptObjectLocatorGet
CryptObjectLocatorFree
CryptHashCertificate2
CertFreeCertificateChainEngine
CertGetEnhancedKeyUsage
CryptMemFree
CertVerifyCertificateChainPolicy
CertGetCertificateContextProperty
CertAddEncodedCertificateToStore
CryptDecodeObject
CryptFindOIDInfo

api-ms-win-core-heap-l2-1-0

LocalReAlloc
LocalAlloc
LocalFree

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
GetLastError

api-ms-win-security-base-l1-1-0

RevertToSelf
EqualSid
CreateWellKnownSid
GetTokenInformation
AllocateLocallyUniqueId
GetLengthSid

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegSetValueExW
RegCloseKey
RegNotifyChangeKeyValue
RegFlushKey
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
LoadLibraryExW
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleW
GetModuleFileNameW

api-ms-win-core-localization-l1-2-0

FormatMessageW

sspicli

LsaLogonUser
LsaFreeReturnBuffer
LsaRegisterLogonProcess
LsaLookupAuthenticationPackage
LsaDeregisterLogonProcess
GetUserNameExW
LsaConnectUntrusted
LsaCallAuthenticationPackage

api-ms-win-core-memory-l1-1-0

VirtualProtect
MapViewOfFileEx
VirtualFree
VirtualAlloc
VirtualQuery
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-wow64-l1-1-1

GetSystemWow64DirectoryW

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
AcquireSRWLockExclusive
LeaveCriticalSection
ReleaseSRWLockExclusive
InitializeCriticalSection
TryAcquireSRWLockExclusive
CreateEventW
InitializeSRWLock
WaitForSingleObjectEx
CreateEventA
ResetEvent
InitializeCriticalSectionAndSpinCount
SetEvent
DeleteCriticalSection

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCompareMemory
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
OpenThreadToken
TerminateProcess
GetCurrentProcess
SetThreadStackGuarantee
GetCurrentThread
GetCurrentThreadId

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
OpenProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetTickCount64
GetSystemTimeAsFileTime
GetComputerNameExW
GetTickCount
GetWindowsDirectoryW
GetVersionExW

api-ms-win-core-interlocked-l1-1-0

InterlockedPopEntrySList
InterlockedFlushSList
InitializeSListHead
InterlockedPushEntrySList

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-processenvironment-l1-1-0

SetCurrentDirectoryW
GetCurrentDirectoryW
ExpandEnvironmentStringsW

api-ms-win-core-file-l1-1-0

CreateDirectoryW
CompareFileTime

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
UnregisterWaitEx
ChangeTimerQueueTimer
CreateTimerQueueTimer

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

ntdll

RtlDeleteResource
RtlLeaveCriticalSection
RtlEnterCriticalSection
RtlDeleteCriticalSection
RtlInitializeCriticalSection
EtwUnregisterTraceGuids
RtlIpv4StringToAddressExW
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
RtlImageNtHeader
WinSqmSetDWORD
RtlRegisterWait
RtlDeregisterWait
NtSetInformationThread
NtEnumerateKey
RtlEqualUnicodeString
RtlGetNtProductType
RtlCopySid
RtlLengthSid
RtlAppendUnicodeToString
RtlSubAuthoritySid
RtlInitializeSid
RtlInitString
RtlAcquireResourceExclusive
EtwEventUnregister
EtwEventWrite
EtwEventRegister
RtlReleaseResource
RtlAcquireResourceShared
RtlNtStatusToDosErrorNoTeb
NtClose
NtDuplicateObject
RtlNtStatusToDosError
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
EtwEventWriteTransfer
EtwTraceMessage
NtOpenKey
RtlAllocateHeap
NtWaitForSingleObject
RtlDuplicateUnicodeString
NtSetEvent
NtCreateEvent
NtOpenEvent
NtQuerySystemInformation
NtQuerySystemTime
NtQueryValueKey
RtlInitializeResource
NtAllocateVirtualMemory
RtlFreeHeap
RtlCompareUnicodeString
RtlConvertSharedToExclusive
RtlInitAnsiString
RtlIpv6StringToAddressExW
RtlFreeUnicodeString
NtFreeVirtualMemory

api-ms-win-crt-time-l1-1-0

_time32

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-eventing-controller-l1-1-0

ControlTraceW
StartTraceW
EnableTraceEx2

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

AcceptSecurityContext
AcquireCredentialsHandleA
AcquireCredentialsHandleW
ApplyControlToken
CompleteAuthToken
DeleteSecurityContext
EnumerateSecurityPackagesA
EnumerateSecurityPackagesW
FreeContextBuffer
FreeCredentialsHandle
ImpersonateSecurityContext
InitSecurityInterfaceA
InitSecurityInterfaceW
InitializeSecurityContextA
InitializeSecurityContextW
MakeSignature
QueryContextAttributesA
QueryContextAttributesW
QuerySecurityPackageInfoA
QuerySecurityPackageInfoW
RevertSecurityContext
SealMessage
SpLsaModeInitialize
SpUserModeInitialize
SslCrackCertificate
SslEmptyCacheA
SslEmptyCacheW
SslFreeCertificate
SslFreeCustomBuffer
SslGenerateRandomBits
SslGetExtensions
SslGetMaximumKeySize
SslGetServerIdentity
SslLoadCertificate
UnsealMessage
VerifySignature

Sections

.text
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/OpenVPN 2.5.1/nssdbm3/xul.dll
.dll windows:4 windows x86 arch:x86

24d18f3cf817a36133c75567e8fb5202

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\toolkit\library\xul.pdb

Imports

sqlite3

sqlite3_column_double
sqlite3_enable_shared_cache
sqlite3_initialize
sqlite3_config
sqlite3_libversion_number
sqlite3_column_name16
sqlite3_sql
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_double
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_null
sqlite3_result_blob
sqlite3_last_insert_rowid
sqlite3_errcode
sqlite3_errmsg
sqlite3_exec
sqlite3_user_data
sqlite3_finalize
sqlite3_step
sqlite3_prepare_v2
sqlite3_close
sqlite3_open
sqlite3_bind_blob
sqlite3_bind_null
sqlite3_bind_text16
sqlite3_bind_text
sqlite3_bind_double
sqlite3_bind_int64
sqlite3_bind_int
sqlite3_db_handle
sqlite3_bind_parameter_count
sqlite3_column_count
sqlite3_reset
sqlite3_clear_bindings
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_column_blob
sqlite3_column_text16
sqlite3_column_bytes16
sqlite3_column_text
sqlite3_column_bytes
sqlite3_shutdown
sqlite3_column_int64
sqlite3_column_int
sqlite3_column_type
sqlite3_column_decltype
sqlite3_column_name
sqlite3_result_error_nomem
sqlite3_create_collation
sqlite3_value_blob
sqlite3_value_bytes16
sqlite3_value_text16
sqlite3_value_bytes
sqlite3_value_text
sqlite3_value_double
sqlite3_value_int64
sqlite3_value_int
sqlite3_value_type
sqlite3_result_error
sqlite3_create_function
sqlite3_progress_handler

js3250

JS_PropertyStub
JS_RemoveRootRT
JS_smprintf_free
JS_smprintf
JS_AddNamedRootRT
JS_GetRuntime
JS_SaveExceptionState
JS_SetErrorReporter
JS_RestoreExceptionState
JS_IsSystemObject
JS_GetGlobalForObject
JS_GetPropertyById
JS_ResolveStub
JS_GetContextPrivate
JS_GetOptions
JS_SetPrivate
JS_NewObject
JS_SetContextThread
JS_ResumeRequest
JS_SuspendRequest
JS_LookupPropertyById
JS_ValueToId
JS_DefinePropertyById
js_GetterOnlyPropertyStub
JS_ClearPendingException
JS_ValueToString
JS_NewStringCopyN
JS_ReportError
JS_vsmprintf
JS_XDRDestroy
JS_XDRMemGetData
JS_XDRScript
JS_XDRMemSetData
JS_XDRNewMem
JS_DropPrincipals
JS_DestroyScript
JS_RemoveRoot
JS_AddNamedRoot
JS_ExecuteScript
JS_GetPendingException
JS_CompileScriptForPrincipals
JS_SetOptions
JS_DefineProperty
JS_DefineFunctions
JS_SetThreadStackLimit
JS_SetVersion
JS_ValueToObject
JS_CallFunctionValue
JS_EnumerateStub
JS_GetProperty
JS_SetProperty
JS_SetPendingException
JS_EvaluateScriptForPrincipals
JS_GetScriptFilename
JS_NewStringCopyZ
JS_GetFrameScript
JS_FrameIterator
JS_GetClass
JS_ConvertArguments
JS_GetReservedSlot
JS_SetReservedSlot
JS_DefineUCFunction
JS_GetFunctionArity
JS_GetFunctionObject
JS_ValueToFunction
JS_EnumerateStandardClasses
JS_GetOperationCallback
JS_ValueToECMAUint32
JS_SetOperationCallback
JS_SetContextPrivate
JS_ValueToECMAInt32
JS_CallFunctionName
JS_NewFunction
JS_GetScopeChain
JS_GetFunctionName
JS_IdToValue
JS_ErrorFromException
JS_GetGlobalObject
JS_IsExceptionPending
JS_StringToVersion
JS_ToggleOptions
JS_ContextIterator
JS_TriggerOperationCallback
?js_NextActiveContext@@YAPAUJSContext@@PAUJSRuntime@@PAU1@@Z
JS_SetScriptStackQuota
JS_InternString
JS_SetGCParameterForThread
JS_ShutDown
JS_Finish
JS_DHashTableFinish
JS_DHashTableInit
JS_DHashGetStubOps
JS_SetExtraGCRoots
JS_SetGCCallbackRT
JS_SetContextCallback
JS_SetGCParameter
JS_Init
JS_ConvertStub
JS_SetPrototype
JS_NewSystemObject
JS_SetParent
JS_TypeOfValue
JS_SetGlobalObject
JS_InitStandardClasses
js_GetGCThingTraceKind
JS_IsAboutToBeFinalized
JS_snprintf
JS_GetParent
js_ScriptClass
js_FunctionClass
JS_GetFunctionId
JS_SetGCCallback
js_DateIsValid
js_DateGetMsecSinceEpoch
JS_EvaluateScript
JS_MaybeGC
JS_HashTableEnumerateEntries
JS_HashString
JS_CompareStrings
JS_GetConstructor
JS_EvaluateUCInStackFrame
JS_IsDebuggerFrame
JS_GetFrameScopeChain
JS_SetInterrupt
JS_ClearInterrupt
JS_SetTrap
JS_ClearScriptTraps
JS_ClearTrap
JS_Now
JS_HashTableDestroy
JS_GetScriptBaseLineNumber
JS_HashTableLookup
JS_CompareValues
JS_NewHashTable
JS_HashTableAdd
JS_HashTableRemove
JS_SetNewScriptHookProc
JS_SetDestroyScriptHookProc
JS_SetThrowHook
JS_SetDebugErrorHook
JS_SetExecuteHook
JS_SetCallHook
JS_SetObjectHook
JS_DecompileFunction
JS_GetVersion
js_GetLocalNameArray
JS_ArenaRelease
JS_GetScriptVersion
JS_DecompileFunctionBody
JS_DecompileScript
JS_CompileUCScript
JS_GetScriptLineExtent
JS_NewContext
JS_IsGCMarkingTracer
JS_GetStringBytes
JS_FlagScriptFilenamePrefix
JS_ClearNewbornRoots
JS_DestroyContextNoGC
JS_DestroyContext
JS_ClearScope
JS_ResolveStandardClass
JS_LineNumberToPC
JS_PushArguments
JS_PopArguments
JS_InstanceOf
JS_DefineConstDoubles
JS_AddRoot
JS_MarkGCThing
JS_GetInstancePrivate
JS_ReportErrorNumber
JS_LookupUCProperty
JS_GetObjectId
JS_LookupPropertyWithFlags
JS_DeleteProperty
JS_SetContextSecurityCallbacks
JS_ClearContextDebugHooks
JS_ClearWatchPointsForObject
JS_ClearRegExpStatics
JS_DefineProperties
JS_RestoreFrameChain
JS_SaveFrameChain
JS_TraceChildren
JS_CommenceRuntimeShutDown
@JS_DHashTableOperate@12
JS_DHashTableEnumerate
JS_GetContextThread
JS_EndRequest
JS_NewNumberValue
JS_NewArrayObject
?js_ReportOverRecursed@@YAXPAUJSContext@@@Z
JS_MakeStringImmutable
JS_GetStringChars
JS_GetStringLength
JS_GetArrayLength
JS_GetElement
JS_IsArrayObject
JS_BeginRequest
JS_CallTracer
JS_GC
JS_EvaluateUCScriptForPrincipals
JS_CompileUCFunctionForPrincipals
JS_CompileUCScriptForPrincipals
JS_NewScriptObject
JS_SetLocaleCallbacks
JS_realloc
JS_UnlockGCThingRT
JS_LockGCThingRT
JS_GetGCParameter
JS_CompileUCFunction
JS_CallFunction
JS_AlreadyHasOwnUCProperty
JS_HasProperty
js_CheckUndeclaredVarAssignment
JS_SetUCProperty
JS_HasElement
JS_ConvertValue
JS_HasUCProperty
JS_DefineElement
JS_NextProperty
JS_NewPropertyIterator
JS_LookupProperty
JS_ValueToInt32
js_CoerceArrayToCanvasImageData
js_NewArrayObjectWithCapacity
JS_GetFrameCalleeObject
JS_ValueToSource
JS_TryJSON
JS_Stringify
JS_BeginJSONParse
JS_ConsumeJSONText
JS_FinishJSONParse
JS_GetRuntimeSecurityCallbacks
JS_XDRMemResetData
JS_SetFrameAnnotation
JS_GetFrameFunctionObject
js_CallClass
JS_SetRuntimeSecurityCallbacks
JS_HoldPrincipals
JS_GetPrototype
JS_DefineObject
JS_GetUCPropertyAttributes
JS_GetUCProperty
?js_obj_defineGetter@@YAHPAUJSContext@@IPAH@Z
?js_obj_defineSetter@@YAHPAUJSContext@@IPAH@Z
JS_GetPropertyAttrsGetterAndSetterById
JS_GetPrivate
JS_GetMethod
JS_GetPropertyAttrsGetterAndSetter
JS_ReportPendingException
?js_DeepBail@@YAXPAUJSContext@@@Z
JS_DefineUCProperty
JS_DeleteUCProperty2
JS_DeleteElement2
JS_ThrowStopIteration
JS_malloc
JS_free
JS_NewUCString
JS_AddArgumentFormatter
JS_SetCallReturnValue2
JS_InternUCStringN
js_AllocStack
js_Invoke
js_FreeStack
JS_DHashVoidPtrKeyStub
JS_DHashMatchEntryStub
JS_DHashAllocTable
JS_DHashFreeTable
JS_DHashMoveEntryStub
JS_DHashClearEntryStub
JS_DHashFinalizeStub
JS_DHashTableDestroy
JS_NewDHashTable
JS_CloneFunctionObject
js_CallFunctionValueWithFakeFrame
js_SetPropertyByIdWithFakeFrame
js_GetPropertyByIdWithFakeFrame
JS_ConstructObjectWithArguments
js_RestoreRegExpStatics
js_SaveAndClearRegExpStatics
?js_SetTraceableNativeFailed@@YAXPAUJSContext@@@Z
JS_ComputeThis
JS_SetDebuggerHandler
JS_EvaluateInStackFrame
JS_GetPropertyDescArray
JS_GetFrameCallObject
JS_GetFrameThis
JS_PutPropertyDescArray
JS_FinalizeStub
JS_HasPropertyById
JS_Enumerate
JS_DestroyIdArray
JS_DefineFunction
JS_CheckAccess
JS_IsNativeFrame
JS_GetFramePC
JS_PCToLineNumber
JS_GetFrameFunction
JS_GetNaNValue
JS_NewString
js_ObjectOps
JS_IsRunning
JS_GetPropertyDescriptorById
JS_InitClass
JS_SealObject
JS_SetPropertyAttributes
JS_IsConstructorFrame
JS_NewObjectWithGivenProto
JS_LockGCThing
JS_UnlockGCThing
JS_HasInstance
JS_GetFunctionNative
JS_LookupPropertyWithFlagsById
JS_GetSecurityCallbacks
JS_DeletePropertyById
JS_GetFrameAnnotation
JS_SetElement
JS_NewDoubleValue
JS_NewUCStringCopyZ
JS_NewExternalString
JS_GetPropertyAttributes
JS_GetScriptedCaller
JS_ObjectIsFunction
JS_GetFunctionScript
JS_GetScriptFilenameFlags
JS_GetScriptPrincipals
JS_ValueToNumber
JS_ValueToBoolean
JS_NewUCStringCopyN
JS_RemoveExternalStringFinalizer
JS_AddExternalStringFinalizer
JS_ReportOutOfMemory
JS_SetPropertyById
JS_sprintf_append

smime3

SECMIME_DecryptionAllowed
SEC_PKCS7DestroyContentInfo
SEC_PKCS7VerifyDetachedSignature
SEC_PKCS7DecodeItem
SEC_PKCS12SetPreferredCipher
SEC_PKCS12EnableCipher
NSS_CMSMessage_Destroy
NSS_CMSSignedData_Destroy
CERT_DecodeCertFromPackage
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSMessage_GetContentInfo
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_AddCertList
NSS_CMSSignedData_CreateCertsOnly
NSS_CMSMessage_Create
CERT_DecodeCertPackage
CERT_ConvertAndDecodeCertificate
SEC_PKCS7Encode
SEC_PKCS7AddSigningTime
SEC_PKCS7IncludeCertChain
SEC_PKCS7CreateSignedData
NSS_CMSEncoder_Update
NSS_CMSContentInfo_SetContent_EnvelopedData
SEC_PKCS7CopyContentInfo
SEC_PKCS12CreateExportContext
SEC_PKCS12AddPasswordIntegrity
SEC_PKCS12CreateUnencryptedSafe
SEC_PKCS12IsEncryptionAllowed
SEC_PKCS12CreatePasswordPrivSafe
SEC_PKCS12AddCertAndKey
SEC_PKCS12Encode
SEC_PKCS12DestroyExportContext
SEC_PKCS12DecoderStart
SEC_PKCS12DecoderVerify
SEC_PKCS12DecoderValidateBags
SEC_PKCS12DecoderImportBags
SEC_PKCS12DecoderFinish
SEC_PKCS12DecoderUpdate
NSS_CMSSignedData_Create
NSS_CMSSignedData_GetContentInfo
NSS_CMSSignerInfo_Create
NSS_CMSSignerInfo_IncludeCerts
NSS_CMSSignerInfo_AddSigningTime
NSS_CMSSignerInfo_AddSMIMECaps
NSS_CMSSignerInfo_AddSMIMEEncKeyPrefs
NSS_CMSSignerInfo_AddMSSMIMEEncKeyPrefs
NSS_CMSSignedData_AddSignerInfo
NSS_SMIMEUtil_FindBulkAlgForRecipients
NSS_CMSEncoder_Cancel
NSS_CMSDecoder_Cancel
NSS_CMSSignedData_SetDigestValue
NSS_CMSSignedData_ImportCerts
NSS_CMSSignedData_SignerInfoCount
NSS_CMSSignedData_VerifySignerInfo
NSS_SMIMESignerInfo_SaveSMIMEProfile
NSS_CMSMessage_IsEncrypted
NSS_CMSSignerInfo_GetSignerCommonName
NSS_CMSSignerInfo_GetSignerEmailAddress
NSS_CMSMessage_IsSigned
NSS_CMSMessage_ContentLevel
NSS_CMSContentInfo_GetContent
NSS_CMSSignedData_GetSignerInfo
NSS_CMSDecoder_Start
NSS_CMSDecoder_Update
NSS_CMSDecoder_Finish
NSS_CMSMessage_GetContent
NSS_CMSEnvelopedData_Create
NSS_CMSEnvelopedData_GetContentInfo
NSS_CMSContentInfo_SetContent_Data
NSS_CMSRecipientInfo_Create
NSS_CMSEnvelopedData_AddRecipient

ssl3

SSL_AuthCertificate
SSL_SecurityStatus
SSL_HandshakeNegotiatedExtension
SSL_ResetHandshake
SSL_OptionSet
SSL_BadCertHook
SSL_SetSockPeerID
SSL_ImportFD
SSL_SetPKCS11PinArg
SSL_HandshakeCallback
SSL_GetClientAuthDataHook
SSL_AuthCertificateHook
SSL_SetURL
SSL_RevealURL
SSL_RevealPinArg
SSL_PeerCertificate
SSL_OptionGet
SSL_GetCipherSuiteInfo
NSS_SetDomesticPolicy
SSL_OptionSetDefault
SSL_NumImplementedCiphers
SSL_ImplementedCiphers
SSL_CipherPrefSetDefault
SSL_ClearSessionCache

nss3

CERT_GetStateName
HASH_GetType
HASH_Update
PORT_Free
HASH_End
PK11_DestroyContext
PK11_DigestBegin
PK11_CreateContextBySymKey
PK11_DigestOp
PK11_DigestFinal
SECMOD_LoadUserModule
SECMOD_DestroyModule
SECMOD_DeleteModule
SECMOD_ReferenceModule
PK11_HasRootCerts
PK11_IsPresent
SECMOD_UnloadUserModule
SECMOD_FindModule
PK11_ConfigurePKCS11
NSS_Shutdown
PK11_SetPasswordFunc
PK11_NeedUserInit
PORT_SetUCS2_ASCIIConversionFunction
NSS_Init
PORT_FreeArena
SEC_ASN1Decode
ATOB_AsciiToData
PORT_ArenaZAlloc
PORT_NewArena
PK11_PQG_DestroyParams
SECITEM_AllocItem
SECOID_FindOIDByTag
PK11_FreeSlotList
PK11_ReferenceSlot
PK11_GetNextSafe
PK11_GetTokenName
PK11_GetFirstSafe
PK11_GetAllTokens
BTOA_DataToAscii
SEC_DerSignData
DER_Encode
SECKEY_CreateSubjectPublicKeyInfo
PK11_GenerateKeyPair
PK11_Authenticate
PK11_FreeSlot
SECKEY_DestroyPrivateKey
SECKEY_DestroyPublicKey
SECKEY_DestroySubjectPublicKeyInfo
PK11_DestroyTokenObject
CERT_DestroyCertificate
CERT_DisableOCSPChecking
CERT_GetDefaultCertDB
SECMOD_ReleaseReadLock
SECMOD_GetReadLock
SECMOD_GetDefaultModuleListLock
SECMOD_GetDefaultModuleList
SECMOD_HasRemovableSlots
PORT_ZAlloc
CERT_SetOCSPFailureMode
CERT_DisableOCSPDefaultResponder
CERT_EnableOCSPDefaultResponder
CERT_SetOCSPDefaultResponder
CERT_EnableOCSPChecking
PK11_RandomUpdate
CERT_DupCertificate
HASH_Destroy
HASH_Create
NSS_InitReadWrite
NSS_NoDB_Init
PK11_LogoutAll
PK11SDR_Encrypt
PK11_GetInternalKeySlot
PK11SDR_Decrypt
PK11_IsLoggedIn
PK11_Logout
PK11_ResetToken
PK11_GetMinimumPwdLength
PK11_GetSlotPWValues
PK11_SetSlotPWValues
PK11_IsHW
PK11_NeedLogin
PK11_IsFriendly
PK11_GetTokenInfo
PK11_GetSlotSeries
PK11_CheckUserPassword
PK11_InitPin
PK11_ChangePW
PK11_FindSlotByName
PK11_IsDisabled
SECMOD_CanDeleteInternalModule
SECMOD_DeleteInternalModule
SECMOD_GetInternalModule
PK11_IsFIPS
PK11_GetSlotInfo
PK11_GetSlotName
SECMOD_CreateModule
SECMOD_GetDeadModuleList
PK11_FindSlotsByNames
CERT_DestroyCertificateList
NSSBase64_EncodeItem
CERT_GetCommonName
CERT_CertChainFromCert
CERT_FindCertIssuer
CERT_VerifyCertificateNow
CERT_SaveSMimeProfile
SEC_CertNicknameConflict
CERT_GetCountryName
CERT_GetLocalityName
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
NSS_Get_CERT_NameTemplate
CERT_NewTempCertificate
NSS_Get_SEC_SignedCertificateTemplate
SEC_SignData
SEC_GetSignatureAlgorithmOidTag
PK11_KeyGen
PK11_PubWrapSymKey
PK11_WrapPrivKey
PK11_MechanismToAlgtag
PK11_AlgtagToMechanism
PK11_GetIVLength
PK11_DoesMechanism
SECKEY_CopySubjectPublicKeyInfo
CERT_CopyName
DER_UTCTimeToTime
CERT_GetCertTimes
CERT_NicknameStringsFromCertList
SECKEY_ECParamsToKeySize
SECKEY_ECParamsToBasePointOrderLen
NSS_Get_SEC_IntegerTemplate
CERT_DecodeAuthInfoAccessExtension
CERT_DecodeCRLDistributionPoints
CERT_DecodeUserNotice
CERT_DestroyUserNotice
CERT_DecodeAuthKeyID
NSS_Get_SEC_OctetStringTemplate
NSS_Get_SEC_IA5StringTemplate
CERT_DecodeAVAValue
CERT_RFC1485_EscapeAndQuote
CERT_DecodeOidSequence
CERT_DestroyOidSequence
CERT_DecodeBasicConstraintValue
NSS_Get_SEC_BitStringTemplate
DER_GetInteger
NSS_Get_SEC_BMPStringTemplate
PORT_UCS2_UTF8Conversion
SEC_ASN1DecodeInteger
PK11_FindKeyByDERCert
PK11_ReadRawAttribute
PK11_ProtectedAuthenticationPath
CERT_RegisterAlternateOCSPAIAInfoCallBack
SECITEM_CompareItem
PORT_Strdup
SEC_RegisterDefaultHttpClient
CERT_PKIXVerifyCert
CERT_DecodeCertificatePoliciesExtension
CERT_DestroyCertificatePoliciesExtension
SECOID_AddEntry
PORT_SetError
PK11_GetSlotID
SECMOD_WaitForAnyTokenEvent
SECMOD_CancelWait
SECKEY_DecodeDERSubjectPublicKeyInfo
SECKEY_ExtractPublicKey
SEC_QuickDERDecodeItem
VFY_VerifyDataWithAlgorithmID
NSS_Get_SECOID_AlgorithmIDTemplate
PK11_CreateDigestContext
CERT_VerifyCertName
CERT_VerifyCertificate
PORT_ArenaAlloc
CERT_FindCertExtension
CERT_DecodeAltNameExtension
CERT_GetNextGeneralName
DER_Lengths
CERT_DerNameToAscii
PORT_ArenaStrdup
CERT_GetOidString
PK11_ImportCert
SECOID_FindOIDTag
HASH_ResultLenByOidTag
PK11_GetBestSlot
PK11_ImportSymKey
PK11_DeleteTokenPublicKey
PK11_DeleteTokenPrivateKey
PK11_CipherOp
PK11_GetMechanism
PK11_ParamFromIV
CERT_KeyFromDERCrl
CERT_FindCertByName
NSS_Get_CERT_SignedDataTemplate
SEC_ASN1DecodeItem
CERT_VerifySignedData
SEC_NewCrl
SEC_LookupCrls
SEC_FindCrlByName
SEC_DeletePermCRL
SEC_DestroyCrl
SECMOD_PubMechFlagstoInternal
SECMOD_PubCipherFlagstoInternal
SECMOD_AddNewModule
CERT_FindUserCertsByUsage
CERT_FilterCertListByCANames
PK11_FindKeyByAnyCert
ATOB_ConvertAsciiToItem
PK11_GetInternalSlot
PK11_LoadPrivKey
PK11_PubDeriveWithKDF
PK11_Derive
CERT_ExtractPublicKey
SECITEM_DupItem
PK11_PQG_ParamGen
PK11_PQG_DestroyVerify
PK11_GenerateRandom
NSS_Get_SEC_UTF8StringTemplate
SEC_ASN1EncodeItem
CERT_AsciiToName
CERT_DestroyName
SECITEM_FreeItem
PK11_FreeSymKey
CERT_FreeNicknames
PK11_ImportCertForKey
CERT_IsCACert
CERT_VerifyCert
CERT_DestroyCertArray
PK11_ListCerts
CERT_DecodeTrustString
CERT_FindCertByDERCert
CERT_MakeCANickname
__CERT_AddTempCertToPerm
PK11_KeyForCertExists
CERT_CompareName
CERT_FindUserCertByUsage
PK11_TraverseSlotCerts
CERT_GetOCSPAuthorityInfoAccessLocation
CERT_GetCertTrust
PK11_FindCertFromNickname
CERT_FindCertByNickname
CERT_FindCertByNicknameOrEmailAddr
CERT_CreateSubjectCertList
CERT_FilterCertListByUsage
__CERT_NewTempCertificate
PORT_Alloc
CERT_ImportCerts
CERT_ChangeCertTrust
SECITEM_CopyItem
NSSBase64_DecodeBuffer
CERT_FindCertByIssuerAndSN
CERT_GetCertChainFromCert
CERT_RemoveCertListNode
PK11_HashBuf
CERT_Hexify
PK11_GetAllSlotsForCert
CERT_GetFirstEmailAddress
CERT_GetNextEmailAddress
CERT_FindKeyUsageExtension
PORT_GetError
PK11_IsInternal
PK11_DeleteTokenCertAndKey
PK11_IsReadOnly
SEC_DeletePermCertificate
CERT_NewCertList
CERT_AddCertToListTail
CERT_DestroyCertList
CERT_GetOrgUnitName
CERT_GetOrgName
HASH_Begin

nssutil3

SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeUnsignedInteger_Util
SECITEM_CopyItem_Util
PORT_FreeArena_Util
PORT_ArenaZAlloc_Util
PORT_NewArena_Util
PORT_Free_Util
PORT_ArenaUnmark_Util
PORT_ArenaRelease_Util
SECOID_CopyAlgorithmID_Util
PORT_ArenaMark_Util
PORT_SetError_Util
DER_EncodeTimeChoice_Util
PORT_ZAlloc_Util
PORT_Realloc_Util
SECITEM_FreeItem_Util
PORT_ArenaAlloc_Util
PORT_Alloc_Util
SECOID_FindOIDByTag_Util
SECOID_DestroyAlgorithmID_Util
SECOID_FindOIDTag_Util
NSS_Get_SEC_OctetStringTemplate_Util
SECOID_GetAlgorithmTag_Util
SECOID_SetAlgorithmID_Util
SEC_ASN1EncodeItem_Util
NSS_Get_SEC_UTF8StringTemplate_Util
NSS_Get_SEC_BooleanTemplate_Util
SEC_ASN1Encode_Util
DER_GetInteger_Util
SEC_ASN1Decode_Util
SECITEM_DupItem_Util
NSS_Get_SEC_IntegerTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_NullTemplate_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
SEC_StringToOID

nspr4

PR_NewLock
PR_DestroyLock
PR_NewMonitor
PR_DestroyMonitor
PR_NewCondVar
PR_DestroyCondVar
PR_Free
PR_Malloc
PR_AtomicIncrement
PR_AtomicDecrement
PR_GetEnv
PR_smprintf_free
PR_vsmprintf
PR_fprintf
PR_GetSpecialFD
PR_Sleep
PR_MillisecondsToInterval
PR_smprintf
PR_SetEnv
PR_Close
PR_Write
PR_Now
PR_Lock
PR_GetErrorTextLength
PR_GetErrorText
PR_vfprintf
PR_SetThreadPriority
PR_vsnprintf
PR_ImportFile
PR_sxprintf
PR_vsprintf_append
PR_FindSymbol
PR_Abort
PR_LoadLibrary
PR_sprintf_append
PR_LogFlush
PR_LoadLibraryWithFlags
PR_UnloadLibrary
PR_FindFunctionSymbol
PR_JoinThread
PR_PopIOLayer
PR_SetError
PR_GetOpenFileInfo
PR_GetLibraryName
PR_FreeLibraryName
PR_AtomicAdd
PR_AtomicSet
PR_CeilingLog2
PR_CallOnce
PR_dtoa
PR_strtod
PR_IntervalToMicroseconds
PR_MicrosecondsToInterval
PR_Delete
PR_Available64
PR_NormalizeTime
PR_ImplodeTime
PR_Realloc
PR_ConnectContinue
PR_Connect
PR_NotifyAllCondVar
PR_GetAddrInfoByName
PR_FreeAddrInfo
PR_GetUniqueIdentity
PR_GetDefaultIOMethods
PR_CreateIOLayerStub
PR_PushIOLayer
PR_GetSocketOption
PR_GetLayersIdentity
PR_IsNetAddrType
PR_InitializeNetAddr
PR_Send
PR_Recv
PR_Seek
PR_FloorLog2
PR_Calloc
PR_snprintf
PR_GMTParameters
PR_ParseTimeString
LL_MaxUint
PR_OpenUDPSocket
PR_Accept
PR_ntohs
PR_SetSocketOption
PR_Bind
PR_Listen
PR_GetSockName
PR_SetNetAddr
PR_GetError
PR_WaitForPollableEvent
PR_NewPollableEvent
PR_SetPollableEvent
PR_IntervalNow
PR_IntervalToMilliseconds
PR_Poll
PR_IntervalToSeconds
PR_SecondsToInterval
PR_DestroyPollableEvent
PR_Wait
PR_Notify
PR_EnumerateAddrInfo
PR_htons
PR_GetCanonNameFromAddrInfo
PR_GetSystemInfo
PR_NetAddrToString
PR_Seek64
PR_Sync
PR_FileDesc2NativeHandle
PR_sscanf
LL_Zero
PR_StringToNetAddr
PR_ConvertIPv4AddrToIPv6
PR_ntohl
PR_htonl
PR_FormatTime
PR_OpenTCPSocket
PR_GetPhysicalMemorySize
PR_CreateThread
PR_TicksPerSecond
PR_WaitCondVar
PR_NotifyCondVar
PR_NotifyAll
PR_CreateFileMap
PR_MemMap
PR_MemUnmap
PR_NewLogModule
PR_LogPrint
PR_CloseFileMap
PR_NewThreadPrivateIndex
PR_GetThreadPrivate
PR_SetThreadPrivate
PR_GetCurrentThread
PR_ExitMonitor
PR_EnterMonitor
PR_LocalTimeParameters
PR_ExplodeTime
PR_FormatTimeUSEnglish
PR_Available
PR_Read
PR_Unlock

plc4

PL_Base64Decode
PL_Base64Encode
PL_strdup
PL_strcasestr
PL_strncasecmp
PL_strcasecmp
PL_strcmp
PL_strfree
PL_strstr
PL_strncmp
PL_strchr
PL_strncasestr
PL_strncpyz
PL_strndup
PL_strnstr
PL_strncpy
PL_strlen
PL_strcpy
PL_strpbrk
PL_strrchr
PL_strncat
PL_strtok_r
PL_strnpbrk
PL_strnlen

plds4

PL_FinishArenaPool
PL_NewHashTable
PL_HashString
PL_CompareStrings
PL_HashTableDestroy
PL_HashTableLookup
PL_HashTableRemove
PL_HashTableAdd
PL_FreeArenaPool
PL_ArenaAllocate
PL_InitArenaPool
PL_HashTableEnumerateEntries
PL_HashTableLookupConst
PL_CompareValues
PL_HashTableRawLookup
PL_HashTableRawAdd
PL_HashTableRawRemove

shell32

SHGetMalloc
SHGetFileInfoW
SHBrowseForFolderW
SHAddToRecentDocs
CommandLineToArgvW
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
DragQueryFileW
SHGetPathFromIDListW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleUninitialize
OleFlushClipboard
OleInitialize
ReleaseStgMedium
OleSetClipboard
OleGetClipboard
DoDragDrop
OleQueryLinkFromData
OleDuplicateData
CoTaskMemAlloc
CoRegisterMessageFilter
CoCreateGuid

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

winspool.drv

DocumentPropertiesW
OpenPrinterW
EnumPrintersW
ClosePrinter

comdlg32

PrintDlgW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

imm32

ImmGetOpenStatus
ImmGetCompositionStringA
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetDefaultIMEWnd
ImmGetContext
ImmReleaseContext
ImmNotifyIME
ImmSetOpenStatus
ImmAssociateContext
ImmGetProperty
ImmGetCompositionStringW

winmm

waveOutOpen
waveOutPause
waveOutRestart
waveOutGetPosition
waveOutClose
timeBeginPeriod
timeEndPeriod
timeGetTime
waveOutUnprepareHeader
waveOutReset
waveOutPrepareHeader
waveOutWrite
PlaySoundW

wsock32

ntohs
htons
htonl
ntohl

msimg32

GradientFill

kernel32

GetLocaleInfoA
GetThreadLocale
GlobalUnlock
UnhandledExceptionFilter
Sleep
MultiByteToWideChar
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
GetLastError
CreateProcessW
SetErrorMode
GetProcAddress
GetModuleHandleW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetModuleFileNameW
GetLongPathNameW
TerminateProcess
CreateFileW
WriteFile
GetCurrentThreadId
GetTempPathW
GetCurrentProcessId
SetUnhandledExceptionFilter
GetWindowsDirectoryW
SignalObjectAndWait
FormatMessageA
RemoveDirectoryW
DeleteFileW
CopyFileW
MoveFileExW
GetUserDefaultLangID
CreateDirectoryW
FindFirstFileW
GetLogicalDriveStringsW
SetFileAttributesW
SetFileTime
FindClose
FindNextFileW
GetFileAttributesExW
SetFilePointer
DebugBreak
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
CreateMutexW
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
IsDebuggerPresent
LocalFileTimeToFileTime
QueryPerformanceCounter
GetQueuedCompletionStatus
CreateIoCompletionPort
PostQueuedCompletionStatus
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
InterlockedExchangeAdd
CancelIo
InitializeCriticalSectionAndSpinCount
InterlockedExchange
InterlockedCompareExchange
GetExitCodeProcess
SwitchToThread
VirtualProtectEx
LoadLibraryExA
VirtualAllocEx
GetSystemTime
SystemTimeToFileTime
GetProfileStringW
GlobalSize
GetTickCount
lstrcmpiW
SetLastError
GetShortPathNameW
GetDriveTypeW
GetFileAttributesW
GetProcessHeaps
GetVersionExW
HeapWalk
HeapUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCurrentThread
SetThreadPriority
GlobalAlloc
GlobalFree
GlobalLock
GetSystemDirectoryW
lstrcatW
ExpandEnvironmentStringsW
CreateSemaphoreA
HeapFree
GetProcessHeap
HeapAlloc
GetSystemInfo
VirtualFree
VirtualAlloc
GetDateFormatW
GetTimeFormatW
LCMapStringW
CompareStringW
GetSystemDefaultLCID
GetUserDefaultLCID
GetACP
GetLocaleInfoW
LoadLibraryA
QueryDosDeviceW
DefineDosDeviceW
DeviceIoControl
CreateEventA
GetVersionExA
SetEndOfFile
RaiseException
lstrlenW
WideCharToMultiByte
GetSystemTimeAsFileTime
ReadProcessMemory
OpenProcess
TransactNamedPipe
SetNamedPipeHandleState
WaitForMultipleObjects
WaitNamedPipeW
CreateEventW
CreateNamedPipeW
RegisterWaitForSingleObject
QueueUserWorkItem
UnregisterWaitEx
DisconnectNamedPipe
ReadFile
GetOverlappedResult
ResetEvent
ConnectNamedPipe
SetEvent
UnregisterWait
OpenThread
SuspendThread
GetThreadContext
ResumeThread
InterlockedIncrement
InitializeCriticalSection
CreateSemaphoreW
CreateThread
LoadLibraryW
FreeLibrary
DeleteCriticalSection
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
ReleaseSemaphore
DuplicateHandle
GetCommandLineW
AllocConsole
GetStdHandle
ReleaseMutex
WaitForSingleObject

user32

SetTimer
ActivateKeyboardLayout
GetUpdateRect
SetWindowLongA
KillTimer
LoadKeyboardLayoutA
GetKeyboardLayout
CreateIconIndirect
EndPaint
BeginPaint
GetCaretBlinkTime
EnumDisplayMonitors
MonitorFromRect
PtInRect
MonitorFromWindow
GetLastInputInfo
CloseClipboard
GetClipboardData
OpenClipboard
RegisterClipboardFormatW
IsClipboardFormatAvailable
MessageBeep
GetKeyboardState
SetKeyboardState
UnloadKeyboardLayout
GetWindowRgn
PeekMessageW
GetWindowPlacement
RedrawWindow
GetDoubleClickTime
GetActiveWindow
SetCursorPos
LoadImageW
UpdateLayeredWindow
GetTopWindow
SetFocus
SetParent
EnumWindows
GetForegroundWindow
GetMenu
EnumThreadWindows
MessageBoxW
DestroyWindow
DdeCreateStringHandleA
DdeCmpStringHandles
DdeCreateDataHandle
SendMessageW
SetForegroundWindow
EnumChildWindows
ShowWindow
IsIconic
FindWindowW
DefWindowProcW
DdeUninitialize
DdeFreeStringHandle
DdeNameService
CreateWindowExW
RegisterClassW
DdeUnaccessData
DdeAccessData
DdeInitializeW
GetGuiResources
GetKeyState
GetWindowRect
RegisterWindowMessageA
SendMessageA
EnableWindow
GetDlgItem
GetClientRect
SetWindowTextA
CreateWindowExA
SetWindowPos
GetWindowLongA
GetDesktopWindow
RegisterWindowMessageW
CallWindowProcW
PostMessageW
IsChild
GetFocus
GetPropW
SetPropW
SetWindowLongW
GetWindowLongW
RemovePropW
IsWindow
GetParent
DestroyIcon
GetIconInfo
ReleaseDC
GetDC
SystemParametersInfoW
UnregisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
WindowFromPoint
GetMessagePos
GetSystemMetrics
DrawEdge
FillRect
SetRect
GetSysColor
DrawFrameControl
DrawFocusRect
InflateRect
FrameRect
GetSysColorBrush
ScreenToClient
LoadIconW
GetAncestor
SetWindowRgn
IsWindowEnabled
SetClassLongW
SetCursor
LoadCursorW
ValidateRect
UpdateWindow
InvalidateRect
IntersectRect
GetWindow
GetWindowThreadProcessId
MapWindowPoints
InvalidateRgn
ClientToScreen
ReleaseCapture
SetCapture
FlashWindowEx
GetGUIThreadInfo
GetQueueStatus
GetMessageTime
ReplyMessage
InSendMessageEx
IsWindowVisible
MapVirtualKeyExW
GetCursorPos
InSendMessage
UnhookWindowsHookEx
DdeQueryStringW
ScrollWindowEx
CallNextHookEx
SetWindowsHookExW
SystemParametersInfoA
PostThreadMessageA
PeekMessageA
GetMessageA
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetClassInfoW
PostQuitMessage
WaitMessage
DestroyCaret
SetCaretPos
CreateCaret
EqualRect
SetRectEmpty
ToUnicodeEx
GetMonitorInfoW
SetWindowTextW
BringWindowToTop
SetActiveWindow
ShowCaret
GetClassNameW
RegisterClassExW
DefWindowProcA
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
wsprintfW

gdi32

GetDIBits
DeleteDC
DeleteObject
CreateCompatibleDC
GetFontUnicodeRanges
GetCharWidth32A
SetMapMode
FillPath
SetMiterLimit
StrokePath
WidenPath
SetPolyFillMode
PolyBezierTo
BeginPath
CloseFigure
EndPath
SelectClipPath
ExtEscape
CreateCompatibleBitmap
ExtSelectClipRgn
IntersectClipRect
GetGraphicsMode
ModifyWorldTransform
GetClipBox
GetClipRgn
ExtTextOutW
PatBlt
SetStretchBltMode
StretchBlt
GetICMProfileW
GetWorldTransform
GetDeviceCaps
GetTextMetricsA
SelectObject
CreateFontIndirectW
GetObjectW
GetStockObject
SetLayout
GetViewportOrgEx
GetCurrentObject
BitBlt
SetBkColor
SetTextColor
CreateBitmap
SetBrushOrgEx
UnrealizeObject
CreatePatternBrush
SetTextAlign
RestoreDC
LineTo
MoveToEx
ExtCreatePen
SelectClipRgn
SaveDC
CreateSolidBrush
OffsetRgn
CombineRgn
SetRectRgn
GdiFlush
ExtCreateRegion
CreateRectRgn
SetBkMode
CreateDIBitmap
GetRegionData
GetRandomRgn
StretchDIBits
CreateDIBSection
CreateDCW
CreateRectRgnIndirect
EndDoc
AbortDoc
StartPage
EndPage
StartDocW
RemoveFontMemResourceEx
SetGraphicsMode
GetGlyphIndicesW
GetTextExtentPoint32W
GetGlyphOutlineW
GetOutlineTextMetricsA
GetFontData
GetTextExtentExPointI
EnumFontFamiliesExW
AddFontMemResourceEx
GetGlyphIndicesA
SetViewportOrgEx
SetWorldTransform

advapi32

OpenProcessToken
GetNamedSecurityInfoW
SetNamedSecurityInfoW
RegDeleteKeyW
RegNotifyChangeKeyValue
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
RegOpenKeyExW
GetTokenInformation
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
QueryServiceStatus
GetUserNameW
OpenSCManagerA
OpenServiceW

usp10

ScriptGetProperties
ScriptItemize
ScriptRecordDigitSubstitution
ScriptFreeCache
ScriptPlace
ScriptGetFontProperties
ScriptShape
ScriptGetCMap
ScriptIsComplex
ScriptBreak

oleaut32

VariantClear
VariantInit
VariantChangeType
SafeArrayDestroyData
SafeArrayUnaccessData
SysFreeString
SysAllocStringLen
SysAllocString
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayGetElement
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetDim
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
VariantCopy
SetErrorInfo
CreateErrorInfo
SysStringLen

mozcrt19

fwrite
_fileno
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
tolower
toupper
memset
memcmp
strlen
strcmp
strtol
printf
_getpid
??_V@YAXPAX@Z
memcpy
??_U@YAPAXI@Z
wcspbrk
wcschr
wcslen
wcscpy
malloc
free
wprintf
setbuf
__iob_func
getenv
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_vsnprintf_s
?terminate@@YAXXZ
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_CIatan2
_CIacos
localeconv
_CItan
_CIpow
fwprintf
_CIsqrt
_CIsin
_CIcos
abort
jemalloc_stats
_dup
setlocale
wcsncat
_getdrives
_wgetdcwd
_wfopen
_wchmod
strpbrk
raise
rand_s
vfprintf
_vsnwprintf_s
_vscwprintf
_vscprintf
_wcsicmp
ldiv
_wcsdup
clock
_snprintf
wcsrchr
towlower
_vswprintf
wcscat
wcsncmp
wcstok
_wtoi
malloc_usable_size
_beginthreadex
_endthreadex
labs
ldexp
qsort
atan
exp
_stricmp
feof
clearerr
_fstat64i32
ftell
fseek
_errno
fread
ferror
tan
log10
atof
pow
fopen
fflush
_hypot
_fpclass
acos
sin
cos
atan2
strcat
_finite
abs
ceil
_setjmp3
longjmp
sqrt
fabs
floor
_localtime64
_mktime64
sscanf
strcspn
isdigit
isalpha
strtoul
realloc
memmove
memchr
strrchr
wcscmp
calloc
atoi
log
puts
strstr
fmod
fputs
_i64tow_s
wcscpy_s
__CxxFrameHandler3
_snwprintf_s
exit
_set_invalid_parameter_handler
_set_purecall_handler
memmove_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
swprintf_s
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
isspace
strcpy
_snwprintf
_open_osfhandle
_fdopen
_wchdir
_exit
_wgetcwd
strncpy
fprintf
fgets
strncmp
_wputenv
atol
wcsncpy
_i64toa
_time64
_wcsnicmp
_wfullpath
_strdup
fclose
srand
rand
sprintf
strchr

mozcpp19

?deallocate@?$allocator@G@std@@QAEXPAGI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?allocate@?$allocator@G@std@@QAEPAGI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPBGH@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
_FNan
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z

Exports

Exports

??0?$nsExpirationTracker@VgfxFont@@$02@@QAE@ABV0@@Z
??0?$nsExpirationTracker@VgfxFont@@$02@@QAE@I@Z
??0GlyphRunIterator@gfxTextRun@@QAE@PAV1@II@Z
??0RunMetrics@gfxFont@@QAE@ABU01@@Z
??0RunMetrics@gfxFont@@QAE@XZ
??0gfxASurface@@IAE@XZ
??0gfxASurface@@QAE@ABV0@@Z
??0gfxAlphaBoxBlur@@QAE@ABV0@@Z
??0gfxAlphaBoxBlur@@QAE@XZ
??0gfxContext@@QAE@ABV0@@Z
??0gfxContext@@QAE@PAVgfxASurface@@@Z
??0gfxContextAutoSaveRestore@@QAE@PAVgfxContext@@@Z
??0gfxContextAutoSaveRestore@@QAE@XZ
??0gfxContextMatrixAutoSaveRestore@@QAE@PAVgfxContext@@@Z
??0gfxContextPathAutoSaveRestore@@QAE@ABV0@@Z
??0gfxContextPathAutoSaveRestore@@QAE@PAVgfxContext@@H@Z
??0gfxContextPathAutoSaveRestore@@QAE@XZ
??0gfxCornerSizes@@QAE@ABUgfxSize@@000@Z
??0gfxCornerSizes@@QAE@N@Z
??0gfxCornerSizes@@QAE@NNNN@Z
??0gfxCornerSizes@@QAE@XZ
??0gfxFlattenedPath@@IAE@PAUcairo_path@@@Z
??0gfxFlattenedPath@@QAE@ABV0@@Z
??0gfxFont@@IAE@PAVgfxFontEntry@@PBUgfxFontStyle@@@Z
??0gfxFont@@QAE@ABV0@@Z
??0gfxFontCache@@QAE@XZ
??0gfxFontGroup@@IAE@ABVnsAString_internal@@PBUgfxFontStyle@@PAVgfxUserFontSet@@@Z
??0gfxFontGroup@@QAE@ABV0@@Z
??0gfxFontStyle@@QAE@ABU0@@Z
??0gfxFontStyle@@QAE@EGFNABVnsACString_internal@@MEEE@Z
??0gfxFontStyle@@QAE@XZ
??0gfxFontTestItem@@QAE@ABU0@@Z
??0gfxFontTestItem@@QAE@ABVnsCString@@PAUcairo_glyph_t@@H@Z
??0gfxFontTestStore@@QAE@ABV0@@Z
??0gfxFontTestStore@@QAE@XZ
??0gfxGlyphExtents@@QAE@I@Z
??0gfxImageSurface@@QAE@ABUgfxIntSize@@W4gfxImageFormat@gfxASurface@@@Z
??0gfxImageSurface@@QAE@ABV0@@Z
??0gfxImageSurface@@QAE@PAEABUgfxIntSize@@JW4gfxImageFormat@gfxASurface@@@Z
??0gfxImageSurface@@QAE@PAU_cairo_surface@@@Z
??0gfxIntSize@@QAE@HH@Z
??0gfxIntSize@@QAE@XZ
??0gfxMatrix@@QAE@NNNNNN@Z
??0gfxMatrix@@QAE@XZ
??0gfxPDFSurface@@QAE@ABV0@@Z
??0gfxPDFSurface@@QAE@PAVnsIOutputStream@@ABUgfxSize@@@Z
??0gfxPath@@IAE@PAUcairo_path@@@Z
??0gfxPath@@QAE@ABV0@@Z
??0gfxPattern@@QAE@ABUgfxRGBA@@@Z
??0gfxPattern@@QAE@ABV0@@Z
??0gfxPattern@@QAE@NNNN@Z
??0gfxPattern@@QAE@NNNNNN@Z
??0gfxPattern@@QAE@PAU_cairo_pattern@@@Z
??0gfxPattern@@QAE@PAVgfxASurface@@@Z
??0gfxPlatform@@IAE@XZ
??0gfxPlatform@@QAE@ABV0@@Z
??0gfxPoint@@QAE@ABU0@@Z
??0gfxPoint@@QAE@NN@Z
??0gfxPoint@@QAE@XZ
??0gfxRGBA@@QAE@ABU0@@Z
??0gfxRGBA@@QAE@IW4PackedColorType@0@@Z
??0gfxRGBA@@QAE@NNNN@Z
??0gfxRGBA@@QAE@XZ
??0gfxRect@@QAE@ABU0@@Z
??0gfxRect@@QAE@ABUgfxPoint@@ABUgfxSize@@@Z
??0gfxRect@@QAE@NNNN@Z
??0gfxRect@@QAE@XZ
??0gfxSize@@QAE@ABUgfxIntSize@@@Z
??0gfxSize@@QAE@NN@Z
??0gfxSize@@QAE@XZ
??0gfxSkipChars@@QAE@AAV0@@Z
??0gfxSkipChars@@QAE@XZ
??0gfxSkipCharsBuilder@@QAE@ABV0@@Z
??0gfxSkipCharsBuilder@@QAE@XZ
??0gfxSkipCharsIterator@@QAE@ABV0@@Z
??0gfxSkipCharsIterator@@QAE@ABVgfxSkipChars@@H@Z
??0gfxSkipCharsIterator@@QAE@ABVgfxSkipChars@@HH@Z
??0gfxSkipCharsIterator@@QAE@XZ
??0gfxTextRun@@IAE@PBUParameters@gfxTextRunFactory@@PBXIPAVgfxFontGroup@@II@Z
??0gfxTextRun@@QAE@AAV0@@Z
??0gfxTextRunFactory@@QAE@ABV0@@Z
??0gfxTextRunFactory@@QAE@XZ
??0gfxUnknownSurface@@QAE@ABV0@@Z
??0gfxUnknownSurface@@QAE@PAU_cairo_surface@@@Z
??0gfxUserFontSet@@QAE@XZ
??0gfxWindowsFontGroup@@QAE@ABV0@@Z
??0gfxWindowsFontGroup@@QAE@ABVnsAString_internal@@PBUgfxFontStyle@@PAVgfxUserFontSet@@@Z
??0gfxWindowsNativeDrawing@@QAE@ABV0@@Z
??0gfxWindowsNativeDrawing@@QAE@PAVgfxContext@@ABUgfxRect@@I@Z
??0gfxWindowsPlatform@@QAE@XZ
??0gfxWindowsSurface@@QAE@ABUgfxIntSize@@W4gfxImageFormat@gfxASurface@@@Z
??0gfxWindowsSurface@@QAE@ABV0@@Z
??0gfxWindowsSurface@@QAE@PAUHDC__@@ABUgfxIntSize@@W4gfxImageFormat@gfxASurface@@@Z
??0gfxWindowsSurface@@QAE@PAUHDC__@@I@Z
??0gfxWindowsSurface@@QAE@PAUHWND__@@@Z
??0gfxWindowsSurface@@QAE@PAU_cairo_surface@@@Z
??0nsGetServiceByCID@@QAE@ABUnsID@@@Z
??0nsGetServiceByCIDWithError@@QAE@ABUnsID@@PAI@Z
??0nsGetServiceByContractID@@QAE@PBD@Z
??0nsGetServiceByContractIDWithError@@QAE@PBDPAI@Z
??0nsQueryInterface@@QAE@PAVnsISupports@@@Z
??0nsQueryInterfaceWithError@@QAE@PAVnsISupports@@PAI@Z
??1?$nsExpirationTracker@VgfxFont@@$02@@QAE@XZ
??1gfxASurface@@MAE@XZ
??1gfxAlphaBoxBlur@@QAE@XZ
??1gfxContext@@QAE@XZ
??1gfxContextAutoSaveRestore@@QAE@XZ
??1gfxContextMatrixAutoSaveRestore@@QAE@XZ
??1gfxContextPathAutoSaveRestore@@QAE@XZ
??1gfxFlattenedPath@@UAE@XZ
??1gfxFont@@UAE@XZ
??1gfxFontCache@@QAE@XZ
??1gfxFontGroup@@UAE@XZ
??1gfxFontStyle@@QAE@XZ
??1gfxFontTestItem@@QAE@XZ
??1gfxFontTestStore@@QAE@XZ
??1gfxGlyphExtents@@QAE@XZ
??1gfxImageSurface@@UAE@XZ
??1gfxPDFSurface@@UAE@XZ
??1gfxPath@@UAE@XZ
??1gfxPattern@@UAE@XZ
??1gfxPlatform@@MAE@XZ
??1gfxSkipChars@@QAE@XZ
??1gfxSkipCharsBuilder@@QAE@XZ
??1gfxTextRun@@UAE@XZ
??1gfxTextRunFactory@@UAE@XZ
??1gfxUnknownSurface@@UAE@XZ
??1gfxUserFontSet@@UAE@XZ
??1gfxWindowsFontGroup@@UAE@XZ
??1gfxWindowsNativeDrawing@@QAE@XZ
??1gfxWindowsPlatform@@UAE@XZ
??1gfxWindowsSurface@@UAE@XZ
??2gfxTextRun@@KAPAXIII@Z
??3gfxTextRun@@SAXPAX@Z
??4?$nsExpirationTracker@VgfxFont@@$02@@QAEAAV0@ABV0@@Z
??4GlyphRunIterator@gfxTextRun@@QAEAAV01@ABV01@@Z
??4RunMetrics@gfxFont@@QAEAAU01@ABU01@@Z
??4gfxASurface@@QAEAAV0@ABV0@@Z
??4gfxAlphaBoxBlur@@QAEAAV0@ABV0@@Z
??4gfxAlphaRecovery@@QAEAAV0@ABV0@@Z
??4gfxContext@@QAEAAV0@ABV0@@Z
??4gfxContextAutoSaveRestore@@QAEAAV0@ABV0@@Z
??4gfxContextMatrixAutoSaveRestore@@QAEAAV0@ABV0@@Z
??4gfxContextPathAutoSaveRestore@@QAEAAV0@ABV0@@Z
??4gfxCorner@@QAEAAU0@ABU0@@Z
??4gfxCornerSizes@@QAEAAU0@ABU0@@Z
??4gfxFlattenedPath@@QAEAAV0@ABV0@@Z
??4gfxFont@@QAEAAV0@ABV0@@Z
??4gfxFontGroup@@QAEAAV0@ABV0@@Z
??4gfxFontMissingGlyphs@@QAEAAV0@ABV0@@Z
??4gfxFontStyle@@QAEAAU0@ABU0@@Z
??4gfxFontTestItem@@QAEAAU0@ABU0@@Z
??4gfxFontTestStore@@QAEAAV0@ABV0@@Z
??4gfxFontUtils@@QAEAAV0@ABV0@@Z
??4gfxImageSurface@@QAEAAV0@ABV0@@Z
??4gfxIntSize@@QAEAAU0@ABU0@@Z
??4gfxMatrix@@QAEAAU0@ABU0@@Z
??4gfxPDFSurface@@QAEAAV0@ABV0@@Z
??4gfxPath@@QAEAAV0@ABV0@@Z
??4gfxPattern@@QAEAAV0@ABV0@@Z
??4gfxPlatform@@QAEAAV0@ABV0@@Z
??4gfxPoint@@QAEAAU0@ABU0@@Z
??4gfxRGBA@@QAEAAU0@ABU0@@Z
??4gfxRect@@QAEAAU0@ABU0@@Z
??4gfxSize@@QAEAAU0@ABU0@@Z
??4gfxSkipChars@@QAEAAV0@AAV0@@Z
??4gfxSkipCharsBuilder@@QAEAAV0@ABV0@@Z
??4gfxSkipCharsIterator@@QAEAAV0@ABV0@@Z
??4gfxTextRun@@QAEAAV0@AAV0@@Z
??4gfxTextRunCache@@QAEAAV0@ABV0@@Z
??4gfxTextRunFactory@@QAEAAV0@ABV0@@Z
??4gfxTextRunWordCache@@QAEAAV0@ABV0@@Z
??4gfxUnknownSurface@@QAEAAV0@ABV0@@Z
??4gfxWindowsFontGroup@@QAEAAV0@ABV0@@Z
??4gfxWindowsNativeDrawing@@QAEAAV0@ABV0@@Z
??4gfxWindowsSurface@@QAEAAV0@ABV0@@Z
??4nsGetServiceByContractID@@QAEAAV0@ABV0@@Z
??4nsGetServiceByContractIDWithError@@QAEAAV0@ABV0@@Z
??4nsQueryInterface@@QAEAAV0@ABV0@@Z
??4nsQueryInterfaceWithError@@QAEAAV0@ABV0@@Z
??8gfxIntSize@@QBEHABU0@@Z
??8gfxPoint@@QBEHABU0@@Z
??8gfxRect@@QBEHABU0@@Z
??8gfxSize@@QBEHABU0@@Z
??9gfxIntSize@@QBEHABU0@@Z
??9gfxPoint@@QBEHABU0@@Z
??9gfxRect@@QBEHABU0@@Z
??9gfxSize@@QBEHABU0@@Z
??AgfxCornerSizes@@QAEAAUgfxSize@@H@Z
??AgfxCornerSizes@@QBEABUgfxSize@@H@Z
??DgfxIntSize@@QBE?AU0@H@Z
??DgfxMatrix@@QBE?AU0@ABU0@@Z
??DgfxPoint@@QBE?AU0@N@Z
??DgfxSize@@QBE?AU0@N@Z
??GgfxIntSize@@QBE?AU0@ABU0@@Z
??GgfxIntSize@@QBE?AU0@XZ
??GgfxPoint@@QBE?AU0@ABU0@@Z
??GgfxPoint@@QBE?AU0@ABUgfxSize@@@Z
??GgfxPoint@@QBE?AU0@XZ
??GgfxRect@@QBE?AU0@ABUgfxPoint@@@Z
??GgfxSize@@QBE?AU0@ABU0@@Z
??GgfxSize@@QBE?AU0@XZ
??HgfxIntSize@@QBE?AU0@ABU0@@Z
??HgfxPoint@@QBE?AU0@ABU0@@Z
??HgfxPoint@@QBE?AU0@ABUgfxSize@@@Z
??HgfxRect@@QBE?AU0@ABUgfxPoint@@@Z
??HgfxSize@@QBE?AU0@ABU0@@Z
??KgfxIntSize@@QBE?AU0@H@Z
??KgfxPoint@@QBE?AU0@N@Z
??KgfxSize@@QBE?AU0@N@Z
??XgfxMatrix@@QAEABU0@ABU0@@Z
??YgfxPoint@@QAEABU0@ABU0@@Z
??_7?$nsExpirationTracker@VgfxFont@@$02@@6B@
??_7gfxASurface@@6B@
??_7gfxFlattenedPath@@6B@
??_7gfxFont@@6B@
??_7gfxFontCache@@6B@
??_7gfxFontGroup@@6B@
??_7gfxImageSurface@@6B@
??_7gfxPDFSurface@@6B@
??_7gfxPath@@6B@
??_7gfxPattern@@6B@
??_7gfxPlatform@@6B@
??_7gfxTextRun@@6B@
??_7gfxTextRunFactory@@6B@
??_7gfxUnknownSurface@@6B@
??_7gfxUserFontSet@@6B@
??_7gfxWindowsFontGroup@@6B@
??_7gfxWindowsPlatform@@6BgfxFontInfoLoader@@@
??_7gfxWindowsPlatform@@6BgfxPlatform@@@
??_7gfxWindowsSurface@@6B@
?AbortPrinting@gfxASurface@@UAEIXZ
?AbortPrinting@gfxPDFSurface@@UAEIXZ
?AbortPrinting@gfxWindowsSurface@@UAEIXZ
?AccumulateMetricsForRun@gfxTextRun@@AAEXPAVgfxFont@@IIW4BoundingBoxType@2@PAVgfxContext@@PAVPropertyProvider@1@IIPAURunMetrics@2@@Z
?AccumulatePartialLigatureMetrics@gfxTextRun@@AAEXPAVgfxFont@@IIW4BoundingBoxType@2@PAVgfxContext@@PAVPropertyProvider@1@PAURunMetrics@2@@Z
?AddColorStop@gfxPattern@@QAEXNABUgfxRGBA@@@Z
?AddFontFace@gfxUserFontSet@@QAEXABVnsAString_internal@@ABV?$nsTArray@UgfxFontFaceSrc@@@@IIIPAVgfxSparseBitSet@@@Z
?AddGlyphRun@gfxTextRun@@QAEIPAVgfxFont@@IH@Z
?AddItem@gfxFontTestStore@@QAEXABVnsCString@@PAUcairo_glyph_t@@H@Z
?AddItem@gfxFontTestStore@@QAEXABVnsString@@PAUcairo_glyph_t@@H@Z
?AddNew@gfxFontCache@@QAEXPAVgfxFont@@@Z
?AddObject@?$nsExpirationTracker@VgfxFont@@$02@@QAEIPAVgfxFont@@@Z
?AddRef@gfxASurface@@QAEKXZ
?AddRef@gfxContext@@QAEKXZ
?AddRef@gfxFont@@QAEKXZ
?AddRef@gfxPath@@QAEKXZ
?AddRef@gfxPattern@@QAEKXZ
?AddRef@gfxTextRunFactory@@QAEKXZ
?AddRef@gfxUserFontSet@@QAEKXZ
?AdjustAdvancesForSyntheticBold@gfxTextRun@@QAEXII@Z
?AdvanceOriginal@gfxSkipCharsIterator@@QAEXH@Z
?AdvanceSkipped@gfxSkipCharsIterator@@QAEXH@Z
?AgeAllGenerations@?$nsExpirationTracker@VgfxFont@@$02@@QAEXXZ
?AgeOneGeneration@?$nsExpirationTracker@VgfxFont@@$02@@QAEXXZ
?AllocateDetailedGlyphs@gfxTextRun@@AAEPAUDetailedGlyph@1@II@Z
?AppendPath@gfxContext@@QAEXPAVgfxPath@@@Z
?AppendPrefLang@gfxPlatform@@SAXQAW4eFontPrefLang@@AAIW42@@Z
?Arc@gfxContext@@QAEXABUgfxPoint@@NNN@Z
?BeginNativeDrawing@gfxWindowsNativeDrawing@@QAEPAUHDC__@@XZ
?BeginPage@gfxASurface@@UAEIXZ
?BeginPage@gfxPDFSurface@@UAEIXZ
?BeginPage@gfxWindowsSurface@@UAEIXZ
?BeginPrinting@gfxASurface@@UAEIABVnsAString_internal@@0@Z
?BeginPrinting@gfxPDFSurface@@UAEIABVnsAString_internal@@0@Z
?BeginPrinting@gfxWindowsSurface@@UAEIABVnsAString_internal@@0@Z
?BottomLeft@gfxCornerSizes@@QAEAAUgfxSize@@XZ
?BottomLeft@gfxCornerSizes@@QBE?BUgfxSize@@XZ
?BottomLeft@gfxRect@@QBE?AUgfxPoint@@XZ
?BottomRight@gfxCornerSizes@@QAEAAUgfxSize@@XZ
?BottomRight@gfxCornerSizes@@QBE?BUgfxSize@@XZ
?BottomRight@gfxRect@@QAE?AUgfxPoint@@XZ
?BottomRight@gfxRect@@QBE?AUgfxPoint@@XZ
?BreakAndMeasureText@gfxTextRun@@QAEIIIHNPAVPropertyProvider@1@HPANPAURunMetrics@gfxFont@@W4BoundingBoxType@4@PAVgfxContext@@PAHPAIHPAW4gfxBreakPriority@@@Z
?BuildShortcuts@gfxSkipChars@@AAEXXZ
?CairoPattern@gfxPattern@@QAEPAU_cairo_pattern@@XZ
?CairoStatus@gfxASurface@@QAEHXZ
?CairoStatus@gfxPattern@@QAEHXZ
?CairoSurface@gfxASurface@@QAEPAU_cairo_surface@@XZ
?CalculateBlurRadius@gfxAlphaBoxBlur@@SA?AUgfxIntSize@@ABUgfxPoint@@@Z
?CanBreakLineBefore@gfxTextRun@@QAEHI@Z
?CharRangeBit@gfxFontUtils@@SAEI@Z
?CheckStartTimer@?$nsExpirationTracker@VgfxFont@@$02@@AAEIXZ
?CheckSurfaceSize@gfxASurface@@SAHABUgfxIntSize@@H@Z
?ClearFlag@gfxContext@@QAEXH@Z
?ClearFlagBits@gfxTextRun@@QAEXI@Z
?ClearPrefFonts@gfxWindowsPlatform@@QAEXXZ
?Clip@gfxContext@@QAEXABUgfxRect@@@Z
?Clip@gfxContext@@QAEXXZ
?Clone@gfxTextRun@@UAEPAV1@PBUParameters@gfxTextRunFactory@@PBXIPAVgfxFontGroup@@I@Z
?ClosePath@gfxContext@@QAEXXZ
?CombineWith@RunMetrics@gfxFont@@QAEXABU12@H@Z
?ComputeLigatureData@gfxTextRun@@AAE?AULigatureData@1@IIPAVPropertyProvider@1@@Z
?ComputePartialLigatureWidth@gfxTextRun@@AAENIIPAVPropertyProvider@1@@Z
?ComputeRanges@gfxFontGroup@@QAEXAAV?$nsTArray@UgfxTextRange@@@@PBGII@Z
?ComputeStride@gfxImageSurface@@ABEJXZ
?ComputeWeightAndOffset@gfxFontStyle@@QBEXPAC0@Z
?Condition@gfxRect@@QAEXXZ
?Contains@gfxRect@@QBEHABU1@@Z
?Contains@gfxRect@@QBEHABUgfxPoint@@@Z
?ContentFromFormat@gfxASurface@@SA?AW4gfxContentType@1@W4gfxImageFormat@1@@Z
?ConvertOriginalToSkipped@gfxSkipCharsIterator@@QAEIH@Z
?ConvertSkippedToOriginal@gfxSkipCharsIterator@@QAEIH@Z
?Copy@gfxWindowsFontGroup@@UAEPAVgfxFontGroup@@PBUgfxFontStyle@@@Z
?CopyFrom@gfxImageSurface@@QAEHPAV1@@Z
?CopyGlyphDataFrom@gfxTextRun@@UAEXPAV1@IIIH@Z
?CopyPath@gfxContext@@QBE?AU?$already_AddRefed@VgfxPath@@@@XZ
?Corner@gfxRect@@QBE?AUgfxPoint@@H@Z
?CountMissingGlyphs@gfxTextRun@@QAEIXZ
?Create@gfxTextRun@@SAPAV1@PBUParameters@gfxTextRunFactory@@PBXIPAVgfxFontGroup@@I@Z
?CreateFontGroup@gfxWindowsPlatform@@UAEPAVgfxFontGroup@@ABVnsAString_internal@@PBUgfxFontStyle@@PAVgfxUserFontSet@@@Z
?CreateOffscreenSurface@gfxWindowsPlatform@@UAE?AU?$already_AddRefed@VgfxASurface@@@@ABUgfxIntSize@@W4gfxImageFormat@gfxASurface@@@Z
?CreatePlatformFontList@gfxPlatform@@UAEPAVgfxPlatformFontList@@XZ
?CurrentAntialiasMode@gfxContext@@QBE?AW4AntialiasMode@1@XZ
?CurrentFillRule@gfxContext@@QBE?AW4FillRule@1@XZ
?CurrentLineCap@gfxContext@@QBE?AW4GraphicsLineCap@1@XZ
?CurrentLineJoin@gfxContext@@QBE?AW4GraphicsLineJoin@1@XZ
?CurrentLineWidth@gfxContext@@QBENXZ
?CurrentMatrix@gfxContext@@QBE?AUgfxMatrix@@XZ
?CurrentMiterLimit@gfxContext@@QBENXZ
?CurrentOperator@gfxContext@@QBE?AW4GraphicsOperator@1@XZ
?CurrentPoint@gfxContext@@QBE?AUgfxPoint@@XZ
?CurrentStore@gfxFontTestStore@@SAPAV1@XZ
?CurrentSurface@gfxContext@@QAE?AU?$already_AddRefed@VgfxASurface@@@@PAN0@Z
?CurrentSurface@gfxContext@@QAE?AU?$already_AddRefed@VgfxASurface@@@@XZ
?CurveTo@gfxContext@@QAEXABUgfxPoint@@00@Z
?Data@gfxImageSurface@@QBEPAEXZ
?DecodeFontName@gfxFontUtils@@SAHPBEHIIIAAVnsAString_internal@@@Z
?DeleteStore@gfxFontTestStore@@SAXXZ
?DestroyFont@gfxFontCache@@IAEXPAVgfxFont@@@Z
?Determinant@gfxMatrix@@QBENXZ
?DetermineFontDataType@gfxFontUtils@@SA?AW4gfxUserFontType@@PBEI@Z
?DeviceToUser@gfxContext@@QBE?AUgfxPoint@@ABU2@@Z
?DeviceToUser@gfxContext@@QBE?AUgfxRect@@ABU2@@Z
?DeviceToUser@gfxContext@@QBE?AUgfxSize@@ABU2@@Z
?DoChars@gfxSkipCharsBuilder@@QAEXIH@Z
?DownloadableFontsEnabled@gfxPlatform@@UAEHXZ
?Draw@gfxFont@@UAEXPAVgfxTextRun@@IIPAVgfxContext@@HPAUgfxPoint@@PAUSpacing@1@@Z
?Draw@gfxTextRun@@QAEXPAVgfxContext@@UgfxPoint@@IIPBUgfxRect@@PAVPropertyProvider@1@PAN@Z
?DrawGlyphs@gfxTextRun@@AAEXPAVgfxFont@@PAVgfxContext@@HPAUgfxPoint@@IIPAVPropertyProvider@1@II@Z
?DrawMissingGlyph@gfxFontMissingGlyphs@@SAXPAVgfxContext@@ABUgfxRect@@I@Z
?DrawPartialLigature@gfxTextRun@@AAEXPAVgfxFont@@PAVgfxContext@@IIPBUgfxRect@@PAUgfxPoint@@PAVPropertyProvider@1@@Z
?DrawSurface@gfxContext@@QAEXPAVgfxASurface@@ABUgfxSize@@@Z
?DrawToPath@gfxTextRun@@QAEXPAVgfxContext@@UgfxPoint@@IIPAVPropertyProvider@1@PAN@Z
?Ellipse@gfxContext@@QAEXABUgfxPoint@@ABUgfxSize@@@Z
?EndNativeDrawing@gfxWindowsNativeDrawing@@QAEXXZ
?EndPage@gfxASurface@@UAEIXZ
?EndPage@gfxPDFSurface@@UAEIXZ
?EndPage@gfxWindowsSurface@@UAEIXZ
?EndPrinting@gfxASurface@@UAEIXZ
?EndPrinting@gfxPDFSurface@@UAEIXZ
?EndPrinting@gfxWindowsSurface@@UAEIXZ
?Equals@gfxFontGroup@@QBEHABV1@@Z
?Equals@gfxFontStyle@@QBEHABU1@@Z
?Extend@gfxPattern@@QBE?AW4GraphicsExtend@1@XZ
?FamilyListToArrayList@gfxWindowsFontGroup@@QAEXABVnsString@@ABVnsCString@@PAV?$nsTArray@V?$nsRefPtr@VFontEntry@@@@@@@Z
?FetchGlyphExtents@gfxTextRun@@QAEXPAVgfxContext@@@Z
?Fill@gfxContext@@QAEXXZ
?Filter@gfxPattern@@QBE?AW4GraphicsFilter@1@XZ
?FindFirstGlyphRunContaining@gfxTextRun@@QAEII@Z
?FindFontEntry@gfxUserFontSet@@QAEPAVgfxFontEntry@@ABVnsAString_internal@@ABUgfxFontStyle@@AAH@Z
?FindFontEntry@gfxWindowsPlatform@@QAEPAVFontEntry@@ABVnsAString_internal@@ABUgfxFontStyle@@@Z
?FindFontFamily@gfxWindowsPlatform@@QAEPAVFontFamily@@ABVnsAString_internal@@@Z
?FindFontForChar@gfxFontGroup@@QAE?AU?$already_AddRefed@VgfxFont@@@@IIIPAVgfxFont@@@Z
?FindFontForChar@gfxWindowsPlatform@@QAE?AU?$already_AddRefed@VgfxFont@@@@IPAVgfxFont@@@Z
?FindFontForCharProc@gfxWindowsPlatform@@CA?AW4PLDHashOperator@@ABVnsAString_internal@@AAV?$nsRefPtr@VFontFamily@@@@PAX@Z
?FindPoint@gfxFlattenedPath@@QAE?AUgfxPoint@@U2@PAN@Z
?FindPreferredSubtable@gfxFontUtils@@SAIPAEIPAIPAH@Z
?Finish@gfxASurface@@UAEXXZ
?Finish@gfxPDFSurface@@UAEXXZ
?FinishLoader@gfxWindowsPlatform@@EAEXXZ
?Flush@gfxASurface@@QAEXXZ
?FlushRun@gfxSkipCharsBuilder@@AAEXXZ
?FontEnumProc@gfxWindowsPlatform@@CGHPBUtagENUMLOGFONTEXW@@PBUtagNEWTEXTMETRICEXW@@KJ@Z
?FontListLength@gfxFontGroup@@UBEIXZ
?FontListLength@gfxWindowsFontGroup@@UBEIXZ
?FontResolveProc@gfxWindowsPlatform@@CGHPBUtagENUMLOGFONTEXW@@PBUtagNEWTEXTMETRICEXW@@KJ@Z
?FontResolverProc@gfxFontGroup@@KAHABVnsAString_internal@@PAX@Z
?ForEachFont@gfxFontGroup@@QAEHABVnsAString_internal@@ABVnsACString_internal@@P6AH01PAX@Z2@Z
?ForEachFont@gfxFontGroup@@QAEHP6AHABVnsAString_internal@@ABVnsACString_internal@@PAX@Z2@Z
?ForEachFontInternal@gfxFontGroup@@IAEHABVnsAString_internal@@ABVnsACString_internal@@HHP6AH01PAX@Z2@Z
?ForEachPrefFont@gfxPlatform@@SAHQAW4eFontPrefLang@@IP6AHW42@ABVnsAString_internal@@PAX@Z3@Z
?Format@gfxImageSurface@@QBE?AW4gfxImageFormat@gfxASurface@@XZ
?GetAdjustedSize@gfxFontStyle@@QBENN@Z
?GetAdjustedSpacingArray@gfxTextRun@@AAEHIIPAVPropertyProvider@1@IIPAV?$nsTArray@USpacing@gfxFont@@@@@Z
?GetAdvanceWidth@gfxTextRun@@QAENIIPAVPropertyProvider@1@@Z
?GetAllCharsKept@gfxSkipCharsBuilder@@QAEHXZ
?GetAppUnitsPerDevUnit@gfxGlyphExtents@@QAEIXZ
?GetAppUnitsPerDevUnit@gfxTextRun@@QBEIXZ
?GetCJKPrefFonts@gfxWindowsFontGroup@@IAEXAAV?$nsTArray@V?$nsRefPtr@VFontEntry@@@@@@@Z
?GetCMSInverseRGBTransform@gfxPlatform@@SAPAU_qcms_transform@@XZ
?GetCMSMode@gfxPlatform@@SA?AW4eCMSMode@@XZ
?GetCMSOutputProfile@gfxPlatform@@SAPAU_qcms_profile@@XZ
?GetCMSRGBATransform@gfxPlatform@@SAPAU_qcms_transform@@XZ
?GetCMSRGBTransform@gfxPlatform@@SAPAU_qcms_transform@@XZ
?GetCMSsRGBProfile@gfxPlatform@@SAPAU_qcms_profile@@XZ
?GetCache@gfxFontCache@@SAPAV1@XZ
?GetCairo@gfxContext@@QAEPAU_cairo@@XZ
?GetChar@gfxTextRun@@QBE?BGI@Z
?GetCharCount@gfxSkipCharsBuilder@@QAEIXZ
?GetCharacterGlyphs@gfxTextRun@@QAEPBVCompressedGlyph@1@XZ
?GetCharsetForFontName@gfxFontUtils@@KAPBDGGG@Z
?GetClipExtents@gfxContext@@QAE?AUgfxRect@@XZ
?GetContainedGlyphWidthAppUnits@gfxGlyphExtents@@QBEGI@Z
?GetContentType@gfxASurface@@QBE?AW4gfxContentType@1@XZ
?GetContext@gfxAlphaBoxBlur@@QAEPAVgfxContext@@XZ
?GetDC@gfxWindowsSurface@@QAEPAUHDC__@@XZ
?GetDPI@gfxPDFSurface@@QAEXPAN0@Z
?GetDPI@gfxPlatform@@SAHXZ
?GetData@gfxASurface@@QAEPAXPBU_cairo_user_data_key@@@Z
?GetDataSize@gfxImageSurface@@QBEHXZ
?GetDefaultContextFlags@gfxASurface@@UBEHXZ
?GetDefaultContextFlags@gfxPDFSurface@@UBEHXZ
?GetDefaultContextFlags@gfxWindowsSurface@@UBEHXZ
?GetDesiredMinWidth@gfxFontMissingGlyphs@@SANI@Z
?GetDetailedGlyphs@gfxTextRun@@QAEPBUDetailedGlyph@1@I@Z
?GetDeviceColor@gfxContext@@QAEHAAUgfxRGBA@@@Z
?GetDeviceOffset@gfxASurface@@QBE?AUgfxPoint@@XZ
?GetDirection@gfxTextRun@@QBENXZ
?GetExpirationState@gfxFont@@QAEPAUnsExpirationState@@XZ
?GetExpirationState@gfxTextRun@@QAEPAUnsExpirationState@@XZ
?GetFamilies@gfxFontGroup@@QAEABVnsString@@XZ
?GetFamily@gfxUserFontSet@@IBEPAVgfxMixedFontFamily@@ABVnsAString_internal@@@Z
?GetFlags@gfxContext@@QBEHXZ
?GetFlags@gfxTextRun@@QBEIXZ
?GetFlattenedPath@gfxContext@@QAE?AU?$already_AddRefed@VgfxFlattenedPath@@@@XZ
?GetFontAt@gfxFontGroup@@UAEPAVgfxFont@@H@Z
?GetFontAt@gfxWindowsFontGroup@@UAEPAVgfxWindowsFont@@H@Z
?GetFontEntry@gfxFont@@QAEPAVgfxFontEntry@@XZ
?GetFontEntryAt@gfxWindowsFontGroup@@QAEPAVFontEntry@@H@Z
?GetFontFamilyList@gfxWindowsPlatform@@QAEXAAV?$nsTArray@V?$nsRefPtr@VFontFamily@@@@@@@Z
?GetFontGroup@gfxTextRun@@QBEPAVgfxFontGroup@@XZ
?GetFontList@gfxPlatform@@UAEIABVnsACString_internal@@0AAV?$nsTArray@VnsString@@@@@Z
?GetFontList@gfxWindowsFontGroup@@QBEABV?$nsTArray@V?$nsRefPtr@VFontEntry@@@@@@XZ
?GetFontList@gfxWindowsPlatform@@UAEIABVnsACString_internal@@0AAV?$nsTArray@VnsString@@@@@Z
?GetFontPrefLangFor@gfxPlatform@@SA?AW4eFontPrefLang@@PBD@Z
?GetGeneration@gfxFontGroup@@QAE_KXZ
?GetGeneration@gfxUserFontSet@@QAE_KXZ
?GetGenericFamily@gfxWindowsFontGroup@@QBEABVnsACString_internal@@XZ
?GetGlyphRun@GlyphRunIterator@gfxTextRun@@QAEPAUGlyphRun@2@XZ
?GetGlyphRuns@gfxTextRun@@QAEPBUGlyphRun@1@PAI@Z
?GetHashCode@gfxTextRun@@QBEIXZ
?GetImageSurface@gfxWindowsSurface@@QAE?AU?$already_AddRefed@VgfxImageSurface@@@@XZ
?GetLength@gfxFlattenedPath@@QAENXZ
?GetLength@gfxTextRun@@QAEIXZ
?GetMatrix@gfxPattern@@QBE?AUgfxMatrix@@XZ
?GetName@gfxFont@@QBEABVnsString@@XZ
?GetOrCreateGlyphExtents@gfxFont@@QAEPAVgfxGlyphExtents@@I@Z
?GetOriginalCharCount@gfxSkipChars@@QBEHXZ
?GetOriginalEnd@gfxSkipCharsIterator@@QBEHXZ
?GetOriginalOffset@gfxSkipCharsIterator@@QBEHXZ
?GetPattern@gfxContext@@QAE?AU?$already_AddRefed@VgfxPattern@@@@XZ
?GetPlatform@gfxPlatform@@SAPAV1@XZ
?GetPlatform@gfxWindowsPlatform@@SAPAV1@XZ
?GetPlatformCMSOutputProfile@gfxPlatform@@EAEPAU_qcms_profile@@XZ
?GetPlatformCMSOutputProfile@gfxWindowsPlatform@@EAEPAU_qcms_profile@@XZ
?GetPrefFontEntries@gfxWindowsPlatform@@QAEHABVnsCString@@PAV?$nsTArray@V?$nsRefPtr@VFontEntry@@@@@@@Z
?GetPrefFonts@gfxPlatform@@QAEXPBDAAVnsString@@H@Z
?GetPrefFonts@gfxWindowsFontGroup@@IAEXPBDAAV?$nsTArray@V?$nsRefPtr@VFontEntry@@@@@@@Z
?GetPrefLangName@gfxPlatform@@SAPBDW4eFontPrefLang@@@Z
?GetPrefsFontList@gfxFontUtils@@SAXPBDAAV?$nsTArray@VnsString@@@@@Z
?GetRefCount@gfxFont@@QAEHXZ
?GetRenderMode@gfxWindowsPlatform@@QAE?AW4RenderMode@1@XZ
?GetRenderingIntent@gfxPlatform@@SAHXZ
?GetSize@gfxImageSurface@@QBEABUgfxIntSize@@XZ
?GetSize@gfxPDFSurface@@QBEABUgfxSize@@XZ
?GetSkipChars@gfxTextRun@@QBEABVgfxSkipChars@@XZ
?GetSkippedOffset@gfxSkipCharsIterator@@QBEIXZ
?GetSolidColor@gfxPattern@@QAEHAAUgfxRGBA@@@Z
?GetStandardFamilyName@gfxWindowsPlatform@@UAEIABVnsAString_internal@@AAV2@@Z
?GetStringEnd@GlyphRunIterator@gfxTextRun@@QAEIXZ
?GetStringStart@GlyphRunIterator@gfxTextRun@@QAEIXZ
?GetStyle@gfxFont@@QBEPBUgfxFontStyle@@XZ
?GetStyle@gfxFontGroup@@QBEPBUgfxFontStyle@@XZ
?GetSurface@gfxPattern@@QAE?AU?$already_AddRefed@VgfxASurface@@@@XZ
?GetSurfaceWrapper@gfxASurface@@KAPAV1@PAU_cairo_surface@@@Z
?GetSyntheticBoldOffset@gfxFont@@QAEIXZ
?GetText8Bit@gfxTextRun@@QBEPBEXZ
?GetTextAt@gfxTextRun@@QAEPBXI@Z
?GetTextUnicode@gfxTextRun@@QBEPBGXZ
?GetTightGlyphExtentsAppUnits@gfxGlyphExtents@@QAEHPAVgfxFont@@PAVgfxContext@@IPAUgfxRect@@@Z
?GetTranslation@gfxMatrix@@QBE?AUgfxPoint@@XZ
?GetType@gfxASurface@@QBE?AW4gfxSurfaceType@1@XZ
?GetType@gfxPattern@@QBE?AW4GraphicsPatternType@1@XZ
?GetUnderlineOffset@gfxFontGroup@@UAENXZ
?GetUnderlineOffset@gfxWindowsFontGroup@@UAENXZ
?GetUserData@gfxTextRun@@QBEPAXXZ
?GetUserFillExtent@gfxContext@@QAE?AUgfxRect@@XZ
?GetUserFontSet@gfxFontGroup@@QAEPAVgfxUserFontSet@@XZ
?GetUserFontSetGeneration@gfxTextRun@@QAE_KXZ
?GetUserPathExtent@gfxContext@@QAE?AUgfxRect@@XZ
?GetUserStrokeExtent@gfxContext@@QAE?AUgfxRect@@XZ
?GroupFamilyListToArrayList@gfxWindowsFontGroup@@QAEXPAV?$nsTArray@V?$nsRefPtr@VFontEntry@@@@@@PAV?$nsTArray@E@@@Z
?HasCharacter@gfxFont@@QAEHI@Z
?HasDetailedGlyphs@gfxTextRun@@QAEHXZ
?HasError@gfxContext@@QAEHXZ
?HasFamily@gfxUserFontSet@@QBEHABVnsAString_internal@@@Z
?HasNonAxisAlignedTransform@gfxMatrix@@QBEHXZ
?HasNonIntegerTranslation@gfxMatrix@@QBEHXZ
?HasNonTranslation@gfxMatrix@@QBEHXZ

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 589KB - Virtual size: 589KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/AUTHORS.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/LICENSE.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/Privoxy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/README.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/config.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/AUTHORS.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/LICENSE.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/README.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/config.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/default.action
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/default.filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/coding.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/documentation.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/git.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/index.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/introduction.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/newrelease.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/testing.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/developer-manual/webserver-update.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/configuration.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/contact.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/copyright.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/general.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/index.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/installation.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/misc.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/faq/trouble.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/p_doc.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/actions-file.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/appendix.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/config.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/configuration.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/contact.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/copyright.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/files-in-use.jpg
.jpg
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/filter-file.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/index.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/installation.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/introduction.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/p_doc.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/proxy2.jpg
.jpg
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/proxy_setup.jpg
.jpg
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/quickstart.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/seealso.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/startup.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/templates.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/doc/user-manual/whatsnew.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/match-all.action
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/ntdll.exe
.exe windows:4 windows x86 arch:x86

efa7deaf95a285d8cf34ce29f07d980d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

gdi32

DeleteObject
GetStockObject

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFullPathNameA
GetHandleInformation
GetLastError
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetCurrentDirectoryA
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
lstrlenW

msvcrt

__argc
__getmainargs
__initenv
__p__acmdln
__lconv_init
__mb_cur_max
__p___argv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_access
_amsg_exit
_assert
_beginthread
_beginthreadex
_cexit
_close
_endthreadex
_errno
_exit
_initterm
_iob
_lock
_onexit
_open
_putenv
time
localtime
mktime
gmtime
difftime
_setjmp3
_stat
_strdup
_stricmp
_strnicmp
_tzset
_ultoa
_unlink
_unlock
_vsnprintf
_write
abort
atoi
calloc
exit
fclose
ferror
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getenv
islower
isprint
isspace
isupper
isxdigit
localeconv
longjmp
malloc
memcmp
memcpy
memmove
memset
printf
rand
realloc
setbuf
setlocale
signal
srand
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strstr
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen
wcstombs

shell32

ShellExecuteA
Shell_NotifyIconA

user32

CallWindowProcA
CheckMenuItem
ClientToScreen
CreateWindowExA
DefWindowProcA
DestroyMenu
DestroyWindow
DispatchMessageA
EnableMenuItem
GetClientRect
GetCursorPos
GetKeyState
GetMessageA
GetSubMenu
GetWindowLongA
GetWindowTextLengthA
KillTimer
LoadIconA
LoadMenuA
MessageBoxA
PostMessageA
PostQuitMessage
RegisterClassA
RegisterClassExA
RegisterWindowMessageA
SendMessageA
SetForegroundWindow
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
TrackPopupMenu
TranslateMessage
UpdateWindow

ws2_32

WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
getnameinfo
getsockname
getsockopt
htonl
inet_addr
ioctlsocket
listen
recv
recvfrom
select
send
setsockopt
shutdown
socket

Exports

Exports

Argc
Argv
BrotliBuildCodeLengthsHuffmanTable
BrotliBuildHuffmanTable
BrotliBuildSimpleHuffmanTable
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderHuffmanTreeGroupInit
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetParameter
BrotliDecoderStateCleanup
BrotliDecoderStateCleanupAfterMetablock
BrotliDecoderStateInit
BrotliDecoderStateMetablockBegin
BrotliDecoderTakeOutput
BrotliDecoderVersion
BrotliDefaultAllocFunc
BrotliDefaultFreeFunc
BrotliGetDictionary
BrotliGetTransforms
BrotliInitBitReader
BrotliSafeReadBits32Slow
BrotliSetDictionaryData
BrotliTransformDictionaryWord
BrotliWarmupBitReader
CanSystemSupportServices
CreateTrayWindow
EditFile
InitLogWindow
InitWin32
LogPutString
LogShowActivity
OnLogCommand
OnLogInitMenu
OnLogRButtonUp
OnLogTimer
ShowLogWindow
TermLogWindow
TrayAddIcon
TrayDeleteIcon
TraySetIcon
WinMain@16
__chk_fail
__memcpy_chk
__memset_chk
__mon_yday
__pth_gpointer_locked
__pthread_clock_nanosleep
__pthread_shallcancel
__stack_chk_fail
__stack_chk_fail_local
__stack_chk_guard
__strcat_chk
__strcpy_chk
__strncat_chk
__xl_f
_kBrotliContextLookupTable
_kBrotliPrefixCodeRanges
_pcre_OP_lengths
_pcre_default_tables
_pcre_find_bracket
_pcre_hspace_list
_pcre_is_newline
_pcre_jit_compile
_pcre_jit_exec
_pcre_jit_free
_pcre_jit_get_size
_pcre_jit_get_target
_pcre_ord2utf
_pcre_ucd_caseless_sets
_pcre_ucd_records
_pcre_ucd_stage1
_pcre_ucd_stage2
_pcre_ucp_gbtable
_pcre_ucp_gentype
_pcre_ucp_typerange
_pcre_utf8_table1
_pcre_utf8_table1_size
_pcre_utf8_table2
_pcre_utf8_table3
_pcre_utf8_table4
_pcre_utt
_pcre_utt_names
_pcre_utt_size
_pcre_valid_utf
_pcre_vspace_list
_pcre_was_newline
_pcre_xclass
_pthread_cleanup_dest
_pthread_get_state
_pthread_invoke_cancel
_pthread_key_dest
_pthread_rel_time_in_ms
_pthread_set_state
_pthread_setnobreak
_pthread_time_in_ms
_pthread_time_in_ms_from_timespec
_pthread_tryjoin
_pthread_wait_for_multiple_objects
_pthread_wait_for_single_object
accept_connection
acl_addr
actions_to_html
actions_to_line_of_text
actions_to_text
add_help_link
add_loader
add_to_iob
adler32
adler32_combine
adler32_combine64
adler32_z
alloc_http_response
any_loaded_file_changed
bRunAsService
bind_port
bindup
block_acl
block_statistics_mutex
block_url
buf_free
can_add_to_iob
certificate_mutex
cgi_default
cgi_edit_actions
cgi_edit_actions_add_url
cgi_edit_actions_add_url_form
cgi_edit_actions_for_url
cgi_edit_actions_list
cgi_edit_actions_remove_url
cgi_edit_actions_remove_url_form
cgi_edit_actions_section_add
cgi_edit_actions_section_remove
cgi_edit_actions_section_swap
cgi_edit_actions_submit
cgi_edit_actions_url
cgi_edit_actions_url_form
cgi_error_404
cgi_error_bad_param
cgi_error_disabled
cgi_error_file
cgi_error_file_read_only
cgi_error_memory
cgi_error_modified
cgi_error_no_template
cgi_error_parse
cgi_error_unknown
cgi_init_error_messages
cgi_redirect
cgi_robots_txt
cgi_send_banner
cgi_send_default_favicon
cgi_send_error_favicon
cgi_send_stylesheet
cgi_send_url_info_osd
cgi_send_user_manual
cgi_show_client_tags
cgi_show_request
cgi_show_status
cgi_show_url_info
cgi_toggle
cgi_toggle_client_tag
cgi_transparent_image
check_file_changed
check_negative_tag_patterns
chomp
clear_iob
client_body_filters_enabled
client_has_requested_tag
client_tag_match
client_tags_mutex
client_transfer_encoding
client_use_ssl
clients
close_client_and_server_ssl_connections
close_client_ssl_connection
close_server_ssl_connection
close_socket
close_unusable_connections
compile_dynamic_pcrs_job_list
cond_print
cond_print_set
configfile
connect_port_is_forbidden
connect_to
connection_destination_matches
connection_reuse_mutex
content_filters_enabled
content_requires_filtering
copy_action
crc32
crc32_combine
crc32_combine64
crc32_z
create_client_ssl_connection
create_pattern_spec
create_server_ssl_connection
current_action_to_html
daemon_mode
data_is_available
debug_level_is_enabled
decompress_iob
default_exports
destroy_list
direct_response
disable_client_specific_tag
disable_logging
dispatch_cgi
do_sema_b_wait_intern
drain_and_close_socket
dump_map
edit_free_file
edit_parse_actions_file
edit_read_actions_file
edit_read_file
edit_read_line
edit_write_file
enable_client_specific_tag
enforce_sane_certificate_state
enlist
enlist_first
enlist_unique
enlist_unique_header
error_response
execute_client_body_filters
execute_content_filters
file_exists
files
filter_statistics_mutex
filters_available
finish_http_response
flush_iob
forget_connection
forward_url
forwarded_connect
free_action
free_action_spec
free_alias_list
free_certificate_chain
free_csp_resources
free_current_action
free_http_request
free_http_response
free_map
free_pattern_spec
g_bCloseHidesWindow
g_bHighlightMessages
g_bLimitBufferSize
g_bLogMessages
g_bShowActivityAnimation
g_bShowLogWindow
g_bShowOnTaskBar
g_default_actions_file
g_default_filterfile
g_hInstance
g_hiconApp
g_hwndLogFrame
g_nCmdShow
g_nFontSize
g_nMaxBufferLines
g_szFontFaceName
g_trustfile
g_user_actions_file
g_user_filterfile
gai_strerrorA
gai_strerrorW
get_action_token
get_actions
get_block_reason_count
get_certificate_serial
get_certificate_valid_from_date
get_certificate_valid_to_date
get_char_param
get_crc_table
get_destination_from_headers
get_destination_from_https_headers
get_expected_content_length
get_filter
get_filter_statistics
get_header
get_header_value
get_host_information
get_http_time
get_next_tag_timeout_for_client
get_number_param
get_string_param
get_tag_list_for_client
get_url_actions
gif_deanimate
global_toggle_state
gmtime_mutex
hash_string
header_adjust_content_length
host_is_ip_address
html_encode
html_encode_and_free_original
image_blank_data
image_blank_length
image_pattern_data
image_pattern_length
inflate
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
inflate_copyright
inflate_fast
inflate_table
init_action
init_current_action
init_domain_components
init_error_log
init_list
init_log_module
initialize_reusable_connections
install_service
is_imageurl
is_ssl_pending
is_untrusted_url
jb_err_to_string
kBrotliBitMask
list_append_list_unique
list_contains_item
list_duplicate
list_is_empty
list_remove_all
list_remove_item
list_remove_list
list_to_text
load_action_files
load_config
load_re_filterfiles
load_trustfile
localtime_mutex
log_error
log_init_mutex
log_mutex
lookup
make_certs_path
make_path
malloc_or_die
map
map_block_keep
map_block_killer
map_conditional
mark_connection_closed
match_portlist
mbedtls_aes_crypt_cbc
mbedtls_aes_crypt_cfb128
mbedtls_aes_crypt_cfb8
mbedtls_aes_crypt_ctr
mbedtls_aes_crypt_ecb
mbedtls_aes_crypt_ofb
mbedtls_aes_crypt_xts
mbedtls_aes_decrypt
mbedtls_aes_encrypt
mbedtls_aes_free
mbedtls_aes_init
mbedtls_aes_self_test
mbedtls_aes_setkey_dec
mbedtls_aes_setkey_enc
mbedtls_aes_xts_free
mbedtls_aes_xts_init
mbedtls_aes_xts_setkey_dec
mbedtls_aes_xts_setkey_enc
mbedtls_arc4_crypt
mbedtls_arc4_free
mbedtls_arc4_init
mbedtls_arc4_self_test
mbedtls_arc4_setup
mbedtls_asn1_find_named_data
mbedtls_asn1_free_named_data
mbedtls_asn1_free_named_data_list
mbedtls_asn1_get_alg
mbedtls_asn1_get_alg_null
mbedtls_asn1_get_bitstring
mbedtls_asn1_get_bitstring_null
mbedtls_asn1_get_bool
mbedtls_asn1_get_int
mbedtls_asn1_get_len
mbedtls_asn1_get_mpi
mbedtls_asn1_get_sequence_of
mbedtls_asn1_get_tag
mbedtls_asn1_store_named_data
mbedtls_asn1_write_algorithm_identifier
mbedtls_asn1_write_bitstring
mbedtls_asn1_write_bool
mbedtls_asn1_write_ia5_string
mbedtls_asn1_write_int
mbedtls_asn1_write_len
mbedtls_asn1_write_mpi
mbedtls_asn1_write_null
mbedtls_asn1_write_octet_string
mbedtls_asn1_write_oid
mbedtls_asn1_write_printable_string
mbedtls_asn1_write_raw_buffer
mbedtls_asn1_write_tag
mbedtls_asn1_write_tagged_string
mbedtls_asn1_write_utf8_string
mbedtls_base64_decode
mbedtls_base64_encode
mbedtls_base64_self_test
mbedtls_blowfish_crypt_cbc
mbedtls_blowfish_crypt_cfb64
mbedtls_blowfish_crypt_ctr
mbedtls_blowfish_crypt_ecb
mbedtls_blowfish_free
mbedtls_blowfish_init
mbedtls_blowfish_setkey
mbedtls_camellia_crypt_cbc
mbedtls_camellia_crypt_cfb128
mbedtls_camellia_crypt_ctr
mbedtls_camellia_crypt_ecb
mbedtls_camellia_free
mbedtls_camellia_init
mbedtls_camellia_self_test
mbedtls_camellia_setkey_dec
mbedtls_camellia_setkey_enc
mbedtls_ccm_auth_decrypt
mbedtls_ccm_encrypt_and_tag
mbedtls_ccm_free
mbedtls_ccm_init
mbedtls_ccm_self_test
mbedtls_ccm_setkey
mbedtls_ccm_star_auth_decrypt
mbedtls_ccm_star_encrypt_and_tag
mbedtls_chacha20_crypt
mbedtls_chacha20_free
mbedtls_chacha20_init
mbedtls_chacha20_self_test
mbedtls_chacha20_setkey
mbedtls_chacha20_starts
mbedtls_chacha20_update
mbedtls_chachapoly_auth_decrypt
mbedtls_chachapoly_encrypt_and_tag
mbedtls_chachapoly_finish
mbedtls_chachapoly_free
mbedtls_chachapoly_init
mbedtls_chachapoly_self_test
mbedtls_chachapoly_setkey
mbedtls_chachapoly_starts
mbedtls_chachapoly_update
mbedtls_chachapoly_update_aad
mbedtls_cipher_auth_decrypt
mbedtls_cipher_auth_encrypt
mbedtls_cipher_check_tag
mbedtls_cipher_crypt
mbedtls_cipher_definitions
mbedtls_cipher_finish
mbedtls_cipher_free
mbedtls_cipher_info_from_string
mbedtls_cipher_info_from_type
mbedtls_cipher_info_from_values
mbedtls_cipher_init
mbedtls_cipher_list
mbedtls_cipher_reset
mbedtls_cipher_set_iv
mbedtls_cipher_set_padding_mode
mbedtls_cipher_setkey
mbedtls_cipher_setup
mbedtls_cipher_supported
mbedtls_cipher_update
mbedtls_cipher_update_ad
mbedtls_cipher_write_tag
mbedtls_ctr_drbg_free
mbedtls_ctr_drbg_init
mbedtls_ctr_drbg_random
mbedtls_ctr_drbg_random_with_add
mbedtls_ctr_drbg_reseed
mbedtls_ctr_drbg_seed
mbedtls_ctr_drbg_seed_entropy_len
mbedtls_ctr_drbg_self_test
mbedtls_ctr_drbg_set_entropy_len
mbedtls_ctr_drbg_set_prediction_resistance
mbedtls_ctr_drbg_set_reseed_interval
mbedtls_ctr_drbg_update
mbedtls_ctr_drbg_update_ret
mbedtls_ctr_drbg_update_seed_file
mbedtls_ctr_drbg_write_seed_file
mbedtls_debug_print_buf
mbedtls_debug_print_crt

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/blocked
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-404
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-bad-param
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-disabled
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-file
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-file-read-only
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-modified
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-error-parse
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/cgi-style.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/client-tags
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/connect-failed
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/connection-timeout
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/default
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-add-url-form
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-for-url
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-for-url-filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-for-url-string-filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-list
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-list-button
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-list-section
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-list-url
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-remove-url-form
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/edit-actions-url-form
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/forwarding-failed
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/mod-local-help
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/mod-support-and-service
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/mod-title
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/mod-unstable-warning
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/no-server-data
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/no-such-domain
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/show-request
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/show-status
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/show-status-file
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/show-url-info
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/toggle
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/toggle-mini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/untrusted
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/templates/url-info-osd.xml
.xml
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/trust.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/user.action
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/data/user.filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/default.action
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/default.filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/coding.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/documentation.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/git.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/index.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/introduction.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/newrelease.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/testing.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/developer-manual/webserver-update.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/configuration.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/contact.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/copyright.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/general.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/index.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/installation.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/misc.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/faq/trouble.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/p_doc.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/actions-file.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/appendix.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/config.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/configuration.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/contact.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/copyright.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/files-in-use.jpg
.jpg
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/filter-file.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/index.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/installation.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/introduction.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/p_doc.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/proxy2.jpg
.jpg
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/proxy_setup.jpg
.jpg
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/quickstart.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/seealso.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/startup.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/templates.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/doc/user-manual/whatsnew.html
.html
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/match-all.action
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/blocked
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-404
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-bad-param
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-disabled
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-file
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-file-read-only
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-modified
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-error-parse
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/cgi-style.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/client-tags
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/connect-failed
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/connection-timeout
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/default
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-add-url-form
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-for-url
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-for-url-filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-for-url-string-filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-list
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-list-button
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-list-section
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-list-url
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-remove-url-form
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/edit-actions-url-form
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/forwarding-failed
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/mod-local-help
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/mod-support-and-service
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/mod-title
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/mod-unstable-warning
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/no-server-data
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/no-such-domain
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/show-request
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/show-status
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/show-status-file
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/show-url-info
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/toggle
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/toggle-mini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/untrusted
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/templates/url-info-osd.xml
.xml
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/trust.txt
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/user.action
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Privoxy for Windows and Linux 3.0.31/user.filter
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/ProtonVPN_win_v1.18.5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/mfc100cht.dll
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb
Signer

Actual PE Digest

12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/msi.dll
.dll regsvr32 windows:10 windows x64 arch:x64

0ac916d33b90051b9b85935d197891d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

msi.pdb

Imports

msvcrt

free
malloc
_initterm
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
strcmp
memset
memcpy_s
memcpy
memcmp
_ui64tow_s
qsort
_wcstoui64
_amsg_exit
_wcsnicmp
_purecall
_wtoi
_wcsicmp
_vsnprintf
_itoa_s
_CxxThrowException
isdigit
strtol
_itow_s
_ui64tow
wcsstr
wcstol
_wtoi64
_i64tow_s
_vsnwprintf
_XcptFilter
_itow
rand
time
wcschr
srand
iswdigit
wcstoul
towlower
memmove
bsearch
wcsncmp
__C_specific_handler
wcscmp

ntdll

RtlRandom
RtlDestroyEnvironment
EtwTraceMessage
RtlCreateEnvironment
RtlCreateEnvironmentEx
RtlExpandEnvironmentStrings
RtlQueryEnvironmentVariable
RtlSetEnvironmentVar
RtlGetFullPathName_U
RtlGetCurrentServiceSessionId
NtOpenKey
NtClose
NtQueryValueKey
RtlRandomEx
NtQuerySystemInformation
NtSetSecurityObject
NtSetInformationFile
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtUnmapViewOfSection
NtMapViewOfSection
RtlNtStatusToDosErrorNoTeb

advapi32

GetAce
DuplicateToken
SetEntriesInAclW
BuildTrusteeWithSidW
GetSidLengthRequired
GetSidSubAuthorityCount
GetSidSubAuthority
RegOpenKeyW
RegEnableReflectionKey
RegDisableReflectionKey
RegSetKeySecurity
RegQueryReflectionKey
SetServiceObjectSecurity
ChangeServiceConfigW
CreateServiceW
EnumDependentServicesW
StartServiceW
DeleteService
QueryServiceConfigW
QueryServiceObjectSecurity
QueryServiceStatus
ControlService
GetServiceDisplayNameW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupAccountNameW
GetFileSecurityW
RegEnumKeyW
RegGetKeySecurity
EqualSid
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorControl
ConvertSidToStringSidW
CopySid
IsValidSecurityDescriptor
PrivilegeCheck
SetFileSecurityW
GetUserNameW
CreateProcessAsUserW
SetTokenInformation
GetTokenInformation
SetThreadToken
DuplicateTokenEx
RegCreateKeyExW
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegConnectRegistryW
DeregisterEventSource
ReportEventW
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
GetLengthSid
FreeSid
InitializeAcl
AddAccessAllowedAce
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetSecurityDescriptorLength
MakeSelfRelativeSD
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegisterEventSourceW

kernel32

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
EnumResourceLanguagesW
SizeofResource
EnumResourceNamesW
SetFileTime
QueryDosDeviceW
GetNumberFormatW
GlobalUnlock
FileTimeToDosDateTime
GlobalReAlloc
IsValidCodePage
DosDateTimeToFileTime
ResetEvent
GetSystemTimeAsFileTime
GetFinalPathNameByHandleW
GetLongPathNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEndOfFile
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetDriveTypeW
MoveFileW
HeapFree
HeapReAlloc
GlobalLock
GetProcessHeap
SearchPathW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
Wow64DisableWow64FsRedirection
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
GetTickCount
DeleteFileW
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetLastError
GetCurrentProcess
Sleep
GetSystemInfo
GetVersionExW
lstrlenW
GetModuleFileNameW
DisableThreadLibraryCalls
GetEnvironmentVariableW
EnterCriticalSection
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GlobalFree
GlobalAlloc
GetSystemDefaultLangID
OutputDebugStringW
CompareStringW
lstrcmpiW
CreateFileW
FormatMessageW
LocalFree
CreateDirectoryW
QueryPerformanceFrequency
TlsFree
SetLastError
DeactivateActCtx
LoadLibraryExW
ActivateActCtx
LoadLibraryW
FindActCtxSectionStringW
CreateActCtxW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
FreeLibrary
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFileSize
SetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetProcAddress
SetErrorMode
lstrcmpiA
FindResourceExW
LoadResource
LockResource
GetLocalTime
GetModuleFileNameA
CompareStringA
SetEvent
WaitForSingleObject
OpenEventW
CreateEventW
CreateThread
LocalAlloc
IsDebuggerPresent
GetCurrentProcessId
ResumeThread
GetSystemDirectoryW
TlsSetValue
TlsGetValue
TlsAlloc
CompareFileTime
TerminateProcess
GetNativeSystemInfo
GetUserDefaultLangID
GetComputerNameW
MulDiv
GetLocaleInfoW
GetProfileStringW
GetPrivateProfileStringW
WriteProfileStringW
WritePrivateProfileStringW
ReadFile
SetFilePointer
PowerCreateRequest
PowerSetRequest
PowerClearRequest
ExitThread
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
ExitProcess
GetTempFileNameW
OpenProcess
GetACP
lstrcmpW
OpenThread
WaitForMultipleObjects
FreeLibraryAndExitThread
TerminateThread
HeapAlloc
Wow64RevertWow64FsRedirection
WriteFile
GetOverlappedResult
VirtualFree
VirtualAlloc
ReleaseMutex
FlushFileBuffers
GetTempPathW
DebugBreak
GetExitCodeProcess
QueryPerformanceCounter
MoveFileExW
VirtualQuery
GetCurrentDirectoryW
FindFirstFileW
SetFileAttributesW
FindNextFileW
FindClose
RemoveDirectoryW
GetFileTime
CreateMutexW
OpenMutexW
GetShortPathNameW

user32

EnableWindow
IsCharLowerW
LoadStringW
CharNextA
CharNextW
CharUpperW
MessageBoxW
GetActiveWindow
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
PostQuitMessage
ExitWindowsEx
GetSystemMetrics
GetDC
ReleaseDC
PostMessageW
SystemParametersInfoW
IsWindowEnabled
IsDialogMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
DestroyWindow
UnregisterClassW
GetDlgItem
SetWindowTextW
ShowWindow
SetForegroundWindow
SendMessageW
InvalidateRect
IsWindowVisible
GetUserObjectInformationW
LoadCursorW
GetWindowRect
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
SetDlgItemTextW
CreateDialogParamW
MoveWindow
SetFocus
LoadIconW
SetWindowPos
GetDlgItemTextW
EndDialog
GetWindowTextLengthW
GetWindowTextW
DialogBoxParamW
GetSystemMenu
RemoveMenu
CopyRect
DrawTextW
MapWindowPoints
GetClientRect
RegisterWindowMessageW
SetWindowLongPtrW
GetWindowLongPtrW
GetFocus
GetSysColor
CharUpperBuffW
SendMessageTimeoutW
CharPrevW
EnableMenuItem
SetUserObjectSecurity
EnumWindows
GetWindow
GetWindowThreadProcessId
SetCursor
GetProcessWindowStation
CharLowerW

shell32

CommandLineToArgvW

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
EnumFontFamiliesExW
CreateFontW
GetTextExtentPoint32W
RemoveFontResourceW
AddFontResourceW
DeleteObject
GetTextMetricsW
GetTextFaceW
SelectObject
CreateFontIndirectW
GetDeviceCaps

rpcrt4

RpcAsyncCompleteCall
I_RpcExceptionFilter
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
RpcAsyncInitializeHandle
RpcBindingFree
Ndr64AsyncClientCall
RpcBindingSetAuthInfoExW
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrClientCall3
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
RpcAsyncCancelCall

ole32

HWND_UserUnmarshal
HWND_UserFree
HWND_UserFree64
HWND_UserSize64
HWND_UserSize
HWND_UserMarshal
HWND_UserMarshal64
HWND_UserUnmarshal64
IIDFromString
CoTaskMemAlloc
CoTaskMemFree
PropVariantClear
CoCreateGuid

bcrypt

BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptCreateHash
BCryptDestroyHash

api-ms-win-security-base-l1-1-0

RevertToSelf
CreateWellKnownSid
ImpersonateLoggedOnUser

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Migrate10CachedPackagesA
Migrate10CachedPackagesW
MsiAdvertiseProductA
MsiAdvertiseProductExA
MsiAdvertiseProductExW
MsiAdvertiseProductW
MsiAdvertiseScriptA
MsiAdvertiseScriptW
MsiApplyMultiplePatchesA
MsiApplyMultiplePatchesW
MsiApplyPatchA
MsiApplyPatchW
MsiBeginTransactionA
MsiBeginTransactionW
MsiCloseAllHandles
MsiCloseHandle
MsiCollectUserInfoA
MsiCollectUserInfoW
MsiConfigureFeatureA
MsiConfigureFeatureFromDescriptorA
MsiConfigureFeatureFromDescriptorW
MsiConfigureFeatureW
MsiConfigureProductA
MsiConfigureProductExA
MsiConfigureProductExW
MsiConfigureProductW
MsiCreateAndVerifyInstallerDirectory
MsiCreateRecord
MsiCreateTransformSummaryInfoA
MsiCreateTransformSummaryInfoW
MsiDatabaseApplyTransformA
MsiDatabaseApplyTransformW
MsiDatabaseCommit
MsiDatabaseExportA
MsiDatabaseExportW
MsiDatabaseGenerateTransformA
MsiDatabaseGenerateTransformW
MsiDatabaseGetPrimaryKeysA
MsiDatabaseGetPrimaryKeysW
MsiDatabaseImportA
MsiDatabaseImportW
MsiDatabaseIsTablePersistentA
MsiDatabaseIsTablePersistentW
MsiDatabaseMergeA
MsiDatabaseMergeW
MsiDatabaseOpenViewA
MsiDatabaseOpenViewW
MsiDecomposeDescriptorA
MsiDecomposeDescriptorW
MsiDeleteUserDataA
MsiDeleteUserDataW
MsiDetermineApplicablePatchesA
MsiDetermineApplicablePatchesW
MsiDeterminePatchSequenceA
MsiDeterminePatchSequenceW
MsiDoActionA
MsiDoActionW
MsiEnableLogA
MsiEnableLogW
MsiEnableUIPreview
MsiEndTransaction
MsiEnumClientsA
MsiEnumClientsExA
MsiEnumClientsExW
MsiEnumClientsW
MsiEnumComponentCostsA
MsiEnumComponentCostsW
MsiEnumComponentQualifiersA
MsiEnumComponentQualifiersW
MsiEnumComponentsA
MsiEnumComponentsExA
MsiEnumComponentsExW
MsiEnumComponentsW
MsiEnumFeaturesA
MsiEnumFeaturesW
MsiEnumPatchesA
MsiEnumPatchesExA
MsiEnumPatchesExW
MsiEnumPatchesW
MsiEnumProductsA
MsiEnumProductsExA
MsiEnumProductsExW
MsiEnumProductsW
MsiEnumRelatedProductsA
MsiEnumRelatedProductsW
MsiEvaluateConditionA
MsiEvaluateConditionW
MsiExtractPatchXMLDataA
MsiExtractPatchXMLDataW
MsiFormatRecordA
MsiFormatRecordW
MsiGetActiveDatabase
MsiGetComponentPathA
MsiGetComponentPathExA
MsiGetComponentPathExW
MsiGetComponentPathW
MsiGetComponentStateA
MsiGetComponentStateW
MsiGetDatabaseState
MsiGetFeatureCostA
MsiGetFeatureCostW
MsiGetFeatureInfoA
MsiGetFeatureInfoW
MsiGetFeatureStateA
MsiGetFeatureStateW
MsiGetFeatureUsageA
MsiGetFeatureUsageW
MsiGetFeatureValidStatesA
MsiGetFeatureValidStatesW
MsiGetFileHashA
MsiGetFileHashW
MsiGetFileSignatureInformationA
MsiGetFileSignatureInformationW
MsiGetFileVersionA
MsiGetFileVersionW
MsiGetLanguage
MsiGetLastErrorRecord
MsiGetMode
MsiGetPatchFileListA
MsiGetPatchFileListW
MsiGetPatchInfoA
MsiGetPatchInfoExA
MsiGetPatchInfoExW
MsiGetPatchInfoW
MsiGetProductCodeA
MsiGetProductCodeFromPackageCodeA
MsiGetProductCodeFromPackageCodeW
MsiGetProductCodeW
MsiGetProductInfoA
MsiGetProductInfoExA
MsiGetProductInfoExW
MsiGetProductInfoFromScriptA
MsiGetProductInfoFromScriptW
MsiGetProductInfoW
MsiGetProductPropertyA
MsiGetProductPropertyW
MsiGetPropertyA
MsiGetPropertyW
MsiGetShortcutTargetA
MsiGetShortcutTargetW
MsiGetSourcePathA
MsiGetSourcePathW
MsiGetSummaryInformationA
MsiGetSummaryInformationW
MsiGetTargetPathA
MsiGetTargetPathW
MsiGetUserInfoA
MsiGetUserInfoW
MsiInstallMissingComponentA
MsiInstallMissingComponentW
MsiInstallMissingFileA
MsiInstallMissingFileW
MsiInstallProductA
MsiInstallProductW
MsiInvalidateFeatureCache
MsiIsProductElevatedA
MsiIsProductElevatedW
MsiJoinTransaction
MsiLoadStringA
MsiLoadStringW
MsiLocateComponentA
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiPreviewBillboardA
MsiPreviewBillboardW
MsiPreviewDialogA
MsiPreviewDialogW
MsiProcessAdvertiseScriptA
MsiProcessAdvertiseScriptW
MsiProcessMessage
MsiProvideAssemblyA
MsiProvideAssemblyW
MsiProvideComponentA
MsiProvideComponentFromDescriptorA
MsiProvideComponentFromDescriptorW
MsiProvideComponentW
MsiProvideQualifiedComponentA
MsiProvideQualifiedComponentExA
MsiProvideQualifiedComponentExW
MsiProvideQualifiedComponentW
MsiQueryComponentStateA
MsiQueryComponentStateW
MsiQueryFeatureStateA
MsiQueryFeatureStateExA
MsiQueryFeatureStateExW
MsiQueryFeatureStateFromDescriptorA
MsiQueryFeatureStateFromDescriptorW
MsiQueryFeatureStateW
MsiQueryProductStateA
MsiQueryProductStateW
MsiRecordClearData
MsiRecordDataSize
MsiRecordGetFieldCount
MsiRecordGetInteger
MsiRecordGetStringA
MsiRecordGetStringW
MsiRecordIsNull
MsiRecordReadStream
MsiRecordSetInteger
MsiRecordSetStreamA
MsiRecordSetStreamW
MsiRecordSetStringA
MsiRecordSetStringW
MsiReinstallFeatureA
MsiReinstallFeatureFromDescriptorA
MsiReinstallFeatureFromDescriptorW
MsiReinstallFeatureW
MsiReinstallProductA
MsiReinstallProductW
MsiRemovePatchesA
MsiRemovePatchesW
MsiSequenceA
MsiSequenceW
MsiSetComponentStateA
MsiSetComponentStateW
MsiSetExternalUIA
MsiSetExternalUIRecord
MsiSetExternalUIW
MsiSetFeatureAttributesA
MsiSetFeatureAttributesW
MsiSetFeatureStateA
MsiSetFeatureStateW
MsiSetInstallLevel
MsiSetInternalUI
MsiSetMode
MsiSetOfflineContextW
MsiSetPropertyA
MsiSetPropertyW
MsiSetTargetPathA
MsiSetTargetPathW
MsiSourceListAddMediaDiskA
MsiSourceListAddMediaDiskW
MsiSourceListAddSourceA
MsiSourceListAddSourceExA
MsiSourceListAddSourceExW
MsiSourceListAddSourceW
MsiSourceListClearAllA
MsiSourceListClearAllExA
MsiSourceListClearAllExW
MsiSourceListClearAllW
MsiSourceListClearMediaDiskA
MsiSourceListClearMediaDiskW
MsiSourceListClearSourceA
MsiSourceListClearSourceW
MsiSourceListEnumMediaDisksA
MsiSourceListEnumMediaDisksW
MsiSourceListEnumSourcesA
MsiSourceListEnumSourcesW
MsiSourceListForceResolutionA
MsiSourceListForceResolutionExA
MsiSourceListForceResolutionExW
MsiSourceListForceResolutionW
MsiSourceListGetInfoA
MsiSourceListGetInfoW
MsiSourceListSetInfoA
MsiSourceListSetInfoW
MsiSummaryInfoGetPropertyA
MsiSummaryInfoGetPropertyCount
MsiSummaryInfoGetPropertyW
MsiSummaryInfoPersist
MsiSummaryInfoSetPropertyA
MsiSummaryInfoSetPropertyW
MsiUseFeatureA
MsiUseFeatureExA
MsiUseFeatureExW
MsiUseFeatureW
MsiVerifyDiskSpace
MsiVerifyPackageA
MsiVerifyPackageW
MsiViewClose
MsiViewExecute
MsiViewFetch
MsiViewGetColumnInfo
MsiViewGetErrorA
MsiViewGetErrorW
MsiViewModify
QueryInstanceCount

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 658KB - Virtual size: 657KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/dbgcore.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:f4:b4:91:12:3a:c4:cd:bd:68:04:2d
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

29/10/2020, 09:57

Not After

30/10/2023, 09:57

Subject

SERIALNUMBER=CHE-354.686.492,CN=Proton Technologies AG,O=Proton Technologies AG,STREET=Route de la Galaise 32,L=Plan-les-Ouates,ST=Geneva,C=CH,1.2.840.113549.1.9.1=#0c0f61646d696e4070726f746f6e2e6d65,1.3.6.1.4.1.311.60.2.1.2=#130647656e657661,1.3.6.1.4.1.311.60.2.1.3=#13024348,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

19/02/2018, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G2

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e1:b6:df:84:dd:0a:a7:59:b6:a0:12:b6:87:0a:4e:47:f6:98:b0:54:ab:37:59:30:d7:c1:37:41:61:b4:8d:21
Signer

Actual PE Digest

e1:b6:df:84:dd:0a:a7:59:b6:a0:12:b6:87:0a:4e:47:f6:98:b0:54:ab:37:59:30:d7:c1:37:41:61:b4:8d:21

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Mindaugas\dev\ProtonVPN\win-app\src\ProtonVPN.InstallWrapper\obj\Release\ProtonVPN_win_v1.18.5.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/mfc100cht.dll
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb
Signer

Actual PE Digest

12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProtonVPN 1.18.5/sxs/msi.dll
.dll regsvr32 windows:10 windows x64 arch:x64

0ac916d33b90051b9b85935d197891d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

msi.pdb

Imports

msvcrt

free
malloc
_initterm
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
strcmp
memset
memcpy_s
memcpy
memcmp
_ui64tow_s
qsort
_wcstoui64
_amsg_exit
_wcsnicmp
_purecall
_wtoi
_wcsicmp
_vsnprintf
_itoa_s
_CxxThrowException
isdigit
strtol
_itow_s
_ui64tow
wcsstr
wcstol
_wtoi64
_i64tow_s
_vsnwprintf
_XcptFilter
_itow
rand
time
wcschr
srand
iswdigit
wcstoul
towlower
memmove
bsearch
wcsncmp
__C_specific_handler
wcscmp

ntdll

RtlRandom
RtlDestroyEnvironment
EtwTraceMessage
RtlCreateEnvironment
RtlCreateEnvironmentEx
RtlExpandEnvironmentStrings
RtlQueryEnvironmentVariable
RtlSetEnvironmentVar
RtlGetFullPathName_U
RtlGetCurrentServiceSessionId
NtOpenKey
NtClose
NtQueryValueKey
RtlRandomEx
NtQuerySystemInformation
NtSetSecurityObject
NtSetInformationFile
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtUnmapViewOfSection
NtMapViewOfSection
RtlNtStatusToDosErrorNoTeb

advapi32

GetAce
DuplicateToken
SetEntriesInAclW
BuildTrusteeWithSidW
GetSidLengthRequired
GetSidSubAuthorityCount
GetSidSubAuthority
RegOpenKeyW
RegEnableReflectionKey
RegDisableReflectionKey
RegSetKeySecurity
RegQueryReflectionKey
SetServiceObjectSecurity
ChangeServiceConfigW
CreateServiceW
EnumDependentServicesW
StartServiceW
DeleteService
QueryServiceConfigW
QueryServiceObjectSecurity
QueryServiceStatus
ControlService
GetServiceDisplayNameW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupAccountNameW
GetFileSecurityW
RegEnumKeyW
RegGetKeySecurity
EqualSid
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorControl
ConvertSidToStringSidW
CopySid
IsValidSecurityDescriptor
PrivilegeCheck
SetFileSecurityW
GetUserNameW
CreateProcessAsUserW
SetTokenInformation
GetTokenInformation
SetThreadToken
DuplicateTokenEx
RegCreateKeyExW
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegConnectRegistryW
DeregisterEventSource
ReportEventW
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
GetLengthSid
FreeSid
InitializeAcl
AddAccessAllowedAce
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetSecurityDescriptorLength
MakeSelfRelativeSD
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegisterEventSourceW

kernel32

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
EnumResourceLanguagesW
SizeofResource
EnumResourceNamesW
SetFileTime
QueryDosDeviceW
GetNumberFormatW
GlobalUnlock
FileTimeToDosDateTime
GlobalReAlloc
IsValidCodePage
DosDateTimeToFileTime
ResetEvent
GetSystemTimeAsFileTime
GetFinalPathNameByHandleW
GetLongPathNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEndOfFile
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetDriveTypeW
MoveFileW
HeapFree
HeapReAlloc
GlobalLock
GetProcessHeap
SearchPathW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
Wow64DisableWow64FsRedirection
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
GetTickCount
DeleteFileW
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetLastError
GetCurrentProcess
Sleep
GetSystemInfo
GetVersionExW
lstrlenW
GetModuleFileNameW
DisableThreadLibraryCalls
GetEnvironmentVariableW
EnterCriticalSection
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GlobalFree
GlobalAlloc
GetSystemDefaultLangID
OutputDebugStringW
CompareStringW
lstrcmpiW
CreateFileW
FormatMessageW
LocalFree
CreateDirectoryW
QueryPerformanceFrequency
TlsFree
SetLastError
DeactivateActCtx
LoadLibraryExW
ActivateActCtx
LoadLibraryW
FindActCtxSectionStringW
CreateActCtxW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
FreeLibrary
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFileSize
SetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetProcAddress
SetErrorMode
lstrcmpiA
FindResourceExW
LoadResource
LockResource
GetLocalTime
GetModuleFileNameA
CompareStringA
SetEvent
WaitForSingleObject
OpenEventW
CreateEventW
CreateThread
LocalAlloc
IsDebuggerPresent
GetCurrentProcessId
ResumeThread
GetSystemDirectoryW
TlsSetValue
TlsGetValue
TlsAlloc
CompareFileTime
TerminateProcess
GetNativeSystemInfo
GetUserDefaultLangID
GetComputerNameW
MulDiv
GetLocaleInfoW
GetProfileStringW
GetPrivateProfileStringW
WriteProfileStringW
WritePrivateProfileStringW
ReadFile
SetFilePointer
PowerCreateRequest
PowerSetRequest
PowerClearRequest
ExitThread
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
ExitProcess
GetTempFileNameW
OpenProcess
GetACP
lstrcmpW
OpenThread
WaitForMultipleObjects
FreeLibraryAndExitThread
TerminateThread
HeapAlloc
Wow64RevertWow64FsRedirection
WriteFile
GetOverlappedResult
VirtualFree
VirtualAlloc
ReleaseMutex
FlushFileBuffers
GetTempPathW
DebugBreak
GetExitCodeProcess
QueryPerformanceCounter
MoveFileExW
VirtualQuery
GetCurrentDirectoryW
FindFirstFileW
SetFileAttributesW
FindNextFileW
FindClose
RemoveDirectoryW
GetFileTime
CreateMutexW
OpenMutexW
GetShortPathNameW

user32

EnableWindow
IsCharLowerW
LoadStringW
CharNextA
CharNextW
CharUpperW
MessageBoxW
GetActiveWindow
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
PostQuitMessage
ExitWindowsEx
GetSystemMetrics
GetDC
ReleaseDC
PostMessageW
SystemParametersInfoW
IsWindowEnabled
IsDialogMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
DestroyWindow
UnregisterClassW
GetDlgItem
SetWindowTextW
ShowWindow
SetForegroundWindow
SendMessageW
InvalidateRect
IsWindowVisible
GetUserObjectInformationW
LoadCursorW
GetWindowRect
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
SetDlgItemTextW
CreateDialogParamW
MoveWindow
SetFocus
LoadIconW
SetWindowPos
GetDlgItemTextW
EndDialog
GetWindowTextLengthW
GetWindowTextW
DialogBoxParamW
GetSystemMenu
RemoveMenu
CopyRect
DrawTextW
MapWindowPoints
GetClientRect
RegisterWindowMessageW
SetWindowLongPtrW
GetWindowLongPtrW
GetFocus
GetSysColor
CharUpperBuffW
SendMessageTimeoutW
CharPrevW
EnableMenuItem
SetUserObjectSecurity
EnumWindows
GetWindow
GetWindowThreadProcessId
SetCursor
GetProcessWindowStation
CharLowerW

shell32

CommandLineToArgvW

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
EnumFontFamiliesExW
CreateFontW
GetTextExtentPoint32W
RemoveFontResourceW
AddFontResourceW
DeleteObject
GetTextMetricsW
GetTextFaceW
SelectObject
CreateFontIndirectW
GetDeviceCaps

rpcrt4

RpcAsyncCompleteCall
I_RpcExceptionFilter
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
RpcAsyncInitializeHandle
RpcBindingFree
Ndr64AsyncClientCall
RpcBindingSetAuthInfoExW
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrClientCall3
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
RpcAsyncCancelCall

ole32

HWND_UserUnmarshal
HWND_UserFree
HWND_UserFree64
HWND_UserSize64
HWND_UserSize
HWND_UserMarshal
HWND_UserMarshal64
HWND_UserUnmarshal64
IIDFromString
CoTaskMemAlloc
CoTaskMemFree
PropVariantClear
CoCreateGuid

bcrypt

BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptCreateHash
BCryptDestroyHash

api-ms-win-security-base-l1-1-0

RevertToSelf
CreateWellKnownSid
ImpersonateLoggedOnUser

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Migrate10CachedPackagesA
Migrate10CachedPackagesW
MsiAdvertiseProductA
MsiAdvertiseProductExA
MsiAdvertiseProductExW
MsiAdvertiseProductW
MsiAdvertiseScriptA
MsiAdvertiseScriptW
MsiApplyMultiplePatchesA
MsiApplyMultiplePatchesW
MsiApplyPatchA
MsiApplyPatchW
MsiBeginTransactionA
MsiBeginTransactionW
MsiCloseAllHandles
MsiCloseHandle
MsiCollectUserInfoA
MsiCollectUserInfoW
MsiConfigureFeatureA
MsiConfigureFeatureFromDescriptorA
MsiConfigureFeatureFromDescriptorW
MsiConfigureFeatureW
MsiConfigureProductA
MsiConfigureProductExA
MsiConfigureProductExW
MsiConfigureProductW
MsiCreateAndVerifyInstallerDirectory
MsiCreateRecord
MsiCreateTransformSummaryInfoA
MsiCreateTransformSummaryInfoW
MsiDatabaseApplyTransformA
MsiDatabaseApplyTransformW
MsiDatabaseCommit
MsiDatabaseExportA
MsiDatabaseExportW
MsiDatabaseGenerateTransformA
MsiDatabaseGenerateTransformW
MsiDatabaseGetPrimaryKeysA
MsiDatabaseGetPrimaryKeysW
MsiDatabaseImportA
MsiDatabaseImportW
MsiDatabaseIsTablePersistentA
MsiDatabaseIsTablePersistentW
MsiDatabaseMergeA
MsiDatabaseMergeW
MsiDatabaseOpenViewA
MsiDatabaseOpenViewW
MsiDecomposeDescriptorA
MsiDecomposeDescriptorW
MsiDeleteUserDataA
MsiDeleteUserDataW
MsiDetermineApplicablePatchesA
MsiDetermineApplicablePatchesW
MsiDeterminePatchSequenceA
MsiDeterminePatchSequenceW
MsiDoActionA
MsiDoActionW
MsiEnableLogA
MsiEnableLogW
MsiEnableUIPreview
MsiEndTransaction
MsiEnumClientsA
MsiEnumClientsExA
MsiEnumClientsExW
MsiEnumClientsW
MsiEnumComponentCostsA
MsiEnumComponentCostsW
MsiEnumComponentQualifiersA
MsiEnumComponentQualifiersW
MsiEnumComponentsA
MsiEnumComponentsExA
MsiEnumComponentsExW
MsiEnumComponentsW
MsiEnumFeaturesA
MsiEnumFeaturesW
MsiEnumPatchesA
MsiEnumPatchesExA
MsiEnumPatchesExW
MsiEnumPatchesW
MsiEnumProductsA
MsiEnumProductsExA
MsiEnumProductsExW
MsiEnumProductsW
MsiEnumRelatedProductsA
MsiEnumRelatedProductsW
MsiEvaluateConditionA
MsiEvaluateConditionW
MsiExtractPatchXMLDataA
MsiExtractPatchXMLDataW
MsiFormatRecordA
MsiFormatRecordW
MsiGetActiveDatabase
MsiGetComponentPathA
MsiGetComponentPathExA
MsiGetComponentPathExW
MsiGetComponentPathW
MsiGetComponentStateA
MsiGetComponentStateW
MsiGetDatabaseState
MsiGetFeatureCostA
MsiGetFeatureCostW
MsiGetFeatureInfoA
MsiGetFeatureInfoW
MsiGetFeatureStateA
MsiGetFeatureStateW
MsiGetFeatureUsageA
MsiGetFeatureUsageW
MsiGetFeatureValidStatesA
MsiGetFeatureValidStatesW
MsiGetFileHashA
MsiGetFileHashW
MsiGetFileSignatureInformationA
MsiGetFileSignatureInformationW
MsiGetFileVersionA
MsiGetFileVersionW
MsiGetLanguage
MsiGetLastErrorRecord
MsiGetMode
MsiGetPatchFileListA
MsiGetPatchFileListW
MsiGetPatchInfoA
MsiGetPatchInfoExA
MsiGetPatchInfoExW
MsiGetPatchInfoW
MsiGetProductCodeA
MsiGetProductCodeFromPackageCodeA
MsiGetProductCodeFromPackageCodeW
MsiGetProductCodeW
MsiGetProductInfoA
MsiGetProductInfoExA
MsiGetProductInfoExW
MsiGetProductInfoFromScriptA
MsiGetProductInfoFromScriptW
MsiGetProductInfoW
MsiGetProductPropertyA
MsiGetProductPropertyW
MsiGetPropertyA
MsiGetPropertyW
MsiGetShortcutTargetA
MsiGetShortcutTargetW
MsiGetSourcePathA
MsiGetSourcePathW
MsiGetSummaryInformationA
MsiGetSummaryInformationW
MsiGetTargetPathA
MsiGetTargetPathW
MsiGetUserInfoA
MsiGetUserInfoW
MsiInstallMissingComponentA
MsiInstallMissingComponentW
MsiInstallMissingFileA
MsiInstallMissingFileW
MsiInstallProductA
MsiInstallProductW
MsiInvalidateFeatureCache
MsiIsProductElevatedA
MsiIsProductElevatedW
MsiJoinTransaction
MsiLoadStringA
MsiLoadStringW
MsiLocateComponentA
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiPreviewBillboardA
MsiPreviewBillboardW
MsiPreviewDialogA
MsiPreviewDialogW
MsiProcessAdvertiseScriptA
MsiProcessAdvertiseScriptW
MsiProcessMessage
MsiProvideAssemblyA
MsiProvideAssemblyW
MsiProvideComponentA
MsiProvideComponentFromDescriptorA
MsiProvideComponentFromDescriptorW
MsiProvideComponentW
MsiProvideQualifiedComponentA
MsiProvideQualifiedComponentExA
MsiProvideQualifiedComponentExW
MsiProvideQualifiedComponentW
MsiQueryComponentStateA
MsiQueryComponentStateW
MsiQueryFeatureStateA
MsiQueryFeatureStateExA
MsiQueryFeatureStateExW
MsiQueryFeatureStateFromDescriptorA
MsiQueryFeatureStateFromDescriptorW
MsiQueryFeatureStateW
MsiQueryProductStateA
MsiQueryProductStateW
MsiRecordClearData
MsiRecordDataSize
MsiRecordGetFieldCount
MsiRecordGetInteger
MsiRecordGetStringA
MsiRecordGetStringW
MsiRecordIsNull
MsiRecordReadStream
MsiRecordSetInteger
MsiRecordSetStreamA
MsiRecordSetStreamW
MsiRecordSetStringA
MsiRecordSetStringW
MsiReinstallFeatureA
MsiReinstallFeatureFromDescriptorA
MsiReinstallFeatureFromDescriptorW
MsiReinstallFeatureW
MsiReinstallProductA
MsiReinstallProductW
MsiRemovePatchesA
MsiRemovePatchesW
MsiSequenceA
MsiSequenceW
MsiSetComponentStateA
MsiSetComponentStateW
MsiSetExternalUIA
MsiSetExternalUIRecord
MsiSetExternalUIW
MsiSetFeatureAttributesA
MsiSetFeatureAttributesW
MsiSetFeatureStateA
MsiSetFeatureStateW
MsiSetInstallLevel
MsiSetInternalUI
MsiSetMode
MsiSetOfflineContextW
MsiSetPropertyA
MsiSetPropertyW
MsiSetTargetPathA
MsiSetTargetPathW
MsiSourceListAddMediaDiskA
MsiSourceListAddMediaDiskW
MsiSourceListAddSourceA
MsiSourceListAddSourceExA
MsiSourceListAddSourceExW
MsiSourceListAddSourceW
MsiSourceListClearAllA
MsiSourceListClearAllExA
MsiSourceListClearAllExW
MsiSourceListClearAllW
MsiSourceListClearMediaDiskA
MsiSourceListClearMediaDiskW
MsiSourceListClearSourceA
MsiSourceListClearSourceW
MsiSourceListEnumMediaDisksA
MsiSourceListEnumMediaDisksW
MsiSourceListEnumSourcesA
MsiSourceListEnumSourcesW
MsiSourceListForceResolutionA
MsiSourceListForceResolutionExA
MsiSourceListForceResolutionExW
MsiSourceListForceResolutionW
MsiSourceListGetInfoA
MsiSourceListGetInfoW
MsiSourceListSetInfoA
MsiSourceListSetInfoW
MsiSummaryInfoGetPropertyA
MsiSummaryInfoGetPropertyCount
MsiSummaryInfoGetPropertyW
MsiSummaryInfoPersist
MsiSummaryInfoSetPropertyA
MsiSummaryInfoSetPropertyW
MsiUseFeatureA
MsiUseFeatureExA
MsiUseFeatureExW
MsiUseFeatureW
MsiVerifyDiskSpace
MsiVerifyPackageA
MsiVerifyPackageW
MsiViewClose
MsiViewExecute
MsiViewFetch
MsiViewGetColumnInfo
MsiViewGetErrorA
MsiViewGetErrorW
MsiViewModify
QueryInstanceCount

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 658KB - Virtual size: 657KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/cdp.dll
.dll regsvr32 windows:10 windows x64 arch:x64

1d688f3e339fa209fa2edf2b13190bef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

cdp.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

wcsncmp
strncmp
memset
strpbrk

api-ms-win-crt-private-l1-1-0

_o__localtime64_s
_o__mkgmtime64
_o__mktime64
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsicmp
_o_atoi
memmove
_o_free
_o_iswspace
_o_malloc
_o_modf
_o_rand
_o_realloc
_o_strcpy_s
_o_strftime
_o_strncpy_s
_o_strtol
_o_strtoul
_o_terminate
_o_tolower
_o_toupper
_o_wcstoul
__C_specific_handler
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
strstr
_o__execute_onexit_table
_o__errno
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__dtest
_o__gmtime64_s
_o__difftime64
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
__CxxFrameHandler3
__std_terminate
__std_type_info_compare
strchr
wcschr
_CxxThrowException
_o__get_errno
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
memchr
memcmp
memcpy

combase

ord12
ord6
ord14
ord17
ord2
CStdStubBuffer_DebugServerQueryInterface
ord10
ord13
ord11
CStdStubBuffer_Invoke
ord154
NdrCStdStubBuffer_Release
ord24
ord4
CStdStubBuffer_AddRef
ord5
ord7
ord8
CStdStubBuffer_CountRefs
ord16
ord9
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
ord15
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
ord3
ord23
CStdStubBuffer2_Connect
ord32
NdrCStdStubBuffer2_Release
CStdStubBuffer2_CountRefs
ord21
ord26
ord20
ord27
ord19
ord22
CStdStubBuffer2_Disconnect
ord25
ord34
ord33
ord18
CStdStubBuffer2_QueryInterface

ntdll

NtOpenSemaphore
RtlIsMultiUsersInSessionSku
RtlGetDeviceFamilyInfoEnum
NtCreateWnfStateName
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlSidDominates
RtlInitUnicodeString
NtCreateSemaphore
RtlGetTokenNamedObjectPath
RtlFreeUnicodeString
RtlPublishWnfStateData
NtOpenMutant
NtQueryWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
NtDeleteWnfStateName

rpcrt4

IUnknown_Release_Proxy
NdrOleFree
IUnknown_QueryInterface_Proxy
NdrStubCall3
NdrStubForwardingFunction
IUnknown_AddRef_Proxy
NdrClientCall3
NdrOleAllocate
UuidFromStringW
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
RpcServerInqCallAttributesW

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
FindStringOrdinal
GetModuleFileNameA
LockResource
GetModuleHandleW
FindResourceExW
DisableThreadLibraryCalls
GetModuleHandleExW
LoadResource
GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread
GetCurrentThreadId
OpenThreadToken
OpenProcessToken
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
SetThreadToken

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64
GetLocalTime
GetSystemTime
GetComputerNameExW
GetVersionExW
GetTickCount

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

shcore

ord190
SHCreateMemStream
IStream_Write
IStream_Reset
IStream_WriteStr
IStream_ReadStr
IStream_Size
IStream_Read

msvcp_win

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setf@ios_base@std@@QEAAHHH@Z
_Query_perf_frequency
_Query_perf_counter
?_Xinvalid_argument@std@@YAXPEBD@Z
_Cnd_init
_Mtx_destroy
_Thrd_detach
_Thrd_start
_Mtx_init
_Cnd_wait
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
_Cnd_broadcast
_Thrd_hardware_concurrency
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$collate@D@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?setf@ios_base@std@@QEAAHH@Z
_Thrd_yield
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
_Strcoll
_Strxfrm
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
_Unlock_shared_ptr_spin_lock
_Thrd_id
_Lock_shared_ptr_spin_lock
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
_Thrd_join
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Random_device@std@@YAIXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Mtx_lock
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Thrd_sleep
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
_Mtx_init_in_situ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??7ios_base@std@@QEBA_NXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
_Mtx_destroy_in_situ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
?_Xout_of_range@std@@YAXPEBD@Z
_Cnd_signal
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_register_at_thread_exit
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Xtime_get_ticks
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

api-ms-win-crt-time-l1-1-0

clock
_time64

umpdc

Pdcv2ActivationClientDeactivate
Pdcv2ActivationClientRegister
Pdcv2ActivationClientUnregister
Pdcv2ActivationClientActivate

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserSize
HSTRING_UserFree64
HSTRING_UserUnmarshal
WindowsCreateString
HSTRING_UserSize64
HSTRING_UserFree
HSTRING_UserMarshal64
WindowsCreateStringReference
HSTRING_UserUnmarshal64
HSTRING_UserMarshal
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetSystemPreferredUILanguages
GetLocaleInfoEx

api-ms-win-core-com-l1-1-0

CoImpersonateClient
CoRevertToSelf
CoTaskMemAlloc
CoTaskMemRealloc
CoSwitchCallContext
CoTaskMemFree
CLSIDFromString
CoCreateInstance
CoSetProxyBlanket
StringFromCLSID
CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory
RoInitialize
RoUninitialize

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork
FreeLibraryWhenCallbackReturns
CloseThreadpoolWork
SetThreadpoolWait
CreateThreadpoolTimer
WaitForThreadpoolWorkCallbacks
CreateThreadpoolWork
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CloseThreadpoolWait
CloseThreadpool
CreateThreadpool
WaitForThreadpoolWaitCallbacks
SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
CreateThreadpoolWait

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
ReleaseSRWLockExclusive
ResetEvent
CreateEventExW
CreateEventW
CreateSemaphoreExW
EnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockShared
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
AcquireSRWLockShared
CreateMutexExW
DeleteCriticalSection
TryAcquireSRWLockExclusive
InitializeSRWLock
InitializeCriticalSectionEx
AcquireSRWLockExclusive
SetEvent
CreateMutexW
OpenMutexW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegSetValueExW
RegCreateKeyExA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegGetValueW
RegCloseKey
RegGetValueA

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation
EventProviderEnabled

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageInfo

api-ms-win-appmodel-runtime-l1-1-1

GetApplicationUserModelIdFromToken
GetPackageFamilyNameFromToken

api-ms-win-core-sysinfo-l2-1-0

GetUserNameW

api-ms-win-security-base-l1-1-0

CopySid
GetLengthSid
GetTokenInformation
CreateWellKnownSid
RevertToSelf
ImpersonateLoggedOnUser

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete
Sleep

api-ms-win-core-file-l1-1-0

DeleteFileW
FindClose
CreateFileW
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
FindFirstFileW
ReadFile
CreateDirectoryW
FlushFileBuffers
CreateDirectoryA
SetFilePointerEx
GetFileAttributesW
SetEndOfFile
SetFilePointer
WriteFile
GetFileSizeEx

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-path-l1-1-0

PathCchSkipRoot
PathAllocCombine

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-com-l1-1-1

RoGetAgileReference

crypt32

CertOpenStore
CertCreateCertificateContext
CryptProtectData
CryptUnprotectData
CertGetCertificateContextProperty
CertGetNameStringW
CertDeleteCertificateFromStore
CertCreateSelfSignCertificate
CertFreeCertificateContext
CertAddCertificateContextToStore
CertSaveStore
CertDuplicateCertificateContext
CertCloseStore
CertFindCertificateInStore
CertStrToNameW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-devices-query-l1-1-0

DevCreateObjectQuery
DevCloseObjectQuery

api-ms-win-core-io-l1-1-0

CreateIoCompletionPort
CancelIoEx
GetQueuedCompletionStatus
PostQueuedCompletionStatus
DeviceIoControl

propsys

PSPropertyBag_WriteStr
PSCreateMemoryPropertyStore
PSPropertyBag_WriteUnknown

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

kernelbase

BaseFormatObjectAttributes

dsreg

DsrGetJoinInfo
DsrFreeJoinInfo

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-security-capability-l1-1-0

RpcClientCapabilityCheck
CapabilityCheck

Exports

Exports

CDPAccountFromWebAccount
CDPAcquireNetworkingInternal
CDPCreateAFSRegistrationClientInternal
CDPCreateAFSUserSettingsInternal
CDPCreateAccountInternalForUser
CDPCreateAccountInternalWithStableUserId
CDPCreateAccountProviderInternal
CDPCreateActivity
CDPCreateActivityInternal
CDPCreateActivityStoreInfoInternal
CDPCreateActivityStoreInfoWatcher
CDPCreateActivityStoreInfoWatcherForUser
CDPCreateActivityStoreInfoWatcherInternal
CDPCreateActivityStoreReader
CDPCreateActivityStoreReaderForUser
CDPCreateActivityStoreReaderInternal
CDPCreateAllDevicesQuery
CDPCreateAllDevicesQueryForUser
CDPCreateAnonymousAccount
CDPCreateAnonymousAccountInternal
CDPCreateAppControlClient
CDPCreateAppControlClientInternal
CDPCreateAppId
CDPCreateAppRegistrationManager
CDPCreateAppRegistrationManagerForUser
CDPCreateAppRegistrationManagerInternal
CDPCreateAzureActiveDirectoryAccount
CDPCreateBeaconControl
CDPCreateBeaconControlInternal
CDPCreateBinaryClient
CDPCreateBinaryClientInternal
CDPCreateBinaryHost
CDPCreateBinaryHostInternal
CDPCreateBinaryHostWithSettings
CDPCreateCallbackNotifierInternal
CDPCreateCloudNotification
CDPCreateComObjectInternal
CDPCreateCrossPlatformAppId
CDPCreateCrossPlatformAppIdFromAppId
CDPCreateCurrentCrossPlatformAppId
CDPCreateDedupedDevice
CDPCreateDedupedDeviceQuery
CDPCreateDedupedDeviceQueryForUser
CDPCreateDedupedDeviceQueryInternal
CDPCreateDedupedDeviceQueryParameters
CDPCreateDeviceInternal
CDPCreateDeviceQuery
CDPCreateDeviceQueryForSessionInternal
CDPCreateDeviceQueryForUser
CDPCreateDeviceQueryInternal
CDPCreateDeviceQueryWithIdentity
CDPCreateDirectNotificationHost
CDPCreateEmptyAccountSettings
CDPCreateEnvironmentManagerInternal
CDPCreateHttpRequestInternal
CDPCreateMessagingHost
CDPCreateMessagingHostInternal
CDPCreateMicrosoftAccount
CDPCreateOrGetDdsRegistrationUserObjectInternal
CDPCreatePlatformSettingsInternal
CDPCreateRemoteUserInternal
CDPCreateResource
CDPCreateResourceCollection
CDPCreateSettingsInteropInternal
CDPCreateTask
CDPCreateTaskInternal
CDPCreateTelemetryTask
CDPCreateTelemetryTaskInternal
CDPCreateUserInternal
CDPCreateUserNotificationClientInternal
CDPCreateUserServiceNotificationClient
CDPCreateUserServiceNotificationClientForUser
CDPCreateUuid
CDPFixAccounts
CDPGetAFCInitializer
CDPGetAccountProviderInternal
CDPGetAccountsNeedAttention
CDPGetAccountsSettings
CDPGetActivityStore
CDPGetActivityStoreForAccount
CDPGetActivityStoreForAccountInternal
CDPGetActivityStoreForStoreInfo
CDPGetActivityStoreForStoreInfoAndUser
CDPGetActivityStoreForStoreInfoInternal
CDPGetActivityStoreForUser
CDPGetActivityStoreInternal
CDPGetCloudNotificationProviderInternal
CDPGetCoreInitializer
CDPGetDeviceCache
CDPGetDeviceCacheInternal
CDPGetHost
CDPGetLogger
CDPGetNearShareAuthorizationPolicyOfInteractiveUser
CDPGetRelayInitializer
CDPGetResourceHandler
CDPGetResourceManager
CDPGetSDKAuthorizationPolicyOfInteractiveUser
CDPGetSGSocket
CDPGetSystemAppId
CDPGetUserActivitySettings
CDPGetUserActivitySettingsForUser
CDPGetUserActivitySettingsInternal
CDPGetUserCollectionInternal
CDPInitialize
CDPInitializeForService
CDPInitializeSGPowerOnPacket
CDPInitializeUserService
CDPInitializeUserServicePhase2
CDPIsEnabled
CDPPreShutdown
CDPRegisterActivityConflictResolverInternal
CDPReleaseNetworkingInternal
CDPResume
CDPSetAccountProviderInternal
CDPSetAppControlHostCallback
CDPSetExtendedLocalDeviceStatus
CDPSetResourceConfigProvider
CDPSetServicePid
CDPShutdown
CDPShutdownBluetooth
CDPStartCCSPolling
CDPStopCCSPolling
CDPSuspend
CDPUninitializeUserService
CDPWriteAccountSettings
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/proxy_mask_setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/cdp.dll
.dll regsvr32 windows:10 windows x64 arch:x64

1d688f3e339fa209fa2edf2b13190bef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

cdp.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

wcsncmp
strncmp
memset
strpbrk

api-ms-win-crt-private-l1-1-0

_o__localtime64_s
_o__mkgmtime64
_o__mktime64
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsicmp
_o_atoi
memmove
_o_free
_o_iswspace
_o_malloc
_o_modf
_o_rand
_o_realloc
_o_strcpy_s
_o_strftime
_o_strncpy_s
_o_strtol
_o_strtoul
_o_terminate
_o_tolower
_o_toupper
_o_wcstoul
__C_specific_handler
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
strstr
_o__execute_onexit_table
_o__errno
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__dtest
_o__gmtime64_s
_o__difftime64
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
__CxxFrameHandler3
__std_terminate
__std_type_info_compare
strchr
wcschr
_CxxThrowException
_o__get_errno
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
memchr
memcmp
memcpy

combase

ord12
ord6
ord14
ord17
ord2
CStdStubBuffer_DebugServerQueryInterface
ord10
ord13
ord11
CStdStubBuffer_Invoke
ord154
NdrCStdStubBuffer_Release
ord24
ord4
CStdStubBuffer_AddRef
ord5
ord7
ord8
CStdStubBuffer_CountRefs
ord16
ord9
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
ord15
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
ord3
ord23
CStdStubBuffer2_Connect
ord32
NdrCStdStubBuffer2_Release
CStdStubBuffer2_CountRefs
ord21
ord26
ord20
ord27
ord19
ord22
CStdStubBuffer2_Disconnect
ord25
ord34
ord33
ord18
CStdStubBuffer2_QueryInterface

ntdll

NtOpenSemaphore
RtlIsMultiUsersInSessionSku
RtlGetDeviceFamilyInfoEnum
NtCreateWnfStateName
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlSidDominates
RtlInitUnicodeString
NtCreateSemaphore
RtlGetTokenNamedObjectPath
RtlFreeUnicodeString
RtlPublishWnfStateData
NtOpenMutant
NtQueryWnfStateData
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
NtDeleteWnfStateName

rpcrt4

IUnknown_Release_Proxy
NdrOleFree
IUnknown_QueryInterface_Proxy
NdrStubCall3
NdrStubForwardingFunction
IUnknown_AddRef_Proxy
NdrClientCall3
NdrOleAllocate
UuidFromStringW
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
RpcServerInqCallAttributesW

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
FindStringOrdinal
GetModuleFileNameA
LockResource
GetModuleHandleW
FindResourceExW
DisableThreadLibraryCalls
GetModuleHandleExW
LoadResource
GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread
GetCurrentThreadId
OpenThreadToken
OpenProcessToken
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
SetThreadToken

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64
GetLocalTime
GetSystemTime
GetComputerNameExW
GetVersionExW
GetTickCount

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

shcore

ord190
SHCreateMemStream
IStream_Write
IStream_Reset
IStream_WriteStr
IStream_ReadStr
IStream_Size
IStream_Read

msvcp_win

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setf@ios_base@std@@QEAAHHH@Z
_Query_perf_frequency
_Query_perf_counter
?_Xinvalid_argument@std@@YAXPEBD@Z
_Cnd_init
_Mtx_destroy
_Thrd_detach
_Thrd_start
_Mtx_init
_Cnd_wait
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
_Cnd_broadcast
_Thrd_hardware_concurrency
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$collate@D@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?setf@ios_base@std@@QEAAHH@Z
_Thrd_yield
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
_Strcoll
_Strxfrm
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
_Unlock_shared_ptr_spin_lock
_Thrd_id
_Lock_shared_ptr_spin_lock
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
_Thrd_join
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Random_device@std@@YAIXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Mtx_lock
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Thrd_sleep
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
_Mtx_init_in_situ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??7ios_base@std@@QEBA_NXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
_Mtx_destroy_in_situ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
?_Xout_of_range@std@@YAXPEBD@Z
_Cnd_signal
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_register_at_thread_exit
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Xtime_get_ticks
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

api-ms-win-crt-time-l1-1-0

clock
_time64

umpdc

Pdcv2ActivationClientDeactivate
Pdcv2ActivationClientRegister
Pdcv2ActivationClientUnregister
Pdcv2ActivationClientActivate

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserSize
HSTRING_UserFree64
HSTRING_UserUnmarshal
WindowsCreateString
HSTRING_UserSize64
HSTRING_UserFree
HSTRING_UserMarshal64
WindowsCreateStringReference
HSTRING_UserUnmarshal64
HSTRING_UserMarshal
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetSystemPreferredUILanguages
GetLocaleInfoEx

api-ms-win-core-com-l1-1-0

CoImpersonateClient
CoRevertToSelf
CoTaskMemAlloc
CoTaskMemRealloc
CoSwitchCallContext
CoTaskMemFree
CLSIDFromString
CoCreateInstance
CoSetProxyBlanket
StringFromCLSID
CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory
RoInitialize
RoUninitialize

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork
FreeLibraryWhenCallbackReturns
CloseThreadpoolWork
SetThreadpoolWait
CreateThreadpoolTimer
WaitForThreadpoolWorkCallbacks
CreateThreadpoolWork
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CloseThreadpoolWait
CloseThreadpool
CreateThreadpool
WaitForThreadpoolWaitCallbacks
SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
CreateThreadpoolWait

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
ReleaseSRWLockExclusive
ResetEvent
CreateEventExW
CreateEventW
CreateSemaphoreExW
EnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockShared
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
AcquireSRWLockShared
CreateMutexExW
DeleteCriticalSection
TryAcquireSRWLockExclusive
InitializeSRWLock
InitializeCriticalSectionEx
AcquireSRWLockExclusive
SetEvent
CreateMutexW
OpenMutexW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegSetValueExW
RegCreateKeyExA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegGetValueW
RegCloseKey
RegGetValueA

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation
EventProviderEnabled

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageInfo

api-ms-win-appmodel-runtime-l1-1-1

GetApplicationUserModelIdFromToken
GetPackageFamilyNameFromToken

api-ms-win-core-sysinfo-l2-1-0

GetUserNameW

api-ms-win-security-base-l1-1-0

CopySid
GetLengthSid
GetTokenInformation
CreateWellKnownSid
RevertToSelf
ImpersonateLoggedOnUser

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete
Sleep

api-ms-win-core-file-l1-1-0

DeleteFileW
FindClose
CreateFileW
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
FindFirstFileW
ReadFile
CreateDirectoryW
FlushFileBuffers
CreateDirectoryA
SetFilePointerEx
GetFileAttributesW
SetEndOfFile
SetFilePointer
WriteFile
GetFileSizeEx

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-path-l1-1-0

PathCchSkipRoot
PathAllocCombine

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-com-l1-1-1

RoGetAgileReference

crypt32

CertOpenStore
CertCreateCertificateContext
CryptProtectData
CryptUnprotectData
CertGetCertificateContextProperty
CertGetNameStringW
CertDeleteCertificateFromStore
CertCreateSelfSignCertificate
CertFreeCertificateContext
CertAddCertificateContextToStore
CertSaveStore
CertDuplicateCertificateContext
CertCloseStore
CertFindCertificateInStore
CertStrToNameW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-devices-query-l1-1-0

DevCreateObjectQuery
DevCloseObjectQuery

api-ms-win-core-io-l1-1-0

CreateIoCompletionPort
CancelIoEx
GetQueuedCompletionStatus
PostQueuedCompletionStatus
DeviceIoControl

propsys

PSPropertyBag_WriteStr
PSCreateMemoryPropertyStore
PSPropertyBag_WriteUnknown

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

kernelbase

BaseFormatObjectAttributes

dsreg

DsrGetJoinInfo
DsrFreeJoinInfo

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-security-capability-l1-1-0

RpcClientCapabilityCheck
CapabilityCheck

Exports

Exports

CDPAccountFromWebAccount
CDPAcquireNetworkingInternal
CDPCreateAFSRegistrationClientInternal
CDPCreateAFSUserSettingsInternal
CDPCreateAccountInternalForUser
CDPCreateAccountInternalWithStableUserId
CDPCreateAccountProviderInternal
CDPCreateActivity
CDPCreateActivityInternal
CDPCreateActivityStoreInfoInternal
CDPCreateActivityStoreInfoWatcher
CDPCreateActivityStoreInfoWatcherForUser
CDPCreateActivityStoreInfoWatcherInternal
CDPCreateActivityStoreReader
CDPCreateActivityStoreReaderForUser
CDPCreateActivityStoreReaderInternal
CDPCreateAllDevicesQuery
CDPCreateAllDevicesQueryForUser
CDPCreateAnonymousAccount
CDPCreateAnonymousAccountInternal
CDPCreateAppControlClient
CDPCreateAppControlClientInternal
CDPCreateAppId
CDPCreateAppRegistrationManager
CDPCreateAppRegistrationManagerForUser
CDPCreateAppRegistrationManagerInternal
CDPCreateAzureActiveDirectoryAccount
CDPCreateBeaconControl
CDPCreateBeaconControlInternal
CDPCreateBinaryClient
CDPCreateBinaryClientInternal
CDPCreateBinaryHost
CDPCreateBinaryHostInternal
CDPCreateBinaryHostWithSettings
CDPCreateCallbackNotifierInternal
CDPCreateCloudNotification
CDPCreateComObjectInternal
CDPCreateCrossPlatformAppId
CDPCreateCrossPlatformAppIdFromAppId
CDPCreateCurrentCrossPlatformAppId
CDPCreateDedupedDevice
CDPCreateDedupedDeviceQuery
CDPCreateDedupedDeviceQueryForUser
CDPCreateDedupedDeviceQueryInternal
CDPCreateDedupedDeviceQueryParameters
CDPCreateDeviceInternal
CDPCreateDeviceQuery
CDPCreateDeviceQueryForSessionInternal
CDPCreateDeviceQueryForUser
CDPCreateDeviceQueryInternal
CDPCreateDeviceQueryWithIdentity
CDPCreateDirectNotificationHost
CDPCreateEmptyAccountSettings
CDPCreateEnvironmentManagerInternal
CDPCreateHttpRequestInternal
CDPCreateMessagingHost
CDPCreateMessagingHostInternal
CDPCreateMicrosoftAccount
CDPCreateOrGetDdsRegistrationUserObjectInternal
CDPCreatePlatformSettingsInternal
CDPCreateRemoteUserInternal
CDPCreateResource
CDPCreateResourceCollection
CDPCreateSettingsInteropInternal
CDPCreateTask
CDPCreateTaskInternal
CDPCreateTelemetryTask
CDPCreateTelemetryTaskInternal
CDPCreateUserInternal
CDPCreateUserNotificationClientInternal
CDPCreateUserServiceNotificationClient
CDPCreateUserServiceNotificationClientForUser
CDPCreateUuid
CDPFixAccounts
CDPGetAFCInitializer
CDPGetAccountProviderInternal
CDPGetAccountsNeedAttention
CDPGetAccountsSettings
CDPGetActivityStore
CDPGetActivityStoreForAccount
CDPGetActivityStoreForAccountInternal
CDPGetActivityStoreForStoreInfo
CDPGetActivityStoreForStoreInfoAndUser
CDPGetActivityStoreForStoreInfoInternal
CDPGetActivityStoreForUser
CDPGetActivityStoreInternal
CDPGetCloudNotificationProviderInternal
CDPGetCoreInitializer
CDPGetDeviceCache
CDPGetDeviceCacheInternal
CDPGetHost
CDPGetLogger
CDPGetNearShareAuthorizationPolicyOfInteractiveUser
CDPGetRelayInitializer
CDPGetResourceHandler
CDPGetResourceManager
CDPGetSDKAuthorizationPolicyOfInteractiveUser
CDPGetSGSocket
CDPGetSystemAppId
CDPGetUserActivitySettings
CDPGetUserActivitySettingsForUser
CDPGetUserActivitySettingsInternal
CDPGetUserCollectionInternal
CDPInitialize
CDPInitializeForService
CDPInitializeSGPowerOnPacket
CDPInitializeUserService
CDPInitializeUserServicePhase2
CDPIsEnabled
CDPPreShutdown
CDPRegisterActivityConflictResolverInternal
CDPReleaseNetworkingInternal
CDPResume
CDPSetAccountProviderInternal
CDPSetAppControlHostCallback
CDPSetExtendedLocalDeviceStatus
CDPSetResourceConfigProvider
CDPSetServicePid
CDPShutdown
CDPShutdownBluetooth
CDPStartCCSPolling
CDPStopCCSPolling
CDPSuspend
CDPUninitializeUserService
CDPWriteAccountSettings
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/ntdll.exe
.exe windows:6 windows x64 arch:x64

013c74198fc6e42dcf33737d6c40c012

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

wextract.pdb

Imports

advapi32

OpenProcessToken
GetTokenInformation
RegSetValueExA
EqualSid
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueA
AllocateAndInitializeSid
FreeSid
AdjustTokenPrivileges
RegCloseKey

kernel32

GetPrivateProfileIntA
GetFileAttributesA
IsDBCSLeadByte
GetSystemDirectoryA
GlobalUnlock
GetShortPathNameA
CreateDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
RemoveDirectoryA
SetFileAttributesA
GlobalFree
FindClose
GetPrivateProfileStringA
LoadLibraryA
LocalAlloc
WritePrivateProfileStringA
GetModuleFileNameA
FindNextFileA
CompareStringA
_lopen
CloseHandle
LocalFree
DeleteFileA
ExitProcess
DosDateTimeToFileTime
CreateFileA
FindResourceA
SetFilePointer
GlobalAlloc
ExpandEnvironmentStringsA
WaitForSingleObject
SetEvent
GetModuleHandleW
FormatMessageA
SetFileTime
WriteFile
GetDriveTypeA
GetVolumeInformationA
TerminateThread
SizeofResource
CreateEventA
GetExitCodeProcess
CreateProcessA
ReadFile
SetCurrentDirectoryA
_llseek
ResetEvent
LockResource
GetSystemInfo
LoadLibraryExA
CreateMutexA
GetCurrentDirectoryA
GetVersionExA
GetVersion
GetTempPathA
CreateThread
LocalFileTimeToFileTime
Sleep
FreeResource
GetWindowsDirectoryA
lstrcmpA
_lclose
GlobalLock
GetCurrentProcess
LoadResource
FreeLibrary
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
MulDiv
GetDiskFreeSpaceA
GetTempFileNameA

gdi32

GetDeviceCaps

user32

SetForegroundWindow
MsgWaitForMultipleObjects
SendDlgItemMessageA
GetWindowLongPtrA
GetWindowRect
GetDC
MessageBoxA
PeekMessageA
ReleaseDC
GetDlgItem
SetWindowPos
ShowWindow
SetWindowLongPtrA
DispatchMessageA
SetWindowTextA
EnableWindow
CallWindowProcA
DialogBoxIndirectParamA
GetDlgItemTextA
LoadStringA
MessageBeep
CharUpperA
CharNextA
ExitWindowsEx
CharPrevA
EndDialog
GetDesktopWindow
SetDlgItemTextA
SendMessageA
GetSystemMetrics

msvcrt

?terminate@@YAXXZ
_fmode
_acmdln
__C_specific_handler
_initterm
__setusermatherr
_ismbblead
_cexit
memset
memcpy
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_errno
_vsnprintf
_commode

comctl32

ord17

cabinet

ord22
ord23
ord21
ord20

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16.2MB - Virtual size: 16.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Proxy Mask - Proxy Switcher 3.5.2.0/ssl/xpidl.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xpcom\typelib\xpidl\xpidl.pdb

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/System.Net.Http.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:f8:97:e7:60:fb:03:a3:90:c1:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:90:33:a6:c1:b7:be:3d:30:8b:bb:3f:1a:84:77:39:b0:fc:28:e3:17:3f:87:bb:7f:e1:50:73:14:de:0d:ad
Signer

Actual PE Digest

d2:90:33:a6:c1:b7:be:3d:30:8b:bb:3f:1a:84:77:39:b0:fc:28:e3:17:3f:87:bb:7f:e1:50:73:14:de:0d:ad

Digest Algorithm

sha256

PE Digest Matches

true

de:4c:71:7c:95:f1:fb:7e:dd:68:98:86:fa:0a:cd:7e:c6:04:4e:1e
Signer

Actual PE Digest

de:4c:71:7c:95:f1:fb:7e:dd:68:98:86:fa:0a:cd:7e:c6:04:4e:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\4417\s\bin\obj\Windows_NT.AnyCPU.Release\System.Net.Http\net46\System.Net.Http.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/XPCOMUtils.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/opengl32.EXE
.exe windows:4 windows x86 arch:x86

e41c25ab7824b3df73334188c40518ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

lstrcpyA
GetCommandLineA
SetErrorMode
lstrlenA
MulDiv
GetTempFileNameA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
FormatMessageA
lstrcatA
GetLastError
_lwrite
_llseek
GlobalUnlock
_lopen
GlobalAlloc
GlobalFree
_lclose
_lcreat
LoadLibraryA
GetProcAddress
FreeLibrary
OpenFile
GetVersionExA
GetCurrentProcess
WinExec
ExitProcess
_lread
LocalFree
GetTempPathA
GlobalLock

user32

GetDC
BeginPaint
EndPaint
InvalidateRect
PostQuitMessage
SendMessageA
DefWindowProcA
GetClientRect
CreateWindowExA
DrawTextA
ReleaseDC
ShowWindow
SetWindowPos
UpdateWindow
SetTimer
LoadIconA
wsprintfA
MessageBoxA
ExitWindowsEx
RegisterClassA
LoadCursorA

gdi32

DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
TextOutA
SetTextColor
SetBkMode
SelectObject
StretchDIBits
CreateFontA
RealizePalette
SelectPalette
CreatePalette

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

Exports

Exports

_MainWndProc@16
_StubFileWrite@12

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/mcbuilder/sxs.dll
.dll windows:10 windows x64 arch:x64

d862fce5077dfe4e06485a219a56323d

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:db:80:95:d3:07:16:df:f5:3c:e2:07:be:31:61:48:06:90:0a:e5:97:ed:58:88:bf:01:36:96:01:41:36:ad
Signer

Actual PE Digest

2e:db:80:95:d3:07:16:df:f5:3c:e2:07:be:31:61:48:06:90:0a:e5:97:ed:58:88:bf:01:36:96:01:41:36:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sxs.pdb

Imports

ntdll

DbgPrintEx
RtlRaiseStatus
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlDowncaseUnicodeChar
EtwEventUnregister
EtwEventWrite
__C_specific_handler
RtlCopyMappedMemory
LdrResSearchResource
wcstol
RtlGetVersion
_wcsicmp
RtlUnhandledExceptionFilter
_vsnprintf_s
_snprintf_s
RtlGetFrame
wcsrchr
RtlHashUnicodeString
RtlNtStatusToDosError
_vsnwprintf_s
RtlDetermineDosPathNameType_U
wcsstr
RtlIsNonEmptyDirectoryReparsePointAllowed
wcsspn
wcscspn
RtlGetNtSystemRoot
RtlNtStatusToDosErrorNoTeb
RtlFindCharInUnicodeString
vsprintf_s
vDbgPrintEx
wcscat_s
swprintf_s
NtQueryDebugFilterState
sprintf_s
RtlCompareUnicodeString
RtlUpcaseUnicodeChar
qsort
bsearch
_lfind
RtlPopFrame
_i64tow
EtwEventRegister
wcschr
RtlFreeUnicodeString
RtlLcidToLocaleName
wcscpy_s
RtlPushFrame
memmove
__chkstk
memcmp
memcpy
memset

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
UnhandledExceptionFilter

api-ms-win-core-file-l1-1-0

SetFileAttributesW
FindClose
RemoveDirectoryW
FindNextFileW
GetFileInformationByHandle
WriteFile
GetFileAttributesExW
GetFullPathNameW
CreateFileW
GetFileAttributesW
CreateDirectoryW
DeleteFileW
SetFilePointerEx
ReadFile
FlushFileBuffers
FindFirstFileW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-localization-l1-2-0

FormatMessageA
FormatMessageW
GetThreadPreferredUILanguages

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyExW
RegQueryValueExW
RegEnumKeyExW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
SearchPathW

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess

api-ms-win-core-string-l1-1-0

GetStringTypeW
MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemInfo
GetTickCount
GetSystemTimeAsFileTime

api-ms-win-security-base-l1-1-0

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

kernel32

DelayLoadFailureHook
ResolveDelayLoadedAPI
GetSystemWow64DirectoryW
WerUnregisterFile
WerRegisterFile
LocalFree
SystemTimeToTzSpecificLocalTime
DeviceIoControl
FindActCtxSectionGuid
QueryActCtxW
FindActCtxSectionStringW

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection

Exports

Exports

CreateAssemblyCache
CreateAssemblyNameObject
SxsBeginAssemblyInstall
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsFindClrSurrogateInformation
SxsGenerateActivationContext
SxsInstallW
SxsLookupClrGuid
SxsOleAut32MapConfiguredClsidToReferenceClsid
SxsOleAut32MapIIDOrCLSIDToTypeLibrary
SxsOleAut32MapIIDToProxyStubCLSID
SxsOleAut32MapIIDToTLBPath
SxsOleAut32MapReferenceClsidToConfiguredClsid
SxsOleAut32RedirectTypeLibrary
SxsProbeAssemblyInstallation
SxsQueryManifestInformation
SxsRunDllInstallAssembly
SxsRunDllInstallAssemblyW
SxsUninstallW
SxspGenerateManifestPathOnAssemblyIdentity

Sections

.text
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyPal 1.2/wpnclient.dll
.dll windows:10 windows x64 arch:x64

04900c40ac7c9e31ae73221436963b09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WpnClient.pdb

Imports

msvcp110_win

?_Winerror_map@std@@YAPEBDH@Z
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
??_7?$codecvt@GDH@std@@6B@
??_7codecvt_base@std@@6B@
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?in@?$codecvt@GDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAG3AEAPEAG@Z
??1?$codecvt@GDH@std@@MEAA@XZ
??0?$codecvt@GDH@std@@QEAA@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??_7facet@locale@std@@6B@
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@GDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@GDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??_7_Facet_base@std@@6B@
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

msvcrt

wcscspn
wcsrchr
swprintf_s
_wcstoui64
_errno
wcstoul
memset
memmove
memcpy
memcmp
_CxxThrowException
toupper
__CxxFrameHandler3
_vsnwprintf
memcpy_s
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_callnewh
wcschr
realloc
memmove_s
??_V@YAXPEAX@Z
free
malloc
??0exception@@QEAA@AEBQEBD@Z
?what@exception@@UEBAPEBDXZ
_itow_s
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
_purecall
??3@YAXPEAX@Z
wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetProcAddress
LockResource
LoadResource
SizeofResource
FindResourceExW
GetModuleFileNameA
GetModuleHandleW
DisableThreadLibraryCalls

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
InitializeSRWLock
AcquireSRWLockExclusive
CreateSemaphoreExW
CreateMutexExW
ReleaseSemaphore
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
ReleaseSRWLockShared
ReleaseSRWLockExclusive
ReleaseMutex
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockShared
LeaveCriticalSection

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
RaiseException
SetUnhandledExceptionFilter
SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserUnmarshal
HSTRING_UserMarshal64
HSTRING_UserSize
HSTRING_UserMarshal
HSTRING_UserUnmarshal64
HSTRING_UserSize64
WindowsSubstringWithSpecifiedLength
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsCreateString
HSTRING_UserFree64
WindowsDuplicateString
WindowsDeleteString
HSTRING_UserFree
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW
RoTransformError

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
CoCreateInstance
CoGetApartmentType
CoTaskMemAlloc
CoTaskMemFree

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

ntdll

RtlGetDeviceFamilyInfoEnum
RtlIsMultiUsersInSessionSku
RtlInitUnicodeString
RtlDeriveCapabilitySidsFromName

api-ms-win-appmodel-identity-l1-2-0

AppXGetPackageCapabilities
AppXFreeMemory

api-ms-win-security-base-l1-1-0

EqualSid

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegQueryValueExW

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-synch-l1-2-0

InitOnceComplete
InitOnceBeginInitialize
Sleep
SleepConditionVariableSRW
WakeAllConditionVariable

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

combase

ord32
CStdStubBuffer_IsIIDSupported
CStdStubBuffer2_Connect
CStdStubBuffer_DebugServerRelease
ord9
ord8
ord7
ord5
ord34
ord154
NdrCStdStubBuffer2_Release
CStdStubBuffer_Invoke
ord11
ord13
ord10
CStdStubBuffer2_CountRefs
CStdStubBuffer_DebugServerQueryInterface
ord14
CStdStubBuffer2_Disconnect
ord6
ord12
CStdStubBuffer2_QueryInterface
CStdStubBuffer_AddRef
ord33

urlmon

CreateUri
CoInternetCombineUrl

oleaut32

SysFreeString
SysAllocString
VariantClear
SysStringLen

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventUnregister
EventRegister
EventWriteTransfer
EventProviderEnabled

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabledForPackage

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/DXCore.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dev\github\tjeerdhans\ProxyUnsetter\ProxyUnsetter\bin\Release\ProxyUnsetter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/viewsource.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/CoreShell/xpti.dat
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/ProxyUnsetter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/debug.js
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/ProxyUnsetter 1.71/sqlite3.dll
.dll windows:4 windows x86 arch:x86

9ff5e67e3fd580db0ffca5c778aab906

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\db\sqlite3\src\sqlite3.pdb

Imports

kernel32

Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
GetLastError
SetFilePointer
CloseHandle
ReadFile
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
UnlockFile
LockFile
LockFileEx
UnlockFileEx
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetFileAttributesExW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
UnmapViewOfFile
GetTempPathA
GetTempPathW
LocalFree
FormatMessageA
FormatMessageW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
CreateFileW
MapViewOfFile
CreateFileMappingA
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
GetCurrentThreadId

mozcrt19

memmove
qsort
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strncmp
atoi
memcpy
memset
malloc
free
_localtime64_s
realloc

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_module
sqlite3_data_count
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_load_extension
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_nomem
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_sql
sqlite3_step
sqlite3_stmt_status
sqlite3_thread_cleanup
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf

Sections

.text
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/2Capt/utils.exe
.exe windows:5 windows x86 arch:x86

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a0:99:e6:4e:21:4d:65:58:01:ea:38:ad:87:67:11
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/09/2020, 00:00

Not After

02/11/2023, 12:00

Subject

CN=Psiphon Inc.,O=Psiphon Inc.,L=Toronto,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:97:26:e1:38:81:12:24:5c:fd:e8:6b:8d:7d:e9:26:bf:2b:e1:ca
Signer

Actual PE Digest

13:97:26:e1:38:81:12:24:5c:fd:e8:6b:8d:7d:e9:26:bf:2b:e1:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 14.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/aepic.dll
.dll windows:10 windows x64 arch:x64

2b5a38d4fa8fb52bf13456eb07f516b0

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:2f:73:d2:af:28:34:9b:6b:3b:38:4d:f6:75:c4:73:03:b2:d4:ec:82:8f:e4:14:ba:18:41:18:c6:1d:fd:36
Signer

Actual PE Digest

3e:2f:73:d2:af:28:34:9b:6b:3b:38:4d:f6:75:c4:73:03:b2:d4:ec:82:8f:e4:14:ba:18:41:18:c6:1d:fd:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

aepic.pdb

Imports

msvcrt

_CxxThrowException
strnlen
?what@exception@@UEBAPEBDXZ
_wcsicmp
___lc_codepage_func
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
___mb_cur_max_func
??1type_info@@UEAA@XZ
memset
abort
__crtCompareStringW
memmove_s
_vsnprintf_s
strncmp
towlower
___lc_collate_cp_func
memcmp
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
_wtoi
calloc
??1exception@@UEAA@XZ
memcpy_s
malloc
??0exception@@QEAA@AEBQEBD@Z
_purecall
memmove
___lc_handle_func
__crtLCMapStringW
??0exception@@QEAA@AEBQEBDH@Z
memcpy
setlocale
wcstombs
_vsnwprintf
??0bad_cast@@QEAA@PEBD@Z
__C_specific_handler
??1bad_cast@@UEAA@XZ
free
strtol
realloc
__CxxFrameHandler3
_errno
strncpy_s
??0bad_cast@@QEAA@AEBV0@@Z
_vsnwprintf_s
_vscwprintf
strchr
_set_errno
tolower
__pctype_func
iscntrl
_wsplitpath_s
_onexit
isspace
wcstoul
_wtoi64
sprintf_s
_vsnprintf
strcpy_s
_wcsnicmp
wcschr
wcsrchr
wcscpy_s
wcscat_s
_wcslwr
wcsstr
wcscmp

ntdll

RtlGetVersion
RtlReleaseRelativeName
NtLoadKeyEx
RtlDosPathNameToRelativeNtPathName_U
RtlStringFromGUID
RtlRandomEx
NtQueryKey
WinSqmIsOptedInEx
RtlFreeSid
RtlAllocateAndInitializeSid
RtlNtStatusToDosError
RtlAdjustPrivilege
RtlImageDirectoryEntryToData
RtlVerifyVersionInfo
LdrResSearchResource
RtlTimeToTimeFields
ZwMapViewOfSection
ZwUnmapViewOfSection
ZwQuerySystemInformation
RtlGetNativeSystemInformation
RtlUpcaseUnicodeChar
RtlAnsiStringToUnicodeString
RtlxAnsiStringToUnicodeSize
RtlInitString
EtwEventRegister
EtwEventWrite
EtwEventUnregister
RtlSecondsSince1970ToTime
NtQueryLicenseValue
ZwCreateSection
ZwQueryInformationFile
ZwCreateFile
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
ZwQueryValueKey
RtlInitUnicodeStringEx
ZwEnumerateKey
ZwOpenKey
RtlFreeUnicodeString
RtlInitUnicodeString
RtlDosPathNameToNtPathName_U_WithStatus
ZwClose
RtlLeaveCriticalSection
RtlInitializeCriticalSection
RtlMultiByteToUnicodeN
RtlInitAnsiString
RtlEnterCriticalSection
RtlEqualString
RtlDeleteCriticalSection
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlFreeHeap
RtlReAllocateHeap
RtlAllocateHeap
EtwTraceMessage

rpcrt4

UuidCreate

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken
TlsAlloc
GetThreadPriority
SetThreadPriority
TlsGetValue
ResumeThread
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
GetCurrentProcessId
CreateThread
GetCurrentThread

api-ms-win-core-localization-l1-2-0

FormatMessageW
LocaleNameToLCID

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsCreateStringReference
WindowsDuplicateString
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoUninitialize
RoGetActivationFactory
RoInitialize

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
RaiseException
UnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceBeginInitialize
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceExecuteOnce
InitOnceComplete

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
DebugBreak
OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoOriginateError
GetRestrictedErrorInfo
RoTransformError
SetRestrictedErrorInfo

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
AcquireSRWLockShared
InitializeCriticalSectionEx
ReleaseMutex
EnterCriticalSection
InitializeCriticalSection
SetWaitableTimer
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseSemaphore
OpenWaitableTimerW
CreateEventW
CreateMutexW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DeleteCriticalSection
WaitForSingleObject
SetEvent
InitializeSRWLock
CreateEventExW
ReleaseSRWLockShared
CreateSemaphoreExW

api-ms-win-core-com-l1-1-0

CoWaitForMultipleHandles
CoGetCallContext
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoUninitialize
CoInitializeEx
CoTaskMemAlloc
CoGetInterfaceAndReleaseStream
CoMarshalInterface
CreateStreamOnHGlobal
CoReleaseMarshalData
CoGetApartmentType
CoTaskMemFree

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-security-base-l1-1-0

GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
DuplicateTokenEx
SetSecurityDescriptorDacl

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-shcore-thread-l1-1-0

SHSetThreadRef
SHGetThreadRef
SetProcessReference
GetProcessReference

api-ms-win-core-realtime-l1-1-0

QueryThreadCycleTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetTickCount64
GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW

api-ms-win-core-string-l1-1-0

GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryExW
GetModuleHandleExW
FreeLibraryAndExitThread

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventRegister
EventUnregister

api-ms-win-core-file-l1-1-0

GetFileAttributesW
GetLongPathNameW
FindClose
FindNextFileW
GetLogicalDriveStringsW
QueryDosDeviceW
GetDriveTypeW
FindFirstFileW
GetTempFileNameW
WriteFile
CreateFileW
DeleteFileW
GetVolumeInformationByHandleW

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask
GetSystemFirmwareTable

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExW
RegGetValueW
RegSetValueExW
RegCloseKey
RegQueryInfoKeyW
RegDeleteTreeW
RegSaveKeyExW
RegCreateKeyExW
RegDeleteKeyExW
RegUnLoadKeyW
RegLoadAppKeyW
RegLoadKeyW
RegFlushKey
RegSetKeySecurity

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW
RegDeleteKeyValueW

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW
RegOpenKeyW

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathUnExpandEnvStringsW
PathFileExistsW

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW
GetCurrentDirectoryW

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-path-l1-1-0

PathAllocCombine
PathCchCanonicalizeEx
PathCchRemoveFileSpec

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-shcore-path-l1-1-0

ord170

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects
CreateSemaphoreW
CreateWaitableTimerW

bcrypt

BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptGetProperty

api-ms-win-security-cryptoapi-l1-1-0

CryptAcquireContextW
CryptGetHashParam
CryptReleaseContext
CryptCreateHash
CryptHashData
CryptDestroyHash

api-ms-win-eventing-classicprovider-l1-1-0

TraceEvent

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-sidebyside-l1-1-0

ReleaseActCtx
QueryActCtxW
CreateActCtxW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
TrySubmitThreadpoolCallback
SetThreadpoolTimer
CreateThreadpoolTimer
CallbackMayRunLong
CloseThreadpoolTimer
FreeLibraryWhenCallbackReturns

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantInit
VariantCopy
VariantChangeType

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-security-capability-l1-1-0

CapabilityCheck

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
PicAmiClose
PicAmiInitialize
PicFreeFileInfo
PicRetrieveFileInfo
PicRetrieveFileInfoAppx
UpdateSoftwareInventoryTC2

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/psiphon3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Psiphon 163/sqlite3.dll
.dll windows:4 windows x86 arch:x86

9ff5e67e3fd580db0ffca5c778aab906

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\db\sqlite3\src\sqlite3.pdb

Imports

kernel32

Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
GetLastError
SetFilePointer
CloseHandle
ReadFile
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
UnlockFile
LockFile
LockFileEx
UnlockFileEx
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetFileAttributesExW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
GetSystemTimeAsFileTime
UnmapViewOfFile
GetTempPathA
GetTempPathW
LocalFree
FormatMessageA
FormatMessageW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
CreateFileA
CreateFileW
MapViewOfFile
CreateFileMappingA
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
GetCurrentThreadId

mozcrt19

memmove
qsort
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strncmp
atoi
memcpy
memset
malloc
free
_localtime64_s
realloc

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_module
sqlite3_data_count
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_load_extension
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_realloc
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_nomem
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_sql
sqlite3_step
sqlite3_stmt_status
sqlite3_thread_cleanup
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf

Sections

.text
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/SSTap-beta-setup-1.1.0.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/XPCOMUtils/forms.exe
.exe windows:4 windows x86 arch:x86

1f23f452093b5c1ff091a2f9fb4fa3e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
SetCurrentDirectoryW
GetFileAttributesW
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
CopyFileW
GetShortPathNameW
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalUnlock
GetDiskFreeSpaceW
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 482KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/svg.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SSTap (SOCKSTap) 1.1.0.1 Beta/xpcshell.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\js\src\xpconnect\shell\xpcshell.pdb

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xur
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/newdev.exe
.exe windows:5 windows x86 arch:x86

48aa5c8931746a9655524f67b25a47ef

Code Sign

85:94:03:bb:50:08:b6:50:ca:88:f5:31:c4:06:73:0f
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/04/2016, 00:00

Not After

04/04/2018, 23:59

Subject

CN=My Privacy Tools\, Inc.,O=My Privacy Tools\, Inc.,POSTALCODE=92122,STREET=7770 Regents Rd,L=San Diego,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

dd:9c:c6:6b:42:74:cf:d6:de:01:c7:49:a0:de:6e:42:cf:9e:d1:a7:36:b2:b4:ef:15:5f:3f:64:43:1d:a3:a4
Signer

Actual PE Digest

dd:9c:c6:6b:42:74:cf:d6:de:01:c7:49:a0:de:6e:42:cf:9e:d1:a7:36:b2:b4:ef:15:5f:3f:64:43:1d:a3:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/schannel.exe
.exe windows:10 windows x64 arch:x64

d5aec1c1f764856cfb4155cee3321234

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:9e:03:1b:a2:5a:9f:45:42:25:6f:58:d1:63:39:c9:e7:01:55:2a:96:dd:bd:0f:60:75:4b:61:52:32:c2:51
Signer

Actual PE Digest

f1:9e:03:1b:a2:5a:9f:45:42:25:6f:58:d1:63:39:c9:e7:01:55:2a:96:dd:bd:0f:60:75:4b:61:52:32:c2:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

hvix64.pdb

Imports

kdstub

KdInitializeLibrary

Exports

Exports

HvImageInfo
VmxBootInfo

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 902KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CONST
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

LOWMEM
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

GFIDS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/NcaSvc/vertdll.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:02:29:e8:93:3c:c4:14:fa:f5:7c:00:00:00:00:02:29
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2019, 19:21

Not After

27/03/2020, 19:21

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72
Signer

Actual PE Digest

1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vertdll.pdb

Exports

Exports

AcquireSRWLockExclusive
AcquireSRWLockShared
CallEnclave
CloseHandle
CreateEventW
DbgPrint
DelayLoadFailureHook
DeleteCriticalSection
DeleteSynchronizationBarrier
DeviceIoControl
DisableThreadLibraryCalls
EnclaveGetAttestationReport
EnclaveGetEnclaveInformation
EnclaveSealData
EnclaveUnsealData
EnclaveVerifyAttestationReport
EnterCriticalSection
EnterSynchronizationBarrier
EtwEventRegister
EtwEventUnregister
EtwEventWrite
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwTraceMessage
EtwUnregisterTraceGuids
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
ExpInterlockedPopEntrySListEnd
ExpInterlockedPopEntrySListFault
ExpInterlockedPopEntrySListResume
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnabledXStateFeatures
GetFipsModeFromIumKernelState
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
GetProcessHeap
GetProcessHeaps
GetSeedFromIumKernelState
GetSystemDirectoryW
GetSystemInfo
GetXStateFeaturesMask
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InitializeSynchronizationBarrier
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedPushListSList
InterlockedPushListSListEx
KiUserExceptionDispatcher
LdrDisableThreadCalloutsForDll
LdrResolveDelayLoadedAPI
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocateXStateFeature
NtClose
NtDeviceIoControlFile
NtOpenFile
NtOpenKey
NtQueryInformationProcess
NtQueryValueKey
NtTerminateProcess
OpenProcessToken
OutputDebugStringW
PrivilegeCheck
QueryDepthSList
QueryFullProcess
QueryFullProcessImageNameW
RaiseException
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegisterWaitForSingleObjectEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResolveDelayLoadedAPI
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAllocateHeap
RtlAssert
RtlCallEnclaveReturn
RtlCaptureContext
RtlCompareUnicodeString
RtlDeleteCriticalSection
RtlDeleteResource
RtlEnclaveCallDispatch
RtlEnclaveCallDispatchReturn
RtlEnterCriticalSection
RtlFreeHeap
RtlGetCurrentProcessorNumberEx
RtlGetLastNtStatus
RtlImageNtHeader
RtlInitUnicodeString
RtlInitializeCriticalSection
RtlInitializeResource
RtlLeaveCriticalSection
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlPcToFileHeader
RtlRaiseStatus
RtlReleaseResource
RtlReleaseResourceShared
RtlTimeFieldsToTime
RtlUnhandledExceptionFilter
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SleepConditionVariableCS
SleepConditionVariableSRW
TerminateEnclave
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
__C_specific_handler
__chkstk
_local_unwind
_vsnwprintf
_wcsicmp
memcmp
memcpy
memmove
memset
qsort
wcscmp
wcscpy_s
wcsncmp

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/SafeIP.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/comctl32.dll
.dll windows:10 windows x64 arch:x64

d15202401c121e13acfb0eed0fa1c497

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ef:24:91:3b:ec:8e:c4:2e:86:db:1c:3b:e9:4c:47:94:f0:82:fd:af:9c:69:56:de:d8:87:3e:19:c8:ff:35:6d
Signer

Actual PE Digest

ef:24:91:3b:ec:8e:c4:2e:86:db:1c:3b:e9:4c:47:94:f0:82:fd:af:9c:69:56:de:d8:87:3e:19:c8:ff:35:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

comctl32v582.pdb

Imports

ntdll

RtlVirtualUnwind
RtlUnwindEx
RtlLookupFunctionEntry
NtQueryInformationProcess
RtlCaptureContext

advapi32

AllocateAndInitializeSid
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyW
RegQueryValueW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
OpenProcessToken
RegOpenCurrentUser
CheckTokenMembership
FreeSid
RegOpenKeyExW

gdi32

SetPixelV
SetDIBColorTable
GetDIBits
SetDIBits
SetBkMode
SetPixel
GetTextExtentPointW
CreateCompatibleDC
CreateDIBSection
CreateCompatibleBitmap
SelectObject
StretchDIBits
BitBlt
DeleteObject
GetStockObject
CreateRectRgn
OffsetWindowOrgEx
SetWindowOrgEx
GetObjectW
CreateFontIndirectW
TranslateCharsetInfo
GetDeviceCaps
SetLayout
DeleteDC
ExtTextOutW
GetTextMetricsW
GetDIBColorTable
CreatePalette
CreateHalftonePalette
GetTextExtentPoint32W
CreatePatternBrush
SelectPalette
RealizePalette
UnrealizeObject
StretchBlt
GetCharWidthW
SetBkColor
SetTextColor
GetDCOrgEx
SetBrushOrgEx
EnumFontFamiliesExW
RectVisible
SaveDC
IntersectClipRect
RestoreDC
GetTextAlign
SetTextAlign
GetNearestColor
CreateSolidBrush
PatBlt
GetLayout
CreatePen
Polyline
CreateBitmapIndirect
CreateBitmap
CreateFontW
TextOutW
GetClipBox
Arc
MoveToEx
LineTo
Ellipse
Rectangle
SelectClipRgn
GetBitmapBits
GetCurrentObject
CreateRoundRectRgn
CreatePolygonRgn
CombineRgn
FillRgn
FrameRgn
CreateRectRgnIndirect
OffsetRgn
GetPixel
GetClipRgn
ExcludeClipRect
GetTextColor
GetBkColor
GetPaletteEntries

kernel32

FlushFileBuffers
VirtualProtect
VirtualQuery
GetCPInfo
WriteConsoleW
HeapFree
LoadLibraryW
HeapAlloc
GetProcAddress
GetProcessHeap
GetModuleHandleW
FreeLibrary
lstrcmpiA
lstrcmpiW
LocalFree
lstrlenW
LocalAlloc
WideCharToMultiByte
LocalReAlloc
LocalSize
HeapReAlloc
FindResourceW
LoadResource
LockResource
GlobalAlloc
GlobalFree
FreeResource
GetCurrentProcess
CloseHandle
GetTickCount
lstrlenA
MulDiv
CheckForReadOnlyResource
SizeofResource
lstrcmpW
EnumResourceLanguagesW
FindResourceExW
GetLocaleInfoW
GetThreadLocale
FindResourceExA
MultiByteToWideChar
GetNumberFormatW
GetCurrentProcessId
GlobalAddAtomW
GetCurrentThreadId
GetACP
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
QueryActCtxW
ActivateActCtx
DeactivateActCtx
EnterCriticalSection
LeaveCriticalSection
lstrcmpA
CompareStringW
GetSystemDefaultLCID
Sleep
GetUserDefaultLangID
GetDateFormatW
GetLocalTime
EnumCalendarInfoW
GetUserDefaultLCID
GetStringTypeExW
GetTimeFormatW
GetLastError
SetEvent
WaitForSingleObject
CreateEventW
CreateThread
GlobalReAlloc
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
CreateSemaphoreExW
SetLastError
ReleaseSemaphore
GetModuleHandleExW
ReleaseMutex
FormatMessageW
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
DebugBreak
IsDebuggerPresent
GetCommandLineA
FlsSetValue
GetVersionExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
EncodePointer
DecodePointer
FlsAlloc
FlsGetValue
FlsFree
ExitProcess
HeapCreate
HeapDestroy
HeapSetInformation
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
VirtualAlloc
OutputDebugStringA
HeapSize
WriteFile
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointer
LoadLibraryExW
SetThreadStackGuarantee
GetSystemInfo
SetStdHandle

user32

RegisterClassW
GetProcessDefaultLayout
CopyIcon
GetWindowTextLengthW
CharLowerW
GetWindowRect
GetClientRect
GetWindowLongW
ClientToScreen
GetParent
SetWindowPos
GetSysColor
GetDC
ReleaseDC
GetSystemMetrics
SetRect
MapWindowPoints
SetCapture
PeekMessageW
CallMsgFilterW
ReleaseCapture
IsWindow
PtInRect
TranslateMessage
DispatchMessageW
WaitMessage
GetCapture
RegisterWindowMessageW
SystemParametersInfoW
GetSysColorBrush
SendMessageW
GetMessageTime
MessageBeep
SetRectEmpty
GetDoubleClickTime
ScrollWindowEx
RedrawWindow
UnionRect
GetMessagePos
ScreenToClient
GetDlgItem
SetWindowLongW
CopyRect
DeferWindowPos
LoadImageW
CreateDialogIndirectParamA
CreateDialogIndirectParamW
DestroyWindow
LoadStringW
SetWindowTextW
DrawTextW
ShowWindow
IsWindowVisible
MapDialogRect
SetWindowLongPtrW
DestroyIcon
CreateWindowExW
MonitorFromWindow
GetMonitorInfoW
EnableWindow
CopyImage
SetForegroundWindow
GetNextDlgTabItem
GetDlgCtrlID
IsChild
SetFocus
SendDlgItemMessageW
GetFocus
InvalidateRect
SetCursor
LoadCursorW
SetDlgItemTextW
IsWindowEnabled
BeginDeferWindowPos
EndDeferWindowPos
GetClassNameW
GetKeyState
IsDialogMessageW
FillRect
GetWindowLongPtrW
BeginPaint
EndPaint
SetWindowTextA
DefWindowProcW
GetDesktopWindow
GetMessageW
PostQuitMessage
GetActiveWindow
SetActiveWindow
SetLastErrorEx
IsZoomed
InflateRect
DrawFrameControl
UpdateWindow
GetIconInfo
DestroyCaret
CreateWindowExA
DrawEdge
DrawIconEx
IntersectRect
EqualRect
GetUpdateRect
GetWindowDC
PostMessageW
GetAsyncKeyState
EnumChildWindows
GetWindow
MoveWindow
GetWindowTextW
GetCaretBlinkTime
SetTimer
GetCursorPos
KillTimer
GetPropW
GetWindowThreadProcessId
RemovePropW
SetPropW
CallWindowProcW
SendNotifyMessageW
SetCursorPos
LoadIconW
DrawIcon
SetScrollInfo
EnableScrollBar
GetScrollInfo
IsRectEmpty
InvertRect
GetScrollPos
GetScrollRange
ShowScrollBar
SetScrollPos
SetScrollRange
GetMenuItemID
GetMenuItemCount
GetMenuItemInfoW
GetMenuState
SetMenu
CheckMenuItem
GetSubMenu
GetSystemMenu
SubtractRect
UnregisterClassW
CreateIconIndirect
DrawFocusRect
CharPrevW
WindowFromPoint
OffsetRect
SetParent
DestroyMenu
CreatePopupMenu
AppendMenuW
AdjustWindowRect
TrackPopupMenu
MonitorFromRect
FrameRect
ChildWindowFromPoint
EndDialog
DialogBoxIndirectParamW
GetCursor
GetForegroundWindow
MonitorFromPoint
AdjustWindowRectEx
GetMenu
SetWindowRgn
GetWindowRgn
InvalidateRgn
GetShellWindow
GetKeyboardLayout
GetKeyboardState
SetKeyboardState
DestroyCursor
GetUpdateRgn
LockWindowUpdate
GetDCEx
ValidateRect
DrawTextExW
MapVirtualKeyW
GetKeyNameTextW
HideCaret
GrayStringW
SetCaretPos
ShowCaret
CreateCaret

Exports

Exports

AddMRUStringW
CreateMRUListW
CreateMappedBitmap
CreatePropertySheetPage
CreatePropertySheetPageA
CreatePropertySheetPageW
CreateStatusWindow
CreateStatusWindowA
CreateStatusWindowW
CreateToolbar
CreateToolbarEx
CreateUpDownControl
DPA_Clone
DPA_Create
DPA_CreateEx
DPA_DeleteAllPtrs
DPA_DeletePtr
DPA_Destroy
DPA_DestroyCallback
DPA_EnumCallback
DPA_GetPtr
DPA_GetPtrIndex
DPA_Grow
DPA_InsertPtr
DPA_LoadStream
DPA_Merge
DPA_SaveStream
DPA_Search
DPA_SetPtr
DPA_Sort
DSA_Create
DSA_DeleteAllItems
DSA_DeleteItem
DSA_Destroy
DSA_DestroyCallback
DSA_EnumCallback
DSA_GetItem
DSA_GetItemPtr
DSA_InsertItem
DSA_SetItem
DefSubclassProc
DestroyPropertySheetPage
DllGetVersion
DrawInsert
DrawStatusText
DrawStatusTextA
DrawStatusTextW
EnumMRUListW
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollProp
FlatSB_GetScrollPropPtr
FlatSB_GetScrollRange
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
FlatSB_SetScrollRange
FlatSB_ShowScrollBar
FreeMRUList
GetEffectiveClientRect
GetMUILanguage
ImageList_Add
ImageList_AddIcon
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetFlags
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_LoadImage
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Merge
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetFilter
ImageList_SetFlags
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitCommonControlsEx
InitMUILanguage
InitializeFlatSB
LBItemFromPt
MakeDragList
MenuHelp
PropertySheet
PropertySheetA
PropertySheetW
RegisterClassNameW
RemoveWindowSubclass
SetWindowSubclass
ShowHideMenuCtl
Str_SetPtrW
UninitializeFlatSB
_TrackMouseEvent

Sections

.text
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SafeIP 2.0.0.2616/msvcr71.dll
.dll windows:4 windows x86 arch:x86

7acc8c379c768a1ecd81ec502ff5f33e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr71.pdb

Imports

kernel32

GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
RtlUnwind
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPAGIPBGPAD@Z
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CppXcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_purecall_handler
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/SimpleDNSCrypt64.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/sysmain.msi
.msi
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/spr/ua.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/ua.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Simple DNSCrypt 0.7.1/urlmon.dll
.dll regsvr32 windows:10 windows x64 arch:x64

b61aa4d90cb120f22a553ac804b77315

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

urlmon.pdb

Imports

msvcrt

toupper
wcstol
strstr
strncmp
wcsnlen
_wcslwr_s
towlower
__CxxFrameHandler3
strchr
_snwprintf_s
_scwprintf
_errno
strnlen
realloc
bsearch
_wtol
memmove_s
_i64tow_s
memset
_wtoi
_ui64tow_s
swprintf_s
_ultow_s
isalpha
wcsncmp
swscanf_s
_wcsicmp
_purecall
wcsrchr
_itow_s
rand_s
wcstok_s
_wfopen
wcstoul
strcmp
_onexit
wcschr
wcsstr
__dllonexit
_unlock
_lock
_snwscanf_s
wcscat_s
wcscpy_s
_vsnwprintf
memcmp
memmove
memcpy
__C_specific_handler
_initterm
malloc
fgets
_wcsnicmp
free
_amsg_exit
_XcptFilter
_vsnprintf
memcpy_s
fclose
wcscmp

iertutil

CreateUri
CreateUriFromMultiByteString
GetPropertyFromName
GetPropertyName
IntlPercentEncodeNormalize
IsDWORDProperty
CreateIUriBuilder
IsStringProperty
ord701
ord25
ord901
CreateUriPriv
CreateUriWithFragment
GetIUriPriv
ord791
GetIUriPriv2
GetPortFromUrlScheme
ord656
ord675
ord665
ord651
ord655
ord657
ord667
ord650
ord670
ord664
ord398
ord50
ord793
ord681
ord700
ord795
ord854
ord466
ord134
ord282
ord281
ord820
ord71
ord68
ord64
ord61
ord88
ord706
ord796
ord683
ord86
ord76
ord81
ord74
ord79
ord85
ord690
ord916
ord58
ord209
ord32
ord200
ord201
ord54
ord150
ord158
ord159
ord151
UriFromHostAndScheme
ord56
ord49
ord903
ord902
GetIDNSettingsForIE
PrivateCoInternetCanonicalizeIUri
PrivateCoInternetParseIUri
PrivateCoInternetCombineIUri
FastMimeLookupKnownType
FastMimeSetIsMimeFilterEnabled
ord70
ord63
ord20
FastMimeGetIsMimeFilterEnabled
CreateStringHashN
ord230
ord16
ord45
ord205
ord42
ord43
ord44
ord143
ord135
ord140
ord141
ord142
ord913
ord810
ord172
IUriBuilderInternalCreateDomain
ord166
ord855
ord35
ord870
ord682
ord89
ord57
ord702
ord17
ord325
ord173
ord62
ord72
ord594
ord597
ord654
ord652
ord658
ord672

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore
OpenSemaphoreW
EnterCriticalSection
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
WaitForSingleObjectEx
CreateSemaphoreExW
CreateMutexExW
ReleaseMutex
SetEvent
LeaveCriticalSection
WaitForSingleObject
ReleaseSRWLockShared
CreateMutexW
CreateMutexA
AcquireSRWLockExclusive
InitializeCriticalSectionEx
AcquireSRWLockShared
InitializeSRWLock
OpenMutexW
TryEnterCriticalSection
ReleaseSRWLockExclusive
CreateEventExW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathIsRelativeW
PathFindExtensionA
PathRemoveExtensionW
PathUnquoteSpacesW
PathIsUNCServerShareW
PathIsUNCW
PathIsPrefixA
PathRemoveFileSpecW
PathIsPrefixW
PathFileExistsW
PathIsUNCServerW
PathFindFileNameW
PathFindExtensionW
PathIsRootW
PathFileExistsA
PathGetDriveNumberW
PathStripToRootW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrRChrW
StrChrW
StrCmpNIA
QISearch
StrCmpNIW
StrCmpNICA
StrCmpCA
StrStrIW
StrDupW
StrCmpCW
StrChrNW
StrToIntExW
StrToIntA
StrStrIA
StrChrIW
StrToIntW
StrDupA
StrCmpIW
StrCmpNA
StrCmpICW
StrStrA
StrCmpNW
StrChrA
StrCmpNICW
StrStrW
StrToInt64ExW
StrCmpICA
StrCmpNCW
StrCmpW
StrCmpNCA
StrTrimW

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
LoadLibraryExW
FindResourceExW
FindStringOrdinal
GetProcAddress
LoadLibraryExA
LoadResource
LockResource
GetModuleFileNameA
GetModuleHandleExW
GetModuleFileNameW
GetModuleHandleA
FreeLibrary
SizeofResource
LoadStringA
GetModuleHandleW

api-ms-win-core-com-l1-1-0

CoSetProxyBlanket
CoFreeUnusedLibraries
CoCreateInstance
StringFromGUID2
CoUnmarshalInterface
CoTaskMemRealloc
CLSIDFromString
PropVariantClear
CoCreateGuid
FreePropVariantArray
CLSIDFromProgID
CoUninitialize
StringFromCLSID
CoTaskMemAlloc
CoMarshalInterface
CoGetMarshalSizeMax
CoSwitchCallContext
CoTaskMemFree
CoGetClassObject
CoCreateFreeThreadedMarshaler
CoGetTreatAsClass
CoWaitForMultipleHandles
CoInitializeEx

api-ms-win-eventing-provider-l1-1-0

EventWriteEx
EventProviderEnabled
EventRegister
EventWriteTransfer
EventUnregister
EventSetInformation

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-registry-l1-1-0

RegEnumValueA
RegGetValueA
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExW
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyA
RegGetValueW
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyExA
RegSetValueExA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpA
lstrcmpW

api-ms-win-core-processthreads-l1-1-0

GetExitCodeThread
GetCurrentThread
GetCurrentProcessId
TerminateThread
ExitThread
OpenThreadToken
OpenProcessToken
GetCurrentThreadId
TlsFree
TlsAlloc
TerminateProcess
TlsSetValue
TlsGetValue
CreateProcessA
GetExitCodeProcess
GetCurrentProcess
CreateThread

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-stringansi-l1-1-0

CharUpperBuffA
CharLowerA
CharPrevA
CharNextA

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
InitOnceComplete
InitOnceExecuteOnce
Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetVersionExA
GetSystemTime
GetWindowsDirectoryA
GetSystemInfo
GetTickCount
GetSystemTimeAsFileTime
GetSystemDirectoryA
GetTickCount64
GetLocalTime

api-ms-win-core-localization-l1-2-0

GetUserGeoID
GetThreadLocale
GetLocaleInfoA
IdnToAscii
IsValidCodePage
IsDBCSLeadByte
FormatMessageW
GetACP
GetCPInfo
IdnToUnicode
FormatMessageA
GetSystemDefaultLCID
GetUserDefaultLCID

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-path-l1-1-0

PathCchCanonicalize
PathCchAddBackslash
PathCchRemoveFileSpec
PathCchRemoveBackslash

api-ms-win-shcore-stream-l1-1-0

SHOpenRegStream2W
SHCreateMemStream
IStream_Read
IStream_ReadStr
IStream_Write
IStream_WriteStr
SHCreateStreamOnFileW

api-ms-win-core-string-l2-1-0

CharPrevW
CharLowerBuffW
CharNextW
CharLowerW

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree
LocalAlloc

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
LoadLibraryA

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-file-l1-1-0

ReadFile
SetFileAttributesA
CreateFileA
WriteFile
FileTimeToLocalFileTime
GetLongPathNameW
SetFilePointer
LocalFileTimeToFileTime
GetFileSize
GetFullPathNameW
CreateDirectoryW
GetDriveTypeA
RemoveDirectoryA
FindNextFileA
SetFileTime
DeleteFileA
GetTempFileNameW
CreateDirectoryA
GetDriveTypeW
GetFileAttributesA
QueryDosDeviceW
GetFileInformationByHandle
GetShortPathNameW
CompareFileTime
FindClose
FindFirstFileA
GetFullPathNameA
GetFileTime
GetLongPathNameA
FindFirstFileW
GetFileSizeEx
CreateFileW
GetFileAttributesW
GetFileAttributesExW
DeleteFileW

api-ms-win-core-file-l1-2-2

GetTempPathA

api-ms-win-core-kernel32-legacy-l1-1-0

GetShortPathNameA
CopyFileA
DosDateTimeToFileTime

api-ms-win-core-version-l1-1-0

VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW

api-ms-win-core-registryuserspecific-l1-1-0

SHRegQueryInfoUSKeyW
SHRegEnumUSValueW
SHRegWriteUSValueW
SHRegDeleteEmptyUSKeyW
SHRegGetUSValueW
SHRegGetBoolUSValueA
SHRegOpenUSKeyW
SHRegQueryUSValueW
SHRegEnumUSKeyW
SHRegGetUSValueA
SHRegCloseUSKey
SHRegDeleteUSValueW
SHRegCreateUSKeyW

api-ms-win-core-registry-l2-1-0

RegQueryValueW
RegQueryValueA

api-ms-win-core-atoms-l1-1-0

DeleteAtom
AddAtomA
FindAtomA
AddAtomW
FindAtomW

api-ms-win-core-url-l1-1-0

UrlGetLocationW
UrlEscapeW
UrlCompareW
PathCreateFromUrlA
UrlGetPartW
UrlCanonicalizeW
ParseURLW
UrlCreateFromPathW
UrlIsW
ParseURLA
UrlCombineW
UrlUnescapeW
PathCreateFromUrlW

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileSectionW
GetPrivateProfileIntW
WritePrivateProfileStringW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-shell-changenotify-l1-1-0

SHChangeNotify

api-ms-win-security-base-l1-1-0

CheckTokenMembership
CreateWellKnownSid
GetTokenInformation
DuplicateToken

api-ms-win-core-processenvironment-l1-2-0

SearchPathA

api-ms-win-http-time-l1-1-0

InternetTimeToSystemTimeA
InternetTimeFromSystemTimeW
InternetTimeFromSystemTimeA

api-ms-win-core-file-l1-2-0

GetTempPathW
CreateFile2

ntdll

RtlIpv6StringToAddressExW
RtlIpv4StringToAddressExW
RtlMoveMemory
RtlGetSuiteMask

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolWork
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
SubmitThreadpoolWork

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-shlwapi-winrt-storage-l1-1-1

ord220

api-ms-win-shcore-registry-l1-1-0

SHSetValueA
SHRegGetValueW
SHDeleteKeyW

api-ms-win-core-processthreads-l1-1-2

QueryProtectedPolicy

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-shcore-comhelpers-l1-1-0

IUnknown_QueryService

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsA

api-ms-win-core-datetime-l1-1-0

GetDateFormatW
GetTimeFormatW
GetTimeFormatA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock
GlobalLock
GlobalSize

api-ms-win-security-systemfunctions-l1-1-0

SystemFunction036

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-shcore-unicodeansi-l1-1-0

SHAnsiToUnicode

api-ms-win-core-memory-l1-1-0

MapViewOfFile
OpenFileMappingW
VirtualProtect
UnmapViewOfFile
CreateFileMappingW

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-security-lsapolicy-l1-1-0

LsaOpenPolicy
LsaFreeMemory
LsaQueryInformationPolicy
LsaClose

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-localization-obsolete-l1-2-0

CompareStringA

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW
DeactivateActCtx
ReleaseActCtx
ActivateActCtx

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-security-isolatedcontainer-l1-1-0

IsProcessInIsolatedContainer

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-io-l1-1-0

DeviceIoControl

Exports

Exports

AsyncGetClassBits
AsyncInstallDistributionUnit
BindAsyncMoniker
CAuthenticateHostUI_CreateInstance
CDLGetLongPathNameA
CDLGetLongPathNameW
CORPolicyProvider
CoGetClassObjectFromURL
CoInstall
CoInternetCanonicalizeIUri
CoInternetCombineIUri
CoInternetCombineUrl
CoInternetCombineUrlEx
CoInternetCompareUrl
CoInternetCreateSecurityManager
CoInternetCreateZoneManager
CoInternetFeatureSettingsChanged
CoInternetGetMobileBrowserAppCompatMode
CoInternetGetMobileBrowserForceDesktopMode
CoInternetGetProtocolFlags
CoInternetGetSecurityUrl
CoInternetGetSecurityUrlEx
CoInternetGetSession
CoInternetIsFeatureEnabled
CoInternetIsFeatureEnabledForIUri
CoInternetIsFeatureEnabledForUrl
CoInternetIsFeatureZoneElevationEnabled
CoInternetParseIUri
CoInternetParseUrl
CoInternetQueryInfo
CoInternetSetFeatureEnabled
CoInternetSetMobileBrowserAppCompatMode
CoInternetSetMobileBrowserForceDesktopMode
CompareSecurityIds
CompatFlagsFromClsid
CopyBindInfo
CopyStgMedium
CreateAsyncBindCtx
CreateAsyncBindCtxEx
CreateFormatEnumerator
CreateIUriBuilder
CreateURLMoniker
CreateURLMonikerEx
CreateURLMonikerEx2
CreateUri
CreateUriFromMultiByteString
CreateUriPriv
CreateUriWithFragment
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer
Extract
FaultInIEFeature
FileBearsMarkOfTheWeb
FindMediaType
FindMediaTypeClass
FindMimeFromData
GetAddSitesFileUrl
GetClassFileOrMime
GetClassURL
GetComponentIDFromCLSSPEC
GetIDNFlagsForUri
GetIUriPriv
GetIUriPriv2
GetLabelsFromNamedHost
GetMarkOfTheWeb
GetPortFromUrlScheme
GetPropertyFromName
GetPropertyName
GetSoftwareUpdateInfo
GetUrlmonThreadNotificationHwnd
GetZoneFromAlternateDataStreamEx
HlinkGoBack
HlinkGoForward
HlinkNavigateMoniker
HlinkNavigateString
HlinkSimpleNavigateToMoniker
HlinkSimpleNavigateToString
IECompatLogCSSFix
IEGetUserPrivateNamespaceName
IEInstallScope
IntlPercentEncodeNormalize
IsAsyncMoniker
IsDWORDProperty
IsIntranetAvailable
IsJITInProgress
IsLoggingEnabledA
IsLoggingEnabledW
IsStringProperty
IsValidURL
MkParseDisplayNameEx
ObtainUserAgentString
PrivateCoInstall
QueryAssociations
QueryClsidAssociation
RegisterBindStatusCallback
RegisterFormatEnumerator
RegisterMediaTypeClass
RegisterMediaTypes
RegisterWebPlatformPermanentSecurityManager
ReleaseBindInfo
RestrictHTTP2
RevokeBindStatusCallback
RevokeFormatEnumerator
SetAccessForIEAppContainer
SetSoftwareUpdateAdvertisementState
ShouldDisplayPunycodeForUri
ShouldShowIntranetWarningSecband
ShowTrustAlertDialog
URLDownloadA
URLDownloadToCacheFileA
URLDownloadToCacheFileW
URLDownloadToFileA
URLDownloadToFileW
URLDownloadW
URLOpenBlockingStreamA
URLOpenBlockingStreamW
URLOpenPullStreamA
URLOpenPullStreamW
URLOpenStreamA
URLOpenStreamW
UnregisterWebPlatformPermanentSecurityManager
UrlMkBuildVersion
UrlMkGetSessionOption
UrlMkSetSessionOption
UrlmonCleanupCurrentThread
WriteHitLogging
ZonesReInit

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isoapis
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/SkyVPNSetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/prefcalls.js
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/ffmpeg/user32.exe
.exe windows:1 windows x86 arch:x86

Code Sign

01:25:2f:f1:72:73:84:e3:e8:a3:ce:92:1a:94:8f:9a
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

17/06/2019, 00:00

Not After

19/08/2020, 12:00

Subject

CN=Talktone\, Inc,O=Talktone\, Inc,L=SUNNYVALE,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:f2:c2:d4:39:4b:75:57:4e:d6:14:6f:96:e4:c5:ba:69:d9:73:a6
Signer

Actual PE Digest

05:f2:c2:d4:39:4b:75:57:4e:d6:14:6f:96:e4:c5:ba:69:d9:73:a6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/mfc100cht.dll
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb
Signer

Actual PE Digest

12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/SkyVPN 0.9.20/sas.dll
.dll windows:10 windows x64 arch:x64

fe806c7a1beddc2709d9013be1d72b0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

SAS.pdb

Imports

msvcrt

_vsnwprintf
_XcptFilter
__C_specific_handler
_initterm
malloc
free
_amsg_exit
memset

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter

kernel32

LoadLibraryA
HeapFree
SetLastError
HeapAlloc
GetProcessHeap
GetProcAddress
FreeLibrary

rpcrt4

NdrClientCall3
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
I_RpcExceptionFilter

Exports

Exports

SendSAS

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/BFE.DLL
.dll windows:10 windows x64 arch:x64

af3ccebee341bc1634b9269a2d4ab01d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

bfe.pdb

Imports

msvcrt

_initterm
__C_specific_handler
wcscspn
_wcslwr
bsearch
_ultoa_s
strpbrk
strstr
sprintf_s
isprint
_ltoa_s
_i64toa_s
_ui64toa_s
wprintf
memmove
memcpy
malloc
memcmp
log
wcstoul
_vsnprintf
_vsnwprintf
_wcsicmp
free
wcstol
qsort
_amsg_exit
iswctype
_XcptFilter
wcschr
_wcsnicmp
_ultow
tolower
wcsnlen
memset

ntdll

NtQueryObject
RtlGetSaclSecurityDescriptor
RtlValidRelativeSecurityDescriptor
RtlNumberOfSetBits
RtlInitializeBitMap
WinSqmIsOptedIn
WinSqmSetDWORD
WinSqmAddToStream
RtlValidSid
RtlLengthSid
NtDeviceIoControlFile
RtlAllocateHeap
RtlInitializeSRWLock
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlGetCurrentServiceSessionId
RtlCreateHashTable
RtlDeleteHashTable
RtlInsertEntryHashTable
RtlRemoveEntryHashTable
RtlLookupEntryHashTable
RtlGetNextEntryHashTable
RtlInitEnumerationHashTable
RtlEnumerateEntryHashTable
RtlEndEnumerationHashTable
RtlContractHashTable
RtlGetOwnerSecurityDescriptor
RtlAdjustPrivilege
RtlAbsoluteToSelfRelativeSD
RtlSetOwnerSecurityDescriptor
RtlSelfRelativeToAbsoluteSD2
RtlCreateServiceSid
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlSubAuthorityCountSid
TpReleaseTimer
TpWaitForTimer
RtlFreeHeap
RtlIpv4AddressToStringA
RtlIpv6AddressToStringA
RtlEthernetAddressToStringA
TpSetTimer
TpIsTimerSet
TpAllocTimer
RtlEqualSid
RtlLengthSecurityDescriptor
RtlApplicationVerifierStop
EtwEventEnabled
EtwEventWriteTransfer
EtwEventWrite
EtwEventActivityIdControl
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
EtwTraceMessage
RtlExpandHashTable
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
RtlSetThreadPreferredUILanguages

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
LoadStringW
DisableThreadLibraryCalls
GetProcAddress

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
CreateThread
TlsGetValue
GetCurrentThread
OpenThreadToken
TlsSetValue
GetCurrentProcess
TerminateProcess
TlsFree
TlsAlloc
GetProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-synch-l1-1-0

CreateEventW
CreateSemaphoreExW
ReleaseSRWLockShared
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ReleaseSemaphore
AcquireSRWLockShared
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
SetEvent
InitializeSRWLock
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockExclusive

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
DeleteTimerQueueTimer
UnregisterWaitEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-security-base-l1-1-0

DestroyPrivateObjectSecurity
GetPrivateObjectSecurity
GetSecurityDescriptorControl
CreatePrivateObjectSecurityEx
GetSecurityDescriptorLength
SetSecurityDescriptorControl
SetPrivateObjectSecurityEx
MapGenericMask
PrivilegeCheck
EqualSid
CopySid
InitializeSecurityDescriptor
AllocateAndInitializeSid
CreateWellKnownSid
FreeSid
InitializeAcl
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorDacl

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapDestroy
HeapFree
GetProcessHeap
HeapSize
HeapCreate
HeapReAlloc

rpcrt4

RpcRaiseException
RpcImpersonateClient
RpcServerInqCallAttributesW
UuidCreate
RpcGetAuthorizationContextForClient
RpcBindingVectorFree
RpcServerUnregisterIfEx
RpcFreeAuthorizationContext
RpcEpUnregister
NdrServerCallAll
NdrServerCall2
RpcServerUseProtseqW
RpcServerRegisterIf3
I_RpcExceptionFilter
MesHandleFree
RpcServerInqBindings
MesEncodeDynBufferHandleCreate
MesDecodeBufferHandleCreate
UuidFromStringW
RpcRevertToSelf
NdrMesTypeEncode3
NdrMesTypeDecode3
I_RpcBindingInqLocalClientPID
RpcEpRegisterW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

authz

AuthzGetInformationFromContext
AuthzAccessCheck
AuthziFreeAuditEventType
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzFreeAuditEvent
AuthziLogAuditEvent
AuthziInitializeAuditEventType
AuthziInitializeAuditParamsFromArray
AuthziInitializeAuditEvent

ws2_32

htonl

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

iphlpapi

GetCurrentThreadCompartmentId

api-ms-win-core-file-l1-1-0

WriteFile
CreateFileW
DeleteFileW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-perfcounters-l1-1-0

PerfCreateInstance
PerfStartProvider
PerfSetULongLongCounterValue
PerfSetULongCounterValue
PerfStopProvider
PerfSetCounterSetInfo

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegEnumValueW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWork

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-eventing-controller-l1-1-0

StartTraceW
EnableTraceEx2
ControlTraceW

api-ms-win-eventing-consumer-l1-1-0

ProcessTrace
OpenTraceW
CloseTrace

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

BfeGetDirectDispatchTable
BfeOnServiceStartTypeChange
BfeServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/System.Net.Http.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:b1:dd:ed:ba:54:e9:65:b8:5f:00:01:00:00:01:b1
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:f8:97:e7:60:fb:03:a3:90:c1:00:00:00:00:00:f8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:03:5e:25:1c:99:1f:a3:1e:b8:00:00:00:00:01:03
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:08

Not After

26/07/2019, 20:08

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:90:33:a6:c1:b7:be:3d:30:8b:bb:3f:1a:84:77:39:b0:fc:28:e3:17:3f:87:bb:7f:e1:50:73:14:de:0d:ad
Signer

Actual PE Digest

d2:90:33:a6:c1:b7:be:3d:30:8b:bb:3f:1a:84:77:39:b0:fc:28:e3:17:3f:87:bb:7f:e1:50:73:14:de:0d:ad

Digest Algorithm

sha256

PE Digest Matches

true

de:4c:71:7c:95:f1:fb:7e:dd:68:98:86:fa:0a:cd:7e:c6:04:4e:1e
Signer

Actual PE Digest

de:4c:71:7c:95:f1:fb:7e:dd:68:98:86:fa:0a:cd:7e:c6:04:4e:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\A\_work\4417\s\bin\obj\Windows_NT.AnyCPU.Release\System.Net.Http\net46\System.Net.Http.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/RDXService/ssleay32.exe
.exe windows:6 windows x86 arch:x86

bc70c4fa605f17c85050b7c7b6d42e44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

OpenProcessToken
GetTokenInformation
RegSetValueExA
EqualSid
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteValueA
AllocateAndInitializeSid
FreeSid
AdjustTokenPrivileges
RegCloseKey

kernel32

GetPrivateProfileIntA
GetFileAttributesA
IsDBCSLeadByte
GetSystemDirectoryA
GlobalUnlock
GetShortPathNameA
CreateDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
RemoveDirectoryA
SetFileAttributesA
GlobalFree
FindClose
GetPrivateProfileStringA
LoadLibraryA
LocalAlloc
WritePrivateProfileStringA
GetModuleFileNameA
FindNextFileA
CompareStringA
_lopen
CloseHandle
LocalFree
DeleteFileA
ExitProcess
DosDateTimeToFileTime
CreateFileA
FindResourceA
GlobalAlloc
ExpandEnvironmentStringsA
LoadResource
WaitForSingleObject
SetEvent
GetModuleHandleW
FormatMessageA
SetFileTime
WriteFile
GetDriveTypeA
GetVolumeInformationA
TerminateThread
SizeofResource
CreateEventA
GetExitCodeProcess
CreateProcessA
_llseek
SetCurrentDirectoryA
GetTempFileNameA
ResetEvent
LockResource
GetSystemInfo
LoadLibraryExA
CreateMutexA
GetCurrentDirectoryA
GetVersionExA
GetVersion
GetTempPathA
CreateThread
LocalFileTimeToFileTime
SetFilePointer
GetWindowsDirectoryA
lstrcmpA
_lclose
GlobalLock
GetCurrentProcess
FreeResource
FreeLibrary
Sleep
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
RtlUnwind
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
MulDiv
GetDiskFreeSpaceA
ReadFile

gdi32

GetDeviceCaps

user32

GetDC
SendMessageA
SetForegroundWindow
MsgWaitForMultipleObjects
SendDlgItemMessageA
GetWindowRect
MessageBoxA
GetWindowLongA
PeekMessageA
ReleaseDC
GetDlgItem
SetWindowPos
ShowWindow
DispatchMessageA
SetWindowTextA
EnableWindow
CallWindowProcA
DialogBoxIndirectParamA
GetDlgItemTextA
LoadStringA
MessageBeep
CharUpperA
CharNextA
ExitWindowsEx
CharPrevA
EndDialog
GetDesktopWindow
SetDlgItemTextA
SetWindowLongA
GetSystemMetrics

msvcrt

memset
?terminate@@YAXXZ
_controlfp
memcpy
_ismbblead
__p__fmode
_cexit
_exit
exit
__set_app_type
__getmainargs
_acmdln
_initterm
_amsg_exit
__p__commode
_XcptFilter
_errno
_vsnprintf
__setusermatherr

comctl32

ord17

cabinet

ord22
ord23
ord21
ord20

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/all.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Smart DNS Changer 4.7.2.0/smart_dns_changer_setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/SurfAnonymousFree-2.6.1.6.Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/ssleay32.dll
.dll windows:4 windows x86 arch:x86

ec3469e6569d715ba5e5e1375e9767e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libeay32

ord1654
ord903
ord252
ord2206
ord857
ord176
ord641
ord2821
ord281
ord290
ord654
ord181
ord188
ord269
ord3109
ord2630
ord910
ord2411
ord754
ord490
ord222
ord167
ord168
ord169
ord85
ord52
ord2201
ord289
ord493
ord911
ord464
ord3245
ord354
ord2936
ord3244
ord323
ord3067
ord2894
ord961
ord89
ord109
ord202
ord3239
ord866
ord110
ord3422
ord2929
ord3644
ord3570
ord2578
ord111
ord3010
ord3480
ord2924
ord3459
ord3512
ord3608
ord3575
ord3663
ord123
ord201
ord118
ord3666
ord219
ord498
ord285
ord635
ord912
ord909
ord3724
ord313
ord495
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3719
ord216
ord206
ord497
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord481
ord3729
ord333
ord2915
ord256
ord1096
ord1097
ord2589
ord1145
ord1144
ord1081
ord2292
ord622
ord627
ord657
ord653
ord1653
ord2784
ord965
ord964
ord2572
ord2747
ord3704
ord3758
ord3767
ord3647
ord3766
ord3365
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3559
ord3399
ord636
ord914
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord316
ord629
ord892
ord74
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord679
ord2524
ord3595
ord1023
ord3505
ord401
ord93
ord3396
ord3657
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord86
ord88
ord1101
ord293
ord322
ord2996
ord3155
ord2927
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord904
ord901
ord623
ord905

msvcr71

_iob
_errno
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
strncmp
memmove
time
fprintf

kernel32

GetLastError
DisableThreadLibraryCalls
SetLastError

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/WPFToolkit.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\ipc\app\plugin-container.pdb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/ssleay32.dll
.dll windows:4 windows x86 arch:x86

ec3469e6569d715ba5e5e1375e9767e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libeay32

ord1654
ord903
ord252
ord2206
ord857
ord176
ord641
ord2821
ord281
ord290
ord654
ord181
ord188
ord269
ord3109
ord2630
ord910
ord2411
ord754
ord490
ord222
ord167
ord168
ord169
ord85
ord52
ord2201
ord289
ord493
ord911
ord464
ord3245
ord354
ord2936
ord3244
ord323
ord3067
ord2894
ord961
ord89
ord109
ord202
ord3239
ord866
ord110
ord3422
ord2929
ord3644
ord3570
ord2578
ord111
ord3010
ord3480
ord2924
ord3459
ord3512
ord3608
ord3575
ord3663
ord123
ord201
ord118
ord3666
ord219
ord498
ord285
ord635
ord912
ord909
ord3724
ord313
ord495
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3719
ord216
ord206
ord497
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord481
ord3729
ord333
ord2915
ord256
ord1096
ord1097
ord2589
ord1145
ord1144
ord1081
ord2292
ord622
ord627
ord657
ord653
ord1653
ord2784
ord965
ord964
ord2572
ord2747
ord3704
ord3758
ord3767
ord3647
ord3766
ord3365
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3559
ord3399
ord636
ord914
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord316
ord629
ord892
ord74
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord679
ord2524
ord3595
ord1023
ord3505
ord401
ord93
ord3396
ord3657
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord86
ord88
ord1101
ord293
ord322
ord2996
ord3155
ord2927
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord904
ord901
ord623
ord905

msvcr71

_iob
_errno
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
strncmp
memmove
time
fprintf

kernel32

GetLastError
DisableThreadLibraryCalls
SetLastError

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surf Anonymous Free 2.6.1.6/xpinstall/sxs.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/SendToOneNote.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/SurfsharkSetup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/security-prefs.exe
.exe windows:6 windows x86 arch:x86

d8bb7ff20ee28065e7f762f91eee2327

Code Sign

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:bd:93:5c:0f:42:f1:e9:a9:17:64:24
Certificate

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

13/09/2019, 18:28

Not After

13/09/2021, 18:28

Subject

SERIALNUMBER=1965622,CN=Surfshark Ltd.,O=Surfshark Ltd.,STREET=Vanterpool Plaza\, 2nd Floor\, Wickhams Cay I,L=Road Town,ST=Tortola,C=VG,1.2.840.113549.1.9.1=#0c1361646d696e4073757266736861726b2e636f6d,1.3.6.1.4.1.311.60.2.1.3=#13025647,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

19/02/2018, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G2

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7c:7b:de:13:60:aa:ef:ca:7d:0b:cf:9a:31:0a:7b:17:3f:6c:98:63:16:df:a6:f6:ed:74:f4:8a:f1:32:e3:00
Signer

Actual PE Digest

7c:7b:de:13:60:aa:ef:ca:7d:0b:cf:9a:31:0a:7b:17:3f:6c:98:63:16:df:a6:f6:ed:74:f4:8a:f1:32:e3:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\JobRelease\win\Release\stubs\x86\ExternalUi.pdb

Imports

kernel32

CreateFileW
CloseHandle
WriteFile
DeleteFileW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
RemoveDirectoryW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
MoveFileW
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
RaiseException
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
CreateEventW
SetEvent
InitializeCriticalSection
lstrcpynW
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryExW
DecodePointer
Sleep
GetDiskFreeSpaceExW
GetExitCodeThread
GetCurrentProcessId
FreeLibrary
GetSystemDirectoryW
lstrlenW
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
GetModuleHandleW
LoadLibraryW
GetDriveTypeW
CompareStringW
FindFirstFileW
FindNextFileW
GetLogicalDriveStringsW
GetFileSize
GetFileAttributesW
GetShortPathNameW
SetFileAttributesW
GetFileTime
CopyFileW
ReadFile
SetFilePointer
SystemTimeToFileTime
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetSystemInfo
WaitForMultipleObjects
ReadConsoleW
VirtualProtect
VirtualQuery
LoadLibraryExA
GetStringTypeW
SetUnhandledExceptionFilter
FileTimeToSystemTime
GetEnvironmentVariableW
GetEnvironmentStringsW
FormatMessageW
LocalFree
LoadLibraryA
GetModuleFileNameA
GetFullPathNameW
GetCurrentThread
GetConsoleOutputCP
FlushFileBuffers
SetConsoleTextAttribute
GetStdHandle
GetConsoleScreenBufferInfo
OutputDebugStringW
CreateProcessW
GetExitCodeProcess
GetTickCount
GetCommandLineW
SetCurrentDirectoryW
SetEndOfFile
EnumResourceLanguagesW
GetLocaleInfoW
GetSystemDefaultLangID
GetUserDefaultLangID
GetWindowsDirectoryW
GetSystemTime
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ResetEvent
GlobalFree
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetLocalTime
CreateNamedPipeW
ConnectNamedPipe
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
TerminateThread
LocalAlloc
CompareFileTime
CopyFileExW
OpenEventW
PeekNamedPipe
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
QueryPerformanceCounter
QueryPerformanceFrequency
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetCPInfo
LCMapStringW
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RtlUnwind
ExitProcess
GetModuleHandleExW
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetFileSizeEx
SetFilePointerEx
FindFirstFileExW
GetCommandLineA
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/aepic/utils.js
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Surfshark 2.8.1/bcastdvr.proxy.dll
.dll regsvr32 windows:10 windows x86 arch:x86

1b05ea5f90a138982c4f04f953c32511

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

bcastdvr.proxy.pdb

Imports

msvcrt

_except_handler4_common
_initterm
malloc
_XcptFilter
_amsg_exit
free
memcmp

rpcrt4

CStdStubBuffer_Disconnect
NdrOleAllocate
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrCStdStubBuffer2_Release
CStdStubBuffer_QueryInterface
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Connect
CStdStubBuffer_Invoke
NdrStubForwardingFunction
CStdStubBuffer_CountRefs
NdrStubCall2
CStdStubBuffer_IsIIDSupported
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerRelease
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserUnmarshal
HSTRING_UserMarshal
HSTRING_UserSize
HSTRING_UserFree

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient3
ObjectStublessClient27
CStdStubBuffer2_CountRefs
ObjectStublessClient28
ObjectStublessClient20
ObjectStublessClient15
ObjectStublessClient23
CStdStubBuffer2_Disconnect
ObjectStublessClient7
ObjectStublessClient13
ObjectStublessClient11
CStdStubBuffer2_QueryInterface
ObjectStublessClient19
ObjectStublessClient14
ObjectStublessClient12
NdrProxyForwardingFunction4
NdrProxyForwardingFunction5
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
CStdStubBuffer2_Connect
ObjectStublessClient26
ObjectStublessClient24
ObjectStublessClient10
NdrProxyForwardingFunction3
ObjectStublessClient25
ObjectStublessClient22
ObjectStublessClient18
ObjectStublessClient16
ObjectStublessClient21
ObjectStublessClient29
ObjectStublessClient17

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/Traceless.me_Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/mathml.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/msi.dll
.dll regsvr32 windows:10 windows x64 arch:x64

0ac916d33b90051b9b85935d197891d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

msi.pdb

Imports

msvcrt

free
malloc
_initterm
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
strcmp
memset
memcpy_s
memcpy
memcmp
_ui64tow_s
qsort
_wcstoui64
_amsg_exit
_wcsnicmp
_purecall
_wtoi
_wcsicmp
_vsnprintf
_itoa_s
_CxxThrowException
isdigit
strtol
_itow_s
_ui64tow
wcsstr
wcstol
_wtoi64
_i64tow_s
_vsnwprintf
_XcptFilter
_itow
rand
time
wcschr
srand
iswdigit
wcstoul
towlower
memmove
bsearch
wcsncmp
__C_specific_handler
wcscmp

ntdll

RtlRandom
RtlDestroyEnvironment
EtwTraceMessage
RtlCreateEnvironment
RtlCreateEnvironmentEx
RtlExpandEnvironmentStrings
RtlQueryEnvironmentVariable
RtlSetEnvironmentVar
RtlGetFullPathName_U
RtlGetCurrentServiceSessionId
NtOpenKey
NtClose
NtQueryValueKey
RtlRandomEx
NtQuerySystemInformation
NtSetSecurityObject
NtSetInformationFile
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtUnmapViewOfSection
NtMapViewOfSection
RtlNtStatusToDosErrorNoTeb

advapi32

GetAce
DuplicateToken
SetEntriesInAclW
BuildTrusteeWithSidW
GetSidLengthRequired
GetSidSubAuthorityCount
GetSidSubAuthority
RegOpenKeyW
RegEnableReflectionKey
RegDisableReflectionKey
RegSetKeySecurity
RegQueryReflectionKey
SetServiceObjectSecurity
ChangeServiceConfigW
CreateServiceW
EnumDependentServicesW
StartServiceW
DeleteService
QueryServiceConfigW
QueryServiceObjectSecurity
QueryServiceStatus
ControlService
GetServiceDisplayNameW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupAccountNameW
GetFileSecurityW
RegEnumKeyW
RegGetKeySecurity
EqualSid
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorControl
ConvertSidToStringSidW
CopySid
IsValidSecurityDescriptor
PrivilegeCheck
SetFileSecurityW
GetUserNameW
CreateProcessAsUserW
SetTokenInformation
GetTokenInformation
SetThreadToken
DuplicateTokenEx
RegCreateKeyExW
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegConnectRegistryW
DeregisterEventSource
ReportEventW
EventUnregister
EventRegister
EventSetInformation
EventWriteTransfer
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
GetLengthSid
FreeSid
InitializeAcl
AddAccessAllowedAce
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetSecurityDescriptorLength
MakeSelfRelativeSD
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegisterEventSourceW

kernel32

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
EnumResourceLanguagesW
SizeofResource
EnumResourceNamesW
SetFileTime
QueryDosDeviceW
GetNumberFormatW
GlobalUnlock
FileTimeToDosDateTime
GlobalReAlloc
IsValidCodePage
DosDateTimeToFileTime
ResetEvent
GetSystemTimeAsFileTime
GetFinalPathNameByHandleW
GetLongPathNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEndOfFile
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetDriveTypeW
MoveFileW
HeapFree
HeapReAlloc
GlobalLock
GetProcessHeap
SearchPathW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
Wow64DisableWow64FsRedirection
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
GetTickCount
DeleteFileW
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GetLastError
GetCurrentProcess
Sleep
GetSystemInfo
GetVersionExW
lstrlenW
GetModuleFileNameW
DisableThreadLibraryCalls
GetEnvironmentVariableW
EnterCriticalSection
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GlobalFree
GlobalAlloc
GetSystemDefaultLangID
OutputDebugStringW
CompareStringW
lstrcmpiW
CreateFileW
FormatMessageW
LocalFree
CreateDirectoryW
QueryPerformanceFrequency
TlsFree
SetLastError
DeactivateActCtx
LoadLibraryExW
ActivateActCtx
LoadLibraryW
FindActCtxSectionStringW
CreateActCtxW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
FreeLibrary
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetFileAttributesW
GetFileType
GetFileSize
SetEnvironmentVariableW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetProcAddress
SetErrorMode
lstrcmpiA
FindResourceExW
LoadResource
LockResource
GetLocalTime
GetModuleFileNameA
CompareStringA
SetEvent
WaitForSingleObject
OpenEventW
CreateEventW
CreateThread
LocalAlloc
IsDebuggerPresent
GetCurrentProcessId
ResumeThread
GetSystemDirectoryW
TlsSetValue
TlsGetValue
TlsAlloc
CompareFileTime
TerminateProcess
GetNativeSystemInfo
GetUserDefaultLangID
GetComputerNameW
MulDiv
GetLocaleInfoW
GetProfileStringW
GetPrivateProfileStringW
WriteProfileStringW
WritePrivateProfileStringW
ReadFile
SetFilePointer
PowerCreateRequest
PowerSetRequest
PowerClearRequest
ExitThread
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
ExitProcess
GetTempFileNameW
OpenProcess
GetACP
lstrcmpW
OpenThread
WaitForMultipleObjects
FreeLibraryAndExitThread
TerminateThread
HeapAlloc
Wow64RevertWow64FsRedirection
WriteFile
GetOverlappedResult
VirtualFree
VirtualAlloc
ReleaseMutex
FlushFileBuffers
GetTempPathW
DebugBreak
GetExitCodeProcess
QueryPerformanceCounter
MoveFileExW
VirtualQuery
GetCurrentDirectoryW
FindFirstFileW
SetFileAttributesW
FindNextFileW
FindClose
RemoveDirectoryW
GetFileTime
CreateMutexW
OpenMutexW
GetShortPathNameW

user32

EnableWindow
IsCharLowerW
LoadStringW
CharNextA
CharNextW
CharUpperW
MessageBoxW
GetActiveWindow
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
PostQuitMessage
ExitWindowsEx
GetSystemMetrics
GetDC
ReleaseDC
PostMessageW
SystemParametersInfoW
IsWindowEnabled
IsDialogMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
DestroyWindow
UnregisterClassW
GetDlgItem
SetWindowTextW
ShowWindow
SetForegroundWindow
SendMessageW
InvalidateRect
IsWindowVisible
GetUserObjectInformationW
LoadCursorW
GetWindowRect
GetWindowLongW
SetWindowLongW
SendDlgItemMessageW
SetDlgItemTextW
CreateDialogParamW
MoveWindow
SetFocus
LoadIconW
SetWindowPos
GetDlgItemTextW
EndDialog
GetWindowTextLengthW
GetWindowTextW
DialogBoxParamW
GetSystemMenu
RemoveMenu
CopyRect
DrawTextW
MapWindowPoints
GetClientRect
RegisterWindowMessageW
SetWindowLongPtrW
GetWindowLongPtrW
GetFocus
GetSysColor
CharUpperBuffW
SendMessageTimeoutW
CharPrevW
EnableMenuItem
SetUserObjectSecurity
EnumWindows
GetWindow
GetWindowThreadProcessId
SetCursor
GetProcessWindowStation
CharLowerW

shell32

CommandLineToArgvW

gdi32

CreateSolidBrush
SetBkColor
SetTextColor
EnumFontFamiliesExW
CreateFontW
GetTextExtentPoint32W
RemoveFontResourceW
AddFontResourceW
DeleteObject
GetTextMetricsW
GetTextFaceW
SelectObject
CreateFontIndirectW
GetDeviceCaps

rpcrt4

RpcAsyncCompleteCall
I_RpcExceptionFilter
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
CStdStubBuffer_DebugServerQueryInterface
NdrOleFree
RpcAsyncInitializeHandle
RpcBindingFree
Ndr64AsyncClientCall
RpcBindingSetAuthInfoExW
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrClientCall3
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
RpcAsyncCancelCall

ole32

HWND_UserUnmarshal
HWND_UserFree
HWND_UserFree64
HWND_UserSize64
HWND_UserSize
HWND_UserMarshal
HWND_UserMarshal64
HWND_UserUnmarshal64
IIDFromString
CoTaskMemAlloc
CoTaskMemFree
PropVariantClear
CoCreateGuid

bcrypt

BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptCreateHash
BCryptDestroyHash

api-ms-win-security-base-l1-1-0

RevertToSelf
CreateWellKnownSid
ImpersonateLoggedOnUser

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Migrate10CachedPackagesA
Migrate10CachedPackagesW
MsiAdvertiseProductA
MsiAdvertiseProductExA
MsiAdvertiseProductExW
MsiAdvertiseProductW
MsiAdvertiseScriptA
MsiAdvertiseScriptW
MsiApplyMultiplePatchesA
MsiApplyMultiplePatchesW
MsiApplyPatchA
MsiApplyPatchW
MsiBeginTransactionA
MsiBeginTransactionW
MsiCloseAllHandles
MsiCloseHandle
MsiCollectUserInfoA
MsiCollectUserInfoW
MsiConfigureFeatureA
MsiConfigureFeatureFromDescriptorA
MsiConfigureFeatureFromDescriptorW
MsiConfigureFeatureW
MsiConfigureProductA
MsiConfigureProductExA
MsiConfigureProductExW
MsiConfigureProductW
MsiCreateAndVerifyInstallerDirectory
MsiCreateRecord
MsiCreateTransformSummaryInfoA
MsiCreateTransformSummaryInfoW
MsiDatabaseApplyTransformA
MsiDatabaseApplyTransformW
MsiDatabaseCommit
MsiDatabaseExportA
MsiDatabaseExportW
MsiDatabaseGenerateTransformA
MsiDatabaseGenerateTransformW
MsiDatabaseGetPrimaryKeysA
MsiDatabaseGetPrimaryKeysW
MsiDatabaseImportA
MsiDatabaseImportW
MsiDatabaseIsTablePersistentA
MsiDatabaseIsTablePersistentW
MsiDatabaseMergeA
MsiDatabaseMergeW
MsiDatabaseOpenViewA
MsiDatabaseOpenViewW
MsiDecomposeDescriptorA
MsiDecomposeDescriptorW
MsiDeleteUserDataA
MsiDeleteUserDataW
MsiDetermineApplicablePatchesA
MsiDetermineApplicablePatchesW
MsiDeterminePatchSequenceA
MsiDeterminePatchSequenceW
MsiDoActionA
MsiDoActionW
MsiEnableLogA
MsiEnableLogW
MsiEnableUIPreview
MsiEndTransaction
MsiEnumClientsA
MsiEnumClientsExA
MsiEnumClientsExW
MsiEnumClientsW
MsiEnumComponentCostsA
MsiEnumComponentCostsW
MsiEnumComponentQualifiersA
MsiEnumComponentQualifiersW
MsiEnumComponentsA
MsiEnumComponentsExA
MsiEnumComponentsExW
MsiEnumComponentsW
MsiEnumFeaturesA
MsiEnumFeaturesW
MsiEnumPatchesA
MsiEnumPatchesExA
MsiEnumPatchesExW
MsiEnumPatchesW
MsiEnumProductsA
MsiEnumProductsExA
MsiEnumProductsExW
MsiEnumProductsW
MsiEnumRelatedProductsA
MsiEnumRelatedProductsW
MsiEvaluateConditionA
MsiEvaluateConditionW
MsiExtractPatchXMLDataA
MsiExtractPatchXMLDataW
MsiFormatRecordA
MsiFormatRecordW
MsiGetActiveDatabase
MsiGetComponentPathA
MsiGetComponentPathExA
MsiGetComponentPathExW
MsiGetComponentPathW
MsiGetComponentStateA
MsiGetComponentStateW
MsiGetDatabaseState
MsiGetFeatureCostA
MsiGetFeatureCostW
MsiGetFeatureInfoA
MsiGetFeatureInfoW
MsiGetFeatureStateA
MsiGetFeatureStateW
MsiGetFeatureUsageA
MsiGetFeatureUsageW
MsiGetFeatureValidStatesA
MsiGetFeatureValidStatesW
MsiGetFileHashA
MsiGetFileHashW
MsiGetFileSignatureInformationA
MsiGetFileSignatureInformationW
MsiGetFileVersionA
MsiGetFileVersionW
MsiGetLanguage
MsiGetLastErrorRecord
MsiGetMode
MsiGetPatchFileListA
MsiGetPatchFileListW
MsiGetPatchInfoA
MsiGetPatchInfoExA
MsiGetPatchInfoExW
MsiGetPatchInfoW
MsiGetProductCodeA
MsiGetProductCodeFromPackageCodeA
MsiGetProductCodeFromPackageCodeW
MsiGetProductCodeW
MsiGetProductInfoA
MsiGetProductInfoExA
MsiGetProductInfoExW
MsiGetProductInfoFromScriptA
MsiGetProductInfoFromScriptW
MsiGetProductInfoW
MsiGetProductPropertyA
MsiGetProductPropertyW
MsiGetPropertyA
MsiGetPropertyW
MsiGetShortcutTargetA
MsiGetShortcutTargetW
MsiGetSourcePathA
MsiGetSourcePathW
MsiGetSummaryInformationA
MsiGetSummaryInformationW
MsiGetTargetPathA
MsiGetTargetPathW
MsiGetUserInfoA
MsiGetUserInfoW
MsiInstallMissingComponentA
MsiInstallMissingComponentW
MsiInstallMissingFileA
MsiInstallMissingFileW
MsiInstallProductA
MsiInstallProductW
MsiInvalidateFeatureCache
MsiIsProductElevatedA
MsiIsProductElevatedW
MsiJoinTransaction
MsiLoadStringA
MsiLoadStringW
MsiLocateComponentA
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiPreviewBillboardA
MsiPreviewBillboardW
MsiPreviewDialogA
MsiPreviewDialogW
MsiProcessAdvertiseScriptA
MsiProcessAdvertiseScriptW
MsiProcessMessage
MsiProvideAssemblyA
MsiProvideAssemblyW
MsiProvideComponentA
MsiProvideComponentFromDescriptorA
MsiProvideComponentFromDescriptorW
MsiProvideComponentW
MsiProvideQualifiedComponentA
MsiProvideQualifiedComponentExA
MsiProvideQualifiedComponentExW
MsiProvideQualifiedComponentW
MsiQueryComponentStateA
MsiQueryComponentStateW
MsiQueryFeatureStateA
MsiQueryFeatureStateExA
MsiQueryFeatureStateExW
MsiQueryFeatureStateFromDescriptorA
MsiQueryFeatureStateFromDescriptorW
MsiQueryFeatureStateW
MsiQueryProductStateA
MsiQueryProductStateW
MsiRecordClearData
MsiRecordDataSize
MsiRecordGetFieldCount
MsiRecordGetInteger
MsiRecordGetStringA
MsiRecordGetStringW
MsiRecordIsNull
MsiRecordReadStream
MsiRecordSetInteger
MsiRecordSetStreamA
MsiRecordSetStreamW
MsiRecordSetStringA
MsiRecordSetStringW
MsiReinstallFeatureA
MsiReinstallFeatureFromDescriptorA
MsiReinstallFeatureFromDescriptorW
MsiReinstallFeatureW
MsiReinstallProductA
MsiReinstallProductW
MsiRemovePatchesA
MsiRemovePatchesW
MsiSequenceA
MsiSequenceW
MsiSetComponentStateA
MsiSetComponentStateW
MsiSetExternalUIA
MsiSetExternalUIRecord
MsiSetExternalUIW
MsiSetFeatureAttributesA
MsiSetFeatureAttributesW
MsiSetFeatureStateA
MsiSetFeatureStateW
MsiSetInstallLevel
MsiSetInternalUI
MsiSetMode
MsiSetOfflineContextW
MsiSetPropertyA
MsiSetPropertyW
MsiSetTargetPathA
MsiSetTargetPathW
MsiSourceListAddMediaDiskA
MsiSourceListAddMediaDiskW
MsiSourceListAddSourceA
MsiSourceListAddSourceExA
MsiSourceListAddSourceExW
MsiSourceListAddSourceW
MsiSourceListClearAllA
MsiSourceListClearAllExA
MsiSourceListClearAllExW
MsiSourceListClearAllW
MsiSourceListClearMediaDiskA
MsiSourceListClearMediaDiskW
MsiSourceListClearSourceA
MsiSourceListClearSourceW
MsiSourceListEnumMediaDisksA
MsiSourceListEnumMediaDisksW
MsiSourceListEnumSourcesA
MsiSourceListEnumSourcesW
MsiSourceListForceResolutionA
MsiSourceListForceResolutionExA
MsiSourceListForceResolutionExW
MsiSourceListForceResolutionW
MsiSourceListGetInfoA
MsiSourceListGetInfoW
MsiSourceListSetInfoA
MsiSourceListSetInfoW
MsiSummaryInfoGetPropertyA
MsiSummaryInfoGetPropertyCount
MsiSummaryInfoGetPropertyW
MsiSummaryInfoPersist
MsiSummaryInfoSetPropertyA
MsiSummaryInfoSetPropertyW
MsiUseFeatureA
MsiUseFeatureExA
MsiUseFeatureExW
MsiUseFeatureW
MsiVerifyDiskSpace
MsiVerifyPackageA
MsiVerifyPackageW
MsiViewClose
MsiViewExecute
MsiViewFetch
MsiViewGetColumnInfo
MsiViewGetErrorA
MsiViewGetErrorW
MsiViewModify
QueryInstanceCount

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 658KB - Virtual size: 657KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/ProxySocket.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

V:\Development\Viking.ApplicationFramework\ProxySocket\src\obj\Release\ProxySocket.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Traceless 1.1.8/svg/opengl32.exe
.exe windows:5 windows x86 arch:x86

48aa5c8931746a9655524f67b25a47ef

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:3b:84:16:21:e1:ee:5d:b5:3d:07:4e:ff:b4:07:32
Certificate

Issuer

CN=Kazana Solutions UG CA,O=Kazana Solutions UG,L=Munich,ST=Bavaria,C=DE

Not Before

29/08/2016, 19:03

Not After

31/12/2039, 23:59

Subject

CN=Kazana Solutions UG CA,O=Kazana Solutions UG,L=Munich,ST=Bavaria,C=DE

9f:ba:0c:e3:14:a2:ea:8d:7d:67:63:5f:e3:48:8a:04:e3:35:c6:44
Signer

Actual PE Digest

9f:ba:0c:e3:14:a2:ea:8d:7d:67:63:5f:e3:48:8a:04:e3:35:c6:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/security-prefs.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/u1902.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UltraSurf 19.02/verifier/forms.exe
.exe windows:4 windows x86 arch:x86

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:ab:ac:07:f8:d0:ce:56:7f:7d:75:ee:04:7e:fe:e2
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

20/04/2018, 00:00

Not After

23/06/2021, 12:00

Subject

CN=Ultrareach Internet Corp.,O=Ultrareach Internet Corp.,L=Cheyenne,ST=Wyoming,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:df:78:e1:8e:fb:28:04:3c:ce:28:d2:77:94:7c:f8:db:8c:58:32
Signer

Actual PE Digest

11:df:78:e1:8e:fb:28:04:3c:ce:28:d2:77:94:7c:f8:db:8c:58:32

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/UnblockDoom.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/sysmain.exe
.exe windows:5 windows x86 arch:x86

4cfda23baf1e2e983ddfeca47a5c755a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

Imports

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

FindClose
FindNextFileW
FindFirstFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
GetModuleFileNameW
FindResourceW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcessId
GetLocaleInfoW
GetNumberFormatW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
WaitForSingleObject
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetExitCodeProcess
GetTempPathW
MoveFileExW
UnmapViewOfFile
Sleep
MapViewOfFile
GetCommandLineW
CreateFileMappingW
GetTickCount
OpenFileMappingW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetProcessAffinityMask
CreateEventW
CreateSemaphoreW
ReleaseSemaphore
ResetEvent
SetEvent
SetThreadPriority
SystemTimeToFileTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
SetFileTime
SetFileAttributesW
SetCurrentDirectoryW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleHandleA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameA
ExitProcess
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetCommandLineA
RaiseException
GetFileAttributesW
FlushFileBuffers
ReadFile
GetFileType
SetEndOfFile
SetFilePointer
WriteFile
GetStdHandle
GetLongPathNameW
GetShortPathNameW
GlobalAlloc
MoveFileW
CreateFileW
CreateDirectoryW
DeviceIoControl
RemoveDirectoryW
DeleteFileW
CreateHardLinkW
GetCurrentProcess
CloseHandle
SetLastError
GetLastError
CreateFileA
GetCPInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind

user32

EnableWindow
GetDlgItem
ShowWindow
SetWindowLongW
GetDC
ReleaseDC
FindWindowExW
GetParent
MapWindowPoints
CreateWindowExW
UpdateWindow
LoadCursorW
RegisterClassExW
DefWindowProcW
DestroyWindow
CopyRect
IsWindow
CharUpperW
OemToCharBuffA
LoadIconW
LoadBitmapW
PostMessageW
GetSysColor
SetForegroundWindow
MessageBoxW
WaitForInputIdle
IsWindowVisible
DialogBoxParamW
DestroyIcon
SetFocus
GetClassNameW
SendDlgItemMessageW
EndDialog
GetDlgItemTextW
SetDlgItemTextW
wvsprintfW
SendMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
GetWindowRect
GetClientRect
SetWindowPos
GetWindowTextW
SetWindowTextW
GetSystemMetrics
GetWindow
GetWindowLongW

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
StretchBlt
DeleteDC
GetObjectW
DeleteObject
CreateDIBSection

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

shell32

SHBrowseForFolderW
ShellExecuteExW
SHGetSpecialFolderLocation
SHFileOperationW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHGetFileInfoW

ole32

CLSIDFromString
CoCreateInstance
OleInitialize
OleUninitialize
CreateStreamOnHGlobal

oleaut32

VariantInit

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/nspr-config/tcbloader.dll
.dll windows:10 windows x64 arch:x64

288f945a04bd6ccc346dcbca2ab60c08

Code Sign

33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:24

Not After

02/05/2020, 21:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:38:cf:c6:12:75:f7:ff:f2:8b:8d:ae:d5:2e:34:21:8b:88:d7:b0:44:59:8c:89:53:f3:39:16:46:4b:b6:70
Signer

Actual PE Digest

bf:38:cf:c6:12:75:f7:ff:f2:8b:8d:ae:d5:2e:34:21:8b:88:d7:b0:44:59:8c:89:53:f3:39:16:46:4b:b6:70

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

tcbloader.pdb

Imports

bootlib

BlBdStop
RtlAnsiStringToUnicodeString
BlAppendUnicodeToString
BlArchCpuId
BlUtlGetAcpiTable
RtlFreeUnicodeString
RtlInitUnicodeString
BlArchIsFiveLevelPagingActive
RtlInitAnsiString
strcat_s
BlMmMapPhysicalAddress
ArchBuildKernelGdt
BlBdPatchIdt
BlMmAllocatePages
BlArchKernelSetup
BlMmAllocatePhysicalPages
BlMmFreePhysicalPages
BlMmFreePages
BlBdDebugTransitionsEnabled
BlArchGetPerformanceCounter
wcsnlen
BlImgGetSigningPolicy
BlImgIsUpgradedPlatform
BlImgIsWinPE
BlSiMeasureOsRevocationList
BlImgGetWhqlEnforcementDateTime
SbGetSizeOfKernelPolicyPackage
SIPolicyIsSignedPolicyRequired
SbArePolicyOptionsSet
MinCrypL_HashMemory
RtlFindExportedRoutineByName
BlStatusPrint
RtlGUIDFromString
BlImgParseOsRevocationList
BlGetBootDevice
BlImgSetSysDevWhqlPolicy
BlImgRegisterCodeIntegrityCatalogs
BlDeviceClose
RtlEqualUnicodeString
SIPolicyInvalidateEAsOnRebootEnabled
SbIsEnabled
BlFileClose
_wcsicmp
MincryptSetWeakCryptoPolicy
BlImgRegisterCodeIntegrityCatalogDirectory
BlGetApplicationEntry
BlImgSetRestrictedSigning
BlMmAllocateHeap
SbLoadFile
BlFileReadAtOffsetEx
BlpPdReleaseData
BlFileOpen
wcscpy_s
wcscat_s
BlLdrFreeDataTableEntry
BlpPdQueryData
qsort
SIPolicyGetSerializedPoliciesSize
BlSIPolicyCheckPolicyOnDevice
BlLdrBuildImagePath
BlTpmStatus
BlImgSetSigningPolicy
SIPolicyHashActiveCodeExecutionPolicies
BlImgTrustCustomSignersForDrivers
SIPolicyClearAllActivePolicy
BlDeviceOpen
RtlInitUnicodeStringEx
BlGetBootOptionDevice
SbFreeFileData
BlLdrPreloadFile
SIPolicyIsPolicyActive
SIPolicyGetOptions
SbIsTestRootTrusted
BlSIPolicyLoadAndActivateTemporalPolicy
BlImgQueryCodeIntegrityBootOptions
BlImgIsWhqlEnabledBySetting
BlMmFreeHeap
BlDeviceCompare
BlGetBootOptionBoolean
BlSecureBootGetNonVolatilePrivateVariable
BlImgIsWhqlDeveloperTestModeEnabled
BlImgUnLoadImage
SIPolicyGetPolicyHandle
BlGetBootOptionString
SbValidateSkuUnlockToken
SIPolicySetTrialMode
BlImgIsBootUpgradedPlatform
SIPolicyUmciEnabled
BlVsmGetSystemPolicy
SIPolicyGetSerializedPolicies
BlGetBootOptionInteger
BlImgIsUpgradeInProgress
BlBdDebuggerConnected
SIPolicyDeletePersistentVariable
BlImgIsWhqlDisabledBySetting
BlFileGetInformation
SbGetKernelPolicyPackage
SbIsDebugPolicyActive
SIPolicyGetPolicyInfoFromType
BlArchGetCpuVendor
BlMmAddEnclavePageRange
BlArchIsCpuIdFunctionSupported
_strupr
BlLogDestroy
BlBootOptionExists
McGenEventWriteBoot
BlMmMapPhysicalAddressEx
BlMmQueryLargePageSize
BlAppendBootOptionString
BlLogDiagWrite
BlTpmShutdown
BlGetExecutionEnvironment
BlMmGetMemoryMap
_wcsupr
BlBsdCloseLog
BlRemoveBootOption
BlLogEtwWriteTransfer
BlImgLoadImageWithProgress2
swprintf_s
wcsstr
BlMmUnmapVirtualAddress
BlCopyBootOptions
BlGetApplicationIdentifier
BlMmAllocateVirtualPages
BlLogInitialize
BlImgFindSection
strstr
_wcsnicmp
BlGetDeviceIdentifier
BlStatusRegisterErrorHandler
SbIsPolicyActive
BlPdDestroyData
BlImgGetPEImageSize
BlSIPolicyDoesActivePolicyGrantPermission
BlArchQueryIoPortAccessSupported
BlUpdateBootOptions
BlFveCheckPermission
BlMmReleaseMemoryMap
BlCopyWcharStringToString
BlMmEnumerateAllocations
BlMmTranslateVirtualAddress
BlUtlGetAcpiTableOverrides
SbDoesActivePolicyGrantPermission
BlTimeQueryPerformanceCounter
AhCreateLoadOptionsString
BlSecureBootIgnoreSingleBootOption
RtlImageDirectoryEntryToData
BlCopyStringToUnicodeString
BlLdrPreloadImage
RtlPrefixUnicodeString
BlLdrLoadImage
BlCopyUnicodeStringToUnicodeString
LdrInitSecurityCookie
BlGetDevice
BlVsmCheckSystemPolicy
BlPdQueryDataAll
SbIsTestSigningBlocked
RtlAppendUnicodeToString
BlObtainUnusedSlabPages
BlFwGetAcpiMemoryMap
BlAllocateSlabPages
BlBdSetupDebuggingDevice
DbgLoadImageSymbols
BlUtlPopulateAcpiTableCache
BlFwGetSystemTable
SbIsEnabled2
KdNetGetNetDataSize
BlVsmKeysGetCurrentLKeyRefFromArray
BlLdrUnloadImage
_wcstoui64
BlSvnGetApplicationSvn
BlSvnGetChainStatus
BlTcgFwSetAndLockMemoryOverwriteRequestControl
SymCryptGcmEncryptPart
SipaQueueConfigEntry
rsa_encryption
SymCryptGcmEncryptFinal
SymCryptGcmDecryptFinal
rsa_construction_fips186_3
BlFileReadEx
TpmApiCheckSecureNVIndex20
SymCryptSha256Append
SymCryptGcmInit
rsa_export_sizes
SymCryptGcmExpandKey
rsa_decryption
TpmApiUnsealEx
BlPdSaveData
BlSealSecretToCurrentPcrValues
SymCryptGcmAuthPart
TpmApiCreateSecureNVIndex20
BlLogEtwWrite
BlSymCryptGetAesBlockCipher
SymCryptSha256Result
SymCryptGcmDecryptPart
rsa_export
SymCryptSha256
SymCryptSha256Init
BlSiFlushCurrentMeasurements
rsa_destruction
TpmApiGetTpmVersion
BlVsmKeysAddNewKeyToArray
TpmApiSealPolicyAuthorized20
TpmApiCreateSrk20
BlSiPaRecordDrtmConfigEvent
BlSiDrtmEnvironmentUnsafe
BlFileLoad
TpmApiDrtmGetSigningKeys
BlCreateTpmSealedBlob
BlValidateMemoryRange
TpmApiIsCurrentStatePolicyAuthorized20
BlVsmKeysValidateKeyPkgBuffer
BlVsmKeysCreateKeyPkg
BlVsmKeysFindKeyMapByType
TpmApiUnsealPolicyAuthorized20
BlDecryptSealedData
BlVsmKeysExplodePkg
OslGetDrtmSvn
wcsncmp
TpmApiGetKeyPublicProperty20
TpmApiReadPublic20
BlSiSetDrtmEnvironmentUnsafe
BlLdrLoadDll
BlSiHandleHypervisorLaunchEvent
BlBdGetExtensionName
BlBdLoadImageSymbols
BlBdInitializeTransportExtension
BlBdInitializeDeviceDescriptor
BlBdReleaseDebuggingDevice
wcsrchr
BlArchDetectSmt
BlSiEnvironmentReady
BlEnNotifyEvent
BlSiPaRecordConfigEvent
SipaGetDataPointers
SipapAppendEntry
SymCryptSha1
SipaQueueConfigEntryToQueue
SipapCreateQueue
BlSiEnterInsecureStateEx
BlSiLeaveEnvironment
BlUtlSetAcpiTableOverrides
BlUtlCheckSum
strcpy_s
_stricmp
BlTblSetEntry
RtlCompareMemory
RtlUnicodeStringToAnsiString
BlPdFreeData
BlBsdLogEntry
BlResourceFindMessage
BlStatusError
SymCryptRngAesReseedSelftest
BlTpmGetRandom
SymCryptRdseedStatus
SymCryptRngAesInstantiateSelftest
SymCryptRdrandGet
SymCryptSha512Result
SymCryptSha512Append
SymCryptRdrandStatus
SymCryptSha512Init
SymCryptHmacSha512Selftest
SymCryptRngAesFips140_2Generate
SymCryptRngAesFips140_2Uninstantiate
SymCryptRdseedGet
SymCryptSha512
SymCryptRngAesGenerateSelftest
SymCryptRngAesFips140_2Instantiate
BlFwQueryEfiRuntimeVaRange
EfiGetMemoryAttributesTable
BlLogEtwRegister
BlValidateWideStringMemory
BlMmTranslateEfiMemoryType
BlValidateListMemory
BlValidatePhysicalMemoryRange
BlValidateAnsiStringMemory
BlArchSetSecrets
BlImgVerifyFontIntegrity
BlResourceGetLanguageMapping
BlFileSetInformation
BlResourceFindDataFromImage
BlImgLoadPEImageWithPolicyValidatedHash
BlImgLoadPEImageEx
BlDisplayFreeOemBitmap
BlDisplayGetOemBitmap
BlDisplayInvalidateOemBitmap
RtlCompareUnicodeString
RtlAppendUnicodeStringToString
RtlStringFromGUID
sprintf_s
RtlInitializeBitMap
RtlSetBits
SymCryptInit
SymCryptMarvin32ExpandSeed
RtlUpcaseUnicodeChar
BlUtlValidateMemoryRange
BlMmFreeVirtualPages
BlMmUnmapVirtualAddressEx
BlMmRemapVirtualAddress
BlMmFlushTlb
ArchGetGdtRegister
BlVsmKeysGetCurrentLKeyRefFromPkg
BlSecureBootSetVolatilePrivateVariable
BlVsmKeysSupportedByPlatform
SymCryptSp800_108
BlVsmKeysReadAndUnsealLKeyPkg
BlSymCryptGetHmacSha256Algorithm
RtlCompareUnicodeStrings
memset
__GSHandlerCheck
memcmp
memcpy
memmove
wcscmp

Exports

Exports

OslGenRandomBytes
OslGetControlSubkeyCell
OslGetExportRoutineInModule
OslGetStringValue
OslGetValue
OslIsRunningInSecureKernel
TcbLoadEntry
TcbResumeEntry

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/vertdll.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:02:29:e8:93:3c:c4:14:fa:f5:7c:00:00:00:00:02:29
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2019, 19:21

Not After

27/03/2020, 19:21

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72
Signer

Actual PE Digest

1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vertdll.pdb

Exports

Exports

AcquireSRWLockExclusive
AcquireSRWLockShared
CallEnclave
CloseHandle
CreateEventW
DbgPrint
DelayLoadFailureHook
DeleteCriticalSection
DeleteSynchronizationBarrier
DeviceIoControl
DisableThreadLibraryCalls
EnclaveGetAttestationReport
EnclaveGetEnclaveInformation
EnclaveSealData
EnclaveUnsealData
EnclaveVerifyAttestationReport
EnterCriticalSection
EnterSynchronizationBarrier
EtwEventRegister
EtwEventUnregister
EtwEventWrite
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwTraceMessage
EtwUnregisterTraceGuids
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
ExpInterlockedPopEntrySListEnd
ExpInterlockedPopEntrySListFault
ExpInterlockedPopEntrySListResume
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnabledXStateFeatures
GetFipsModeFromIumKernelState
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
GetProcessHeap
GetProcessHeaps
GetSeedFromIumKernelState
GetSystemDirectoryW
GetSystemInfo
GetXStateFeaturesMask
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSize
HeapUnlock
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InitializeSynchronizationBarrier
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedPushListSList
InterlockedPushListSListEx
KiUserExceptionDispatcher
LdrDisableThreadCalloutsForDll
LdrResolveDelayLoadedAPI
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocateXStateFeature
NtClose
NtDeviceIoControlFile
NtOpenFile
NtOpenKey
NtQueryInformationProcess
NtQueryValueKey
NtTerminateProcess
OpenProcessToken
OutputDebugStringW
PrivilegeCheck
QueryDepthSList
QueryFullProcess
QueryFullProcessImageNameW
RaiseException
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegisterWaitForSingleObjectEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResolveDelayLoadedAPI
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAllocateHeap
RtlAssert
RtlCallEnclaveReturn
RtlCaptureContext
RtlCompareUnicodeString
RtlDeleteCriticalSection
RtlDeleteResource
RtlEnclaveCallDispatch
RtlEnclaveCallDispatchReturn
RtlEnterCriticalSection
RtlFreeHeap
RtlGetCurrentProcessorNumberEx
RtlGetLastNtStatus
RtlImageNtHeader
RtlInitUnicodeString
RtlInitializeCriticalSection
RtlInitializeResource
RtlLeaveCriticalSection
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlPcToFileHeader
RtlRaiseStatus
RtlReleaseResource
RtlReleaseResourceShared
RtlTimeFieldsToTime
RtlUnhandledExceptionFilter
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCriticalSectionSpinCount
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SleepConditionVariableCS
SleepConditionVariableSRW
TerminateEnclave
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnregisterWaitEx
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
__C_specific_handler
__chkstk
_local_unwind
_vsnwprintf
_wcsicmp
memcmp
memcpy
memmove
memset
qsort
wcscmp
wcscpy_s
wcsncmp

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/UnblockDoom 2.0.0.0/viewsource.css
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/Jint.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\jint\Jint\obj\Release\net451\Jint.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/VPN Connection Indicator Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/all.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/ctypes.jsm
.js
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/data/xul.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN Connection Indicator 1.0/ssl3.dll
.dll windows:4 windows x86 arch:x86

1f5dd6cab148898853798a9c54fe2055

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\nss\ssl\ssl3.pdb

Imports

nss3

NSS_RegisterShutdown
PK11_Finalize
CERT_FreeDistNames
CERT_GetSSLCACerts
SECKEY_CacheStaticFlags
CERT_DupCertList
PK11_MapSignKeyType
PK11_CopyTokenPrivKeyToSessionPrivKey
PK11_ReferenceSlot
PK11_WrapSymKey
CERT_DupDistNames
CERT_GetDefaultCertDB
CERT_FreeNicknames
CERT_CheckCertValidTimes
CERT_GetCertNicknames
PK11_FindKeyByAnyCert
CERT_FindUserCertByUsage
CERT_FindCertByName
PK11_UnwrapSymKey
PK11_SaveContextAlloc
PK11_DigestKey
PK11_RestoreContext
PK11_CreateDigestContext
PK11_Derive
PK11_GetSlotFromKey
PK11_SymKeyFromHandle
NSS_VersionCheck
SECMOD_LookupSlot
PK11_IsPresent
PK11_GetSlotSeries
PK11_GetSlotID
PK11_GetModuleID
PK11_NeedLogin
PK11_IsLoggedIn
PK11_DigestBegin
PK11_DigestOp
PK11_DigestFinal
PK11_CreateContextBySymKey
PK11_IVFromParam
PK11_CipherOp
PK11_ParamFromIV
PK11_DestroyContext
PK11_HashBuf
SECKEY_SignatureLen
DSAU_DecodeDerSigToLen
DSAU_DecodeDerSig
PK11_Verify
PK11_SignatureLen
PK11_Sign
DSAU_EncodeDerSigWithLen
PK11_GenerateRandom
PK11_TokenExists
CERT_ExtractPublicKey
SECKEY_GetPrivateKeyType
VFY_CreateContext
VFY_Begin
VFY_Update
VFY_End
VFY_DestroyContext
SGN_NewContext
SGN_Begin
SGN_Update
SGN_End
SGN_DestroyContext
PK11_PubEncryptRaw
PK11_PubDecryptRaw
PK11_GetBestSlot
__PK11_CreateContextByRawKey
HASH_GetHashObject
CERT_VerifyCertName
CERT_NameToAscii
SECKEY_CopyPrivateKey
CERT_NewTempCertificate
SECKEY_UpdateCertPQG
CERT_VerifyCertNow
PK11_UnwrapSymKeyWithFlags
PK11_ImportSymKey
SECKEY_CreateDHPrivateKey
PK11_PubDerive
CERT_DupCertificate
CERT_CertChainFromCert
PK11_GetSlotFromPrivateKey
PK11_GetInternalSlot
PK11_GetKeyData
CERT_DestroyCertificateList
SECKEY_CreateRSAPrivateKey
PK11_GetCurrentWrapIndex
PK11_GetWrapKey
PK11_GetBestWrapMechanism
PK11_SetWrapKey
PK11_GetMechanism
CERT_DestroyCertificate
PK11_VerifyKeyOK
PK11_ReferenceSymKey
PK11_GetBestKeyLength
PK11_FreeSymKey
SECKEY_PublicKeyStrengthInBits
PK11_GetPrivateModulusLen
PK11_GetBestSlotMultiple
PK11_KeyGen
PK11_FreeSlot
SECKEY_PublicKeyStrength
PK11_PubWrapSymKey
PK11_PrivDecryptPKCS1
PK11_PubUnwrapSymKey
SECKEY_CreateECPrivateKey
SECKEY_DestroyPrivateKey
SECKEY_DestroyPublicKey
PK11_PubDeriveWithKDF
PK11_DeriveWithFlags
PK11_ExtractKeyValue
CERT_DistNamesFromCertList

nssutil3

PORT_ArenaAlloc_Util
PORT_SetError_Util
SECOID_FindOID_Util
SECOID_FindOIDByTag_Util
SECITEM_DupItem_Util
DER_Lengths_Util
NSSRWLock_New_Util
NSSRWLock_Destroy_Util
ATOB_AsciiToData_Util
BTOA_DataToAscii_Util
NSS_PutEnv_Util
SECITEM_Hash
SECOID_GetAlgorithmTag_Util
PORT_Realloc_Util
SECITEM_AllocItem_Util
SECITEM_ZfreeItem_Util
NSS_SecureMemcmp
PORT_ZFree_Util
PORT_NewArena_Util
PORT_ArenaZAlloc_Util
PORT_GetError_Util
PORT_FreeArena_Util
PORT_ZAlloc_Util
SECITEM_CopyItem_Util
PORT_Strdup_Util
SECITEM_CompareItem_Util
NSSRWLock_LockRead_Util
NSSRWLock_UnlockRead_Util
NSSRWLock_LockWrite_Util
NSSRWLock_UnlockWrite_Util
PORT_Alloc_Util
PORT_Free_Util
SECITEM_FreeItem_Util

plc4

PL_strdup

nspr4

PR_FindFunctionSymbol
PR_UnloadLibrary
PR_GetLibraryFilePathname
PR_Free
PR_GetDirectorySeparator
PR_LoadLibraryWithFlags
PR_Now
PR_Close
PR_NewMonitor
PR_CreateIOLayerStub
PR_PushIOLayer
PR_GetUniqueIdentity
PR_GetDefaultIOMethods
PR_GetSocketOption
PR_ConvertIPv4AddrToIPv6
PR_SetError
PR_DestroyMonitor
PR_GetIdentitiesLayer
PR_EmulateAcceptRead
PR_EmulateSendFile
PR_ImportFileMapFromString
PR_ExportFileMapAsString
PR_smprintf
PR_OpenAnonFileMap
PR_smprintf_free
PR_MemMap
PR_MemUnmap
PR_CloseFileMap
PR_StringToNetAddr
PR_CallOnce
PR_CallOnceWithArg
PR_PopIOLayer
PR_GetCurrentThread
PR_ExitMonitor
PR_Sleep
PR_EnterMonitor
PR_GetError
PR_NewLock
PR_Lock
PR_Unlock
PR_DestroyLock
PR_GetEnv

mozcrt19

_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_decode_pointer
_encoded_null
free
memcpy
memset
strcmp
memmove
_getpid
memcmp
strstr
strlen
_time64
strchr
getenv
strcpy
strrchr
_encode_pointer
__clean_type_info_names_internal
_malloc_crt

kernel32

GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
GetLastError
GetSystemTimeAsFileTime

Exports

Exports

NSSSSL_VersionCheck
NSS_CmpCertChainWCANames
NSS_FindCertKEAType
NSS_GetClientAuthData
NSS_SetDomesticPolicy
NSS_SetExportPolicy
NSS_SetFrancePolicy
SSL_AuthCertificate
SSL_AuthCertificateHook
SSL_BadCertHook
SSL_CanBypass
SSL_CertDBHandleSet
SSL_CipherPolicyGet
SSL_CipherPolicySet
SSL_CipherPrefGet
SSL_CipherPrefGetDefault
SSL_CipherPrefSet
SSL_CipherPrefSetDefault
SSL_ClearSessionCache
SSL_ConfigMPServerSIDCache
SSL_ConfigSecureServer
SSL_ConfigServerSessionIDCache
SSL_ConfigServerSessionIDCacheWithOpt
SSL_DataPending
SSL_ForceHandshake
SSL_ForceHandshakeWithTimeout
SSL_GetChannelInfo
SSL_GetCipherSuiteInfo
SSL_GetClientAuthDataHook
SSL_GetImplementedCiphers
SSL_GetMaxServerCacheLocks
SSL_GetNegotiatedHostInfo
SSL_GetNumImplementedCiphers
SSL_GetSessionID
SSL_GetStatistics
SSL_HandshakeCallback
SSL_HandshakeNegotiatedExtension
SSL_ImplementedCiphers
SSL_ImportFD
SSL_InheritMPServerSIDCache
SSL_InvalidateSession
SSL_LocalCertificate
SSL_NumImplementedCiphers
SSL_OptionGet
SSL_OptionGetDefault
SSL_OptionSet
SSL_OptionSetDefault
SSL_PeerCertificate
SSL_PreencryptedFileToStream
SSL_PreencryptedStreamToFile
SSL_ReHandshake
SSL_ReHandshakeWithTimeout
SSL_ReconfigFD
SSL_ResetHandshake
SSL_RestartHandshakeAfterCertReq
SSL_RestartHandshakeAfterServerCert
SSL_RevealCert
SSL_RevealPinArg
SSL_RevealURL
SSL_SNISocketConfigHook
SSL_SecurityStatus
SSL_SetMaxServerCacheLocks
SSL_SetPKCS11PinArg
SSL_SetSockPeerID
SSL_SetTrustAnchors
SSL_SetURL
SSL_ShutdownServerSessionIDCache

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/ieproxy.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xpcom\typelib\xpt\tools\xpt_link.pdb

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/settings.ini
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/newdev/user32.exe
.exe windows:1 windows x86 arch:x86

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

16:97:4e:bd:28:45:04:ef:a9:f6:73:6a
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

20/06/2019, 09:35

Not After

12/08/2020, 15:04

Subject

CN=Innovative Solutions Grup SRL,O=Innovative Solutions Grup SRL,L=Bucuresti,ST=Bucuresti,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c0:3e:b3:3b:50:96:70:82:b9:c6:7a:17:84:1c:e3:a3:21:6a:db:06:b9:3f:e4:4b:37:e4:46:87:c5:1d:d7:33
Signer

Actual PE Digest

c0:3e:b3:3b:50:96:70:82:b9:c6:7a:17:84:1c:e3:a3:21:6a:db:06:b9:3f:e4:4b:37:e4:46:87:c5:1d:d7:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/node.dll
.dll windows:6 windows x64 arch:x64

fceb67ce2537baf79947374d7a09ebb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\electron\out\R\node.dll.pdb

Imports

ws2_32

shutdown
closesocket
htons
ntohl
inet_addr
setsockopt
ioctlsocket
recvfrom
connect
socket
bind
GetAddrInfoW
WSASetLastError
GetNameInfoW
getsockopt
WSASocketW
select
WSAIoctl
WSARecv
getsockname
getpeername
listen
WSADuplicateSocketW
WSASend
WSARecvFrom
WSASendTo
WSAStartup
send
FreeAddrInfoW
ntohs
gethostname
WSAGetLastError
htonl
recv

msvcp140

??Bid@locale@std@@QEAA_KXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_BADOFF@std@@3_JB
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

kernel32

RtlVirtualUnwind
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
SleepConditionVariableSRW
SuspendThread
GetThreadContext
OpenThread
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleA
DebugBreak
CancelIo
WaitNamedPipeW
SwitchToThread
GetNamedPipeHandleStateW
PeekNamedPipe
CreateNamedPipeW
CreateNamedPipeA
SetNamedPipeHandleState
LoadLibraryExW
FormatMessageA
GetExitCodeProcess
CreateProcessW
LCMapStringW
UnregisterWaitEx
CreateJobObjectW
TerminateProcess
AssignProcessToJobObject
SetInformationJobObject
SetConsoleCursorPosition
GetNumberOfConsoleInputEvents
FillConsoleOutputAttribute
WriteConsoleInputW
ReadConsoleW
ReadConsoleInputW
FillConsoleOutputCharacterW
SetConsoleCursorInfo
GetConsoleCursorInfo
SetConsoleMode
UnregisterWait
RegisterWaitForSingleObject
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
CreateSemaphoreW
ResumeThread
WaitForMultipleObjects
GetProcessTimes
SetConsoleTitleW
VerifyVersionInfoW
GlobalMemoryStatusEx
VerSetConditionMask
SetCurrentDirectoryW
GetProcessIoCounters
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetTempPathW
GetConsoleTitleW
GetModuleFileNameW
ConnectNamedPipe
DuplicateHandle
GetStartupInfoW
FlushFileBuffers
CopyFileW
MoveFileExW
SetFilePointerEx
GetFileInformationByHandle
CreateHardLinkW
SetFileTime
RemoveDirectoryW
DeviceIoControl
ReadFile
CreateDirectoryW
ReadDirectoryChangesW
GetCurrentDirectoryW
GetCurrentProcessId
GetStdHandle
SetEnvironmentVariableW
GetEnvironmentVariableW
WaitForSingleObject
OpenFileMappingW
FreeEnvironmentStringsW
UnmapViewOfFile
OpenProcess
MultiByteToWideChar
FormatMessageW
GetLastError
CloseHandle
WriteConsoleW
LocalFree
CreateRemoteThread
GetFileType
MapViewOfFile
GetEnvironmentStringsW
GetVersionExW
SetConsoleCtrlHandler
CreateFileMappingW
ReleaseSemaphore
CreateSemaphoreA
SetThreadPriority
QueryThreadCycleTime
Sleep
GetCurrentThread
QueryPerformanceFrequency
GetThreadPriority
GetSystemTimeAsFileTime
QueryPerformanceCounter
TlsSetValue
VirtualProtect
VirtualFree
GetCurrentProcess
OutputDebugStringA
VirtualAlloc
GetCurrentThreadId
GetTempPathA
GetTimeZoneInformation
CreateFileA
TlsAlloc
DeleteFileA
GetSystemInfo
LoadLibraryW
GetProcAddress
GetFileSize
SystemTimeToFileTime
WideCharToMultiByte
TlsGetValue
GetThreadTimes
TlsFree
GetTempFileNameA
TryEnterCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
LeaveCriticalSection
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
FreeLibrary
LoadLibraryA
GetUserDefaultLocaleName
GetLocaleInfoEx
GetNumberFormatEx
GetCurrencyFormatEx
ResolveLocaleName
GetGeoInfoW
GetUserGeoID
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeFormatEx
GetDateFormatEx
WriteFile
GetModuleHandleW
SetLastError
GlobalMemoryStatus
GetTickCount
FlushConsoleInputBuffer
GetSystemTime
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetConsoleMode
SetHandleInformation
PostQueuedCompletionStatus
QueueUserWorkItem
CreateIoCompletionPort
SetErrorMode
GetQueuedCompletionStatus
GetLongPathNameW
GetShortPathNameW
CreateFileW
GetFileAttributesW

vcruntime140

_purecall
memmove
__std_exception_destroy
memchr
wcschr
strchr
_CxxThrowException
memset
memcmp
__RTtypeid
__std_type_info_compare
__RTDynamicCast
__std_type_info_name
strrchr
wcsstr
wcsrchr
__std_terminate
__CxxFrameHandler3
__C_specific_handler
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
__std_exception_copy
memcpy
strstr

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
raise
_beginthreadex
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_exit
strerror
_execute_onexit_table
_register_onexit_function
exit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
signal
_set_invalid_parameter_handler
_errno
__doserrno
abort
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

fclose
_sopen_dispatch
_close
_fileno
_open_osfhandle
__p__fmode
ftell
_read
fopen
_lseeki64
__stdio_common_vswprintf
fseek
rewind
fgets
_open
__stdio_common_vsprintf
_wopen
fread
fputs
feof
fputc
_wfopen
_setmode
__stdio_common_vsscanf
fsetpos
ferror
__acrt_iob_func
fflush
_fseeki64
_get_stream_buffer_pointers
setvbuf
ungetc
fopen_s
__stdio_common_vsnprintf_s
_get_osfhandle
fgetpos
__stdio_common_vfprintf
_write
fwrite
fgetc

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
malloc
free
realloc
_aligned_malloc
_aligned_free

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_unlock_file
_lock_file
_wchmod
_wrmdir
_wmkdir
_umask

api-ms-win-crt-string-l1-1-0

strncpy_s
isdigit
strncpy
isprint
isxdigit
isupper
tolower
_strnicmp
isspace
wcsncpy
_wcsnicmp
strncmp
strncat
wcsncmp
wcspbrk
_wcsrev
_wcsdup
_stricmp
strcmp
_strdup

api-ms-win-crt-convert-l1-1-0

strtol
wcstombs
strtoul
atol
strtoll
atoi
strtod
_strtod_l

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

log
modf
copysignf
fmod
pow
ceil
_fdtest
acos
asin
atan
atan2
_fdsign
copysign
cos
sin
truncf
sqrt
tan
trunc
nearbyintf
_dtest
ldexp
sqrtf
nearbyint
_dsign
scalbn
floor
ceilf
exp
floorf
lrint

api-ms-win-crt-utility-l1-1-0

rand_s
bsearch
qsort
rand

api-ms-win-crt-time-l1-1-0

_tzset
_localtime64_s
__timezone
__tzname
_gmtime64
_time64

api-ms-win-crt-locale-l1-1-0

_create_locale
_free_locale

api-ms-win-crt-conio-l1-1-0

_getch

psapi

GetProcessMemoryInfo

user32

GetUserObjectInformationW
TranslateMessage
GetMessageW
MapVirtualKeyW
GetProcessWindowStation
DispatchMessageW
MessageBoxW

advapi32

RegisterEventSourceW
OpenProcessToken
GetUserNameW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegEnumKeyExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ReportEventW
RegOpenKeyExW
DeregisterEventSource
RegQueryValueExW

iphlpapi

GetAdaptersAddresses

userenv

GetUserProfileDirectoryW

winmm

timeGetTime

Exports

Exports

??$CallRuntime@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1111@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11111@Z
??$CallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111111@Z
??$CallStubR@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@222222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@2222222222@Z
??$CallStubR@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@_KPEAV4123@22222222222@Z
??$CheckEQImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckEQImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckGEImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckGEImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckGTImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckGTImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckLEImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckLEImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckLTImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckLTImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$CheckNEImpl@MM@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MMPEBD@Z
??$CheckNEImpl@NN@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NNPEBD@Z
??$MakeCheckOpString@HH@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HHPEBD@Z
??$MakeCheckOpString@II@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IIPEBD@Z
??$MakeCheckOpString@JJ@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@JJPEBD@Z
??$MakeCheckOpString@KK@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KKPEBD@Z
??$MakeCheckOpString@PEBXPEBX@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBX0PEBD@Z
??$MakeCheckOpString@_J_J@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J0PEBD@Z
??$MakeCheckOpString@_K_K@base@v8@@YAPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K0PEBD@Z
??$PrintCheckOperand@C@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@C@Z
??$PrintCheckOperand@D@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@D@Z
??$PrintCheckOperand@E@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@E@Z
??$PrintCheckOperand@H@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@H@Z
??$PrintCheckOperand@I@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@I@Z
??$PrintCheckOperand@J@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@J@Z
??$PrintCheckOperand@K@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@K@Z
??$PrintCheckOperand@PEAC@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEAC@Z
??$PrintCheckOperand@PEAD@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEAD@Z
??$PrintCheckOperand@PEAE@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEAE@Z
??$PrintCheckOperand@PEBC@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBC@Z
??$PrintCheckOperand@PEBD@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBD@Z
??$PrintCheckOperand@PEBE@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBE@Z
??$PrintCheckOperand@PEBX@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@PEBX@Z
??$PrintCheckOperand@_J@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_J@Z
??$PrintCheckOperand@_K@base@v8@@YAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_K@Z
??$SignedDivisionByConstant@I@base@v8@@YA?AU?$MagicNumbersForDivision@I@01@I@Z
??$SignedDivisionByConstant@_K@base@v8@@YA?AU?$MagicNumbersForDivision@_K@01@_K@Z
??$Start@$00@LookupIterator@internal@v8@@AEAAXXZ
??$Start@$0A@@LookupIterator@internal@v8@@AEAAXXZ
??$TailCallBytecodeDispatch@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111@Z
??$TailCallRuntime@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@1111@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@11111@Z
??$TailCallRuntime@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@W4FunctionId@Runtime@23@PEAV4123@111111@Z
??$TailCallStub@$$V@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@1111111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@11111111111@Z
??$TailCallStub@PEAVNode@compiler@internal@v8@@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@PEAV1234@@CodeAssembler@compiler@internal@v8@@QEAAPEAVNode@123@AEBVCallInterfaceDescriptor@23@PEAV4123@111111111111@Z
??$UnsignedDivisionByConstant@I@base@v8@@YA?AU?$MagicNumbersForDivision@I@01@II@Z
??$UnsignedDivisionByConstant@_K@base@v8@@YA?AU?$MagicNumbersForDivision@_K@01@_KI@Z
??0?$CacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@AEBV01@@Z
??0?$CacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@XZ
??0?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$03@icu_59@@QEAA@AEBV01@@Z
??0?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$03@icu_59@@QEAA@XZ
??0?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAD@@icu_59@@QEAA@AEBV01@@Z
??0?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAD@@icu_59@@QEAA@XZ
??0?$LocaleCacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@AEBV01@@Z
??0?$LocaleCacheKey@VDateFmtBestPattern@icu_59@@@icu_59@@QEAA@AEBVLocale@1@@Z
??0?$MagicNumbersForDivision@I@base@v8@@QEAA@II_N@Z
??0?$MagicNumbersForDivision@_K@base@v8@@QEAA@_KI_N@Z
??0?$MaybeStackArray@D$0CI@@icu_59@@AEAA@AEBV01@@Z
??0?$MaybeStackArray@D$0CI@@icu_59@@QEAA@XZ
??0?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_59@@AEAA@AEBV01@@Z
??0?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_59@@QEAA@XZ
??0?$ParserBase@VParser@internal@v8@@@internal@v8@@QEAA@PEAVZone@12@PEAVScanner@12@_KPEAVExtension@2@PEAVAstValueFactory@12@PEAVRuntimeCallStats@12@_N@Z
??0?$PerThreadAssertScope@$00$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$00$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$01$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$01$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$02$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$02$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$03$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$03$0A@@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$0A@$00@internal@v8@@QEAA@XZ
??0?$PerThreadAssertScope@$0A@$0A@@internal@v8@@QEAA@XZ
??0?$PluralMap@VDigitAffix@icu_59@@@icu_59@@QEAA@AEBV01@@Z
??0?$PluralMap@VDigitAffix@icu_59@@@icu_59@@QEAA@AEBVDigitAffix@1@@Z
??0?$PluralMap@VDigitAffix@icu_59@@@icu_59@@QEAA@XZ
??0?$TimeBase@VThreadTicks@base@v8@@@time_internal@base@v8@@IEAA@_J@Z
??0?$TimeBase@VTime@base@v8@@@time_internal@base@v8@@IEAA@_J@Z
??0?$TimeBase@VTimeTicks@base@v8@@@time_internal@base@v8@@IEAA@_J@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@AEBV012@@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@PEAVZone@12@@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@_KPEAVMoveOperands@compiler@12@PEAVZone@12@@Z
??0?$ZoneVector@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@QEAA@_KPEAVZone@12@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@@std@@QEAA@AEBV01@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@@std@@QEAA@XZ
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@@std@@QEAA@AEBV01@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@@std@@QEAA@XZ
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@@std@@QEAA@AEBV01@@Z
??0?$_Vector_alloc@U?$_Vec_base_types@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@@std@@QEAA@XZ
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@$$QEAV01@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@$$QEAV01@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@AEBV01@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@AEBV01@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@V?$initializer_list@PEAVMoveOperands@compiler@internal@v8@@@1@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@XZ
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@_K@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@_KAEBQEAVMoveOperands@compiler@internal@v8@@@Z
??0?$vector@PEAVMoveOperands@compiler@internal@v8@@V?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@34@@std@@QEAA@_KAEBQEAVMoveOperands@compiler@internal@v8@@AEBV?$ZoneAllocator@PEAVMoveOperands@compiler@internal@v8@@@45@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@$$QEAV01@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@$$QEAV01@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@AEBV01@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@AEBV01@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@1@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@XZ
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@_K@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptFrame@v8@@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptFrame@v8@@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@$$QEAV01@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@$$QEAV01@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@AEBV01@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@AEBV01@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@1@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@XZ
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@_K@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptInfo@v8@@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@std@@@std@@QEAA@_KAEBUCpuProfileDeoptInfo@v8@@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@1@@Z
??0AccountingAllocator@internal@v8@@QEAA@XZ
??0ActivityControl@v8@@QEAA@AEBV01@@Z
??0ActivityControl@v8@@QEAA@XZ
??0AffixPattern@icu_59@@QEAA@$$QEAV01@@Z
??0AffixPattern@icu_59@@QEAA@AEBV01@@Z
??0AffixPattern@icu_59@@QEAA@XZ
??0AffixPatternIterator@icu_59@@QEAA@XZ
??0AffixPatternParser@icu_59@@QEAA@$$QEAV01@@Z
??0AffixPatternParser@icu_59@@QEAA@AEBV01@@Z
??0AffixPatternParser@icu_59@@QEAA@AEBVDecimalFormatSymbols@1@@Z
??0AffixPatternParser@icu_59@@QEAA@XZ
??0Agent@inspector@node@@QEAA@PEAVEnvironment@2@@Z
??0AllocationProfile@v8@@QEAA@AEBV01@@Z
??0AllocationProfile@v8@@QEAA@XZ
??0Allocator@ArrayBuffer@v8@@QEAA@AEBV012@@Z
??0Allocator@ArrayBuffer@v8@@QEAA@XZ
??0AllowJavascriptExecutionScope@Isolate@v8@@QEAA@PEAV12@@Z
??0AnnualTimeZoneRule@icu_59@@QEAA@AEBV01@@Z
??0AnnualTimeZoneRule@icu_59@@QEAA@AEBVUnicodeString@1@HHAEBVDateTimeRule@1@HH@Z
??0AnnualTimeZoneRule@icu_59@@QEAA@AEBVUnicodeString@1@HHPEAVDateTimeRule@1@HH@Z
??0Appendable@icu_59@@QEAA@AEBV01@@Z
??0Appendable@icu_59@@QEAA@XZ
??0AsmCallableType@wasm@internal@v8@@IEAA@XZ
??0AsmFFIType@wasm@internal@v8@@AEAA@XZ
??0AsmFunctionTableType@wasm@internal@v8@@AEAA@_KPEAVAsmType@123@@Z
??0AsmFunctionType@wasm@internal@v8@@IEAA@PEAVZone@23@PEAVAsmType@123@@Z
??0AsmJsScanner@internal@v8@@QEAA@XZ
??0AsmOverloadedFunctionType@wasm@internal@v8@@AEAA@PEAVZone@23@@Z
??0BasicBlock@compiler@internal@v8@@QEAA@PEAVZone@23@VId@0123@@Z
??0BasicTimeZone@icu_59@@IEAA@AEBV01@@Z
??0BasicTimeZone@icu_59@@IEAA@AEBVUnicodeString@1@@Z
??0BasicTimeZone@icu_59@@IEAA@XZ
??0BlockBuilder@interpreter@internal@v8@@QEAA@PEAVBytecodeArrayBuilder@123@PEAVBlockCoverageBuilder@123@PEAVBreakableStatement@23@@Z
??0BlockData@Coverage@debug@v8@@AEAA@PEAUCoverageBlock@internal@3@@Z
??0BranchElimination@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0BranchElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVJSGraph@123@PEAVZone@23@@Z
??0BranchMatcher@compiler@internal@v8@@QEAA@PEAVNode@123@@Z
??0BreakIterator@icu_59@@IEAA@AEBV01@@Z
??0BreakIterator@icu_59@@IEAA@AEBVLocale@1@0@Z
??0BreakIterator@icu_59@@IEAA@XZ
??0BreakLocation@debug@v8@@QEAA@HHW4BreakLocationType@12@@Z
??0BreakableControlFlowBuilder@interpreter@internal@v8@@QEAA@PEAVBytecodeArrayBuilder@123@@Z
??0ByteSink@icu_59@@QEAA@XZ
??0BytecodeAnalysis@compiler@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@PEAVZone@23@_N@Z
??0BytecodeArrayAccessor@interpreter@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@H@Z
??0BytecodeArrayBuilder@interpreter@internal@v8@@QEAA@PEAVIsolate@23@PEAVZone@23@HHPEAVFunctionLiteral@23@W4RecordingMode@SourcePositionTableBuilder@23@@Z
??0BytecodeArrayIterator@interpreter@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@@Z
??0BytecodeArrayRandomIterator@interpreter@internal@v8@@QEAA@V?$Handle@VBytecodeArray@internal@v8@@@23@PEAVZone@23@@Z
??0BytecodeArrayWriter@interpreter@internal@v8@@QEAA@PEAVZone@23@PEAVConstantArrayBuilder@123@W4RecordingMode@SourcePositionTableBuilder@23@@Z
??0BytecodeIterator@wasm@internal@v8@@QEAA@$$QEAV0123@@Z
??0BytecodeIterator@wasm@internal@v8@@QEAA@AEBV0123@@Z
??0BytecodeIterator@wasm@internal@v8@@QEAA@PEBE0PEAUBodyLocalDecls@123@@Z
??0BytecodeJumpTable@interpreter@internal@v8@@QEAA@_KHHPEAVZone@23@@Z
??0BytecodeLabel@interpreter@internal@v8@@QEAA@XZ
??0BytecodeLabels@interpreter@internal@v8@@QEAA@PEAVZone@23@@Z
??0BytecodeLivenessMap@compiler@internal@v8@@QEAA@HPEAVZone@23@@Z
??0BytecodeLoopAssignments@compiler@internal@v8@@QEAA@HHPEAVZone@23@@Z
??0BytecodeNode@interpreter@internal@v8@@AEAA@W4Bytecode@123@HW4OperandScale@123@VBytecodeSourceInfo@123@IIIII@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIIIIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIIIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IIVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@IVBytecodeSourceInfo@123@@Z
??0BytecodeNode@interpreter@internal@v8@@QEAA@W4Bytecode@123@VBytecodeSourceInfo@123@@Z
??0BytecodeRegisterOptimizer@interpreter@internal@v8@@QEAA@PEAVZone@23@PEAVBytecodeRegisterAllocator@123@HHPEAVBytecodeWriter@0123@@Z
??0BytesDictionaryMatcher@icu_59@@QEAA@AEBV01@@Z
??0BytesDictionaryMatcher@icu_59@@QEAA@PEBDHPEAUUDataMemory@@@Z
??0BytesTrie@icu_59@@AEAA@PEAXPEBX@Z
??0BytesTrie@icu_59@@QEAA@AEBV01@@Z
??0BytesTrie@icu_59@@QEAA@PEBX@Z
??0CECalendar@icu_59@@IEAA@AEBV01@@Z
??0CECalendar@icu_59@@IEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0CPU@base@v8@@QEAA@XZ
??0CacheKeyBase@icu_59@@QEAA@AEBV01@@Z
??0CacheKeyBase@icu_59@@QEAA@XZ
??0CachedData@ScriptCompiler@v8@@QEAA@PEBEHW4BufferPolicy@012@@Z
??0CachedData@ScriptCompiler@v8@@QEAA@XZ
??0Calendar@icu_59@@IEAA@AEAW4UErrorCode@@@Z
??0Calendar@icu_59@@IEAA@AEBV01@@Z
??0Calendar@icu_59@@IEAA@AEBVTimeZone@1@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0Calendar@icu_59@@IEAA@PEAVTimeZone@1@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0CalendarAstronomer@icu_59@@QEAA@N@Z
??0CalendarAstronomer@icu_59@@QEAA@NN@Z
??0CalendarAstronomer@icu_59@@QEAA@XZ
??0CallDescriptor@compiler@internal@v8@@QEAA@W4Kind@0123@VMachineType@23@VLinkageLocation@123@PEAV?$Signature@VLinkageLocation@compiler@internal@v8@@@23@_KV?$Flags@W4Property@Operator@compiler@internal@v8@@E@base@3@IIV?$Flags@W4Flag@CallDescriptor@compiler@internal@v8@@H@93@PEBD@Z
??0CallInterfaceDescriptor@internal@v8@@QEAA@AEBV012@@Z
??0CallInterfaceDescriptor@internal@v8@@QEAA@PEAVIsolate@12@W4Key@CallDescriptors@12@@Z
??0CallInterfaceDescriptor@internal@v8@@QEAA@XZ
??0CallInterfaceDescriptorData@internal@v8@@QEAA@XZ
??0CallbackScope@node@@QEAA@PEAVIsolate@v8@@V?$Local@VObject@v8@@@3@Uasync_context@1@@Z
??0Cancelable@internal@v8@@QEAA@PEAVCancelableTaskManager@12@@Z
??0CancelableTask@internal@v8@@QEAA@PEAVCancelableTaskManager@12@@Z
??0CancelableTask@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0CancelableTaskManager@internal@v8@@QEAA@XZ
??0CanonicalHandleScope@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0CanonicalIterator@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0Channel@V8Inspector@v8_inspector@@QEAA@AEBV012@@Z
??0Channel@V8Inspector@v8_inspector@@QEAA@XZ
??0Char16Ptr@icu_59@@QEAA@$$T@Z
??0Char16Ptr@icu_59@@QEAA@PEAG@Z
??0Char16Ptr@icu_59@@QEAA@PEA_S@Z
??0Char16Ptr@icu_59@@QEAA@PEA_W@Z
??0CharString@icu_59@@QEAA@AEBV01@AEAW4UErrorCode@@@Z
??0CharString@icu_59@@QEAA@PEBDHAEAW4UErrorCode@@@Z
??0CharString@icu_59@@QEAA@VStringPiece@1@AEAW4UErrorCode@@@Z
??0CharString@icu_59@@QEAA@XZ
??0CharacterIterator@icu_59@@IEAA@AEBV01@@Z
??0CharacterIterator@icu_59@@IEAA@H@Z
??0CharacterIterator@icu_59@@IEAA@HH@Z
??0CharacterIterator@icu_59@@IEAA@HHHH@Z
??0CharacterIterator@icu_59@@IEAA@XZ
??0CheckElimination@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0CheckElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVJSGraph@123@@Z
??0CheckedArrayByteSink@icu_59@@QEAA@PEADH@Z
??0CheckpointElimination@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0CheckpointElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@@Z
??0ChineseCalendar@icu_59@@IEAA@AEBVLocale@1@HPEBVTimeZone@1@AEAW4UErrorCode@@@Z
??0ChineseCalendar@icu_59@@QEAA@AEBV01@@Z
??0ChineseCalendar@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0ChoiceFormat@icu_59@@AEAA@AEBVUnicodeString@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0ChoiceFormat@icu_59@@QEAA@AEBV01@@Z
??0ChoiceFormat@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0ChoiceFormat@icu_59@@QEAA@PEBNPEBCPEBVUnicodeString@1@H@Z
??0ChoiceFormat@icu_59@@QEAA@PEBNPEBVUnicodeString@1@H@Z
??0CodeAssembler@compiler@internal@v8@@QEAA@PEAVCodeAssemblerState@123@@Z
??0CodeAssemblerState@compiler@internal@v8@@AEAA@PEAVIsolate@23@PEAVZone@23@PEAVCallDescriptor@123@IPEBD@Z
??0CodeAssemblerState@compiler@internal@v8@@QEAA@PEAVIsolate@23@PEAVZone@23@AEBVCallInterfaceDescriptor@23@IPEBD_K@Z
??0CodeAssemblerState@compiler@internal@v8@@QEAA@PEAVIsolate@23@PEAVZone@23@HIPEBD@Z
??0CodeStubAssembler@internal@v8@@QEAA@PEAVCodeAssemblerState@compiler@12@@Z
??0CollationBuilder@icu_59@@QEAA@PEBUCollationTailoring@1@AEAW4UErrorCode@@@Z
??0CollationData@icu_59@@QEAA@AEBVNormalizer2Impl@1@@Z
??0CollationDataBuilder@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0CollationElementIterator@icu_59@@AEAA@AEBVCharacterIterator@1@PEBVRuleBasedCollator@1@AEAW4UErrorCode@@@Z
??0CollationElementIterator@icu_59@@AEAA@AEBVUnicodeString@1@PEBVRuleBasedCollator@1@AEAW4UErrorCode@@@Z
??0CollationElementIterator@icu_59@@QEAA@AEBV01@@Z
??0CollationFastLatinBuilder@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0CollationIterator@icu_59@@IEAA@AEBV01@@Z
??0CollationIterator@icu_59@@QEAA@PEBUCollationData@1@C@Z
??0CollationKey@icu_59@@QEAA@AEBV01@@Z
??0CollationKey@icu_59@@QEAA@PEBEH@Z
??0CollationKey@icu_59@@QEAA@XZ
??0CollationRootElements@icu_59@@QEAA@PEBIH@Z
??0CollationRuleParser@icu_59@@QEAA@PEBUCollationData@1@AEAW4UErrorCode@@@Z
??0CollationSettings@icu_59@@QEAA@AEBU01@@Z
??0CollationSettings@icu_59@@QEAA@XZ
??0CollationTailoring@icu_59@@QEAA@PEBUCollationSettings@1@@Z
??0CollationWeights@icu_59@@QEAA@XZ
??0Collator@icu_59@@IEAA@AEBV01@@Z
??0Collator@icu_59@@IEAA@W4UColAttributeValue@@W4UNormalizationMode@@@Z
??0Collator@icu_59@@IEAA@XZ
??0CollatorFactory@icu_59@@QEAA@AEBV01@@Z
??0CollatorFactory@icu_59@@QEAA@XZ
??0CommonOperatorBuilder@compiler@internal@v8@@QEAA@PEAVZone@23@@Z
??0CommonOperatorReducer@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0CommonOperatorReducer@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVGraph@123@PEAVCommonOperatorBuilder@123@PEAVMachineOperatorBuilder@123@@Z
??0CompactionSpace@internal@v8@@QEAA@PEAVHeap@12@W4AllocationSpace@12@W4Executability@12@@Z
??0CompilationInfo@internal@v8@@AEAA@PEAVParseInfo@12@V?$Vector@$$CBD@12@IW4Mode@012@PEAVIsolate@12@PEAVZone@12@@Z
??0CompilationInfo@internal@v8@@QEAA@PEAVZone@12@PEAVParseInfo@12@PEAVIsolate@12@V?$Handle@VJSFunction@internal@v8@@@12@@Z
??0CompilationInfo@internal@v8@@QEAA@V?$Vector@$$CBD@12@PEAVIsolate@12@PEAVZone@12@I@Z
??0CompilationJob@internal@v8@@QEAA@AEBV012@@Z
??0CompilationJob@internal@v8@@QEAA@PEAVIsolate@12@PEAVCompilationInfo@12@PEBDW4State@012@@Z
??0CompileJobFinishCallback@internal@v8@@QEAA@AEBV012@@Z
??0CompileJobFinishCallback@internal@v8@@QEAA@XZ
??0CompilerDispatcher@internal@v8@@QEAA@PEAVIsolate@12@PEAVPlatform@2@_K@Z
??0CompilerDispatcherJob@internal@v8@@QEAA@PEAVCompilerDispatcherTracer@12@_KV?$Handle@VString@internal@v8@@@12@HHW4LanguageMode@12@H_N44IPEAVAccountingAllocator@12@HPEBVAstStringConstants@12@PEAVCompileJobFinishCallback@12@@Z
??0CompilerDispatcherJob@internal@v8@@QEAA@PEAVIsolate@12@PEAVCompilerDispatcherTracer@12@V?$Handle@VScript@internal@v8@@@12@V?$Handle@VSharedFunctionInfo@internal@v8@@@12@PEAVFunctionLiteral@12@V?$shared_ptr@VZone@internal@v8@@@std@@V?$shared_ptr@VDeferredHandles@internal@v8@@@9@6_K@Z
??0CompilerDispatcherJob@internal@v8@@QEAA@PEAVIsolate@12@PEAVCompilerDispatcherTracer@12@V?$Handle@VSharedFunctionInfo@internal@v8@@@12@_K@Z
??0CompilerDispatcherTracer@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0CompoundTransliterator@icu_59@@AEAA@AEAVUVector@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@AEAA@AEAVUVector@1@HAEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@AEAA@AEBVUnicodeString@1@AEAVUVector@1@PEAVUnicodeFilter@1@HAEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@QEAA@AEBV01@@Z
??0CompoundTransliterator@icu_59@@QEAA@AEBVUnicodeString@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@QEAA@AEBVUnicodeString@1@W4UTransDirection@@PEAVUnicodeFilter@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_59@@QEAA@QEBQEAVTransliterator@1@HPEAVUnicodeFilter@1@@Z
??0ConditionVariable@base@v8@@QEAA@XZ
??0ConstChar16Ptr@icu_59@@QEAA@$$T@Z
??0ConstChar16Ptr@icu_59@@QEAA@PEBG@Z
??0ConstChar16Ptr@icu_59@@QEAA@PEB_S@Z
??0ConstChar16Ptr@icu_59@@QEAA@PEB_W@Z
??0Constant@compiler@internal@v8@@QEAA@H@Z
??0Constant@compiler@internal@v8@@QEAA@M@Z
??0Constant@compiler@internal@v8@@QEAA@N@Z
??0Constant@compiler@internal@v8@@QEAA@V?$Handle@VHeapObject@internal@v8@@@23@@Z
??0Constant@compiler@internal@v8@@QEAA@VExternalReference@23@@Z
??0Constant@compiler@internal@v8@@QEAA@VRelocatablePtrConstantInfo@123@@Z
??0Constant@compiler@internal@v8@@QEAA@VRpoNumber@123@@Z
??0Constant@compiler@internal@v8@@QEAA@_J@Z
??0ConstantArrayBuilder@interpreter@internal@v8@@QEAA@PEAVZone@23@@Z
??0Contents@ArrayBuffer@v8@@QEAA@XZ
??0Contents@SharedArrayBuffer@v8@@QEAA@XZ
??0ControlEquivalence@compiler@internal@v8@@QEAA@$$QEAV0123@@Z
??0ControlEquivalence@compiler@internal@v8@@QEAA@AEBV0123@@Z
??0ControlEquivalence@compiler@internal@v8@@QEAA@PEAVZone@23@PEAVGraph@123@@Z
??0ControlFlowBuilder@interpreter@internal@v8@@QEAA@PEAVBytecodeArrayBuilder@123@@Z
??0ControlFlowOptimizer@compiler@internal@v8@@QEAA@PEAVGraph@123@PEAVCommonOperatorBuilder@123@PEAVMachineOperatorBuilder@123@PEAVZone@23@@Z
??0Coverage@debug@v8@@AEAA@PEAV0internal@2@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@$$QEAU01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@AEBU01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@XZ
??0CurrencyAffixInfo@icu_59@@QEAA@$$QEAV01@@Z
??0CurrencyAffixInfo@icu_59@@QEAA@AEBV01@@Z
??0CurrencyAffixInfo@icu_59@@QEAA@XZ
??0CurrencyAmount@icu_59@@QEAA@AEBV01@@Z
??0CurrencyAmount@icu_59@@QEAA@AEBVFormattable@1@VConstChar16Ptr@1@AEAW4UErrorCode@@@Z
??0CurrencyAmount@icu_59@@QEAA@NVConstChar16Ptr@1@AEAW4UErrorCode@@@Z
??0CurrencyPluralInfo@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0CurrencyPluralInfo@icu_59@@QEAA@AEBV01@@Z
??0CurrencyPluralInfo@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0CurrencyUnit@icu_59@@QEAA@AEBV01@@Z
??0CurrencyUnit@icu_59@@QEAA@VConstChar16Ptr@1@AEAW4UErrorCode@@@Z
??0DateFmtBestPattern@icu_59@@QEAA@AEBV01@@Z
??0DateFmtBestPattern@icu_59@@QEAA@AEBVUnicodeString@1@@Z
??0DateFmtBestPatternKey@icu_59@@QEAA@AEBV01@@Z
??0DateFmtBestPatternKey@icu_59@@QEAA@AEBVLocale@1@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0DateFormat@icu_59@@IEAA@AEBV01@@Z
??0DateFormat@icu_59@@IEAA@XZ
??0DateFormatSymbols@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_59@@QEAA@AEBV01@@Z
??0DateFormatSymbols@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_59@@QEAA@AEBVLocale@1@PEBDAEAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_59@@QEAA@PEBDAEAW4UErrorCode@@@Z
??0DateInterval@icu_59@@QEAA@AEBV01@@Z
??0DateInterval@icu_59@@QEAA@NN@Z
??0DateIntervalFormat@icu_59@@AEAA@AEBVLocale@1@PEAVDateIntervalInfo@1@PEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0DateIntervalFormat@icu_59@@AEAA@XZ
??0DateIntervalFormat@icu_59@@IEAA@AEBV01@@Z
??0DateIntervalInfo@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DateIntervalInfo@icu_59@@QEAA@AEBV01@@Z
??0DateIntervalInfo@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DateTimePatternGenerator@icu_59@@AEAA@AEAW4UErrorCode@@@Z
??0DateTimePatternGenerator@icu_59@@AEAA@AEBV01@@Z
??0DateTimePatternGenerator@icu_59@@AEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DateTimeRule@icu_59@@QEAA@AEBV01@@Z
??0DateTimeRule@icu_59@@QEAA@HHHCHW4TimeRuleType@01@@Z
??0DateTimeRule@icu_59@@QEAA@HHHHW4TimeRuleType@01@@Z
??0DateTimeRule@icu_59@@QEAA@HHHW4TimeRuleType@01@@Z
??0DeadCodeElimination@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVGraph@123@PEAVCommonOperatorBuilder@123@@Z
??0DebugOptions@node@@QEAA@$$QEAV01@@Z
??0DebugOptions@node@@QEAA@AEBV01@@Z
??0DebugOptions@node@@QEAA@XZ
??0DecimalFormat@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBV01@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@AEBVDecimalFormatSymbols@1@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@PEAVDecimalFormatSymbols@1@AEAUUParseError@@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@PEAVDecimalFormatSymbols@1@AEAW4UErrorCode@@@Z
??0DecimalFormat@icu_59@@QEAA@AEBVUnicodeString@1@PEAVDecimalFormatSymbols@1@W4UNumberFormatStyle@@AEAW4UErrorCode@@@Z
??0DecimalFormatSymbols@icu_59@@AEAA@XZ
??0DecimalFormatSymbols@icu_59@@QEAA@AEAW4UErrorCode@@@Z
??0DecimalFormatSymbols@icu_59@@QEAA@AEBV01@@Z
??0DecimalFormatSymbols@icu_59@@QEAA@AEBVLocale@1@AEAW4UErrorCode@@@Z
??0DeclarationScope@internal@v8@@QEAA@PEAVZone@12@PEAVAstValueFactory@12@@Z
??0DeclarationScope@internal@v8@@QEAA@PEAVZone@12@PEAVScope@12@W4ScopeType@12@W4FunctionKind@12@@Z
??0DeclarationScope@internal@v8@@QEAA@PEAVZone@12@W4ScopeType@12@V?$Handle@VScopeInfo@internal@v8@@@12@@Z
??0DeferredHandleScope@internal@v8@@QEAA@PEAVIsolate@12@@Z
??0DeferredHandles@internal@v8@@AEAA@PEAPEAVObject@12@PEAVIsolate@12@@Z
??0Delegate@ValueDeserializer@v8@@QEAA@AEBV012@@Z
??0Delegate@ValueDeserializer@v8@@QEAA@XZ
??0Delegate@ValueSerializer@v8@@QEAA@AEBV012@@Z
??0Delegate@ValueSerializer@v8@@QEAA@XZ
??0DiamondMatcher@compiler@internal@v8@@QEAA@PEAVNode@123@@Z
??0DictionaryMatcher@icu_59@@QEAA@AEBV01@@Z
??0DictionaryMatcher@icu_59@@QEAA@XZ
??0DigitAffix@icu_59@@QEAA@$$QEAV01@@Z
??0DigitAffix@icu_59@@QEAA@AEBV01@@Z
??0DigitAffix@icu_59@@QEAA@PEB_SHH@Z
??0DigitAffix@icu_59@@QEAA@XZ
??0DigitAffixesAndPadding@icu_59@@QEAA@$$QEAV01@@Z
??0DigitAffixesAndPadding@icu_59@@QEAA@AEBV01@@Z
??0DigitAffixesAndPadding@icu_59@@QEAA@XZ
??0DigitFormatter@icu_59@@QEAA@$$QEAV01@@Z
??0DigitFormatter@icu_59@@QEAA@AEBV01@@Z
??0DigitFormatter@icu_59@@QEAA@AEBVDecimalFormatSymbols@1@@Z
??0DigitFormatter@icu_59@@QEAA@XZ
??0DigitFormatterIntOptions@icu_59@@QEAA@XZ
??0DigitFormatterOptions@icu_59@@QEAA@XZ
??0DigitGrouping@icu_59@@QEAA@XZ
??0DigitInterval@icu_59@@QEAA@XZ
??0DigitList@icu_59@@QEAA@AEBV01@@Z
??0DigitList@icu_59@@QEAA@XZ
??0DisallowJavascriptExecutionScope@Isolate@v8@@QEAA@PEAV12@W4OnFailure@012@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@XZ
??0DummyFormat@MessageFormat@icu_59@@QEAA@$$QEAV012@@Z
??0DummyFormat@MessageFormat@icu_59@@QEAA@AEBV012@@Z
??0DummyFormat@MessageFormat@icu_59@@QEAA@XZ
??0Ecliptic@CalendarAstronomer@icu_59@@QEAA@NN@Z
??0Edits@icu_59@@QEAA@XZ
??0EffectControlLinearizer@compiler@internal@v8@@QEAA@PEAVJSGraph@123@PEAVSchedule@123@PEAVZone@23@PEAVSourcePositionTable@123@@Z
??0EhFrameIterator@internal@v8@@QEAA@PEBE0@Z
??0EhFrameWriter@internal@v8@@QEAA@PEAVZone@12@@Z
??0EmbedderHeapTracer@v8@@QEAA@AEBV01@@Z
??0EmbedderHeapTracer@v8@@QEAA@XZ
??0Equatorial@CalendarAstronomer@icu_59@@QEAA@NN@Z
??0ErrorThrower@wasm@internal@v8@@QEAA@$$QEAV0123@@Z
??0ErrorThrower@wasm@internal@v8@@QEAA@PEAVIsolate@23@PEBD@Z
??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0EscapeAnalysis@compiler@internal@v8@@QEAA@PEAVGraph@123@PEAVCommonOperatorBuilder@123@PEAVZone@23@@Z
??0EscapeAnalysisReducer@compiler@internal@v8@@QEAA@PEAVEditor@AdvancedReducer@123@PEAVJSGraph@123@PEAVEscapeAnalysis@123@PEAVZone@23@@Z
??0EventListener@icu_59@@QEAA@AEBV01@@Z
??0EventListener@icu_59@@QEAA@XZ
??0ExplicitOperand@compiler@internal@v8@@QEAA@W4LocationKind@LocationOperand@123@W4MachineRepresentation@23@H@Z
??0Extension@v8@@QEAA@PEBD0HPEAPEBDH@Z
??0ExtensionConfiguration@v8@@QEAA@HQEAPEBD@Z
??0ExtensionConfiguration@v8@@QEAA@XZ
??0ExternalOneByteStringResource@String@v8@@IEAA@XZ
??0ExternalOneByteStringResourceImpl@v8@@QEAA@PEBD_K@Z
??0ExternalOneByteStringResourceImpl@v8@@QEAA@XZ
??0ExternalResourceVisitor@v8@@QEAA@AEBV01@@Z
??0ExternalResourceVisitor@v8@@QEAA@XZ
??0ExternalSourceStream@ScriptCompiler@v8@@QEAA@AEBV012@@Z
??0ExternalSourceStream@ScriptCompiler@v8@@QEAA@XZ
??0ExternalStringResource@String@v8@@IEAA@XZ
??0ExternalStringResourceBase@String@v8@@IEAA@XZ
??0FCDUIterCollationIterator@icu_59@@QEAA@AEBV01@@Z
??0FCDUIterCollationIterator@icu_59@@QEAA@PEBUCollationData@1@CAEAUUCharIterator@@H@Z
??0FCDUTF16CollationIterator@icu_59@@QEAA@AEBV01@@Z
??0FCDUTF16CollationIterator@icu_59@@QEAA@AEBV01@PEB_S@Z
??0FCDUTF16CollationIterator@icu_59@@QEAA@PEBUCollationData@1@CPEB_S11@Z
??0FCDUTF8CollationIterator@icu_59@@QEAA@AEBV01@@Z
??0FCDUTF8CollationIterator@icu_59@@QEAA@PEBUCollationData@1@CPEBEHH@Z
??0FieldPosition@icu_59@@QEAA@AEBV01@@Z
??0FieldPosition@icu_59@@QEAA@H@Z
??0FieldPosition@icu_59@@QEAA@XZ
??0FieldPositionHandler@icu_59@@QEAA@AEBV01@@Z
??0FieldPositionHandler@icu_59@@QEAA@XZ
??0FieldPositionIterator@icu_59@@QEAA@AEBV01@@Z
??0FieldPositionIterator@icu_59@@QEAA@XZ
??0FilteredBreakIteratorBuilder@icu_59@@IEAA@XZ
??0FilteredBreakIteratorBuilder@icu_59@@QEAA@AEBV01@@Z
??0FilteredNormalizer2@icu_59@@QEAA@AEBV01@@Z
??0FilteredNormalizer2@icu_59@@QEAA@AEBVNormalizer2@1@AEBVUnicodeSet@1@@Z
??0FixedDecimal@icu_59@@QEAA@AEBV01@@Z
??0FixedDecimal@icu_59@@QEAA@AEBVUnicodeString@1@AEAW4UErrorCode@@@Z
??0FixedDecimal@icu_59@@QEAA@AEBVVisibleDigits@1@@Z
??0FixedDecimal@icu_59@@QEAA@N@Z
??0FixedDecimal@icu_59@@QEAA@NH@Z
??0FixedDecimal@icu_59@@QEAA@NH_J@Z
??0FixedDecimal@icu_59@@QEAA@XZ
??0FixedPrecision@icu_59@@QEAA@$$QEAV01@@Z
??0FixedPrecision@icu_59@@QEAA@AEBV01@@Z
??0FixedPrecision@icu_59@@QEAA@XZ
??0Format@icu_59@@IEAA@AEBV01@@Z
??0Format@icu_59@@IEAA@XZ
??0Formattable@icu_59@@QEAA@AEBV01@@Z
??0Formattable@icu_59@@QEAA@AEBVUnicodeString@1@@Z
??0Formattable@icu_59@@QEAA@H@Z
??0Formattable@icu_59@@QEAA@N@Z
??0Formattable@icu_59@@QEAA@NW4ISDATE@01@@Z

Sections

.text
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/VPN PRO 1.9.0.187/vpnpro_setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/VirtualWiFiSetup-3.2.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/aepic.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\xulrunner\stub\xulrunner-stub.pdb

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/sxs.dll
.dll windows:10 windows x64 arch:x64

d862fce5077dfe4e06485a219a56323d

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:db:80:95:d3:07:16:df:f5:3c:e2:07:be:31:61:48:06:90:0a:e5:97:ed:58:88:bf:01:36:96:01:41:36:ad
Signer

Actual PE Digest

2e:db:80:95:d3:07:16:df:f5:3c:e2:07:be:31:61:48:06:90:0a:e5:97:ed:58:88:bf:01:36:96:01:41:36:ad

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

sxs.pdb

Imports

ntdll

DbgPrintEx
RtlRaiseStatus
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlDowncaseUnicodeChar
EtwEventUnregister
EtwEventWrite
__C_specific_handler
RtlCopyMappedMemory
LdrResSearchResource
wcstol
RtlGetVersion
_wcsicmp
RtlUnhandledExceptionFilter
_vsnprintf_s
_snprintf_s
RtlGetFrame
wcsrchr
RtlHashUnicodeString
RtlNtStatusToDosError
_vsnwprintf_s
RtlDetermineDosPathNameType_U
wcsstr
RtlIsNonEmptyDirectoryReparsePointAllowed
wcsspn
wcscspn
RtlGetNtSystemRoot
RtlNtStatusToDosErrorNoTeb
RtlFindCharInUnicodeString
vsprintf_s
vDbgPrintEx
wcscat_s
swprintf_s
NtQueryDebugFilterState
sprintf_s
RtlCompareUnicodeString
RtlUpcaseUnicodeChar
qsort
bsearch
_lfind
RtlPopFrame
_i64tow
EtwEventRegister
wcschr
RtlFreeUnicodeString
RtlLcidToLocaleName
wcscpy_s
RtlPushFrame
memmove
__chkstk
memcmp
memcpy
memset

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
UnhandledExceptionFilter

api-ms-win-core-file-l1-1-0

SetFileAttributesW
FindClose
RemoveDirectoryW
FindNextFileW
GetFileInformationByHandle
WriteFile
GetFileAttributesExW
GetFullPathNameW
CreateFileW
GetFileAttributesW
CreateDirectoryW
DeleteFileW
SetFilePointerEx
ReadFile
FlushFileBuffers
FindFirstFileW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-localization-l1-2-0

FormatMessageA
FormatMessageW
GetThreadPreferredUILanguages

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyExW
RegQueryValueExW
RegEnumKeyExW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
SearchPathW

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess

api-ms-win-core-string-l1-1-0

GetStringTypeW
MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemInfo
GetTickCount
GetSystemTimeAsFileTime

api-ms-win-security-base-l1-1-0

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

kernel32

DelayLoadFailureHook
ResolveDelayLoadedAPI
GetSystemWow64DirectoryW
WerUnregisterFile
WerRegisterFile
LocalFree
SystemTimeToTzSpecificLocalTime
DeviceIoControl
FindActCtxSectionGuid
QueryActCtxW
FindActCtxSectionStringW

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection

Exports

Exports

CreateAssemblyCache
CreateAssemblyNameObject
SxsBeginAssemblyInstall
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsFindClrSurrogateInformation
SxsGenerateActivationContext
SxsInstallW
SxsLookupClrGuid
SxsOleAut32MapConfiguredClsidToReferenceClsid
SxsOleAut32MapIIDOrCLSIDToTypeLibrary
SxsOleAut32MapIIDToProxyStubCLSID
SxsOleAut32MapIIDToTLBPath
SxsOleAut32MapReferenceClsidToConfiguredClsid
SxsOleAut32RedirectTypeLibrary
SxsProbeAssemblyInstallation
SxsQueryManifestInformation
SxsRunDllInstallAssembly
SxsRunDllInstallAssemblyW
SxsUninstallW
SxspGenerateManifestPathOnAssemblyIdentity

Sections

.text
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/Virtual Wi-Fi Router 3.2.1/redit/xpti.exe
.exe windows:4 windows x86 arch:x86

b76363e9cb88bf9390860da8e50999d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
SetFileAttributesA
CompareFileTime
SearchPathA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
GetTempPathA
Sleep
lstrcmpiA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrcatA
GetSystemDirectoryA
WaitForSingleObject
SetFileTime
CloseHandle
GlobalFree
lstrcmpA
ExpandEnvironmentStringsA
GetExitCodeProcess
GlobalAlloc
lstrlenA
GetCommandLineA
GetProcAddress
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
ReadFile
FindClose
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
MulDiv
MultiByteToWideChar
LoadLibraryExA
GetModuleHandleA
FreeLibrary

user32

SetCursor
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
EndDialog
ScreenToClient
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetForegroundWindow
GetWindowLongA
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
SetTimer
PostQuitMessage
SetWindowLongA
SendMessageTimeoutA
LoadImageA
wsprintfA
GetDlgItem
FindWindowExA
IsWindow
SetClipboardData
EmptyClipboard
OpenClipboard
EndPaint
CreateDialogParamA
DestroyWindow
ShowWindow
SetWindowTextA

gdi32

SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
ShellExecuteA

advapi32

RegDeleteValueA
SetFileSecurityA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegEnumKeyA

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/Jint.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\jint\Jint\obj\Release\net451\Jint.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/wireguard-amd64-0.3.8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/sas.dll
.dll windows:10 windows x64 arch:x64

fe806c7a1beddc2709d9013be1d72b0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

SAS.pdb

Imports

msvcrt

_vsnwprintf
_XcptFilter
__C_specific_handler
_initterm
malloc
free
_amsg_exit
memset

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter

kernel32

LoadLibraryA
HeapFree
SetLastError
HeapAlloc
GetProcessHeap
GetProcAddress
FreeLibrary

rpcrt4

NdrClientCall3
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
I_RpcExceptionFilter

Exports

Exports

SendSAS

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/WireGuard 0.3.8/xpinstall/schannel.msi
.msi
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/BFE.DLL
.dll windows:10 windows x64 arch:x64

af3ccebee341bc1634b9269a2d4ab01d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

bfe.pdb

Imports

msvcrt

_initterm
__C_specific_handler
wcscspn
_wcslwr
bsearch
_ultoa_s
strpbrk
strstr
sprintf_s
isprint
_ltoa_s
_i64toa_s
_ui64toa_s
wprintf
memmove
memcpy
malloc
memcmp
log
wcstoul
_vsnprintf
_vsnwprintf
_wcsicmp
free
wcstol
qsort
_amsg_exit
iswctype
_XcptFilter
wcschr
_wcsnicmp
_ultow
tolower
wcsnlen
memset

ntdll

NtQueryObject
RtlGetSaclSecurityDescriptor
RtlValidRelativeSecurityDescriptor
RtlNumberOfSetBits
RtlInitializeBitMap
WinSqmIsOptedIn
WinSqmSetDWORD
WinSqmAddToStream
RtlValidSid
RtlLengthSid
NtDeviceIoControlFile
RtlAllocateHeap
RtlInitializeSRWLock
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
RtlGetCurrentServiceSessionId
RtlCreateHashTable
RtlDeleteHashTable
RtlInsertEntryHashTable
RtlRemoveEntryHashTable
RtlLookupEntryHashTable
RtlGetNextEntryHashTable
RtlInitEnumerationHashTable
RtlEnumerateEntryHashTable
RtlEndEnumerationHashTable
RtlContractHashTable
RtlGetOwnerSecurityDescriptor
RtlAdjustPrivilege
RtlAbsoluteToSelfRelativeSD
RtlSetOwnerSecurityDescriptor
RtlSelfRelativeToAbsoluteSD2
RtlCreateServiceSid
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlSubAuthorityCountSid
TpReleaseTimer
TpWaitForTimer
RtlFreeHeap
RtlIpv4AddressToStringA
RtlIpv6AddressToStringA
RtlEthernetAddressToStringA
TpSetTimer
TpIsTimerSet
TpAllocTimer
RtlEqualSid
RtlLengthSecurityDescriptor
RtlApplicationVerifierStop
EtwEventEnabled
EtwEventWriteTransfer
EtwEventWrite
EtwEventActivityIdControl
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
EtwTraceMessage
RtlExpandHashTable
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
RtlSetThreadPreferredUILanguages

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
LoadStringW
DisableThreadLibraryCalls
GetProcAddress

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
CreateThread
TlsGetValue
GetCurrentThread
OpenThreadToken
TlsSetValue
GetCurrentProcess
TerminateProcess
TlsFree
TlsAlloc
GetProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError

api-ms-win-core-synch-l1-1-0

CreateEventW
CreateSemaphoreExW
ReleaseSRWLockShared
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ReleaseSemaphore
AcquireSRWLockShared
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
SetEvent
InitializeSRWLock
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockExclusive

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
DeleteTimerQueueTimer
UnregisterWaitEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-security-base-l1-1-0

DestroyPrivateObjectSecurity
GetPrivateObjectSecurity
GetSecurityDescriptorControl
CreatePrivateObjectSecurityEx
GetSecurityDescriptorLength
SetSecurityDescriptorControl
SetPrivateObjectSecurityEx
MapGenericMask
PrivilegeCheck
EqualSid
CopySid
InitializeSecurityDescriptor
AllocateAndInitializeSid
CreateWellKnownSid
FreeSid
InitializeAcl
GetLengthSid
AddAccessAllowedAce
SetSecurityDescriptorDacl

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
CompareStringW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapDestroy
HeapFree
GetProcessHeap
HeapSize
HeapCreate
HeapReAlloc

rpcrt4

RpcRaiseException
RpcImpersonateClient
RpcServerInqCallAttributesW
UuidCreate
RpcGetAuthorizationContextForClient
RpcBindingVectorFree
RpcServerUnregisterIfEx
RpcFreeAuthorizationContext
RpcEpUnregister
NdrServerCallAll
NdrServerCall2
RpcServerUseProtseqW
RpcServerRegisterIf3
I_RpcExceptionFilter
MesHandleFree
RpcServerInqBindings
MesEncodeDynBufferHandleCreate
MesDecodeBufferHandleCreate
UuidFromStringW
RpcRevertToSelf
NdrMesTypeEncode3
NdrMesTypeDecode3
I_RpcBindingInqLocalClientPID
RpcEpRegisterW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

authz

AuthzGetInformationFromContext
AuthzAccessCheck
AuthziFreeAuditEventType
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid
AuthzFreeAuditEvent
AuthziLogAuditEvent
AuthziInitializeAuditEventType
AuthziInitializeAuditParamsFromArray
AuthziInitializeAuditEvent

ws2_32

htonl

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

iphlpapi

GetCurrentThreadCompartmentId

api-ms-win-core-file-l1-1-0

WriteFile
CreateFileW
DeleteFileW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-perfcounters-l1-1-0

PerfCreateInstance
PerfStartProvider
PerfSetULongLongCounterValue
PerfSetULongCounterValue
PerfStopProvider
PerfSetCounterSetInfo

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegEnumValueW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWork

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-eventing-controller-l1-1-0

StartTraceW
EnableTraceEx2
ControlTraceW

api-ms-win-eventing-consumer-l1-1-0

ProcessTrace
OpenTraceW
CloseTrace

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

BfeGetDirectDispatchTable
BfeOnServiceStartTypeChange
BfeServiceMain
SvchostPushServiceGlobals

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/AudioSes.dll
.dll regsvr32 windows:10 windows x86 arch:x86

3914a82d5955b5043566f9cffe3b46f7

Code Sign

33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

03/07/2018, 20:45

Not After

26/07/2019, 20:45

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed
Signer

Actual PE Digest

52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

audioses.pdb

Imports

msvcp_win

_Mtx_unlock
_Mtx_lock
_Mtx_init_in_situ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__localtime64_s
_o__purecall
_o__recalloc
_o__register_onexit_function
_o__resetstkoflw
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
memmove
_o__wsplitpath_s
_o__wtof
_o__wtoi
_o_calloc
_o_ceil
_o_floor
_o_free
_o_log2
_o_malloc
_o_realloc
_o_terminate
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wmemcpy_s
wcschr
_except_handler4_common
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__CIsqrt
_o__CIsin
_o__CIpow
_o__CIlog10
_o__cexit
_o__aligned_malloc
_o__aligned_free
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler3
_CxxThrowException
memcmp
memcpy

rpcrt4

NdrDllUnregisterProxy
CStdStubBuffer_Connect
NdrClientCall4
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
IUnknown_QueryInterface_Proxy
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
I_RpcExceptionFilter
RpcSmDestroyClientContext
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
I_RpcMapWin32Status
NdrDllCanUnloadNow
RpcBindingFree
NdrDllGetClassObject
NdrDllRegisterProxy

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient19
ObjectStublessClient7
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
ObjectStublessClient5
ObjectStublessClient20
ObjectStublessClient18
ObjectStublessClient17
ObjectStublessClient3
ObjectStublessClient10
ObjectStublessClient22
ObjectStublessClient15
ObjectStublessClient11
ObjectStublessClient14
ObjectStublessClient12
ObjectStublessClient16
ObjectStublessClient4
ObjectStublessClient21
ObjectStublessClient13

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
BSTR_UserSize
BSTR_UserFree
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
BSTR_UserUnmarshal
VarUI4FromStr
BSTR_UserMarshal
LPSAFEARRAY_UserMarshal

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW
FindResourceExW
GetModuleHandleExW
GetModuleHandleW
FreeLibrary
LockResource
LoadLibraryExW
SizeofResource
GetModuleFileNameA
DisableThreadLibraryCalls
LoadResource
GetProcAddress

api-ms-win-core-localization-l1-2-0

GetThreadLocale
FormatMessageW
SetThreadLocale

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceExecuteOnce
Sleep
InitOnceInitialize
InitOnceComplete

api-ms-win-core-synch-l1-1-0

CreateEventExW
DeleteCriticalSection
SetEvent
AcquireSRWLockShared
CreateMutexExW
ReleaseSemaphore
InitializeSRWLock
WaitForSingleObject
InitializeCriticalSection
InitializeCriticalSectionEx
CreateSemaphoreExW
CancelWaitableTimer
ReleaseSRWLockShared
TryEnterCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForMultipleObjectsEx
ReleaseSRWLockExclusive
ResetEvent
OpenSemaphoreW
CreateWaitableTimerExW
EnterCriticalSection
SetWaitableTimer
AcquireSRWLockExclusive
CreateEventW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapSize
HeapReAlloc
HeapAlloc
HeapFree
HeapDestroy
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull

api-ms-win-core-com-l1-1-0

CLSIDFromString
CoUninitialize
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
PropVariantCopy
CoTaskMemAlloc
CoWaitForMultipleHandles
CoTaskMemFree
CoInitializeEx
CoGetApartmentType
PropVariantClear

api-ms-win-core-registry-l1-1-0

RegSetValueExW
RegOpenKeyExW
RegGetValueW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteValueW

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventUnregister
EventActivityIdControl
EventWriteTransfer
EventRegister

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids
RegisterTraceGuidsW
TraceEvent
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage
GetTraceLoggerHandle

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateThread
GetCurrentThread
SetThreadPriority

api-ms-win-core-string-l2-1-0

IsCharAlphaW
CharNextW

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateErrorW
SetRestrictedErrorInfo
RoOriginateError

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
CloseThreadpoolWork
CreateThreadpool
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
SubmitThreadpoolWork
TrySubmitThreadpoolCallback
CreateThreadpoolTimer
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolCleanupGroup
CreateThreadpoolWork
CloseThreadpool

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrcmpW

mmdevapi

ord29
ord11
ord30
ord5
ord10

api-ms-win-power-base-l1-1-0

PowerRegisterSuspendResumeNotification
PowerUnregisterSuspendResumeNotification

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
MapViewOfFileEx

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-file-l1-1-0

GetFileSize
CreateFileW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-winrt-robuffer-l1-1-0

RoGetBufferMarshaler

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-memory-l1-1-1

GetProcessWorkingSetSizeEx
VirtualLock
VirtualUnlock
SetProcessWorkingSetSizeEx
PrefetchVirtualMemory

api-ms-win-devices-config-l1-1-1

CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate
IsErrorPropagationEnabled
RoGetMatchingRestrictedErrorInfo

api-ms-win-service-management-l1-1-0

CloseServiceHandle
OpenServiceW
OpenSCManagerW

api-ms-win-service-winsvc-l1-1-0

QueryServiceStatus

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-mm-time-l1-1-0

timeBeginPeriod

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy
IsProcessorFeaturePresent

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-featurestaging-l1-1-0

GetFeatureEnabledState
SubscribeFeatureStateChangeNotification
UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

ntdll

RtlLockMemoryZone
RtlFreeMemoryBlockLookaside
RtlCreateMemoryZone
RtlDestroyMemoryBlockLookaside
RtlExtendMemoryBlockLookaside
EtwRegisterTraceGuidsW
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
RtlQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlEqualWnfChangeStamps
ShipAssert
RtlQueryPackageClaims
RtlCreateMemoryBlockLookaside
RtlDestroyMemoryZone
RtlAllocateMemoryBlockLookaside
RtlAllocateMemoryZone
RtlUnlockMemoryZone
NtQueryInformationThread
NtAlpcConnectPort
RtlInitUnicodeStringEx
RtlSetLastWin32ErrorAndNtStatusFromNtStatus
AlpcInitializeMessageAttribute
AlpcGetMessageAttribute
NtAlpcSendWaitReceivePort
NtSetInformationThread
NtQueryInformationProcess
RtlNtStatusToDosError

api-ms-win-service-private-l1-1-0

SubscribeServiceChangeNotifications
UnsubscribeServiceChangeNotifications

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 969KB - Virtual size: 969KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 512B - Virtual size: 327B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_BSS
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RT_CONST
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RT_DATA
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/Ionic.Zip.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/LICENCE.dat
.zip
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/settings/newdev.exe
.exe windows:5 windows x86 arch:x86

81fd276d49dcfb5944ab1253641f139e

Code Sign

37:b5:90:60:7d:8f:d5:b8:4c:20:32:cb:9b:b0:99:a0
Certificate

Issuer

CN=DESKTOP-EU2PRQL\\Home

Not Before

31/01/2019, 22:24

Not After

01/02/2020, 04:24

Subject

CN=DESKTOP-EU2PRQL\\Home

c1:e2:c9:3f:fc:e8:11:f7:c4:6d:5b:b7:6a:fe:8d:ef:d6:2c:f2:28
Signer

Actual PE Digest

c1:e2:c9:3f:fc:e8:11:f7:c4:6d:5b:b7:6a:fe:8d:ef:d6:2c:f2:28

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

setup.pdb

Imports

kernel32

GetNativeSystemInfo
EndUpdateResourceW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetEvent
CreateEventW
LoadResource
LockResource
SizeofResource
FindResourceW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
DeleteFileW
GetFileAttributesW
GetTempFileNameW
ReadFile
OpenProcess
GetCurrentProcess
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
GetVersionExW
GetModuleFileNameW
GlobalAlloc
GlobalFree
LocalFree
FormatMessageW
CopyFileW
GetDateFormatW
GetTimeFormatW
CompareStringW
WideCharToMultiByte
RaiseException
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
Sleep
HeapSetInformation
SetFilePointer
GetDiskFreeSpaceExW
CreateFileW
DeleteCriticalSection
CreateThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrlenW
MulDiv
GetTickCount
GetExitCodeProcess
LoadLibraryW
GetTempPathW
SwitchToThread
FindNextFileW
UpdateResourceA
BeginUpdateResourceA
FindResourceA
lstrlenA
DeleteFileA
CreateFileA
UpdateResourceW
BeginUpdateResourceW
GetVersion
GetEnvironmentVariableA
HeapReAlloc
HeapSize
WriteConsoleW
ReadConsoleW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetEndOfFile
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
FindFirstFileW
FindClose
GetProcAddress
FreeLibrary
WaitForSingleObject
GetLastError
CloseHandle
WriteFile
GetStringTypeW
HeapAlloc
HeapFree
GetACP
GetModuleHandleExW
ExitProcess
MultiByteToWideChar
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle

gdi32

GetStockObject
EnumFontFamiliesExW
DeleteObject
CreateFontIndirectW
GetObjectW
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
CreateCompatibleDC

ole32

CoUninitialize
CoInitialize

secur32

GetComputerObjectNameW

shell32

ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteA

user32

SystemParametersInfoW
IsDialogMessageW
LoadImageW
LoadIconW
LoadCursorW
SetClassLongW
ScreenToClient
GetWindowRect
GetClientRect
SetWindowTextW
ShowScrollBar
SetForegroundWindow
EnableWindow
GetFocus
SetFocus
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItem
CreateDialogIndirectParamW
CreateDialogParamW
MoveWindow
ShowWindow
DestroyWindow
SendMessageW
SendMessageA
PeekMessageW
DispatchMessageW
TranslateMessage
ExitWindowsEx
MessageBoxW
ReleaseDC
GetDC
DrawTextW
GetSystemMetrics
GetDialogBaseUnits
MessageBoxA
SetCursor
MsgWaitForMultipleObjects

crypt32

CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy

wininet

InternetCrackUrlW
InternetCombineUrlW

msi

ord8
ord78
ord150
ord92

Exports

Exports

_DecodePointerInternal@4
_EncodePointerInternal@4

Sections

.text
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VPN Tools & Utilities PACK/Proxy & VPN Tools & Utilities PACK/X-Proxy 6.2.0.4/x-proxy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: vp

Password: vp

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 11KB - Virtual size: 10KB

.rsrc Size: 223KB - Virtual size: 223KB

.reloc Size: 512B - Virtual size: 12B

Password: vp

e3d3af6e0b819e6e4e57a42ba9c239b9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l1-1-0

rpcrt4

ws2_32

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-string-l1-1-0

iphlpapi

api-ms-win-core-profile-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

nsi

api-ms-win-core-threadpool-private-l1-1-0

webservices

firewallapi

api-ms-win-core-com-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

Exports

Exports

Sections

.text Size: 564KB - Virtual size: 563KB

.rdata Size: 72KB - Virtual size: 72KB

.data Size: 8KB - Virtual size: 13KB

.pdata Size: 19KB - Virtual size: 18KB

.didat Size: 1024B - Virtual size: 640B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

Password: vp

af3ccebee341bc1634b9269a2d4ab01d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

.text
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 223KB - Virtual size: 223KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 564KB - Virtual size: 563KB

.rdata
Size: 72KB - Virtual size: 72KB

.data
Size: 8KB - Virtual size: 13KB

.pdata
Size: 19KB - Virtual size: 18KB

.didat
Size: 1024B - Virtual size: 640B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 442KB - Virtual size: 441KB

.rdata
Size: 356KB - Virtual size: 355KB

.data
Size: 9KB - Virtual size: 26KB

.pdata
Size: 28KB - Virtual size: 28KB

.didat
Size: 512B - Virtual size: 360B

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 14KB - Virtual size: 13KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 415KB

.ndata
Size: - Virtual size: 564KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 3KB