adfw_create
adfw_delete
adfw_setID
adfw_setProcess
adfw_setValidate
mainWrapper
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RunDLL.zip
Resource
win7-20231129-en
windows7-x64
6 signatures
600 seconds
Behavioral task
behavioral2
Sample
RunDLL.zip
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
600 seconds
General
-
Target
RunDLL.zip
-
Size
8.3MB
-
MD5
1c2a9b33a95814a3679c5945202ba98d
-
SHA1
8e81c73b9946c68b6b0489847293a75f1c04444b
-
SHA256
22832979d9c87a13402f7e6bc647c3a9d7fa7a89b84298fea2cd2ab5b56b10d7
-
SHA512
d4beeab319c0539ab91ef0baf529ed1867b8ae685506c40fa77781476ae2993ffe5f38b76b14cc44c5e50dd19c71ac70141c0a218ceb16a8957bd3426628477e
-
SSDEEP
196608:DIyUXygG4aoKBYcLeiTfkqTLOKOMqDhv3yL0m8cljiV:MyUS4PKScPeKOMsv9pclj2
Score
3/10
Malware Config
Signatures
-
Unsigned PE 55 IoCs
Checks for missing Authenticode signature.
resource unpack001/RunDLL/2x64.dll unpack001/RunDLL/2x86.dll unpack001/RunDLL/Doublepulsar-1.3.1.exe unpack001/RunDLL/Eternalblue-2.2.0.exe unpack001/RunDLL/adfw-2.dll unpack001/RunDLL/adfw.dll unpack001/RunDLL/cnli-0.dll unpack001/RunDLL/cnli-1.dll unpack001/RunDLL/coli-0.dll unpack001/RunDLL/crli-0.dll unpack001/RunDLL/dmgd-1.dll unpack001/RunDLL/dmgd-4.dll unpack001/RunDLL/esco-0.dll unpack001/RunDLL/etch-0.dll unpack001/RunDLL/etchCore-0.x64.dll unpack001/RunDLL/etchCore-0.x86.dll unpack001/RunDLL/eteb-2.dll unpack001/RunDLL/etebCore-2.x64.dll unpack001/RunDLL/etebCore-2.x86.dll unpack001/RunDLL/exma-1.dll unpack001/RunDLL/exma.dll unpack001/RunDLL/iconv.dll unpack001/RunDLL/libcurl.dll unpack001/RunDLL/libeay32.dll unpack001/RunDLL/libiconv-2.dll unpack001/RunDLL/libxml2.dll unpack001/RunDLL/pcla-0.dll unpack001/RunDLL/pcre-0.dll unpack001/RunDLL/pcrecpp-0.dll unpack001/RunDLL/pcreposix-0.dll unpack001/RunDLL/posh-0.dll unpack001/RunDLL/posh.dll unpack001/RunDLL/riar-2.dll unpack001/RunDLL/riar.dll unpack001/RunDLL/rundll.exe unpack001/RunDLL/ssleay32.dll unpack001/RunDLL/start.exe unpack001/RunDLL/system.exe unpack001/RunDLL/tibe-1.dll unpack001/RunDLL/tibe-2.dll unpack001/RunDLL/tibe.dll unpack001/RunDLL/trch-0.dll unpack001/RunDLL/trch-1.dll unpack001/RunDLL/trch.dll unpack001/RunDLL/trfo-0.dll unpack001/RunDLL/trfo-2.dll unpack001/RunDLL/trfo.dll unpack001/RunDLL/tucl-1.dll unpack001/RunDLL/tucl.dll unpack001/RunDLL/ucl.dll unpack001/RunDLL/x64.dll unpack001/RunDLL/x86.dll unpack001/RunDLL/xdvl-0.dll unpack001/RunDLL/zibe.dll unpack001/RunDLL/zlib1.dll
Files
-
RunDLL.zip.zip
-
RunDLL/2x64.dll.dll windows:6 windows x64 arch:x64
6cc55806e0a38c421b1edbae511a6c26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
kernel32
CloseHandle
WriteConsoleW
SetEndOfFile
HeapReAlloc
CreateProcessA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
WriteFile
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
CreateFileW
SetStdHandle
FlushFileBuffers
ReadFile
ReadConsoleW
GetStringTypeW
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/2x86.dll.dll windows:6 windows x86 arch:x86
5d45fc6eb38e6fcaca143378976c0217
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
kernel32
GetConsoleCP
WriteConsoleW
SetEndOfFile
HeapReAlloc
CreateProcessA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
CloseHandle
WriteFile
DecodePointer
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
CreateFileW
SetStdHandle
FlushFileBuffers
ReadFile
ReadConsoleW
GetStringTypeW
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/Doublepulsar-1.3.1.Skeleton.xml
-
RunDLL/Doublepulsar-1.3.1.exe.exe windows:5 windows x86 arch:x86
2ef98d303937b8d317d5ce3aea3e144e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetTickCount
GetLastError
trfo-2
TfReadFileIntoBuffer
TfFree
TfWriteBufferIntoFile
TfStrICmp
trch-1
Parameter_U32_getValue
Parameter_LocalFile_getValue
Parameter_Port_getValue
Parameter_IPv4_getValue
Params_findParameter
Parameter_S16_getValue
Params_findParamchoice
Paramchoice_getValue
Parameter_String_getValue
tucl-1
TcLog
ws2_32
inet_addr
inet_ntoa
htons
coli-0
mainWrapper
coli_setProcess
coli_setID
coli_setCleanup
coli_delete
coli_create
coli_setValidate
tibe-2
TbPutAlign
TbPutLong
TbPutBuff
TbWinsockStartup
TbFreeStructBuffers
TbFinishSocket
TbCleanSB
TbDoSmbPacket
TbMakeSmbHeader
TbPutTransact
TbPutShort
TbPutByte
TbSetRemoteSocketData
TbMakeSocket
TbSetAuthenticationData
TbDoSmbStartup
TbInitStruct
cnli-1
CNEString_strstr
CNEString_vsnprintf
byteSwapShort
CNEMem_cleanNClearNDestroyPointer
CNESocket_close
CNEMem_cleanNClear
CNESocket_send
CNESocket_recv
CNESocket_getOSError
CNESocket_create
byteSwapLong
CNE_allocateCleanMemoryFunc
CNEString_strlen
CNESystemWin_sleep
CNESocket_connect
xdvl-0
XDevLib_generateRandomSequence
XDevLib_xorMask
ssleay32
ord96
ord172
ord12
ord21
ord75
ord87
ord43
ord48
ord8
ord108
ord78
ord58
ord183
msvcrt
_controlfp
?terminate@@YAXXZ
_unlink
memset
memcpy
srand
memmove
__getmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/Doublepulsar-1.3.1.xml
-
RunDLL/Eternalblue-2.2.0.Skeleton.xml
-
RunDLL/Eternalblue-2.2.0.exe.exe windows:5 windows x86 arch:x86
43ab0829235f0f3299a0baee637645e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
Sleep
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetSystemTime
SystemTimeToFileTime
GetTickCount
InitializeCriticalSection
CreateEventW
CreateThread
GetLastError
GetExitCodeThread
DeleteCriticalSection
CloseHandle
WaitForMultipleObjects
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
trch-1
Parameter_Port_getValue
Params_findParameter
Parameter_Boolean_setValue
Params_findParamchoice
Paramchoice_hasValue
Paramchoice_getValue
Parameter_hasValue
Parameter_U32_getValue
Parameter_S16_getValue
Parameter_IPv4_getValue
Parameter_Boolean_getValue
tucl-1
TcLogBuffer
TcLog
ws2_32
inet_ntoa
WSAStartup
socket
WSAGetLastError
setsockopt
htonl
connect
recvfrom
select
sendto
ntohs
send
recv
WSACleanup
closesocket
accept
listen
bind
htons
inet_addr
coli-0
coli_setCleanup
coli_create
coli_delete
mainWrapper
coli_setValidate
coli_setID
coli_setProcess
msvcrt
srand
strcmp
time
_snprintf
strncpy
rand
gmtime
sscanf
tolower
toupper
islower
strncat
pow
strlen
memcmp
strtoul
memmove
__getmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
memcpy
realloc
free
memset
malloc
_iob
fprintf
abort
printf
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/Eternalblue-2.2.0.fb.xml
-
RunDLL/Eternalblue-2.2.0.xml
-
RunDLL/Result.txt
-
RunDLL/adfw-2.dll.dll windows:5 windows x86 arch:x86
8b7d25d38cf306a79459f3847affe0c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
exma-1
disconnectRendezvous
closeRendezvous
sendSockets
readParamsFromEM
writeParamsToEM
recvSocket
connectRendezvous
getDefaultEMFile
bindRendezvous
closeEM
openEMForWriting
tibe-2
TbWinsockCleanup
TbWinsockStartup
trch-1
Socket_type
Paramgroup_getNumParamchoices
Parameter_matchType
Config_getID
Config_getInputParams
Config_getNamespaceUri
Config_getSchemaVersion
Config_getOutputParams
Parameter_U16_setValue
Parameter_String_create
Parameter_Boolean_create
Parameter_hasValue
Parameter_String_getValue
Parameter_markInvalid
Parameter_Boolean_getValue
Params_findParamchoice
Config_create
Params_create
Config_setInputParams
Parameter_LocalFile_create
Params_parseCommandLine
Config_delete
Params_isValid
Config_printUsage
Params_printInvalid
Parameter_LocalFile_getValue
Parameter_hasValidValue
Parameter_U16_getValue
Paramgroup_getParameter
Scalar_format
Parameter_matchFormat
Parameter_Socket_getValue
Parameter_Socket_setValue
Parameter_Socket_List_getValue
Parameter_Socket_List_setValue
Params_removeParameter
Params_getNumParameters
Params_getParameter
Params_getNumParamchoices
Params_getParamchoice
Paramchoice_hasValidValue
Paramchoice_getValue
Paramchoice_getNumParamgroups
Paramchoice_getParamgroup
Paramgroup_matchName
Config_marshal
Config_unmarshal
Params_findParameter
Parameter_U16_create
Params_addParameter
Parameter_delete
Paramgroup_getNumParameters
Paramgroup_getParamchoice
tucl-1
TcLog
TcLogClose
TcLogOpen
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
malloc
strncpy
strcat
exit
strrchr
strlen
memcpy
tolower
free
calloc
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/adfw.dll.dll windows:4 windows x86 arch:x86
715742f34145e42b16e3c177441ea1bf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
exma
openEMForWriting
bindRendezvous
getDefaultEMFile
connectRendezvous
disconnectRendezvous
recvSocket
writeParamsToEM
readParamsFromEM
sendSockets
closeRendezvous
tibe
TbWinsockCleanup
TbWinsockStartup
trch
Params_getParamchoice
Params_getNumParamchoices
Params_getParameter
Params_getNumParameters
Parameter_Socket_List_setValue
Parameter_Socket_List_getValue
Parameter_Socket_setValue
Parameter_Socket_getValue
Parameter_matchFormat
Scalar_format
Params_removeParameter
Socket_type
Paramchoice_getParamgroup
Parameter_hasValidValue
Parameter_LocalFile_getValue
Params_printInvalid
Config_printUsage
Paramchoice_hasValidValue
Params_parseCommandLine
Parameter_LocalFile_create
Config_setInputParams
Config_delete
Params_create
Config_create
Params_findParamchoice
Parameter_Boolean_getValue
Parameter_markInvalid
Parameter_String_getValue
Parameter_hasValue
Parameter_Boolean_create
Parameter_String_create
Parameter_U16_setValue
Config_getOutputParams
Config_getInputParams
Paramchoice_getValue
Params_isValid
Paramchoice_getNumParamgroups
Paramgroup_getParamchoice
Paramgroup_matchName
Config_marshal
Config_unmarshal
Params_findParameter
Parameter_U16_create
Params_addParameter
Parameter_delete
Paramgroup_getNumParameters
Paramgroup_getParameter
Parameter_matchType
Paramgroup_getNumParamchoices
Parameter_U16_getValue
tucl
TcLogClose
TcLogOpen
TcLog
msvcr71
strrchr
exit
strncpy
_initterm
calloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
malloc
_close
_onexit
__dllonexit
free
kernel32
DisableThreadLibraryCalls
Exports
Exports
mainWrapper
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-file-l1-2-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d2:96:40:03:40:b5:e1:10:2e:1d:f1:2b:1f:99:7d:40:8a:9a:5a:18:4e:88:af:a4:d4:c9:a6:ee:f0:11:4e:a6Signer
Actual PE Digestd2:96:40:03:40:b5:e1:10:2e:1d:f1:2b:1f:99:7d:40:8a:9a:5a:18:4e:88:af:a4:d4:c9:a6:ee:f0:11:4e:a6Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-file-l1-2-0.pdb
Exports
Exports
CreateFile2
GetTempPathW
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
Sections
.text Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-file-l2-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3a:5c:ae:d0:1b:3f:49:8d:c1:11:36:53:27:a8:1d:97:87:96:4c:a1:9d:b9:d1:11:02:fd:8a:62:b9:1e:84:6cSigner
Actual PE Digest3a:5c:ae:d0:1b:3f:49:8d:c1:11:36:53:27:a8:1d:97:87:96:4c:a1:9d:b9:d1:11:02:fd:8a:62:b9:1e:84:6cDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-file-l2-1-0.pdb
Exports
Exports
CopyFile2
CopyFileExW
CreateDirectoryExW
CreateHardLinkW
CreateSymbolicLinkW
GetFileInformationByHandleEx
MoveFileExW
MoveFileWithProgressW
ReOpenFile
ReadDirectoryChangesW
ReplaceFileW
Sections
.text Size: 1024B - Virtual size: 925B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-localization-l1-2-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1e:c4:86:3e:ef:89:e9:ca:9b:16:5f:a9:a2:5b:a5:91:4b:8f:ca:2d:5f:cc:af:04:1e:9d:79:8f:37:c5:d0:ceSigner
Actual PE Digest1e:c4:86:3e:ef:89:e9:ca:9b:16:5f:a9:a2:5b:a5:91:4b:8f:ca:2d:5f:cc:af:04:1e:9d:79:8f:37:c5:d0:ceDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-localization-l1-2-0.pdb
Exports
Exports
ConvertDefaultLocale
EnumSystemGeoID
EnumSystemLocalesA
EnumSystemLocalesW
FindNLSString
FindNLSStringEx
FormatMessageA
FormatMessageW
GetACP
GetCPInfo
GetCPInfoExW
GetCalendarInfoEx
GetCalendarInfoW
GetFileMUIInfo
GetFileMUIPath
GetGeoInfoW
GetLocaleInfoA
GetLocaleInfoEx
GetLocaleInfoW
GetNLSVersion
GetNLSVersionEx
GetOEMCP
GetProcessPreferredUILanguages
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemPreferredUILanguages
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadUILanguage
GetUILanguageInfo
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
IdnToAscii
IdnToUnicode
IsDBCSLeadByte
IsDBCSLeadByteEx
IsNLSDefinedString
IsValidCodePage
IsValidLanguageGroup
IsValidLocale
IsValidLocaleName
IsValidNLSVersion
LCMapStringA
LCMapStringEx
LCMapStringW
LocaleNameToLCID
ResolveLocaleName
SetCalendarInfoW
SetLocaleInfoW
SetProcessPreferredUILanguages
SetThreadLocale
SetThreadPreferredUILanguages
SetThreadUILanguage
SetUserGeoID
VerLanguageNameA
VerLanguageNameW
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-processthreads-l1-1-1.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
96:1c:54:1a:92:c7:1e:d5:bd:0e:7b:3c:56:f2:ca:ee:6f:75:3b:06:54:a5:30:b8:9c:1f:28:b9:b8:1c:16:5aSigner
Actual PE Digest96:1c:54:1a:92:c7:1e:d5:bd:0e:7b:3c:56:f2:ca:ee:6f:75:3b:06:54:a5:30:b8:9c:1f:28:b9:b8:1c:16:5aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-processthreads-l1-1-1.pdb
Exports
Exports
FlushInstructionCache
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThreadStackLimits
GetProcessHandleCount
GetProcessMitigationPolicy
GetThreadContext
GetThreadIdealProcessorEx
GetThreadTimes
IsProcessorFeaturePresent
OpenProcess
SetProcessMitigationPolicy
SetThreadContext
SetThreadIdealProcessorEx
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-synch-l1-2-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c9:94:fa:f1:b8:d8:b2:98:3c:73:74:ba:2d:98:45:ba:de:d8:f7:66:f8:67:5e:6b:e9:a5:71:a8:ee:2f:81:e3Signer
Actual PE Digestc9:94:fa:f1:b8:d8:b2:98:3c:73:74:ba:2d:98:45:ba:de:d8:f7:66:f8:67:5e:6b:e9:a5:71:a8:ee:2f:81:e3Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-synch-l1-2-0.pdb
Exports
Exports
DeleteSynchronizationBarrier
EnterSynchronizationBarrier
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitOnceInitialize
InitializeConditionVariable
InitializeSynchronizationBarrier
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-timezone-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
04:9f:29:b7:65:8a:9e:3b:24:2f:61:80:ef:95:c4:af:92:bf:5b:07:08:6f:eb:d2:0d:d0:69:78:90:3a:cf:c5Signer
Actual PE Digest04:9f:29:b7:65:8a:9e:3b:24:2f:61:80:ef:95:c4:af:92:bf:5b:07:08:6f:eb:d2:0d:d0:69:78:90:3a:cf:c5Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-timezone-l1-1-0.pdb
Exports
Exports
FileTimeToSystemTime
GetDynamicTimeZoneInformation
GetTimeZoneInformation
GetTimeZoneInformationForYear
SetDynamicTimeZoneInformation
SetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
Sections
.text Size: 1024B - Virtual size: 1003B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-core-xstate-l2-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ba:98:09:b7:9e:d5:d3:c6:10:eb:46:68:0e:2b:3e:82:f7:35:08:68:80:ff:e0:c5:d8:78:dc:ae:04:b9:4d:60Signer
Actual PE Digestba:98:09:b7:9e:d5:d3:c6:10:eb:46:68:0e:2b:3e:82:f7:35:08:68:80:ff:e0:c5:d8:78:dc:ae:04:b9:4d:60Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-core-xstate-l2-1-0.pdb
Exports
Exports
CopyContext
GetEnabledXStateFeatures
GetXStateFeaturesMask
InitializeContext
LocateXStateFeature
SetXStateFeaturesMask
Sections
.text Size: 1024B - Virtual size: 698B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-conio-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
36:74:2c:f2:b4:e6:6f:cf:f3:1d:6c:dc:e2:3c:0c:42:23:b2:0a:47:d1:6d:dc:64:2f:32:8c:a5:99:1c:14:0cSigner
Actual PE Digest36:74:2c:f2:b4:e6:6f:cf:f3:1d:6c:dc:e2:3c:0c:42:23:b2:0a:47:d1:6d:dc:64:2f:32:8c:a5:99:1c:14:0cDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-conio-l1-1-0.pdb
Exports
Exports
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
_cgets
_cgets_s
_cgetws
_cgetws_s
_cputs
_cputws
_getch
_getch_nolock
_getche
_getche_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_putch
_putch_nolock
_putwch
_putwch_nolock
_ungetch
_ungetch_nolock
_ungetwch
_ungetwch_nolock
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-convert-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
12:cb:57:c2:6d:86:3e:8f:05:02:4b:74:30:08:41:d8:52:5b:7f:f9:65:12:69:03:b9:12:15:e1:70:ed:d6:d8Signer
Actual PE Digest12:cb:57:c2:6d:86:3e:8f:05:02:4b:74:30:08:41:d8:52:5b:7f:f9:65:12:69:03:b9:12:15:e1:70:ed:d6:d8Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-convert-l1-1-0.pdb
Exports
Exports
__toascii
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_ecvt
_ecvt_s
_fcvt
_fcvt_s
_gcvt
_gcvt_s
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_ltoa
_ltoa_s
_ltow
_ltow_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wctomb_l
_wctomb_s_l
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
atof
atoi
atol
atoll
btowc
c16rtomb
c32rtomb
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
strtod
strtof
strtoimax
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
wcrtomb
wcrtomb_s
wcsrtombs
wcsrtombs_s
wcstod
wcstof
wcstoimax
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wctob
wctomb
wctomb_s
wctrans
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-environment-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
22:21:05:0f:69:ad:be:ab:b3:67:67:c0:ac:da:54:5d:66:95:1e:ed:ed:15:d2:20:ca:d3:30:d4:f8:16:35:4dSigner
Actual PE Digest22:21:05:0f:69:ad:be:ab:b3:67:67:c0:ac:da:54:5d:66:95:1e:ed:ed:15:d2:20:ca:d3:30:d4:f8:16:35:4dDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-environment-l1-1-0.pdb
Exports
Exports
__p__environ
__p__wenviron
_dupenv_s
_putenv
_putenv_s
_searchenv
_searchenv_s
_wdupenv_s
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wputenv
_wputenv_s
_wsearchenv
_wsearchenv_s
getenv
getenv_s
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-filesystem-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
98:b1:c6:97:89:2f:7b:d5:d1:cc:7b:0c:0e:df:e5:9a:77:ef:ad:4c:cf:26:90:c0:fd:99:56:5f:63:fd:75:ebSigner
Actual PE Digest98:b1:c6:97:89:2f:7b:d5:d1:cc:7b:0c:0e:df:e5:9a:77:ef:ad:4c:cf:26:90:c0:fd:99:56:5f:63:fd:75:ebDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-filesystem-l1-1-0.pdb
Exports
Exports
_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-heap-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
14:9d:52:34:67:78:d3:a1:ef:34:9f:aa:b2:3d:72:c7:97:9f:6c:5a:b5:76:36:1b:c8:e8:43:c3:90:d0:83:8fSigner
Actual PE Digest14:9d:52:34:67:78:d3:a1:ef:34:9f:aa:b2:3d:72:c7:97:9f:6c:5a:b5:76:36:1b:c8:e8:43:c3:90:d0:83:8fDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-heap-l1-1-0.pdb
Exports
Exports
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_callnewh
_calloc_base
_expand
_free_base
_get_heap_handle
_heapchk
_heapmin
_heapwalk
_malloc_base
_msize
_query_new_handler
_query_new_mode
_realloc_base
_recalloc
_set_new_mode
calloc
free
malloc
realloc
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-locale-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d0:c1:16:53:d9:6a:43:87:5b:e7:04:32:2a:60:6b:81:92:20:09:ad:74:87:1b:b1:25:d8:11:bc:e3:ea:51:57Signer
Actual PE Digestd0:c1:16:53:d9:6a:43:87:5b:e7:04:32:2a:60:6b:81:92:20:09:ad:74:87:1b:b1:25:d8:11:bc:e3:ea:51:57Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-locale-l1-1-0.pdb
Exports
Exports
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-math-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
48:fb:2c:f6:18:e6:5c:dd:bf:f0:bb:8a:5d:42:be:f3:4f:7d:ba:36:83:62:ca:e5:e7:47:4b:13:52:34:e3:e5Signer
Actual PE Digest48:fb:2c:f6:18:e6:5c:dd:bf:f0:bb:8a:5d:42:be:f3:4f:7d:ba:36:83:62:ca:e5:e7:47:4b:13:52:34:e3:e5Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-math-l1-1-0.pdb
Exports
Exports
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_Cbuild
_Cmulcc
_Cmulcr
_FCbuild
_FCmulcc
_FCmulcr
_LCbuild
_LCmulcc
_LCmulcr
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__setusermatherr
_cabs
_chgsign
_chgsignf
_copysign
_copysignf
_d_int
_dclass
_dexp
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_except1
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_finite
_fpclass
_ftol
_hypot
_hypotf
_isnan
_j0
_j1
_jn
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_logb
_nextafter
_scalb
_set_SSE2_enable
_y0
_y1
_yn
acos
acosh
acoshf
acoshl
asin
asinh
asinhf
asinhl
atan
atan2
atanh
atanhf
atanhl
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
cexp
cexpf
cexpl
cimag
cimagf
cimagl
clog
clog10
clog10f
clog10l
clogf
clogl
conj
conjf
conjl
copysign
copysignf
copysignl
cos
cosh
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
erf
erfc
erfcf
erfcl
erff
erfl
exp
exp2
exp2f
exp2l
expm1
expm1f
expm1l
fabs
fdim
fdimf
fdiml
floor
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmin
fminf
fminl
fmod
frexp
hypot
ilogb
ilogbf
ilogbl
ldexp
lgamma
lgammaf
lgammal
llrint
llrintf
llrintl
llround
llroundf
llroundl
log
log10
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
lrint
lrintf
lrintl
lround
lroundf
lroundl
modf
nan
nanf
nanl
nearbyint
nearbyintf
nearbyintl
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
norm
normf
norml
pow
powf
remainder
remainderf
remainderl
remquo
remquof
remquol
rint
rintf
rintl
round
roundf
roundl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
sin
sinh
sqrt
tan
tanh
tgamma
tgammaf
tgammal
trunc
truncf
truncl
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-multibyte-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
96:f5:f7:6d:f0:f2:20:ba:7c:3b:1f:76:ea:9b:77:88:2f:b8:33:5a:c9:1a:90:5b:47:b9:4c:66:6b:0d:cc:5aSigner
Actual PE Digest96:f5:f7:6d:f0:f2:20:ba:7c:3b:1f:76:ea:9b:77:88:2f:b8:33:5a:c9:1a:90:5b:47:b9:4c:66:6b:0d:cc:5aDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-multibyte-l1-1-0.pdb
Exports
Exports
__p__mbcasemap
__p__mbctype
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsdup
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-private-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
f7:2f:d7:e0:13:94:ad:4f:fd:4f:e4:ca:6f:3e:91:65:18:6a:b4:64:cb:80:12:02:10:ed:91:bd:14:48:3a:a8Signer
Actual PE Digestf7:2f:d7:e0:13:94:ad:4f:fd:4f:e4:ca:6f:3e:91:65:18:6a:b4:64:cb:80:12:02:10:ed:91:bd:14:48:3a:a8Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-private-l1-1-0.pdb
Exports
Exports
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__intrinsic_abnormal_termination
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__unDName
__unDNameEx
__uncaught_exception
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_o__CIacos
_o__CIasin
_o__CIatan
_o__CIatan2
_o__CIcos
_o__CIcosh
_o__CIexp
_o__CIfmod
_o__CIlog
_o__CIlog10
_o__CIpow
_o__CIsin
_o__CIsinh
_o__CIsqrt
_o__CItan
_o__CItanh
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__Strftime
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__Wcsftime
_o____lc_codepage_func
_o____lc_collate_cp_func
_o____lc_locale_name_func
_o____mb_cur_max_func
_o___acrt_iob_func
_o___conio_common_vcprintf
_o___conio_common_vcprintf_p
_o___conio_common_vcprintf_s
_o___conio_common_vcscanf
_o___conio_common_vcwprintf
_o___conio_common_vcwprintf_p
_o___conio_common_vcwprintf_s
_o___conio_common_vcwscanf
_o___daylight
_o___dstbias
_o___fpe_flt_rounds
_o___libm_sse2_acos
_o___libm_sse2_acosf
_o___libm_sse2_asin
_o___libm_sse2_asinf
_o___libm_sse2_atan
_o___libm_sse2_atan2
_o___libm_sse2_atanf
_o___libm_sse2_cos
_o___libm_sse2_cosf
_o___libm_sse2_exp
_o___libm_sse2_expf
_o___libm_sse2_log
_o___libm_sse2_log10
_o___libm_sse2_log10f
_o___libm_sse2_logf
_o___libm_sse2_pow
_o___libm_sse2_powf
_o___libm_sse2_sin
_o___libm_sse2_sinf
_o___libm_sse2_tan
_o___libm_sse2_tanf
_o___p___argc
_o___p___argv
_o___p___wargv
_o___p__acmdln
_o___p__commode
_o___p__environ
_o___p__fmode
_o___p__mbcasemap
_o___p__mbctype
_o___p__pgmptr
_o___p__wcmdln
_o___p__wenviron
_o___p__wpgmptr
_o___pctype_func
_o___pwctype_func
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___std_type_info_name
_o___stdio_common_vfprintf
_o___stdio_common_vfprintf_p
_o___stdio_common_vfprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfwprintf
_o___stdio_common_vfwprintf_p
_o___stdio_common_vfwprintf_s
_o___stdio_common_vfwscanf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsprintf_p
_o___stdio_common_vsprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vswprintf
_o___stdio_common_vswprintf_p
_o___stdio_common_vswprintf_s
_o___stdio_common_vswscanf
_o___timezone
_o___tzname
_o___wcserror
_o__access
_o__access_s
_o__aligned_free
_o__aligned_malloc
_o__aligned_msize
_o__aligned_offset_malloc
_o__aligned_offset_realloc
_o__aligned_offset_recalloc
_o__aligned_realloc
_o__aligned_recalloc
_o__atodbl
_o__atodbl_l
_o__atof_l
_o__atoflt
_o__atoflt_l
_o__atoi64
_o__atoi64_l
_o__atoi_l
_o__atol_l
_o__atoldbl
_o__atoldbl_l
_o__atoll_l
_o__beep
_o__beginthread
_o__beginthreadex
_o__cabs
_o__callnewh
_o__calloc_base
_o__cexit
_o__cgets
_o__cgets_s
_o__cgetws
_o__cgetws_s
_o__chdir
_o__chdrive
_o__chmod
_o__chsize
_o__chsize_s
_o__close
_o__commit
_o__configthreadlocale
_o__configure_narrow_argv
_o__configure_wide_argv
_o__controlfp_s
_o__cputs
_o__cputws
_o__creat
_o__create_locale
_o__crt_atexit
_o__ctime32_s
_o__ctime64_s
_o__cwait
_o__d_int
_o__dclass
_o__difftime32
_o__difftime64
_o__dlog
_o__dnorm
_o__dpcomp
_o__dpoly
_o__dscale
_o__dsign
_o__dsin
_o__dtest
_o__dunscale
_o__dup
_o__dup2
_o__dupenv_s
_o__ecvt
_o__ecvt_s
_o__endthread
_o__endthreadex
_o__eof
_o__errno
_o__except1
_o__execute_onexit_table
_o__execv
_o__execve
_o__execvp
_o__execvpe
_o__exit
_o__expand
_o__fclose_nolock
_o__fcloseall
_o__fcvt
_o__fcvt_s
_o__fd_int
_o__fdclass
_o__fdexp
_o__fdlog
_o__fdopen
_o__fdpcomp
_o__fdpoly
_o__fdscale
_o__fdsign
_o__fdsin
_o__fflush_nolock
_o__fgetc_nolock
_o__fgetchar
_o__fgetwc_nolock
_o__fgetwchar
_o__filelength
_o__filelengthi64
_o__fileno
_o__findclose
_o__findfirst32
_o__findfirst32i64
_o__findfirst64
_o__findfirst64i32
_o__findnext32
_o__findnext32i64
_o__findnext64
_o__findnext64i32
_o__flushall
_o__fpclass
_o__fputc_nolock
_o__fputchar
_o__fputwc_nolock
_o__fputwchar
_o__fread_nolock
_o__fread_nolock_s
_o__free_base
_o__free_locale
_o__fseek_nolock
_o__fseeki64
_o__fseeki64_nolock
_o__fsopen
_o__fstat32
_o__fstat32i64
_o__fstat64
_o__fstat64i32
_o__ftell_nolock
_o__ftelli64
_o__ftelli64_nolock
_o__ftime32
_o__ftime32_s
_o__ftime64
_o__ftime64_s
_o__fullpath
_o__futime32
_o__futime64
_o__fwrite_nolock
_o__gcvt
_o__gcvt_s
_o__get_daylight
_o__get_doserrno
_o__get_dstbias
_o__get_errno
_o__get_fmode
_o__get_heap_handle
_o__get_initial_narrow_environment
_o__get_initial_wide_environment
_o__get_invalid_parameter_handler
_o__get_narrow_winmain_command_line
_o__get_osfhandle
_o__get_pgmptr
_o__get_stream_buffer_pointers
_o__get_terminate
_o__get_thread_local_invalid_parameter_handler
_o__get_timezone
_o__get_tzname
_o__get_wide_winmain_command_line
_o__get_wpgmptr
_o__getc_nolock
_o__getch
_o__getch_nolock
_o__getche
_o__getche_nolock
_o__getcwd
_o__getdcwd
_o__getdiskfree
_o__getdllprocaddr
_o__getdrive
_o__getdrives
_o__getmbcp
_o__getsystime
_o__getw
_o__getwc_nolock
_o__getwch
_o__getwch_nolock
_o__getwche
_o__getwche_nolock
_o__getws
_o__getws_s
_o__gmtime32
_o__gmtime32_s
_o__gmtime64
_o__gmtime64_s
_o__heapchk
_o__heapmin
_o__hypot
_o__hypotf
_o__i64toa
_o__i64toa_s
_o__i64tow
_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__isatty
_o__isctype
_o__isctype_l
_o__isleadbyte_l
_o__ismbbalnum
_o__ismbbalnum_l
_o__ismbbalpha
_o__ismbbalpha_l
_o__ismbbblank
_o__ismbbblank_l
_o__ismbbgraph
_o__ismbbgraph_l
_o__ismbbkalnum
_o__ismbbkalnum_l
_o__ismbbkana
_o__ismbbkana_l
_o__ismbbkprint
_o__ismbbkprint_l
_o__ismbbkpunct
_o__ismbbkpunct_l
_o__ismbblead
_o__ismbblead_l
_o__ismbbprint
_o__ismbbprint_l
_o__ismbbpunct
_o__ismbbpunct_l
_o__ismbbtrail
_o__ismbbtrail_l
_o__ismbcalnum
_o__ismbcalnum_l
_o__ismbcalpha
_o__ismbcalpha_l
_o__ismbcblank
_o__ismbcblank_l
_o__ismbcdigit
_o__ismbcdigit_l
_o__ismbcgraph
_o__ismbcgraph_l
_o__ismbchira
_o__ismbchira_l
_o__ismbckata
_o__ismbckata_l
_o__ismbcl0
_o__ismbcl0_l
_o__ismbcl1
_o__ismbcl1_l
_o__ismbcl2
_o__ismbcl2_l
_o__ismbclegal
_o__ismbclegal_l
_o__ismbclower
_o__ismbclower_l
_o__ismbcprint
_o__ismbcprint_l
_o__ismbcpunct
_o__ismbcpunct_l
_o__ismbcspace
_o__ismbcspace_l
_o__ismbcsymbol
_o__ismbcsymbol_l
_o__ismbcupper
_o__ismbcupper_l
_o__ismbslead
_o__ismbslead_l
_o__ismbstrail
_o__ismbstrail_l
_o__iswctype_l
_o__itoa
_o__itoa_s
_o__itow
_o__itow_s
_o__j0
_o__j1
_o__jn
_o__kbhit
_o__ld_int
_o__ldclass
_o__ldexp
_o__ldlog
_o__ldpcomp
_o__ldpoly
_o__ldscale
_o__ldsign
_o__ldsin
_o__ldtest
_o__ldunscale
_o__lfind
_o__lfind_s
_o__libm_sse2_acos_precise
_o__libm_sse2_asin_precise
_o__libm_sse2_atan_precise
_o__libm_sse2_cos_precise
_o__libm_sse2_exp_precise
_o__libm_sse2_log10_precise
_o__libm_sse2_log_precise
_o__libm_sse2_pow_precise
_o__libm_sse2_sin_precise
_o__libm_sse2_sqrt_precise
_o__libm_sse2_tan_precise
_o__loaddll
_o__localtime32
_o__localtime32_s
_o__localtime64
_o__localtime64_s
_o__lock_file
_o__locking
_o__logb
_o__lsearch
_o__lsearch_s
_o__lseek
_o__lseeki64
_o__ltoa
_o__ltoa_s
_o__ltow
_o__ltow_s
_o__makepath
_o__makepath_s
_o__malloc_base
_o__mbbtombc
_o__mbbtombc_l
_o__mbbtype
_o__mbbtype_l
_o__mbccpy
_o__mbccpy_l
_o__mbccpy_s
_o__mbccpy_s_l
_o__mbcjistojms
_o__mbcjistojms_l
_o__mbcjmstojis
_o__mbcjmstojis_l
_o__mbclen
_o__mbclen_l
_o__mbctohira
_o__mbctohira_l
_o__mbctokata
_o__mbctokata_l
_o__mbctolower
_o__mbctolower_l
_o__mbctombb
_o__mbctombb_l
_o__mbctoupper
_o__mbctoupper_l
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-process-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c4:dd:ef:45:62:5c:02:74:54:e0:73:0e:88:b2:38:fa:38:6d:31:4e:49:ee:83:98:1d:ed:0e:21:f4:ce:48:54Signer
Actual PE Digestc4:dd:ef:45:62:5c:02:74:54:e0:73:0e:88:b2:38:fa:38:6d:31:4e:49:ee:83:98:1d:ed:0e:21:f4:ce:48:54Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-process-l1-1-0.pdb
Exports
Exports
_beep
_cwait
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_loaddll
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_unloaddll
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-runtime-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
26:b5:44:94:0b:53:72:1b:d0:d1:76:f5:3a:e6:1e:42:da:c5:02:1f:23:d0:d3:ff:2a:74:ac:1d:50:a3:81:c4Signer
Actual PE Digest26:b5:44:94:0b:53:72:1b:d0:d1:76:f5:3a:e6:1e:42:da:c5:02:1f:23:d0:d3:ff:2a:74:ac:1d:50:a3:81:c4Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-runtime-l1-1-0.pdb
Exports
Exports
_Exit
__control87_2
__doserrno
__fpe_flt_rounds
__fpecode
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__pgmptr
__p__wcmdln
__p__wpgmptr
__pxcptinfoptrs
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__wcserror
__wcserror_s
_assert
_beginthread
_beginthreadex
_c_exit
_cexit
_clearfp
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_crt_debugger_hook
_endthread
_endthreadex
_errno
_execute_onexit_table
_exit
_fpieee_flt
_fpreset
_get_doserrno
_get_errno
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_pgmptr
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_wide_winmain_command_line
_get_wpgmptr
_getdllprocaddr
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_query_app_type
_register_onexit_function
_register_thread_local_exe_atexit_callback
_resetstkoflw
_seh_filter_dll
_seh_filter_exe
_set_abort_behavior
_set_app_type
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_invalid_parameter_handler
_set_new_handler
_set_thread_local_invalid_parameter_handler
_seterrormode
_sleep
_statusfp
_statusfp2
_strerror
_strerror_s
_wassert
_wcserror
_wcserror_s
_wperror
_wsystem
abort
exit
feclearexcept
fegetenv
fegetexceptflag
fegetround
feholdexcept
fesetenv
fesetexceptflag
fesetround
fetestexcept
perror
quick_exit
raise
set_terminate
signal
strerror
strerror_s
system
terminate
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-stdio-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
da:8d:00:56:5e:9e:5b:f7:fe:59:5c:28:ac:69:5b:6d:58:ef:8e:36:d5:a4:17:2f:07:04:14:9b:f4:79:49:0dSigner
Actual PE Digestda:8d:00:56:5e:9e:5b:f7:fe:59:5c:28:ac:69:5b:6d:58:ef:8e:36:d5:a4:17:2f:07:04:14:9b:f4:79:49:0dDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-stdio-l1-1-0.pdb
Exports
Exports
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
_chsize
_chsize_s
_close
_commit
_creat
_dup
_dup2
_eof
_fclose_nolock
_fcloseall
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_flushall
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_ftell_nolock
_ftelli64
_ftelli64_nolock
_fwrite_nolock
_get_fmode
_get_osfhandle
_get_printf_count_output
_get_stream_buffer_pointers
_getc_nolock
_getcwd
_getdcwd
_getmaxstdio
_getw
_getwc_nolock
_getws
_getws_s
_isatty
_kbhit
_locking
_lseek
_lseeki64
_mktemp
_mktemp_s
_open
_open_osfhandle
_pclose
_pipe
_popen
_putc_nolock
_putw
_putwc_nolock
_putws
_read
_rmtmp
_set_fmode
_set_printf_count_output
_setmaxstdio
_setmode
_sopen
_sopen_dispatch
_sopen_s
_tell
_telli64
_tempnam
_ungetc_nolock
_ungetwc_nolock
_wcreat
_wfdopen
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wmktemp
_wmktemp_s
_wopen
_wpopen
_write
_wsopen
_wsopen_dispatch
_wsopen_s
_wtempnam
_wtmpnam
_wtmpnam_s
clearerr
clearerr_s
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
fopen
fopen_s
fputc
fputs
fputwc
fputws
fread
fread_s
freopen
freopen_s
fseek
fsetpos
ftell
fwrite
getc
getchar
gets
gets_s
getwc
getwchar
putc
putchar
puts
putwc
putwchar
rewind
setbuf
setvbuf
tmpfile
tmpfile_s
tmpnam
tmpnam_s
ungetc
ungetwc
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-string-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
8d:91:41:06:2c:ba:24:0b:f6:d3:9f:c5:81:7b:8f:17:da:bc:36:89:bf:9b:e9:f1:d8:2f:29:b9:b3:2e:44:0eSigner
Actual PE Digest8d:91:41:06:2c:ba:24:0b:f6:d3:9f:c5:81:7b:8f:17:da:bc:36:89:bf:9b:e9:f1:d8:2f:29:b9:b3:2e:44:0eDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-string-l1-1-0.pdb
Exports
Exports
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__strncnt
__wcsncnt
_isalnum_l
_isalpha_l
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_memccpy
_memicmp
_memicmp_l
_strcoll_l
_strdup
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsdup
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctype
is_wctype
isalnum
isalpha
isblank
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswblank
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
mblen
mbrlen
memcpy_s
memmove_s
memset
strcat
strcat_s
strcmp
strcoll
strcpy
strcpy_s
strcspn
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strspn
strtok
strtok_s
strxfrm
tolower
toupper
towctrans
towlower
towupper
wcscat
wcscat_s
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsspn
wcstok
wcstok_s
wcsxfrm
wctype
wmemcpy_s
wmemmove_s
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-time-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
11:53:40:75:6b:3d:ea:61:27:f6:c0:8f:85:ab:07:07:b1:d2:59:9b:43:57:95:b5:83:92:a9:08:15:2c:92:e9Signer
Actual PE Digest11:53:40:75:6b:3d:ea:61:27:f6:c0:8f:85:ab:07:07:b1:d2:59:9b:43:57:95:b5:83:92:a9:08:15:2c:92:e9Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-time-l1-1-0.pdb
Exports
Exports
_Getdays
_Getmonths
_Gettnames
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__daylight
__dstbias
__timezone
__tzname
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_difftime32
_difftime64
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_futime32
_futime64
_get_daylight
_get_dstbias
_get_timezone
_get_tzname
_getsystime
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_mkgmtime32
_mkgmtime64
_mktime32
_mktime64
_setsystime
_strdate
_strdate_s
_strftime_l
_strtime
_strtime_s
_time32
_time64
_timespec32_get
_timespec64_get
_tzset
_utime32
_utime64
_wasctime
_wasctime_s
_wcsftime_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wutime32
_wutime64
asctime
asctime_s
clock
strftime
wcsftime
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-crt-utility-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
2e:70:cb:a2:89:fb:ac:7b:dc:d1:42:bc:e5:79:ff:34:6d:75:61:c3:2f:80:c5:f3:1f:3d:f0:15:87:8e:74:b7Signer
Actual PE Digest2e:70:cb:a2:89:fb:ac:7b:dc:d1:42:bc:e5:79:ff:34:6d:75:61:c3:2f:80:c5:f3:1f:3d:f0:15:87:8e:74:b7Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
api-ms-win-crt-utility-l1-1-0.pdb
Exports
Exports
_abs64
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_lfind
_lfind_s
_lrotl
_lrotr
_lsearch
_lsearch_s
_rotl
_rotl64
_rotr
_rotr64
_swab
abs
bsearch
bsearch_s
div
imaxabs
imaxdiv
labs
ldiv
llabs
lldiv
qsort
qsort_s
rand
rand_s
srand
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/api-ms-win-eventing-provider-l1-1-0.dll.dll windows:10 windows x86 arch:x86
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
50:e6:bd:b9:92:49:fa:02:e3:f9:5c:b3:83:24:6c:5c:3b:4c:fe:f0:74:b4:a4:b2:ec:0d:33:da:5b:de:fe:48Signer
Actual PE Digest50:e6:bd:b9:92:49:fa:02:e3:f9:5c:b3:83:24:6c:5c:3b:4c:fe:f0:74:b4:a4:b2:ec:0d:33:da:5b:de:fe:48Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
API-MS-Win-Eventing-Provider-L1-1-0.pdb
Exports
Exports
EventActivityIdControl
EventEnabled
EventProviderEnabled
EventRegister
EventSetInformation
EventUnregister
EventWrite
EventWriteEx
EventWriteString
EventWriteTransfer
Sections
.text Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/cnli-0.dll.dll windows:4 windows x86 arch:x86
c30180a2e3a81b71b6d916caad631d31
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
CreateFileA
CreateFileW
CloseHandle
GetFileAttributesA
GetFileAttributesW
FlushFileBuffers
WriteFile
ReadFile
SetEndOfFile
FileTimeToLocalFileTime
GetFileTime
SetFileTime
LocalFileTimeToFileTime
GetFileSize
DeleteFileA
DeleteFileW
MoveFileExA
MoveFileExW
CopyFileA
CopyFileW
FindClose
CreateDirectoryA
CreateDirectoryW
RemoveDirectoryA
RemoveDirectoryW
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetCurrentDirectoryA
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
SetFilePointer
GetLastError
GetSystemTimeAsFileTime
GetTimeZoneInformation
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
CreateThread
GetExitCodeThread
WaitForSingleObject
SetThreadPriority
TerminateThread
GetCurrentThreadId
GetCurrentThread
ExitThread
CreateMutexA
ReleaseMutex
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
CreateEventA
DeleteCriticalSection
ResetEvent
LeaveCriticalSection
EnterCriticalSection
SetEvent
InterlockedDecrement
InterlockedIncrement
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
ResumeThread
GetSystemTime
GetTempPathW
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetCurrentProcessId
advapi32
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
ws2_32
WSACleanup
socket
bind
listen
accept
connect
closesocket
WSAStartup
select
send
sendto
recv
recvfrom
inet_addr
inet_ntoa
gethostbyname
gethostbyaddr
getsockopt
setsockopt
htonl
htons
ntohs
ntohl
__WSAFDIsSet
WSAGetLastError
getsockname
getpeername
ioctlsocket
shutdown
msvcrt
_vsnwprintf
wcschr
_vsnprintf
strchr
malloc
free
_except_handler3
realloc
strrchr
wcsrchr
wcslen
_stricmp
wcscmp
_wcsicmp
wcsncmp
strncmp
towupper
towlower
toupper
tolower
iswctype
isspace
_snprintf
atoi
isdigit
wcstombs
_snwprintf
wcstol
atol
strtok
wcstoul
wcstok
strtoul
sscanf
strstr
memmove
wcsstr
strpbrk
wcspbrk
strncpy
wcsncpy
_wcsnicmp
_strnicmp
_strdup
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
wcscpy
Exports
Exports
CNEBlob_append
CNEBlob_appendByte
CNEBlob_appendRandomData
CNEBlob_copy
CNEBlob_createFunc
CNEBlob_createNU32Func
CNEBlob_flushMemorySurplus
CNEBlob_formattedStrAppend
CNEBlob_formattedStrWAppend
CNEBlob_free
CNEBlob_freeBuffer
CNEBlob_increaseAllocatedSize
CNEBlob_initializeFunc
CNEBlob_pop
CNEBlob_remove
CNEBlob_strAppend
CNEBlob_strWAppend
CNEDate_daysInMonth
CNEDate_daysOfYear
CNEDate_getCNEDateDiffFromTimeStampDiff
CNEDate_getCNEDateFromTimeStamp
CNEDate_getCNEDateTimeFromFileTime
CNEDate_getCurrentDate
CNEDate_getCurrentTimeAndDate
CNEDate_getFileTimeFromCNEDateTime
CNEDate_getTimeStamp
CNEDate_getTimeStampFromCNEDate
CNEDate_getTimeZone
CNEDate_isLeapYear
CNEFileIO_dirClose
CNEFileIO_dirCreate
CNEFileIO_dirCreateW
CNEFileIO_dirInstall
CNEFileIO_dirInstallW
CNEFileIO_dirNext
CNEFileIO_dirNextDirectory
CNEFileIO_dirNextEx
CNEFileIO_dirNextExW
CNEFileIO_dirNextW
CNEFileIO_dirOpen
CNEFileIO_dirOpenW
CNEFileIO_dirRemove
CNEFileIO_dirRemoveW
CNEFileIO_dirReset
CNEFileIO_expendFilenameA
CNEFileIO_expendFilenameW
CNEFileIO_fileClose
CNEFileIO_fileCopy
CNEFileIO_fileCopyW
CNEFileIO_fileExists
CNEFileIO_fileExistsW
CNEFileIO_fileFlush
CNEFileIO_fileGetDir
CNEFileIO_fileGetDirExW
CNEFileIO_fileGetDirW
CNEFileIO_fileGetPos
CNEFileIO_fileGetSize
CNEFileIO_fileGetSizeByNameExWWithFileAccess
CNEFileIO_fileGetSizeByNameExWithFileAccess
CNEFileIO_fileGetSizeByNameWWithFileAccess
CNEFileIO_fileGetSizeByNameWithFileAccess
CNEFileIO_fileGetSizeEx
CNEFileIO_fileGetTimesFromHandle
CNEFileIO_fileGetTimesWWithFileAccess
CNEFileIO_fileGetTimesWithFileAccess
CNEFileIO_fileIsOpen
CNEFileIO_fileMap
CNEFileIO_fileMove
CNEFileIO_fileMoveW
CNEFileIO_fileOpen
CNEFileIO_fileOpenExpend
CNEFileIO_fileOpenExpendW
CNEFileIO_fileOpenW
CNEFileIO_fileRead
CNEFileIO_fileReadChar
CNEFileIO_fileSetEndOfFile
CNEFileIO_fileSetPos
CNEFileIO_fileSetPosEx
CNEFileIO_fileSetTimesFromHandle
CNEFileIO_fileSetTimesWWithFileAccess
CNEFileIO_fileSetTimesWithFileAccess
CNEFileIO_fileUnMap
CNEFileIO_fileUnlink
CNEFileIO_fileUnlinkW
CNEFileIO_fileWipe
CNEFileIO_fileWipeExpend
CNEFileIO_fileWipeExpendW
CNEFileIO_fileWipeW
CNEFileIO_fileWrite
CNEFileIO_fileWriteChar
CNEFileIO_fixLongPath
CNEFileIO_freeExpendFilename
CNEFileIO_getPathFromFileSpecW
CNEFileIO_getWorkingDir
CNEFileIO_getWorkingDirW
CNEHeap_CreateEmptyFunc
CNEHeap_CreateFunc
CNEHeap_Empty
CNEHeap_FlushMemorySurplus
CNEHeap_Free
CNEHeap_HeadPeek
CNEHeap_Pop
CNEHeap_Push
CNELAList_allocateFromList
CNELAList_create
CNELAList_free
CNELAList_freeToList
CNEListAddBack
CNEListAddFront
CNEListCreate_func
CNEListFree
CNEListGetBack
CNEListGetFront
CNEListInit_func
CNEListIsEmpty
CNEListIterator_equal
CNEListIterator_get
CNEListIterator_getPrev
CNEListIterator_getPrevReference
CNEListIterator_getReference
CNEListIterator_next
CNEListIterator_notEqual
CNEListIterator_prev
CNEListMap
CNEListPeekBack
CNEListPeekFront
CNEList_at
CNEList_begin
CNEList_clear
CNEList_clearWithDestructor
CNEList_destroy
CNEList_destroyWithDestructor
CNEList_end
CNEList_erase
CNEList_filter
CNEList_filterWithContext
CNEList_find
CNEList_findWithContext
CNEList_forEach
CNEList_forEachWithContext
CNEList_insert
CNEList_isEmpty
CNEList_peekBack
CNEList_peekFront
CNEList_popBack
CNEList_popFront
CNEList_pushBack
CNEList_pushFront
CNEList_size
CNEList_sort
CNEMem_cleanNClear
CNEMem_cleanNClearNDestroyPointer
CNENetwork_Checksum16
CNENetwork_CreateEthernetHeader
CNENetwork_CreateIcmpHeader
CNENetwork_CreateIpHeader
CNENetwork_CreateUdpHeader
CNENetwork_DisplayEthernetHeader
CNENetwork_DisplayIcmpHeader
CNENetwork_DisplayIpHeader
CNENetwork_DisplayUdpHeader
CNENetwork_IsIpValidA
CNENetwork_IsIpValidW
CNENetwork_IsPortValidA
CNENetwork_IsPortValidW
CNENetwork_addrToWPIDFunc
CNENetwork_addrToWPIDWFunc
CNENetwork_ipToAddr
CNENetwork_ipToAddrW
CNENetwork_stripMACSpacers
CNENetwork_wpidToAddr
CNEPqs_CreateEmptyFunc
CNEPqs_CreateFunc
CNEPqs_Empty
CNEPqs_FlushMemorySurplus
CNEPqs_Free
CNEPqs_HeadPeek
CNEPqs_Pop
CNEPqs_Push
CNERBTree_createTreeFunc
CNERBTree_delete
CNERBTree_deleteNode
CNERBTree_destroyTree
CNERBTree_executeNodeEx
CNERBTree_getFirst
CNERBTree_getLast
CNERBTree_getNext
CNERBTree_getPrev
CNERBTree_insert
CNERBTree_retrieve
CNERBTree_retrieveNode
CNESocket_accept
CNESocket_addressToIPString
CNESocket_bind
CNESocket_cleanup
CNESocket_close
CNESocket_connect
CNESocket_create
CNESocket_disable
CNESocket_fastAccept
CNESocket_fastConnect
CNESocket_getLocal
CNESocket_getNative
CNESocket_getOSError
CNESocket_getRemote
CNESocket_getSocketOption
CNESocket_getSocketOption_bCast
CNESocket_getSocketOption_exclusive
CNESocket_getSocketOption_keepAlive
CNESocket_getSocketOption_linger
CNESocket_getSocketOption_noDelay
CNESocket_getSocketOption_noLinger
CNESocket_getSocketOption_recvBuff
CNESocket_getSocketOption_reuseAddr
CNESocket_getSocketOption_sendBuff
CNESocket_getSocketOption_ttl
CNESocket_getString
CNESocket_ipStringToAddress
CNESocket_isSocketReady
CNESocket_isValidIP
CNESocket_listen
CNESocket_lookupIP
CNESocket_lookupName
CNESocket_peek
CNESocket_putString
CNESocket_recv
CNESocket_recvExact
CNESocket_recvFrom
CNESocket_select
CNESocket_selectEx
CNESocket_send
CNESocket_sendExpect
CNESocket_sendTo
CNESocket_setBlockingMode
CNESocket_setLineEnding
CNESocket_setSocketOption
CNESocket_setSocketOption_bCast
CNESocket_setSocketOption_exclusive
CNESocket_setSocketOption_keepAlive
CNESocket_setSocketOption_linger
CNESocket_setSocketOption_noDelay
CNESocket_setSocketOption_noLinger
CNESocket_setSocketOption_recvBuff
CNESocket_setSocketOption_reuseAddr
CNESocket_setSocketOption_sendBuff
CNESocket_setSocketOption_ttl
CNESocket_setThrottle
CNESocket_shutdown
CNESocket_startup
CNEStaticArray_clear
CNEStaticArray_createFunc
CNEStaticArray_delete
CNEStaticArray_forEach
CNEStaticArray_forEachWithArgument
CNEStaticArray_get
CNEStaticArray_getReference
CNEStaticArray_push
CNEStaticArray_remove
CNEStaticArray_removeAt
CNEStaticArray_removeIf
CNEStaticArray_removeIfWithArgument
CNEStaticArray_set
CNEStaticArray_size
CNEString_VAFree
CNEString_append
CNEString_appendA
CNEString_appendFunc
CNEString_appendW
CNEString_compare
CNEString_compareA
CNEString_compareCSStringFunc
CNEString_compareFunc
CNEString_compareIgnoreCase
CNEString_compareIgnoreCaseA
CNEString_compareIgnoreCaseW
CNEString_compareW
CNEString_concat
CNEString_copy
CNEString_copySafeAFunc
CNEString_copySafeWFunc
CNEString_createA
CNEString_createFunc
CNEString_createW
CNEString_endsWith
CNEString_endsWithA
CNEString_endsWithW
CNEString_findLastCharacterIndexWith
CNEString_findStringInBufferFunc
CNEString_free
CNEString_getStringBufferA
CNEString_getStringBufferW
CNEString_getStringType
CNEString_indexOfStringA
CNEString_indexOfStringFunc
CNEString_indexOfStringW
CNEString_lastIndexOfStringA
CNEString_lastIndexOfStringW
CNEString_length
CNEString_lengthSafeA
CNEString_lengthSafeW
CNEString_radix10itoa
CNEString_remove
CNEString_replaceAll
CNEString_replaceAllA
CNEString_replaceAllFunc
CNEString_replaceAllW
CNEString_split
CNEString_splitA
CNEString_splitFunc
CNEString_splitW
CNEString_sprintf
CNEString_sprintfA
CNEString_sprintfW
CNEString_startsWith
CNEString_startsWithA
CNEString_startsWithFunc
CNEString_startsWithW
CNEString_strToLower
CNEString_strToUpper
CNEString_strWToLower
CNEString_strWToUpper
CNEString_substring
CNEString_toLower
CNEString_toLowerUpperCaseFunc
CNEString_toStringA
CNEString_toStringFunc
CNEString_toStringW
CNEString_toUpper
CNEString_trim
CNEString_wideCharacterStringToSingleByteString
CNESystemWin_getMicroSecondsSinceEpoch
CNESystemWin_sleep
CNEThread_TlsAlloc
CNEThread_TlsFree
CNEThread_TlsGetValue
CNEThread_TlsSetValue
CNEThread_cvBroadcast
CNEThread_cvCreate
CNEThread_cvDestroy
CNEThread_cvSignal
CNEThread_cvTimedWait
CNEThread_cvWait
CNEThread_eventCreate
CNEThread_eventDestroy
CNEThread_eventSet
CNEThread_eventUnSet
CNEThread_eventWait
CNEThread_getCurrentThread
CNEThread_inverseSemaphoreCreate
CNEThread_inverseSemaphoreGetHolderCount
CNEThread_inverseSemaphoreHold
CNEThread_inverseSemaphoreRelease
CNEThread_isCurrentThread
CNEThread_mutexCreateFunc
CNEThread_mutexDestroy
CNEThread_mutexHold
CNEThread_mutexHoldNoBlock
CNEThread_mutexRelease
CNEThread_priorityTable
CNEThread_rwLockCreate
CNEThread_rwLockDestroy
CNEThread_rwLockLock
CNEThread_rwLockUnlock
CNEThread_semaphoreCreate
CNEThread_semaphoreDestroy
CNEThread_semaphorePost
CNEThread_semaphoreWait
CNEThread_semaphoreWaitNoBlock
CNEThread_threadCancel
CNEThread_threadClose
CNEThread_threadCreate
CNEThread_threadCreateWithPriority
CNEThread_threadExit
CNEThread_threadJoin
CNEThread_threadSetPriority
CNEVector_At
CNEVector_Capacity
CNEVector_Clear
CNEVector_CreateEmptyFunc
CNEVector_CreateFunc
CNEVector_Erase
CNEVector_EraseFast
CNEVector_FlushMemorySurplus
CNEVector_Free
CNEVector_Get
CNEVector_GetFast
CNEVector_PopBack
CNEVector_PushBack
CNEVector_Resize
CNEVector_Size
CNEVector_SizeType
CNEVector_Swap
CNEVirtualArray_do
CNEVirtualArray_doWithParam
CNEVirtualArray_findFirstElementWith
CNEVirtualArray_findLastElementWith
CNEVirtualArray_freeAllElements
CNEVirtualArray_freeArrayPointersAndElements
CNEVirtualArray_freeVA
CNEVirtualArray_freeVAAndElements
CNEVirtualArray_getElementAt
CNEVirtualArray_getLastElement
CNEVirtualArray_getSize
CNEVirtualArray_increasePreAllocateArraySize
CNEVirtualArray_insertAtIndex
CNEVirtualArray_pop
CNEVirtualArray_positionOfFirstElementFoundWith
CNEVirtualArray_positionOfLastElementFoundWith
CNEVirtualArray_push
CNEVirtualArray_removeAllElementsFoundWith
CNEVirtualArray_removeAtIndex
CNEVirtualArray_removeFirstElementFoundWith
CNEVirtualArray_search
CNEVirtualArray_setElementAt
CNEVirtualArray_sort
CNEVirtualArray_swapElements
CNE_allocateCleanMemoryFunc
CNE_compareMemoryFunc
CNE_poisonAllocatedMemoryFunc
CNE_poisonFreeMemoryFunc
CNE_reallocateCleanMemoryFunc
CNE_reallocateMemoryFunc
SafeVirtualArray_GetArrayFromBlob
SafeVirtualArray_GetBlobFromArray
SafeVirtualArray_GetBlobFromStaticElems
SafeVirtualArray_createFunc
SafeVirtualArray_do
SafeVirtualArray_doWithParam
SafeVirtualArray_findFirstElementWith
SafeVirtualArray_findLastElementWith
SafeVirtualArray_freeAllElements
SafeVirtualArray_freeArrayPointersAndElements
SafeVirtualArray_freeVA
SafeVirtualArray_freeVAAndElements
SafeVirtualArray_getElementAt
SafeVirtualArray_getLastElement
SafeVirtualArray_getLock
SafeVirtualArray_getSize
SafeVirtualArray_getVAAndLock
SafeVirtualArray_increasePreAllocateArraySize
SafeVirtualArray_initializeFunc
SafeVirtualArray_insertAtIndex
SafeVirtualArray_pop
SafeVirtualArray_positionOfFirstElementFoundWith
SafeVirtualArray_positionOfLastElementFoundWith
SafeVirtualArray_push
SafeVirtualArray_pushAndBlob
SafeVirtualArray_pushAndBlobStatic
SafeVirtualArray_releaseLock
SafeVirtualArray_removeAllElementsFoundWith
SafeVirtualArray_removeAndBlob
SafeVirtualArray_removeAndBlobStatic
SafeVirtualArray_removeAtIndex
SafeVirtualArray_removeFirstElementFoundWith
SafeVirtualArray_search
SafeVirtualArray_setElementAt
SafeVirtualArray_sort
SafeVirtualArray_swapElements
SafeVirtualArray_updateElement
VAMarshal_GetArrayFromBlob
VAMarshal_GetBlobFromArray
VAMarshal_GetBlobFromStaticElems
VirtualArray_createFunc
VirtualArray_initializeFunc
VirtualBuffer_addBytesToBuffer
VirtualBuffer_freeBuffer
VirtualBuffer_initializeBuffer
VirtualBuffer_makeRoomIfNeeded
byteSwapLong
byteSwapLongLong
byteSwapShort
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/cnli-1.dll.dll windows:5 windows x86 arch:x86
a482b407319dc74133dc3d7a0212f626
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
GetTimeZoneInformation
FileTimeToSystemTime
GetLocalTime
SystemTimeToFileTime
GetLastError
CreateFileA
CloseHandle
GetFileAttributesA
FlushFileBuffers
WriteFile
ReadFile
SetEndOfFile
FileTimeToLocalFileTime
GetFileTime
SetFileTime
LocalFileTimeToFileTime
GetFileSize
DeleteFileA
MoveFileExA
CopyFileA
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
FindClose
CreateDirectoryA
RemoveDirectoryA
FindNextFileA
FindFirstFileA
GetCurrentDirectoryA
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetTempPathW
GetSystemDirectoryW
CreateFileW
GetFileAttributesW
SetFilePointer
DeleteFileW
MoveFileExW
CopyFileW
GetFullPathNameW
CreateDirectoryW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GetSystemTime
Sleep
CreateThread
GetExitCodeThread
WaitForSingleObject
SetThreadPriority
TerminateThread
ExitThread
GetCurrentThreadId
GetCurrentThread
CreateMutexA
ReleaseMutex
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
CreateEventA
DeleteCriticalSection
LeaveCriticalSection
SetEvent
EnterCriticalSection
ResetEvent
InterlockedDecrement
InterlockedIncrement
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
ResumeThread
GetWindowsDirectoryW
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetCurrentProcessId
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ws2_32
accept
connect
closesocket
shutdown
select
send
sendto
recv
recvfrom
gethostbyname
gethostbyaddr
getsockopt
setsockopt
listen
gethostname
__WSAFDIsSet
WSAGetLastError
getsockname
getpeername
ioctlsocket
WSAStartup
WSACleanup
socket
bind
msvcrt
_vsnwprintf
wcschr
_vsnprintf
strchr
malloc
memcpy
realloc
free
sscanf
memmove
strlen
wcslen
mbstowcs
wcstombs
vsprintf
strcpy
wcscpy
strncpy
wcsncpy
_strdup
_wcsdup
strcmp
wcscmp
_stricmp
_wcsicmp
strncmp
wcsncmp
_strnicmp
_wcsnicmp
strcat
wcscat
strncat
strrchr
wcsrchr
strpbrk
wcspbrk
memchr
strspn
wcsspn
strstr
wcsstr
isspace
iswctype
isalnum
isdigit
isxdigit
isgraph
toupper
towupper
tolower
towlower
strtol
wcstol
strtoul
wcstoul
memset
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
wcsncat
Exports
Exports
CNEBlob_append
CNEBlob_appendByte
CNEBlob_appendRandomData
CNEBlob_copy
CNEBlob_createFunc
CNEBlob_createNU32Func
CNEBlob_flushMemorySurplus
CNEBlob_formattedStrAppend
CNEBlob_formattedStrWAppend
CNEBlob_free
CNEBlob_freeBuffer
CNEBlob_increaseAllocatedSize
CNEBlob_initializeFunc
CNEBlob_pop
CNEBlob_remove
CNEBlob_strAppend
CNEBlob_strWAppend
CNEDate_daysInMonth
CNEDate_daysOfYear
CNEDate_getCNEDateDiffFromTimeStampDiff
CNEDate_getCNEDateFromTimeStamp
CNEDate_getCNEDateTimeFromFileTime
CNEDate_getCurrentDate
CNEDate_getCurrentTimeAndDate
CNEDate_getFileTimeFromCNEDateTime
CNEDate_getTimeStamp
CNEDate_getTimeStampFromCNEDate
CNEDate_getTimeStampFromTimeval
CNEDate_getTimeZone
CNEDate_isLeapYear
CNEFileIO_dirClose
CNEFileIO_dirCreate
CNEFileIO_dirCreateW
CNEFileIO_dirInstall
CNEFileIO_dirInstallW
CNEFileIO_dirNext
CNEFileIO_dirNextDirectory
CNEFileIO_dirNextEx
CNEFileIO_dirNextExW
CNEFileIO_dirNextW
CNEFileIO_dirOpen
CNEFileIO_dirOpenW
CNEFileIO_dirRemove
CNEFileIO_dirRemoveW
CNEFileIO_dirReset
CNEFileIO_expendFilenameA
CNEFileIO_expendFilenameW
CNEFileIO_fileClose
CNEFileIO_fileCopy
CNEFileIO_fileCopyW
CNEFileIO_fileExists
CNEFileIO_fileExistsW
CNEFileIO_fileFlush
CNEFileIO_fileGetDir
CNEFileIO_fileGetDirExW
CNEFileIO_fileGetDirW
CNEFileIO_fileGetPos
CNEFileIO_fileGetPosEx
CNEFileIO_fileGetSize
CNEFileIO_fileGetSizeByNameExWWithFileAccess
CNEFileIO_fileGetSizeByNameExWithFileAccess
CNEFileIO_fileGetSizeByNameWWithFileAccess
CNEFileIO_fileGetSizeByNameWithFileAccess
CNEFileIO_fileGetSizeEx
CNEFileIO_fileGetTimesFromHandle
CNEFileIO_fileGetTimesWWithFileAccess
CNEFileIO_fileGetTimesWithFileAccess
CNEFileIO_fileIsOpen
CNEFileIO_fileMap
CNEFileIO_fileMove
CNEFileIO_fileMoveW
CNEFileIO_fileOpen
CNEFileIO_fileOpenExpend
CNEFileIO_fileOpenExpendW
CNEFileIO_fileOpenW
CNEFileIO_fileReadChar
CNEFileIO_fileReadEx
CNEFileIO_fileSetEndOfFile
CNEFileIO_fileSetPos
CNEFileIO_fileSetPosEx
CNEFileIO_fileSetTimesFromHandle
CNEFileIO_fileSetTimesWWithFileAccess
CNEFileIO_fileSetTimesWithFileAccess
CNEFileIO_fileUnMap
CNEFileIO_fileUnlink
CNEFileIO_fileUnlinkW
CNEFileIO_fileWipe
CNEFileIO_fileWipeExpend
CNEFileIO_fileWipeExpendW
CNEFileIO_fileWipeW
CNEFileIO_fileWriteChar
CNEFileIO_fileWriteEx
CNEFileIO_fixLongPath
CNEFileIO_freeExpendFilename
CNEFileIO_getPathFromFileSpecW
CNEFileIO_getWorkingDir
CNEFileIO_getWorkingDirW
CNEHashMapIterator_begin
CNEHashMapIterator_next
CNEHashMap_setPVoidKeyCopyBehaviour
CNEHashMap_setPVoidKeyHashBehaviour
CNEHashMap_setPVoidValueFreeBehaviour
CNEHeap_CreateEmptyFunc
CNEHeap_CreateFunc
CNEHeap_Empty
CNEHeap_FlushMemorySurplus
CNEHeap_Free
CNEHeap_HeadPeek
CNEHeap_Pop
CNEHeap_Push
CNELAList_allocateFromList
CNELAList_create
CNELAList_free
CNELAList_freeToList
CNEListAddBack
CNEListAddFront
CNEListCreate_func
CNEListFree
CNEListGetBack
CNEListGetFront
CNEListInit_func
CNEListIsEmpty
CNEListIterator_equal
CNEListIterator_get
CNEListIterator_getPrev
CNEListIterator_getPrevReference
CNEListIterator_getReference
CNEListIterator_next
CNEListIterator_notEqual
CNEListIterator_prev
CNEListMap
CNEListPeekBack
CNEListPeekFront
CNEList_at
CNEList_begin
CNEList_clear
CNEList_clearWithDestructor
CNEList_destroy
CNEList_destroyWithDestructor
CNEList_end
CNEList_erase
CNEList_filter
CNEList_filterWithContext
CNEList_find
CNEList_findWithContext
CNEList_forEach
CNEList_forEachWithContext
CNEList_insert
CNEList_isEmpty
CNEList_peekBack
CNEList_peekFront
CNEList_popBack
CNEList_popFront
CNEList_pushBack
CNEList_pushFront
CNEList_size
CNEList_sort
CNEMem_cleanNClear
CNEMem_cleanNClearNDestroyPointer
CNEMem_set
CNENetwork_Checksum16
CNENetwork_CreateEthernetHeader
CNENetwork_CreateIcmpHeader
CNENetwork_CreateIpHeader
CNENetwork_CreateUdpHeader
CNENetwork_DisplayEthernetHeader
CNENetwork_DisplayIcmpHeader
CNENetwork_DisplayIpHeader
CNENetwork_DisplayUdpHeader
CNENetwork_IsIpValidA
CNENetwork_IsIpValidW
CNENetwork_IsPortValidA
CNENetwork_IsPortValidW
CNENetwork_addrToWPIDFunc
CNENetwork_addrToWPIDWFunc
CNENetwork_ipToAddr
CNENetwork_ipToAddrW
CNENetwork_stripMACSpacers
CNENetwork_wpidToAddr
CNEPqs_CreateEmptyFunc
CNEPqs_CreateFunc
CNEPqs_Empty
CNEPqs_FlushMemorySurplus
CNEPqs_Free
CNEPqs_HeadPeek
CNEPqs_Pop
CNEPqs_Push
CNERBTree_createTreeFunc
CNERBTree_delete
CNERBTree_deleteNode
CNERBTree_destroyTree
CNERBTree_executeNodeEx
CNERBTree_getFirst
CNERBTree_getLast
CNERBTree_getNext
CNERBTree_getPrev
CNERBTree_insertEx
CNERBTree_retrieve
CNERBTree_retrieveNode
CNESocket_accept
CNESocket_addressToIPString
CNESocket_bind
CNESocket_cleanup
CNESocket_close
CNESocket_connect
CNESocket_create
CNESocket_disable
CNESocket_fastAccept
CNESocket_fastConnect
CNESocket_getLocal
CNESocket_getNative
CNESocket_getOSError
CNESocket_getRemote
CNESocket_getSocketOption
CNESocket_getSocketOption_bCast
CNESocket_getSocketOption_exclusive
CNESocket_getSocketOption_keepAlive
CNESocket_getSocketOption_linger
CNESocket_getSocketOption_noDelay
CNESocket_getSocketOption_noLinger
CNESocket_getSocketOption_recvBuff
CNESocket_getSocketOption_reuseAddr
CNESocket_getSocketOption_sendBuff
CNESocket_getSocketOption_ttl
CNESocket_getString
CNESocket_gethostname
CNESocket_ipStringToAddress
CNESocket_isSocketReady
CNESocket_isValidIP
CNESocket_listen
CNESocket_lookupIP
CNESocket_lookupName
CNESocket_peek
CNESocket_putString
CNESocket_recv
CNESocket_recvExact
CNESocket_recvFrom
CNESocket_select
CNESocket_selectEx
CNESocket_send
CNESocket_sendExpect
CNESocket_sendTo
CNESocket_setBlockingMode
CNESocket_setLineEnding
CNESocket_setSocketOption
CNESocket_setSocketOption_bCast
CNESocket_setSocketOption_exclusive
CNESocket_setSocketOption_keepAlive
CNESocket_setSocketOption_linger
CNESocket_setSocketOption_noDelay
CNESocket_setSocketOption_noLinger
CNESocket_setSocketOption_recvBuff
CNESocket_setSocketOption_reuseAddr
CNESocket_setSocketOption_sendBuff
CNESocket_setSocketOption_ttl
CNESocket_setThrottle
CNESocket_shutdown
CNESocket_startup
CNEStaticArray_clear
CNEStaticArray_createFunc
CNEStaticArray_delete
CNEStaticArray_forEach
CNEStaticArray_forEachWithArgument
CNEStaticArray_get
CNEStaticArray_getReference
CNEStaticArray_push
CNEStaticArray_remove
CNEStaticArray_removeAt
CNEStaticArray_removeIf
CNEStaticArray_removeIfWithArgument
CNEStaticArray_set
CNEStaticArray_size
CNEString_VAFree
CNEString_append
CNEString_appendA
CNEString_appendFunc
CNEString_appendFuncEx
CNEString_appendW
CNEString_atoi
CNEString_axtoi
CNEString_buildFormattedString
CNEString_buildFormattedStringA
CNEString_buildFormattedStringW
CNEString_compare
CNEString_compareA
CNEString_compareCSStringFunc
CNEString_compareFunc
CNEString_compareIgnoreCase
CNEString_compareIgnoreCaseA
CNEString_compareIgnoreCaseW
CNEString_compareW
CNEString_concat
CNEString_copy
CNEString_copySafeAFunc
CNEString_copySafeWFunc
CNEString_createA
CNEString_createFunc
CNEString_createW
CNEString_endsWith
CNEString_endsWithA
CNEString_endsWithW
CNEString_findLastCharacterIndexWith
CNEString_findStringInBufferFunc
CNEString_free
CNEString_getStringBufferA
CNEString_getStringBufferW
CNEString_getStringType
CNEString_indexOfStringA
CNEString_indexOfStringFunc
CNEString_indexOfStringW
CNEString_isalnum
CNEString_isdigit
CNEString_isgraph
CNEString_isspace
CNEString_iswalnum
CNEString_iswdigit
CNEString_iswgraph
CNEString_iswspace
CNEString_iswxdigit
CNEString_isxdigit
CNEString_lastIndexOfStringA
CNEString_lastIndexOfStringW
CNEString_length
CNEString_lengthSafeA
CNEString_lengthSafeW
CNEString_mbstowcs
CNEString_memchr
CNEString_radix10itoa
CNEString_remove
CNEString_replaceAll
CNEString_replaceAllA
CNEString_replaceAllFunc
CNEString_replaceAllW
CNEString_snprintf
CNEString_snwprintf
CNEString_split
CNEString_splitA
CNEString_splitFunc
CNEString_splitW
CNEString_sprintf
CNEString_startsWith
CNEString_startsWithA
CNEString_startsWithFunc
CNEString_startsWithW
CNEString_strcat
CNEString_strchr
CNEString_strcmp
CNEString_strcpy
CNEString_strdup
CNEString_stricmp
CNEString_strlen
CNEString_strlwr
CNEString_strncat
CNEString_strncmp
CNEString_strncpy
CNEString_strnicmp
CNEString_strpbrk
CNEString_strrchr
CNEString_strstr
CNEString_strtok3
CNEString_strtol
CNEString_strtoul
CNEString_strupr
CNEString_substring
CNEString_swprintf
CNEString_toLower
CNEString_toLowerUpperCaseFunc
CNEString_toStringA
CNEString_toStringFunc
CNEString_toStringW
CNEString_toUpper
CNEString_trim
CNEString_vsnprintf
CNEString_vsnwprintf
CNEString_vsprintf
CNEString_vswprintf
CNEString_wcscat
CNEString_wcschr
CNEString_wcscmp
CNEString_wcscpy
CNEString_wcsdup
CNEString_wcsicmp
CNEString_wcslen
CNEString_wcslwr
CNEString_wcsncat
CNEString_wcsncmp
CNEString_wcsncpy
CNEString_wcsnicmp
CNEString_wcspbrk
CNEString_wcsrchr
CNEString_wcsstr
CNEString_wcstok3
CNEString_wcstol
CNEString_wcstombs
CNEString_wcstoul
CNEString_wcstoull
CNEString_wcsupr
CNEString_wideCharacterStringToSingleByteString
CNEString_wmemchr
CNEString_wxtoi
CNEString_wxtonu64
CNESystemWin_getMicroSecondsSinceEpoch
CNESystemWin_sleep
CNEThread_TlsAlloc
CNEThread_TlsFree
CNEThread_TlsGetValue
CNEThread_TlsSetValue
CNEThread_cvBroadcast
CNEThread_cvCreate
CNEThread_cvDestroy
CNEThread_cvSignal
CNEThread_cvTimedWait
CNEThread_cvWait
CNEThread_eventCreate
CNEThread_eventDestroy
CNEThread_eventSet
CNEThread_eventUnSet
CNEThread_eventWait
CNEThread_getCurrentThread
CNEThread_inverseSemaphoreCreate
CNEThread_inverseSemaphoreGetHolderCount
CNEThread_inverseSemaphoreHold
CNEThread_inverseSemaphoreRelease
CNEThread_isCurrentThread
CNEThread_mutexCreateFunc
CNEThread_mutexDestroy
CNEThread_mutexHold
CNEThread_mutexHoldNoBlock
CNEThread_mutexRelease
CNEThread_priorityTable
CNEThread_rwLockCreate
CNEThread_rwLockDestroy
CNEThread_rwLockLock
CNEThread_rwLockUnlock
CNEThread_semaphoreCreate
CNEThread_semaphoreDestroy
CNEThread_semaphorePost
CNEThread_semaphoreWait
CNEThread_semaphoreWaitNoBlock
CNEThread_threadCancel
CNEThread_threadClose
CNEThread_threadCreate
CNEThread_threadCreateWithPriority
CNEThread_threadExit
CNEThread_threadJoin
CNEThread_threadMicroSleep
CNEThread_threadSetPriority
CNEThread_threadSleep
CNEVector_At
CNEVector_Capacity
CNEVector_Clear
CNEVector_CreateEmptyFunc
CNEVector_CreateFunc
CNEVector_Erase
CNEVector_EraseFast
CNEVector_FlushMemorySurplus
CNEVector_Free
CNEVector_Get
CNEVector_GetFast
CNEVector_PopBack
CNEVector_PushBack
CNEVector_Resize
CNEVector_Size
CNEVector_SizeType
CNEVector_Swap
CNEVirtualArray_do
CNEVirtualArray_doWithParam
CNEVirtualArray_findFirstElementWith
CNEVirtualArray_findLastElementWith
CNEVirtualArray_findNextElementWith
CNEVirtualArray_freeAllElements
CNEVirtualArray_freeArrayPointersAndElements
CNEVirtualArray_freeVA
CNEVirtualArray_freeVAAndElements
CNEVirtualArray_getElementAt
CNEVirtualArray_getLastElement
CNEVirtualArray_getSize
CNEVirtualArray_increasePreAllocateArraySize
CNEVirtualArray_insertAtIndex
CNEVirtualArray_insertSorted
CNEVirtualArray_pop
CNEVirtualArray_positionOfFirstElementFoundWith
CNEVirtualArray_positionOfLastElementFoundWith
CNEVirtualArray_positionOfNextElementFoundWith
CNEVirtualArray_push
CNEVirtualArray_removeAllElementsFoundWith
CNEVirtualArray_removeAtIndex
CNEVirtualArray_removeFirstElementFoundWith
CNEVirtualArray_search
CNEVirtualArray_setElementAt
CNEVirtualArray_sort
CNEVirtualArray_swapElements
CNE_allocateCleanMemoryFunc
CNE_compareMemoryFunc
CNE_poisonAllocatedMemoryFunc
CNE_poisonFreeMemoryFunc
CNE_reallocateCleanMemoryFunc
CNE_reallocateMemoryFunc
SafeVirtualArray_GetArrayFromBlob
SafeVirtualArray_GetBlobFromArray
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/coli-0.dll.dll windows:5 windows x86 arch:x86
3bdaf0330fb6625e9822b4db8158a8ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
exma-1
disconnectRendezvous
closeRendezvous
sendSockets
readParamsFromEM
writeParamsToEM
recvSocket
connectRendezvous
getDefaultEMFile
bindRendezvous
closeEM
openEMForWriting
tibe-2
TbWinsockCleanup
TbWinsockStartup
trch-1
Parameter_U16_getValue
Paramgroup_getNumParamchoices
Parameter_matchType
Config_getID
Config_getInputParams
Config_getNamespaceUri
Config_getSchemaVersion
Config_getConstants
Config_getOutputParams
Parameter_U16_setValue
Parameter_String_create
Parameter_Boolean_create
Parameter_hasValue
Parameter_String_getValue
Parameter_markInvalid
Parameter_Boolean_getValue
Params_findParamchoice
Config_create
Params_create
Config_setInputParams
Parameter_LocalFile_create
Params_parseCommandLine
Config_delete
Params_isValid
Config_printUsage
Params_printInvalid
Parameter_LocalFile_getValue
Parameter_hasValidValue
Paramgroup_getParamchoice
Socket_type
Scalar_format
Parameter_matchFormat
Parameter_Socket_getValue
Parameter_Socket_setValue
Parameter_Socket_List_getValue
Parameter_Socket_List_setValue
Params_removeParameter
Params_getNumParameters
Params_getParameter
Params_getNumParamchoices
Params_getParamchoice
Paramchoice_hasValidValue
Paramchoice_getValue
Paramchoice_getNumParamgroups
Paramchoice_getParamgroup
Paramgroup_matchName
Config_marshal
Config_unmarshal
Params_findParameter
Parameter_U16_create
Params_addParameter
Parameter_delete
Paramgroup_getNumParameters
Paramgroup_getParameter
tucl-1
TcLog
TcLogClose
TcLogOpen
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
malloc
strncpy
strcat
exit
strrchr
strlen
memcpy
tolower
free
calloc
Exports
Exports
coli_create
coli_delete
coli_setCleanup
coli_setID
coli_setProcess
coli_setValidate
mainWrapper
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/concrt140.dll.dll windows:6 windows x86 arch:x86
9c31cf018a51d705b4fd0e596d3ac71d
Code Sign
33:00:00:00:9c:ee:fe:14:55:a9:5d:35:50:00:00:00:00:00:9cCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d3:10:9a:9f:19:7e:cb:87:25:88:9e:e3:1c:95:d2:16:a8:98:52:33:43:e9:f1:31:39:6e:e8:f7:00:b8:83:07Signer
Actual PE Digestd3:10:9a:9f:19:7e:cb:87:25:88:9e:e3:1c:95:d2:16:a8:98:52:33:43:e9:f1:31:39:6e:e8:f7:00:b8:83:07Digest Algorithmsha256PE Digest Matchestruebc:15:75:e3:aa:08:3f:e3:72:83:a5:98:32:78:b2:a6:d3:f5:fb:4cSigner
Actual PE Digestbc:15:75:e3:aa:08:3f:e3:72:83:a5:98:32:78:b2:a6:d3:f5:fb:4cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
concrt140.i386.pdb
Imports
msvcp140
__crtFreeLibraryWhenCallbackReturns
?_Xbad_alloc@std@@YAXXZ
__crtCloseThreadpoolWait
__crtSetThreadpoolWait
__crtCreateThreadpoolWait
__crtCloseThreadpoolTimer
__crtWaitForThreadpoolTimerCallbacks
__crtCreateThreadpoolTimer
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
__crtSetThreadpoolTimer
__crtCreateSemaphoreExW
__crtGetCurrentProcessorNumber
__crtFlushProcessWriteBuffers
__crtInitializeCriticalSectionEx
__crtCreateEventExW
__crtGetTickCount64
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Cnd_wait
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Throw_C_error@std@@YAXH@Z
_Cnd_init_in_situ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Xbad_function_call@std@@YAXXZ
vcruntime140
__uncaught_exception
__std_type_info_destroy_list
memset
memcpy
__RTDynamicCast
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
_except_handler4_common
_CxxThrowException
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
terminate
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_register_onexit_function
_execute_onexit_table
_crt_atexit
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
wcsncpy_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
__stdio_common_vfwprintf
fflush
__acrt_iob_func
kernel32
QueryDepthSList
DeleteTimerQueueTimer
TlsGetValue
GetModuleHandleW
GetProcAddress
SwitchToThread
CreateThread
GetThreadPriority
TlsAlloc
GetLogicalProcessorInformation
ChangeTimerQueueTimer
Sleep
SetThreadPriority
SignalObjectAndWait
GetProcessAffinityMask
UnregisterWait
RegisterWaitForSingleObject
TlsSetValue
CreateTimerQueueTimer
SetThreadAffinityMask
GetNumaHighestNodeNumber
CloseHandle
WaitForSingleObjectEx
SetEvent
GetLastError
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
CreateTimerQueue
InterlockedPopEntrySList
InterlockedPushEntrySList
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleA
GetModuleFileNameW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
EncodePointer
SetLastError
UnregisterWaitEx
ReleaseSemaphore
InitializeSListHead
GetVersionExW
VirtualAlloc
SetProcessAffinityMask
VirtualFree
VirtualProtect
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
InterlockedFlushSList
TlsFree
api-ms-win-crt-math-l1-1-0
_CIsqrt
_CIexp
Exports
Exports
??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QAA@IZZ
??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z
??0SchedulerPolicy@Concurrency@@QAE@XZ
??0_Cancellation_beacon@details@Concurrency@@QAE@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z
??0_Condition_variable@details@Concurrency@@QAE@XZ
??0_Context@details@Concurrency@@QAE@PAVContext@2@@Z
??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_ReaderWriterLock@details@Concurrency@@QAE@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_ReentrantLock@details@Concurrency@@QAE@XZ
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Runtime_object@details@Concurrency@@QAE@H@Z
??0_Runtime_object@details@Concurrency@@QAE@XZ
??0_Scheduler@details@Concurrency@@QAE@PAVScheduler@2@@Z
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
??0_StructuredTaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z
??0_TaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z
??0_TaskCollection@details@Concurrency@@QAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z
??0agent@Concurrency@@QAE@AAVScheduler@1@@Z
??0agent@Concurrency@@QAE@XZ
??0bad_target@Concurrency@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@XZ
??0context_self_unblock@Concurrency@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@XZ
??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z
??0context_unblock_unbalanced@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??0default_scheduler_exists@Concurrency@@QAE@PBD@Z
??0default_scheduler_exists@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0improper_lock@Concurrency@@QAE@PBD@Z
??0improper_lock@Concurrency@@QAE@XZ
??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_attach@Concurrency@@QAE@XZ
??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_detach@Concurrency@@QAE@XZ
??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z
??0improper_scheduler_reference@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0invalid_link_target@Concurrency@@QAE@XZ
??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z
??0invalid_multiple_scheduling@Concurrency@@QAE@XZ
??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ
??0message_not_found@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0missing_wait@Concurrency@@QAE@PBD@Z
??0missing_wait@Concurrency@@QAE@XZ
??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ
??0operation_timed_out@Concurrency@@QAE@PBD@Z
??0operation_timed_out@Concurrency@@QAE@XZ
??0reader_writer_lock@Concurrency@@QAE@XZ
??0scheduler_not_attached@Concurrency@@QAE@PBD@Z
??0scheduler_not_attached@Concurrency@@QAE@XZ
??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z
??0scheduler_worker_creation_error@Concurrency@@QAE@J@Z
??0scheduler_worker_creation_error@Concurrency@@QAE@PBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0unsupported_os@Concurrency@@QAE@PBD@Z
??0unsupported_os@Concurrency@@QAE@XZ
??1SchedulerPolicy@Concurrency@@QAE@XZ
??1_Cancellation_beacon@details@Concurrency@@QAE@XZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ
??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ
??1_Condition_variable@details@Concurrency@@QAE@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??1_StructuredTaskCollection@details@Concurrency@@QAE@XZ
??1_TaskCollection@details@Concurrency@@QAE@XZ
??1_Timer@details@Concurrency@@MAE@XZ
??1agent@Concurrency@@UAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??1reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@$$QAV012@@Z
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@$$QAV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z
??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z
??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ
??_F_Context@details@Concurrency@@QAEXXZ
??_F_Scheduler@details@Concurrency@@QAEXXZ
?AgentEventGuid@Concurrency@@3U_GUID@@B
?Alloc@Concurrency@@YAPAXI@Z
?Block@Context@Concurrency@@SAXXZ
?ChoreEventGuid@Concurrency@@3U_GUID@@B
?ConcRTEventGuid@Concurrency@@3U_GUID@@B
?ConcRT_ProviderGuid@Concurrency@@3U_GUID@@B
?ContextEventGuid@Concurrency@@3U_GUID@@B
?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@AAVlocation@2@@Z
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPAX@Z
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NABVlocation@2@@Z
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?LockEventGuid@Concurrency@@3U_GUID@@B
?Log2@details@Concurrency@@YAKI@Z
?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z
?NFS_Free@details@Concurrency@@YAXPAX@Z
?NFS_GetLineSize@details@Concurrency@@YAIXZ
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B
?PPLParallelForeachEventGuid@Concurrency@@3U_GUID@@B
?PPLParallelInvokeEventGuid@Concurrency@@3U_GUID@@B
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ResourceManagerEventGuid@Concurrency@@3U_GUID@@B
?ScheduleGroupEventGuid@Concurrency@@3U_GUID@@B
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0AAVlocation@2@@Z
?SchedulerEventGuid@Concurrency@@3U_GUID@@B
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z
?VirtualProcessorEventGuid@Concurrency@@3U_GUID@@B
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ
?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z
?_Byte_reverse_table@details@Concurrency@@3QBEB
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ
?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ
?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ
?_Current_node@location@Concurrency@@SA?AV12@XZ
?_Destroy@_AsyncTaskCollection@details@Concurrency@@EAEXXZ
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ
?_GetCombinableSize@details@Concurrency@@YAIXZ
?_GetConcRTTraceInfo@Concurrency@@YAPBU_CONCRT_TRACE_INFO@details@1@XZ
?_GetConcurrency@details@Concurrency@@YAIXZ
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
?_GetScheduler@_Scheduler@details@Concurrency@@QAEPAVScheduler@3@XZ
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXI@ZP6AX1PBXI@Z4@Z
?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IBEIXZ
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IAEIP6AXPAXI@Z@Z
?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIPAXP6AX0I@ZP6AX0PBXI@Z@Z
?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXPBXI@Z@Z
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IBE_NXZ
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IAEXXZ
?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z
?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPAX@Z
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IAE_NPAX@Z
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPBX@Z
?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIAAI@Z
?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIII@Z
?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIIIP6AXPAXI@ZP6AX0PBXI@Z2@Z
?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IBEIXZ
?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IAEXAAV123@@Z
?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IAEXAAV123@@Z
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IBEXXZ
?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IBEXI@Z
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ
?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?_Reference@_Scheduler@details@Concurrency@@QAEIXZ
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_Scheduler@details@Concurrency@@QAEIXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KAII@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?_Yield@_Context@details@Concurrency@@SAXXZ
?cancel@agent@Concurrency@@QAE_NXZ
?current@location@Concurrency@@SA?AV12@XZ
?done@agent@Concurrency@@IAE_NXZ
?from_numa_node@location@Concurrency@@SA?AV12@G@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ
?is_current_task_group_canceling@Concurrency@@YA_NXZ
?lock@critical_section@Concurrency@@QAEXXZ
?lock@reader_writer_lock@Concurrency@@QAEXXZ
?lock_read@reader_writer_lock@Concurrency@@QAEXXZ
?native_handle@critical_section@Concurrency@@QAEAAV12@XZ
?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ
?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ
?reset@event@Concurrency@@QAEXXZ
?set@event@Concurrency@@QAEXXZ
?set_task_execution_resources@Concurrency@@YAXGPAU_GROUP_AFFINITY@@@Z
?set_task_execution_resources@Concurrency@@YAXK@Z
?start@agent@Concurrency@@QAE_NXZ
?status@agent@Concurrency@@QAE?AW4agent_status@2@XZ
?status_port@agent@Concurrency@@QAEPAV?$ISource@W4agent_status@Concurrency@@@2@XZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ
?try_lock_for@critical_section@Concurrency@@QAE_NI@Z
?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ
?unlock@critical_section@Concurrency@@QAEXXZ
?unlock@reader_writer_lock@Concurrency@@QAEXXZ
?wait@Concurrency@@YAXI@Z
?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z
?wait@agent@Concurrency@@SA?AW4agent_status@2@PAV12@I@Z
?wait@event@Concurrency@@QAEII@Z
?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z
?wait_for_all@agent@Concurrency@@SAXIPAPAV12@PAW4agent_status@2@I@Z
?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z
?wait_for_one@agent@Concurrency@@SAXIPAPAV12@AAW4agent_status@2@AAII@Z
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/crli-0.dll.dll windows:5 windows x86 arch:x86
31a3d927d0773eea73787c46f29a287b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
cnli-1
CNE_allocateCleanMemoryFunc
byteSwapLong
CNEMem_cleanNClearNDestroyPointer
msvcrt
memcpy
malloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
free
Exports
Exports
CryptoLibV2_decryptRequestBuffer
CryptoLibV2_deletePrivateKey
CryptoLibV2_deletePublicKey
CryptoLibV2_encryptRequestBuffer
CryptoLibV2_freeBuffer
CryptoLibV2_getRandom
CryptoLibV2_installPrivateKey
CryptoLibV2_installPublicKey
CryptoLibV2_lookupPrivateKey
CryptoLibV2_lookupPublicKey
CryptoLibV2_md5Digest
CryptoLibV2_md5DigestFile
CryptoLibV2_md5DigestFileW
CryptoLibV2_pubDecrypt
CryptoLibV2_pubDecryptFor
CryptoLibV2_pubEncrypt
CryptoLibV2_pubEncryptFor
CryptoLibV2_queryPrivateKey
CryptoLibV2_queryPublicKey
CryptoLibV2_sign
CryptoLibV2_signFrom
CryptoLibV2_symDecrypt
CryptoLibV2_symEncrypt
CryptoLibV2_symGenKey
CryptoLibV2_verify
CryptoLibV2_verifyFrom
CryptoLib_freeBuffer
CryptoLib_md5Digest
CryptoLib_pubDecrypt
CryptoLib_pubEncrypt
CryptoLib_symDecrypt
CryptoLib_symEncrypt
CryptoLib_symGenKey
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/dmgd-1.dll.dll windows:5 windows x86 arch:x86
c09b9940e60b0e64cc45f00fe08e942f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
trfo-2
TfNrvCompress
TfRandomByte
TfFillRandom
TfNrvCalculateMaxExpansion
msvcrt
memcpy
malloc
free
calloc
realloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
Exports
Exports
DgCalloc
DgFree
DgMalloc
DgRealloc
pkgtype1
pkgtype2
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/dmgd-4.dll.dll windows:5 windows x86 arch:x86
4edfb3614d85009edda4e6c7c687371e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
trfo-2
TfNrvCompress
TfRandomByte
TfFillRandom
TfNrvCalculateMaxExpansion
msvcrt
memcpy
strlen
calloc
malloc
free
realloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
Exports
Exports
DgCalloc
DgFree
DgMalloc
DgRealloc
noargs
pkgtype1
pkgtype1export
pkgtype2
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 444KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/esco-0.dll.dll windows:5 windows x86 arch:x86
d58bd2f98f48b8865d93d6cc74357287
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
tibe-2
TbMalloc
TbPutBuff
trch-1
Parameter_UString_getValue
Params_findParameter
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
free
malloc
fwrite
fread
memcpy
sprintf
strncat
isprint
memset
_snprintf
strncpy
Exports
Exports
HexDumpShort
HexStr
ReadSizedBufferFromFile
ReadSizedBufferFromParameter
TbUniStrToSizedBuffer
WriteSizedBufferToFile
isAscii
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/etch-0.dll.dll windows:5 windows x86 arch:x86
ff0e7a59239c0b684a48a1485cf9d3b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetVersion
Sleep
LeaveCriticalSection
SetEvent
WaitForSingleObject
WaitForMultipleObjects
CloseHandle
DeleteCriticalSection
GetExitCodeThread
CreateThread
CreateEventW
InitializeCriticalSection
GetLastError
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
SystemTimeToFileTime
GetSystemTime
OutputDebugStringA
RtlUnwind
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
trch-1
Parameter_U8_getValue
Parameter_U32_getValue
Params_findParamchoice
Paramchoice_getValue
Parameter_S16_getValue
Parameter_Buffer_getValue
Parameter_String_getValue
Parameter_hasValue
Parameter_IPv4_getValue
Parameter_Port_getValue
Params_findParameter
tucl-1
TcLogBuffer
TcLog
ws2_32
gethostbyname
WSAStartup
socket
inet_addr
htons
listen
accept
closesocket
WSACleanup
recv
WSAGetLastError
send
gethostbyaddr
ntohs
getservbyport
WSASetLastError
getsockopt
setsockopt
select
connect
ioctlsocket
inet_ntoa
htonl
bind
getservbyname
msvcrt
strcmp
strlen
strtoul
toupper
tolower
memchr
sprintf
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
isleadbyte
_itoa
wctomb
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
memcmp
_snprintf
memmove
memcpy
realloc
free
memset
malloc
_iob
strchr
_errno
fprintf
abort
calloc
printf
Exports
Exports
cleanup
freeMarshaledParams
getID
marshalParams
monitorPlugin
processParams
validateParams
Sections
.text Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/etchCore-0.x64.dll.dll windows:5 windows x64 arch:x64
70d537cbdf563154ff9b86dd09c92c6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetLastError
SystemTimeToFileTime
GetSystemTime
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
ws2_32
ntohs
gethostbyaddr
getservbyport
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
WSASetLastError
getsockopt
WSAStartup
listen
bind
closesocket
setsockopt
socket
select
connect
ioctlsocket
send
recv
htons
getservbyname
msvcrt
_XcptFilter
_initterm
_amsg_exit
isleadbyte
_iob
_itoa
wctomb
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
__C_specific_handler
realloc
sprintf
memchr
tolower
toupper
strchr
strtoul
calloc
memcmp
_snprintf
strcmp
printf
strlen
free
malloc
abort
__iob_func
fprintf
memmove
memcpy
memset
_errno
Exports
Exports
DaveEntry
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/etchCore-0.x86.dll.dll windows:5 windows x86 arch:x86
55d05e5267c1de07a1891bc6ae8ec4ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetVersion
Sleep
LoadLibraryA
GetSystemDirectoryA
GetLastError
SystemTimeToFileTime
GetSystemTime
OutputDebugStringA
RtlUnwind
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
FreeLibrary
GetCurrentProcessId
GetSystemTimeAsFileTime
ws2_32
WSASetLastError
getservbyport
ntohs
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
getsockopt
WSAStartup
listen
bind
closesocket
setsockopt
socket
select
connect
ioctlsocket
send
recv
htons
msvcrt
_XcptFilter
_initterm
_adjust_fdiv
isleadbyte
_itoa
wctomb
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
realloc
sprintf
memchr
tolower
toupper
strtoul
calloc
memcmp
_snprintf
strcmp
printf
strlen
memcpy
free
malloc
abort
fprintf
memmove
memset
_iob
strchr
_errno
_amsg_exit
Exports
Exports
DaveEntry
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/eteb-2.dll.dll windows:5 windows x86 arch:x86
0f45a430d3941759da066ac5f11653dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
Sleep
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetSystemTime
GetCurrentProcessId
SystemTimeToFileTime
GetTickCount
InitializeCriticalSection
CreateEventW
CreateThread
GetLastError
GetExitCodeThread
DeleteCriticalSection
CloseHandle
WaitForMultipleObjects
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
trch-1
Parameter_Port_getValue
Params_findParameter
Parameter_Boolean_setValue
Params_findParamchoice
Paramchoice_hasValue
Paramchoice_getValue
Parameter_hasValue
Parameter_U32_getValue
Parameter_S16_getValue
Parameter_IPv4_getValue
Parameter_Boolean_getValue
tucl-1
TcLogBuffer
TcLog
ws2_32
inet_ntoa
setsockopt
htonl
connect
recvfrom
select
sendto
ntohs
send
recv
WSACleanup
closesocket
accept
listen
bind
htons
inet_addr
WSAGetLastError
socket
WSAStartup
msvcrt
strlen
srand
strcmp
time
_snprintf
strncpy
rand
gmtime
sscanf
tolower
toupper
islower
strncat
pow
memcmp
strtoul
memmove
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
memcpy
realloc
free
memset
malloc
_iob
fprintf
abort
printf
Exports
Exports
cleanup
freeMarshaledParams
getID
marshalParams
monitorPlugin
processParams
validateParams
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/etebCore-2.x64.dll.dll windows:5 windows x64 arch:x64
7a9ddb41deb509259b460a0ba0d22d62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetSystemTimeAsFileTime
GetSystemTime
SystemTimeToFileTime
GetCurrentProcessId
ws2_32
socket
htonl
setsockopt
inet_ntoa
ntohs
WSAStartup
WSACleanup
closesocket
send
sendto
recv
select
recvfrom
connect
htons
bind
msvcrt
fprintf
__iob_func
abort
memmove
printf
time
_snprintf
strncpy
realloc
rand
gmtime
sscanf
tolower
toupper
islower
strncat
strcmp
strtoul
pow
__C_specific_handler
_XcptFilter
_initterm
_amsg_exit
malloc
free
srand
strlen
memcmp
memset
memcpy
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/etebCore-2.x86.dll.dll windows:5 windows x86 arch:x86
a09d4c070f1ec232f8cadbab349d2ac7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
GetSystemTime
SystemTimeToFileTime
Sleep
GetCurrentProcessId
ws2_32
socket
htonl
setsockopt
inet_ntoa
ntohs
WSAStartup
WSACleanup
closesocket
send
sendto
recv
select
recvfrom
connect
htons
bind
msvcrt
_iob
memset
memcmp
strlen
srand
free
malloc
strcmp
memcpy
fprintf
abort
memmove
printf
time
_snprintf
strncpy
realloc
rand
gmtime
sscanf
tolower
islower
strncat
strtoul
pow
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
toupper
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/exma-1.dll.dll windows:5 windows x86 arch:x86
38335bfed05954b26590a75c4458da60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
ws2_32
__WSAFDIsSet
select
accept
closesocket
getsockname
listen
bind
htons
inet_addr
socket
send
connect
WSASocketA
recv
ntohs
WSADuplicateSocketA
msvcrt
_iob
strcmp
free
calloc
_fstat
strlen
memset
malloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_read
_write
_fileno
_close
_open
Exports
Exports
bindRendezvous
closeEM
closeRendezvous
connectRendezvous
disconnectRendezvous
getDefaultEMFile
openEMForWriting
readParamsFromEM
recvSocket
sendSockets
writeParamsToEM
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/exma.dll.dll windows:4 windows x86 arch:x86
a40a7e84d80ee58f1d9b367ea65775d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
accept
select
__WSAFDIsSet
WSADuplicateSocketA
recv
WSASocketA
connect
send
socket
inet_addr
htons
bind
listen
getsockname
closesocket
ntohs
msvcr71
_unlink
_close
_read
_fstat
_write
_except_handler3
_open
_onexit
__dllonexit
sprintf
getenv
free
calloc
__security_error_handler
_getpid
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
ExitProcess
Exports
Exports
bindRendezvous
closeRendezvous
connectRendezvous
disconnectRendezvous
getDefaultEMFile
openEMForWriting
readParamsFromEM
recvSocket
sendSockets
writeParamsToEM
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 338B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/iconv.dll.dll windows:5 windows x86 arch:x86
b1120ee66ca68cd85b2a07dc10563ac4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
FreeLibrary
GetACP
GetModuleHandleA
IsDBCSLeadByteEx
MultiByteToWideChar
GetLastError
WideCharToMultiByte
GetCPInfoExA
IsValidCodePage
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
msvcrt
strchr
free
_stricmp
atoi
_strnicmp
strcmp
strncmp
memcpy
malloc
memmove
getenv
calloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_errno
strlen
Exports
Exports
iconv
iconv_close
iconv_open
iconvctl
libiconv
libiconv_close
libiconv_open
libiconvctl
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/libcurl.dll.dll windows:5 windows x86 arch:x86
30d6e82d613a55c4e1fac27ebbaa1757
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
gethostbyname
inet_ntoa
htonl
getservbyname
gethostbyaddr
getservbyport
gethostname
WSACleanup
WSAStartup
accept
listen
ioctlsocket
__WSAFDIsSet
WSAGetLastError
select
send
sendto
recvfrom
inet_addr
WSASetLastError
recv
socket
connect
setsockopt
getpeername
getsockopt
htons
bind
ntohs
getsockname
closesocket
libeay32
ord654
ord66
ord52
ord2431
ord78
ord95
ord657
ord1015
ord2291
ord3212
ord2604
ord298
ord224
ord223
ord227
ord222
ord254
ord181
ord2442
ord188
ord1951
ord566
ord578
ord579
ord1216
ord2023
ord2075
ord1653
ord1654
ord1958
ord2596
ord958
ord625
ord556
ord248
ord979
ord18
ord1180
ord542
ord544
ord421
ord120
ord151
ord656
ord7
ord653
ord680
ord2454
ord391
ord641
ord1
ord466
ord2254
ord464
ord341
ord342
ord340
ord2437
ord2436
ord2435
ord784
ord809
ord808
ord281
ord280
ord467
ssleay32
ord96
ord58
ord78
ord86
ord87
ord90
ord45
ord21
ord141
ord15
ord6
ord243
ord12
ord172
ord113
ord116
ord110
ord130
ord127
ord43
ord60
ord157
ord61
ord242
ord77
ord108
ord5
ord48
ord126
ord49
ord8
ord76
ord75
ord24
ord222
ord30
ord31
ord17
ord235
ord183
ord74
zlib1
inflateInit_
inflate
inflateInit2_
inflateEnd
zlibVersion
msvcrt
getenv
memcmp
memchr
memmove
sprintf
fputc
gmtime
fflush
strerror
_sys_nerr
fseek
tolower
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
isleadbyte
_snprintf
_itoa
wctomb
__badioinfo
__pioinfo
_read
_fileno
_write
_isatty
strcat
strncpy
_errno
strstr
strcpy
fread
_stati64
_lseeki64
_fstati64
fwrite
realloc
malloc
_beginthreadex
isxdigit
isspace
isgraph
isprint
isdigit
isalnum
isalpha
islower
strtoul
free
calloc
fputs
qsort
_iob
fopen
fgets
fclose
time
strchr
sscanf
strtol
strrchr
strncmp
strcmp
memset
strlen
memcpy
_strdup
_close
_open
_stricmp
isupper
_strnicmp
kernel32
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
OutputDebugStringA
GetTickCount
GetStdHandle
GetFileType
ReadFile
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
Sleep
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ExpandEnvironmentStringsA
WaitForSingleObject
CloseHandle
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
SleepEx
GetSystemTimeAsFileTime
GetCurrentProcessId
Exports
Exports
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/libeay32.dll.dll windows:5 windows x86 arch:x86
ab3711ec11b2005ba9f89a2f4ae2937b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsock32
sendto
recvfrom
bind
listen
accept
ntohl
inet_ntoa
WSACancelBlockingCall
WSACleanup
WSAStartup
getsockopt
getservbyname
ntohs
htons
htonl
socket
setsockopt
connect
send
WSASetLastError
recv
WSAGetLastError
shutdown
gethostbyname
closesocket
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA
advapi32
ReportEventA
DeregisterEventSource
RegisterEventSourceA
user32
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
zlib1
zError
inflate
deflate
inflateEnd
deflateEnd
inflateInit_
deflateInit_
msvcrt
localtime
gmtime
strncpy
_lrotl
memcmp
_lrotr
memmove
_read
_write
isxdigit
isdigit
fprintf
strlen
fputs
fclose
ferror
fread
fwrite
_setmode
_fileno
fopen
strcat
fseek
ftell
feof
fflush
fgets
strcmp
atoi
perror
_ftime
qsort
_stat
_chmod
strerror
isalnum
isspace
strncmp
tolower
isupper
strrchr
sscanf
exit
strtol
signal
_getch
printf
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
memset
time
memchr
memcpy
malloc
realloc
free
abort
vfprintf
wcsstr
getenv
strtoul
sprintf
strcpy
_iob
strchr
_vsnprintf
_errno
strstr
kernel32
GetCurrentThreadId
GetLastError
GetFileType
GetStdHandle
GetCurrentThread
GetModuleHandleA
FindNextFileA
FindFirstFileA
FindClose
FreeLibrary
LoadLibraryA
ExitProcess
GetVersion
GetProcAddress
GetThreadTimes
SetLastError
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
FlushConsoleInputBuffer
GetVersionExA
CloseHandle
GlobalMemoryStatus
Exports
Exports
ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_cfbr_encrypt_block
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_asn1_meth
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_HEADER_free
ASN1_HEADER_new
ASN1_IA5STRING_asn1_meth
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_encode
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_sign
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_memdup
BUF_strdup
BUF_strlcat
BUF_strlcpy
BUF_strndup
CAST_cbc_encrypt
CAST_cfb64_encrypt
CAST_decrypt
CAST_ecb_encrypt
CAST_encrypt
CAST_ofb64_encrypt
CAST_set_key
CBIGNUM_it
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
COMP_CTX_free
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_rle
COMP_zlib
COMP_zlib_cleanup
CONF_dump_bio
CONF_dump_fp
CONF_free
CONF_get1_default_config_file
CONF_get_number
Sections
.text Size: 533KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/libiconv-2.dll.dll windows:4 windows x86 arch:x86
dd86f097485a761cdaf285b0f147c8fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
AddAtomA
FindAtomA
GetACP
GetAtomNameA
GetModuleFileNameA
IsDBCSLeadByteEx
MultiByteToWideChar
WideCharToMultiByte
msvcrt
_strdup
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_errno
abort
fflush
free
malloc
memcpy
memset
qsort
sprintf
strchr
strcmp
strcpy
strlen
strncmp
Exports
Exports
_libiconv_version
aliases2_lookup
aliases_lookup
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_relocate
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 815KB - Virtual size: 815KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 656B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 370B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/libxml2.dll.dll windows:5 windows x86 arch:x86
c17f3a8fe5a31151ab2da99abee9c23c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsock32
inet_ntoa
__WSAFDIsSet
getsockopt
WSASetLastError
getservbyport
ntohs
gethostbyaddr
getservbyname
htonl
inet_addr
WSAGetLastError
ioctlsocket
WSAStartup
getsockname
bind
listen
gethostbyname
htons
socket
connect
send
select
recv
closesocket
WSACleanup
kernel32
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetVersion
GetVersionExA
MultiByteToWideChar
TlsGetValue
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CreateMutexA
CloseHandle
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
GetCurrentThreadId
TlsFree
Sleep
TlsAlloc
InterlockedIncrement
TlsSetValue
OutputDebugStringA
msvcrt
fopen
free
sscanf
strcmp
toupper
memmove
vfprintf
_vsnprintf
fclose
malloc
strcat
strcpy
strchr
strncmp
calloc
strtoul
strtol
_errno
fwrite
_wfopen
_wstat
fread
ferror
fflush
printf
floor
fabs
labs
_isnan
_fpclass
log10
pow
fmod
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
isleadbyte
_itoa
wctomb
__badioinfo
__pioinfo
_read
_fileno
_lseeki64
_write
_isatty
fputc
_iob
strlen
_snprintf
strncpy
getenv
_stat
fprintf
memset
memcpy
realloc
_close
_open
_getcwd
Exports
Exports
UTF8ToHtml
UTF8Toisolat1
__docbDefaultSAXHandler
__htmlDefaultSAXHandler
__oldXMLWDcompatibility
__xmlBufferAllocScheme
__xmlDefaultBufferSize
__xmlDefaultSAXHandler
__xmlDefaultSAXLocator
__xmlDeregisterNodeDefaultValue
__xmlDoValidityCheckingDefaultValue
__xmlErrEncoding
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlIndentTreeOutput
__xmlKeepBlanksDefaultValue
__xmlLastError
__xmlLineNumbersDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlOutputBufferCreateFilenameValue
__xmlParserDebugEntities
__xmlParserInputBufferCreateFilenameValue
__xmlParserVersion
__xmlPedanticParserDefaultValue
__xmlRaiseError
__xmlRegisterNodeDefaultValue
__xmlSaveNoEmptyTags
__xmlSimpleError
__xmlStructuredError
__xmlStructuredErrorContext
__xmlSubstituteEntitiesDefaultValue
__xmlTreeIndentString
attribute
attributeDecl
cdataBlock
characters
checkNamespace
comment
docbCreateFileParserCtxt
docbCreatePushParserCtxt
docbDefaultSAXHandlerInit
docbEncodeEntities
docbFreeParserCtxt
docbParseChunk
docbParseDoc
docbParseDocument
docbParseFile
docbSAXParseDoc
docbSAXParseFile
elementDecl
emptyExp
endDocument
endElement
entityDecl
externalSubset
forbiddenExp
getColumnNumber
getEntity
getLineNumber
getNamespace
getParameterEntity
getPublicId
getSystemId
globalNamespace
hasExternalSubset
hasInternalSubset
htmlAttrAllowed
htmlAutoCloseTag
htmlCreateFileParserCtxt
htmlCreateMemoryParserCtxt
htmlCreatePushParserCtxt
htmlCtxtReadDoc
htmlCtxtReadFd
htmlCtxtReadFile
htmlCtxtReadIO
htmlCtxtReadMemory
htmlCtxtReset
htmlCtxtUseOptions
htmlDefaultSAXHandlerInit
htmlDocContentDumpFormatOutput
htmlDocContentDumpOutput
htmlDocDump
htmlDocDumpMemory
htmlDocDumpMemoryFormat
htmlElementAllowedHere
htmlElementStatusHere
htmlEncodeEntities
htmlEntityLookup
htmlEntityValueLookup
htmlFreeParserCtxt
htmlGetMetaEncoding
htmlHandleOmittedElem
htmlInitAutoClose
htmlIsAutoClosed
htmlIsBooleanAttr
htmlIsScriptAttribute
htmlNewDoc
htmlNewDocNoDtD
htmlNewParserCtxt
htmlNodeDump
htmlNodeDumpFile
htmlNodeDumpFileFormat
htmlNodeDumpFormatOutput
htmlNodeDumpOutput
htmlNodeStatus
htmlParseCharRef
htmlParseChunk
htmlParseDoc
htmlParseDocument
htmlParseElement
htmlParseEntityRef
htmlParseFile
htmlReadDoc
htmlReadFd
htmlReadFile
htmlReadIO
htmlReadMemory
htmlSAXParseDoc
htmlSAXParseFile
htmlSaveFile
htmlSaveFileEnc
htmlSaveFileFormat
htmlSetMetaEncoding
htmlTagLookup
ignorableWhitespace
initGenericErrorDefaultFunc
initdocbDefaultSAXHandler
inithtmlDefaultSAXHandler
initxmlDefaultSAXHandler
inputPop
inputPush
internalSubset
isStandalone
isolat1ToUTF8
namePop
namePush
namespaceDecl
nodePop
nodePush
notationDecl
processingInstruction
reference
resolveEntity
setDocumentLocator
setNamespace
startDocument
startElement
unparsedEntityDecl
valuePop
valuePush
xlinkGetDefaultDetect
xlinkGetDefaultHandler
xlinkIsLink
xlinkSetDefaultDetect
xlinkSetDefaultHandler
xmlACatalogAdd
xmlACatalogDump
xmlACatalogRemove
xmlACatalogResolve
xmlACatalogResolvePublic
xmlACatalogResolveSystem
xmlACatalogResolveURI
xmlAddAttributeDecl
xmlAddChild
xmlAddChildList
xmlAddDocEntity
xmlAddDtdEntity
xmlAddElementDecl
xmlAddEncodingAlias
xmlAddID
xmlAddNextSibling
xmlAddNotationDecl
xmlAddPrevSibling
xmlAddRef
xmlAddSibling
xmlAllocOutputBuffer
xmlAllocParserInputBuffer
xmlAttrSerializeTxtContent
xmlAutomataCompile
xmlAutomataGetInitState
xmlAutomataIsDeterminist
xmlAutomataNewAllTrans
xmlAutomataNewCountTrans
xmlAutomataNewCountTrans2
xmlAutomataNewCountedTrans
xmlAutomataNewCounter
xmlAutomataNewCounterTrans
xmlAutomataNewEpsilon
xmlAutomataNewNegTrans
xmlAutomataNewOnceTrans
xmlAutomataNewOnceTrans2
xmlAutomataNewState
xmlAutomataNewTransition
xmlAutomataNewTransition2
xmlAutomataSetFinalState
xmlBoolToText
xmlBufferAdd
xmlBufferAddHead
xmlBufferCCat
xmlBufferCat
xmlBufferContent
xmlBufferCreate
xmlBufferCreateSize
xmlBufferCreateStatic
xmlBufferDump
xmlBufferEmpty
xmlBufferFree
xmlBufferGrow
xmlBufferLength
xmlBufferResize
xmlBufferSetAllocationScheme
xmlBufferShrink
xmlBufferWriteCHAR
xmlBufferWriteChar
xmlBufferWriteQuotedString
xmlBuildQName
xmlBuildRelativeURI
xmlBuildURI
xmlByteConsumed
xmlC14NDocDumpMemory
xmlC14NDocSave
xmlC14NDocSaveTo
xmlC14NExecute
xmlCanonicPath
xmlCatalogAdd
xmlCatalogAddLocal
xmlCatalogCleanup
xmlCatalogConvert
xmlCatalogDump
xmlCatalogFreeLocal
xmlCatalogGetDefaults
xmlCatalogGetPublic
xmlCatalogGetSystem
xmlCatalogIsEmpty
xmlCatalogLocalResolve
xmlCatalogLocalResolveURI
xmlCatalogRemove
xmlCatalogResolve
xmlCatalogResolvePublic
xmlCatalogResolveSystem
xmlCatalogResolveURI
xmlCatalogSetDebug
xmlCatalogSetDefaultPrefer
xmlCatalogSetDefaults
xmlCharEncCloseFunc
xmlCharEncFirstLine
xmlCharEncInFunc
xmlCharEncOutFunc
xmlCharInRange
xmlCharStrdup
xmlCharStrndup
xmlCheckFilename
xmlCheckHTTPInput
xmlCheckLanguageID
xmlCheckUTF8
xmlCheckVersion
xmlChildElementCount
xmlCleanupCharEncodingHandlers
xmlCleanupEncodingAliases
xmlCleanupGlobals
xmlCleanupInputCallbacks
xmlCleanupMemory
xmlCleanupOutputCallbacks
xmlCleanupParser
xmlCleanupPredefinedEntities
xmlCleanupThreads
xmlClearNodeInfoSeq
xmlClearParserCtxt
xmlConvertSGMLCatalog
xmlCopyAttributeTable
xmlCopyChar
xmlCopyCharMultiByte
xmlCopyDoc
xmlCopyDocElementContent
xmlCopyDtd
xmlCopyElementContent
xmlCopyElementTable
xmlCopyEntitiesTable
xmlCopyEnumeration
xmlCopyError
xmlCopyNamespace
xmlCopyNamespaceList
xmlCopyNode
xmlCopyNodeList
xmlCopyNotationTable
xmlCopyProp
xmlCopyPropList
xmlCreateDocParserCtxt
xmlCreateEntitiesTable
xmlCreateEntityParserCtxt
xmlCreateEnumeration
xmlCreateFileParserCtxt
xmlCreateIOParserCtxt
xmlCreateIntSubset
xmlCreateMemoryParserCtxt
xmlCreatePushParserCtxt
xmlCreateURI
xmlCreateURLParserCtxt
xmlCtxtGetLastError
xmlCtxtReadDoc
xmlCtxtReadFd
xmlCtxtReadFile
xmlCtxtReadIO
xmlCtxtReadMemory
xmlCtxtReset
xmlCtxtResetLastError
xmlCtxtResetPush
xmlCtxtUseOptions
xmlCurrentChar
xmlDOMWrapAdoptNode
xmlDOMWrapCloneNode
xmlDOMWrapFreeCtxt
xmlDOMWrapNewCtxt
xmlDOMWrapReconcileNamespaces
xmlDOMWrapRemoveNode
xmlDebugCheckDocument
xmlDebugDumpAttr
xmlDebugDumpAttrList
xmlDebugDumpDTD
xmlDebugDumpDocument
xmlDebugDumpDocumentHead
xmlDebugDumpEntities
xmlDebugDumpNode
xmlDebugDumpNodeList
xmlDebugDumpOneNode
xmlDebugDumpString
xmlDecodeEntities
xmlDefaultSAXHandlerInit
xmlDelEncodingAlias
xmlDeregisterNodeDefault
xmlDetectCharEncoding
xmlDictCleanup
xmlDictCreate
xmlDictCreateSub
xmlDictExists
xmlDictFree
xmlDictLookup
xmlDictOwns
xmlDictQLookup
xmlDictReference
xmlDictSize
xmlDocCopyNode
xmlDocCopyNodeList
xmlDocDump
xmlDocDumpFormatMemory
xmlDocDumpFormatMemoryEnc
xmlDocDumpMemory
xmlDocDumpMemoryEnc
xmlDocFormatDump
xmlDocGetRootElement
xmlDocSetRootElement
xmlDumpAttributeDecl
xmlDumpAttributeTable
xmlDumpElementDecl
xmlDumpElementTable
xmlDumpEntitiesTable
xmlDumpEntityDecl
xmlDumpNotationDecl
xmlDumpNotationTable
xmlElemDump
xmlEncodeEntities
xmlEncodeEntitiesReentrant
xmlEncodeSpecialChars
xmlErrMemory
xmlExpCtxtNbCons
xmlExpCtxtNbNodes
xmlExpDump
xmlExpExpDerive
xmlExpFree
xmlExpFreeCtxt
xmlExpGetLanguage
xmlExpGetStart
xmlExpIsNillable
xmlExpMaxToken
xmlExpNewAtom
xmlExpNewCtxt
xmlExpNewOr
xmlExpNewRange
xmlExpNewSeq
xmlExpParse
xmlExpRef
xmlExpStringDerive
xmlExpSubsume
xmlFileClose
xmlFileMatch
xmlFileOpen
xmlFileRead
xmlFindCharEncodingHandler
xmlFirstElementChild
xmlFree
xmlFreeAttributeTable
xmlFreeAutomata
xmlFreeCatalog
xmlFreeDoc
xmlFreeDocElementContent
xmlFreeDtd
xmlFreeElementContent
xmlFreeElementTable
xmlFreeEntitiesTable
xmlFreeEnumeration
xmlFreeIDTable
xmlFreeInputStream
xmlFreeMutex
xmlFreeNode
xmlFreeNodeList
xmlFreeNotationTable
xmlFreeNs
xmlFreeNsList
xmlFreeParserCtxt
xmlFreeParserInputBuffer
xmlFreePattern
xmlFreePatternList
xmlFreeProp
xmlFreePropList
xmlFreeRMutex
xmlFreeRefTable
xmlFreeStreamCtxt
xmlFreeTextReader
xmlFreeTextWriter
xmlFreeURI
xmlFreeValidCtxt
xmlGcMemGet
xmlGcMemSetup
xmlGetBufferAllocationScheme
xmlGetCharEncodingHandler
xmlGetCharEncodingName
xmlGetCompressMode
xmlGetDocCompressMode
xmlGetDocEntity
xmlGetDtdAttrDesc
xmlGetDtdElementDesc
xmlGetDtdEntity
xmlGetDtdNotationDesc
xmlGetDtdQAttrDesc
xmlGetDtdQElementDesc
xmlGetEncodingAlias
xmlGetExternalEntityLoader
xmlGetFeature
xmlGetFeaturesList
xmlGetGlobalState
xmlGetID
xmlGetIntSubset
xmlGetLastChild
xmlGetLastError
xmlGetLineNo
xmlGetNoNsProp
xmlGetNodePath
xmlGetNsList
xmlGetNsProp
xmlGetParameterEntity
xmlGetPredefinedEntity
xmlGetProp
xmlGetRefs
xmlGetThreadId
xmlGetUTF8Char
xmlHandleEntity
xmlHasFeature
xmlHasNsProp
xmlHasProp
xmlHashAddEntry
xmlHashAddEntry2
xmlHashAddEntry3
xmlHashCopy
xmlHashCreate
xmlHashCreateDict
xmlHashFree
xmlHashLookup
xmlHashLookup2
xmlHashLookup3
xmlHashQLookup
xmlHashQLookup2
xmlHashQLookup3
xmlHashRemoveEntry
xmlHashRemoveEntry2
xmlHashRemoveEntry3
xmlHashScan
xmlHashScan3
xmlHashScanFull
xmlHashScanFull3
xmlHashSize
xmlHashUpdateEntry
xmlHashUpdateEntry2
xmlHashUpdateEntry3
xmlIOFTPClose
xmlIOFTPMatch
xmlIOFTPOpen
xmlIOFTPRead
xmlIOHTTPClose
xmlIOHTTPMatch
xmlIOHTTPOpen
xmlIOHTTPOpenW
xmlIOHTTPRead
xmlIOParseDTD
xmlInitCharEncodingHandlers
xmlInitGlobals
xmlInitMemory
xmlInitNodeInfoSeq
xmlInitParser
xmlInitParserCtxt
Sections
.text Size: 585KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140chs.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:9d:42:68:ee:31:1c:d7:56:bd:00:00:00:00:00:9dCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
cf:96:d0:11:ba:0a:17:33:f6:49:4c:09:db:27:9d:47:89:91:fe:8a:00:5d:b0:19:78:59:a0:4e:2b:ac:7a:a9Signer
Actual PE Digestcf:96:d0:11:ba:0a:17:33:f6:49:4c:09:db:27:9d:47:89:91:fe:8a:00:5d:b0:19:78:59:a0:4e:2b:ac:7a:a9Digest Algorithmsha256PE Digest Matchestruec0:00:e4:4e:6d:ba:ce:81:bb:50:5b:6c:7c:ae:84:4c:6d:b3:5d:e1Signer
Actual PE Digestc0:00:e4:4e:6d:ba:ce:81:bb:50:5b:6c:7c:ae:84:4c:6d:b3:5d:e1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140CHS.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140cht.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:98:04:58:cb:7f:23:09:b0:9e:00:00:00:00:00:98Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
81:c9:bc:a2:43:11:ac:9a:50:0f:1d:b1:0e:de:b2:f8:7a:84:3e:56:50:00:eb:27:f2:6e:68:ce:9a:1c:ff:f7Signer
Actual PE Digest81:c9:bc:a2:43:11:ac:9a:50:0f:1d:b1:0e:de:b2:f8:7a:84:3e:56:50:00:eb:27:f2:6e:68:ce:9a:1c:ff:f7Digest Algorithmsha256PE Digest Matchestrue12:11:a4:31:b7:d0:25:91:59:f5:49:00:5d:0f:28:af:d2:03:b5:71Signer
Actual PE Digest12:11:a4:31:b7:d0:25:91:59:f5:49:00:5d:0f:28:af:d2:03:b5:71Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140CHT.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140deu.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:98:04:58:cb:7f:23:09:b0:9e:00:00:00:00:00:98Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
9c:26:c3:95:18:99:42:b7:33:fe:fc:81:63:d3:ae:54:bd:34:f0:bd:40:33:d0:75:d1:01:33:a7:27:2b:ea:cdSigner
Actual PE Digest9c:26:c3:95:18:99:42:b7:33:fe:fc:81:63:d3:ae:54:bd:34:f0:bd:40:33:d0:75:d1:01:33:a7:27:2b:ea:cdDigest Algorithmsha256PE Digest Matchestruee0:c8:f8:ed:09:39:ec:99:23:50:1a:e7:eb:00:c1:2c:b2:2e:b4:e0Signer
Actual PE Digeste0:c8:f8:ed:09:39:ec:99:23:50:1a:e7:eb:00:c1:2c:b2:2e:b4:e0Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140DEU.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140enu.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:98:04:58:cb:7f:23:09:b0:9e:00:00:00:00:00:98Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
af:51:a9:f8:37:8c:20:d4:a4:94:f8:57:40:59:30:8b:b6:a6:46:28:98:fb:b9:91:1f:9e:33:6c:54:71:c5:b3Signer
Actual PE Digestaf:51:a9:f8:37:8c:20:d4:a4:94:f8:57:40:59:30:8b:b6:a6:46:28:98:fb:b9:91:1f:9e:33:6c:54:71:c5:b3Digest Algorithmsha256PE Digest Matchestrueda:35:2d:05:e1:a4:8f:f9:a3:70:37:93:5d:a0:36:28:d9:5f:ab:43Signer
Actual PE Digestda:35:2d:05:e1:a4:8f:f9:a3:70:37:93:5d:a0:36:28:d9:5f:ab:43Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140ENU.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140esn.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:9a:9a:9b:16:c2:83:da:d5:c2:00:00:00:00:00:9aCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c8:c9:b1:fb:ae:1b:2f:d1:6e:93:cd:0a:74:b9:6e:13:f8:1a:66:42:0e:e0:da:6c:d4:63:62:33:87:cb:5f:6eSigner
Actual PE Digestc8:c9:b1:fb:ae:1b:2f:d1:6e:93:cd:0a:74:b9:6e:13:f8:1a:66:42:0e:e0:da:6c:d4:63:62:33:87:cb:5f:6eDigest Algorithmsha256PE Digest Matchestrue81:aa:b6:f3:af:fb:b1:c3:b7:a4:00:14:53:34:13:b0:dd:32:9b:b4Signer
Actual PE Digest81:aa:b6:f3:af:fb:b1:c3:b7:a4:00:14:53:34:13:b0:dd:32:9b:b4Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140ESN.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140fra.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:98:04:58:cb:7f:23:09:b0:9e:00:00:00:00:00:98Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3c:71:e9:ec:aa:1a:2b:12:00:74:49:bc:ef:a6:46:46:f9:fe:89:60:09:1b:ab:e2:a0:df:db:3c:e6:ca:a9:98Signer
Actual PE Digest3c:71:e9:ec:aa:1a:2b:12:00:74:49:bc:ef:a6:46:46:f9:fe:89:60:09:1b:ab:e2:a0:df:db:3c:e6:ca:a9:98Digest Algorithmsha256PE Digest Matchestrue8a:0d:f4:18:8f:da:2f:58:be:c8:b5:e7:00:eb:27:77:7c:18:bb:49Signer
Actual PE Digest8a:0d:f4:18:8f:da:2f:58:be:c8:b5:e7:00:eb:27:77:7c:18:bb:49Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140FRA.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140ita.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:9a:9a:9b:16:c2:83:da:d5:c2:00:00:00:00:00:9aCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
18:18:22:0c:bb:db:a9:84:b4:bd:4e:93:c9:36:9e:04:29:52:33:b4:e0:b8:56:99:6b:92:bc:3d:1c:68:bc:f7Signer
Actual PE Digest18:18:22:0c:bb:db:a9:84:b4:bd:4e:93:c9:36:9e:04:29:52:33:b4:e0:b8:56:99:6b:92:bc:3d:1c:68:bc:f7Digest Algorithmsha256PE Digest Matchestruefc:5e:3f:4d:e7:b1:21:af:9b:0f:a4:2b:28:72:97:75:1c:90:1c:ccSigner
Actual PE Digestfc:5e:3f:4d:e7:b1:21:af:9b:0f:a4:2b:28:72:97:75:1c:90:1c:ccDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140ITA.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140jpn.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:9a:9a:9b:16:c2:83:da:d5:c2:00:00:00:00:00:9aCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B1B7-F67F-FEC2,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
25:90:e7:d8:6d:fc:5b:95:7c:79:2d:8b:48:c1:83:bf:c3:84:da:5c:ab:63:6b:ac:cd:98:52:70:97:59:cb:03Signer
Actual PE Digest25:90:e7:d8:6d:fc:5b:95:7c:79:2d:8b:48:c1:83:bf:c3:84:da:5c:ab:63:6b:ac:cd:98:52:70:97:59:cb:03Digest Algorithmsha256PE Digest Matchestrueba:92:0e:ad:61:07:43:78:37:11:26:b8:26:8d:29:34:87:53:c0:adSigner
Actual PE Digestba:92:0e:ad:61:07:43:78:37:11:26:b8:26:8d:29:34:87:53:c0:adDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140JPN.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140kor.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:9b:e0:74:37:cb:3d:4d:8d:2e:00:00:00:00:00:9bCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
34:bf:a5:f0:79:e3:b2:9e:0b:19:05:f3:9c:e1:7c:bc:5b:41:df:1e:41:cf:00:21:fe:ab:33:d7:0d:5a:bc:c9Signer
Actual PE Digest34:bf:a5:f0:79:e3:b2:9e:0b:19:05:f3:9c:e1:7c:bc:5b:41:df:1e:41:cf:00:21:fe:ab:33:d7:0d:5a:bc:c9Digest Algorithmsha256PE Digest Matchestruea2:14:45:21:0f:b1:20:cb:62:be:38:cc:69:11:32:08:47:3e:27:d3Signer
Actual PE Digesta2:14:45:21:0f:b1:20:cb:62:be:38:cc:69:11:32:08:47:3e:27:d3Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140KOR.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfc140rus.dll.dll windows:6 windows x86 arch:x86
Code Sign
33:00:00:00:9b:e0:74:37:cb:3d:4d:8d:2e:00:00:00:00:00:9bCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
11:04:b4:87:9e:b4:ce:95:10:67:08:da:39:ff:3b:3b:70:8e:52:a7:c9:5c:85:6a:f6:96:a9:1c:a6:cf:48:d5Signer
Actual PE Digest11:04:b4:87:9e:b4:ce:95:10:67:08:da:39:ff:3b:3b:70:8e:52:a7:c9:5c:85:6a:f6:96:a9:1c:a6:cf:48:d5Digest Algorithmsha256PE Digest Matchestrue68:16:c2:5c:0e:62:d5:95:73:9f:14:07:db:35:d3:37:12:f9:9c:20Signer
Actual PE Digest68:16:c2:5c:0e:62:d5:95:73:9f:14:07:db:35:d3:37:12:f9:9c:20Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFC140RUS.pdb
Sections
.text Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/mfcm140.dll.dll windows:6 windows x86 arch:x86
458f134757aef6573a23ce45d6ae1098
Code Sign
33:00:00:00:ae:ec:3f:ad:b6:8b:b9:2d:d2:00:00:00:00:00:aeCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before03/05/2016, 17:13Not After03/08/2017, 17:13SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
5d:22:14:1e:38:13:fb:7e:b3:cf:89:3f:34:a9:1e:90:22:8b:14:11:f3:7b:ea:d4:61:67:6c:41:2d:6e:b8:04Signer
Actual PE Digest5d:22:14:1e:38:13:fb:7e:b3:cf:89:3f:34:a9:1e:90:22:8b:14:11:f3:7b:ea:d4:61:67:6c:41:2d:6e:b8:04Digest Algorithmsha256PE Digest Matchestrue2a:d3:c0:c5:a9:b5:4f:8b:f9:3f:33:e4:35:3d:e3:4b:05:5d:ee:48Signer
Actual PE Digest2a:d3:c0:c5:a9:b5:4f:8b:f9:3f:33:e4:35:3d:e3:4b:05:5d:ee:48Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFCM140.i386.pdb
Imports
kernel32
DecodePointer
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
Sleep
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
api-ms-win-crt-string-l1-1-0
memset
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
vcruntime140
__FrameUnwindFilter
__std_exception_copy
_purecall
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
__std_exception_destroy
user32
GetClientRect
CopyRect
GetWindow
SetWindowPos
PostMessageA
SendMessageA
mfc140
ord7688
ord7677
ord5388
ord8182
ord5210
ord9166
ord6469
ord2381
ord13784
ord5390
ord5231
ord5756
ord5504
ord9305
ord5739
ord2370
ord2263
ord485
ord2241
ord7687
ord3592
ord5528
ord12286
ord2575
ord2565
ord4383
ord13474
ord13473
ord4467
ord8305
ord14147
ord14047
ord8775
ord13402
ord5397
ord7781
ord14053
ord8734
ord8731
ord5511
ord7614
ord12874
ord5937
ord13781
ord8086
ord8089
ord3916
ord3287
ord3288
ord5228
ord10202
ord2251
ord2250
ord274
ord1528
ord1042
ord1661
ord1044
ord3968
ord2342
ord4138
ord3294
ord6329
ord6940
ord2542
ord835
ord1363
ord7398
ord12163
ord7649
ord6274
ord12112
ord12066
ord3825
ord372
ord9183
ord3291
ord10458
ord3258
ord11692
ord8880
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_cexit
abort
_initterm_e
terminate
_crt_atexit
_initterm
_initialize_narrow_environment
mscoree
_CorDllMain
Exports
Exports
AfxmReleaseManagedReferences
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/mfcm140u.dll.dll windows:6 windows x86 arch:x86
8771666f427901e89cf98a355e4a9239
Code Sign
33:00:00:00:99:aa:c5:81:9f:8c:a2:7d:8a:00:00:00:00:00:99Certificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
9a:ab:3f:24:ec:c2:01:94:c7:1b:6a:00:69:72:ea:4a:88:49:41:4f:b3:66:58:4b:ba:27:bf:5e:9b:ad:ee:7cSigner
Actual PE Digest9a:ab:3f:24:ec:c2:01:94:c7:1b:6a:00:69:72:ea:4a:88:49:41:4f:b3:66:58:4b:ba:27:bf:5e:9b:ad:ee:7cDigest Algorithmsha256PE Digest Matchestrue2a:6a:a1:e0:45:1a:b6:ae:74:33:b6:cb:88:91:24:d7:18:ac:82:87Signer
Actual PE Digest2a:6a:a1:e0:45:1a:b6:ae:74:33:b6:cb:88:91:24:d7:18:ac:82:87Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
MFCM140U.i386.pdb
Imports
kernel32
DecodePointer
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
Sleep
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
api-ms-win-crt-string-l1-1-0
memset
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
vcruntime140
__FrameUnwindFilter
__std_exception_copy
_purecall
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
__std_exception_destroy
user32
GetClientRect
CopyRect
GetWindow
SetWindowPos
PostMessageW
SendMessageW
mfc140u
ord7723
ord7712
ord5409
ord8219
ord5228
ord9209
ord6495
ord2383
ord13864
ord5411
ord5252
ord5777
ord5525
ord9350
ord5760
ord2374
ord2268
ord485
ord2246
ord7722
ord3600
ord5549
ord12343
ord2577
ord2567
ord4392
ord13543
ord13542
ord4476
ord8344
ord14232
ord14130
ord8816
ord13468
ord5418
ord7818
ord14136
ord8775
ord8772
ord5532
ord7649
ord12933
ord5961
ord13861
ord8122
ord8125
ord3924
ord3294
ord3295
ord5249
ord10250
ord2256
ord2255
ord269
ord1525
ord1043
ord1663
ord1045
ord3976
ord2348
ord4147
ord3301
ord6355
ord6971
ord2544
ord835
ord1365
ord7432
ord12220
ord7684
ord6300
ord12169
ord12123
ord3833
ord372
ord9226
ord3298
ord10509
ord3265
ord11746
ord8923
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_cexit
abort
_initterm_e
terminate
_crt_atexit
_initterm
_initialize_narrow_environment
mscoree
_CorDllMain
Exports
Exports
AfxmReleaseManagedReferences
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/msvcp140.dll.dll windows:6 windows x86 arch:x86
7d4a94e128dda6c7a10e11a890bebd9e
Code Sign
33:00:00:00:9b:e0:74:37:cb:3d:4d:8d:2e:00:00:00:00:00:9bCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
68:2d:f5:7e:0c:ad:80:ca:27:e0:72:28:77:d5:7f:66:33:73:08:17:be:5d:57:85:d1:83:2e:86:01:78:8f:c0Signer
Actual PE Digest68:2d:f5:7e:0c:ad:80:ca:27:e0:72:28:77:d5:7f:66:33:73:08:17:be:5d:57:85:d1:83:2e:86:01:78:8f:c0Digest Algorithmsha256PE Digest Matchestrue01:0e:18:72:e2:10:05:31:74:bc:1c:94:94:e5:ec:31:a1:2a:35:eeSigner
Actual PE Digest01:0e:18:72:e2:10:05:31:74:bc:1c:94:94:e5:ec:31:a1:2a:35:eeDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
msvcp140.i386.pdb
Imports
vcruntime140
memchr
__std_type_info_destroy_list
_except_handler4_common
memset
memcmp
_CxxThrowException
__std_exception_destroy
__current_exception
__uncaught_exception
__AdjustPointer
__std_exception_copy
__CxxFrameHandler3
__uncaught_exceptions
_purecall
__std_terminate
memcpy
memmove
__processing_throw
api-ms-win-crt-string-l1-1-0
isspace
islower
wcscpy_s
wcsnlen
__strncnt
_wcsdup
iswctype
strcspn
tolower
isalnum
isxdigit
isdigit
isupper
api-ms-win-crt-heap-l1-1-0
_calloc_base
malloc
_realloc_base
_free_base
free
_callnewh
calloc
_malloc_base
api-ms-win-crt-locale-l1-1-0
_lock_locales
setlocale
___lc_locale_name_func
localeconv
___lc_collate_cp_func
__pctype_func
___lc_codepage_func
_unlock_locales
___mb_cur_max_func
api-ms-win-crt-runtime-l1-1-0
terminate
abort
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_endthreadex
_errno
_beginthreadex
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_set_new_handler
api-ms-win-crt-stdio-l1-1-0
fputwc
__stdio_common_vsprintf_s
fputs
_fsopen
fseek
_wfsopen
_get_stream_buffer_pointers
fgetwc
_fseeki64
__acrt_iob_func
fputc
fsetpos
ungetc
setvbuf
fgetpos
fwrite
ungetwc
fgetc
fflush
fclose
api-ms-win-crt-math-l1-1-0
_CIpow
_CIlog
ldexp
frexp
api-ms-win-crt-multibyte-l1-1-0
_ismbblead
api-ms-win-crt-convert-l1-1-0
btowc
strtod
strtof
api-ms-win-crt-time-l1-1-0
_Gettnames
_Getmonths
_Wcsftime
_Strftime
_Getdays
_W_Getdays
_W_Gettnames
_W_Getmonths
api-ms-win-crt-filesystem-l1-1-0
_wrename
_wrmdir
_lock_file
_wremove
_unlock_file
_wchdir
api-ms-win-crt-environment-l1-1-0
_wgetcwd
api-ms-win-crt-utility-l1-1-0
rand_s
kernel32
RtlCaptureStackBackTrace
Sleep
GetExitCodeThread
DuplicateHandle
GetCurrentThreadId
GetCurrentProcess
WaitForSingleObjectEx
CloseHandle
GetNativeSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
GetStringTypeW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
EncodePointer
RaiseException
DecodePointer
GetCPInfo
CompareStringW
GetLocaleInfoW
LCMapStringW
LoadLibraryExA
FreeLibrary
VirtualQuery
VirtualProtect
AreFileApisANSI
GetSystemInfo
CreateDirectoryW
FindFirstFileExW
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
TerminateProcess
FindNextFileW
SetEndOfFile
GetTempPathW
CreateHardLinkW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FindClose
GetProcAddress
CreateFileW
SetFileAttributesW
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
QueueUserWorkItem
GetFileInformationByHandle
GetLastError
IsProcessorFeaturePresent
GetCurrentThread
TryEnterCriticalSection
FormatMessageW
CopyFileW
SetFilePointerEx
GetDiskFreeSpaceExW
GetFileAttributesExW
Exports
Exports
??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z
??0?$_Yarn@D@std@@QAE@ABV01@@Z
??0?$_Yarn@D@std@@QAE@PBD@Z
??0?$_Yarn@D@std@@QAE@XZ
??0?$_Yarn@G@std@@QAE@ABV01@@Z
??0?$_Yarn@G@std@@QAE@PBG@Z
??0?$_Yarn@G@std@@QAE@XZ
??0?$_Yarn@_W@std@@QAE@ABV01@@Z
??0?$_Yarn@_W@std@@QAE@PB_W@Z
??0?$_Yarn@_W@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$codecvt@DDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Facet_base@std@@QAE@ABV01@@Z
??0_Facet_base@std@@QAE@XZ
??0_Init_locks@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locimp@locale@std@@AAE@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0task_continuation_context@Concurrency@@AAE@XZ
??0time_base@std@@QAE@I@Z
??1?$_Yarn@D@std@@QAE@XZ
??1?$_Yarn@G@std@@QAE@XZ
??1?$_Yarn@_W@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$codecvt@DDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_SDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_UDU_Mbstatet@@@std@@MAE@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Facet_base@std@@UAE@XZ
??1_Init_locks@std@@QAE@XZ
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@MAE@XZ
??1ios_base@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Iosb@H@std@@QAEAAV01@$$QAV01@@Z
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??4?$_Yarn@G@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@G@std@@QAEAAV01@PBG@Z
??4?$_Yarn@_W@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Crt_new_delete@std@@QAEAAU01@$$QAU01@@Z
??4_Crt_new_delete@std@@QAEAAU01@ABU01@@Z
??4_Facet_base@std@@QAEAAV01@ABV01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBE_NXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDU_Mbstatet@@@std@@6B@
??_7?$codecvt@GDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Facet_base@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$codecvt@DDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@GDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_SDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_UDU_Mbstatet@@@std@@QAEXXZ
??_F?$codecvt@_WDU_Mbstatet@@@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?CaptureCallstack@platform@details@Concurrency@@YAIPAPAXII@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?_C_str@?$_Yarn@G@std@@QBEPBGXZ
?_C_str@?$_Yarn@_W@std@@QBEPB_WXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Empty@?$_Yarn@D@std@@QBE_NXZ
?_Empty@?$_Yarn@G@std@@QBE_NXZ
?_Empty@?$_Yarn@_W@std@@QBE_NXZ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDI@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDI@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDI@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAHABV?$ctype@D@2@@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAHABV?$ctype@G@2@@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAHABV?$ctype@_W@2@@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Index@ios_base@std@@0HA
Sections
.text Size: 385KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/pcla-0.dll.dll windows:5 windows x86 arch:x86
fd65062fb78dffef07ac3b040945c3c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
FreeLibrary
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
tibe-2
TbWinsockCleanup
TbCloseSocket
TbWinsockStartup
trfo-2
TfNrvCompress
TfRandomByte
TfFillRandom
TfXorBuffer
TfReadFileIntoBuffer
TfFree
TfStrICmp
TfNrvCalculateMaxExpansion
trch-1
Parameter_markInvalidWithReason
Params_findParameter
Parameter_Socket_getValue
Parameter_LocalFile_getValue
Parameter_String_getValue
Parameter_U8_getValue
Parameter_S16_getValue
Params_findParamchoice
Paramchoice_getValue
Paramchoice_hasValidValue
tucl-1
TcLogBuffer
TcLog
ws2_32
select
recv
WSASetLastError
send
msvcrt
atoi
memset
free
malloc
memcpy
calloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
Exports
Exports
getID
processParams
validateParams
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/pcre-0.dll.dll windows:5 windows x86 arch:x86
c04ae93ea53bc16eec23be7c255c7200
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
msvcrt
strchr
strcmp
strncmp
memset
memcpy
memcmp
memmove
strlen
malloc
free
isalpha
iscntrl
ispunct
isprint
isgraph
isxdigit
isalnum
isupper
isdigit
toupper
islower
tolower
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
isspace
Exports
Exports
pcre_callout
pcre_compile
pcre_compile2
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_dfa_exec
pcre_exec
pcre_free
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_get_substring
pcre_get_substring_list
pcre_info
pcre_maketables
pcre_malloc
pcre_refcount
pcre_stack_free
pcre_stack_malloc
pcre_study
pcre_version
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/pcrecpp-0.dll.dll windows:5 windows x86 arch:x86
b7979a859ceaa2d1b5ac69eb5a7f4ae5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
RtlUnwind
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
OutputDebugStringA
GetCurrentProcess
UnhandledExceptionFilter
pcre-0
pcre_fullinfo
pcre_exec
pcre_config
pcre_compile
pcre_free
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
msvcrt
memcmp
isdigit
memcpy
isspace
strtol
strtoul
strtod
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
_CxxThrowException
malloc
_callnewh
_unlock
__dllonexit
_lock
_onexit
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
??1type_info@@UAE@XZ
_errno
__CxxFrameHandler
strlen
Exports
Exports
??0Arg@pcrecpp@@QAE@PAD@Z
??0Arg@pcrecpp@@QAE@PADP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAE@Z
??0Arg@pcrecpp@@QAE@PAEP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAF@Z
??0Arg@pcrecpp@@QAE@PAFP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAG@Z
??0Arg@pcrecpp@@QAE@PAGP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAH@Z
??0Arg@pcrecpp@@QAE@PAHP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAI@Z
??0Arg@pcrecpp@@QAE@PAIP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAJ@Z
??0Arg@pcrecpp@@QAE@PAJP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAK@Z
??0Arg@pcrecpp@@QAE@PAKP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAM@Z
??0Arg@pcrecpp@@QAE@PAMP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAN@Z
??0Arg@pcrecpp@@QAE@PANP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Arg@pcrecpp@@QAE@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@P6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAVStringPiece@1@@Z
??0Arg@pcrecpp@@QAE@PAVStringPiece@1@P6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PAX@Z
??0Arg@pcrecpp@@QAE@PA_J@Z
??0Arg@pcrecpp@@QAE@PA_JP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@PA_K@Z
??0Arg@pcrecpp@@QAE@PA_KP6A_NPBDHPAX@Z@Z
??0Arg@pcrecpp@@QAE@XZ
??0RE@pcrecpp@@QAE@ABV01@@Z
??0RE@pcrecpp@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0RE@pcrecpp@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVRE_Options@1@@Z
??0RE@pcrecpp@@QAE@PBD@Z
??0RE@pcrecpp@@QAE@PBDABVRE_Options@1@@Z
??0RE@pcrecpp@@QAE@PBE@Z
??0RE@pcrecpp@@QAE@PBEABVRE_Options@1@@Z
??0RE_Options@pcrecpp@@QAE@H@Z
??0RE_Options@pcrecpp@@QAE@XZ
??0Scanner@pcrecpp@@QAE@ABV01@@Z
??0Scanner@pcrecpp@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Scanner@pcrecpp@@QAE@XZ
??0StringPiece@pcrecpp@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0StringPiece@pcrecpp@@QAE@PBD@Z
??0StringPiece@pcrecpp@@QAE@PBDH@Z
??0StringPiece@pcrecpp@@QAE@PBE@Z
??0StringPiece@pcrecpp@@QAE@XZ
??1RE@pcrecpp@@QAE@XZ
??1Scanner@pcrecpp@@QAE@XZ
??4Arg@pcrecpp@@QAEAAV01@ABV01@@Z
??4RE@pcrecpp@@QAEABV01@ABV01@@Z
??4RE_Options@pcrecpp@@QAEAAV01@ABV01@@Z
??4Scanner@pcrecpp@@QAEAAV01@ABV01@@Z
??4StringPiece@pcrecpp@@QAEAAV01@ABV01@@Z
??8StringPiece@pcrecpp@@QBE_NABV01@@Z
??9StringPiece@pcrecpp@@QBE_NABV01@@Z
??AStringPiece@pcrecpp@@QBEDH@Z
??MStringPiece@pcrecpp@@QBE_NABV01@@Z
??NStringPiece@pcrecpp@@QBE_NABV01@@Z
??OStringPiece@pcrecpp@@QBE_NABV01@@Z
??PStringPiece@pcrecpp@@QBE_NABV01@@Z
?Cleanup@RE@pcrecpp@@AAEXXZ
?Compile@RE@pcrecpp@@AAEPAUreal_pcre@@W4Anchor@12@@Z
?Consume@RE@pcrecpp@@QBE_NPAVStringPiece@2@ABVArg@2@111111111111111@Z
?Consume@Scanner@pcrecpp@@QAE_NABVRE@2@ABVArg@2@11@Z
?ConsumeSkip@Scanner@pcrecpp@@AAEXXZ
?CopyToString@StringPiece@pcrecpp@@QBEXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?DisableSkip@Scanner@pcrecpp@@QAEXXZ
?DoMatch@RE@pcrecpp@@QBE_NABVStringPiece@2@W4Anchor@12@PAHPBQBVArg@2@H@Z
?DoMatchImpl@RE@pcrecpp@@ABE_NABVStringPiece@2@W4Anchor@12@PAHQBQBVArg@2@H2H@Z
?EnableSkip@Scanner@pcrecpp@@QAEXXZ
?Extract@RE@pcrecpp@@QBE_NABVStringPiece@2@0PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?FindAndConsume@RE@pcrecpp@@QBE_NPAVStringPiece@2@ABVArg@2@111111111111111@Z
?FullMatch@RE@pcrecpp@@QBE_NABVStringPiece@2@ABVArg@2@111111111111111@Z
?GetComments@Scanner@pcrecpp@@QAEXHHPAV?$vector@VStringPiece@pcrecpp@@V?$allocator@VStringPiece@pcrecpp@@@std@@@std@@@Z
?GetNextComments@Scanner@pcrecpp@@QAEXPAV?$vector@VStringPiece@pcrecpp@@V?$allocator@VStringPiece@pcrecpp@@@std@@@std@@@Z
?GlobalReplace@RE@pcrecpp@@QBEHABVStringPiece@2@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Init@RE@pcrecpp@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVRE_Options@2@@Z
?LineNumber@Scanner@pcrecpp@@QBEHXZ
?LookingAt@Scanner@pcrecpp@@QBE_NABVRE@2@@Z
?NumberOfCapturingGroups@RE@pcrecpp@@QBEHXZ
?Offset@Scanner@pcrecpp@@QBEHXZ
?Parse@Arg@pcrecpp@@QBE_NPBDH@Z
?PartialMatch@RE@pcrecpp@@QBE_NABVStringPiece@2@ABVArg@2@111111111111111@Z
?QuoteMeta@RE@pcrecpp@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVStringPiece@2@@Z
?Replace@RE@pcrecpp@@QBE_NABVStringPiece@2@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Rewrite@RE@pcrecpp@@ABE_NPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVStringPiece@2@1PAHH@Z
?SetSkipExpression@Scanner@pcrecpp@@QAEXPBD@Z
?Skip@Scanner@pcrecpp@@QAEXPBD@Z
?SkipCXXComments@Scanner@pcrecpp@@QAEXXZ
?TryMatch@RE@pcrecpp@@ABEHABVStringPiece@2@HW4Anchor@12@_NPAHH@Z
?all_options@RE_Options@pcrecpp@@QBEHXZ
?as_string@StringPiece@pcrecpp@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?caseless@RE_Options@pcrecpp@@QBE_NXZ
?clear@StringPiece@pcrecpp@@QAEXXZ
?compare@StringPiece@pcrecpp@@QBEHABV12@@Z
?data@StringPiece@pcrecpp@@QBEPBDXZ
?dollar_endonly@RE_Options@pcrecpp@@QBE_NXZ
?dotall@RE_Options@pcrecpp@@QBE_NXZ
?empty@StringPiece@pcrecpp@@QBE_NXZ
?error@RE@pcrecpp@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?extended@RE_Options@pcrecpp@@QBE_NXZ
?extra@RE_Options@pcrecpp@@QBE_NXZ
?match_limit@RE_Options@pcrecpp@@QBEHXZ
?match_limit_recursion@RE_Options@pcrecpp@@QBEHXZ
?multiline@RE_Options@pcrecpp@@QBE_NXZ
?no_arg@RE@pcrecpp@@2VArg@2@A
?no_auto_capture@RE_Options@pcrecpp@@QBE_NXZ
?parse_char@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_double@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_float@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_int@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_int_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_int_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_int_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_int_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_long@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_long_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_long_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_long_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_long_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_longlong@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_longlong_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_longlong_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_longlong_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_longlong_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_null@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_short@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_short_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_short_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_short_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_short_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_string@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_stringpiece@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_uchar@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_uint@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_uint_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_uint_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_uint_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_uint_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_ulong@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_ulong_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ulong_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ulong_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ulong_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_ulonglong@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_ulonglong_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ulonglong_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ulonglong_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ulonglong_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?parse_ushort@Arg@pcrecpp@@CA_NPBDHPAX@Z
?parse_ushort_cradix@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ushort_hex@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ushort_octal@Arg@pcrecpp@@SA_NPBDHPAX@Z
?parse_ushort_radix@Arg@pcrecpp@@CA_NPBDHPAXH@Z
?pattern@RE@pcrecpp@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?remove_prefix@StringPiece@pcrecpp@@QAEXH@Z
?remove_suffix@StringPiece@pcrecpp@@QAEXH@Z
?save_comments@Scanner@pcrecpp@@QAE_NXZ
?set@StringPiece@pcrecpp@@QAEXPBD@Z
?set@StringPiece@pcrecpp@@QAEXPBDH@Z
?set@StringPiece@pcrecpp@@QAEXPBXH@Z
?set_all_options@RE_Options@pcrecpp@@QAEAAV12@H@Z
?set_caseless@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_dollar_endonly@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_dotall@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_extended@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_extra@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_match_limit@RE_Options@pcrecpp@@QAEAAV12@H@Z
?set_match_limit_recursion@RE_Options@pcrecpp@@QAEAAV12@H@Z
?set_multiline@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_no_auto_capture@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_save_comments@Scanner@pcrecpp@@QAEX_N@Z
?set_ungreedy@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?set_utf8@RE_Options@pcrecpp@@QAEAAV12@_N@Z
?size@StringPiece@pcrecpp@@QBEHXZ
?starts_with@StringPiece@pcrecpp@@QBE_NABV12@@Z
?ungreedy@RE_Options@pcrecpp@@QBE_NXZ
?utf8@RE_Options@pcrecpp@@QBE_NXZ
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/pcreposix-0.dll.dll windows:5 windows x86 arch:x86
ce65e93ba01df47b38f71d9ec5ed670a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
pcre-0
pcre_compile2
pcre_info
pcre_free
pcre_exec
msvcrt
strncpy
sprintf
strlen
free
malloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
Exports
Exports
regcomp
regerror
regexec
regfree
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/posh-0.dll.dll windows:5 windows x86 arch:x86
3238dd5467a491407079286b75fed933
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
msvcrt
malloc
free
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
Exports
Exports
POSH_GetArchString
POSH_ReadI16FromBig
POSH_ReadI16FromLittle
POSH_ReadI32FromBig
POSH_ReadI32FromLittle
POSH_ReadI64FromBig
POSH_ReadI64FromLittle
POSH_ReadU16FromBig
POSH_ReadU16FromLittle
POSH_ReadU32FromBig
POSH_ReadU32FromLittle
POSH_ReadU64FromBig
POSH_ReadU64FromLittle
POSH_SwapI16
POSH_SwapI32
POSH_SwapI64
POSH_SwapU16
POSH_SwapU32
POSH_SwapU64
POSH_WriteI16ToBig
POSH_WriteI16ToLittle
POSH_WriteI32ToBig
POSH_WriteI32ToLittle
POSH_WriteI64ToBig
POSH_WriteI64ToLittle
POSH_WriteU16ToBig
POSH_WriteU16ToLittle
POSH_WriteU32ToBig
POSH_WriteU32ToLittle
POSH_WriteU64ToBig
POSH_WriteU64ToLittle
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/posh.dll.dll windows:4 windows x86 arch:x86
5baac45eab5a7941d7922ea469693a01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr71
__dllonexit
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
_except_handler3
_onexit
__security_error_handler
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DisableThreadLibraryCalls
Exports
Exports
POSH_GetArchString
POSH_ReadI16FromBig
POSH_ReadI16FromLittle
POSH_ReadI32FromBig
POSH_ReadI32FromLittle
POSH_ReadU16FromBig
POSH_ReadU16FromLittle
POSH_ReadU32FromBig
POSH_ReadU32FromLittle
POSH_SwapI16
POSH_SwapI32
POSH_SwapU16
POSH_SwapU32
POSH_WriteI16ToBig
POSH_WriteI16ToLittle
POSH_WriteI32ToBig
POSH_WriteI32ToLittle
POSH_WriteU16ToBig
POSH_WriteU16ToLittle
POSH_WriteU32ToBig
POSH_WriteU32ToLittle
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/riar-2.dll.dll windows:4 windows x86 arch:x86
26e230dbe5b5143dd3b386c2471fb0e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
trfo-2
TfReadFileIntoBuffer
TfNrvCompress
TfNrvDecompress
TfWriteBufferIntoFile
ws2_32
htons
msvcrt
calloc
malloc
free
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
Exports
Exports
RaCheckStatusCode
RaCreatePayload
RaInitParms
RaReadInputBuffer
RaReadInputFile
RaValidateParms
RaWriteOutputBuffer
RaWriteOutputFile
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/riar.dll.dll windows:4 windows x86 arch:x86
a25bf667109022283b937196e906f722
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
htons
trfo
TfWriteBufferIntoFile
TfReadFileIntoBuffer
TfNrvDecompress
TfNrvCompress
msvcr71
free
malloc
__security_error_handler
_except_handler3
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
calloc
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
Exports
Exports
RaCheckStatusCode
RaCreatePayload
RaInitParms
RaReadInputBuffer
RaReadInputFile
RaValidateParms
RaWriteOutputBuffer
RaWriteOutputFile
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/rundll.exe.exe windows:5 windows x86 arch:x86
b28c641d753fb51b62a00fe6115070ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
_controlfp_s
_invoke_watson
strncpy
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
realloc
bsearch
qsort
memset
memcpy
setbuf
getenv
atoi
malloc
free
_snprintf
strncmp
strrchr
fprintf
__iob_func
_crt_debugger_hook
_stricmp
_strdup
kernel32
LocalFree
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapAlloc
IsBadReadPtr
SetLastError
GetProcessHeap
HeapFree
VirtualFree
VirtualProtect
VirtualAlloc
FreeLibrary
GetModuleHandleA
OutputDebugStringA
GetFullPathNameA
LoadLibraryA
GetProcAddress
UnmapViewOfFile
CreateFileA
GetFileSize
CreateFileMappingA
CloseHandle
MapViewOfFile
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GetLastError
FormatMessageA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/scan.txt
-
RunDLL/ssleay32.dll.dll windows:5 windows x86 arch:x86
97a700de1687fd1cc15ee2d6e2e3a134
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libeay32
ord52
ord2201
ord289
ord493
ord911
ord464
ord3836
ord3245
ord354
ord2936
ord3244
ord3844
ord323
ord3067
ord2894
ord961
ord3874
ord3841
ord89
ord109
ord3879
ord202
ord3239
ord866
ord110
ord3422
ord2929
ord3644
ord3570
ord2578
ord111
ord3010
ord3480
ord2924
ord3459
ord3512
ord3608
ord3575
ord3663
ord123
ord201
ord118
ord3666
ord219
ord498
ord285
ord635
ord909
ord912
ord2784
ord965
ord964
ord256
ord274
ord276
ord3899
ord2572
ord3315
ord2927
ord2747
ord3724
ord313
ord495
ord3883
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3165
ord3489
ord3719
ord216
ord206
ord497
ord4046
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord170
ord481
ord3729
ord333
ord2915
ord1096
ord1097
ord3816
ord3888
ord3896
ord2589
ord1145
ord1144
ord1081
ord2292
ord3823
ord3846
ord622
ord679
ord623
ord3922
ord2898
ord3124
ord3925
ord2702
ord264
ord266
ord3288
ord3704
ord85
ord3767
ord3647
ord3766
ord3365
ord4114
ord3857
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3826
ord3559
ord3399
ord636
ord914
ord2478
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord541
ord316
ord629
ord892
ord74
ord3866
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord2524
ord3610
ord3505
ord3595
ord1023
ord657
ord401
ord93
ord3396
ord3657
ord4045
ord2475
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord1671
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord1959
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3513
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord2426
ord86
ord88
ord3313
ord3312
ord3314
ord1101
ord293
ord2996
ord3155
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord225
ord169
ord168
ord167
ord3873
ord222
ord490
ord754
ord2411
ord910
ord2630
ord3109
ord269
ord188
ord181
ord654
ord290
ord281
ord2821
ord641
ord176
ord857
ord2206
ord252
ord903
ord1654
ord1653
ord904
ord901
ord3758
ord905
msvcrt
fprintf
strcpy
malloc
free
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
strncmp
strlen
memmove
memset
time
memcmp
memcpy
_iob
_errno
_ftime
kernel32
SetLastError
GetLastError
RtlUnwind
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Exports
Exports
BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_info_callback
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/start.exe.exe windows:5 windows x86 arch:x86
9d1f0da408c33eebb70b9bfa17b7fddc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb
Imports
kernel32
GetLastError
SetLastError
CloseHandle
GetCurrentProcess
CreateHardLinkW
DeleteFileW
RemoveDirectoryW
DeviceIoControl
CreateDirectoryW
CreateFileW
SetFileTime
MoveFileW
GetShortPathNameW
GetLongPathNameW
WriteFile
GetStdHandle
SetFilePointer
SetEndOfFile
FlushFileBuffers
GetFileType
ReadFile
GetFileAttributesW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
GetVersionExW
GetCurrentDirectoryW
FoldStringW
GetFullPathNameW
GetModuleFileNameW
FindResourceW
GetModuleHandleW
FreeLibrary
GetProcAddress
GetCurrentProcessId
GetLocaleInfoW
GetNumberFormatW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
WaitForSingleObject
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetExitCodeProcess
GetTempPathW
MoveFileExW
UnmapViewOfFile
Sleep
MapViewOfFile
GetCommandLineW
CreateFileMappingW
GetTickCount
GetLocalTime
OpenFileMappingW
SetThreadExecutionState
LoadLibraryW
GetSystemDirectoryW
ExitProcess
FreeConsole
WriteConsoleW
AttachConsole
AllocConsole
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
GetProcessAffinityMask
CreateEventW
CreateSemaphoreW
ReleaseSemaphore
ResetEvent
SetEvent
SetThreadPriority
SystemTimeToFileTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
GlobalAlloc
SetCurrentDirectoryW
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
RunDLL/start.vbs.vbs
-
RunDLL/system.exe.exe windows:6 windows x86 arch:x86
579743fea9bff1ff1aed2e882ac3c035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\Kingron\Desktop\s\Release\s.pdb
Imports
kernel32
WriteFile
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
SetFilePointer
lstrlenA
WaitForSingleObject
Sleep
GetLastError
CreateFileA
GetVersionExA
lstrcpyA
CloseHandle
CreateThread
GetLocalTime
DeleteCriticalSection
lstrcpynA
ReleaseSemaphore
CreateSemaphoreA
QueryPerformanceCounter
GetTickCount
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
EnterCriticalSection
lstrcmpiA
SetConsoleCtrlHandler
user32
wsprintfA
ws2_32
inet_addr
socket
WSACleanup
__WSAFDIsSet
bind
WSAIoctl
ntohs
closesocket
gethostbyname
select
ntohl
send
WSAGetLastError
setsockopt
ioctlsocket
sendto
htons
htonl
recv
inet_ntoa
connect
WSAStartup
iphlpapi
GetBestInterface
GetIpAddrTable
vcruntime140
_except_handler4_common
memset
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
strchr
strstr
api-ms-win-crt-string-l1-1-0
strtok
_strnicmp
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfprintf
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_initialize_narrow_environment
_seh_filter_exe
exit
_initterm_e
_initterm
_configure_narrow_argv
_get_initial_narrow_environment
_set_app_type
_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 17KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/tibe-1.dll.dll windows:4 windows x86 arch:x86
005f06312c1d74ecd65c12427c9d642a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SystemTimeToFileTime
GetSystemTime
Sleep
FormatMessageA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
trfo-2
TfCrc32
TfMd4
TfMd5Init
TfMd5Update
TfMd5Final
TfRc4Init
TfRc4Encrypt
TfHmacMd5Init
TfHmacMd5Update
TfHmacMd5Final
ws2_32
inet_ntoa
htonl
htons
WSAStartup
WSACleanup
accept
closesocket
ioctlsocket
WSAGetLastError
send
sendto
recv
select
recvfrom
WSASetLastError
connect
bind
setsockopt
socket
listen
ntohs
ntohl
msvcrt
strchr
_iob
rand
atoi
strncpy
sprintf
time
malloc
realloc
gmtime
mktime
tolower
sscanf
strncmp
_snprintf
toupper
strncat
fflush
fprintf
islower
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
free
Exports
Exports
TbAddInterfacePointer
TbAsnOidToBytes
TbB1size
TbB2size
TbB3size
TbB4size
TbBuffCat
TbBuffCpy
TbBuffnCat
TbBytesToAsnOid
TbCatUniBuff
TbCheckActid
TbCheckSecuritySignature
TbCleanSB
TbCloseSocket
TbCloseStructSockets
TbComputeUtf8Len
TbConnectNonblocking
TbConvAreYouThere_makeresp
TbConvWhoAreYou2_makeresp
TbConvWhoAreYouAuthMore_makeresp
TbConvWhoAreYouAuth_makeresp
TbConvWhoAreYou_makeresp
TbConvWhoAreYou_parserequest
TbCopyBuffStrToUniBuffStr
TbCopyRemoteDomainInfoToLocal
TbCreateActid
TbCreateNonzeroPointer
TbD_P16
TbDealWithAlterContext
TbDealWithAuth3
TbDealWithBind
TbDealWithDecryption
TbDealWithEncryption
TbDealWithNetlogonDecryption
TbDealWithNetlogonEncryption
TbDealWithNtlmDecryption
TbDealWithNtlmEncryption
TbDealWithSnegoDecryption
TbDealWithSnegoEncryption
TbDealWithTcpReq
TbDesDecrypt8
TbDesEncrypt8
TbDoAuth3
TbDoBind
TbDoCoCreateInstance
TbDoCoCreateInstance2
TbDoGetClassObject
TbDoGetClassObject2
TbDoHttpStartup
TbDoNbtSessionRequest
TbDoNetlogonAuth
TbDoRegQueryHklmKey
TbDoRegQueryHklmValue
TbDoRegQueryUsersKey
TbDoRegQueryUsersValue
TbDoRemQI
TbDoRpcBind
TbDoRpcBindEx
TbDoRpcRequest
TbDoRpcRequestEx
TbDoSmbCancelForward
TbDoSmbChangePipe
TbDoSmbChangeShare
TbDoSmbCheckDirectory
TbDoSmbClose
TbDoSmbCloseAndTdisc
TbDoSmbClosePrint
TbDoSmbCopy
TbDoSmbCreate
TbDoSmbCreateDir
TbDoSmbCreateNew
TbDoSmbCreateTemp
TbDoSmbDelete
TbDoSmbDeleteDirectory
TbDoSmbEcho
TbDoSmbFind
TbDoSmbFindClose
TbDoSmbFindClose2
TbDoSmbFindNotifyClose
TbDoSmbFindUnique
TbDoSmbFlush
TbDoSmbForwardUserName
TbDoSmbGeneric
TbDoSmbGetMachineName
TbDoSmbGetPrintQueue
TbDoSmbHalfNtExtSessionSetupAndX
TbDoSmbIoctl
TbDoSmbIoctlSecondary
TbDoSmbLockAndRead
TbDoSmbLockByteRange
TbDoSmbLockingAndX
TbDoSmbLogoffAndX
TbDoSmbMove
TbDoSmbNegotiate
TbDoSmbNtCancel
TbDoSmbNtCreateAndX
TbDoSmbNtExtSessionSetupAndX
TbDoSmbNtLockingAndX
TbDoSmbNtReadAndX
TbDoSmbNtReadRaw
TbDoSmbNtRename
TbDoSmbNtSessionSetupAndX
TbDoSmbNtTransact
TbDoSmbNtTransactSecondary
TbDoSmbNtWriteAndX
TbDoSmbNtWriteRaw
TbDoSmbOpen
TbDoSmbOpenAndX
TbDoSmbOpenPrintFile
TbDoSmbPacket
TbDoSmbPeekNamedPipe
TbDoSmbProcessExit
TbDoSmbQueryInformation
TbDoSmbQueryInformation2
TbDoSmbQueryInformationDisk
TbDoSmbQueryInformationSrv
TbDoSmbRead
TbDoSmbReadAndX
TbDoSmbReadMpx
TbDoSmbReadRaw
TbDoSmbRecvData
TbDoSmbRename
TbDoSmbSearch
TbDoSmbSeek
TbDoSmbSendBroadcastMessage
TbDoSmbSendData
TbDoSmbSendEndMbMessage
TbDoSmbSendMessage
TbDoSmbSendStartMbMessage
TbDoSmbSendTextMbMessage
TbDoSmbSessionSetupAndX
TbDoSmbSetInformation
TbDoSmbSetInformation2
TbDoSmbShutdown
TbDoSmbStartup
TbDoSmbStartupEx
TbDoSmbTransactRemApi
TbDoSmbTransaction
TbDoSmbTransaction2
TbDoSmbTransaction2Secondary
TbDoSmbTransactionMailslot
TbDoSmbTransactionNamedPipe
TbDoSmbTransactionSecondary
TbDoSmbTreeConnect
TbDoSmbTreeConnectAndX
TbDoSmbTreeDisconnect
TbDoSmbUnlockByteRange
TbDoSmbWrite
TbDoSmbWrite103Raw
TbDoSmbWriteAndClose
TbDoSmbWriteAndCloseLong
TbDoSmbWriteAndUnlock
TbDoSmbWriteAndX
TbDoSmbWriteMpx
TbDoSmbWriteMpxComplete
TbDoSmbWriteMpxSecondary
TbDoSmbWritePrintFile
TbDoSmbWriteRaw
TbDoTcpFault
TbDoTcpReply
TbDoTcpReq
TbDoTcpSendRecv
TbDoUdpReq
TbE_P16
TbE_P24
TbE_old_pw_hash
TbEmulateNT
TbEmulateSamba
TbEmulateVista
TbEmulateVista_64
TbEmulateW2K
TbEmulateW2K3SP0
TbEmulateW2K3SP1
TbEmulateW2K3_64
TbEmulateXPSP2
TbEmulateXP_64
TbEmulateXPpre2
TbFillUdpHdr
TbFinishSocket
TbFixSmbSecuritySignature
TbFreeStructBuffers
TbGet32BitJan70Time
TbGet32BitJan80Time
TbGetAllRpcServices
TbGetArg
TbGetAsnDerSize
TbGetAsnOid
TbGetAuth3
TbGetAuthTrailerTcp
TbGetAuthVSize
TbGetAuthVerifier
TbGetBindAckRpc
TbGetBindRpc
TbGetBuff
TbGetByte
TbGetCtxHand
TbGetCurrentTime
TbGetErrString
TbGetErrStringFromList
TbGetFaultHdr
TbGetFaultRpc
TbGetHyper
TbGetIfData
TbGetIpid
TbGetLangStringInfo
TbGetListHdr
TbGetLong
TbGetMgmt0Info
TbGetNSH
TbGetNetlogonAuthVerifier
TbGetNetlogonAuthVerifierSize
TbGetNtlmAuthVerifier
TbGetNtlmAuthVerifierSize
TbGetOxid
TbGetPointer
TbGetProtocolLegCount
TbGetReplyRpc
TbGetRequestRpc
TbGetRpcSize
TbGetSRpc
TbGetShort
TbGetSmbErrString
TbGetSmbHeader
TbGetSmbTransactionData
TbGetSmbTransactionParameters
TbGetSnegoAuthVerifier
TbGetSnegoAuthVerifierSize
TbGetSocketError
TbGetSocketErrorString
TbGetString
TbGetStringValue
TbGetSyntax
TbGetTcpStub
TbGetUdpHdr
TbGetUdpStub
TbGetUuid
TbGoodString
TbHandleNbtError
TbInitCrypto
TbInitNetlogonCrypto
TbInitNtlmCrypto
TbInitSnegoCrypto
TbInitStruct
TbLocateNpRpcPort
TbLocateRpcService
TbLocateTcpRpcPort
TbLocateUdpRpcPort
TbMakeAlterCtx
TbMakeAuth3
TbMakeAuthVerifier
TbMakeBind
TbMakeBindAck
TbMakeBindNak
TbMakeBlob1
TbMakeBlob2
TbMakeBlob3
TbMakeBlob4
TbMakeCancelForward
TbMakeCheckDirectory
TbMakeClose
TbMakeCloseAndTdisc
TbMakeClosePrint
TbMakeCopy
TbMakeCreate
TbMakeCreateDir
TbMakeCreateTemp
TbMakeDelete
TbMakeDeleteDirectory
TbMakeEcho
TbMakeFault
TbMakeFindClose2
TbMakeFindNotifyClose
TbMakeFlush
TbMakeForwardUserName
TbMakeGeneric
TbMakeGetPrintQueue
TbMakeIoctl
TbMakeIoctlSecondary
TbMakeLockByteRange
TbMakeLockingAndX
TbMakeLogoffAndX
TbMakeMove
TbMakeNbtSessionRequest
TbMakeNegotiate
TbMakeNetlogonAuthVerifier
TbMakeNetlogonBlob1
TbMakeNetlogonBlob2
TbMakeNetlogonBlob3
TbMakeNtCreateAndX
TbMakeNtExtSessionSetupAndX
TbMakeNtLockingAndX
TbMakeNtReadAndX
TbMakeNtReadRaw
TbMakeNtRename
TbMakeNtSessionSetupAndX
TbMakeNtTransact
TbMakeNtTransactSecondary
TbMakeNtWriteAndX
TbMakeNtWriteRaw
TbMakeNtlmAuthVerifier
TbMakeNtlmBlob1
TbMakeNtlmBlob2
TbMakeNtlmBlob3
TbMakeOpen
TbMakeOpenAndX
TbMakeOpenPrintFile
TbMakePeekNamedPipe
TbMakeQueryInformation
TbMakeQueryInformation2
TbMakeQueryInformationSrv
TbMakeRead
TbMakeReadAndX
TbMakeReadMpx
TbMakeReadRaw
TbMakeRemQIRequest
TbMakeRename
TbMakeSearch
TbMakeSeek
TbMakeSendEndMbMessage
TbMakeSendMessage
TbMakeSendStartMbMessage
TbMakeSendTextMbMessage
TbMakeServerSocket
TbMakeSessionSetupAndX
TbMakeSetInformation
TbMakeSetInformation2
TbMakeSmbHeader
TbMakeSnegoAuthVerifier
TbMakeSnegoBlob1
TbMakeSnegoBlob2
TbMakeSnegoBlob3
TbMakeSnegoBlob4
TbMakeSocket
TbMakeSysactRequest
TbMakeTcpReply
TbMakeTcpReq
TbMakeTransaction
TbMakeTransactionMailSlot
TbMakeTransactionNamedPipe
TbMakeTransactionRemApi
TbMakeTransactionSecondary
TbMakeTreeConnect
TbMakeTreeConnectAndX
TbMakeUNDHeader
TbMakeUdpFack
TbMakeUdpReq
TbMakeUdpResp
TbMakeUnlockByteRange
TbMakeWrite
TbMakeWrite103Raw
TbMakeWriteAndClose
TbMakeWriteAndCloseLong
TbMakeWriteAndX
TbMakeWriteMpx
TbMakeWriteMpxComplete
TbMakeWriteMpxSecondary
TbMakeWritePrintFile
TbMakeWriteRaw
TbMalloc
TbNTLMSSPOWFencrypt
TbNetlogonB1size
TbNetlogonB2size
TbNetlogonB3size
TbNlMakeCredential
TbNlMakeSessionKey
TbNlMakeWeakSessionKey
TbNtlmB1size
TbNtlmB2size
TbNtlmB3size
TbOutputBuffer
TbParseBlob1
TbParseBlob2
TbParseBlob3
TbParseBlob4
TbParseNegFlags
TbParseNetlogonBlob1
TbParseNetlogonBlob2
TbParseNetlogonBlob3
TbParseNtlmBlob1
TbParseNtlmBlob2
TbParseNtlmBlob3
TbParseRemQIResponse
TbParseSmbCaps
TbParseSmbFlag1
TbParseSmbFlag2
TbParseSmbNativeOS
TbParseSnegoBlob1
TbParseSnegoBlob2
TbParseSnegoBlob3
TbParseSysactResponse
TbPrintBlob2Info
TbPrintIfPtr
TbPrintNetlogonBlob2Info
TbPrintNtTransactResp
TbPrintNtlmBlob2Info
TbPrintSmbNtExtSessionSetupAndXResp
TbPrintSmbSessionSetupAndXResp
TbPrintSnegoBlob2Info
TbPrintSysActReplyData
TbPrintTowerInfo
TbPrintTransactionResp
TbPutARG
TbPutAlign
TbPutArg
TbPutAsnBerShortSize
TbPutAsnDerSize
TbPutAuth3
TbPutAuthTrailerTcp
TbPutAuthVerifier
TbPutBindAckRpc
TbPutBindRpc
TbPutBlob1
TbPutBlob2
TbPutBlob3
TbPutBlob4
TbPutBuff
TbPutBuffCyclic
TbPutByte
TbPutCTH
TbPutContexts
TbPutCtxHand
TbPutDSA
TbPutFackHdr
TbPutFault
TbPutHyper
TbPutIfPtr
TbPutIpid
TbPutListHdr
TbPutLocalThis
TbPutLong
TbPutNSH
TbPutNetlogonAuthVerifier
TbPutNetlogonBlob1
TbPutNetlogonBlob2
TbPutNtCreateX
TbPutNtReadX
TbPutNtWriteX
TbPutNtlmAuthVerifier
TbPutNtlmBlob1
TbPutNtlmBlob2
TbPutNtlmBlob3
TbPutOneArg
TbPutOrpcThat
TbPutOrpcThis
TbPutOxid
TbPutPadding
TbPutPointer
TbPutRequest
TbPutResponse
TbPutResult
TbPutRpcArray
TbPutRpcArrayWithMax
TbPutRpcAsciiString
TbPutRpcSize
TbPutRpcUniString
TbPutSRpc
TbPutShort
TbPutSmbHeader
TbPutSnegoAuthVerifier
TbPutSnegoBlob1
TbPutSnegoBlob2
TbPutSnegoBlob3
TbPutSnegoBlob4
TbPutStr
TbPutStrAsLEUni
TbPutString
TbPutSyntax
TbPutTransInfo
TbPutTransact
TbPutUNISTRContents
TbPutUNISTRHeader
TbPutUdpHdr
TbPutUdpNetbiosHeader
TbPutUniBuff
TbPutUuid
TbRc4Init40
TbReadSmbHeader
TbReadSmbIoctlResp
TbReadSmbNegOldResp
TbReadSmbNegResp
TbReadSmbNtCreateAndXResp
TbReadSmbNtExtSessionSetupAndXResp
TbReadSmbNtNegResp
TbReadSmbNtTransactResp
TbReadSmbPeekResp
TbReadSmbReadAndXResp
TbReadSmbReadMpxResp
TbReadSmbReadResp
TbReadSmbSessionSetupAndXResp
TbReadSmbTransactionResp
TbReadSmbTreeConnectAndXResp
TbReadSmbTreeConnectResp
TbReadSmbWriteAndXResp
TbReadSmbWriteRawResp
TbReadSmbWriteResp
TbRealloc
TbRecv
TbRecvFrom
TbRecvSmb
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/tibe-2.dll.dll windows:5 windows x86 arch:x86
bf232b241eab6d3f1724ea6a36af0cbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
SystemTimeToFileTime
GetSystemTime
FormatMessageA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
trfo-2
TfCrc32
TfRc4Init
TfRc4Encrypt
TfMd4
TfMd5Init
TfMd5Update
TfMd5Final
TfHmacMd5Init
TfHmacMd5Update
TfHmacMd5Final
ws2_32
ntohs
ntohl
htons
inet_addr
WSAStartup
WSACleanup
accept
closesocket
ioctlsocket
WSAGetLastError
send
sendto
recv
select
recvfrom
WSASetLastError
connect
listen
getsockname
bind
socket
setsockopt
htonl
inet_ntoa
msvcrt
strchr
toupper
memcpy
memset
memcmp
strlen
strcmp
sscanf
strcpy
atoi
strncpy
strcat
_snprintf
strncmp
islower
strncat
srand
free
malloc
realloc
rand
gmtime
mktime
tolower
sprintf
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
time
Exports
Exports
TbAddInterfacePointer
TbAddSnegoAuthType
TbAsnOidToBytes
TbB1size
TbB2size
TbB3size
TbB4size
TbBuffCat
TbBuffCpy
TbBuffnCat
TbBuildKerbApReply
TbBuildKerbApReq
TbBuildKerbAsReq
TbBuildKerbTgsReq
TbBytesToAsnOid
TbCatUniBuff
TbCheckActid
TbCheckSecuritySignature
TbCleanAuthBlob1
TbCleanAuthBlob2
TbCleanAuthBlob3
TbCleanAuthBlob4
TbCleanDirListContents
TbCleanIdInfo
TbCleanInfoStruct
TbCleanJobListDescription
TbCleanKerbAuthInfo
TbCleanSB
TbCleanSnegoAuthInfo
TbCleanSnegoBlob1
TbCleanSnegoBlob2
TbCleanSnegoBlob3
TbCleanSnegoBlob4
TbClearSmbAuthInfo
TbCloseListenSocket
TbCloseSocket
TbCloseStructSockets
TbComputeUtf8Len
TbConnectNonblocking
TbConvAreYouThere_makeresp
TbConvWhoAreYou2_makeresp
TbConvWhoAreYouAuthMore_makeresp
TbConvWhoAreYouAuth_makeresp
TbConvWhoAreYou_makeresp
TbConvWhoAreYou_parserequest
TbConvertTimeStringToFileTime
TbCopyBuffStrToUniBuffStr
TbCopyRemoteInfoToDest
TbCopySizedBuffer
TbCreateActid
TbCreateInfoStruct
TbCreateNonzeroPointer
TbD_P16
TbDealWithAlterContext
TbDealWithAuth3
TbDealWithBind
TbDealWithDecryption
TbDealWithEncryption
TbDealWithNetlogonDecryption
TbDealWithNetlogonEncryption
TbDealWithNtlmDecryption
TbDealWithNtlmEncryption
TbDealWithSnegoDecryption
TbDealWithSnegoEncryption
TbDealWithTcpReq
TbDeleteFileA
TbDeleteFileU
TbDesDecrypt8
TbDesEncrypt8
TbDisplayJobList
TbDoAuth3
TbDoBind
TbDoCoCreateInstance
TbDoCoCreateInstance2
TbDoGetClassObject
TbDoGetClassObject2
TbDoHttpStartup
TbDoKerbAsRequestReply
TbDoKerbTgsRequestReply
TbDoNbtSessionRequest
TbDoNetlogonAuth
TbDoRegQueryHklmKey
TbDoRegQueryHklmKeyU
TbDoRegQueryHklmValue
TbDoRegQueryHklmValueU
TbDoRegQueryUsersKey
TbDoRegQueryUsersKeyU
TbDoRegQueryUsersValue
TbDoRegQueryUsersValueU
TbDoRemQI
TbDoRemoteJobAddA
TbDoRemoteJobAddU
TbDoRemoteJobDel
TbDoRemoteJobsEnum
TbDoRemoteTOD
TbDoRpcBind
TbDoRpcBindEx
TbDoRpcRequest
TbDoRpcRequestEx
TbDoSmbCancelForward
TbDoSmbChangePipe
TbDoSmbChangeShare
TbDoSmbCheckDirectory
TbDoSmbClose
TbDoSmbCloseAndTdisc
TbDoSmbClosePrint
TbDoSmbCopy
TbDoSmbCreate
TbDoSmbCreateDir
TbDoSmbCreateNew
TbDoSmbCreateTemp
TbDoSmbDelete
TbDoSmbDeleteDirectory
TbDoSmbEcho
TbDoSmbFind
TbDoSmbFindClose
TbDoSmbFindClose2
TbDoSmbFindNotifyClose
TbDoSmbFindUnique
TbDoSmbFlush
TbDoSmbForwardUserName
TbDoSmbGeneric
TbDoSmbGetMachineName
TbDoSmbGetPrintQueue
TbDoSmbHalfNtExtSessionSetupAndX
TbDoSmbIoctl
TbDoSmbIoctlSecondary
TbDoSmbLockAndRead
TbDoSmbLockByteRange
TbDoSmbLockingAndX
TbDoSmbLogoffAndX
TbDoSmbMove
TbDoSmbNegotiate
TbDoSmbNtCancel
TbDoSmbNtCreateAndX
TbDoSmbNtExtSessionSetupAndX
TbDoSmbNtLockingAndX
TbDoSmbNtReadAndX
TbDoSmbNtReadRaw
TbDoSmbNtRename
TbDoSmbNtSessionSetupAndX
TbDoSmbNtTransact
TbDoSmbNtTransactSecondary
TbDoSmbNtWriteAndX
TbDoSmbNtWriteRaw
TbDoSmbOpen
TbDoSmbOpenAndX
TbDoSmbOpenPrintFile
TbDoSmbPacket
TbDoSmbPeekNamedPipe
TbDoSmbProcessExit
TbDoSmbQueryInformation
TbDoSmbQueryInformation2
TbDoSmbQueryInformationDisk
TbDoSmbQueryInformationSrv
TbDoSmbRead
TbDoSmbReadAndX
TbDoSmbReadMpx
TbDoSmbReadRaw
TbDoSmbRecvData
TbDoSmbRename
TbDoSmbSearch
TbDoSmbSeek
TbDoSmbSendBroadcastMessage
TbDoSmbSendData
TbDoSmbSendEndMbMessage
TbDoSmbSendMessage
TbDoSmbSendStartMbMessage
TbDoSmbSendTextMbMessage
TbDoSmbSessionSetupAndX
TbDoSmbSetInformation
TbDoSmbSetInformation2
TbDoSmbShutdown
TbDoSmbStartup
TbDoSmbStartupEx
TbDoSmbTransactRemApi
TbDoSmbTransaction
TbDoSmbTransaction2
TbDoSmbTransaction2Secondary
TbDoSmbTransactionMailslot
TbDoSmbTransactionNamedPipe
TbDoSmbTransactionSecondary
TbDoSmbTreeConnect
TbDoSmbTreeConnectAndX
TbDoSmbTreeDisconnect
TbDoSmbUnlockByteRange
TbDoSmbWrite
TbDoSmbWrite103Raw
TbDoSmbWriteAndClose
TbDoSmbWriteAndCloseLong
TbDoSmbWriteAndUnlock
TbDoSmbWriteAndX
TbDoSmbWriteMpx
TbDoSmbWriteMpxComplete
TbDoSmbWriteMpxSecondary
TbDoSmbWritePrintFile
TbDoSmbWriteRaw
TbDoTcpFault
TbDoTcpReply
TbDoTcpReq
TbDoTcpSendRecv
TbDoUdpReq
TbE_P16
TbE_P24
TbE_old_pw_hash
TbEmulateNT
TbEmulateSamba
TbEmulateVista
TbEmulateVista_64
TbEmulateW2K
TbEmulateW2K3SP0
TbEmulateW2K3SP1
TbEmulateW2K3_64
TbEmulateXPSP2
TbEmulateXP_64
TbEmulateXPpre2
TbFileTimeToSystemTime
TbFillMechOidBuffer
TbFillUdpHdr
TbFinishSocket
TbFixSmbSecuritySignature
TbFreeInt
TbFreeStructBuffers
TbGet32BitJan70Time
TbGet32BitJan80Time
TbGetAllRpcServices
TbGetArg
TbGetAsnDerSize
TbGetAsnOid
TbGetAuth3
TbGetAuthTrailerTcp
TbGetAuthVSize
TbGetAuthVerifier
TbGetBindAckRpc
TbGetBindRpc
TbGetBuff
TbGetBuff2
TbGetByte
TbGetCtxHand
TbGetCurrentTime
TbGetDirectoryListingA
TbGetDirectoryListingU
TbGetErrString
TbGetErrStringFromList
TbGetFaultHdr
TbGetFaultRpc
TbGetHyper
TbGetHyperAligned
TbGetIfData
TbGetIpid
TbGetKerbAuthInfo
TbGetKerberosTicket
TbGetLangStringInfo
TbGetLastKerbError
TbGetListHdr
TbGetListenSocket
TbGetLong
TbGetLongAligned
TbGetMgmt0Info
TbGetMicroseconds
TbGetNSH
TbGetNetlogonAuthItems
TbGetNetlogonAuthVerifier
TbGetNetlogonAuthVerifierSize
TbGetNtlmAuthVerifier
TbGetNtlmAuthVerifierSize
TbGetNtlmInitNegFlags
TbGetNtlmResultNegFlags
TbGetOxid
TbGetPointer
TbGetPointerAligned
TbGetProtocolLegCount
TbGetRemoteIdInfo
TbGetRemoteTime
TbGetReplyRpc
TbGetRequestRpc
TbGetResponseBuffer
TbGetRpcArray
TbGetRpcArrayWithMax
TbGetRpcAsciiString
TbGetRpcSize
TbGetRpcUniString
TbGetSRpc
TbGetSessionKey
TbGetShort
TbGetShortAligned
TbGetSmbErrString
TbGetSmbExtendedSecurityFlag
TbGetSmbHeader
TbGetSmbLocalInfo
TbGetSmbRemoteInfo
TbGetSmbTransactionData
TbGetSmbTransactionParameters
TbGetSnegoAuthInfo
TbGetSnegoAuthVerifier
TbGetSnegoAuthVerifierSize
TbGetSocket
TbGetSocketError
TbGetSocketErrorString
TbGetString
TbGetStringValue
TbGetStubBuffer
TbGetSyntax
TbGetTcpRecvCt
TbGetTcpSendCt
TbGetTcpStub
TbGetTextTimeString
TbGetTimeString
TbGetTimeout
TbGetUdpHdr
TbGetUdpStub
TbGetUuid
TbGoodString
TbHandleNbtError
TbInitCrypto
TbInitNetlogonCrypto
TbInitNtlmCrypto
TbInitSnegoCrypto
TbInitStruct
TbLocateNpRpcPort
TbLocateRpcService
TbLocateTcpRpcPort
TbLocateUdpRpcPort
TbMakeAlterCtx
TbMakeAuth3
TbMakeAuthVerifier
TbMakeBind
TbMakeBindAck
TbMakeBindNak
TbMakeBlob1
TbMakeBlob2
TbMakeBlob3
TbMakeBlob4
TbMakeCancelForward
TbMakeCheckDirectory
TbMakeClose
TbMakeCloseAndTdisc
TbMakeClosePrint
TbMakeCopy
TbMakeCreate
TbMakeCreateDir
TbMakeCreateTemp
TbMakeDelete
TbMakeDeleteDirectory
TbMakeEcho
TbMakeFault
TbMakeFindClose2
TbMakeFindNotifyClose
TbMakeFlush
TbMakeForwardUserName
TbMakeGeneric
TbMakeGetPrintQueue
TbMakeIoctl
TbMakeIoctlSecondary
TbMakeLockByteRange
TbMakeLockingAndX
TbMakeLogoffAndX
TbMakeMove
TbMakeNbtSessionRequest
TbMakeNegotiate
TbMakeNetlogonAuthVerifier
TbMakeNetlogonBlob1
TbMakeNetlogonBlob2
TbMakeNetlogonBlob3
TbMakeNtCreateAndX
TbMakeNtExtSessionSetupAndX
TbMakeNtLockingAndX
TbMakeNtReadAndX
TbMakeNtReadRaw
TbMakeNtRename
TbMakeNtSessionSetupAndX
TbMakeNtTransact
TbMakeNtTransactSecondary
TbMakeNtWriteAndX
TbMakeNtWriteRaw
TbMakeNtlmAuthVerifier
TbMakeNtlmBlob1
TbMakeNtlmBlob2
TbMakeNtlmBlob3
TbMakeOpen
TbMakeOpenAndX
TbMakeOpenPrintFile
TbMakePeekNamedPipe
TbMakeQueryInformation
TbMakeQueryInformation2
TbMakeQueryInformationSrv
TbMakeRead
TbMakeReadAndX
TbMakeReadMpx
TbMakeReadRaw
TbMakeRemQIRequest
TbMakeRename
TbMakeSearch
TbMakeSeek
TbMakeSendEndMbMessage
TbMakeSendMessage
TbMakeSendStartMbMessage
TbMakeSendTextMbMessage
TbMakeServerSocket
TbMakeSessionSetupAndX
TbMakeSetInformation
TbMakeSetInformation2
TbMakeSmbHeader
TbMakeSnegoAuthVerifier
TbMakeSnegoBlob1
TbMakeSnegoBlob2
TbMakeSnegoBlob3
TbMakeSnegoBlob4
TbMakeSocket
TbMakeSocketPair
TbMakeSysactRequest
TbMakeTcpReply
TbMakeTcpReq
TbMakeTransaction
TbMakeTransactionMailSlot
TbMakeTransactionNamedPipe
TbMakeTransactionRemApi
TbMakeTransactionSecondary
TbMakeTreeConnect
TbMakeTreeConnectAndX
TbMakeUNDHeader
TbMakeUdpFack
TbMakeUdpReq
TbMakeUdpResp
TbMakeUnlockByteRange
TbMakeWrite
TbMakeWrite103Raw
TbMakeWriteAndClose
TbMakeWriteAndCloseLong
TbMakeWriteAndX
TbMakeWriteMpx
TbMakeWriteMpxComplete
TbMakeWriteMpxSecondary
TbMakeWritePrintFile
TbMakeWriteRaw
TbMalloc
TbMatchMechOid
TbNTLMSSPOWFencrypt
TbNetlogonB1size
TbNetlogonB2size
TbNetlogonB3size
TbNlMakeCredential
TbNlMakeSessionKey
TbNlMakeWeakSessionKey
TbNtlmB1size
TbNtlmB2size
TbNtlmB3size
TbOutputBuffer
TbParseBlob1
TbParseBlob2
TbParseBlob3
TbParseBlob4
TbParseKerbBlob
TbParseKerbTicketBlob
TbParseNegFlags
TbParseNetlogonBlob1
TbParseNetlogonBlob2
TbParseNetlogonBlob3
TbParseNtlmBlob1
TbParseNtlmBlob2
TbParseNtlmBlob3
TbParseRemQIResponse
TbParseSmbCaps
TbParseSmbFlag1
TbParseSmbFlag2
TbParseSmbNativeOS
TbParseSnegoBlob1
TbParseSnegoBlob2
TbParseSnegoBlob3
TbParseSysactResponse
TbPrintAsnTree
TbPrintAsnTreeNodes
TbPrintBlob2Info
TbPrintIfPtr
TbPrintNetlogonBlob2Info
TbPrintNtTransactResp
TbPrintNtlmBlob2Info
TbPrintSmbNtExtSessionSetupAndXResp
TbPrintSmbSessionSetupAndXResp
TbPrintSnegoBlob2Info
TbPrintSysActReplyData
TbPrintTOD
TbPrintTowerInfo
TbPrintTransactionResp
TbPutARG
TbPutAlign
TbPutArg
TbPutAsnBerShortSize
TbPutAsnDerSize
TbPutAuth3
TbPutAuthTrailerTcp
TbPutAuthVerifier
TbPutBindAckRpc
TbPutBindRpc
TbPutBlob1
TbPutBlob2
TbPutBlob3
TbPutBlob4
TbPutBuff
TbPutBuffCyclic
Sections
.text Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/tibe.dll.dll windows:4 windows x86 arch:x86
b8d8296e73d3c629533f993549af998f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
ioctlsocket
WSAGetLastError
recv
send
sendto
WSACleanup
WSAStartup
htons
ntohl
ntohs
inet_ntoa
accept
listen
socket
setsockopt
bind
connect
WSASetLastError
recvfrom
select
closesocket
htonl
trfo
TfCrc32
TfMd4
TfRc4Init
TfRc4Encrypt
TfMd5Init
TfMd5Update
TfMd5Final
TfHmacMd5Init
TfHmacMd5Update
TfHmacMd5Final
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DisableThreadLibraryCalls
FormatMessageA
GetSystemTime
SystemTimeToFileTime
Sleep
msvcr71
sscanf
_except_handler3
__security_error_handler
tolower
srand
mktime
gmtime
realloc
malloc
fprintf
fflush
strncat
_iob
islower
_snprintf
strncmp
strchr
_onexit
__dllonexit
__CppXcptFilter
_adjust_fdiv
strncpy
atoi
free
time
_initterm
rand
toupper
sprintf
Exports
Exports
TbAddInterfacePointer
TbAsnOidToBytes
TbB1size
TbB2size
TbB3size
TbB4size
TbBuffCat
TbBuffCpy
TbBuffnCat
TbBytesToAsnOid
TbCatUniBuff
TbCheckActid
TbCheckSecuritySignature
TbCleanSB
TbCloseSocket
TbCloseStructSockets
TbComputeUtf8Len
TbConnectNonblocking
TbConvAreYouThere_makeresp
TbConvWhoAreYou2_makeresp
TbConvWhoAreYouAuthMore_makeresp
TbConvWhoAreYouAuth_makeresp
TbConvWhoAreYou_makeresp
TbConvWhoAreYou_parserequest
TbCopyBuffStrToUniBuffStr
TbCopyRemoteDomainInfoToLocal
TbCreateActid
TbCreateNonzeroPointer
TbD_P16
TbDealWithAlterContext
TbDealWithAuth3
TbDealWithBind
TbDealWithDecryption
TbDealWithEncryption
TbDealWithNetlogonDecryption
TbDealWithNetlogonEncryption
TbDealWithNtlmDecryption
TbDealWithNtlmEncryption
TbDealWithSnegoDecryption
TbDealWithSnegoEncryption
TbDealWithTcpReq
TbDesDecrypt8
TbDesEncrypt8
TbDoAuth3
TbDoBind
TbDoCoCreateInstance
TbDoCoCreateInstance2
TbDoGetClassObject
TbDoGetClassObject2
TbDoHttpStartup
TbDoNbtSessionRequest
TbDoNetlogonAuth
TbDoRegQueryHklmKey
TbDoRegQueryHklmValue
TbDoRegQueryUsersKey
TbDoRegQueryUsersValue
TbDoRemQI
TbDoRpcBind
TbDoRpcBindEx
TbDoRpcRequest
TbDoRpcRequestEx
TbDoSmbCancelForward
TbDoSmbChangePipe
TbDoSmbChangeShare
TbDoSmbCheckDirectory
TbDoSmbClose
TbDoSmbCloseAndTdisc
TbDoSmbClosePrint
TbDoSmbCopy
TbDoSmbCreate
TbDoSmbCreateDir
TbDoSmbCreateNew
TbDoSmbCreateTemp
TbDoSmbDelete
TbDoSmbDeleteDirectory
TbDoSmbEcho
TbDoSmbFind
TbDoSmbFindClose
TbDoSmbFindClose2
TbDoSmbFindNotifyClose
TbDoSmbFindUnique
TbDoSmbFlush
TbDoSmbForwardUserName
TbDoSmbGeneric
TbDoSmbGetMachineName
TbDoSmbGetPrintQueue
TbDoSmbHalfNtExtSessionSetupAndX
TbDoSmbIoctl
TbDoSmbIoctlSecondary
TbDoSmbLockAndRead
TbDoSmbLockByteRange
TbDoSmbLockingAndX
TbDoSmbLogoffAndX
TbDoSmbMove
TbDoSmbNegotiate
TbDoSmbNtCancel
TbDoSmbNtCreateAndX
TbDoSmbNtExtSessionSetupAndX
TbDoSmbNtLockingAndX
TbDoSmbNtReadAndX
TbDoSmbNtReadRaw
TbDoSmbNtRename
TbDoSmbNtSessionSetupAndX
TbDoSmbNtTransact
TbDoSmbNtTransactSecondary
TbDoSmbNtWriteAndX
TbDoSmbNtWriteRaw
TbDoSmbOpen
TbDoSmbOpenAndX
TbDoSmbOpenPrintFile
TbDoSmbPacket
TbDoSmbPeekNamedPipe
TbDoSmbProcessExit
TbDoSmbQueryInformation
TbDoSmbQueryInformation2
TbDoSmbQueryInformationDisk
TbDoSmbQueryInformationSrv
TbDoSmbRead
TbDoSmbReadAndX
TbDoSmbReadMpx
TbDoSmbReadRaw
TbDoSmbRecvData
TbDoSmbRename
TbDoSmbSearch
TbDoSmbSeek
TbDoSmbSendBroadcastMessage
TbDoSmbSendData
TbDoSmbSendEndMbMessage
TbDoSmbSendMessage
TbDoSmbSendStartMbMessage
TbDoSmbSendTextMbMessage
TbDoSmbSessionSetupAndX
TbDoSmbSetInformation
TbDoSmbSetInformation2
TbDoSmbShutdown
TbDoSmbStartup
TbDoSmbStartupEx
TbDoSmbTransactRemApi
TbDoSmbTransaction
TbDoSmbTransaction2
TbDoSmbTransaction2Secondary
TbDoSmbTransactionMailslot
TbDoSmbTransactionNamedPipe
TbDoSmbTransactionSecondary
TbDoSmbTreeConnect
TbDoSmbTreeConnectAndX
TbDoSmbTreeDisconnect
TbDoSmbUnlockByteRange
TbDoSmbWrite
TbDoSmbWrite103Raw
TbDoSmbWriteAndClose
TbDoSmbWriteAndCloseLong
TbDoSmbWriteAndUnlock
TbDoSmbWriteAndX
TbDoSmbWriteMpx
TbDoSmbWriteMpxComplete
TbDoSmbWriteMpxSecondary
TbDoSmbWritePrintFile
TbDoSmbWriteRaw
TbDoTcpFault
TbDoTcpReply
TbDoTcpReq
TbDoTcpSendRecv
TbDoUdpReq
TbE_P16
TbE_P24
TbE_old_pw_hash
TbEmulateNT
TbEmulateSamba
TbEmulateVista
TbEmulateVista_64
TbEmulateW2K
TbEmulateW2K3SP0
TbEmulateW2K3SP1
TbEmulateW2K3_64
TbEmulateXPSP2
TbEmulateXP_64
TbEmulateXPpre2
TbFillUdpHdr
TbFinishSocket
TbFixSmbSecuritySignature
TbFreeStructBuffers
TbGet32BitJan70Time
TbGet32BitJan80Time
TbGetAllRpcServices
TbGetArg
TbGetAsnDerSize
TbGetAsnOid
TbGetAuth3
TbGetAuthTrailerTcp
TbGetAuthVSize
TbGetAuthVerifier
TbGetBindAckRpc
TbGetBindRpc
TbGetBuff
TbGetByte
TbGetCtxHand
TbGetCurrentTime
TbGetErrString
TbGetErrStringFromList
TbGetFaultHdr
TbGetFaultRpc
TbGetHyper
TbGetIfData
TbGetIpid
TbGetLangStringInfo
TbGetListHdr
TbGetLong
TbGetMgmt0Info
TbGetNSH
TbGetNetlogonAuthVerifier
TbGetNetlogonAuthVerifierSize
TbGetNtlmAuthVerifier
TbGetNtlmAuthVerifierSize
TbGetOxid
TbGetPointer
TbGetProtocolLegCount
TbGetReplyRpc
TbGetRequestRpc
TbGetRpcSize
TbGetSRpc
TbGetShort
TbGetSmbErrString
TbGetSmbHeader
TbGetSmbTransactionData
TbGetSmbTransactionParameters
TbGetSnegoAuthVerifier
TbGetSnegoAuthVerifierSize
TbGetSocketError
TbGetSocketErrorString
TbGetString
TbGetStringValue
TbGetSyntax
TbGetTcpStub
TbGetUdpHdr
TbGetUdpStub
TbGetUuid
TbGetUuid64BitTime
TbGoodString
TbHandleNbtError
TbInitCrypto
TbInitNetlogonCrypto
TbInitNtlmCrypto
TbInitSnegoCrypto
TbInitStruct
TbInitializeRandSeed
TbLocateNpRpcPort
TbLocateRpcService
TbLocateTcpRpcPort
TbLocateUdpRpcPort
TbMakeAlterCtx
TbMakeAuth3
TbMakeAuthVerifier
TbMakeBind
TbMakeBindAck
TbMakeBindNak
TbMakeBlob1
TbMakeBlob2
TbMakeBlob3
TbMakeBlob4
TbMakeCancelForward
TbMakeCheckDirectory
TbMakeClose
TbMakeCloseAndTdisc
TbMakeClosePrint
TbMakeCopy
TbMakeCreate
TbMakeCreateDir
TbMakeCreateTemp
TbMakeDelete
TbMakeDeleteDirectory
TbMakeEcho
TbMakeFault
TbMakeFindClose2
TbMakeFindNotifyClose
TbMakeFlush
TbMakeForwardUserName
TbMakeGeneric
TbMakeGetPrintQueue
TbMakeIoctl
TbMakeIoctlSecondary
TbMakeLockByteRange
TbMakeLockingAndX
TbMakeLogoffAndX
TbMakeMove
TbMakeNbtSessionRequest
TbMakeNegotiate
TbMakeNetlogonAuthVerifier
TbMakeNetlogonBlob1
TbMakeNetlogonBlob2
TbMakeNetlogonBlob3
TbMakeNtCreateAndX
TbMakeNtExtSessionSetupAndX
TbMakeNtLockingAndX
TbMakeNtReadAndX
TbMakeNtReadRaw
TbMakeNtRename
TbMakeNtSessionSetupAndX
TbMakeNtTransact
TbMakeNtTransactSecondary
TbMakeNtWriteAndX
TbMakeNtWriteRaw
TbMakeNtlmAuthVerifier
TbMakeNtlmBlob1
TbMakeNtlmBlob2
TbMakeNtlmBlob3
TbMakeOpen
TbMakeOpenAndX
TbMakeOpenPrintFile
TbMakePeekNamedPipe
TbMakeQueryInformation
TbMakeQueryInformation2
TbMakeQueryInformationSrv
TbMakeRead
TbMakeReadAndX
TbMakeReadMpx
TbMakeReadRaw
TbMakeRemQIRequest
TbMakeRename
TbMakeSearch
TbMakeSeek
TbMakeSendEndMbMessage
TbMakeSendMessage
TbMakeSendStartMbMessage
TbMakeSendTextMbMessage
TbMakeServerSocket
TbMakeSessionSetupAndX
TbMakeSetInformation
TbMakeSetInformation2
TbMakeSmbHeader
TbMakeSnegoAuthVerifier
TbMakeSnegoBlob1
TbMakeSnegoBlob2
TbMakeSnegoBlob3
TbMakeSnegoBlob4
TbMakeSocket
TbMakeSysactRequest
TbMakeTcpReply
TbMakeTcpReq
TbMakeTransaction
TbMakeTransactionMailSlot
TbMakeTransactionNamedPipe
TbMakeTransactionRemApi
TbMakeTransactionSecondary
TbMakeTreeConnect
TbMakeTreeConnectAndX
TbMakeUNDHeader
TbMakeUdpFack
TbMakeUdpReq
TbMakeUdpResp
TbMakeUnlockByteRange
TbMakeWrite
TbMakeWrite103Raw
TbMakeWriteAndClose
TbMakeWriteAndCloseLong
TbMakeWriteAndX
TbMakeWriteMpx
TbMakeWriteMpxComplete
TbMakeWriteMpxSecondary
TbMakeWritePrintFile
TbMakeWriteRaw
TbMalloc
TbNTLMSSPOWFencrypt
TbNetlogonB1size
TbNetlogonB2size
TbNetlogonB3size
TbNlMakeCredential
TbNlMakeSessionKey
TbNlMakeWeakSessionKey
TbNtlmB1size
TbNtlmB2size
TbNtlmB3size
TbOutputBuffer
TbParseBlob1
TbParseBlob2
TbParseBlob3
TbParseBlob4
TbParseNegFlags
TbParseNetlogonBlob1
TbParseNetlogonBlob2
TbParseNetlogonBlob3
TbParseNtlmBlob1
TbParseNtlmBlob2
TbParseNtlmBlob3
TbParseRemQIResponse
TbParseSmbCaps
TbParseSmbFlag1
TbParseSmbFlag2
TbParseSmbNativeOS
TbParseSnegoBlob1
TbParseSnegoBlob2
TbParseSnegoBlob3
TbParseSysactResponse
TbPrintBlob2Info
TbPrintIfPtr
TbPrintNetlogonBlob2Info
TbPrintNtTransactResp
TbPrintNtlmBlob2Info
TbPrintSmbNtExtSessionSetupAndXResp
TbPrintSmbSessionSetupAndXResp
TbPrintSnegoBlob2Info
TbPrintSysActReplyData
TbPrintTowerInfo
TbPrintTransactionResp
TbPutARG
TbPutAlign
TbPutArg
TbPutAsnBerShortSize
TbPutAsnDerSize
TbPutAuth3
TbPutAuthTrailerTcp
TbPutAuthVerifier
TbPutBindAckRpc
TbPutBindRpc
TbPutBlob1
TbPutBlob2
TbPutBlob3
TbPutBlob4
TbPutBuff
TbPutBuffCyclic
TbPutByte
TbPutCTH
TbPutContexts
TbPutCtxHand
TbPutDSA
TbPutFackHdr
TbPutFault
TbPutHyper
TbPutIfPtr
TbPutIpid
TbPutListHdr
TbPutLocalThis
TbPutLong
TbPutNSH
TbPutNetlogonAuthVerifier
TbPutNetlogonBlob1
TbPutNetlogonBlob2
TbPutNtCreateX
TbPutNtReadX
TbPutNtWriteX
TbPutNtlmAuthVerifier
TbPutNtlmBlob1
TbPutNtlmBlob2
TbPutNtlmBlob3
TbPutOneArg
TbPutOrpcThat
TbPutOrpcThis
TbPutOxid
TbPutPadding
TbPutPointer
TbPutRequest
TbPutResponse
TbPutResult
TbPutRpcArray
TbPutRpcArrayWithMax
TbPutRpcAsciiString
TbPutRpcSize
TbPutRpcUniString
TbPutSRpc
TbPutShort
TbPutSmbHeader
TbPutSnegoAuthVerifier
TbPutSnegoBlob1
TbPutSnegoBlob2
TbPutSnegoBlob3
TbPutSnegoBlob4
TbPutStr
TbPutStrAsLEUni
TbPutString
TbPutSyntax
TbPutTransInfo
TbPutTransact
TbPutUNISTRContents
TbPutUNISTRHeader
TbPutUdpHdr
TbPutUdpNetbiosHeader
TbPutUniBuff
TbPutUuid
TbRc4Init40
TbReadSmbHeader
TbReadSmbIoctlResp
TbReadSmbNegOldResp
TbReadSmbNegResp
TbReadSmbNtCreateAndXResp
TbReadSmbNtExtSessionSetupAndXResp
TbReadSmbNtNegResp
TbReadSmbNtTransactResp
TbReadSmbPeekResp
TbReadSmbReadAndXResp
TbReadSmbReadMpxResp
TbReadSmbReadResp
TbReadSmbSessionSetupAndXResp
TbReadSmbTransactionResp
TbReadSmbTreeConnectAndXResp
TbReadSmbTreeConnectResp
TbReadSmbWriteAndXResp
TbReadSmbWriteRawResp
TbReadSmbWriteResp
TbRealloc
TbRecv
Sections
.text Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/trch-0.dll.dll windows:4 windows x86 arch:x86
9275408cb68bb6751faa4933679e970e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
libxml2
xmlCleanupParser
xmlFreeMutex
xmlInitParser
xmlFree
xmlStrcmp
xmlGetProp
xmlMutexUnlock
xmlFreeDoc
xmlSearchNsByHref
xmlDocGetRootElement
xmlParseMemory
xmlMutexLock
xmlNewMutex
tucl-1
TcLog
ws2_32
inet_addr
msvcrt
free
calloc
strspn
strcspn
_access
realloc
malloc
sprintf
strncmp
strtol
tolower
memmove
strtoul
strncpy
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_errno
Exports
Exports
Boolean_List_marshal
Boolean_marshal
Boolean_type
Config_create
Config_delete
Config_duplicate
Config_getID
Config_getInputParams
Config_getOutputParams
Config_marshal
Config_printUsage
Config_setInputParams
Config_setOutputParams
Config_unmarshal
FinalizeXMLUnmarshal
IPv4_List_marshal
IPv4_marshal
IPv4_type
InitializeXMLUnmarshal
List_format
LocalFile_List_marshal
LocalFile_marshal
LocalFile_type
Paramchoice_addParamgroup
Paramchoice_create
Paramchoice_delete
Paramchoice_getDefaultValue
Paramchoice_getDescription
Paramchoice_getName
Paramchoice_getNumParamgroups
Paramchoice_getParamgroup
Paramchoice_getValue
Paramchoice_hasValidValue
Paramchoice_hasValue
Paramchoice_isValid
Paramchoice_matchName
Paramchoice_setValue
Parameter_Boolean_List_create
Parameter_Boolean_List_getSize
Parameter_Boolean_List_getValue
Parameter_Boolean_List_setValue
Parameter_Boolean_create
Parameter_Boolean_getValue
Parameter_Boolean_setValue
Parameter_IPv4_List_create
Parameter_IPv4_List_getSize
Parameter_IPv4_List_getValue
Parameter_IPv4_List_setValue
Parameter_IPv4_create
Parameter_IPv4_getValue
Parameter_IPv4_setValue
Parameter_LocalFile_List_create
Parameter_LocalFile_List_getSize
Parameter_LocalFile_List_getValue
Parameter_LocalFile_List_setValue
Parameter_LocalFile_create
Parameter_LocalFile_getValue
Parameter_LocalFile_setValue
Parameter_Port_List_getSize
Parameter_Port_List_getValue
Parameter_Port_List_setValue
Parameter_Port_getValue
Parameter_Port_setValue
Parameter_S16_List_create
Parameter_S16_List_getSize
Parameter_S16_List_getValue
Parameter_S16_List_setValue
Parameter_S16_create
Parameter_S16_getValue
Parameter_S16_setValue
Parameter_S32_List_create
Parameter_S32_List_getSize
Parameter_S32_List_getValue
Parameter_S32_List_setValue
Parameter_S32_create
Parameter_S32_getValue
Parameter_S32_setValue
Parameter_S8_List_create
Parameter_S8_List_getSize
Parameter_S8_List_getValue
Parameter_S8_List_setValue
Parameter_S8_create
Parameter_S8_getValue
Parameter_S8_setValue
Parameter_Socket_List_create
Parameter_Socket_List_getSize
Parameter_Socket_List_getValue
Parameter_Socket_List_setValue
Parameter_Socket_create
Parameter_Socket_getValue
Parameter_Socket_setValue
Parameter_String_List_create
Parameter_String_List_getSize
Parameter_String_List_getValue
Parameter_String_List_setValue
Parameter_String_create
Parameter_String_getValue
Parameter_String_setValue
Parameter_TcpPort_List_create
Parameter_TcpPort_create
Parameter_U16_List_create
Parameter_U16_List_getSize
Parameter_U16_List_getValue
Parameter_U16_List_setValue
Parameter_U16_create
Parameter_U16_getValue
Parameter_U16_setValue
Parameter_U32_List_create
Parameter_U32_List_getSize
Parameter_U32_List_getValue
Parameter_U32_List_setValue
Parameter_U32_create
Parameter_U32_getValue
Parameter_U32_setValue
Parameter_U8_List_create
Parameter_U8_List_getSize
Parameter_U8_List_getValue
Parameter_U8_List_setValue
Parameter_U8_create
Parameter_U8_getValue
Parameter_U8_setValue
Parameter_UString_List_create
Parameter_UString_List_getSize
Parameter_UString_List_getValue
Parameter_UString_List_setValue
Parameter_UString_create
Parameter_UString_getValue
Parameter_UString_setValue
Parameter_UdpPort_List_create
Parameter_UdpPort_create
Parameter_delete
Parameter_getDescription
Parameter_getFormat
Parameter_getMarshalledDefault
Parameter_getMarshalledValue
Parameter_getName
Parameter_getType
Parameter_hasValidValue
Parameter_hasValue
Parameter_hide
Parameter_isRequired
Parameter_isValid
Parameter_markInvalid
Parameter_markInvalidWithReason
Parameter_matchFormat
Parameter_matchFormatAndType
Parameter_matchName
Parameter_matchType
Parameter_resetValue
Parameter_setMarshalledValue
Paramgroup_addParamchoice
Paramgroup_addParameter
Paramgroup_create
Paramgroup_delete
Paramgroup_getDescription
Paramgroup_getName
Paramgroup_getNumParamchoices
Paramgroup_getNumParameters
Paramgroup_getParamchoice
Paramgroup_getParameter
Paramgroup_isValid
Paramgroup_matchName
Paramgroup_removeParameter
Params_addParamchoice
Params_addParameter
Params_create
Params_delete
Params_duplicate
Params_findParamchoice
Params_findParameter
Params_getCallbackIPv4Values
Params_getCallbackPortValues
Params_getNumParamchoices
Params_getNumParameters
Params_getParamchoice
Params_getParameter
Params_isValid
Params_parseCommandLine
Params_printInvalid
Params_removeParameter
Params_validateCallbackPorts
Port_List_marshal
Port_marshal
S16_List_marshal
S16_marshal
S16_type
S32_List_marshal
S32_marshal
S32_type
S8_List_marshal
S8_marshal
S8_type
Scalar_format
Socket_type
String_List_marshal
String_marshal
String_type
TcpPort_type
U16_List_marshal
U16_marshal
U16_type
U32_List_marshal
U32_marshal
U32_type
U8_List_marshal
U8_marshal
U8_type
UString_List_marshal
UString_marshal
UString_type
UdpPort_type
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/trch-1.dll.dll windows:5 windows x86 arch:x86
e566b5e1afbaca6e9905feda4cf65fa9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
OutputDebugStringA
GetSystemTimeAsFileTime
libxml2
xmlNewNs
xmlNewDoc
xmlSaveToBuffer
xmlBufferCreate
xmlCleanupParser
xmlFreeMutex
xmlNewMutex
xmlInitParser
xmlStrcmp
xmlFree
xmlNodeGetContent
xmlGetProp
xmlMutexUnlock
xmlSearchNsByHref
xmlDocGetRootElement
xmlParseMemory
xmlMutexLock
xmlFreeNode
xmlNodeSetContent
xmlNewProp
xmlNewNode
xmlFreeDoc
xmlBufferFree
xmlSaveClose
xmlFreeNs
xmlBufferContent
xmlBufferLength
xmlSaveFlush
xmlSaveDoc
xmlAddChild
xmlReconciliateNs
tucl-1
TcLog
msvcrt
strchr
strcmp
strcat
sprintf
calloc
free
strlen
strncpy
tolower
memset
strspn
_access
memmove
realloc
malloc
strncmp
strtol
isspace
strtoul
strcpy
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_errno
strcspn
Exports
Exports
Boolean_List_marshal
Boolean_marshal
Boolean_type
Buffer_List_marshal
Buffer_marshal
Buffer_type
Config_create
Config_delete
Config_duplicate
Config_getConfigVersion
Config_getConstants
Config_getID
Config_getInputParams
Config_getName
Config_getNamespaceUri
Config_getOutputParams
Config_getSchemaVersion
Config_getVersion
Config_marshal
Config_printUsage
Config_setConstants
Config_setInputParams
Config_setOutputParams
Config_unmarshal
FinalizeXMLUnmarshal
IPv4_List_marshal
IPv4_marshal
IPv4_type
IPv6_List_marshal
IPv6_marshal
IPv6_type
InitializeXMLUnmarshal
List_format
LocalFile_List_marshal
LocalFile_marshal
LocalFile_type
Paramchoice_addParamgroup
Paramchoice_create
Paramchoice_delete
Paramchoice_getDefaultValue
Paramchoice_getDescription
Paramchoice_getName
Paramchoice_getNumParamgroups
Paramchoice_getParamgroup
Paramchoice_getValue
Paramchoice_hasValidValue
Paramchoice_hasValue
Paramchoice_isValid
Paramchoice_matchName
Paramchoice_setValue
Parameter_Boolean_List_create
Parameter_Boolean_List_getSize
Parameter_Boolean_List_getValue
Parameter_Boolean_List_setValue
Parameter_Boolean_create
Parameter_Boolean_getValue
Parameter_Boolean_setValue
Parameter_Buffer_List_create
Parameter_Buffer_List_getSize
Parameter_Buffer_List_getValue
Parameter_Buffer_List_setValue
Parameter_Buffer_create
Parameter_Buffer_getValue
Parameter_Buffer_setValue
Parameter_IPv4_List_create
Parameter_IPv4_List_getSize
Parameter_IPv4_List_getValue
Parameter_IPv4_List_setValue
Parameter_IPv4_create
Parameter_IPv4_getValue
Parameter_IPv4_setValue
Parameter_IPv6_List_create
Parameter_IPv6_List_getSize
Parameter_IPv6_List_getValue
Parameter_IPv6_List_setValue
Parameter_IPv6_create
Parameter_IPv6_getValue
Parameter_IPv6_setValue
Parameter_LocalFile_List_create
Parameter_LocalFile_List_getSize
Parameter_LocalFile_List_getValue
Parameter_LocalFile_List_setValue
Parameter_LocalFile_create
Parameter_LocalFile_getValue
Parameter_LocalFile_setValue
Parameter_Port_List_getSize
Parameter_Port_List_getValue
Parameter_Port_List_setValue
Parameter_Port_getValue
Parameter_Port_setValue
Parameter_S16_List_create
Parameter_S16_List_getSize
Parameter_S16_List_getValue
Parameter_S16_List_setValue
Parameter_S16_create
Parameter_S16_getValue
Parameter_S16_setValue
Parameter_S32_List_create
Parameter_S32_List_getSize
Parameter_S32_List_getValue
Parameter_S32_List_setValue
Parameter_S32_create
Parameter_S32_getValue
Parameter_S32_setValue
Parameter_S64_List_create
Parameter_S64_List_getSize
Parameter_S64_List_getValue
Parameter_S64_List_setValue
Parameter_S64_create
Parameter_S64_getValue
Parameter_S64_setValue
Parameter_S8_List_create
Parameter_S8_List_getSize
Parameter_S8_List_getValue
Parameter_S8_List_setValue
Parameter_S8_create
Parameter_S8_getValue
Parameter_S8_setValue
Parameter_Socket_List_create
Parameter_Socket_List_getSize
Parameter_Socket_List_getValue
Parameter_Socket_List_setValue
Parameter_Socket_create
Parameter_Socket_getValue
Parameter_Socket_setValue
Parameter_String_List_create
Parameter_String_List_getSize
Parameter_String_List_getValue
Parameter_String_List_setValue
Parameter_String_create
Parameter_String_getValue
Parameter_String_setValue
Parameter_TcpPort_List_create
Parameter_TcpPort_create
Parameter_U16_List_create
Parameter_U16_List_getSize
Parameter_U16_List_getValue
Parameter_U16_List_setValue
Parameter_U16_create
Parameter_U16_getValue
Parameter_U16_setValue
Parameter_U32_List_create
Parameter_U32_List_getSize
Parameter_U32_List_getValue
Parameter_U32_List_setValue
Parameter_U32_create
Parameter_U32_getValue
Parameter_U32_setValue
Parameter_U64_List_create
Parameter_U64_List_getSize
Parameter_U64_List_getValue
Parameter_U64_List_setValue
Parameter_U64_create
Parameter_U64_getValue
Parameter_U64_setValue
Parameter_U8_List_create
Parameter_U8_List_getSize
Parameter_U8_List_getValue
Parameter_U8_List_setValue
Parameter_U8_create
Parameter_U8_getValue
Parameter_U8_setValue
Parameter_UString_List_create
Parameter_UString_List_getSize
Parameter_UString_List_getValue
Parameter_UString_List_setValue
Parameter_UString_create
Parameter_UString_getValue
Parameter_UString_setValue
Parameter_UdpPort_List_create
Parameter_UdpPort_create
Parameter_delete
Parameter_getDescription
Parameter_getFormat
Parameter_getInvalidReason
Parameter_getMarshalledDefault
Parameter_getMarshalledValue
Parameter_getName
Parameter_getType
Parameter_hasValidValue
Parameter_hasValue
Parameter_hide
Parameter_isHidden
Parameter_isRequired
Parameter_isValid
Parameter_markInvalid
Parameter_markInvalidWithReason
Parameter_matchFormat
Parameter_matchFormatAndType
Parameter_matchName
Parameter_matchType
Parameter_resetValue
Parameter_setMarshalledValue
Paramgroup_addParamchoice
Paramgroup_addParameter
Paramgroup_create
Paramgroup_delete
Paramgroup_getDescription
Paramgroup_getName
Paramgroup_getNumParamchoices
Paramgroup_getNumParameters
Paramgroup_getParamchoice
Paramgroup_getParameter
Paramgroup_isValid
Paramgroup_matchName
Paramgroup_removeParameter
Params_addParamchoice
Params_addParameter
Params_create
Params_delete
Params_duplicate
Params_findParamchoice
Params_findParameter
Params_getCallbackIPv4Values
Params_getCallbackIPv6Values
Params_getCallbackPortValues
Params_getName
Params_getNumParamchoices
Params_getNumParameters
Params_getParamchoice
Params_getParameter
Params_isValid
Params_parseCommandLine
Params_printInvalid
Params_removeParameter
Params_validateCallbackPorts
Port_List_marshal
Port_marshal
S16_List_marshal
S16_marshal
S16_type
S32_List_marshal
S32_marshal
S32_type
S64_List_marshal
S64_marshal
S64_type
S8_List_marshal
S8_marshal
S8_type
Scalar_format
Socket_List_marshal
Socket_marshal
Socket_type
String_List_marshal
String_marshal
String_type
TcpPort_type
U16_List_marshal
U16_marshal
U16_type
U32_List_marshal
U32_marshal
U32_type
U64_List_marshal
U64_marshal
U64_type
U8_List_marshal
U8_marshal
U8_type
UString_List_marshal
UString_marshal
UString_type
UdpPort_type
freeMarshalledValue
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/trch.dll.dll windows:4 windows x86 arch:x86
82522dcb71a53795c59c7027026f6528
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
inet_addr
libxml2
xmlParseMemory
xmlDocGetRootElement
xmlFreeDoc
xmlSearchNsByHref
xmlGetProp
xmlStrcmp
xmlFree
tucl
TcLog
msvcr71
_onexit
__dllonexit
__CppXcptFilter
free
calloc
strspn
strncpy
strcspn
_access
realloc
malloc
sprintf
strncmp
_errno
strtol
tolower
memmove
strtoul
__security_error_handler
_except_handler3
_initterm
_adjust_fdiv
kernel32
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
Exports
Exports
Boolean_List_marshal
Boolean_marshal
Boolean_type
Config_create
Config_delete
Config_getInputParams
Config_getOutputParams
Config_marshal
Config_printUsage
Config_setInputParams
Config_setOutputParams
Config_unmarshal
IPv4_List_marshal
IPv4_marshal
IPv4_type
List_format
LocalFile_List_marshal
LocalFile_marshal
LocalFile_type
Paramchoice_addParamgroup
Paramchoice_create
Paramchoice_delete
Paramchoice_getDefaultValue
Paramchoice_getDescription
Paramchoice_getName
Paramchoice_getNumParamgroups
Paramchoice_getParamgroup
Paramchoice_getValue
Paramchoice_hasValidValue
Paramchoice_isValid
Paramchoice_matchName
Paramchoice_setValue
Parameter_Boolean_List_create
Parameter_Boolean_List_getSize
Parameter_Boolean_List_getValue
Parameter_Boolean_List_setValue
Parameter_Boolean_create
Parameter_Boolean_getValue
Parameter_Boolean_setValue
Parameter_IPv4_List_create
Parameter_IPv4_List_getSize
Parameter_IPv4_List_getValue
Parameter_IPv4_List_setValue
Parameter_IPv4_create
Parameter_IPv4_getValue
Parameter_IPv4_setValue
Parameter_LocalFile_List_create
Parameter_LocalFile_List_getSize
Parameter_LocalFile_List_getValue
Parameter_LocalFile_List_setValue
Parameter_LocalFile_create
Parameter_LocalFile_getValue
Parameter_LocalFile_setValue
Parameter_Port_List_getSize
Parameter_Port_List_getValue
Parameter_Port_List_setValue
Parameter_Port_getValue
Parameter_Port_setValue
Parameter_S16_List_create
Parameter_S16_List_getSize
Parameter_S16_List_getValue
Parameter_S16_List_setValue
Parameter_S16_create
Parameter_S16_getValue
Parameter_S16_setValue
Parameter_S32_List_create
Parameter_S32_List_getSize
Parameter_S32_List_getValue
Parameter_S32_List_setValue
Parameter_S32_create
Parameter_S32_getValue
Parameter_S32_setValue
Parameter_S8_List_create
Parameter_S8_List_getSize
Parameter_S8_List_getValue
Parameter_S8_List_setValue
Parameter_S8_create
Parameter_S8_getValue
Parameter_S8_setValue
Parameter_Socket_List_create
Parameter_Socket_List_getSize
Parameter_Socket_List_getValue
Parameter_Socket_List_setValue
Parameter_Socket_create
Parameter_Socket_getValue
Parameter_Socket_setValue
Parameter_String_List_create
Parameter_String_List_getSize
Parameter_String_List_getValue
Parameter_String_List_setValue
Parameter_String_create
Parameter_String_getValue
Parameter_String_setValue
Parameter_TcpPort_List_create
Parameter_TcpPort_create
Parameter_U16_List_create
Parameter_U16_List_getSize
Parameter_U16_List_getValue
Parameter_U16_List_setValue
Parameter_U16_create
Parameter_U16_getValue
Parameter_U16_setValue
Parameter_U32_List_create
Parameter_U32_List_getSize
Parameter_U32_List_getValue
Parameter_U32_List_setValue
Parameter_U32_create
Parameter_U32_getValue
Parameter_U32_setValue
Parameter_U8_List_create
Parameter_U8_List_getSize
Parameter_U8_List_getValue
Parameter_U8_List_setValue
Parameter_U8_create
Parameter_U8_getValue
Parameter_U8_setValue
Parameter_UString_List_create
Parameter_UString_List_getSize
Parameter_UString_List_getValue
Parameter_UString_List_setValue
Parameter_UString_create
Parameter_UString_getValue
Parameter_UString_setValue
Parameter_UdpPort_List_create
Parameter_UdpPort_create
Parameter_delete
Parameter_getDescription
Parameter_getFormat
Parameter_getMarshalledDefault
Parameter_getMarshalledValue
Parameter_getName
Parameter_getType
Parameter_hasValidValue
Parameter_hasValue
Parameter_hide
Parameter_isRequired
Parameter_isValid
Parameter_markInvalid
Parameter_matchFormat
Parameter_matchFormatAndType
Parameter_matchName
Parameter_matchType
Parameter_setMarshalledValue
Paramgroup_addParamchoice
Paramgroup_addParameter
Paramgroup_create
Paramgroup_delete
Paramgroup_getDescription
Paramgroup_getName
Paramgroup_getNumParamchoices
Paramgroup_getNumParameters
Paramgroup_getParamchoice
Paramgroup_getParameter
Paramgroup_isValid
Paramgroup_matchName
Paramgroup_removeParameter
Params_addParamchoice
Params_addParameter
Params_create
Params_delete
Params_findParamchoice
Params_findParameter
Params_getCallbackIPv4Values
Params_getCallbackPortValues
Params_getNumParamchoices
Params_getNumParameters
Params_getParamchoice
Params_getParameter
Params_isValid
Params_parseCommandLine
Params_printInvalid
Params_removeParameter
Params_validateCallbackPorts
Port_List_marshal
Port_marshal
S16_List_marshal
S16_marshal
S16_type
S32_List_marshal
S32_marshal
S32_type
S8_List_marshal
S8_marshal
S8_type
Scalar_format
Socket_type
String_List_marshal
String_marshal
String_type
TcpPort_type
U16_List_marshal
U16_marshal
U16_type
U32_List_marshal
U32_marshal
U32_type
U8_List_marshal
U8_marshal
U8_type
UString_List_marshal
UString_marshal
UString_type
UdpPort_type
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/trfo-0.dll.dll windows:4 windows x86 arch:x86
3260c253d9440b22219a68c1b89be3f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
ucl
ucl_nrv2d_decompress_8
__ucl_init2
ucl_nrv2d_99_compress
ucl_crc32
ws2_32
htonl
msvcrt
_iob
free
calloc
malloc
fread
ftell
fclose
fseek
fopen
fwrite
fgets
tolower
srand
floor
_ftime
_CIpow
time
sscanf
strcspn
strncmp
sprintf
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
rand
Exports
Exports
TfBase64Decode
TfBase64Encode
TfBuildPatternString
TfBuildPatternUnicodeString
TfBuildRandomString
TfBuildRandomUnicodeString
TfCrc32
TfDulEncoder
TfFillPattern
TfFillRandom
TfFillRandomUnicode
TfFree
TfGetUserInput
TfHasBadBytes
TfHmacMd5Final
TfHmacMd5Init
TfHmacMd5Update
TfLzCompress
TfLzDecompress
TfMakeGfaHash
TfMd4
TfMd5Final
TfMd5Init
TfMd5Update
TfNrvCalculateMaxExpansion
TfNrvCompress
TfNrvDecompress
TfRandomAscii
TfRandomBase64
TfRandomByte
TfRandomByteFromAlphabet
TfRandomByteFromRange
TfRandomInt
TfRandomizeBuffer
TfRc4Encrypt
TfRc4Init
TfReadFileIntoBuffer
TfSeedRandom
TfStrICmp
TfStrcasecmp
TfStrncasecmp
TfUuDecode
TfUuEncode
TfWriteBufferIntoFile
TfXorBuffer
TfXorw2Encoder
TfXorwEncoder
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/trfo-2.dll.dll windows:5 windows x86 arch:x86
5f4323fd2ad75a83e642205dc50294b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
posh-0
POSH_SwapU32
ucl
ucl_crc32
ucl_nrv2d_99_compress
__ucl_init2
ucl_nrv2d_decompress_8
ws2_32
htonl
msvcrt
_iob
calloc
memcpy
memset
tolower
memmove
pow
free
srand
time
fread
ftell
fclose
fseek
fwrite
fgets
_snprintf
floor
rand
_ftime
malloc
sscanf
strcspn
strcat
sprintf
strlen
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
strncmp
fopen
Exports
Exports
TfBase64Decode
TfBase64Encode
TfBuildPatternString
TfBuildPatternUnicodeString
TfBuildRandomString
TfBuildRandomUnicodeString
TfChecksumXor32
TfCrc32
TfDulEncoder
TfEscapeJavaScriptBuffer
TfFillPattern
TfFillRandom
TfFillRandomUnicode
TfFree
TfGetUserInput
TfHasBadBytes
TfHmacMd5Final
TfHmacMd5Init
TfHmacMd5Update
TfLzCompress
TfLzDecompress
TfMakeGfaHash
TfMd4
TfMd5Final
TfMd5Init
TfMd5Update
TfNrvCalculateMaxExpansion
TfNrvCompress
TfNrvDecompress
TfRandomAscii
TfRandomBase64
TfRandomByte
TfRandomByteFromAlphabet
TfRandomByteFromRange
TfRandomInt
TfRandomizeBuffer
TfRc4Encrypt
TfRc4Init
TfReadFileIntoBuffer
TfRollingXorDecode
TfRollingXorEncode
TfSeedRandom
TfStrICmp
TfStrcasecmp
TfStrncasecmp
TfUuDecode
TfUuEncode
TfWriteBufferIntoFile
TfXorBuffer
TfXorw2Encoder
TfXorwEncoder
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/trfo.dll.dll windows:4 windows x86 arch:x86
59fe168152c123880010c5a1b5bcb148
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
htonl
msvcr71
fread
ftell
fclose
fseek
fopen
fwrite
fgets
_iob
floor
rand
sscanf
time
_ftime
sprintf
malloc
__security_error_handler
_except_handler3
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
srand
free
_CIpow
tolower
calloc
strcspn
strncmp
kernel32
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetSystemTimeAsFileTime
Exports
Exports
TfBase64Decode
TfBase64Encode
TfBuildPatternString
TfBuildPatternUnicodeString
TfBuildRandomString
TfBuildRandomUnicodeString
TfCrc32
TfDulEncoder
TfFillPattern
TfFillRandom
TfFillRandomUnicode
TfGetUserInput
TfHasBadBytes
TfHmacMd5Final
TfHmacMd5Init
TfHmacMd5Update
TfLzCompress
TfLzDecompress
TfMakeGfaHash
TfMd4
TfMd5Final
TfMd5Init
TfMd5Update
TfNrvCalculateMaxExpansion
TfNrvCompress
TfNrvDecompress
TfRandomAscii
TfRandomBase64
TfRandomByte
TfRandomByteFromAlphabet
TfRandomByteFromRange
TfRandomInt
TfRandomizeBuffer
TfRc4Encrypt
TfRc4Init
TfReadFileIntoBuffer
TfSeedRandom
TfStrICmp
TfStrcasecmp
TfStrncasecmp
TfUuDecode
TfUuEncode
TfWriteBufferIntoFile
TfXorBuffer
TfXorwEncoder
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/tucl-1.dll.dll windows:5 windows x86 arch:x86
b0f67a582b3891cfaf10698b6300d855
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
msvcrt
_iob
memmove
malloc
strlen
fflush
vfprintf
isprint
memcpy
sprintf
memset
fprintf
fclose
free
fopen
calloc
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_errno
perror
Exports
Exports
DEBUG_TcLog
TcLog
TcLogBuffer
TcLogClose
TcLogOpen
TcLogSetMask
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/tucl.dll.dll windows:4 windows x86 arch:x86
374a65694dcbdf9256b8b76b3fae34f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr71
free
_errno
perror
fopen
calloc
__security_error_handler
fclose
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
fprintf
sprintf
isprint
_iob
vfprintf
fflush
_except_handler3
malloc
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DisableThreadLibraryCalls
Exports
Exports
TcLog
TcLogBuffer
TcLogClose
TcLogOpen
TcLogSetMask
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/ucl.dll.dll windows:5 windows x86 arch:x86
33ac1cb1711de5488c50eafd916d2ad2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
memmove
memcmp
memset
memcpy
free
malloc
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
Exports
Exports
__ucl_align_gap
__ucl_init2
__ucl_ptr_linear
_ucl_config_check
_ucl_cpuid_asm
_ucl_crc32_asm
_ucl_crc32_asm_small
_ucl_nrv2b_decompress_asm_8
_ucl_nrv2b_decompress_asm_fast_8
_ucl_nrv2b_decompress_asm_fast_le16
_ucl_nrv2b_decompress_asm_fast_le32
_ucl_nrv2b_decompress_asm_fast_safe_8
_ucl_nrv2b_decompress_asm_fast_safe_le16
_ucl_nrv2b_decompress_asm_fast_safe_le32
_ucl_nrv2b_decompress_asm_le16
_ucl_nrv2b_decompress_asm_le32
_ucl_nrv2b_decompress_asm_safe_8
_ucl_nrv2b_decompress_asm_safe_le16
_ucl_nrv2b_decompress_asm_safe_le32
_ucl_nrv2b_decompress_asm_small_8
_ucl_nrv2b_decompress_asm_small_le16
_ucl_nrv2b_decompress_asm_small_le32
_ucl_nrv2b_decompress_asm_small_safe_8
_ucl_nrv2b_decompress_asm_small_safe_le16
_ucl_nrv2b_decompress_asm_small_safe_le32
_ucl_nrv2d_decompress_asm_8
_ucl_nrv2d_decompress_asm_fast_8
_ucl_nrv2d_decompress_asm_fast_le16
_ucl_nrv2d_decompress_asm_fast_le32
_ucl_nrv2d_decompress_asm_fast_safe_8
_ucl_nrv2d_decompress_asm_fast_safe_le16
_ucl_nrv2d_decompress_asm_fast_safe_le32
_ucl_nrv2d_decompress_asm_le16
_ucl_nrv2d_decompress_asm_le32
_ucl_nrv2d_decompress_asm_safe_8
_ucl_nrv2d_decompress_asm_safe_le16
_ucl_nrv2d_decompress_asm_safe_le32
_ucl_nrv2d_decompress_asm_small_8
_ucl_nrv2d_decompress_asm_small_le16
_ucl_nrv2d_decompress_asm_small_le32
_ucl_nrv2d_decompress_asm_small_safe_8
_ucl_nrv2d_decompress_asm_small_safe_le16
_ucl_nrv2d_decompress_asm_small_safe_le32
_ucl_nrv2e_decompress_asm_8
_ucl_nrv2e_decompress_asm_fast_8
_ucl_nrv2e_decompress_asm_fast_le16
_ucl_nrv2e_decompress_asm_fast_le32
_ucl_nrv2e_decompress_asm_fast_safe_8
_ucl_nrv2e_decompress_asm_fast_safe_le16
_ucl_nrv2e_decompress_asm_fast_safe_le32
_ucl_nrv2e_decompress_asm_le16
_ucl_nrv2e_decompress_asm_le32
_ucl_nrv2e_decompress_asm_safe_8
_ucl_nrv2e_decompress_asm_safe_le16
_ucl_nrv2e_decompress_asm_safe_le32
_ucl_nrv2e_decompress_asm_small_8
_ucl_nrv2e_decompress_asm_small_le16
_ucl_nrv2e_decompress_asm_small_le32
_ucl_nrv2e_decompress_asm_small_safe_8
_ucl_nrv2e_decompress_asm_small_safe_le16
_ucl_nrv2e_decompress_asm_small_safe_le32
_ucl_rdtsc_add_asm
_ucl_rdtsc_asm
_ucl_version_date
_ucl_version_string
ucl_adler32
ucl_alloc
ucl_assert
ucl_copyright
ucl_crc32
ucl_free
ucl_get_crc32_table
ucl_get_malloc_hooks
ucl_malloc
ucl_memcmp
ucl_memcpy
ucl_memmove
ucl_memset
ucl_nrv2b_99_compress
ucl_nrv2b_decompress_8
ucl_nrv2b_decompress_le16
ucl_nrv2b_decompress_le32
ucl_nrv2b_decompress_safe_8
ucl_nrv2b_decompress_safe_le16
ucl_nrv2b_decompress_safe_le32
ucl_nrv2b_test_overlap_8
ucl_nrv2b_test_overlap_le16
ucl_nrv2b_test_overlap_le32
ucl_nrv2d_99_compress
ucl_nrv2d_decompress_8
ucl_nrv2d_decompress_le16
ucl_nrv2d_decompress_le32
ucl_nrv2d_decompress_safe_8
ucl_nrv2d_decompress_safe_le16
ucl_nrv2d_decompress_safe_le32
ucl_nrv2d_test_overlap_8
ucl_nrv2d_test_overlap_le16
ucl_nrv2d_test_overlap_le32
ucl_nrv2e_99_compress
ucl_nrv2e_decompress_8
ucl_nrv2e_decompress_le16
ucl_nrv2e_decompress_le32
ucl_nrv2e_decompress_safe_8
ucl_nrv2e_decompress_safe_le16
ucl_nrv2e_decompress_safe_le32
ucl_nrv2e_test_overlap_8
ucl_nrv2e_test_overlap_le16
ucl_nrv2e_test_overlap_le32
ucl_set_malloc_hooks
ucl_version
ucl_version_date
ucl_version_string
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/ucrtbase.dll.dll windows:10 windows x86 arch:x86
71f1d8a10f840ffee6964317e974d463
Code Sign
33:00:00:00:4e:a1:d8:07:70:a9:bb:e9:44:00:00:00:00:00:4eCertificate
IssuerCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before01/07/2014, 20:32Not After01/10/2015, 20:32SubjectCN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:07:76:56:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before19/10/2011, 18:41Not After19/10/2026, 18:51SubjectCN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
85:66:55:d7:c5:e8:d8:88:d8:e8:fb:07:5e:34:23:a7:13:b5:76:6e:43:99:85:e6:56:67:62:2a:a1:73:3d:63Signer
Actual PE Digest85:66:55:d7:c5:e8:d8:88:d8:e8:fb:07:5e:34:23:a7:13:b5:76:6e:43:99:85:e6:56:67:62:2a:a1:73:3d:63Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
ucrtbase.pdb
Imports
api-ms-win-core-string-l1-1-0
GetStringTypeW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
api-ms-win-core-errorhandling-l1-1-0
SetErrorMode
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
GetLastError
RaiseException
api-ms-win-core-timezone-l1-1-0
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
SystemTimeToFileTime
api-ms-win-core-file-l1-1-0
FlushFileBuffers
SetEndOfFile
GetFullPathNameA
FindNextFileA
ReadFile
SetFileAttributesW
GetFileAttributesExW
FindFirstFileExA
UnlockFileEx
GetLogicalDrives
GetFullPathNameW
DeleteFileW
WriteFile
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceW
FindClose
LockFileEx
GetFileType
CreateFileW
FindFirstFileExW
GetDriveTypeW
SetFilePointerEx
CreateDirectoryW
SetFileTime
api-ms-win-core-namedpipe-l1-1-0
CreatePipe
PeekNamedPipe
api-ms-win-core-handle-l1-1-0
CloseHandle
DuplicateHandle
api-ms-win-core-file-l2-1-0
MoveFileExW
api-ms-win-core-heap-l1-1-0
GetProcessHeap
HeapFree
HeapCompact
HeapQueryInformation
HeapWalk
HeapReAlloc
HeapAlloc
HeapValidate
HeapSize
api-ms-win-core-libraryloader-l1-1-0
LoadLibraryExW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryExA
FreeLibrary
FreeLibraryAndExitThread
api-ms-win-core-synch-l1-1-0
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
WaitForSingleObject
api-ms-win-core-processthreads-l1-1-0
ResumeThread
TlsGetValue
CreateProcessA
TlsSetValue
TlsAlloc
TlsFree
GetCurrentProcess
GetCurrentThreadId
GetExitCodeProcess
GetCurrentThread
CreateThread
GetCurrentProcessId
ExitProcess
TerminateProcess
CreateProcessW
ExitThread
GetStartupInfoW
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryA
SetStdHandle
GetStdHandle
SetEnvironmentVariableA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
api-ms-win-core-datetime-l1-1-0
GetTimeFormatW
GetDateFormatW
api-ms-win-core-localization-l1-2-0
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoW
EnumSystemLocalesW
LCMapStringW
GetCPInfo
IsValidCodePage
GetACP
GetOEMCP
api-ms-win-core-sysinfo-l1-1-0
GetLocalTime
GetSystemTimeAsFileTime
GetTickCount
GetSystemInfo
SetLocalTime
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-console-l1-1-0
ReadConsoleInputA
GetConsoleMode
GetConsoleCP
SetConsoleMode
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputW
SetConsoleCtrlHandler
ReadConsoleW
WriteConsoleW
api-ms-win-core-debug-l1-1-0
OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-file-l1-2-0
GetTempPathW
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
api-ms-win-core-memory-l1-1-0
VirtualQuery
VirtualProtect
VirtualAlloc
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
Beep
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureContext
RtlUnwind
api-ms-win-core-interlocked-l1-1-0
InterlockedPushEntrySList
InterlockedFlushSList
Exports
Exports
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_Cbuild
_Cmulcc
_Cmulcr
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_Exit
_FCbuild
_FCmulcc
_FCmulcr
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_IsExceptionObjectToBeDestroyed
_LCbuild
_LCmulcc
_LCmulcr
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
_Strftime
_W_Getdays
_W_Getmonths
_W_Gettnames
_Wcsftime
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__acrt_iob_func
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
__control87_2
__current_exception
__current_exception_context
__daylight
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__doserrno
__dstbias
__fpe_flt_rounds
__fpecode
__initialize_lconv_for_unsigned_char
__intrinsic_abnormal_termination
__intrinsic_setjmp
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__p___argc
__p___argv
__p___wargv
__p__acmdln
__p__commode
__p__environ
__p__fmode
__p__mbcasemap
__p__mbctype
__p__pgmptr
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__processing_throw
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__setusermatherr
__std_exception_copy
__std_exception_destroy
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__stdio_common_vfprintf
__stdio_common_vfprintf_p
__stdio_common_vfprintf_s
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_p
__stdio_common_vfwprintf_s
__stdio_common_vfwscanf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_p
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__strncnt
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__uncaught_exception
__wcserror
__wcserror_s
__wcsncnt
_abs64
_access
_access_s
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_base
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_configthreadlocale
_configure_narrow_argv
_configure_wide_argv
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cputs
_cputws
_creat
_create_locale
_crt_at_quick_exit
_crt_atexit
_crt_debugger_hook
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_d_int
_dclass
_dexp
_difftime32
_difftime64
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_endthread
_endthreadex
_eof
_errno
_except1
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execute_onexit_table
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_fflush_nolock
_fgetc_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flushall
_fpclass
_fpieee_flt
_fpreset
_fputc_nolock
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_base
_free_locale
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwrite_nolock
_gcvt
_gcvt_s
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_initial_narrow_environment
_get_initial_wide_environment
_get_invalid_parameter_handler
_get_narrow_winmain_command_line
_get_osfhandle
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_stream_buffer_pointers
_get_terminate
_get_thread_local_invalid_parameter_handler
_get_timezone
_get_tzname
_get_unexpected
_get_wide_winmain_command_line
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwc_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapchk
_heapmin
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_is_exception_typeof
_isalnum_l
_isalpha_l
_isatty
_isblank_l
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswblank_l
_iswcntrl_l
Sections
.text Size: 830KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/vcamp140.dll.dll windows:6 windows x86 arch:x86
6e4c8fd2f4a086985ced9253c592196c
Code Sign
33:00:00:00:9c:ee:fe:14:55:a9:5d:35:50:00:00:00:00:00:9cCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
fe:e8:8d:2a:64:41:ef:bd:aa:cb:53:83:5f:79:2e:32:8c:4d:2c:a5:dc:8b:30:f3:25:b3:64:c9:cc:a9:28:67Signer
Actual PE Digestfe:e8:8d:2a:64:41:ef:bd:aa:cb:53:83:5f:79:2e:32:8c:4d:2c:a5:dc:8b:30:f3:25:b3:64:c9:cc:a9:28:67Digest Algorithmsha256PE Digest Matchestrue01:47:02:29:10:ea:5a:16:64:92:df:a8:c8:52:d8:97:0f:a6:a1:d0Signer
Actual PE Digest01:47:02:29:10:ea:5a:16:64:92:df:a8:c8:52:d8:97:0f:a6:a1:d0Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
vcamp140.i386.pdb
Imports
advapi32
EventUnregister
EventWrite
EventRegister
kernel32
CreateEventExW
CloseHandle
ResetEvent
WaitForSingleObjectEx
VerSetConditionMask
VerifyVersionInfoW
SetEvent
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
InterlockedFlushSList
LoadLibraryW
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
FreeLibrary
DisableThreadLibraryCalls
GetProcAddress
GetLastError
InitOnceExecuteOnce
InitOnceInitialize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
vcruntime140
_except_handler4_common
memset
_CxxThrowException
memcpy
memcmp
memmove
__std_exception_copy
__std_exception_destroy
_purecall
wcsstr
__vcrt_InitializeCriticalSectionEx
__CxxFrameHandler3
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_errno
_invalid_parameter_noinfo
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
terminate
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
api-ms-win-crt-string-l1-1-0
wcstok_s
_wcsicmp
wcscat_s
towlower
wcscpy_s
strcpy_s
api-ms-win-crt-convert-l1-1-0
_wtoi64
_itow_s
api-ms-win-crt-heap-l1-1-0
malloc
free
_aligned_malloc
_aligned_free
_callnewh
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Cnd_init
_Mtx_init
_Thrd_detach
_Thrd_start
_Thrd_yield
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Xbad_function_call@std@@YAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?_Syserror_map@std@@YAPBDH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Cnd_wait
_Cnd_broadcast
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
??0task_continuation_context@Concurrency@@AAE@XZ
concrt140
??0critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?lock@critical_section@Concurrency@@QAEXXZ
?unlock@critical_section@Concurrency@@QAEXXZ
??1critical_section@Concurrency@@QAE@XZ
d3d11
D3D11CreateDevice
d3dcompiler_47
D3DLoadModule
D3DCreateLinker
dxgi
CreateDXGIFactory1
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
api-ms-win-crt-math-l1-1-0
_CIpow
ceil
Exports
Exports
??0_Event@details@Concurrency@@QAE@ABV012@@Z
??0_Event@details@Concurrency@@QAE@XZ
??0accelerator@Concurrency@@AAE@V?$_Reference_counted_obj_ptr@V_Accelerator_impl@details@Concurrency@@@details@1@@Z
??0accelerator@Concurrency@@QAE@ABV01@@Z
??0accelerator@Concurrency@@QAE@XZ
??0accelerator_view@Concurrency@@AAE@V?$_Reference_counted_obj_ptr@V_Accelerator_view_impl@details@Concurrency@@@details@1@_N@Z
??0accelerator_view@Concurrency@@QAE@ABV01@@Z
??0accelerator_view_removed@Concurrency@@QAE@J@Z
??0accelerator_view_removed@Concurrency@@QAE@PBDJ@Z
??0invalid_compute_domain@Concurrency@@QAE@PBD@Z
??0invalid_compute_domain@Concurrency@@QAE@XZ
??0out_of_memory@Concurrency@@QAE@PBD@Z
??0out_of_memory@Concurrency@@QAE@XZ
??0runtime_exception@Concurrency@@QAE@ABV01@@Z
??0runtime_exception@Concurrency@@QAE@J@Z
??0runtime_exception@Concurrency@@QAE@PBDJ@Z
??0scoped_d3d_access_lock@direct3d@Concurrency@@QAE@$$QAV012@@Z
??0scoped_d3d_access_lock@direct3d@Concurrency@@QAE@AAVaccelerator_view@2@@Z
??0scoped_d3d_access_lock@direct3d@Concurrency@@QAE@AAVaccelerator_view@2@Uadopt_d3d_access_lock_t@12@@Z
??0unsupported_feature@Concurrency@@QAE@PBD@Z
??0unsupported_feature@Concurrency@@QAE@XZ
??1_Amp_runtime_trace@details@Concurrency@@QAE@XZ
??1_Event@details@Concurrency@@QAE@XZ
??1accelerator@Concurrency@@QAE@XZ
??1accelerator_view@Concurrency@@QAE@XZ
??1runtime_exception@Concurrency@@UAE@XZ
??1scoped_d3d_access_lock@direct3d@Concurrency@@QAE@XZ
??4_Event@details@Concurrency@@QAEAAV012@ABV012@@Z
??4accelerator@Concurrency@@QAEAAV01@ABV01@@Z
??4accelerator_view@Concurrency@@QAEAAV01@ABV01@@Z
??4runtime_exception@Concurrency@@QAEAAV01@ABV01@@Z
??4scoped_d3d_access_lock@direct3d@Concurrency@@QAEAAV012@$$QAV012@@Z
??8_Event@details@Concurrency@@QBE_NABV012@@Z
??8accelerator@Concurrency@@QBE_NABV01@@Z
??8accelerator_view@Concurrency@@QBE_NABV01@@Z
??9_Event@details@Concurrency@@QBE_NABV012@@Z
??9accelerator@Concurrency@@QBE_NABV01@@Z
??9accelerator_view@Concurrency@@QBE_NABV01@@Z
?_Add_continuation@_Event@details@Concurrency@@QAE?AV123@ABV?$function@$$A6A?AV_Event@details@Concurrency@@XZ@std@@@Z
?_Add_event@_Event@details@Concurrency@@QAE?AV123@V123@@Z
?_Adopt_texture@_Texture@details@Concurrency@@SAPAV123@IW4_Short_vector_base_type_id@23@PAUIUnknown@@Vaccelerator_view@3@I@Z
?_Clone_texture@_Texture@details@Concurrency@@SAPAV123@PBV123@ABVaccelerator_view@3@1@Z
?_Copy_async_impl@details@Concurrency@@YA?AV_Event@12@PAV_Texture@12@PBII01I11@Z
?_Copy_impl@details@Concurrency@@YA?AV_Event@12@PAV_Buffer@12@I0III@Z
?_Copy_impl@details@Concurrency@@YA?AV_Event@12@PAV_Buffer@12@V?$_Reference_counted_obj_ptr@V_View_shape@details@Concurrency@@@12@01@Z
?_Copy_to_async@_Buffer@details@Concurrency@@QAE?AV_Event@23@PAV123@III@Z
?_Copy_to_async@_Buffer@details@Concurrency@@QAE?AV_Event@23@PAV123@V?$_Reference_counted_obj_ptr@V_View_shape@details@Concurrency@@@23@1@Z
?_Copy_to_async@_Texture@details@Concurrency@@QAE?AV_Event@23@PAV123@PBI11II@Z
?_Create@_Sampler@details@Concurrency@@SAPAV123@IIMMMM@Z
?_Create@_Sampler@details@Concurrency@@SAPAV123@PAX@Z
?_Create_buffer@_Buffer@details@Concurrency@@SAPAV123@PAXVaccelerator_view@3@II@Z
?_Create_buffer@_Buffer@details@Concurrency@@SAPAV123@Vaccelerator_view@3@0II_NW4access_type@3@@Z
?_Create_stage_buffer@_Buffer@details@Concurrency@@SAPAV123@Vaccelerator_view@3@0II_N@Z
?_Create_stage_texture@_Texture@details@Concurrency@@SAPAV123@Vaccelerator_view@3@0IIIIII_N@Z
?_Create_stage_texture@_Texture@details@Concurrency@@SAPAV123@Vaccelerator_view@3@0IIIIIW4_Short_vector_base_type_id@23@II@Z
?_Create_texture@_Texture@details@Concurrency@@SAPAV123@Vaccelerator_view@3@IIIIIW4_Short_vector_base_type_id@23@II_N@Z
?_Create_ubiquitous_buffer@_Ubiquitous_buffer@details@Concurrency@@SAPAV123@II@Z
?_Create_ubiquitous_buffer@_Ubiquitous_buffer@details@Concurrency@@SAPAV123@V?$_Reference_counted_obj_ptr@V_Buffer@details@Concurrency@@@23@@Z
?_Create_view_shape@_View_shape@details@Concurrency@@SAPAV123@IIPBI00PB_N@Z
?_Discard@_Ubiquitous_buffer@details@Concurrency@@QAEXPAU_Buffer_descriptor@23@@Z
?_Exclusively_owns_data@_Buffer@details@Concurrency@@QAE_NXZ
?_Get@_Event@details@Concurrency@@QAEXXZ
?_Get_CPU_access@_Buffer_descriptor@details@Concurrency@@QBEXW4_Access_mode@@@Z
?_Get_D3D_buffer@_D3D_interop@details@Concurrency@@SAPAUIUnknown@@PAV_Buffer@23@@Z
?_Get_D3D_sampler@_D3D_interop@details@Concurrency@@SAPAUIUnknown@@ABVaccelerator_view@3@PAV_Sampler@23@@Z
?_Get_D3D_sampler_data_ptr@_D3D_interop@details@Concurrency@@SAPAXPAUIUnknown@@@Z
?_Get_D3D_texture@_D3D_interop@details@Concurrency@@SAPAUIUnknown@@PAV_Texture@23@@Z
?_Get_accelerator_view@_Buffer@details@Concurrency@@QBE?AVaccelerator_view@3@XZ
?_Get_access_async@_Ubiquitous_buffer@details@Concurrency@@AAE?AV_Event@23@PAU_Buffer_descriptor@23@Vaccelerator_view@3@W4_Access_mode@@AAV?$_Reference_counted_obj_ptr@V_Buffer@details@Concurrency@@@23@PA_K@Z
?_Get_access_async@_Ubiquitous_buffer@details@Concurrency@@QAE?AV_Event@23@PAU_Buffer_descriptor@23@V?$_Reference_counted_obj_ptr@V_Accelerator_view_impl@details@Concurrency@@@23@W4_Access_mode@@AAV?$_Reference_counted_obj_ptr@V_Buffer@details@Concurrency@@@23@PA_K@Z
?_Get_access_on_accelerator_view@_Buffer@details@Concurrency@@QBE?AVaccelerator_view@3@XZ
?_Get_amp_trace@details@Concurrency@@YAPAV_Amp_runtime_trace@12@XZ
?_Get_description@accelerator@Concurrency@@ABEPB_WXZ
?_Get_device_path@accelerator@Concurrency@@ABEPB_WXZ
?_Get_devices@details@Concurrency@@YAPAV?$_Reference_counted_obj_ptr@V_Accelerator_impl@details@Concurrency@@@12@XZ
?_Get_master_accelerator_view@_Ubiquitous_buffer@details@Concurrency@@QBE?AVaccelerator_view@3@XZ
?_Get_master_buffer@_Ubiquitous_buffer@details@Concurrency@@QBE?AV?$_Reference_counted_obj_ptr@V_Buffer@details@Concurrency@@@23@XZ
?_Get_num_devices@details@Concurrency@@YAIXZ
?_Get_preferred_copy_chunk_size@details@Concurrency@@YAII@Z
?_Get_recommended_buffer_host_access_mode@details@Concurrency@@YA?AW4_Access_mode@@ABVaccelerator_view@2@@Z
?_Get_reduced_shape_for_copy@_View_shape@details@Concurrency@@QAEPAV123@XZ
?_Get_src_dest_accelerator_view@details@Concurrency@@YA?AU?$pair@Vaccelerator_view@Concurrency@@V12@@std@@PBU_Buffer_descriptor@12@0@Z
?_Get_temp_staging_buffer@_Buffer@details@Concurrency@@SAPAV123@Vaccelerator_view@3@II@Z
?_Get_temp_staging_texture@_Texture@details@Concurrency@@SAPAV123@Vaccelerator_view@3@IIIIII@Z
?_Get_view_shape@_Ubiquitous_buffer@details@Concurrency@@QAE?AV?$_Reference_counted_obj_ptr@V_View_shape@details@Concurrency@@@23@PAU_Buffer_descriptor@23@@Z
?_Init@accelerator@Concurrency@@AAEXPB_W@Z
?_Is_D3D_accelerator_view@details@Concurrency@@YA_NABVaccelerator_view@2@@Z
?_Is_empty@_Event@details@Concurrency@@QBE_NXZ
?_Is_finished@_Event@details@Concurrency@@QAE_NXZ
?_Is_finished_nothrow@_Event@details@Concurrency@@QAE_NXZ
?_Is_mappable@_Buffer@details@Concurrency@@QBE_NXZ
?_Launch_array_view_synchronize_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Buffer_descriptor@23@@Z
?_Launch_async_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEK$$TABU_Buffer_descriptor@23@_K@Z
?_Launch_async_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEK$$TABU_Texture_descriptor@23@_K@Z
?_Launch_async_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Buffer_descriptor@23@$$T_K@Z
?_Launch_async_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Buffer_descriptor@23@0_K@Z
?_Launch_async_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Texture_descriptor@23@$$T_K@Z
?_Launch_async_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Texture_descriptor@23@0_K@Z
?_Map_buffer@_Buffer@details@Concurrency@@QAEXW4_Access_mode@@_N@Z
?_Map_buffer_async@_Buffer@details@Concurrency@@QAE?AV_Event@23@W4_Access_mode@@@Z
?_Recursive_array_copy@details@Concurrency@@YAJABU_Array_copy_desc@12@IV?$function@$$A6AJABU_Array_copy_desc@details@Concurrency@@@Z@std@@@Z
?_Register_async_event@details@Concurrency@@YAXABV_Event@12@ABV?$shared_future@X@std@@@Z
?_Register_view@_Buffer@details@Concurrency@@QAEXPAU_Buffer_descriptor@23@@Z
?_Register_view@_Ubiquitous_buffer@details@Concurrency@@QAEXPAU_Buffer_descriptor@23@Vaccelerator_view@3@V?$_Reference_counted_obj_ptr@V_View_shape@details@Concurrency@@@23@QAU423@@Z
?_Register_view_copy@_Ubiquitous_buffer@details@Concurrency@@QAEXPAU_Buffer_descriptor@23@0@Z
?_Release@_Reference_counter@details@Concurrency@@QAEXXZ
?_Release_D3D_sampler_data_ptr@_D3D_interop@details@Concurrency@@SAXPAX@Z
?_Select_copy_src_accelerator_view@details@Concurrency@@YA?AVaccelerator_view@2@PAU_Buffer_descriptor@12@ABV32@@Z
?_Select_default_accelerator@details@Concurrency@@YA?AVaccelerator@2@XZ
?_Set_default_accelerator@details@Concurrency@@YA_NV?$_Reference_counted_obj_ptr@V_Accelerator_impl@details@Concurrency@@@12@@Z
?_Start_array_view_synchronize_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Buffer_descriptor@23@@Z
?_Start_async_op_wait_event@_Amp_runtime_trace@details@Concurrency@@AAEKK@Z
?_Start_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEK$$TABU_Buffer_descriptor@23@_K@Z
?_Start_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEK$$TABU_Texture_descriptor@23@_K@Z
?_Start_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Buffer_descriptor@23@$$T_K@Z
?_Start_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Buffer_descriptor@23@0_K@Z
?_Start_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Texture_descriptor@23@$$T_K@Z
?_Start_copy_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKABU_Texture_descriptor@23@0_K@Z
?_Start_parallel_for_each_event_helper@_Amp_runtime_trace@details@Concurrency@@QAEKPAU_DPC_call_handle@23@@Z
?_Unmap_buffer@_Buffer@details@Concurrency@@QAEXXZ
?_Unregister_view@_Buffer@details@Concurrency@@QAEXPAU_Buffer_descriptor@23@@Z
?_Unregister_view@_Ubiquitous_buffer@details@Concurrency@@QAEXPAU_Buffer_descriptor@23@@Z
?_Write_end_event@_Amp_runtime_trace@details@Concurrency@@QAEXK@Z
?amp_uninitialize@Concurrency@@YAXXZ
?cpu_accelerator@accelerator@Concurrency@@2QB_WB
?create_accelerator_view@direct3d@Concurrency@@YA?AVaccelerator_view@2@AAVaccelerator@2@_NW4queuing_mode@2@@Z
?create_accelerator_view@direct3d@Concurrency@@YA?AVaccelerator_view@2@PAUIUnknown@@W4queuing_mode@2@@Z
?create_marker@accelerator_view@Concurrency@@QAE?AVcompletion_future@2@XZ
?create_view@accelerator@Concurrency@@QAE?AVaccelerator_view@2@W4queuing_mode@2@@Z
?d3d_access_lock@direct3d@Concurrency@@YAXAAVaccelerator_view@2@@Z
?d3d_access_try_lock@direct3d@Concurrency@@YA_NAAVaccelerator_view@2@@Z
?d3d_access_unlock@direct3d@Concurrency@@YAXAAVaccelerator_view@2@@Z
?default_accelerator@accelerator@Concurrency@@2QB_WB
?direct3d_ref@accelerator@Concurrency@@2QB_WB
?direct3d_warp@accelerator@Concurrency@@2QB_WB
?flush@accelerator_view@Concurrency@@QAEXXZ
?get_accelerator@accelerator_view@Concurrency@@QBE?AVaccelerator@2@XZ
?get_auto_selection_view@accelerator@Concurrency@@SA?AVaccelerator_view@2@XZ
?get_dedicated_memory@accelerator@Concurrency@@QBEIXZ
?get_default_cpu_access_type@accelerator@Concurrency@@QBE?AW4access_type@2@XZ
?get_default_view@accelerator@Concurrency@@QBE?AVaccelerator_view@2@XZ
?get_device@direct3d@Concurrency@@YAPAUIUnknown@@ABVaccelerator_view@2@@Z
?get_error_code@runtime_exception@Concurrency@@QBEJXZ
?get_has_display@accelerator@Concurrency@@QBE_NXZ
?get_is_auto_selection@accelerator_view@Concurrency@@QBE_NXZ
?get_is_debug@accelerator@Concurrency@@QBE_NXZ
?get_is_debug@accelerator_view@Concurrency@@QBE_NXZ
?get_is_emulated@accelerator@Concurrency@@QBE_NXZ
?get_queuing_mode@accelerator_view@Concurrency@@QBE?AW4queuing_mode@2@XZ
?get_supports_cpu_shared_memory@accelerator@Concurrency@@QBE_NXZ
?get_supports_double_precision@accelerator@Concurrency@@QBE_NXZ
?get_supports_limited_double_precision@accelerator@Concurrency@@QBE_NXZ
?get_version@accelerator@Concurrency@@QBEIXZ
?get_version@accelerator_view@Concurrency@@QBEIXZ
?get_view_removed_reason@accelerator_view_removed@Concurrency@@QBEJXZ
?is_timeout_disabled@direct3d@Concurrency@@YA_NABVaccelerator_view@2@@Z
?set_default_cpu_access_type@accelerator@Concurrency@@QAE_NW4access_type@2@@Z
?wait@accelerator_view@Concurrency@@QAEXXZ
__dpc_create_call_handle
__dpc_dispatch_kernel
__dpc_release_call_handle
__dpc_set_const_buffer_info
__dpc_set_device_resource_info
__dpc_set_kernel_dispatch_info
__dpc_set_kernel_shader_info
Sections
.text Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/vccorlib140.dll.dll windows:6 windows x86 arch:x86
889c9d23308a50ce1e449e83a72d2424
Code Sign
33:00:00:00:9c:ee:fe:14:55:a9:5d:35:50:00:00:00:00:00:9cCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
6f:55:04:3f:88:13:1e:a1:16:f2:2e:27:2f:56:8b:93:69:80:07:bd:78:4b:ea:76:8a:5f:ad:6d:b2:b0:99:0dSigner
Actual PE Digest6f:55:04:3f:88:13:1e:a1:16:f2:2e:27:2f:56:8b:93:69:80:07:bd:78:4b:ea:76:8a:5f:ad:6d:b2:b0:99:0dDigest Algorithmsha256PE Digest Matchestrue27:4c:9e:c0:74:d6:8a:08:f9:bf:a9:fb:95:54:52:10:7f:aa:94:c1Signer
Actual PE Digest27:4c:9e:c0:74:d6:8a:08:f9:bf:a9:fb:95:54:52:10:7f:aa:94:c1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
vccorlib140.i386.pdb
Imports
kernel32
RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
FormatMessageW
GetProcAddress
LoadLibraryExW
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetLastError
OutputDebugStringW
HeapAlloc
DeleteCriticalSection
GetProcessHeap
CreateEventExW
WaitForMultipleObjectsEx
SetEvent
CloseHandle
DecodePointer
InitializeSRWLock
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
vcruntime140
_CxxThrowException
memset
__std_exception_copy
__CxxFrameHandler3
_SetWinRTOutOfMemoryExceptionCallback
__std_type_info_destroy_list
__std_exception_destroy
_except_handler4_common
__GetPlatformExceptionInfo
__std_terminate
_purecall
memmove
memcpy
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vswprintf_s
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___wargv
_configure_wide_argv
_invoke_watson
terminate
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_crt_atexit
_configure_narrow_argv
_cexit
api-ms-win-crt-heap-l1-1-0
free
_aligned_offset_malloc
malloc
_callnewh
_aligned_free
api-ms-win-crt-string-l1-1-0
wcscpy_s
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
ole32
CoGetApartmentType
CoTaskMemAlloc
CoGetContextToken
CoCreateFreeThreadedMarshaler
CoAddRefServerProcess
CoReleaseServerProcess
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoGetObjectContext
CoTaskMemFree
oleaut32
SysAllocStringLen
SysFreeString
api-ms-win-core-winrt-string-l1-1-0
WindowsGetStringRawBuffer
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsDuplicateString
WindowsCreateString
WindowsIsStringEmpty
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
api-ms-win-core-winrt-error-l1-1-0
GetRestrictedErrorInfo
RoTransformError
RoOriginateError
SetRestrictedErrorInfo
api-ms-win-core-winrt-l1-1-0
RoUninitialize
RoRevokeActivationFactories
RoRegisterActivationFactories
RoGetActivationFactory
RoRegisterForApartmentShutdown
RoInitialize
RoGetApartmentIdentifier
RoUnregisterForApartmentShutdown
Exports
Exports
?<Dispose>@Exception@Platform@@U$AAAXXZ
?<Dispose>@String@Platform@@U$AAAXXZ
?<Dispose>@Type@Platform@@U$AAAXXZ
??0AccessDeniedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0AccessDeniedException@Platform@@Q$AAA@XZ
??0Attribute@Metadata@Platform@@Q$AAA@XZ
??0Boolean@Platform@@QAA@_N@Z
??0COMException@Platform@@Q$AAA@H@Z
??0COMException@Platform@@Q$AAA@HP$AAVString@1@@Z
??0ChangedStateException@Platform@@Q$AAA@P$AAVString@1@@Z
??0ChangedStateException@Platform@@Q$AAA@XZ
??0ClassNotRegisteredException@Platform@@Q$AAA@P$AAVString@1@@Z
??0ClassNotRegisteredException@Platform@@Q$AAA@XZ
??0Delegate@Platform@@Q$AAA@XZ
??0DisconnectedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0DisconnectedException@Platform@@Q$AAA@XZ
??0Enum@Platform@@Q$AAA@XZ
??0Exception@Platform@@Q$AAA@H@Z
??0Exception@Platform@@Q$AAA@HP$AAVString@1@@Z
??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z
??0FailureException@Platform@@Q$AAA@XZ
??0GridLength@Xaml@UI@Windows@@QAA@NW4GridUnitType@123@@Z
??0IntPtr@Platform@@QAA@H@Z
??0IntPtr@Platform@@QAA@PAX@Z
??0InvalidArgumentException@Platform@@Q$AAA@P$AAVString@1@@Z
??0InvalidArgumentException@Platform@@Q$AAA@XZ
??0InvalidCastException@Platform@@Q$AAA@P$AAVString@1@@Z
??0InvalidCastException@Platform@@Q$AAA@XZ
??0MTAThreadAttribute@Platform@@Q$AAA@XZ
??0NotImplementedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0NotImplementedException@Platform@@Q$AAA@XZ
??0NullReferenceException@Platform@@Q$AAA@P$AAVString@1@@Z
??0NullReferenceException@Platform@@Q$AAA@XZ
??0Object@Platform@@Q$AAA@XZ
??0ObjectDisposedException@Platform@@Q$AAA@P$AAVString@1@@Z
??0ObjectDisposedException@Platform@@Q$AAA@XZ
??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA@XZ
??0OperationCanceledException@Platform@@Q$AAA@P$AAVString@1@@Z
??0OperationCanceledException@Platform@@Q$AAA@XZ
??0OutOfBoundsException@Platform@@Q$AAA@P$AAVString@1@@Z
??0OutOfBoundsException@Platform@@Q$AAA@XZ
??0OutOfMemoryException@Platform@@Q$AAA@P$AAVString@1@@Z
??0OutOfMemoryException@Platform@@Q$AAA@XZ
??0Rect@Foundation@Windows@@QAA@VPoint@12@0@Z
??0Rect@Foundation@Windows@@QAA@VPoint@12@VSize@12@@Z
??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QAA@N@Z
??0STAThreadAttribute@Platform@@Q$AAA@XZ
??0SizeT@Platform@@QAA@H@Z
??0SizeT@Platform@@QAA@PAX@Z
??0Type@Platform@@Q$AAA@P$AAVObject@1@@Z
??0Type@Platform@@Q$AAA@VIntPtr@1@@Z
??0Type@Platform@@Q$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z
??0ValueType@Platform@@Q$AAA@XZ
??0WrongThreadException@Platform@@Q$AAA@P$AAVString@1@@Z
??0WrongThreadException@Platform@@Q$AAA@XZ
??0char16@default@@QAA@_W@Z
??0float32@default@@QAA@M@Z
??0float64@default@@QAA@N@Z
??0int16@default@@QAA@F@Z
??0int32@default@@QAA@H@Z
??0int64@default@@QAA@_J@Z
??0int8@default@@QAA@C@Z
??0uint16@default@@QAA@G@Z
??0uint32@default@@QAA@I@Z
??0uint64@default@@QAA@_K@Z
??0uint8@default@@QAA@E@Z
??BIntPtr@Platform@@SA?AV01@H@Z
??BIntPtr@Platform@@SA?AV01@PAX@Z
??BIntPtr@Platform@@SAPAXV01@@Z
??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@P$AAV01@@Z
??BType@Platform@@SAP$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z
??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z
??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z
??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z
??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z
?AlignedAllocate@Heap@Details@Platform@@SAPAXII@Z
?AlignedAllocate@Heap@Details@Platform@@SAPAXIII@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPAXII@Z
?AlignedAllocateException@Heap@Details@Platform@@SAPAXIII@Z
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?AlignedFreeException@Heap@Details@Platform@@SAXPAX@Z
?Allocate@Heap@Details@Platform@@SAPAXI@Z
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?AllocateException@Heap@Details@Platform@@SAPAXI@Z
?AllocateException@Heap@Details@Platform@@SAPAXII@Z
?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z
?Contains@Rect@Foundation@Windows@@QAA_NVPoint@23@@Z
?CreateException@Exception@Platform@@SAP$AAV12@H@Z
?CreateException@Exception@Platform@@SAP$AAV12@HP$AAVString@2@@Z
?CreateValue@Details@Platform@@YGP$AAVObject@2@W4TypeCode@2@PBX@Z
?EnableFactoryCache@@YAXXZ
?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXP$AAVHeapEntryHandler@23@@Z
?Equals@Attribute@Metadata@Platform@@Q$AAA_NP$AAVObject@3@@Z
?Equals@Boolean@Platform@@QAA_NP$AAVObject@2@@Z
?Equals@Delegate@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Enum@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Exception@Platform@@U$AAA_NP$AAVObject@2@@Z
?Equals@MTAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Object@Platform@@Q$AAA_NP$AAV12@@Z
?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA_NP$AAVObject@4@@Z
?Equals@STAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@Type@Platform@@U$AAA_NP$AAVObject@2@@Z
?Equals@ValueType@Platform@@Q$AAA_NP$AAVObject@2@@Z
?Equals@char16@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@float32@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@float64@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int16@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int32@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int64@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@int8@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint16@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint32@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint64@default@@QAA_NP$AAVObject@Platform@@@Z
?Equals@uint8@default@@QAA_NP$AAVObject@Platform@@@Z
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?FlushFactoryCache@@YGXXZ
?Free@Heap@Details@Platform@@SAXPAX@Z
?FreeException@Heap@Details@Platform@@SAXPAX@Z
?GetActivationFactory@Details@Platform@@YGJPAVModuleBase@1WRL@Microsoft@@PAUHSTRING__@@PAPAUIActivationFactory@@@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
?GetCmdArguments@Details@Platform@@YAPAPA_WPAH@Z
?GetHashCode@Attribute@Metadata@Platform@@Q$AAAHXZ
?GetHashCode@Boolean@Platform@@QAAHXZ
?GetHashCode@Delegate@Platform@@Q$AAAHXZ
?GetHashCode@Enum@Platform@@Q$AAAHXZ
?GetHashCode@Exception@Platform@@U$AAAHXZ
?GetHashCode@Guid@Platform@@QAAHXZ
?GetHashCode@MTAThreadAttribute@Platform@@Q$AAAHXZ
?GetHashCode@Object@Platform@@Q$AAAHXZ
?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAHXZ
?GetHashCode@STAThreadAttribute@Platform@@Q$AAAHXZ
?GetHashCode@Type@Platform@@U$AAAHXZ
?GetHashCode@ValueType@Platform@@Q$AAAHXZ
?GetHashCode@char16@default@@QAAHXZ
?GetHashCode@float32@default@@QAAHXZ
?GetHashCode@float64@default@@QAAHXZ
?GetHashCode@int16@default@@QAAHXZ
?GetHashCode@int32@default@@QAAHXZ
?GetHashCode@int64@default@@QAAHXZ
?GetHashCode@int8@default@@QAAHXZ
?GetHashCode@uint16@default@@QAAHXZ
?GetHashCode@uint32@default@@QAAHXZ
?GetHashCode@uint64@default@@QAAHXZ
?GetHashCode@uint8@default@@QAAHXZ
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
?GetIBoxVtable@Details@Platform@@YGPAXPAX@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?GetObjectContext@Details@Platform@@YGPAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YGJPAUIUnknown@@ABU_GUID@@0PAPAU3@@Z
?GetType@Boolean@Platform@@QAAP$AAVType@2@XZ
?GetType@Guid@Platform@@QAAP$AAVType@2@XZ
?GetType@Object@Platform@@Q$AAAP$AAVType@2@XZ
?GetType@char16@default@@QAAP$AAVType@Platform@@XZ
?GetType@float32@default@@QAAP$AAVType@Platform@@XZ
?GetType@float64@default@@QAAP$AAVType@Platform@@XZ
?GetType@int16@default@@QAAP$AAVType@Platform@@XZ
?GetType@int32@default@@QAAP$AAVType@Platform@@XZ
?GetType@int64@default@@QAAP$AAVType@Platform@@XZ
?GetType@int8@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint16@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint32@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint64@default@@QAAP$AAVType@Platform@@XZ
?GetType@uint8@default@@QAAP$AAVType@Platform@@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@P$AAV12@@Z
?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z
?InitControlBlock@ControlBlock@Details@Platform@@AAEXPAX_N11@Z
?InitializeData@Details@Platform@@YAJH@Z
?Intersect@Rect@Foundation@Windows@@QAAXV123@@Z
?IntersectsWith@Rect@Foundation@Windows@@QAA_NV123@@Z
?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAAXXZ
?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z
?ReferenceEquals@Object@Platform@@SA_NP$AAV12@0@Z
?ReferenceEquals@Object@Platform@@SA_NP$AAVString@2@0@Z
?RegisterFactories@Details@Platform@@YGP$AAVObject@2@PAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@P6GXXZ@Z
?ReleaseInContextImpl@Details@Platform@@YGJPAUIUnknown@@0@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z
?RunApplicationServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z
?RunServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z
?TerminateModule@Details@Platform@@YG_NPAVModuleBase@1WRL@Microsoft@@@Z
?ToInt32@IntPtr@Platform@@QAAHXZ
?ToString@Attribute@Metadata@Platform@@Q$AAAP$AAVString@3@XZ
?ToString@Boolean@Platform@@QAAP$AAVString@2@XZ
?ToString@Delegate@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@Enum@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@Exception@Platform@@U$AAAP$AAVString@2@XZ
?ToString@Guid@Platform@@QAAP$AAVString@2@XZ
?ToString@MTAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAP$AAVString@4@XZ
?ToString@STAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@Type@Platform@@U$AAAP$AAVString@2@XZ
?ToString@ValueType@Platform@@Q$AAAP$AAVString@2@XZ
?ToString@char16@default@@QAAP$AAVString@Platform@@XZ
?ToString@float32@default@@QAAP$AAVString@Platform@@XZ
?ToString@float64@default@@QAAP$AAVString@Platform@@XZ
?ToString@int16@default@@QAAP$AAVString@Platform@@XZ
?ToString@int32@default@@QAAP$AAVString@Platform@@XZ
?ToString@int64@default@@QAAP$AAVString@Platform@@XZ
?ToString@int8@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint16@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint32@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint64@default@@QAAP$AAVString@Platform@@XZ
?ToString@uint8@default@@QAAP$AAVString@Platform@@XZ
?UninitializeData@Details@Platform@@YAXH@Z
?Union@Rect@Foundation@Windows@@QAAXV123@@Z
?Union@Rect@Foundation@Windows@@QAAXVPoint@23@@Z
?WriteLine@Console@Details@Platform@@SAXP$AAVObject@3@@Z
?WriteLine@Console@Details@Platform@@SAXP$AAVString@3@@Z
?WriteLine@Console@Details@Platform@@SAXXZ
?__abi_FailFast@@YGXXZ
?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z
?__abi_Resolve@ControlBlock@Details@Platform@@UAGJAAVGuid@3@PAPAU__abi_IInspectable@@@Z
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z
?__abi_translateCurrentException@@YGJ_N@Z
?__getActivationFactoryByHSTRING@@YGJPAUHSTRING__@@AAVGuid@Platform@@PAPAX@Z
?get@Bottom@Rect@Foundation@Windows@@QAAMXZ
?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ
?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ
?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ
?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ
?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ
?get@FullName@Type@Platform@@Q$AAAP$AAVString@3@XZ
?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAA_NXZ
?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ
?get@ObjectCount@Heap@Details@Platform@@SAHXZ
?get@Right@Rect@Foundation@Windows@@QAAMXZ
?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ
?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z
?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z
?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z
Sections
.text Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
minATL Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/vcomp140.dll.dll windows:6 windows x86 arch:x86
8f713adc16efa9ec02a5f6f5397a2922
Code Sign
33:00:00:00:9c:ee:fe:14:55:a9:5d:35:50:00:00:00:00:00:9cCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
9b:2b:03:a4:ad:f8:f7:72:1f:47:27:12:d9:09:63:3c:85:11:ff:f4:ee:95:48:52:f5:19:ab:29:b9:55:5a:73Signer
Actual PE Digest9b:2b:03:a4:ad:f8:f7:72:1f:47:27:12:d9:09:63:3c:85:11:ff:f4:ee:95:48:52:f5:19:ab:29:b9:55:5a:73Digest Algorithmsha256PE Digest Matchestrue3d:d3:ed:47:7e:28:fb:4c:18:bc:62:e0:3e:2c:fe:f7:6b:0d:06:23Signer
Actual PE Digest3d:d3:ed:47:7e:28:fb:4c:18:bc:62:e0:3e:2c:fe:f7:6b:0d:06:23Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
vcomp140.i386.pdb
Imports
kernel32
FormatMessageW
OutputDebugStringW
LocalAlloc
LocalFree
GetConsoleWindow
GetConsoleScreenBufferInfo
WriteConsoleW
WideCharToMultiByte
WriteFile
GetLastError
GetCurrentThreadId
HeapFree
GetProcessHeap
UnhandledExceptionFilter
CloseHandle
WaitForSingleObjectEx
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapAlloc
TryEnterCriticalSection
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetTickCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
Sleep
SwitchToThread
ExitProcess
GetStdHandle
CreateThread
QueueUserWorkItem
CreateEventW
GetNativeSystemInfo
QueryPerformanceFrequency
GetSystemTimeAdjustment
GetEnvironmentVariableW
lstrlenW
lstrcmpiW
GetStringTypeExW
ResetEvent
LoadLibraryExW
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
GetUserDefaultUILanguage
FindFirstFileW
FindNextFileW
FindClose
GetModuleFileNameW
FindResourceExW
LoadResource
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
MultiByteToWideChar
SetLastError
GetACP
GetStringTypeW
GetCPInfo
FreeLibrary
LCMapStringW
IsValidCodePage
GetOEMCP
SetStdHandle
GetModuleHandleExW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
RaiseException
CreateFileW
RtlUnwind
user32
MessageBoxW
Exports
Exports
C2VectParallel
_vcomp_atomic_add_i1
_vcomp_atomic_add_i2
_vcomp_atomic_add_i4
_vcomp_atomic_add_i8
_vcomp_atomic_add_r4
_vcomp_atomic_add_r8
_vcomp_atomic_and_i1
_vcomp_atomic_and_i2
_vcomp_atomic_and_i4
_vcomp_atomic_and_i8
_vcomp_atomic_div_i1
_vcomp_atomic_div_i2
_vcomp_atomic_div_i4
_vcomp_atomic_div_i8
_vcomp_atomic_div_r4
_vcomp_atomic_div_r8
_vcomp_atomic_div_ui1
_vcomp_atomic_div_ui2
_vcomp_atomic_div_ui4
_vcomp_atomic_div_ui8
_vcomp_atomic_mul_i1
_vcomp_atomic_mul_i2
_vcomp_atomic_mul_i4
_vcomp_atomic_mul_i8
_vcomp_atomic_mul_r4
_vcomp_atomic_mul_r8
_vcomp_atomic_or_i1
_vcomp_atomic_or_i2
_vcomp_atomic_or_i4
_vcomp_atomic_or_i8
_vcomp_atomic_shl_i1
_vcomp_atomic_shl_i2
_vcomp_atomic_shl_i4
_vcomp_atomic_shl_i8
_vcomp_atomic_shr_i1
_vcomp_atomic_shr_i2
_vcomp_atomic_shr_i4
_vcomp_atomic_shr_i8
_vcomp_atomic_shr_ui1
_vcomp_atomic_shr_ui2
_vcomp_atomic_shr_ui4
_vcomp_atomic_shr_ui8
_vcomp_atomic_sub_i1
_vcomp_atomic_sub_i2
_vcomp_atomic_sub_i4
_vcomp_atomic_sub_i8
_vcomp_atomic_sub_r4
_vcomp_atomic_sub_r8
_vcomp_atomic_xor_i1
_vcomp_atomic_xor_i2
_vcomp_atomic_xor_i4
_vcomp_atomic_xor_i8
_vcomp_barrier
_vcomp_copyprivate_broadcast
_vcomp_copyprivate_receive
_vcomp_enter_critsect
_vcomp_flush
_vcomp_for_dynamic_init
_vcomp_for_dynamic_init_i8
_vcomp_for_dynamic_next
_vcomp_for_dynamic_next_i8
_vcomp_for_static_end
_vcomp_for_static_init
_vcomp_for_static_init_i8
_vcomp_for_static_simple_init
_vcomp_for_static_simple_init_i8
_vcomp_fork
_vcomp_get_thread_num
_vcomp_leave_critsect
_vcomp_master_barrier
_vcomp_master_begin
_vcomp_master_end
_vcomp_ordered_begin
_vcomp_ordered_end
_vcomp_ordered_loop_end
_vcomp_reduction_i1
_vcomp_reduction_i2
_vcomp_reduction_i4
_vcomp_reduction_i8
_vcomp_reduction_r4
_vcomp_reduction_r8
_vcomp_reduction_u1
_vcomp_reduction_u2
_vcomp_reduction_u4
_vcomp_reduction_u8
_vcomp_sections_init
_vcomp_sections_next
_vcomp_set_num_threads
_vcomp_single_begin
_vcomp_single_end
omp_destroy_lock
omp_destroy_nest_lock
omp_get_dynamic
omp_get_max_threads
omp_get_nested
omp_get_num_procs
omp_get_num_threads
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_in_parallel
omp_init_lock
omp_init_nest_lock
omp_set_dynamic
omp_set_lock
omp_set_nest_lock
omp_set_nested
omp_set_num_threads
omp_test_lock
omp_test_nest_lock
omp_unset_lock
omp_unset_nest_lock
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/vcruntime140.dll.dll windows:6 windows x86 arch:x86
b1497ec17e3cfac16846155a7a629324
Code Sign
33:00:00:00:9d:42:68:ee:31:1c:d7:56:bd:00:00:00:00:00:9dCertificate
IssuerCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before30/03/2016, 19:21Not After30/06/2017, 19:21SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0aCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before04/06/2015, 17:42Not After04/09/2016, 17:42SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:33:26:1a:00:00:00:00:00:31Certificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before31/08/2010, 22:19Not After31/08/2020, 22:29SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:16:68:34:00:00:00:00:00:1cCertificate
IssuerCN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6dNot Before03/04/2007, 12:53Not After03/04/2021, 13:03SubjectCN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64Certificate
IssuerCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before28/10/2015, 20:31Not After28/01/2017, 20:31SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
61:0e:90:d2:00:00:00:00:00:03Certificate
IssuerCN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before08/07/2011, 20:59Not After08/07/2026, 21:09SubjectCN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b3:7c:3b:55:fe:73:cb:31:3d:72:80:2f:45:b8:5a:ec:b7:ef:f8:56:cb:55:56:33:76:b5:94:80:8a:47:7a:41Signer
Actual PE Digestb3:7c:3b:55:fe:73:cb:31:3d:72:80:2f:45:b8:5a:ec:b7:ef:f8:56:cb:55:56:33:76:b5:94:80:8a:47:7a:41Digest Algorithmsha256PE Digest Matchestruec7:7e:fe:1f:52:06:8f:fb:fc:83:25:d5:e5:17:5d:9d:3a:eb:9e:69Signer
Actual PE Digestc7:7e:fe:1f:52:06:8f:fb:fc:83:25:d5:e5:17:5d:9d:3a:eb:9e:69Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
vcruntime140.i386.pdb
Imports
api-ms-win-crt-runtime-l1-1-0
terminate
abort
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-heap-l1-1-0
malloc
_free_base
free
_malloc_base
_calloc_base
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
api-ms-win-crt-convert-l1-1-0
atol
kernel32
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
TlsFree
TlsGetValue
RtlUnwind
VirtualQuery
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetLastError
TlsSetValue
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetProcAddress
FreeLibrary
Exports
Exports
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/x64.dll.dll windows:6 windows x64 arch:x64
6cc55806e0a38c421b1edbae511a6c26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
kernel32
CloseHandle
WriteConsoleW
SetEndOfFile
HeapReAlloc
CreateProcessA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
WriteFile
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
CreateFileW
SetStdHandle
FlushFileBuffers
ReadFile
ReadConsoleW
GetStringTypeW
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/x86.dll.dll windows:6 windows x86 arch:x86
5d45fc6eb38e6fcaca143378976c0217
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
kernel32
GetConsoleCP
WriteConsoleW
SetEndOfFile
HeapReAlloc
CreateProcessA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
CloseHandle
WriteFile
DecodePointer
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
CreateFileW
SetStdHandle
FlushFileBuffers
ReadFile
ReadConsoleW
GetStringTypeW
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/xdvl-0.dll.dll .js windows:5 windows x86 arch:x86 polyglot
477c8eaf510bb0844ff2d9435002bda8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
cnli-1
VirtualArray_createFunc
CNEVirtualArray_freeVAAndElements
CNEVirtualArray_removeAtIndex
CNEBlob_appendRandomData
CNEMem_cleanNClearNDestroyPointer
CNEMem_cleanNClear
CNEString_snprintf
byteSwapLong
CNE_compareMemoryFunc
CNEVirtualArray_getElementAt
CNEVirtualArray_getSize
CNEVirtualArray_push
CNEBlob_free
CNEBlob_append
CNEBlob_createFunc
CNE_allocateCleanMemoryFunc
CNEVirtualArray_freeVA
crli-0
CryptoLibV2_freeBuffer
CryptoLibV2_getRandom
msvcrt
pow
memset
srand
time
free
floor
malloc
rand
strlen
tolower
realloc
strcmp
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
memcpy
Exports
Exports
XDevEncodePNG_GenerateChunkType
XDevEncodePNG_InsertChunk
XDevEncode_ConcatBlobs
XDevEncode_DUL
XDevEncode_JSShift
XDevEncode_PayloadXORW
XDevEncode_TEADecrypt
XDevEncode_TEAEncrypt
XDevEncode_TEARandomKey
XDevEncode_UnconcatBlobs
XDevEncode_XOR
XDevEncode_XORW
XDevEncode_XTEADecrypt
XDevEncode_XTEAEncrypt
XDevEncode_XXTEADecrypt
XDevEncode_XXTEAEncrypt
XDevLib_blobAppendRandomData
XDevLib_blobXORMangler
XDevLib_blobXORManglerEx
XDevLib_generateRandomSequence
XDevLib_pseudoRand
XDevLib_pseudoRandEx
XDevLib_pseudoRandSeed
XDevLib_pseudoRandSeedEx
XDevLib_xorMask
XDevParam_addNewParamToList
XDevParam_callNextRoutingEntry
XDevParam_callNextRoutingEntryWithCallback
XDevParam_copyParamArray
XDevParam_createListFromBlob
XDevParam_createListFromBuffer
XDevParam_createNewParam
XDevParam_findNextParamInList
XDevParam_findPreviousParamInList
XDevParam_freeParamAndData
XDevParam_freeParamList
XDevParam_getNextParamDataInList
XDevParam_getPreviousParamDataInList
XDevParam_popNextParamDataFromList
XDevParam_popNextParamFromList
XDevParam_popRequestParam
XDevParam_popRequestParamList
XDevParam_popResponseParam
XDevParam_popResponseParamList
XDevParam_pushRequestParam
XDevParam_pushRequestParamAsList
XDevParam_pushRequestParamList
XDevParam_pushResponseParam
XDevParam_pushResponseParamAsList
XDevParam_pushResponseParamList
XDevParam_pushRoutingEntryToList
XDevParam_pushStatusRoutingEntryToList
XDevParam_sendNotificationEvent
XDevParam_storeListInBlob
XDevParam_stripRoutingEntriesFromList
XDevShellcode_append
XDevShellcode_freeShellcode
XDevShellcode_getShellcodeString
XDevShellcode_loadShellcode
XDevShellcode_setVar
badrand
toHex
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/zibe.dll.dll windows:5 windows x86 arch:x86
5168f45ae568a7d685ab2d696b88a528
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
Sleep
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
RtlUnwind
OutputDebugStringA
GetSystemTime
SystemTimeToFileTime
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetSystemTimeAsFileTime
advapi32
CryptEncrypt
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptAcquireContextA
CryptImportKey
CryptGenRandom
ws2_32
select
connect
ioctlsocket
send
recv
inet_addr
WSAGetLastError
gethostbyname
inet_ntoa
htonl
getservbyname
gethostbyaddr
ntohs
getservbyport
WSASetLastError
WSAStartup
listen
bind
closesocket
setsockopt
htons
socket
msvcrt
free
memset
memcpy
_snprintf
atoi
memmove
memcmp
sprintf
strtoul
strlen
toupper
tolower
memchr
sscanf
strcmp
time
malloc
realloc
gmtime
_ftime
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
isleadbyte
_itoa
wctomb
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
strchr
_errno
calloc
_iob
Exports
Exports
CM_CreateContext
CM_GetContextManager
CM_ReleaseContextManager
CTX_FinishSession
CTX_GetRegData
CTX_GetRpcData
CTX_ReleaseContext
CTX_SetAuthenticationProvider
CTX_SetDAPUKey
CTX_SetDomainName
CTX_SetKDCLocation
CTX_SetPassword
CTX_SetPasswordHash
CTX_SetTargetName
CTX_SetUsername
CTX_StartSession
JOB_AddJob
JOB_AddJobNow
JOB_DeleteJob
JOB_EnumerateJobs
MEM_FreeBuffer
PROC_EnumProcesses
PROC_TerminateProcess
REG_ChangeCWK
REG_ChangeHive
REG_CreateKey
REG_DeleteKey
REG_DeleteValue
REG_DeleteValueProtect
REG_GetCWK
REG_GetSubKeys
REG_GetValue
REG_GetValueNames
REG_GetValues
REG_SetValue
REG_SetValueProtect
SAM_AddUser
SAM_DeleteUser
SAM_GetRemoteUserInfoByRID
SAM_GetRemoteUserList
SCM_EnumServices
SCM_QueryServiceConfig
SCM_QueryServiceStatus
SCM_StartService
SCM_StopService
SMB_AddShare
SMB_ChangeDirectory
SMB_CreateDirectory
SMB_DeleteFile
SMB_DeleteShare
SMB_DirList
SMB_EnumerateShares
SMB_GetDirectory
SMB_GetFile
SMB_GetFileDetails
SMB_GetNativeVersionStrings
SMB_PutFile
SMB_RemoveDirectory
SMB_UseShare
TUN_AddTunnel
TUN_DeleteTunnel
TUN_EnumRemoteTunnels
UTIL_FileTimeToString
Sections
.text Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
RunDLL/zlib1.dll.dll windows:5 windows x86 arch:x86
78d12b81ee403179e41a0e557321f4fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
_read
_write
_vsnprintf
memchr
_errno
strerror
sprintf
free
strlen
malloc
strcpy
strcat
memset
memcpy
_lseek
_open
_close
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
RtlUnwind
GetSystemTimeAsFileTime
Exports
Exports
adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzoffset
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
uncompress
zError
zlibCompileFlags
zlibVersion
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ