file_b9ddb7236b3245af9a920e8dbd277e1a_2024-05-15_12_08_47_902000[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

file_b9ddb7236b3245af9a920e8dbd277e1a_2024-05-15_12_08_47_902000.zip
Size

135.2MB
MD5

34229029670ba2c51d0e6d76872da9f8
SHA1

85268ce46e0d2ab34fec1c67d305e6d218189057
SHA256

abc7eb3046480c2fd19308f2916e56ec211965a4cca222dec202fe9a29db929f
SHA512

9179e1b0cca025558d2193d3f617725fda2754c6d576a6e94d2245e085e2bd1ed4b89c622fd821e1d05aa5048fa5afb52d6304743dee64723731f686fea50cd9
SSDEEP

3145728:0ivf+3ADre+ZlK70gs9xI91dhrkUEmxw3uh/T4kbpDGS2iym8H8bRZ:/vykyss0L9idpkUJxwgT4kjwm8cbRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 39 IoCs

Checks for missing Authenticode signature.

resource
unpack002/$PLUGINSDIR/SpiderBanner.dll
unpack002/$PLUGINSDIR/StdUtils.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/WinShell.dll
unpack003/ffmpeg.dll
unpack003/libEGL.dll
unpack003/libGLESv2.dll
unpack003/resources/app.asar.unpacked/release/native/SDL2.dll
unpack003/resources/app.asar.unpacked/release/native/avcodec-58.dll
unpack003/resources/app.asar.unpacked/release/native/avformat-58.dll
unpack003/resources/app.asar.unpacked/release/native/avutil-56.dll
unpack003/resources/app.asar.unpacked/release/native/chrome_elf.dll
unpack003/resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/eusbstub.sys
unpack003/resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/fusbhub.sys
unpack003/resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/sessapart.sys
unpack003/resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuhub.sys
unpack003/resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuhub3.sys
unpack003/resources/app.asar.unpacked/release/native/flac++.dll
unpack003/resources/app.asar.unpacked/release/native/flac.dll
unpack003/resources/app.asar.unpacked/release/native/h2645bitstream.dll
unpack003/resources/app.asar.unpacked/release/native/libEGL.dll
unpack003/resources/app.asar.unpacked/release/native/libGLESv2.dll
unpack003/resources/app.asar.unpacked/release/native/libcef.dll
unpack003/resources/app.asar.unpacked/release/native/sentry.dll
unpack003/resources/app.asar.unpacked/release/native/swiftshader/libEGL.dll
unpack003/resources/app.asar.unpacked/release/native/swiftshader/libGLESv2.dll
unpack003/resources/app.asar.unpacked/release/native/uv.dll
unpack003/swiftshader/libEGL.dll
unpack003/swiftshader/libGLESv2.dll
unpack003/vk_swiftshader.dll
unpack003/vulkan-1.dll
unpack002/$PLUGINSDIR/nsExec.dll
unpack002/$PLUGINSDIR/nsProcess.dll
unpack002/$PLUGINSDIR/nsis7z.dll
unpack004/$PLUGINSDIR/StdUtils.dll
unpack004/$PLUGINSDIR/System.dll
unpack004/$PLUGINSDIR/WinShell.dll
unpack004/$PLUGINSDIR/nsExec.dll
unpack004/$PLUGINSDIR/nsProcess.dll

Files

file_b9ddb7236b3245af9a920e8dbd277e1a_2024-05-15_12_08_47_902000.zip
.zip
entry001/installer.exe
.exe windows:4 windows x86 arch:x86

b34f154ec913d2d2c435cbd644e91687

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:72:0e:c3:99:0d:ac:45:fd:96:b2:cc:49:bb:3e:bb:cf:82:58:e2:f5:a1:70:1f:f9:ac:55:95:af:ba:b0:b2
Signer

Actual PE Digest

f9:72:0e:c3:99:0d:ac:45:fd:96:b2:cc:49:bb:3e:bb:cf:82:58:e2:f5:a1:70:1f:f9:ac:55:95:af:ba:b0:b2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
ExitProcess
GetShortPathNameW
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/SpiderBanner.dll
.dll windows:5 windows x86 arch:x86

90179d905cdca282880541c826651c15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynW
lstrcpyW
CloseHandle
CreateThread
Sleep
GetModuleHandleW
lstrcmpiW
GlobalAlloc
GlobalFree
lstrlenW

user32

ShowWindow
SetWindowPos
SetWindowLongW
CreateWindowExW
DefWindowProcW
FindWindowExW
GetSystemMetrics
DestroyIcon
LoadImageW
CallWindowProcW
UpdateWindow
SendMessageW
SendDlgItemMessageW
GetActiveWindow
WaitMessage
DispatchMessageW
PeekMessageW
IsWindow
CreateDialogParamW
GetWindowPlacement
InvalidateRect
DestroyWindow
BeginPaint
GetClientRect
wsprintfW
FillRect
DrawEdge
EndPaint
GetDlgItem

gdi32

SetTextColor
SetBkColor
DeleteObject
CreateBrushIndirect
GetTextExtentPoint32W
SelectObject
CreateFontW
ExtTextOutW

Exports

Exports

Destroy
Show
ShowPBOnly

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StdUtils.dll
.dll windows:5 windows x86 arch:x86

7b79709c0d5576549eb261e3410f95f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

iswspace
??3@YAXPAX@Z
_msize
_wsetlocale
_snprintf
iswcntrl
_beginthreadex
time
srand
rand
clock
_getpid
_wsplitpath
iswgraph
__wgetmainargs
wcsncpy
_wcsnicmp
wcschr
calloc
free
_wcsicmp
_snwprintf
swscanf
abort
??2@YAPAXI@Z
memset
memcpy

shlwapi

ord176

crypt32

CryptProtectData
CryptUnprotectData

kernel32

GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
HeapValidate
InterlockedDecrement
InterlockedIncrement
GetSystemTime
OutputDebugStringA
GetExitCodeProcess
InitializeCriticalSection
SystemTimeToFileTime
TerminateThread
WaitForSingleObject
LocalFree
GetFullPathNameW
GetVersion
GetFileAttributesW
LoadLibraryW
FreeLibrary
CloseHandle
lstrcpynW
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
Sleep
VerSetConditionMask
GetCurrentProcess
GetModuleHandleW
FatalAppExitW
GetVersionExW
TerminateProcess
GetModuleFileNameW
RaiseException
VerifyVersionInfoW
GetLastError
GetProcAddress
SetFilePointerEx
WriteFile
ReadFile
CreateFileW
GetFileSizeEx
GetCommandLineW

user32

MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
wsprintfW
DestroyWindow
SetTimer
UnregisterClassW
KillTimer
LoadStringW
MessageBoxW
GetWindowThreadProcessId
AllowSetForegroundWindow
CreateWindowExW
RegisterClassW
MessageBoxA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteExW
SHFileOperationW
ShellExecuteW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Exports

Exports

AppendToFile
ExecShellAsUser
ExecShellWaitEx
FormatStr
FormatStr2
FormatStr3
GetAllParameters
GetDays
GetDirectoryPart
GetDrivePart
GetExtensionPart
GetFileNamePart
GetHours
GetLibVersion
GetMinutes
GetOsEdition
GetOsReleaseId
GetOsReleaseName
GetParameter
GetParentPath
GetRealOsBuildNo
GetRealOsName
GetRealOsVersion
HashFile
HashText
InvokeShellVerb
NormalizePath
ParameterCnt
ParameterStr
ProtectStr
Rand
RandBytes
RandList
RandMax
RandMinMax
RevStr
SHFileCopy
SHFileMove
ScanStr
ScanStr2
ScanStr3
SetVerboseMode
SplitPath
StrFromUtf8
StrToUtf8
TestParameter
Time
TimerCreate
TimerDestroy
TrimStr
TrimStrLeft
TrimStrRight
UnprotectStr
ValidDomainName
ValidFileName
ValidPathSpec
VerifyRealOsBuildNo
VerifyRealOsVersion
WaitForProcEx

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WinShell.dll
.dll windows:4 windows x86 arch:x86

a75c904bad153f5af2c37cfdf66eba5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GlobalFree

ole32

CoCreateInstance

Exports

Exports

SetLnkAUMI
UninstAppUserModelId
UninstShortcut

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/app-64.7z
.7z
LICENSE.electron.txt
LICENSES.chromium.html
Shadow.exe
.exe windows:5 windows x64 arch:x64

ee91e9e6536a3b5bc30826e430d097a4

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b2:1c:a1:9a:b2:1d:78:a3:83:2c:00:f0:51:b7:30:cc:06:cb:25:34:fa:e9:7c:14:ad:1b:60:54:ae:fe:9c:e8
Signer

Actual PE Digest

b2:1c:a1:9a:b2:1d:78:a3:83:2c:00:f0:51:b7:30:cc:06:cb:25:34:fa:e9:7c:14:ad:1b:60:54:ae:fe:9c:e8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

electron.exe.pdb

Imports

ffmpeg

av_buffer_create
av_buffer_get_opaque
av_dict_get
av_dict_set
av_frame_alloc
av_frame_free
av_frame_unref
av_free
av_get_bytes_per_sample
av_get_cpu_flags
av_image_check_size
av_log_set_level
av_malloc
av_max_alloc
av_new_packet
av_packet_alloc
av_packet_copy_props
av_packet_free
av_packet_get_side_data
av_packet_unref
av_read_frame
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
av_stream_get_first_dts
av_strerror
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_descriptor_get
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context

uiautomationcore

UiaClientsAreListening
UiaGetReservedMixedAttributeValue
UiaGetReservedNotSupportedValue
UiaHostProviderFromHwnd
UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseStructureChangedEvent
UiaReturnRawElementProvider

dbghelp

StackWalk64
SymCleanup
SymFromAddr
SymFunctionTableAccess64
SymGetLineFromAddr64
SymGetModuleBase64
SymGetSearchPathW
SymInitialize
SymSetOptions
SymSetSearchPathW
UnDecorateSymbolName

msimg32

AlphaBlend

oleaut32

LoadRegTypeLi
LoadTypeLi
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayPutElement
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarBstrCmp
VarUI4FromStr
VariantClear
VariantCopy
VariantInit

winmm

midiInAddBuffer
midiInClose
midiInGetDevCapsW
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsW
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInGetNumDevs
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

ws2_32

FreeAddrInfoW
GetAddrInfoW
GetNameInfoW
WSACloseEvent
WSACreateEvent
WSADuplicateSocketW
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAGetOverlappedResult
WSAIoctl
WSALookupServiceBeginW
WSALookupServiceEnd
WSALookupServiceNextW
WSARecv
WSARecvFrom
WSAResetEvent
WSASend
WSASendTo
WSASetEvent
WSASetLastError
WSASetServiceW
WSASocketW
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getpeername
getsockname
getsockopt
htonl
htons
inet_ntop
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AllocConsole
AreFileApisANSI
AssignProcessToJobObject
AttachConsole
CallbackMayRunLong
CancelIo
CancelIoEx
CancelSynchronousIo
CheckRemoteDebuggerPresent
ClearCommError
CloseHandle
CloseThreadpool
CloseThreadpoolWork
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateJobObjectW
CreateMemoryResourceNotification
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateSemaphoreA
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpool
CreateThreadpoolWork
CreateToolhelp32Snapshot
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumResourceNamesW
EnumSystemLocalesEx
EnumSystemLocalesW
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceW
FlsAlloc
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommModemStatus
GetCommState
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetComputerNameW
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetCurrencyFormatEx
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDateFormatEx
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableW
GetErrorMode
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocalTime
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeHandleStateW
GetNativeSystemInfo
GetNumberFormatEx
GetNumberOfConsoleInputEvents
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileStringW
GetProcAddress
GetProcessHandleCount
GetProcessHeap
GetProcessHeaps
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetProductInfo
GetQueuedCompletionStatus
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadId
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
GetTickCount
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserDefaultUILanguage
GetUserGeoID
GetVersionExW
GetVolumeInformationW
GetVolumePathNameW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSetInformation
HeapSize
HeapUnlock
HeapValidate
HeapWalk
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeProcThreadAttributeList
InitializeSListHead
InitializeSRWLock
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessInJob
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
K32EnumProcessModules
K32GetModuleFileNameExW
K32GetModuleInformation
K32GetPerformanceInfo
K32GetProcessMemoryInfo
K32QueryWorkingSetEx
LCIDToLocaleName
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocaleNameToLCID
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenFileMappingW
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
PowerClearRequest
PowerCreateRequest
PowerSetRequest
Process32FirstW
Process32NextW
ProcessIdToSessionId
PurgeComm
QueryDosDeviceW
QueryFullProcessImageNameW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
QueueUserWorkItem
RaiseException
RaiseFailFastException
ReOpenFile
ReadConsoleInputW
ReadConsoleW
ReadDirectoryChangesW
ReadFile
ReadProcessMemory
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ReplaceFileW
ResetEvent
ResolveLocaleName
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlCaptureStackBackTrace
RtlDeleteFunctionTable
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleW
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessShutdownParameters
SetStdHandle
SetThreadAffinityMask
SetThreadPriority
SetThreadPriorityBoost
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
SetUnhandledExceptionFilter
SignalObjectAndWait
SizeofResource
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SubmitThreadpoolWork
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateJobObject
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitForThreadpoolWorkCallbacks
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
Wow64GetThreadContext
WriteConsoleInputW
WriteConsoleW
WriteFile
WriteProcessMemory
lstrcmpiA
lstrcmpiW
lstrlenW

crypt32

CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertAddStoreToCollection
CertCloseStore
CertCompareCertificateName
CertCreateCTLContext
CertCreateCertificateChainEngine
CertDuplicateCertificateContext
CertFindCertificateInStore
CertFindChainInStore
CertFindExtension
CertFreeCTLContext
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertGetIssuerCertificateFromStore
CertOpenStore
CertOpenSystemStoreW
CertSetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertVerifyTimeValidity
CryptAcquireCertificatePrivateKey
CryptDecodeObjectEx
CryptInstallOIDFunctionAddress
CryptProtectData
CryptUnprotectData
CryptVerifyCertificateSignatureEx

iphlpapi

CancelIPChangeNotify
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToNameW
GetAdaptersAddresses
GetInterfaceInfo
IpReleaseAddress
IpRenewAddress
NotifyAddrChange

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock
GetUserProfileDirectoryW

dwrite

DWriteCreateFactory

winspool.drv

ClosePrinter
DeviceCapabilitiesW
DocumentPropertiesW
EnumPrintersW
ord203
GetPrinterDriverW
GetPrinterW
OpenPrinterW

secur32

AcquireCredentialsHandleA
AcquireCredentialsHandleW
CompleteAuthToken
DeleteSecurityContext
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW

winhttp

WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpWriteData

dhcpcsvc

DhcpCApiInitialize
DhcpRequestParams

Exports

Exports

??$TryToCopyAndConvertArrayToCppBuffer@$0CAAAA@H@v8@@YA_NV?$Local@VArray@v8@@@0@PEAHI@Z
??$TryToCopyAndConvertArrayToCppBuffer@$0DAAAA@I@v8@@YA_NV?$Local@VArray@v8@@@0@PEAII@Z
??$TryToCopyAndConvertArrayToCppBuffer@$0GAAAA@M@v8@@YA_NV?$Local@VArray@v8@@@0@PEAMI@Z
??$TryToCopyAndConvertArrayToCppBuffer@$0HAAAA@N@v8@@YA_NV?$Local@VArray@v8@@@0@PEANI@Z
??0?$MemorySpan@$$CBD@v8@@QEAA@PEBD_K@Z
??0?$MemorySpan@$$CBD@v8@@QEAA@XZ
??0?$MemorySpan@$$CBE@v8@@QEAA@PEBE_K@Z
??0?$MemorySpan@$$CBE@v8@@QEAA@XZ
??0?$MemorySpan@$$CBVCFunction@v8@@@v8@@QEAA@PEBVCFunction@1@_K@Z
??0?$MemorySpan@$$CBVCFunction@v8@@@v8@@QEAA@XZ
??0?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IEAA@$$QEAV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IEAA@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IEAA@XZ
??0?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IEAA@$$QEAV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IEAA@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IEAA@XZ
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@$$QEAV012@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@$$QEAV012@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@AEBV012@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@AEBV012@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@2@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@2@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@XZ
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@_K@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@_KAEBUCpuProfileDeoptFrame@v8@@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@_KAEBUCpuProfileDeoptFrame@v8@@AEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@_KAEBV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@$$QEAV012@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@$$QEAV012@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@AEBV012@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@AEBV012@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@2@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@2@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@XZ
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@_K@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@_KAEBUCpuProfileDeoptInfo@v8@@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@_KAEBUCpuProfileDeoptInfo@v8@@AEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@_KAEBV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0ActivityControl@v8@@QEAA@AEBV01@@Z
??0ActivityControl@v8@@QEAA@XZ
??0AllocationProfile@v8@@QEAA@AEBV01@@Z
??0AllocationProfile@v8@@QEAA@XZ
??0Allocator@ArrayBuffer@v8@@QEAA@AEBV012@@Z
??0Allocator@ArrayBuffer@v8@@QEAA@XZ
??0AllowJavascriptExecutionScope@Isolate@v8@@QEAA@PEAV12@@Z
??0ArrayBufferAllocator@node@@QEAA@$$QEAV01@@Z
??0ArrayBufferAllocator@node@@QEAA@AEBV01@@Z
??0ArrayBufferAllocator@node@@QEAA@XZ
??0AsyncResource@node@@QEAA@PEAVIsolate@v8@@V?$Local@VObject@v8@@@3@PEBDN@Z
??0BackupIncumbentScope@Context@v8@@QEAA@V?$Local@VContext@v8@@@2@@Z
??0Binary@protocol@v8_inspector@@AEAA@V?$shared_ptr@V?$vector@EV?$allocator@E@__1@std@@@__1@std@@@__1@std@@@Z
??0Binary@protocol@v8_inspector@@QEAA@$$QEAV012@@Z
??0Binary@protocol@v8_inspector@@QEAA@AEBV012@@Z
??0Binary@protocol@v8_inspector@@QEAA@XZ
??0CFunction@v8@@QEAA@PEBXPEBVCFunctionInfo@1@@Z
??0CFunction@v8@@QEAA@XZ
??0CFunctionInfo@v8@@QEAA@AEBVCTypeInfo@1@IPEBV21@@Z
??0CachedData@ScriptCompiler@v8@@QEAA@PEBEHW4BufferPolicy@012@@Z
??0CachedData@ScriptCompiler@v8@@QEAA@XZ
??0CallbackScope@AsyncResource@node@@QEAA@PEAV12@@Z
??0CallbackScope@node@@QEAA@PEAVEnvironment@1@V?$Local@VObject@v8@@@v8@@Uasync_context@1@@Z
??0CallbackScope@node@@QEAA@PEAVIsolate@v8@@V?$Local@VObject@v8@@@3@Uasync_context@1@@Z
??0Channel@V8Inspector@v8_inspector@@QEAA@AEBV012@@Z
??0Channel@V8Inspector@v8_inspector@@QEAA@XZ
??0CodeEventHandler@v8@@QEAA@PEAVIsolate@1@@Z
??0CommandLineAPIScope@V8InspectorSession@v8_inspector@@QEAA@AEBV012@@Z
??0CommandLineAPIScope@V8InspectorSession@v8_inspector@@QEAA@XZ
??0CommonEnvironmentSetup@node@@AEAA@PEAVMultiIsolatePlatform@1@PEAV?$vector@V?$basic_string@DU?$char_traits@D@__1@std@@V?$allocator@D@23@@__1@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@__1@std@@V?$allocator@D@23@@__1@std@@@23@@__1@std@@V?$function@$$A6APEAVEnvironment@node@@PEBVCommonEnvironmentSetup@2@@Z@45@@Z
??0CompiledWasmModule@v8@@AEAA@V?$shared_ptr@VNativeModule@wasm@internal@v8@@@__1@std@@PEBD_K@Z
??0CompiledWasmModule@v8@@QEAA@$$QEAV01@@Z
??0CompiledWasmModule@v8@@QEAA@AEBV01@@Z
??0ConsumeCodeCacheTask@ScriptCompiler@v8@@AEAA@V?$unique_ptr@VBackgroundDeserializeTask@internal@v8@@U?$default_delete@VBackgroundDeserializeTask@internal@v8@@@__1@std@@@__1@std@@@Z
??0CppHeap@v8@@AEAA@XZ
??0CppHeap@v8@@QEAA@AEBV01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@$$QEAU01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@AEBU01@@Z
??0CpuProfileDeoptInfo@v8@@QEAA@XZ
??0CpuProfilingOptions@v8@@QEAA@$$QEAV01@@Z
??0CpuProfilingOptions@v8@@QEAA@AEBV01@@Z
??0CpuProfilingOptions@v8@@QEAA@W4CpuProfilingMode@1@IHV?$MaybeLocal@VContext@v8@@@1@@Z
??0CreateParams@Isolate@v8@@QEAA@AEBU012@@Z
??0CreateParams@Isolate@v8@@QEAA@XZ
??0CrossThreadPersistentRegion@internal@cppgc@@QEAA@AEBVFatalOutOfMemoryHandler@12@@Z
??0DefaultPlatform@cppgc@@QEAA@$$QEAV01@@Z
??0DefaultPlatform@cppgc@@QEAA@HW4IdleTaskSupport@platform@v8@@V?$unique_ptr@VTracingController@v8@@U?$default_delete@VTracingController@v8@@@__1@std@@@__1@std@@@Z
??0Delegate@ValueDeserializer@v8@@QEAA@AEBV012@@Z
??0Delegate@ValueDeserializer@v8@@QEAA@XZ
??0Delegate@ValueSerializer@v8@@QEAA@AEBV012@@Z
??0Delegate@ValueSerializer@v8@@QEAA@XZ
??0DisallowGarbageCollectionScope@subtle@cppgc@@QEAA@AEAVHeapHandle@2@@Z
??0DisallowJavascriptExecutionScope@Isolate@v8@@QEAA@PEAV12@W4OnFailure@012@@Z
??0DiscardedSamplesDelegate@v8@@QEAA@AEBV01@@Z
??0DiscardedSamplesDelegate@v8@@QEAA@XZ
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@$$QEAV01234@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QEAA@XZ
??0EmbedderGraph@v8@@QEAA@AEBV01@@Z
??0EmbedderGraph@v8@@QEAA@XZ
??0EmbedderHeapTracer@v8@@QEAA@AEBV01@@Z
??0EmbedderHeapTracer@v8@@QEAA@XZ
??0EmbedderRootsHandler@v8@@QEAA@AEBV01@@Z
??0EmbedderRootsHandler@v8@@QEAA@XZ
??0EmbedderStateScope@v8@@QEAA@PEAVIsolate@1@V?$Local@VContext@v8@@@1@W4EmbedderStateTag@1@@Z
??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0Exported@protocol@v8_inspector@@QEAA@AEBV012@@Z
??0Exported@protocol@v8_inspector@@QEAA@XZ
??0Extension@v8@@QEAA@PEBD0HPEAPEBDH@Z
??0ExtensionConfiguration@v8@@QEAA@HQEAPEBD@Z
??0ExtensionConfiguration@v8@@QEAA@XZ
??0ExternalOneByteStringResource@String@v8@@IEAA@XZ
??0ExternalResourceVisitor@v8@@QEAA@AEBV01@@Z
??0ExternalResourceVisitor@v8@@QEAA@XZ
??0ExternalSourceStream@ScriptCompiler@v8@@QEAA@AEBV012@@Z
??0ExternalSourceStream@ScriptCompiler@v8@@QEAA@XZ
??0ExternalStringResource@String@v8@@IEAA@XZ
??0ExternalStringResourceBase@String@v8@@IEAA@XZ
??0GCInfoTable@internal@cppgc@@QEAA@PEAVPageAllocator@v8@@@Z
??0HandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0Heap@cppgc@@AEAA@XZ
??0Heap@cppgc@@QEAA@AEBV01@@Z
??0HeapCodeStatistics@v8@@QEAA@XZ
??0HeapObjectStatistics@v8@@QEAA@XZ
??0HeapSpaceStatistics@v8@@QEAA@XZ
??0HeapStatistics@v8@@QEAA@XZ
??0Inspectable@V8InspectorSession@v8_inspector@@QEAA@AEBV012@@Z
??0Inspectable@V8InspectorSession@v8_inspector@@QEAA@XZ
??0IsolatePlatformDelegate@node@@QEAA@$$QEAV01@@Z
??0IsolatePlatformDelegate@node@@QEAA@AEBV01@@Z
??0IsolatePlatformDelegate@node@@QEAA@XZ
??0Location@v8@@QEAA@HH@Z
??0Locker@v8@@QEAA@PEAVIsolate@1@@Z
??0LongTaskStats@metrics@v8@@QEAA@XZ
??0MeasureMemoryDelegate@v8@@QEAA@AEBV01@@Z
??0MeasureMemoryDelegate@v8@@QEAA@XZ
??0MicrotaskQueue@v8@@AEAA@XZ
??0MicrotasksScope@v8@@QEAA@PEAVIsolate@1@PEAVMicrotaskQueue@1@W4Type@01@@Z
??0MicrotasksScope@v8@@QEAA@PEAVIsolate@1@W4Type@01@@Z
??0MultiIsolatePlatform@node@@QEAA@AEBV01@@Z
??0MultiIsolatePlatform@node@@QEAA@XZ
??0NameProvider@cppgc@@QEAA@AEBV01@@Z
??0NameProvider@cppgc@@QEAA@XZ
??0NoGarbageCollectionScope@subtle@cppgc@@QEAA@AEAVHeapHandle@2@@Z
??0OSROptimizedCodeCache@internal@v8@@IEAA@_K@Z
??0OSROptimizedCodeCache@internal@v8@@QEAA@XZ
??0OutputStream@v8@@QEAA@AEBV01@@Z
??0OutputStream@v8@@QEAA@XZ
??0OverrideEmbedderStackStateScope@testing@cppgc@@QEAA@AEAVHeapHandle@2@W4EmbedderStackState@2@@Z
??0PersistentHandleVisitor@v8@@QEAA@AEBV01@@Z
??0PersistentHandleVisitor@v8@@QEAA@XZ
??0PersistentRegion@internal@cppgc@@QEAA@AEBVFatalOutOfMemoryHandler@12@@Z
??0PersistentRegionBase@internal@cppgc@@IEAA@AEBVFatalOutOfMemoryHandler@12@@Z
??0PersistentRegionLock@internal@cppgc@@QEAA@XZ
??0Platform@cppgc@@QEAA@AEBV01@@Z
??0Platform@cppgc@@QEAA@XZ
??0PropertyDescriptor@v8@@QEAA@V?$Local@VValue@v8@@@1@0@Z
??0PropertyDescriptor@v8@@QEAA@V?$Local@VValue@v8@@@1@@Z
??0PropertyDescriptor@v8@@QEAA@V?$Local@VValue@v8@@@1@_N@Z
??0PropertyDescriptor@v8@@QEAA@XZ
??0Recorder@metrics@v8@@QEAA@AEBV012@@Z
??0Recorder@metrics@v8@@QEAA@XZ
??0RegisterState@v8@@QEAA@AEBU01@@Z
??0RegisterState@v8@@QEAA@XZ
??0RemoteObject@API@Runtime@protocol@v8_inspector@@QEAA@$$QEAV01234@@Z
??0RemoteObject@API@Runtime@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0RemoteObject@API@Runtime@protocol@v8_inspector@@QEAA@XZ
??0ResourceConstraints@v8@@QEAA@XZ
??0SafeForTerminationScope@Isolate@v8@@QEAA@PEAV12@@Z
??0SameThreadEnabledCheckingPolicyBase@internal@cppgc@@QEAA@XZ
??0Scope@Isolate@v8@@QEAA@PEAV12@@Z
??0ScriptOrigin@v8@@QEAA@PEAVIsolate@1@V?$Local@VValue@v8@@@1@HH_NH1222V?$Local@VData@v8@@@1@@Z
??0ScriptOrigin@v8@@QEAA@V?$Local@VValue@v8@@@1@HH_NH0111V?$Local@VData@v8@@@1@@Z
??0ScriptOrigin@v8@@QEAA@V?$Local@VValue@v8@@@1@V?$Local@VInteger@v8@@@1@1V?$Local@VBoolean@v8@@@1@10222V?$Local@VData@v8@@@1@@Z
??0ScriptStreamingTask@ScriptCompiler@v8@@AEAA@PEAUScriptStreamingData@internal@2@@Z
??0SealHandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0SearchMatch@API@Debugger@protocol@v8_inspector@@QEAA@$$QEAV01234@@Z
??0SearchMatch@API@Debugger@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0SearchMatch@API@Debugger@protocol@v8_inspector@@QEAA@XZ
??0SharedMemoryStatistics@v8@@QEAA@XZ
??0SnapshotCreator@v8@@QEAA@PEAVIsolate@1@PEB_JPEAVStartupData@1@@Z
??0SnapshotCreator@v8@@QEAA@PEB_JPEAVStartupData@1@@Z
??0SourceLocation@cppgc@@AEAA@PEBD0_K@Z
??0SourceLocation@cppgc@@QEAA@XZ
??0StackTrace@API@Runtime@protocol@v8_inspector@@QEAA@$$QEAV01234@@Z
??0StackTrace@API@Runtime@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0StackTrace@API@Runtime@protocol@v8_inspector@@QEAA@XZ
??0StackTraceId@API@Runtime@protocol@v8_inspector@@QEAA@$$QEAV01234@@Z
??0StackTraceId@API@Runtime@protocol@v8_inspector@@QEAA@AEBV01234@@Z
??0StackTraceId@API@Runtime@protocol@v8_inspector@@QEAA@XZ
??0StandaloneTestingHeap@testing@cppgc@@QEAA@AEAVHeapHandle@2@@Z
??0StreamedSource@ScriptCompiler@v8@@QEAA@V?$unique_ptr@VExternalSourceStream@ScriptCompiler@v8@@U?$default_delete@VExternalSourceStream@ScriptCompiler@v8@@@__1@std@@@__1@std@@W4Encoding@012@@Z
??0String16@v8_inspector@@QEAA@PEBD@Z
??0String16@v8_inspector@@QEAA@PEBG@Z
??0StringBuffer@v8_inspector@@QEAA@AEBV01@@Z
??0StringBuffer@v8_inspector@@QEAA@XZ
??0StringView@v8_inspector@@QEAA@PEBE_K@Z
??0StringView@v8_inspector@@QEAA@PEBG_K@Z
??0StringView@v8_inspector@@QEAA@XZ
??0SuppressMicrotaskExecutionScope@Isolate@v8@@QEAA@PEAV12@PEAVMicrotaskQueue@2@@Z
??0TickSample@internal@v8@@QEAA@XZ
??0TracedGlobalHandleVisitor@EmbedderHeapTracer@v8@@QEAA@AEBV012@@Z
??0TracedGlobalHandleVisitor@EmbedderHeapTracer@v8@@QEAA@XZ
??0TryCatch@v8@@QEAA@PEAVIsolate@1@@Z
??0Unlocker@v8@@QEAA@PEAVIsolate@1@@Z
??0Utf8Value@String@v8@@QEAA@PEAVIsolate@2@V?$Local@VValue@v8@@@2@@Z
??0V8ContextInfo@v8_inspector@@QEAA@V?$Local@VContext@v8@@@v8@@HVStringView@1@@Z
??0V8Inspector@v8_inspector@@QEAA@AEBV01@@Z
??0V8Inspector@v8_inspector@@QEAA@XZ
??0V8InspectorClient@v8_inspector@@QEAA@AEBV01@@Z
??0V8InspectorClient@v8_inspector@@QEAA@XZ
??0V8InspectorSession@v8_inspector@@QEAA@AEBV01@@Z
??0V8InspectorSession@v8_inspector@@QEAA@XZ
??0V8StackTrace@v8_inspector@@QEAA@AEBV01@@Z
??0V8StackTrace@v8_inspector@@QEAA@XZ
??0V8StackTraceId@v8_inspector@@QEAA@VStringView@1@@Z
??0V8StackTraceId@v8_inspector@@QEAA@XZ
??0V8StackTraceId@v8_inspector@@QEAA@_KU?$pair@_J_J@__1@std@@@Z
??0V8StackTraceId@v8_inspector@@QEAA@_KU?$pair@_J_J@__1@std@@_N@Z
??0Value@String@v8@@QEAA@PEAVIsolate@2@V?$Local@VValue@v8@@@2@@Z
??0ValueDeserializer@v8@@QEAA@PEAVIsolate@1@PEBE_K@Z
??0ValueDeserializer@v8@@QEAA@PEAVIsolate@1@PEBE_KPEAVDelegate@01@@Z
??0ValueSerializer@v8@@QEAA@PEAVIsolate@1@@Z
??0ValueSerializer@v8@@QEAA@PEAVIsolate@1@PEAVDelegate@01@@Z
??0Visitor@cppgc@@QEAA@AEBV01@@Z
??0Visitor@cppgc@@QEAA@VKey@01@@Z
??0WasmModuleObjectBuilderStreaming@v8@@AEAA@$$QEAV01@@Z
??0WasmModuleObjectBuilderStreaming@v8@@QEAA@PEAVIsolate@1@@Z
??0WasmStreaming@v8@@QEAA@V?$unique_ptr@VWasmStreamingImpl@WasmStreaming@v8@@U?$default_delete@VWasmStreamingImpl@WasmStreaming@v8@@@__1@std@@@__1@std@@@Z
??0WebSnapshotDeserializer@internal@v8@@QEAA@PEAVIsolate@2@@Z
??0WebSnapshotSerializer@internal@v8@@QEAA@PEAVIsolate@2@@Z
??1?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IEAA@XZ
??1?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IEAA@XZ
??1?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAA@XZ
??1?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAA@XZ
??1ActivityControl@v8@@UEAA@XZ
??1AllocationProfile@v8@@UEAA@XZ
??1Allocator@ArrayBuffer@v8@@UEAA@XZ
??1AllowJavascriptExecutionScope@Isolate@v8@@QEAA@XZ
??1ArrayBufferAllocator@node@@UEAA@XZ
??1AsyncResource@node@@UEAA@XZ
??1BackingStore@v8@@QEAA@XZ
??1BackupIncumbentScope@Context@v8@@QEAA@XZ
??1Binary@protocol@v8_inspector@@QEAA@XZ
??1CachedData@ScriptCompiler@v8@@QEAA@XZ
??1CallbackScope@AsyncResource@node@@QEAA@XZ
??1CallbackScope@node@@QEAA@XZ
??1Channel@V8Inspector@v8_inspector@@UEAA@XZ
??1CodeEventHandler@v8@@UEAA@XZ
??1CommandLineAPIScope@V8InspectorSession@v8_inspector@@UEAA@XZ
??1CommonEnvironmentSetup@node@@QEAA@XZ
??1CompiledWasmModule@v8@@QEAA@XZ
??1ConsumeCodeCacheTask@ScriptCompiler@v8@@QEAA@XZ
??1CppHeap@v8@@UEAA@XZ
??1CppHeapCreateParams@v8@@QEAA@XZ
??1CpuProfileDeoptInfo@v8@@QEAA@XZ
??1CpuProfilingOptions@v8@@QEAA@XZ
??1CreateParams@Isolate@v8@@QEAA@XZ
??1CrossThreadPersistentRegion@internal@cppgc@@QEAA@XZ
??1DefaultPlatform@cppgc@@UEAA@XZ
??1Delegate@ValueDeserializer@v8@@UEAA@XZ
??1Delegate@ValueSerializer@v8@@UEAA@XZ
??1DisallowGarbageCollectionScope@subtle@cppgc@@QEAA@XZ
??1DisallowJavascriptExecutionScope@Isolate@v8@@QEAA@XZ
??1DiscardedSamplesDelegate@v8@@UEAA@XZ
??1Domain@API@Schema@protocol@v8_inspector@@UEAA@XZ
??1EmbedderGraph@v8@@UEAA@XZ
??1EmbedderHeapTracer@v8@@UEAA@XZ
??1EmbedderRootsHandler@v8@@UEAA@XZ
??1EmbedderStateScope@v8@@QEAA@XZ
??1EscapableHandleScope@v8@@QEAA@XZ
??1Exported@protocol@v8_inspector@@UEAA@XZ
??1Extension@v8@@UEAA@XZ
??1ExternalOneByteStringResource@String@v8@@UEAA@XZ
??1ExternalResourceVisitor@v8@@UEAA@XZ
??1ExternalSourceStream@ScriptCompiler@v8@@UEAA@XZ
??1ExternalStringResource@String@v8@@UEAA@XZ
??1ExternalStringResourceBase@String@v8@@UEAA@XZ
??1GCInfoTable@internal@cppgc@@QEAA@XZ
??1HandleScope@v8@@QEAA@XZ
??1Heap@cppgc@@UEAA@XZ
??1Inspectable@V8InspectorSession@v8_inspector@@UEAA@XZ
??1Locker@v8@@QEAA@XZ
??1MeasureMemoryDelegate@v8@@UEAA@XZ
??1MicrotaskQueue@v8@@UEAA@XZ
??1MicrotasksScope@v8@@QEAA@XZ
??1MultiIsolatePlatform@node@@UEAA@XZ
??1NameProvider@cppgc@@UEAA@XZ
??1NoGarbageCollectionScope@subtle@cppgc@@QEAA@XZ
??1OutputStream@v8@@UEAA@XZ
??1OverrideEmbedderStackStateScope@testing@cppgc@@QEAA@XZ
??1PersistentHandleVisitor@v8@@UEAA@XZ
??1PersistentRegion@internal@cppgc@@QEAA@XZ
??1PersistentRegionBase@internal@cppgc@@QEAA@XZ
??1PersistentRegionLock@internal@cppgc@@QEAA@XZ
??1Platform@cppgc@@UEAA@XZ
??1PropertyDescriptor@v8@@QEAA@XZ
??1Recorder@metrics@v8@@UEAA@XZ
??1RegisterState@v8@@QEAA@XZ
??1RemoteObject@API@Runtime@protocol@v8_inspector@@UEAA@XZ
??1SafeForTerminationScope@Isolate@v8@@QEAA@XZ
??1Scope@Isolate@v8@@QEAA@XZ
??1SealHandleScope@v8@@QEAA@XZ
??1SearchMatch@API@Debugger@protocol@v8_inspector@@UEAA@XZ
??1SnapshotCreator@v8@@QEAA@XZ
??1StackTrace@API@Runtime@protocol@v8_inspector@@UEAA@XZ
??1StackTraceId@API@Runtime@protocol@v8_inspector@@UEAA@XZ
??1StreamedSource@ScriptCompiler@v8@@QEAA@XZ
??1StringBuffer@v8_inspector@@UEAA@XZ
??1SuppressMicrotaskExecutionScope@Isolate@v8@@QEAA@XZ
??1TracedGlobalHandleVisitor@EmbedderHeapTracer@v8@@UEAA@XZ
??1TryCatch@v8@@QEAA@XZ
??1Unlocker@v8@@QEAA@XZ
??1Utf8Value@String@v8@@QEAA@XZ
??1V8Inspector@v8_inspector@@UEAA@XZ
??1V8InspectorClient@v8_inspector@@UEAA@XZ
??1V8InspectorSession@v8_inspector@@UEAA@XZ
??1V8StackTrace@v8_inspector@@UEAA@XZ
??1Value@String@v8@@QEAA@XZ
??1ValueDeserializer@v8@@QEAA@XZ
??1ValueSerializer@v8@@QEAA@XZ
??1Visitor@cppgc@@UEAA@XZ
??1WasmModuleObjectBuilderStreaming@v8@@QEAA@XZ
??1WasmStreaming@v8@@QEAA@XZ
??1WebSnapshotDeserializer@internal@v8@@QEAA@XZ
??1WebSnapshotSerializer@internal@v8@@QEAA@XZ
??2EscapableHandleScope@v8@@CAPEAX_K@Z
??2GlobalGCInfoTable@internal@cppgc@@CAPEAX_K@Z
??2HandleScope@v8@@CAPEAX_K@Z
??2SealHandleScope@v8@@CAPEAX_K@Z
??2TryCatch@v8@@CAPEAX_K@Z
??3BackingStore@v8@@SAXPEAX@Z
??3EscapableHandleScope@v8@@CAXPEAX_K@Z
??3GlobalGCInfoTable@internal@cppgc@@CAXPEAX_K@Z
??3HandleScope@v8@@CAXPEAX_K@Z
??3SealHandleScope@v8@@CAXPEAX_K@Z
??3TryCatch@v8@@CAXPEAX_K@Z
??4?$CTypeInfoBuilder@H$S@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$CTypeInfoBuilder@H$S@v8@@QEAAAEAV01@AEBV01@@Z
??4?$CTypeInfoBuilder@I$S@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$CTypeInfoBuilder@I$S@v8@@QEAAAEAV01@AEBV01@@Z
??4?$CTypeInfoBuilder@M$S@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$CTypeInfoBuilder@M$S@v8@@QEAAAEAV01@AEBV01@@Z
??4?$CTypeInfoBuilder@N$S@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$CTypeInfoBuilder@N$S@v8@@QEAAAEAV01@AEBV01@@Z
??4?$MemorySpan@$$CBD@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$MemorySpan@$$CBD@v8@@QEAAAEAV01@AEBV01@@Z
??4?$MemorySpan@$$CBE@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$MemorySpan@$$CBE@v8@@QEAAAEAV01@AEBV01@@Z
??4?$MemorySpan@$$CBVCFunction@v8@@@v8@@QEAAAEAV01@$$QEAV01@@Z
??4?$MemorySpan@$$CBVCFunction@v8@@@v8@@QEAAAEAV01@AEBV01@@Z
??4?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAAAEAV012@AEBV012@@Z
??4?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAAAEAV012@AEBV012@@Z
??4?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAAAEAV012@$$QEAV012@@Z
??4?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAAAEAV012@AEBV012@@Z
??4?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QEAAAEAV012@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@2@@Z
??4?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAAAEAV012@$$QEAV012@@Z
??4?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAAAEAV012@AEBV012@@Z
??4?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QEAAAEAV012@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@2@@Z
??4AccessorSignature@v8@@QEAAAEAV01@$$QEAV01@@Z
??4AccessorSignature@v8@@QEAAAEAV01@AEBV01@@Z
??4ActivityControl@v8@@QEAAAEAV01@AEBV01@@Z
??4AllocationHandle@cppgc@@QEAAAEAV01@$$QEAV01@@Z
??4AllocationHandle@cppgc@@QEAAAEAV01@AEBV01@@Z
??4AllocationProfile@v8@@QEAAAEAV01@AEBV01@@Z
??4Allocator@ArrayBuffer@v8@@QEAAAEAV012@AEBV012@@Z
??4Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Array@v8@@QEAAAEAV01@AEBV01@@Z
??4ArrayBuffer@v8@@QEAAAEAV01@$$QEAV01@@Z
??4ArrayBuffer@v8@@QEAAAEAV01@AEBV01@@Z
??4ArrayBufferAllocator@node@@QEAAAEAV01@$$QEAV01@@Z
??4ArrayBufferAllocator@node@@QEAAAEAV01@AEBV01@@Z
??4ArrayBufferView@v8@@QEAAAEAV01@$$QEAV01@@Z
??4ArrayBufferView@v8@@QEAAAEAV01@AEBV01@@Z
??4AtomicsWaitWakeHandle@Isolate@v8@@QEAAAEAV012@$$QEAV012@@Z
??4AtomicsWaitWakeHandle@Isolate@v8@@QEAAAEAV012@AEBV012@@Z
??4BackingStore@v8@@QEAAAEAV01@AEBV01@@Z
??4BackupIncumbentScope@Context@v8@@QEAAAEAV012@AEBV012@@Z
??4BaseObjectSizeTrait@internal@cppgc@@QEAAAEAU012@$$QEAU012@@Z
??4BaseObjectSizeTrait@internal@cppgc@@QEAAAEAU012@AEBU012@@Z
??4BigInt64Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4BigInt64Array@v8@@QEAAAEAV01@AEBV01@@Z
??4BigInt@v8@@QEAAAEAV01@$$QEAV01@@Z
??4BigInt@v8@@QEAAAEAV01@AEBV01@@Z
??4BigIntObject@v8@@QEAAAEAV01@$$QEAV01@@Z
??4BigIntObject@v8@@QEAAAEAV01@AEBV01@@Z
??4BigUint64Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4BigUint64Array@v8@@QEAAAEAV01@AEBV01@@Z
??4Binary@protocol@v8_inspector@@QEAAAEAV012@$$QEAV012@@Z
??4Binary@protocol@v8_inspector@@QEAAAEAV012@AEBV012@@Z
??4Boolean@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Boolean@v8@@QEAAAEAV01@AEBV01@@Z
??4BooleanObject@v8@@QEAAAEAV01@$$QEAV01@@Z
??4BooleanObject@v8@@QEAAAEAV01@AEBV01@@Z
??4CFunction@v8@@QEAAAEAV01@$$QEAV01@@Z
??4CFunction@v8@@QEAAAEAV01@AEBV01@@Z
??4Channel@V8Inspector@v8_inspector@@QEAAAEAV012@AEBV012@@Z
??4CodeEvent@v8@@QEAAAEAV01@$$QEAV01@@Z
??4CodeEvent@v8@@QEAAAEAV01@AEBV01@@Z
??4CommandLineAPIScope@V8InspectorSession@v8_inspector@@QEAAAEAV012@AEBV012@@Z
??4Context@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Context@v8@@QEAAAEAV01@AEBV01@@Z
??4CppHeap@v8@@QEAAAEAV01@AEBV01@@Z
??4CpuProfile@v8@@QEAAAEAV01@$$QEAV01@@Z
??4CpuProfile@v8@@QEAAAEAV01@AEBV01@@Z
??4CpuProfileDeoptInfo@v8@@QEAAAEAU01@$$QEAU01@@Z
??4CpuProfileDeoptInfo@v8@@QEAAAEAU01@AEBU01@@Z
??4CpuProfileNode@v8@@QEAAAEAV01@$$QEAV01@@Z
??4CpuProfileNode@v8@@QEAAAEAV01@AEBV01@@Z
??4CpuProfilingOptions@v8@@QEAAAEAV01@$$QEAV01@@Z
??4CpuProfilingOptions@v8@@QEAAAEAV01@AEBV01@@Z
??4CreateParams@Isolate@v8@@QEAAAEAU012@AEBU012@@Z
??4Data@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Data@v8@@QEAAAEAV01@AEBV01@@Z
??4DataView@v8@@QEAAAEAV01@$$QEAV01@@Z
??4DataView@v8@@QEAAAEAV01@AEBV01@@Z
??4Date@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Date@v8@@QEAAAEAV01@AEBV01@@Z
??4DefaultPlatform@cppgc@@QEAAAEAV01@$$QEAV01@@Z
??4Delegate@ValueDeserializer@v8@@QEAAAEAV012@AEBV012@@Z
??4Delegate@ValueSerializer@v8@@QEAAAEAV012@AEBV012@@Z
??4DeleteACHHandle@node@@QEAAAEAU01@$$QEAU01@@Z
??4DeleteACHHandle@node@@QEAAAEAU01@AEBU01@@Z
??4DiscardedSamplesDelegate@v8@@QEAAAEAV01@AEBV01@@Z
??4Domain@API@Schema@protocol@v8_inspector@@QEAAAEAV01234@$$QEAV01234@@Z
??4Domain@API@Schema@protocol@v8_inspector@@QEAAAEAV01234@AEBV01234@@Z
??4EmbedderGraph@v8@@QEAAAEAV01@AEBV01@@Z
??4EmbedderHeapTracer@v8@@QEAAAEAV01@AEBV01@@Z
??4EmbedderRootsHandler@v8@@QEAAAEAV01@AEBV01@@Z
??4EnsureGCInfoIndexTrait@internal@cppgc@@QEAAAEAU012@$$QEAU012@@Z
??4EnsureGCInfoIndexTrait@internal@cppgc@@QEAAAEAU012@AEBU012@@Z
??4Exception@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Exception@v8@@QEAAAEAV01@AEBV01@@Z
??4Exported@protocol@v8_inspector@@QEAAAEAV012@AEBV012@@Z
??4External@v8@@QEAAAEAV01@$$QEAV01@@Z
??4External@v8@@QEAAAEAV01@AEBV01@@Z
??4ExternalResourceVisitor@v8@@QEAAAEAV01@AEBV01@@Z
??4ExternalSourceStream@ScriptCompiler@v8@@QEAAAEAV012@AEBV012@@Z
??4FixedArray@v8@@QEAAAEAV01@$$QEAV01@@Z
??4FixedArray@v8@@QEAAAEAV01@AEBV01@@Z
??4Float32Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Float32Array@v8@@QEAAAEAV01@AEBV01@@Z
??4Float64Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Float64Array@v8@@QEAAAEAV01@AEBV01@@Z
??4Function@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Function@v8@@QEAAAEAV01@AEBV01@@Z
??4FunctionTemplate@v8@@QEAAAEAV01@$$QEAV01@@Z
??4FunctionTemplate@v8@@QEAAAEAV01@AEBV01@@Z
??4Heap@cppgc@@QEAAAEAV01@AEBV01@@Z
??4HeapCodeStatistics@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapCodeStatistics@v8@@QEAAAEAV01@AEBV01@@Z
??4HeapGraphEdge@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapGraphEdge@v8@@QEAAAEAV01@AEBV01@@Z
??4HeapGraphNode@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapGraphNode@v8@@QEAAAEAV01@AEBV01@@Z
??4HeapHandle@cppgc@@QEAAAEAV01@$$QEAV01@@Z
??4HeapHandle@cppgc@@QEAAAEAV01@AEBV01@@Z
??4HeapObjectStatistics@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapObjectStatistics@v8@@QEAAAEAV01@AEBV01@@Z
??4HeapSnapshot@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapSnapshot@v8@@QEAAAEAV01@AEBV01@@Z
??4HeapSpaceStatistics@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapSpaceStatistics@v8@@QEAAAEAV01@AEBV01@@Z
??4HeapState@subtle@cppgc@@QEAAAEAV012@$$QEAV012@@Z
??4HeapState@subtle@cppgc@@QEAAAEAV012@AEBV012@@Z
??4HeapStatistics@v8@@QEAAAEAV01@$$QEAV01@@Z
??4HeapStatistics@v8@@QEAAAEAV01@AEBV01@@Z
??4Inspectable@V8InspectorSession@v8_inspector@@QEAAAEAV012@AEBV012@@Z
??4Int16Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Int16Array@v8@@QEAAAEAV01@AEBV01@@Z
??4Int32@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Int32@v8@@QEAAAEAV01@AEBV01@@Z
??4Int32Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Int32Array@v8@@QEAAAEAV01@AEBV01@@Z
??4Int8Array@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Int8Array@v8@@QEAAAEAV01@AEBV01@@Z
??4Integer@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Integer@v8@@QEAAAEAV01@AEBV01@@Z
??4IsolatePlatformDelegate@node@@QEAAAEAV01@$$QEAV01@@Z
??4IsolatePlatformDelegate@node@@QEAAAEAV01@AEBV01@@Z
??4JSHeapConsistency@v8@@QEAAAEAV01@$$QEAV01@@Z
??4JSHeapConsistency@v8@@QEAAAEAV01@AEBV01@@Z
??4JSON@v8@@QEAAAEAV01@$$QEAV01@@Z
??4JSON@v8@@QEAAAEAV01@AEBV01@@Z
??4LivenessBroker@cppgc@@QEAAAEAV01@$$QEAV01@@Z
??4LivenessBroker@cppgc@@QEAAAEAV01@AEBV01@@Z
??4Location@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Location@v8@@QEAAAEAV01@AEBV01@@Z
??4LongTaskStats@metrics@v8@@QEAAAEAU012@$$QEAU012@@Z
??4LongTaskStats@metrics@v8@@QEAAAEAU012@AEBU012@@Z
??4MakeGarbageCollectedTraitInternal@internal@cppgc@@QEAAAEAV012@$$QEAV012@@Z
??4MakeGarbageCollectedTraitInternal@internal@cppgc@@QEAAAEAV012@AEBV012@@Z
??4Map@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Map@v8@@QEAAAEAV01@AEBV01@@Z
??4MeasureMemoryDelegate@v8@@QEAAAEAV01@AEBV01@@Z
??4Message@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Message@v8@@QEAAAEAV01@AEBV01@@Z
??4Module@v8@@QEAAAEAV01@$$QEAV01@@Z
??4Module@v8@@QEAAAEAV01@AEBV01@@Z
??4ModuleRequest@v8@@QEAAAEAV01@$$QEAV01@@Z

Sections

.text
Size: 113.7MB - Virtual size: 113.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20.7MB - Virtual size: 20.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 513KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 96B

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 617B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 925KB - Virtual size: 925KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
chrome_100_percent.pak
chrome_200_percent.pak
d3dcompiler_47.dll
.dll windows:10 windows x64 arch:x64

36f6d7806085bd3a70ed8c5dcb51f6c8

Code Sign

33:00:00:02:cf:6d:2c:c5:7c:aa:65:a6:d8:00:00:00:00:02:cf
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:25

Not After

02/05/2020, 21:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:55:bf:8b:65:d0:a7:9e:47:27:01:03:ac:36:3c:47:95:ee:1b:ca:2e:7b:8d:1f:48:c1:b8:b5:d8:05:0b:df
Signer

Actual PE Digest

e5:55:bf:8b:65:d0:a7:9e:47:27:01:03:ac:36:3c:47:95:ee:1b:ca:2e:7b:8d:1f:48:c1:b8:b5:d8:05:0b:df

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
strnlen
__isascii
wcsncmp
memset

api-ms-win-crt-math-l1-1-0

_finite
_isnan
floorf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_controlfp
_initterm
_clearfp

api-ms-win-crt-private-l1-1-0

_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_cosh
_o_exp
_o_fclose
_o_floor
_o_fmod
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_log
_o_malloc
_o_modf
_o_pow
_o_qsort
_o_setlocale
_o_sin
_o_sinh
_o_sqrt
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
__C_specific_handler
_o__cexit
_o__callnewh
_o__atoi64
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
memcmp
wcschr
wcsrchr
__CxxFrameHandler3
_o__chsize_s

kernel32

CreateFileA
MultiByteToWideChar
lstrcmpiA
GetModuleFileNameA
WideCharToMultiByte
InitializeCriticalSection
FlushViewOfFile
ResetEvent
SetFilePointer
HeapCreate
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
WaitForSingleObjectEx
CreateEventW
DisableThreadLibraryCalls
MapViewOfFileEx
GetEnvironmentVariableA
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
FreeLibrary
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent

advapi32

RegCloseKey
RegQueryValueExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
RegOpenKeyExW
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegEnumKeyExA
RegOpenKeyExA

api-ms-win-crt-time-l1-1-0

_time64

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 883KB - Virtual size: 883KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ffmpeg.dll
.dll windows:5 windows x64 arch:x64

6ed82d3226365ffafff2c57c1935d352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ffmpeg.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

av_buffer_create
av_buffer_get_opaque
av_dict_count
av_dict_free
av_dict_get
av_dict_set
av_force_cpu_flags
av_frame_alloc
av_frame_clone
av_frame_free
av_frame_unref
av_free
av_get_bytes_per_sample
av_get_cpu_flags
av_image_check_size
av_init_packet
av_log_set_level
av_malloc
av_max_alloc
av_new_packet
av_packet_alloc
av_packet_copy_props
av_packet_free
av_packet_get_side_data
av_packet_unref
av_rdft_calc
av_rdft_end
av_rdft_init
av_read_frame
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
av_stream_get_first_dts
av_strerror
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_descriptor_get
avcodec_descriptor_next
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_get_name
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context
avio_close

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
icudtl.dat
libEGL.dll
.dll windows:5 windows x64 arch:x64

403d8cc0d31f841d5bbf6b82c1ea957d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libEGL.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglExportVkImageANGLE
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglLockSurfaceKHR
eglMakeCurrent
eglPostSubBufferNV
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurface64KHR
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglUnlockSurfaceKHR
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libGLESv2.dll
.dll windows:5 windows x64 arch:x64

d899245aed11af82d1f638c3132629cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libGLESv2.dll.pdb

Imports

user32

CreateWindowExA
CreateWindowExW
DefWindowProcA
DestroyWindow
GetClassInfoA
GetClientRect
GetDC
GetWindowThreadProcessId
InvalidateRect
IsIconic
IsWindow
LoadCursorA
RegisterClassA
ReleaseDC
UnregisterClassA
WindowFromDC

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

dxgi

CreateDXGIFactory
CreateDXGIFactory1

gdi32

ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers

Exports

Exports

??0PlatformMethods@angle@@QEAA@XZ
??4PlatformMethods@angle@@QEAAAEAU01@$$QEAU01@@Z
??4PlatformMethods@angle@@QEAAAEAU01@AEBU01@@Z
ANGLEGetDisplayPlatform
ANGLEResetDisplayPlatform
Cr_z_adler32
Cr_z_adler32_combine
Cr_z_adler32_z
Cr_z_compress
Cr_z_compress2
Cr_z_compressBound
Cr_z_crc32
Cr_z_crc32_combine
Cr_z_crc32_z
Cr_z_deflate
Cr_z_deflateBound
Cr_z_deflateCopy
Cr_z_deflateEnd
Cr_z_deflateGetDictionary
Cr_z_deflateInit2_
Cr_z_deflateInit_
Cr_z_deflateParams
Cr_z_deflatePending
Cr_z_deflatePrime
Cr_z_deflateReset
Cr_z_deflateResetKeep
Cr_z_deflateSetDictionary
Cr_z_deflateSetHeader
Cr_z_deflateTune
Cr_z_get_crc_table
Cr_z_zError
Cr_z_zlibCompileFlags
Cr_z_zlibVersion
EGL_BindAPI
EGL_BindTexImage
EGL_ChooseConfig
EGL_ClientWaitSync
EGL_ClientWaitSyncKHR
EGL_CopyBuffers
EGL_CreateContext
EGL_CreateDeviceANGLE
EGL_CreateImage
EGL_CreateImageKHR
EGL_CreateNativeClientBufferANDROID
EGL_CreatePbufferFromClientBuffer
EGL_CreatePbufferSurface
EGL_CreatePixmapSurface
EGL_CreatePlatformPixmapSurface
EGL_CreatePlatformPixmapSurfaceEXT
EGL_CreatePlatformWindowSurface
EGL_CreatePlatformWindowSurfaceEXT
EGL_CreateStreamKHR
EGL_CreateStreamProducerD3DTextureANGLE
EGL_CreateSync
EGL_CreateSyncKHR
EGL_CreateWindowSurface
EGL_DebugMessageControlKHR
EGL_DestroyContext
EGL_DestroyImage
EGL_DestroyImageKHR
EGL_DestroyStreamKHR
EGL_DestroySurface
EGL_DestroySync
EGL_DestroySyncKHR
EGL_DupNativeFenceFDANDROID
EGL_ExportVkImageANGLE
EGL_GetCompositorTimingANDROID
EGL_GetCompositorTimingSupportedANDROID
EGL_GetConfigAttrib
EGL_GetConfigs
EGL_GetCurrentContext
EGL_GetCurrentDisplay
EGL_GetCurrentSurface
EGL_GetDisplay
EGL_GetError
EGL_GetFrameTimestampSupportedANDROID
EGL_GetFrameTimestampsANDROID
EGL_GetMscRateANGLE
EGL_GetNativeClientBufferANDROID
EGL_GetNextFrameIdANDROID
EGL_GetPlatformDisplay
EGL_GetPlatformDisplayEXT
EGL_GetProcAddress
EGL_GetSyncAttrib
EGL_GetSyncAttribKHR
EGL_GetSyncValuesCHROMIUM
EGL_HandleGPUSwitchANGLE
EGL_Initialize
EGL_LabelObjectKHR
EGL_LockSurfaceKHR
EGL_MakeCurrent
EGL_PostSubBufferNV
EGL_PresentationTimeANDROID
EGL_ProgramCacheGetAttribANGLE
EGL_ProgramCachePopulateANGLE
EGL_ProgramCacheQueryANGLE
EGL_ProgramCacheResizeANGLE
EGL_QueryAPI
EGL_QueryContext
EGL_QueryDebugKHR
EGL_QueryDeviceAttribEXT
EGL_QueryDeviceStringEXT
EGL_QueryDisplayAttribANGLE
EGL_QueryDisplayAttribEXT
EGL_QueryStreamKHR
EGL_QueryStreamu64KHR
EGL_QueryString
EGL_QueryStringiANGLE
EGL_QuerySurface
EGL_QuerySurface64KHR
EGL_QuerySurfacePointerANGLE
EGL_ReacquireHighPowerGPUANGLE
EGL_ReleaseDeviceANGLE
EGL_ReleaseHighPowerGPUANGLE
EGL_ReleaseTexImage
EGL_ReleaseThread
EGL_SetBlobCacheFuncsANDROID
EGL_SignalSyncKHR
EGL_StreamAttribKHR
EGL_StreamConsumerAcquireKHR
EGL_StreamConsumerGLTextureExternalAttribsNV
EGL_StreamConsumerGLTextureExternalKHR
EGL_StreamConsumerReleaseKHR
EGL_StreamPostD3DTextureANGLE
EGL_SurfaceAttrib
EGL_SwapBuffers
EGL_SwapBuffersWithDamageKHR
EGL_SwapBuffersWithFrameTokenANGLE
EGL_SwapInterval
EGL_Terminate
EGL_UnlockSurfaceKHR
EGL_WaitClient
EGL_WaitGL
EGL_WaitNative
EGL_WaitSync
EGL_WaitSyncKHR
GL_AcquireTexturesANGLE
GL_ActiveShaderProgram
GL_ActiveShaderProgramEXT
GL_ActiveTexture
GL_AlphaFunc
GL_AlphaFuncx
GL_AttachShader
GL_BeginQuery
GL_BeginQueryEXT
GL_BeginTransformFeedback
GL_BindAttribLocation
GL_BindBuffer
GL_BindBufferBase
GL_BindBufferRange
GL_BindFragDataLocationEXT
GL_BindFragDataLocationIndexedEXT
GL_BindFramebuffer
GL_BindFramebufferOES
GL_BindImageTexture
GL_BindProgramPipeline
GL_BindProgramPipelineEXT
GL_BindRenderbuffer
GL_BindRenderbufferOES
GL_BindSampler
GL_BindTexture
GL_BindTransformFeedback
GL_BindUniformLocationCHROMIUM
GL_BindVertexArray
GL_BindVertexArrayOES
GL_BindVertexBuffer
GL_BlendBarrier
GL_BlendBarrierKHR
GL_BlendColor
GL_BlendEquation
GL_BlendEquationSeparate
GL_BlendEquationSeparatei
GL_BlendEquationSeparateiEXT
GL_BlendEquationSeparateiOES
GL_BlendEquationi
GL_BlendEquationiEXT
GL_BlendEquationiOES
GL_BlendFunc
GL_BlendFuncSeparate
GL_BlendFuncSeparatei
GL_BlendFuncSeparateiEXT
GL_BlendFuncSeparateiOES
GL_BlendFunci
GL_BlendFunciEXT
GL_BlendFunciOES
GL_BlitFramebuffer
GL_BlitFramebufferANGLE
GL_BlitFramebufferNV
GL_BufferData
GL_BufferStorageEXT
GL_BufferStorageExternalEXT
GL_BufferStorageMemEXT
GL_BufferSubData
GL_CheckFramebufferStatus
GL_CheckFramebufferStatusOES
GL_Clear
GL_ClearBufferfi
GL_ClearBufferfv
GL_ClearBufferiv
GL_ClearBufferuiv
GL_ClearColor
GL_ClearColorx
GL_ClearDepthf
GL_ClearDepthx
GL_ClearStencil
GL_ClientActiveTexture
GL_ClientWaitSync
GL_ClipControlEXT
GL_ClipPlanef
GL_ClipPlanex
GL_Color4f
GL_Color4ub
GL_Color4x
GL_ColorMask
GL_ColorMaski
GL_ColorMaskiEXT
GL_ColorMaskiOES
GL_ColorPointer
GL_CompileShader
GL_CompressedCopyTextureCHROMIUM
GL_CompressedTexImage2D
GL_CompressedTexImage2DRobustANGLE
GL_CompressedTexImage3D
GL_CompressedTexImage3DOES
GL_CompressedTexImage3DRobustANGLE
GL_CompressedTexSubImage2D
GL_CompressedTexSubImage2DRobustANGLE
GL_CompressedTexSubImage3D
GL_CompressedTexSubImage3DOES
GL_CompressedTexSubImage3DRobustANGLE
GL_CopyBufferSubData
GL_CopyImageSubData
GL_CopyImageSubDataEXT
GL_CopyImageSubDataOES
GL_CopySubTexture3DANGLE
GL_CopySubTextureCHROMIUM
GL_CopyTexImage2D
GL_CopyTexSubImage2D
GL_CopyTexSubImage3D
GL_CopyTexSubImage3DOES
GL_CopyTexture3DANGLE
GL_CopyTextureCHROMIUM
GL_CoverageModulationCHROMIUM
GL_CreateMemoryObjectsEXT
GL_CreateProgram
GL_CreateShader
GL_CreateShaderProgramv
GL_CreateShaderProgramvEXT
GL_CullFace
GL_CurrentPaletteMatrixOES
GL_DebugMessageCallback
GL_DebugMessageCallbackKHR
GL_DebugMessageControl
GL_DebugMessageControlKHR
GL_DebugMessageInsert
GL_DebugMessageInsertKHR
GL_DeleteBuffers
GL_DeleteFencesNV
GL_DeleteFramebuffers
GL_DeleteFramebuffersOES
GL_DeleteMemoryObjectsEXT
GL_DeleteProgram
GL_DeleteProgramPipelines
GL_DeleteProgramPipelinesEXT
GL_DeleteQueries
GL_DeleteQueriesEXT
GL_DeleteRenderbuffers
GL_DeleteRenderbuffersOES
GL_DeleteSamplers
GL_DeleteSemaphoresEXT
GL_DeleteShader
GL_DeleteSync
GL_DeleteTextures
GL_DeleteTransformFeedbacks
GL_DeleteVertexArrays
GL_DeleteVertexArraysOES
GL_DepthFunc
GL_DepthMask
GL_DepthRangef
GL_DepthRangex
GL_DetachShader
GL_Disable
GL_DisableClientState
GL_DisableExtensionANGLE
GL_DisableVertexAttribArray
GL_Disablei
GL_DisableiEXT
GL_DisableiOES
GL_DiscardFramebufferEXT
GL_DispatchCompute
GL_DispatchComputeIndirect
GL_DrawArrays
GL_DrawArraysIndirect
GL_DrawArraysInstanced
GL_DrawArraysInstancedANGLE
GL_DrawArraysInstancedBaseInstanceANGLE
GL_DrawArraysInstancedEXT
GL_DrawBuffers
GL_DrawBuffersEXT
GL_DrawElements
GL_DrawElementsBaseVertex
GL_DrawElementsBaseVertexEXT
GL_DrawElementsBaseVertexOES
GL_DrawElementsIndirect
GL_DrawElementsInstanced
GL_DrawElementsInstancedANGLE
GL_DrawElementsInstancedBaseVertex
GL_DrawElementsInstancedBaseVertexBaseInstanceANGLE
GL_DrawElementsInstancedBaseVertexEXT
GL_DrawElementsInstancedBaseVertexOES
GL_DrawElementsInstancedEXT
GL_DrawRangeElements
GL_DrawRangeElementsBaseVertex
GL_DrawRangeElementsBaseVertexEXT
GL_DrawRangeElementsBaseVertexOES
GL_DrawTexfOES
GL_DrawTexfvOES
GL_DrawTexiOES
GL_DrawTexivOES
GL_DrawTexsOES
GL_DrawTexsvOES
GL_DrawTexxOES
GL_DrawTexxvOES
GL_EGLImageTargetRenderbufferStorageOES
GL_EGLImageTargetTexStorageEXT
GL_EGLImageTargetTexture2DOES
GL_EGLImageTargetTextureStorageEXT
GL_Enable
GL_EnableClientState
GL_EnableVertexAttribArray
GL_Enablei
GL_EnableiEXT
GL_EnableiOES
GL_EndQuery
GL_EndQueryEXT
GL_EndTransformFeedback
GL_FenceSync
GL_Finish
GL_FinishFenceNV
GL_Flush
GL_FlushMappedBufferRange
GL_FlushMappedBufferRangeEXT
GL_Fogf
GL_Fogfv
GL_Fogx
GL_Fogxv
GL_FramebufferFetchBarrierEXT
GL_FramebufferParameteri
GL_FramebufferRenderbuffer
GL_FramebufferRenderbufferOES
GL_FramebufferTexture
GL_FramebufferTexture2D
GL_FramebufferTexture2DMultisampleEXT
GL_FramebufferTexture2DOES
GL_FramebufferTexture3DOES
GL_FramebufferTextureEXT
GL_FramebufferTextureLayer
GL_FramebufferTextureMultiviewOVR
GL_FramebufferTextureOES
GL_FrontFace
GL_Frustumf
GL_Frustumx
GL_GenBuffers
GL_GenFencesNV
GL_GenFramebuffers
GL_GenFramebuffersOES
GL_GenProgramPipelines
GL_GenProgramPipelinesEXT
GL_GenQueries
GL_GenQueriesEXT
GL_GenRenderbuffers
GL_GenRenderbuffersOES
GL_GenSamplers
GL_GenSemaphoresEXT
GL_GenTextures
GL_GenTransformFeedbacks
GL_GenVertexArrays
GL_GenVertexArraysOES
GL_GenerateMipmap
GL_GenerateMipmapOES
GL_GetActiveAttrib
GL_GetActiveUniform
GL_GetActiveUniformBlockName
GL_GetActiveUniformBlockiv
GL_GetActiveUniformBlockivRobustANGLE
GL_GetActiveUniformsiv
GL_GetAttachedShaders
GL_GetAttribLocation
GL_GetBooleani_v
GL_GetBooleani_vRobustANGLE
GL_GetBooleanv
GL_GetBooleanvRobustANGLE
GL_GetBufferParameteri64v
GL_GetBufferParameteri64vRobustANGLE
GL_GetBufferParameteriv
GL_GetBufferParameterivRobustANGLE
GL_GetBufferPointerv
GL_GetBufferPointervOES
GL_GetBufferPointervRobustANGLE
GL_GetClipPlanef
GL_GetClipPlanex
GL_GetCompressedTexImageANGLE
GL_GetDebugMessageLog
GL_GetDebugMessageLogKHR
GL_GetError
GL_GetFenceivNV
GL_GetFixedv
GL_GetFloatv
GL_GetFloatvRobustANGLE
GL_GetFragDataIndexEXT
GL_GetFragDataLocation
GL_GetFramebufferAttachmentParameteriv
GL_GetFramebufferAttachmentParameterivOES
GL_GetFramebufferAttachmentParameterivRobustANGLE
GL_GetFramebufferParameteriv
GL_GetFramebufferParameterivRobustANGLE
GL_GetGraphicsResetStatus
GL_GetGraphicsResetStatusEXT
GL_GetInteger64i_v
GL_GetInteger64i_vRobustANGLE
GL_GetInteger64v
GL_GetInteger64vEXT
GL_GetInteger64vRobustANGLE
GL_GetIntegeri_v
GL_GetIntegeri_vRobustANGLE
GL_GetIntegerv
GL_GetIntegervRobustANGLE
GL_GetInternalformativ
GL_GetInternalformativRobustANGLE
GL_GetLightfv
GL_GetLightxv
GL_GetMaterialfv
GL_GetMaterialxv
GL_GetMemoryObjectParameterivEXT
GL_GetMultisamplefv
GL_GetMultisamplefvANGLE
GL_GetMultisamplefvRobustANGLE
GL_GetObjectLabel
GL_GetObjectLabelEXT
GL_GetObjectLabelKHR
GL_GetObjectPtrLabel
GL_GetObjectPtrLabelKHR
GL_GetPointerv
GL_GetPointervKHR
GL_GetPointervRobustANGLERobustANGLE
GL_GetProgramBinary
GL_GetProgramBinaryOES
GL_GetProgramInfoLog
GL_GetProgramInterfaceiv
GL_GetProgramInterfaceivRobustANGLE
GL_GetProgramPipelineInfoLog
GL_GetProgramPipelineInfoLogEXT
GL_GetProgramPipelineiv
GL_GetProgramPipelineivEXT
GL_GetProgramResourceIndex
GL_GetProgramResourceLocation
GL_GetProgramResourceLocationIndexEXT
GL_GetProgramResourceName
GL_GetProgramResourceiv
GL_GetProgramiv
GL_GetProgramivRobustANGLE
GL_GetQueryObjecti64vEXT
GL_GetQueryObjecti64vRobustANGLE
GL_GetQueryObjectivEXT
GL_GetQueryObjectivRobustANGLE
GL_GetQueryObjectui64vEXT
GL_GetQueryObjectui64vRobustANGLE
GL_GetQueryObjectuiv
GL_GetQueryObjectuivEXT
GL_GetQueryObjectuivRobustANGLE
GL_GetQueryiv
GL_GetQueryivEXT
GL_GetQueryivRobustANGLE
GL_GetRenderbufferImageANGLE
GL_GetRenderbufferParameteriv
GL_GetRenderbufferParameterivOES
GL_GetRenderbufferParameterivRobustANGLE
GL_GetSamplerParameterIiv
GL_GetSamplerParameterIivEXT
GL_GetSamplerParameterIivOES
GL_GetSamplerParameterIivRobustANGLE
GL_GetSamplerParameterIuiv
GL_GetSamplerParameterIuivEXT
GL_GetSamplerParameterIuivOES
GL_GetSamplerParameterIuivRobustANGLE
GL_GetSamplerParameterfv
GL_GetSamplerParameterfvRobustANGLE
GL_GetSamplerParameteriv
GL_GetSamplerParameterivRobustANGLE
GL_GetSemaphoreParameterui64vEXT
GL_GetShaderInfoLog
GL_GetShaderPrecisionFormat
GL_GetShaderSource
GL_GetShaderiv
GL_GetShaderivRobustANGLE
GL_GetString
GL_GetStringi
GL_GetSynciv
GL_GetTexEnvfv
GL_GetTexEnviv

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 258KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 305B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
locales/am.pak
locales/ar.pak
locales/bg.pak
locales/bn.pak
locales/ca.pak
locales/cs.pak
locales/da.pak
locales/de.pak
locales/el.pak
locales/en-GB.pak
locales/en-US.pak
locales/es-419.pak
locales/es.pak
locales/et.pak
locales/fa.pak
locales/fi.pak
locales/fil.pak
locales/fr.pak
locales/gu.pak
locales/he.pak
locales/hi.pak
locales/hr.pak
locales/hu.pak
locales/id.pak
locales/it.pak
locales/ja.pak
locales/kn.pak
locales/ko.pak
locales/lt.pak
locales/lv.pak
locales/ml.pak
locales/mr.pak
locales/ms.pak
locales/nb.pak
locales/nl.pak
locales/pl.pak
locales/pt-BR.pak
locales/pt-PT.pak
locales/ro.pak
locales/ru.pak
locales/sk.pak
locales/sl.pak
locales/sr.pak
locales/sv.pak
locales/sw.pak
locales/ta.pak
locales/te.pak
locales/th.pak
locales/tr.pak
locales/uk.pak
locales/vi.pak
locales/zh-CN.pak
locales/zh-TW.pak
resources.pak
resources/app-update.yml
resources/app.asar
.js
resources/app.asar.unpacked/release/main/assets/icons/prod/shadow-256x256.png
.png
resources/app.asar.unpacked/release/main/assets/icons/prod/shadow-64x64.png
.png
resources/app.asar.unpacked/release/main/assets/icons/prod/shadow.icns
resources/app.asar.unpacked/release/main/assets/icons/prod/shadow.ico
resources/app.asar.unpacked/release/main/assets/icons/prod/shadow.png
.png
resources/app.asar.unpacked/release/native/SDL2.dll
.dll windows:6 windows x64 arch:x64

5db36278f4d1f4bd83de510ca7dad329

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\sdl2-2.24.2-r0-windows-vs2019-x64-bender-1.5.0-Release\build\Release\SDL2.pdb

Imports

user32

SetForegroundWindow
SetActiveWindow
GetFocus
GetDoubleClickTime
RegisterDeviceNotificationW
UnregisterDeviceNotification
DefWindowProcW
UnregisterClassA
RegisterClassExA
CreateWindowExA
DestroyWindow
GetDesktopWindow
OpenClipboard
CloseClipboard
GetClipboardSequenceNumber
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
TrackMouseEvent
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
FlashWindowEx
SetPropW
ShowWindow
RegisterClassW
AttachThreadInput
SendMessageW
RegisterWindowMessageA
SetWindowRgn
CreateWindowExW
RegisterRawInputDevices
CreateIconIndirect
GetMessageExtraInfo
PostMessageW
CallWindowProcW
UnregisterClassW
RegisterClassExW
GetClassInfoExW
SetWindowPos
RemovePropW
SetWindowTextW
IsIconic
GetKeyState
GetAsyncKeyState
SetTimer
CopyImage
LoadCursorW
SetCursorPos
ReleaseCapture
GetWindowTextW
GetWindowTextLengthW
IntersectRect
PtInRect
SetWindowLongW
GetParent
GetWindowThreadProcessId
SetWindowsHookExW
UnhookWindowsHookEx
CreateIconFromResource
MonitorFromRect
MonitorFromWindow
MessageBoxA
GetRawInputDeviceInfoA
GetRawInputDeviceList
PostThreadMessageW
SetLayeredWindowAttributes
SetCapture
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
EnumDisplayDevicesW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
SystemParametersInfoW
SystemParametersInfoA
SetWindowLongPtrW
GetWindowLongPtrW
ReleaseDC
GetDC
DrawTextW
SetFocus
GetDlgItem
EndDialog
DialogBoxIndirectParamW
MapVirtualKeyW
ToUnicode
GetKeyboardState
GetKeyboardLayout
GetRawInputData
DestroyIcon
LoadIconW
CallNextHookEx
GetWindowLongW
IsRectEmpty
ClipCursor
ScreenToClient
ClientToScreen
GetClipCursor
GetCursorPos
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetPropW
ValidateRect
InvalidateRect
GetUpdateRect
GetForegroundWindow
GetMenu
GetSystemMetrics
KillTimer

gdi32

SelectObject
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontIndirectW
CreateDIBSection
GetTextExtentPoint32A
GetTextMetricsW
CreateDCW
CreateBitmap
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers
CombineRgn
CreateRectRgn
GetICMProfileW
GetDeviceGammaRamp
GetDeviceCaps
SetDeviceGammaRamp

winmm

waveInClose
waveOutGetNumDevs
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutOpen
waveOutClose
waveOutPrepareHeader
timeEndPeriod
timeBeginPeriod
waveInReset
waveInStart
waveOutUnprepareHeader
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveInOpen
waveInGetDevCapsW
waveInGetNumDevs
waveOutReset
waveOutWrite

imm32

ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetIMEFileNameA

ole32

CoCreateInstance
CLSIDFromString
PropVariantClear
CoTaskMemFree
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
CM_Locate_DevNodeA
CM_Get_Parent
CM_Get_Device_IDA
SetupDiGetDeviceRegistryPropertyA

shell32

DragQueryFileW
ExtractIconExW
DragAcceptFiles
SHGetFolderPathW
DragFinish
ShellExecuteW

kernel32

CreateEventW
WaitForSingleObject
ResetEvent
CancelIo
GetOverlappedResult
DeviceIoControl
CreateFileA
VerSetConditionMask
SetErrorMode
CloseHandle
SetFilePointerEx
SetFilePointer
ReadFile
GetFileSizeEx
CreateFileW
VirtualAlloc
LoadLibraryW
FreeLibrary
GetSystemInfo
GlobalMemoryStatusEx
WriteConsoleW
GetConsoleMode
AttachConsole
GetLastError
OutputDebugStringW
WriteFile
GetStdHandle
TerminateProcess
ExitProcess
GetCurrentProcess
VirtualFree
VirtualQuery
LoadLibraryExW
ReleaseSemaphore
GetModuleHandleW
LocalFree
FormatMessageW
VerifyVersionInfoW
CreateToolhelp32Snapshot
Process32First
Process32Next
WaitForSingleObjectEx
GetEnvironmentVariableA
SetEnvironmentVariableA
GetProcAddress
Sleep
QueryPerformanceFrequency
CreateSemaphoreW
WideCharToMultiByte
GlobalAlloc
GlobalUnlock
GlobalLock
GetTickCount
GetModuleFileNameW
MulDiv
CompareStringA
SetThreadExecutionState
GetCurrentThreadId
GetModuleHandleExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
IsDebuggerPresent
RaiseException
CreateThread
GetCurrentThread
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemPowerStatus
GetLocaleInfoA
CreateDirectoryW
QueryPerformanceCounter
LoadLibraryA

Exports

Exports

SDL_AddEventWatch
SDL_AddHintCallback
SDL_AddTimer
SDL_AllocFormat
SDL_AllocPalette
SDL_AllocRW
SDL_AtomicAdd
SDL_AtomicCAS
SDL_AtomicCASPtr
SDL_AtomicGet
SDL_AtomicGetPtr
SDL_AtomicLock
SDL_AtomicSet
SDL_AtomicSetPtr
SDL_AtomicTryLock
SDL_AtomicUnlock
SDL_AudioInit
SDL_AudioQuit
SDL_AudioStreamAvailable
SDL_AudioStreamClear
SDL_AudioStreamFlush
SDL_AudioStreamGet
SDL_AudioStreamPut
SDL_BuildAudioCVT
SDL_CalculateGammaRamp
SDL_CaptureMouse
SDL_ClearComposition
SDL_ClearError
SDL_ClearHints
SDL_ClearQueuedAudio
SDL_CloseAudio
SDL_CloseAudioDevice
SDL_ComposeCustomBlendMode
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertPixels
SDL_ConvertSurface
SDL_ConvertSurfaceFormat
SDL_CreateColorCursor
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateRGBSurfaceWithFormat
SDL_CreateRGBSurfaceWithFormatFrom
SDL_CreateRenderer
SDL_CreateSemaphore
SDL_CreateShapedWindow
SDL_CreateSoftwareRenderer
SDL_CreateSystemCursor
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateThread
SDL_CreateThreadWithStackSize
SDL_CreateWindow
SDL_CreateWindowAndRenderer
SDL_CreateWindowFrom
SDL_DXGIGetOutputInfo
SDL_DYNAPI_entry
SDL_DelEventWatch
SDL_DelHintCallback
SDL_Delay
SDL_DequeueAudio
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroyRenderer
SDL_DestroySemaphore
SDL_DestroyTexture
SDL_DestroyWindow
SDL_DetachThread
SDL_Direct3D9GetAdapterIndex
SDL_DisableScreenSaver
SDL_DuplicateSurface
SDL_EnableScreenSaver
SDL_EncloseFPoints
SDL_EnclosePoints
SDL_Error
SDL_EventState
SDL_FillRect
SDL_FillRects
SDL_FilterEvents
SDL_FlashWindow
SDL_FlushEvent
SDL_FlushEvents
SDL_FreeAudioStream
SDL_FreeCursor
SDL_FreeFormat
SDL_FreePalette
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_GL_BindTexture
SDL_GL_CreateContext
SDL_GL_DeleteContext
SDL_GL_ExtensionSupported
SDL_GL_GetAttribute
SDL_GL_GetCurrentContext
SDL_GL_GetCurrentWindow
SDL_GL_GetDrawableSize
SDL_GL_GetProcAddress
SDL_GL_GetSwapInterval
SDL_GL_LoadLibrary
SDL_GL_MakeCurrent
SDL_GL_ResetAttributes
SDL_GL_SetAttribute
SDL_GL_SetSwapInterval
SDL_GL_SwapWindow
SDL_GL_UnbindTexture
SDL_GL_UnloadLibrary
SDL_GUIDFromString
SDL_GUIDToString
SDL_GameControllerAddMapping
SDL_GameControllerAddMappingsFromRW
SDL_GameControllerClose
SDL_GameControllerEventState
SDL_GameControllerFromInstanceID
SDL_GameControllerFromPlayerIndex
SDL_GameControllerGetAppleSFSymbolsNameForAxis
SDL_GameControllerGetAppleSFSymbolsNameForButton
SDL_GameControllerGetAttached
SDL_GameControllerGetAxis
SDL_GameControllerGetAxisFromString
SDL_GameControllerGetBindForAxis
SDL_GameControllerGetBindForButton
SDL_GameControllerGetButton
SDL_GameControllerGetButtonFromString
SDL_GameControllerGetFirmwareVersion
SDL_GameControllerGetJoystick
SDL_GameControllerGetNumTouchpadFingers
SDL_GameControllerGetNumTouchpads
SDL_GameControllerGetPlayerIndex
SDL_GameControllerGetProduct
SDL_GameControllerGetProductVersion
SDL_GameControllerGetSensorData
SDL_GameControllerGetSensorDataRate
SDL_GameControllerGetSerial
SDL_GameControllerGetStringForAxis
SDL_GameControllerGetStringForButton
SDL_GameControllerGetTouchpadFinger
SDL_GameControllerGetType
SDL_GameControllerGetVendor
SDL_GameControllerHasAxis
SDL_GameControllerHasButton
SDL_GameControllerHasLED
SDL_GameControllerHasRumble
SDL_GameControllerHasRumbleTriggers
SDL_GameControllerHasSensor
SDL_GameControllerIsSensorEnabled
SDL_GameControllerMapping
SDL_GameControllerMappingForDeviceIndex
SDL_GameControllerMappingForGUID
SDL_GameControllerMappingForIndex
SDL_GameControllerName
SDL_GameControllerNameForIndex
SDL_GameControllerNumMappings
SDL_GameControllerOpen
SDL_GameControllerPath
SDL_GameControllerPathForIndex
SDL_GameControllerRumble
SDL_GameControllerRumbleTriggers
SDL_GameControllerSendEffect
SDL_GameControllerSetLED
SDL_GameControllerSetPlayerIndex
SDL_GameControllerSetSensorEnabled
SDL_GameControllerTypeForIndex
SDL_GameControllerUpdate
SDL_GetAssertionHandler
SDL_GetAssertionReport
SDL_GetAudioDeviceName
SDL_GetAudioDeviceSpec
SDL_GetAudioDeviceStatus
SDL_GetAudioDriver
SDL_GetAudioStatus
SDL_GetBasePath
SDL_GetCPUCacheLineSize
SDL_GetCPUCount
SDL_GetClipRect
SDL_GetClipboardText
SDL_GetClosestDisplayMode
SDL_GetColorKey
SDL_GetCurrentAudioDriver
SDL_GetCurrentDisplayMode
SDL_GetCurrentVideoDriver
SDL_GetCursor
SDL_GetDefaultAssertionHandler
SDL_GetDefaultAudioInfo
SDL_GetDefaultCursor
SDL_GetDesktopDisplayMode
SDL_GetDisplayBounds
SDL_GetDisplayDPI
SDL_GetDisplayMode
SDL_GetDisplayName
SDL_GetDisplayOrientation
SDL_GetDisplayUsableBounds
SDL_GetError
SDL_GetErrorMsg
SDL_GetEventFilter
SDL_GetGlobalMouseState
SDL_GetGrabbedWindow
SDL_GetHint
SDL_GetHintBoolean
SDL_GetKeyFromName
SDL_GetKeyFromScancode
SDL_GetKeyName
SDL_GetKeyboardFocus
SDL_GetKeyboardState
SDL_GetMemoryFunctions
SDL_GetModState
SDL_GetMouseFocus
SDL_GetMouseState
SDL_GetNumAllocations
SDL_GetNumAudioDevices
SDL_GetNumAudioDrivers
SDL_GetNumDisplayModes
SDL_GetNumRenderDrivers
SDL_GetNumTouchDevices
SDL_GetNumTouchFingers
SDL_GetNumVideoDisplays
SDL_GetNumVideoDrivers
SDL_GetOriginalMemoryFunctions
SDL_GetPerformanceCounter
SDL_GetPerformanceFrequency
SDL_GetPixelFormatName
SDL_GetPlatform
SDL_GetPointDisplayIndex
SDL_GetPowerInfo
SDL_GetPrefPath
SDL_GetPreferredLocales
SDL_GetQueuedAudioSize
SDL_GetRGB
SDL_GetRGBA
SDL_GetRectDisplayIndex
SDL_GetRelativeMouseMode
SDL_GetRelativeMouseState
SDL_GetRenderDrawBlendMode
SDL_GetRenderDrawColor
SDL_GetRenderDriverInfo
SDL_GetRenderTarget
SDL_GetRenderer
SDL_GetRendererInfo
SDL_GetRendererOutputSize
SDL_GetRevision
SDL_GetRevisionNumber
SDL_GetScancodeFromKey
SDL_GetScancodeFromName
SDL_GetScancodeName
SDL_GetShapedWindowMode
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_GetSurfaceColorMod
SDL_GetSystemRAM
SDL_GetTextureAlphaMod
SDL_GetTextureBlendMode
SDL_GetTextureColorMod
SDL_GetTextureScaleMode
SDL_GetTextureUserData
SDL_GetThreadID
SDL_GetThreadName
SDL_GetTicks
SDL_GetTicks64
SDL_GetTouchDevice
SDL_GetTouchDeviceType
SDL_GetTouchFinger
SDL_GetTouchName
SDL_GetVersion
SDL_GetVideoDriver
SDL_GetWindowBordersSize
SDL_GetWindowBrightness
SDL_GetWindowData
SDL_GetWindowDisplayIndex
SDL_GetWindowDisplayMode
SDL_GetWindowFlags
SDL_GetWindowFromID
SDL_GetWindowGammaRamp
SDL_GetWindowGrab
SDL_GetWindowICCProfile
SDL_GetWindowID
SDL_GetWindowKeyboardGrab
SDL_GetWindowMaximumSize
SDL_GetWindowMinimumSize
SDL_GetWindowMouseGrab
SDL_GetWindowMouseRect
SDL_GetWindowOpacity
SDL_GetWindowPixelFormat
SDL_GetWindowPosition
SDL_GetWindowSize
SDL_GetWindowSurface
SDL_GetWindowTitle
SDL_GetWindowWMInfo
SDL_GetYUVConversionMode
SDL_GetYUVConversionModeForResolution
SDL_HapticClose
SDL_HapticDestroyEffect
SDL_HapticEffectSupported
SDL_HapticGetEffectStatus
SDL_HapticIndex
SDL_HapticName
SDL_HapticNewEffect
SDL_HapticNumAxes
SDL_HapticNumEffects
SDL_HapticNumEffectsPlaying
SDL_HapticOpen
SDL_HapticOpenFromJoystick
SDL_HapticOpenFromMouse
SDL_HapticOpened
SDL_HapticPause
SDL_HapticQuery
SDL_HapticRumbleInit
SDL_HapticRumblePlay
SDL_HapticRumbleStop
SDL_HapticRumbleSupported
SDL_HapticRunEffect
SDL_HapticSetAutocenter
SDL_HapticSetGain
SDL_HapticStopAll
SDL_HapticStopEffect
SDL_HapticUnpause
SDL_HapticUpdateEffect
SDL_Has3DNow
SDL_HasARMSIMD
SDL_HasAVX
SDL_HasAVX2
SDL_HasAVX512F
SDL_HasAltiVec
SDL_HasClipboardText
SDL_HasColorKey
SDL_HasEvent
SDL_HasEvents
SDL_HasIntersection
SDL_HasIntersectionF
SDL_HasLASX
SDL_HasLSX
SDL_HasMMX
SDL_HasNEON
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_HasSSE3
SDL_HasSSE41
SDL_HasSSE42
SDL_HasScreenKeyboardSupport
SDL_HasSurfaceRLE
SDL_HideWindow
SDL_Init
SDL_InitSubSystem
SDL_IntersectFRect
SDL_IntersectFRectAndLine
SDL_IntersectRect
SDL_IntersectRectAndLine
SDL_IsGameController
SDL_IsScreenKeyboardShown
SDL_IsScreenSaverEnabled
SDL_IsShapedWindow
SDL_IsTablet
SDL_IsTextInputActive
SDL_IsTextInputShown
SDL_JoystickAttachVirtual
SDL_JoystickAttachVirtualEx
SDL_JoystickClose
SDL_JoystickCurrentPowerLevel
SDL_JoystickDetachVirtual
SDL_JoystickEventState
SDL_JoystickFromInstanceID
SDL_JoystickFromPlayerIndex
SDL_JoystickGetAttached
SDL_JoystickGetAxis
SDL_JoystickGetAxisInitialState
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetDeviceGUID
SDL_JoystickGetDeviceInstanceID
SDL_JoystickGetDevicePlayerIndex
SDL_JoystickGetDeviceProduct
SDL_JoystickGetDeviceProductVersion
SDL_JoystickGetDeviceType
SDL_JoystickGetDeviceVendor
SDL_JoystickGetFirmwareVersion
SDL_JoystickGetGUID
SDL_JoystickGetGUIDFromString
SDL_JoystickGetGUIDString
SDL_JoystickGetHat
SDL_JoystickGetPlayerIndex
SDL_JoystickGetProduct
SDL_JoystickGetProductVersion
SDL_JoystickGetSerial
SDL_JoystickGetType
SDL_JoystickGetVendor
SDL_JoystickHasLED
SDL_JoystickHasRumble
SDL_JoystickHasRumbleTriggers
SDL_JoystickInstanceID
SDL_JoystickIsHaptic
SDL_JoystickIsVirtual
SDL_JoystickName
SDL_JoystickNameForIndex
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickPath
SDL_JoystickPathForIndex
SDL_JoystickRumble
SDL_JoystickRumbleTriggers
SDL_JoystickSendEffect
SDL_JoystickSetLED
SDL_JoystickSetPlayerIndex
SDL_JoystickSetVirtualAxis
SDL_JoystickSetVirtualButton
SDL_JoystickSetVirtualHat
SDL_JoystickUpdate
SDL_LoadBMP_RW
SDL_LoadDollarTemplates
SDL_LoadFile
SDL_LoadFile_RW
SDL_LoadFunction
SDL_LoadObject
SDL_LoadWAV_RW
SDL_LockAudio
SDL_LockAudioDevice
SDL_LockJoysticks
SDL_LockMutex
SDL_LockSensors
SDL_LockSurface
SDL_LockTexture
SDL_LockTextureToSurface
SDL_Log
SDL_LogCritical
SDL_LogDebug
SDL_LogError
SDL_LogGetOutputFunction
SDL_LogGetPriority
SDL_LogInfo
SDL_LogMessage
SDL_LogMessageV
SDL_LogResetPriorities
SDL_LogSetAllPriority
SDL_LogSetOutputFunction
SDL_LogSetPriority
SDL_LogVerbose
SDL_LogWarn
SDL_LowerBlit
SDL_LowerBlitScaled
SDL_MapRGB
SDL_MapRGBA
SDL_MasksToPixelFormatEnum
SDL_MaximizeWindow
SDL_MemoryBarrierAcquireFunction
SDL_MemoryBarrierReleaseFunction
SDL_Metal_CreateView
SDL_Metal_DestroyView
SDL_Metal_GetDrawableSize
SDL_Metal_GetLayer
SDL_MinimizeWindow
SDL_MixAudio
SDL_MixAudioFormat
SDL_MouseIsHaptic
SDL_NewAudioStream
SDL_NumHaptics
SDL_NumJoysticks
SDL_NumSensors
SDL_OnApplicationDidBecomeActive
SDL_OnApplicationDidEnterBackground
SDL_OnApplicationDidReceiveMemoryWarning
SDL_OnApplicationWillEnterForeground
SDL_OnApplicationWillResignActive
SDL_OnApplicationWillTerminate
SDL_OpenAudio
SDL_OpenAudioDevice
SDL_OpenURL
SDL_PauseAudio
SDL_PauseAudioDevice
SDL_PeepEvents
SDL_PixelFormatEnumToMasks
SDL_PollEvent
SDL_PremultiplyAlpha
SDL_PumpEvents
SDL_PushEvent
SDL_QueryTexture
SDL_QueueAudio
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_RWclose
SDL_RWread
SDL_RWseek
SDL_RWsize
SDL_RWtell
SDL_RWwrite
SDL_RaiseWindow
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/Shadow.exe
.exe windows:6 windows x64 arch:x64

fcf61a596faeda2022bbe4ff4a106c8a

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:40:b0:41:3a:bd:36:fc:ca:78:a3:86:4f:fc:ee:b1:3d:b0:ec:9a:bb:15:0f:8b:7a:ce:8b:51:b8:59:34:33
Signer

Actual PE Digest

fa:40:b0:41:3a:bd:36:fc:ca:78:a3:86:4f:fc:ee:b1:3d:b0:ec:9a:bb:15:0f:8b:7a:ce:8b:51:b8:59:34:33

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\4\blade-group\dev\clients\apps\unified\build\RelWithDebInfo\Shadow.pdb

Imports

uv

uv_loop_close
uv_freeaddrinfo
uv_getaddrinfo
uv_udp_recv_start
uv_recv_buffer_size
uv_udp_recv_stop
uv_udp_connect
uv_udp_init_ex
uv_udp_try_send
uv_udp_send
uv_send_buffer_size
uv_tcp_nodelay
uv_tcp_keepalive
uv_tcp_init_ex
uv_tcp_connect
uv_write
uv_pipe_init
uv_pipe_open
uv_read_start
uv_try_write
uv_read_stop
uv_timer_again
uv_buf_init
uv_stop
uv_prepare_start
uv_prepare_stop
uv_err_name
uv_walk
uv_prepare_init
uv_exepath
uv_cwd
uv_fs_mkdir
uv_default_loop
uv_fs_req_cleanup
uv_fs_readdir
uv_fs_opendir
uv_os_homedir
uv_fs_closedir
uv_loop_init
uv_strerror
uv_async_init
uv_async_send
uv_timer_start
uv_is_closing
uv_timer_stop
uv_timer_init
uv_close
uv_run
uv_is_active

avcodec-58

avcodec_get_name
avcodec_open2
avcodec_send_packet
avcodec_receive_frame
av_packet_free
avcodec_alloc_context3
av_packet_alloc
avcodec_free_context
av_init_packet
avcodec_find_decoder_by_name
avcodec_find_decoder
avcodec_get_hw_config

avformat-58

av_find_best_stream
av_read_frame
av_dump_format
avformat_find_stream_info
avformat_free_context
avformat_open_input
avformat_alloc_context

avutil-56

av_free
av_hwdevice_ctx_create
av_frame_alloc
av_malloc
av_hwdevice_find_type_by_name
av_buffer_ref
av_buffer_unref
av_pix_fmt_desc_get
av_frame_free
av_strerror
av_hwframe_transfer_data

flac++

??0Stream@Decoder@FLAC@@QEAA@XZ
?is_valid@Stream@Decoder@FLAC@@UEBA_NXZ
?set_ogg_serial_number@Stream@Decoder@FLAC@@UEAA_NJ@Z
?set_md5_checking@Stream@Decoder@FLAC@@UEAA_N_N@Z
?set_metadata_respond@Stream@Decoder@FLAC@@UEAA_NW4FLAC__MetadataType@@@Z
?set_metadata_respond_application@Stream@Decoder@FLAC@@UEAA_NQEBE@Z
?set_metadata_respond_all@Stream@Decoder@FLAC@@UEAA_NXZ
?set_metadata_ignore@Stream@Decoder@FLAC@@UEAA_NW4FLAC__MetadataType@@@Z
?set_metadata_ignore_application@Stream@Decoder@FLAC@@UEAA_NQEBE@Z
?set_metadata_ignore_all@Stream@Decoder@FLAC@@UEAA_NXZ
?get_state@Stream@Decoder@FLAC@@QEBA?AVState@123@XZ
?get_md5_checking@Stream@Decoder@FLAC@@UEBA_NXZ
?get_total_samples@Stream@Decoder@FLAC@@UEBA_KXZ
?get_channels@Stream@Decoder@FLAC@@UEBAIXZ
?get_channel_assignment@Stream@Decoder@FLAC@@UEBA?AW4FLAC__ChannelAssignment@@XZ
?get_bits_per_sample@Stream@Decoder@FLAC@@UEBAIXZ
?get_sample_rate@Stream@Decoder@FLAC@@UEBAIXZ
?get_blocksize@Stream@Decoder@FLAC@@UEBAIXZ
?get_decode_position@Stream@Decoder@FLAC@@UEBA_NPEA_K@Z
?init@Stream@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@XZ
?init_ogg@Stream@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@XZ
?finish@Stream@Decoder@FLAC@@UEAA_NXZ
?flush@Stream@Decoder@FLAC@@UEAA_NXZ
?reset@Stream@Decoder@FLAC@@UEAA_NXZ
?process_single@Stream@Decoder@FLAC@@UEAA_NXZ
?process_until_end_of_metadata@Stream@Decoder@FLAC@@UEAA_NXZ
?process_until_end_of_stream@Stream@Decoder@FLAC@@UEAA_NXZ
?skip_single_frame@Stream@Decoder@FLAC@@UEAA_NXZ
?seek_absolute@Stream@Decoder@FLAC@@UEAA_N_K@Z
?seek_callback@Stream@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderSeekStatus@@_K@Z
?tell_callback@Stream@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderTellStatus@@PEA_K@Z
?length_callback@Stream@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderLengthStatus@@PEA_K@Z
?eof_callback@Stream@Decoder@FLAC@@MEAA_NXZ
?metadata_callback@Stream@Decoder@FLAC@@MEAAXPEBUFLAC__StreamMetadata@@@Z
??1Stream@Decoder@FLAC@@UEAA@XZ

h2645bitstream

hevc_is_irap
hevc_free
hevc_read_nal_unit
hevc_new
hevc_is_idr
h264_new
h264_read_nal_unit
h264_free
find_nal_unit

advapi32

CryptSetHashParam
RegOpenKeyExW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
RegQueryValueExW
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegCloseKey
RegEnumValueW

shell32

ShellExecuteW
DragQueryFileW

user32

GetMessageTime
ReleaseCapture
BeginPaint
EndPaint
MessageBoxW
GetMessageW
DefWindowProcW
AdjustWindowRectEx
PostMessageW
MonitorFromPoint
GetWindowRect
DestroyWindow
GetDoubleClickTime
SetWindowPos
GetSystemMetrics
CopyImage
MonitorFromRect
MonitorFromWindow
SetWindowLongPtrW
EnumDisplayMonitors
CreateWindowExW
ScreenToClient
CallNextHookEx
GetWindowLongPtrW
RegisterClassExW
SetProcessDPIAware
TrackMouseEvent
GetDC
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetCapture
GetKeyboardState
SendMessageW
GetTouchInputInfo
CloseTouchInputHandle
GetMessageExtraInfo
SystemParametersInfoW
GetProcessWindowStation
GetClipboardOwner
GetUserObjectInformationW
UnregisterClassW
ToAscii
GetCursorPos
ReleaseDC
SetCursorPos
LoadImageW
PtInRect
KillTimer
IsClipboardFormatAvailable
AddClipboardFormatListener
GetClientRect
SetWindowLongW
SetCursor
SetClipboardData
SetWindowsHookExW
RemoveClipboardFormatListener
GetDisplayConfigBufferSizes
GetClipboardData
TranslateMessage
RegisterRawInputDevices
SetFocus
UnhookWindowsHookEx
EnumClipboardFormats
GetForegroundWindow
MapVirtualKeyA
GetRawInputData
SetWindowPlacement
QueryDisplayConfig
EmptyClipboard
CloseClipboard
ClientToScreen
CreateIconIndirect
GetMonitorInfoW
DestroyIcon
GetCursorInfo
SetTimer
DispatchMessageW
OpenClipboard
ShowWindow
GetWindowLongW

ws2_32

closesocket
WSACleanup
WSAGetLastError
WSASetLastError
send
recv
ntohl
ntohs
htonl
htons

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

crypt32

CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

sentry

sentry_uuid_from_string
sentry_value_new_string
sentry_init
sentry_value_append
sentry_shutdown
sentry_options_add_attachment
sentry_set_extra
sentry_uuid_nil
sentry_uuid_is_nil
sentry_options_set_handler_path
sentry_value_new_object
sentry_value_new_list
sentry_set_level
sentry_options_set_dsn
sentry_value_new_int32
sentry_value_new_bool
sentry_options_set_release
sentry_uuid_as_string
sentry_value_new_event
sentry_options_new
sentry_set_user
sentry_options_set_database_pathw
sentry_options_set_logger
sentry_uuid_from_bytes
sentry_options_set_debug
sentry_value_set_by_key
sentry_capture_event

sdl2

SDL_OpenAudioDevice
SDL_GetNumAudioDevices
SDL_CloseAudioDevice
SDL_memset
SDL_GetAudioDeviceStatus
SDL_PauseAudioDevice
SDL_GetAudioDeviceName
SDL_GameControllerGetAxis
SDL_SetMainReady
SDL_GameControllerAddMappingsFromRW
SDL_RWFromFile
SDL_GameControllerGetButton
SDL_GameControllerGetJoystick
SDL_JoystickCurrentPowerLevel
SDL_GameControllerGetAttached
SDL_WasInit
SDL_GameControllerName
SDL_InitSubSystem
SDL_GameControllerGetVendor
SDL_GameControllerOpen
SDL_GameControllerGetProduct
SDL_GameControllerClose
SDL_SetHint
SDL_JoystickInstanceID
SDL_GetError
SDL_GameControllerRumble
SDL_NumJoysticks
SDL_GameControllerEventState
SDL_GameControllerUpdate

setupapi

SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsExW
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

libcef

cef_string_map_append
cef_enable_highdpi_support
cef_do_message_loop_work
cef_shutdown
cef_initialize
cef_execute_process
cef_string_userfree_utf16_free
cef_log
cef_browser_host_create_browser_sync
cef_string_list_free
cef_string_list_alloc
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_wide_to_utf16
cef_string_utf16_set
cef_string_utf8_to_utf16
cef_string_utf16_clear
cef_string_map_key
cef_string_map_size
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_map_free
cef_string_map_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_string_multimap_size
cef_dictionary_value_create
cef_list_value_create
cef_process_message_create
cef_api_hash
cef_string_map_value

u2ec

ord8
ord11
ord1
ord2
ord7
ord50
ord40
ord6
ord10
ord4
ord52
ord44
ord33
ord3
ord9

kernel32

ReadConsoleW
ReadConsoleA
SetConsoleMode
GetCurrentDirectoryW
ConvertFiberToThread
RtlVirtualUnwind
GetSystemTimeAsFileTime
GetFileType
GetEnvironmentVariableW
GetModuleHandleExW
ConvertThreadToFiber
EncodePointer
LCMapStringEx
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
DeleteFileW
MoveFileExW
ExitProcess
SetStdHandle
CreateDirectoryW
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetConsoleCtrlHandler
SetEnvironmentVariableW
LoadLibraryA
FindNextFileW
FindFirstFileW
FindClose
CreateFiber
DeleteFiber
SwitchToFiber
TlsFree
TlsSetValue
CompareStringW
TlsAlloc
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetFullPathNameW
SetEndOfFile
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
GetSystemTime
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
WriteConsoleA
GetConsoleMode
GetStdHandle
WriteFile
GetDynamicTimeZoneInformation
GetCurrentProcessId
Sleep
GetFileAttributesW
WriteConsoleW
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
CreateThread
CloseHandle
WaitForSingleObjectEx
TerminateThread
CreateEventW
WaitForSingleObject
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
MultiByteToWideChar
VerifyVersionInfoW
VerSetConditionMask
GetLocaleInfoW
GetUserDefaultLangID
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
SetLastError
FreeLibrary
GetModuleHandleW
SetThreadExecutionState
GlobalMemoryStatusEx
DeleteCriticalSection
GetProcAddress
DecodePointer
LoadLibraryW
GetSystemInfo
RaiseException
GetNativeSystemInfo
GetLastError
InitializeCriticalSectionEx
GetSystemPowerStatus
CompareStringEx
GetCPInfo
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
SetEvent
ResetEvent
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
RtlUnwindEx
InterlockedPushEntrySList
RtlPcToFileHeader
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeZoneInformation
GetTimeFormatW
TlsGetValue
RtlUnwind
GetExitCodeThread

gdi32

CreateBitmap
CreateDIBSection
DeleteObject

ole32

CoInitializeEx
CoTaskMemFree
CoUninitialize
PropVariantClear
RevokeDragDrop
RegisterDragDrop
OleInitialize
CoCreateInstance

oleaut32

VariantInit
SysAllocString

bcrypt

BCryptGenRandom

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/ShadowHelper.exe
.exe windows:6 windows x64 arch:x64

ae39c70c65ac35cc6650b437130da5ae

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:36:43:5e:19:47:69:15:c2:47:df:b7:60:90:fa:e4:5b:e2:bc:20:09:24:61:67:cb:78:b3:84:0a:d4:17:54
Signer

Actual PE Digest

2b:36:43:5e:19:47:69:15:c2:47:df:b7:60:90:fa:e4:5b:e2:bc:20:09:24:61:67:cb:78:b3:84:0a:d4:17:54

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\4\blade-group\dev\clients\apps\unified\build\RelWithDebInfo\ShadowHelper.pdb

Imports

libcef

cef_string_multimap_alloc
cef_string_multimap_free
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_command_line_create
cef_string_map_free
cef_string_map_alloc
cef_api_hash
cef_enable_highdpi_support
cef_execute_process
cef_process_message_create
cef_v8value_create_function
cef_v8value_create_array
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_double
cef_v8value_create_int
cef_v8value_create_bool
cef_v8value_create_null
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_log
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_utf16_set
cef_string_utf8_to_utf16
cef_string_utf16_clear

kernel32

CloseHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
SetFilePointerEx
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
HeapFree
HeapAlloc
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
RtlUnwindEx
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCPInfo
GetStringTypeW
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
SetLastError
GetLastError
GetModuleHandleW
GetCommandLineW
WriteConsoleW
CreateFileW

Sections

.text
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/UsbAllowedFilter.json
resources/app.asar.unpacked/release/native/avcodec-58.dll
.dll windows:6 windows x64 arch:x64

96559867f3b9e52148bf97ec308ba44a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\ffmpeg-4.2.2-r13-windows-vs2019-x64-bender-1.2.0-Release\build\libavcodec\avcodec-58.pdb

Imports

avutil-56

av_get_pix_fmt_loss
av_find_best_pix_fmt_of_2
av_image_fill_max_pixsteps
av_gcd
av_strerror
av_dict_copy
av_fourcc_make_string
av_frame_set_qp_table
av_stereo3d_alloc
av_div_q
av_d2q
av_timecode_make_mpeg_tc_string
av_buffer_make_writable
av_memdup
av_fast_realloc
av_buffer_pool_init2
av_fifo_alloc
av_fifo_freep
av_fifo_reset
av_fifo_size
av_fifo_generic_read
av_fifo_generic_write
av_md5_update
av_opt_set
av_opt_copy
av_cpu_count
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free
av_get_media_type_string
av_log_get_level
av_strlcat
av_strlcatf
av_match_list
av_get_channel_layout_string
av_get_sample_fmt_name
av_get_planar_sample_fmt
av_get_bytes_per_sample
av_samples_fill_arrays
av_get_colorspace_name
av_get_bits_per_pixel
av_color_range_name
av_chroma_location_name
av_opt_set_dict
av_get_cpu_flags
av_md5_init
av_md5_alloc
av_content_light_metadata_create_side_data
av_mastering_display_metadata_create_side_data
av_memcpy_backptr
av_stereo3d_create_side_data
av_frame_new_side_data_from_buf
av_pix_fmt_get_chroma_sub_sample
av_fast_mallocz
av_fast_malloc
av_buffer_get_ref_count
av_color_space_name
av_color_transfer_name
av_color_primaries_name
avpriv_report_missing_feature
av_rescale
av_display_matrix_flip
av_display_rotation_set
av_display_rotation_get
av_reduce
av_reallocp_array
av_frame_make_writable
av_frame_ref
av_image_check_size
av_get_picture_type_char
av_frame_get_side_data
av_frame_get_buffer
av_samples_set_silence
av_usleep
av_get_channel_layout_nb_channels
av_image_check_sar
av_image_check_size2
av_image_fill_pointers
av_image_fill_linesizes
av_get_pix_fmt_name
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_hwframe_get_buffer
av_md5_final
av_hwframe_ctx_init
av_hwframe_ctx_alloc
av_hwdevice_get_type_name
av_frame_apply_cropping
av_frame_new_side_data
av_frame_copy_props
av_frame_copy
av_frame_is_writable
av_frame_move_ref
av_frame_unref
av_frame_free
av_frame_alloc
av_samples_copy
av_samples_get_buffer_size
av_sample_fmt_is_planar
av_buffer_pool_get
av_buffer_pool_uninit
av_buffer_pool_init
av_bprint_clear
av_get_token
avpriv_set_systematic_pal2
av_mul_q
avpriv_emms_asm
av_realloc_array
av_mallocz_array
av_buffer_allocz
av_reallocp
av_bprint_finalize
av_bprintf
av_bprint_init
av_strtok
av_opt_set_dict2
av_opt_free
av_dict_free
av_dict_parse_string
av_dynarray_add_nofree
av_strdup
av_default_item_name
av_opt_next
av_opt_set_from_string
avpriv_request_sample
av_realloc_f
av_image_copy_to_buffer
av_image_get_buffer_size
av_image_fill_arrays
av_image_copy
av_image_alloc
av_buffer_realloc
av_buffer_is_writable
av_buffer_unref
av_buffer_ref
av_buffer_default_free
av_buffer_create
av_buffer_alloc
av_rescale_q
av_dict_set
av_dict_get
av_log
av_freep
av_free
av_realloc
av_malloc_array
av_malloc
av_opt_set_defaults
av_opt_set_defaults2
av_mallocz

ole32

CoTaskMemFree

kernel32

RtlUnwind
HeapReAlloc
HeapSize
GetStringTypeW
GetFileSizeEx
GetFileAttributesExW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
ReadConsoleW
ReadFile
SetEndOfFile
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetStdHandle
GetCurrentThread
HeapAlloc
HeapFree
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetFileType
CreateFileW
RtlPcToFileHeader
RaiseException
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
CloseHandle
LoadLibraryExW
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
MultiByteToWideChar
WaitForSingleObjectEx
ReleaseMutex
InitOnceComplete
InitOnceBeginInitialize
GetTempPathW
WriteConsoleW
OutputDebugStringW
FlushFileBuffers

Exports

Exports

av_ac3_parse_header
av_adts_header_parse
av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_bitstream_filter_next
av_bsf_alloc
av_bsf_flush
av_bsf_free
av_bsf_get_by_name
av_bsf_get_class
av_bsf_get_null_filter
av_bsf_init
av_bsf_iterate
av_bsf_list_alloc
av_bsf_list_append
av_bsf_list_append2
av_bsf_list_finalize
av_bsf_list_free
av_bsf_list_parse_str
av_bsf_next
av_bsf_receive_packet
av_bsf_send_packet
av_codec_ffversion
av_codec_get_chroma_intra_matrix
av_codec_get_codec_descriptor
av_codec_get_codec_properties
av_codec_get_lowres
av_codec_get_max_lowres
av_codec_get_pkt_timebase
av_codec_get_seek_preroll
av_codec_is_decoder
av_codec_is_encoder
av_codec_iterate
av_codec_next
av_codec_set_chroma_intra_matrix
av_codec_set_codec_descriptor
av_codec_set_lowres
av_codec_set_pkt_timebase
av_codec_set_seek_preroll
av_copy_packet
av_copy_packet_side_data
av_cpb_properties_alloc
av_d3d11va_alloc_context
av_dirac_parse_sequence_header
av_dup_packet
av_dv_codec_profile
av_dv_codec_profile2
av_dv_frame_profile
av_fast_padded_malloc
av_fast_padded_mallocz
av_fopen_utf8
av_free_packet
av_get_audio_frame_duration
av_get_audio_frame_duration2
av_get_bits_per_sample
av_get_codec_tag_string
av_get_exact_bits_per_sample
av_get_pcm_codec
av_get_profile_name
av_grow_packet
av_hwaccel_next
av_init_packet
av_jni_get_java_vm
av_jni_set_java_vm
av_lockmgr_register
av_mediacodec_alloc_context
av_mediacodec_default_free
av_mediacodec_default_init
av_mediacodec_release_buffer
av_mediacodec_render_buffer_at_time
av_new_packet
av_packet_add_side_data
av_packet_alloc
av_packet_clone
av_packet_copy_props
av_packet_free
av_packet_free_side_data
av_packet_from_data
av_packet_get_side_data
av_packet_make_refcounted
av_packet_make_writable
av_packet_merge_side_data
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_shrink_side_data
av_packet_side_data_name
av_packet_split_side_data
av_packet_unpack_dictionary
av_packet_unref
av_parser_change
av_parser_close
av_parser_init
av_parser_iterate
av_parser_next
av_parser_parse2
av_picture_copy
av_picture_crop
av_picture_pad
av_qsv_alloc_context
av_register_bitstream_filter
av_register_codec_parser
av_register_hwaccel
av_shrink_packet
av_vorbis_parse_frame
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_configuration
avcodec_copy_context
avcodec_dct_alloc
avcodec_dct_get_class
avcodec_dct_init
avcodec_decode_audio4
avcodec_decode_subtitle2
avcodec_decode_video2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_get_buffer2
avcodec_default_get_format
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_encode_audio2
avcodec_encode_subtitle
avcodec_encode_video2
avcodec_enum_to_chroma_pos
avcodec_fill_audio_frame
avcodec_find_best_pix_fmt2
avcodec_find_best_pix_fmt_of_2
avcodec_find_best_pix_fmt_of_list
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_chroma_sub_sample
avcodec_get_class
avcodec_get_context_defaults3
avcodec_get_frame_class
avcodec_get_hw_config
avcodec_get_hw_frames_parameters
avcodec_get_name
avcodec_get_pix_fmt_loss
avcodec_get_subtitle_rect_class
avcodec_get_type
avcodec_is_open
avcodec_license
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_pix_fmt_to_codec_tag
avcodec_profile_name
avcodec_receive_frame
avcodec_receive_packet
avcodec_register
avcodec_register_all
avcodec_send_frame
avcodec_send_packet
avcodec_string
avcodec_version
avpicture_alloc
avpicture_fill
avpicture_free
avpicture_get_size
avpicture_layout
avpriv_ac3_parse_header
avpriv_align_put_bits
avpriv_bprint_to_extradata
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_copy_bits
avpriv_exif_decode_ifd
avpriv_find_pix_fmt
avpriv_find_start_code
avpriv_get_raw_pix_fmt_tags
avpriv_h264_has_num_reorder_frames
avpriv_mjpeg_bits_ac_chrominance
avpriv_mjpeg_bits_ac_luminance
avpriv_mjpeg_bits_dc_chrominance
avpriv_mjpeg_bits_dc_luminance
avpriv_mjpeg_val_ac_chrominance
avpriv_mjpeg_val_ac_luminance
avpriv_mjpeg_val_dc
avpriv_pix_fmt_bps_avi
avpriv_pix_fmt_bps_mov
avpriv_put_string
avpriv_split_xiph_headers
avpriv_toupper4
avsubtitle_free

Sections

.text
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/avformat-58.dll
.dll windows:6 windows x64 arch:x64

e10089374baa319eb924bb75410510f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\ffmpeg-4.2.2-r13-windows-vs2019-x64-bender-1.2.0-Release\build\libavformat\avformat-58.pdb

Imports

avcodec-58

avcodec_find_decoder
av_packet_make_refcounted
av_packet_get_side_data
av_packet_new_side_data
av_grow_packet
av_packet_free
avcodec_decode_subtitle2
avcodec_alloc_context3
av_packet_alloc
avcodec_close
avcodec_open2
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_alloc
avcodec_send_packet
avcodec_receive_frame
av_parser_init
av_parser_parse2
av_parser_close
avcodec_pix_fmt_to_codec_tag
av_get_audio_frame_duration2
av_bitstream_filter_filter
av_bsf_get_by_name
av_bsf_alloc
av_bsf_init
av_bsf_free
avcodec_get_name
avcodec_is_open
av_codec_is_decoder
avpriv_h264_has_num_reorder_frames
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_get_raw_pix_fmt_tags
avcodec_find_decoder_by_name
av_codec_next
av_shrink_packet
av_new_packet
avpriv_toupper4
avcodec_descriptor_get
av_bsf_receive_packet
av_bsf_send_packet
av_get_audio_frame_duration
av_get_bits_per_sample
av_packet_unref
av_packet_ref
avcodec_parameters_from_context
av_init_packet
avcodec_string
avcodec_parameters_to_context
avcodec_free_context
avpriv_find_pix_fmt

avutil-56

av_frame_alloc
av_buffer_ref
av_buffer_default_free
av_buffer_create
av_gettime
av_opt_ptr
av_opt_get_dict_val
av_opt_set_dict_val
av_opt_next
av_opt_set_from_string
avpriv_dict_set_timestamp
av_add_stable
av_compare_mod
av_rescale_rnd
av_gcd
av_div_q
av_mul_q
av_dynarray_add
av_memdup
av_strndup
av_fast_realloc
av_realloc_array
av_realloc
av_strlcatf
av_strlcat
av_strerror
av_pix_fmt_desc_get
av_opt_set_dict2
av_frame_free
av_fourcc_make_string
av_compare_ts
av_rescale_q_rnd
av_rescale_q
av_strcasecmp
av_buffer_unref
av_buffer_alloc
av_dynarray_add_nofree
av_fast_malloc
av_dict_free
av_dict_copy
av_bprint_finalize
av_bprint_chars
av_parse_time
av_bprint_init
av_strncasecmp
av_asprintf
av_dict_set_int
av_opt_get
av_match_name
av_mallocz_array
av_stereo3d_type_name
av_spherical_projection_name
av_spherical_tile_bounds
av_display_rotation_get
av_dict_count
av_rescale
av_reduce
av_get_picture_type_char
av_get_channel_name
av_realloc_f
av_reallocp
av_crc
av_crc_get_table
av_bprint_clear
av_bprint_append_data
av_default_item_name
av_usleep
av_gettime_relative
av_opt_copy
av_opt_set
av_opt_set_dict
av_opt_free
av_opt_set_defaults
av_log
av_strdup
av_freep
av_free
av_mallocz
av_malloc
av_dict_set
av_dict_get
av_match_list
av_strlcpy
av_strstart
av_bprintf

ws2_32

getaddrinfo
select
ioctlsocket
__WSAFDIsSet
getnameinfo
WSAGetLastError
WSACleanup
WSAStartup
freeaddrinfo
setsockopt
ntohl
listen
getsockopt
connect
closesocket
bind
accept
socket

kernel32

RtlUnwind
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MultiByteToWideChar
MoveFileExW
MoveFileExA
InitOnceComplete
InitOnceBeginInitialize
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
SetFilePointerEx
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
OutputDebugStringW
GetTempPathW
WriteConsoleW
FlushFileBuffers
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetStringTypeW
GetFileSizeEx
GetFileAttributesExW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetEndOfFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetStdHandle
GetStdHandle
GetCurrentThread
HeapAlloc
HeapFree
SetConsoleCtrlHandler
GetConsoleOutputCP
WriteFile
ReadConsoleW
GetConsoleMode
ReadFile
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
CreateDirectoryW
FileTimeToSystemTime
GetCurrentProcessId

Exports

Exports

av_add_index_entry
av_append_packet
av_apply_bitstream_filters
av_codec_get_id
av_codec_get_tag
av_codec_get_tag2
av_demuxer_iterate
av_demuxer_open
av_dump_format
av_filename_number_test
av_find_best_stream
av_find_default_stream_index
av_find_input_format
av_find_program_from_stream
av_fmt_ctx_get_duration_estimation_method
av_fopen_utf8
av_format_ffversion
av_format_get_audio_codec
av_format_get_control_message_cb
av_format_get_data_codec
av_format_get_metadata_header_padding
av_format_get_opaque
av_format_get_open_cb
av_format_get_probe_score
av_format_get_subtitle_codec
av_format_get_video_codec
av_format_inject_global_side_data
av_format_set_audio_codec
av_format_set_control_message_cb
av_format_set_data_codec
av_format_set_metadata_header_padding
av_format_set_opaque
av_format_set_open_cb
av_format_set_subtitle_codec
av_format_set_video_codec
av_get_frame_filename
av_get_frame_filename2
av_get_output_timestamp
av_get_packet
av_guess_codec
av_guess_format
av_guess_frame_rate
av_guess_sample_aspect_ratio
av_hex_dump
av_hex_dump_log
av_iformat_next
av_index_search_timestamp
av_interleaved_write_frame
av_interleaved_write_uncoded_frame
av_match_ext
av_muxer_iterate
av_new_program
av_oformat_next
av_pkt_dump2
av_pkt_dump_log2
av_probe_input_buffer
av_probe_input_buffer2
av_probe_input_format
av_probe_input_format2
av_probe_input_format3
av_program_add_stream_index
av_read_frame
av_read_pause
av_read_play
av_register_all
av_register_input_format
av_register_output_format
av_sdp_create
av_seek_frame
av_stream_add_side_data
av_stream_get_codec_timebase
av_stream_get_end_pts
av_stream_get_parser
av_stream_get_r_frame_rate
av_stream_get_recommended_encoder_configuration
av_stream_get_side_data
av_stream_new_side_data
av_stream_set_r_frame_rate
av_stream_set_recommended_encoder_configuration
av_url_split
av_write_frame
av_write_trailer
av_write_uncoded_frame
av_write_uncoded_frame_query
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_configuration
avformat_find_stream_info
avformat_flush
avformat_free_context
avformat_get_class
avformat_get_riff_audio_tags
avformat_get_riff_video_tags
avformat_init_output
avformat_license
avformat_match_stream_specifier
avformat_network_deinit
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_query_codec
avformat_queue_attached_pictures
avformat_seek_file
avformat_transfer_internal_stream_timing_info
avformat_version
avformat_write_header
avio_accept
avio_alloc_context
avio_check
avio_close
avio_close_dir
avio_close_dyn_buf
avio_closep
avio_context_free
avio_enum_protocols
avio_feof
avio_find_protocol_name
avio_flush
avio_free_directory_entry
avio_get_dyn_buf
avio_get_str
avio_get_str16be
avio_get_str16le
avio_handshake
avio_open
avio_open2
avio_open_dir
avio_open_dyn_buf
avio_pause
avio_printf
avio_put_str
avio_put_str16be
avio_put_str16le
avio_r8
avio_rb16
avio_rb24
avio_rb32
avio_rb64
avio_read
avio_read_dir
avio_read_partial
avio_read_to_bprint
avio_rl16
avio_rl24
avio_rl32
avio_rl64
avio_seek
avio_seek_time
avio_size
avio_skip
avio_w8
avio_wb16
avio_wb24
avio_wb32
avio_wb64
avio_wl16
avio_wl24
avio_wl32
avio_wl64
avio_write
avio_write_marker
avpriv_io_delete
avpriv_io_move
avpriv_new_chapter
avpriv_register_devices
avpriv_set_pts_info

Sections

.text
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/avutil-56.dll
.dll windows:6 windows x64 arch:x64

eacd1f92932abe1670add2831caa60c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\ffmpeg-4.2.2-r13-windows-vs2019-x64-bender-1.2.0-Release\build\libavutil\avutil-56.pdb

Imports

user32

GetDesktopWindow

bcrypt

BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGenRandom

kernel32

EncodePointer
WriteConsoleW
GetTempPathW
FlushFileBuffers
OutputDebugStringW
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetCurrentProcess
GetProcessAffinityMask
InitOnceBeginInitialize
InitOnceComplete
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
MultiByteToWideChar
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
ReleaseMutex
WaitForSingleObjectEx
CreateMutexA
LoadLibraryA
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
WakeAllConditionVariable
Sleep
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetFileSizeEx
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
RaiseException
RtlPcToFileHeader
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
QueryPerformanceFrequency
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetCurrentThread
HeapFree
HeapAlloc
SetConsoleCtrlHandler
WideCharToMultiByte
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetEndOfFile
ReadFile
ReadConsoleW
SetFilePointerEx
HeapReAlloc
HeapSize
HeapQueryInformation
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetFileAttributesExW

Exports

Exports

av_add_i
av_add_q
av_add_stable
av_adler32_update
av_aes_alloc
av_aes_crypt
av_aes_ctr_alloc
av_aes_ctr_crypt
av_aes_ctr_free
av_aes_ctr_get_iv
av_aes_ctr_increment_iv
av_aes_ctr_init
av_aes_ctr_set_full_iv
av_aes_ctr_set_iv
av_aes_ctr_set_random_iv
av_aes_init
av_aes_size
av_append_path_component
av_asprintf
av_assert0_fpu
av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_peek
av_audio_fifo_peek_at
av_audio_fifo_read
av_audio_fifo_realloc
av_audio_fifo_reset
av_audio_fifo_size
av_audio_fifo_space
av_audio_fifo_write
av_base64_decode
av_base64_encode
av_basename
av_blowfish_alloc
av_blowfish_crypt
av_blowfish_crypt_ecb
av_blowfish_init
av_bmg_get
av_bprint_append_data
av_bprint_channel_layout
av_bprint_chars
av_bprint_clear
av_bprint_escape
av_bprint_finalize
av_bprint_get_buffer
av_bprint_init
av_bprint_init_for_buffer
av_bprint_strftime
av_bprintf
av_buffer_alloc
av_buffer_allocz
av_buffer_create
av_buffer_default_free
av_buffer_get_opaque
av_buffer_get_ref_count
av_buffer_is_writable
av_buffer_make_writable
av_buffer_pool_get
av_buffer_pool_init
av_buffer_pool_init2
av_buffer_pool_uninit
av_buffer_realloc
av_buffer_ref
av_buffer_unref
av_calloc
av_camellia_alloc
av_camellia_crypt
av_camellia_init
av_camellia_size
av_cast5_alloc
av_cast5_crypt
av_cast5_crypt2
av_cast5_init
av_cast5_size
av_channel_layout_extract_channel
av_chroma_location_from_name
av_chroma_location_name
av_cmp_i
av_color_primaries_from_name
av_color_primaries_name
av_color_range_from_name
av_color_range_name
av_color_space_from_name
av_color_space_name
av_color_transfer_from_name
av_color_transfer_name
av_compare_mod
av_compare_ts
av_content_light_metadata_alloc
av_content_light_metadata_create_side_data
av_cpu_count
av_cpu_max_align
av_crc
av_crc_get_table
av_crc_init
av_d2q
av_d2str
av_default_get_category
av_default_item_name
av_des_alloc
av_des_crypt
av_des_init
av_des_mac
av_dict_copy
av_dict_count
av_dict_free
av_dict_get
av_dict_get_string
av_dict_parse_string
av_dict_set
av_dict_set_int
av_dirname
av_display_matrix_flip
av_display_rotation_get
av_display_rotation_set
av_div_i
av_div_q
av_downmix_info_update_side_data
av_dynamic_hdr_plus_alloc
av_dynamic_hdr_plus_create_side_data
av_dynarray2_add
av_dynarray_add
av_dynarray_add_nofree
av_encryption_info_add_side_data
av_encryption_info_alloc
av_encryption_info_clone
av_encryption_info_free
av_encryption_info_get_side_data
av_encryption_init_info_add_side_data
av_encryption_init_info_alloc
av_encryption_init_info_free
av_encryption_init_info_get_side_data
av_escape
av_expr_eval
av_expr_free
av_expr_parse
av_expr_parse_and_eval
av_fast_malloc
av_fast_mallocz
av_fast_realloc
av_fifo_alloc
av_fifo_alloc_array
av_fifo_drain
av_fifo_free
av_fifo_freep
av_fifo_generic_peek
av_fifo_generic_peek_at
av_fifo_generic_read
av_fifo_generic_write
av_fifo_grow
av_fifo_realloc2
av_fifo_reset
av_fifo_size
av_fifo_space
av_file_map
av_file_unmap
av_find_best_pix_fmt_of_2
av_find_info_tag
av_find_nearest_q_idx
av_fopen_utf8
av_force_cpu_flags
av_fourcc_make_string
av_frame_alloc
av_frame_apply_cropping
av_frame_clone
av_frame_copy
av_frame_copy_props
av_frame_free
av_frame_get_best_effort_timestamp
av_frame_get_buffer
av_frame_get_channel_layout
av_frame_get_channels
av_frame_get_color_range
av_frame_get_colorspace
av_frame_get_decode_error_flags
av_frame_get_metadata
av_frame_get_pkt_duration
av_frame_get_pkt_pos
av_frame_get_pkt_size
av_frame_get_plane_buffer
av_frame_get_qp_table
av_frame_get_sample_rate
av_frame_get_side_data
av_frame_is_writable
av_frame_make_writable
av_frame_move_ref
av_frame_new_side_data
av_frame_new_side_data_from_buf
av_frame_ref
av_frame_remove_side_data
av_frame_set_best_effort_timestamp
av_frame_set_channel_layout
av_frame_set_channels
av_frame_set_color_range
av_frame_set_colorspace
av_frame_set_decode_error_flags
av_frame_set_metadata
av_frame_set_pkt_duration
av_frame_set_pkt_pos
av_frame_set_pkt_size
av_frame_set_qp_table
av_frame_set_sample_rate
av_frame_side_data_name
av_frame_unref
av_free
av_freep
av_gcd
av_get_alt_sample_fmt
av_get_bits_per_pixel
av_get_bytes_per_sample
av_get_channel_description
av_get_channel_layout
av_get_channel_layout_channel_index
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_channel_name
av_get_colorspace_name
av_get_cpu_flags
av_get_default_channel_layout
av_get_extended_channel_layout
av_get_known_color_name
av_get_media_type_string
av_get_packed_sample_fmt
av_get_padded_bits_per_pixel
av_get_picture_type_char
av_get_pix_fmt
av_get_pix_fmt_loss
av_get_pix_fmt_name
av_get_pix_fmt_string
av_get_planar_sample_fmt
av_get_random_seed
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_standard_channel_layout
av_get_time_base_q
av_get_token
av_gettime
av_gettime_relative
av_gettime_relative_is_monotonic
av_hash_alloc
av_hash_final
av_hash_final_b64
av_hash_final_bin
av_hash_final_hex
av_hash_freep
av_hash_get_name
av_hash_get_size
av_hash_init
av_hash_names
av_hash_update
av_hmac_alloc
av_hmac_calc
av_hmac_final
av_hmac_free
av_hmac_init
av_hmac_update
av_hwdevice_ctx_alloc
av_hwdevice_ctx_create
av_hwdevice_ctx_create_derived
av_hwdevice_ctx_init
av_hwdevice_find_type_by_name
av_hwdevice_get_hwframe_constraints
av_hwdevice_get_type_name
av_hwdevice_hwconfig_alloc
av_hwdevice_iterate_types
av_hwframe_constraints_free
av_hwframe_ctx_alloc
av_hwframe_ctx_create_derived
av_hwframe_ctx_init
av_hwframe_get_buffer
av_hwframe_map
av_hwframe_transfer_data
av_hwframe_transfer_get_formats
av_i2int
av_image_alloc
av_image_check_sar
av_image_check_size
av_image_check_size2
av_image_copy
av_image_copy_plane
av_image_copy_to_buffer
av_image_copy_uc_from
av_image_fill_arrays
av_image_fill_black
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_pointers
av_image_get_buffer_size
av_image_get_linesize
av_int2i
av_int_list_length_for_size
av_lfg_init
av_lfg_init_from_data
av_log
av_log2
av_log2_16bit
av_log2_i
av_log_default_callback
av_log_format_line
av_log_format_line2
av_log_get_flags
av_log_get_level
av_log_set_callback
av_log_set_flags
av_log_set_level
av_malloc
av_malloc_array
av_mallocz
av_mallocz_array
av_mastering_display_metadata_alloc
av_mastering_display_metadata_create_side_data
av_match_list
av_match_name
av_max_alloc
av_md5_alloc
av_md5_final
av_md5_init
av_md5_size
av_md5_sum
av_md5_update
av_memcpy_backptr
av_memdup
av_mod_i
av_mul_i
av_mul_q
av_murmur3_alloc
av_murmur3_final
av_murmur3_init
av_murmur3_init_seeded
av_murmur3_update
av_nearer_q
av_opt_child_class_next
av_opt_child_next
av_opt_copy
av_opt_eval_double
av_opt_eval_flags
av_opt_eval_float
av_opt_eval_int
av_opt_eval_int64
av_opt_eval_q
av_opt_find
av_opt_find2
av_opt_flag_is_set
av_opt_free
av_opt_freep_ranges
av_opt_get
av_opt_get_channel_layout
av_opt_get_dict_val
av_opt_get_double
av_opt_get_image_size
av_opt_get_int
av_opt_get_key_value
av_opt_get_pixel_fmt
av_opt_get_q
av_opt_get_sample_fmt
av_opt_get_video_rate
av_opt_is_set_to_default
av_opt_is_set_to_default_by_name
av_opt_next
av_opt_ptr
av_opt_query_ranges
av_opt_query_ranges_default
av_opt_serialize
av_opt_set
av_opt_set_bin
av_opt_set_channel_layout
av_opt_set_defaults
av_opt_set_defaults2
av_opt_set_dict
av_opt_set_dict2
av_opt_set_dict_val
av_opt_set_double
av_opt_set_from_string
av_opt_set_image_size
av_opt_set_int
av_opt_set_pixel_fmt
av_opt_set_q
av_opt_set_sample_fmt
av_opt_set_video_rate
av_opt_show2
av_parse_color
av_parse_cpu_caps
av_parse_cpu_flags
av_parse_ratio
av_parse_time
av_parse_video_rate
av_parse_video_size
av_pix_fmt_count_planes
av_pix_fmt_desc_get
av_pix_fmt_desc_get_id
av_pix_fmt_desc_next
av_pix_fmt_get_chroma_sub_sample
av_pix_fmt_swap_endianness
av_pixelutils_get_sad_fn
av_q2intfloat
av_rc4_alloc
av_rc4_crypt
av_rc4_init
av_read_image_line
av_read_image_line2
av_realloc
av_realloc_array
av_realloc_f
av_reallocp
av_reallocp_array
av_reduce
av_rescale
av_rescale_delta
av_rescale_q
av_rescale_q_rnd
av_rescale_rnd
av_ripemd_alloc
av_ripemd_final
av_ripemd_init
av_ripemd_size
av_ripemd_update
av_sample_fmt_is_planar
av_samples_alloc
av_samples_alloc_array_and_samples
av_samples_copy
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence
av_set_cpu_flags_mask
av_set_options_string
av_sha512_alloc
av_sha512_final
av_sha512_init
av_sha512_size
av_sha512_update
av_sha_alloc
av_sha_final
av_sha_init
av_sha_size
av_sha_update
av_shr_i
av_small_strptime
av_spherical_alloc
av_spherical_from_name
av_spherical_projection_name
av_spherical_tile_bounds
av_sscanf
av_stereo3d_alloc
av_stereo3d_create_side_data
av_stereo3d_from_name
av_stereo3d_type_name
av_strcasecmp
av_strdup
av_strerror
av_strireplace
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strncasecmp
av_strndup
av_strnstr
av_strstart
av_strtod
av_strtok
av_sub_i
av_sub_q
av_tea_alloc
av_tea_crypt
av_tea_init
av_tea_size
av_tempfile
av_thread_message_flush
av_thread_message_queue_alloc
av_thread_message_queue_free
av_thread_message_queue_nb_elems
av_thread_message_queue_recv
av_thread_message_queue_send
av_thread_message_queue_set_err_recv
av_thread_message_queue_set_err_send
av_thread_message_queue_set_free_func
av_timecode_adjust_ntsc_framenum2
av_timecode_check_frame_rate
av_timecode_get_smpte_from_framenum
av_timecode_init
av_timecode_init_from_string
av_timecode_make_mpeg_tc_string
av_timecode_make_smpte_tc_string
av_timecode_make_string
av_timegm
av_tree_destroy
av_tree_enumerate
av_tree_find
av_tree_insert
av_tree_node_alloc
av_tree_node_size
av_twofish_alloc
av_twofish_crypt
av_twofish_init
av_twofish_size
av_tx_init
av_tx_uninit

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/bladedb.txt
resources/app.asar.unpacked/release/native/cef.pak
.js
resources/app.asar.unpacked/release/native/cef_100_percent.pak
.js
resources/app.asar.unpacked/release/native/cef_200_percent.pak
.js
resources/app.asar.unpacked/release/native/cef_extensions.pak
.js
resources/app.asar.unpacked/release/native/chrome_elf.dll
.dll windows:5 windows x64 arch:x64

1ad120ee160d4b9ed8d5a300a2d0fd01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

chrome_elf.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessId
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadId
GetThreadPriority
GetTickCount
GetUserDefaultLCID
GetVersion
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LockFileEx
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
RemoveDirectoryW
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlCaptureStackBackTrace
RtlDeleteFunctionTable
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnlockFileEx
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualProtectEx
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteProcessMemory

Exports

Exports

AddDllToBlacklist
CrashForException_ExportThunk
DisableHook
DrainLog
DumpHungProcessWithPtype_ExportThunk
DumpProcessWithoutCrash
GetApplyHookResult
GetBlockedModulesCount
GetCrashReports_ExportThunk
GetCrashpadDatabasePath_ExportThunk
GetHandleVerifier
GetInstallDetailsPayload
GetUniqueBlockedModulesCount
GetUserDataDirectoryThunk
InjectDumpForHungInput_ExportThunk
IsBlacklistInitialized
IsCrashReportingEnabledImpl
RegisterLogNotification
RegisterNonABICompliantCodeRange_ExportThunk
RequestSingleCrashUpload_ExportThunk
SetCrashKeyValueImpl
SetMetricsClientId
SetUploadConsent_ExportThunk
SignalChromeElf
SignalInitializeCrashReporting
SuccessfullyBlocked
UnregisterNonABICompliantCodeRange_ExportThunk

Sections

.text
Size: 516KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crthunk
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oldntma
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/close.svg
resources/app.asar.unpacked/release/native/crashpad_handler.exe
.exe windows:6 windows x64 arch:x64

52d73cb2212caf7dfbf1639b9924503d

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:87:f8:0b:2c:44:01:3e:f5:0b:65:cc:c8:78:bf:93:99:a1:3f:98:ff:2a:b4:56:1c:bc:2a:af:81:2f:fb:41
Signer

Actual PE Digest

d0:87:f8:0b:2c:44:01:3e:f5:0b:65:cc:c8:78:bf:93:99:a1:3f:98:ff:2a:b4:56:1c:bc:2a:af:81:2f:fb:41

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\sentry_sdk-0.5.0-r0-windows-vs2019-x64-bender-1.5.0-Release\build\crashpad_build\handler\RelWithDebInfo\crashpad_handler.pdb

Imports

powrprof

CallNtPowerInformation

user32

RegisterClassW
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
DefWindowProcW
GetWindowLongPtrW
UnregisterClassW
CreateWindowExW
DestroyWindow
SetWindowLongPtrW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winhttp

WinHttpWriteData
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryHeaders
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse

advapi32

SystemFunction036
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
RevertToSelf
ImpersonateNamedPipeClient
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey

kernel32

RemoveDirectoryW
GetFileTime
WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
FlushInstructionCache
CreateProcessW
GetExitCodeThread
Sleep
MoveFileExW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
WriteConsoleW
ReadConsoleW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSection
RtlUnwind
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetCurrentDirectoryW
GetCurrentDirectoryW
SleepEx
SetFilePointerEx
SetUnhandledExceptionFilter
SetProcessShutdownParameters
SetConsoleCtrlHandler
GetLastError
GetProcessTimes
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
Wow64GetThreadContext
GetModuleHandleW
GetProcAddress
VerSetConditionMask
IsProcessorFeaturePresent
GetSystemInfo
VerifyVersionInfoW
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleFileNameW
DuplicateHandle
ConnectNamedPipe
DisconnectNamedPipe
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
TerminateProcess
CreateThread
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
GetFileInformationByHandleEx
SetLastError
IsWow64Process
FormatMessageA
VirtualQueryEx
ReadProcessMemory
GetSystemTimeAsFileTime
LoadLibraryW
FindClose
CloseHandle
LocalFree
CreateFileW
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetVersion
ReleaseSemaphore
CreateSemaphoreW
GetStdHandle
GetFileSizeEx
GetFileType
LockFileEx
ReadFile
SetEndOfFile
GetFullPathNameW
UnlockFileEx
WriteFile
GetNamedPipeInfo
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
InitOnceExecuteOnce
GetOEMCP
WideCharToMultiByte
InitializeCriticalSectionEx
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleExW
GetCurrentThread
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
HeapReAlloc
HeapSize
HeapQueryInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 370KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 323B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/d3dcompiler_43.dll
.dll windows:6 windows x86 arch:x86

6ba7b0e4e74a8eea96dca4fffc88b859

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a0:dc:fd:f1:04:c6:f9:25:f4:de:ed:83:b3:1b:1c:9e:4a:d1:be:fb
Signer

Actual PE Digest

a0:dc:fd:f1:04:c6:f9:25:f4:de:ed:83:b3:1b:1c:9e:4a:d1:be:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_43.pdb

Imports

msvcrt

??1type_info@@UAE@XZ
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
_initterm
_XcptFilter
_CxxThrowException
memset
memcpy
isxdigit
atof
setlocale
_strdup
_mbstrlen
modf
isalnum
_isnan
ceil
_finite
strrchr
_clearfp
_controlfp
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
getenv
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
free
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_vsnprintf
_errno
__CxxFrameHandler
floor
_CIfmod
_CItanh
_CItan
_CIsinh
_CIsin
_CIlog
_CIpow
_CIexp
_CIsqrt
_CIcosh
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos

gdi32

DeleteObject

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
UnmapViewOfFile
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
GetLastError
SetUnhandledExceptionFilter
WideCharToMultiByte
GetFullPathNameA
HeapCreate
OutputDebugStringA
LoadLibraryA
GetModuleHandleA
lstrcmpiA
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
InterlockedExchange
TlsAlloc
Sleep
InterlockedCompareExchange
FreeLibrary
GetSystemInfo
GetProcAddress
VirtualAlloc
GetProcessHeap
HeapFree
HeapAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
GetVersion

Exports

Exports

D3DAssemble
D3DCompile
D3DCompressShaders
D3DCreateBlob
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DPreprocess
D3DReflect
D3DReturnFailure1
D3DStripShader
DebugSetMute

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/d3dcompiler_47.dll
.dll windows:10 windows x64 arch:x64

824d17f150756620b70aa929623006bb

Code Sign

33:00:00:01:b2:4a:37:c6:c9:7e:01:68:86:00:01:00:00:01:b2
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:11

Not After

26/07/2019, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/07/2018, 20:07

Not After

08/08/2019, 20:07

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:e8:4f:78:6e:43:58:e1:f6:2c:1b:72:ad:2f:bd:ab:0c:42:1b:d1:b7:60:bf:d2:c3:c3:f0:09:b0:7e:aa:b6
Signer

Actual PE Digest

06:e8:4f:78:6e:43:58:e1:f6:2c:1b:72:ad:2f:bd:ab:0c:42:1b:d1:b7:60:bf:d2:c3:c3:f0:09:b0:7e:aa:b6

Digest Algorithm

sha256

PE Digest Matches

true

5e:5a:06:68:cd:30:e5:4d:f8:2c:60:28:d8:62:c8:33:ba:50:89:d5
Signer

Actual PE Digest

5e:5a:06:68:cd:30:e5:4d:f8:2c:60:28:d8:62:c8:33:ba:50:89:d5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
strnlen
__isascii
memset
wcsncmp

api-ms-win-crt-math-l1-1-0

_finite
_isnan
floorf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_controlfp
_initterm
_clearfp

api-ms-win-crt-private-l1-1-0

_o__chsize_s
_o__close
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__execute_onexit_table
_o__filelengthi64
_o__fpclass
_o__get_osfhandle
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__lseeki64
_o__mbscmp
_o__mbstrlen
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__strdup
_o__stricmp
_o__strnicmp
_o__strtoui64
_o__wcsdup
_o__wcsicmp
_o__wcsnicmp
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__write
_o__wsopen_s
_o__wsplitpath_s
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_atof
_o_atoi
_o_bsearch
_o_calloc
_o_ceil
_o_cos
_o_cosh
_o_exp
_o_fclose
_o_floor
_o_fmod
_o_fread
_o_free
_o_fseek
_o_ftell
_o_getenv
_o_isalnum
_o_isalpha
_o_isdigit
_o_isspace
_o_isxdigit
_o_log
_o_malloc
_o_modf
_o_pow
_o_qsort
_o_setlocale
_o_sin
_o_sinh
_o_sqrt
_o_strcat_s
_o_strcpy_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
strrchr
strchr
__C_specific_handler
_o__cexit
_o__callnewh
_o__atoi64
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
strstr
__unDName
memcmp
wcschr
wcsrchr
__CxxFrameHandler3

kernel32

GetModuleFileNameA
CreateFileA
lstrcmpiA
SetEvent
InitializeCriticalSection
WideCharToMultiByte
DeleteCriticalSection
FlushViewOfFile
HeapCreate
SetFilePointer
ResetEvent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
SetFileAttributesW
GetFileAttributesW
LCMapStringW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
WaitForSingleObjectEx
CreateEventW
MultiByteToWideChar
DisableThreadLibraryCalls
MapViewOfFileEx
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
CloseHandle
ReadFile
GetFileSizeEx
GetLastError
CreateFileW
GetSystemInfo
VirtualAlloc
VirtualFree
FreeLibrary
WriteFile
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableA

advapi32

RegQueryValueExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
RegOpenKeyExW
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA

api-ms-win-crt-time-l1-1-0

_time64

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 879KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/devtools_resources.pak
.js
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/UsbOverTcp.cat
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/UsbStub.inf
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/eusbstub.sys
.sys windows:10 windows x64 arch:x64

613d425912bff5e742debfebe6b8316a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\UNG-Windows-drivers\Drivers\bin\x64\Release\eusbstub.pdb

Imports

ntoskrnl.exe

IoAttachDeviceToDeviceStack
IofCallDriver
IofCompleteRequest
IoCreateDevice
IoDeleteDevice
IoDetachDevice
ExFreePoolWithTag
PoCallDriver
PoStartNextPowerIrp
ExAllocatePoolWithTag
PsGetVersion
KeBugCheckEx
KeWaitForSingleObject
RtlCopyUnicodeString
KeSetEvent
KeInitializeEvent

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/fusbhub.sys
.sys windows:10 windows x64 arch:x64

d9ecf4bfd0978c006ad8f8553abe3efb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\UNG-Windows-drivers\Drivers\bin\x64\Release\fusbhub.pdb

Imports

ntoskrnl.exe

KeWaitForSingleObject
IoBuildDeviceIoControlRequest
IoBuildSynchronousFsdRequest
IofCallDriver
IoDeleteDevice
IoDetachDevice
IoGetAttachedDeviceReference
IoGetDeviceProperty
ObfDereferenceObject
_wcsicmp
RtlInitUnicodeString
PsGetVersion
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteSymbolicLink
IoReleaseCancelSpinLock
IoInvalidateDeviceRelations
ZwClose
ZwOpenDirectoryObject
ZwQueryDirectoryObject
ObReferenceObjectByName
__C_specific_handler
IoDriverObjectType
wcsstr
_wcsupr
IoCancelIrp
KeClearEvent
IoAllocateIrp
IoFreeIrp
ObReferenceObjectByHandle
KeSetEvent
IoBuildAsynchronousFsdRequest
KeDelayExecutionThread
ExAllocatePoolWithTag
IoAcquireCancelSpinLock
_purecall
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
IoAttachDeviceToDeviceStack
IoIsWdmVersionAvailable
PoCallDriver
PoStartNextPowerIrp
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
IoAllocateMdl
IoFreeMdl
ExEventObjectType
ZwOpenKey
ZwQueryValueKey
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInitializePagedLookasideList
ExDeletePagedLookasideList
PsCreateSystemThread
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
KeBugCheckEx
KeInitializeEvent
RtlCopyUnicodeString
_wcsnicmp
_vsnwprintf
ExFreePoolWithTag

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/sessapart.cat
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/sessapart.inf
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/sessapart.sys
.sys windows:10 windows x64 arch:x64

6a4b3c8fc2a9eabcb594110fd508e059

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Drivers\bin\x64\Release\sessapart.pdb

Imports

ntoskrnl.exe

KeReleaseMutex
KeWaitForSingleObject
ExAllocatePoolWithTag
ExFreePoolWithTag
ExGetPreviousMode
ZwClose
PsSetCreateProcessNotifyRoutine
PsSetLoadImageNotifyRoutine
PsRemoveLoadImageNotifyRoutine
KeInitializeMutex
ZwQueryInformationProcess
PsWrapApcWow64Thread
ZwCreateSection
ZwMapViewOfSection
ZwUnmapViewOfSection
PsIsThreadTerminating
KeInitializeApc
KeInsertQueueApc
KeBugCheckEx
RtlCopyUnicodeString
RtlEqualUnicodeString
ZwAllocateVirtualMemory
ZwOpenProcess
DbgPrint

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/setup_server_ung.exe
.exe windows:6 windows x64 arch:x64

37584e7536a9b0e2723dc1de7b668978

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:0b:b2:ff:4d:16:e9:42:c2:08:0d:30:bd:57:0c:2b:d2:b8:2d:27:2f:dc:0a:ed:c7:1d:38:7e:1b:5e:df:36
Signer

Actual PE Digest

5a:0b:b2:ff:4d:16:e9:42:c2:08:0d:30:bd:57:0c:2b:d2:b8:2d:27:2f:dc:0a:ed:c7:1d:38:7e:1b:5e:df:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\UNG-Windows-drivers\Drivers\bin\x64\Release\setup_server.pdb

Imports

kernel32

GetOverlappedResult
CreateEventW
CopyFileW
MoveFileExW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
SetLastError
LocalAlloc
LocalFree
lstrlenW
GetCurrentProcess
DeviceIoControl
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GlobalAlloc
GlobalFree
GetSystemDirectoryW
WriteConsoleW
SetFilePointerEx
GetFileSizeEx
DeleteFileW
CreateFileW
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
LCMapStringW
CompareStringW
GetCommandLineA
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
QueryPerformanceCounter

user32

MessageBoxW
wsprintfW

advapi32

StartServiceW
DeleteService
ControlService
OpenServiceW
OpenSCManagerW
CreateServiceW
CloseServiceHandle
RegOpenKeyExW
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegFlushKey
RegCloseKey

shlwapi

PathFileExistsW
PathRemoveExtensionW
PathRemoveFileSpecW
PathStripPathW

setupapi

SetupDiGetINFClassW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupDiOpenClassRegKey
CM_Locate_DevNodeW
CM_Get_Sibling
CM_Get_Parent
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDW
CM_Get_Child
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupInstallServicesFromInfSectionW
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionW
SetupDefaultQueueCallbackW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallback
SetupCommitFileQueueW
SetupCloseFileQueue
SetupCloseInfFile
SetupOpenInfFileW
SetupDiSetDeviceRegistryPropertyW
SetupOpenFileQueue
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiInstallClassW
SetupCopyOEMInfW
SetupDiGetDeviceRegistryPropertyW

newdev

UpdateDriverForPlugAndPlayDevicesW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuh.inf
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuhub.sys
.sys windows:10 windows x64 arch:x64

4e8e68245ab069e597bf39a8f62e4dde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\UNG-Windows-drivers\Drivers\bin\x64\Release\vuhub.pdb

Imports

ntoskrnl.exe

IoReleaseCancelSpinLock
KeInitializeEvent
KeQueryTimeIncrement
swprintf
RtlWriteRegistryValue
RtlCreateRegistryKey
RtlFreeUnicodeString
KeInitializeDpc
KeInitializeTimer
KeCancelTimer
KeSetTimer
KeWaitForSingleObject
IoBuildSynchronousFsdRequest
IofCallDriver
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoGetAttachedDeviceReference
IoInvalidateDeviceRelations
IoGetDeviceProperty
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
PoSetPowerState
PoStartNextPowerIrp
ObfReferenceObject
ObfDereferenceObject
wcsncpy
RtlCompareMemory
KeSetEvent
IoAllocateIrp
IoFreeIrp
KeDelayExecutionThread
_vsnwprintf
ExAllocatePoolWithTag
_wcsicmp
IoAttachDeviceToDeviceStack
IoDetachDevice
IoUnregisterPlugPlayNotification
PoCallDriver
IofCompleteRequest
RtlEqualSid
RtlLengthSid
RtlCopySid
SeQueryInformationToken
PsReferencePrimaryToken
PsDereferencePrimaryToken
IoGetRequestorProcess
IoGetRequestorSessionId
_purecall
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeClearEvent
PsCreateSystemThread
ZwClose
ZwOpenKey
ZwQueryValueKey
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInitializePagedLookasideList
ExDeletePagedLookasideList
PsGetVersion
MmProbeAndLockPages
MmUnlockPages
MmUnmapLockedPages
IoAllocateMdl
IoFreeMdl
ObReferenceObjectByHandle
__C_specific_handler
ExEventObjectType
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
KeBugCheckEx
RtlInitUnicodeString
RtlCopyUnicodeString
IoCancelIrp
MmMapLockedPagesSpecifyCache
RtlValidSid
ExFreePoolWithTag

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuhub3.cat
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuhub3.inf
resources/app.asar.unpacked/release/native/eltima10/drivers/10.0.2614.0/vuhub3.sys
.sys windows:10 windows x64 arch:x64

803b9a3d543f952c261b2fec553c2b9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Jenkins\workspace\UNG-Windows-drivers\Drivers\bin\x64\Release\vuhub3.pdb

Imports

ntoskrnl.exe

RtlCopySid
SeQueryInformationToken
PsReferencePrimaryToken
PsDereferencePrimaryToken
IoGetRequestorProcess
RtlEqualSid
KeInitializeEvent
KeWaitForSingleObject
IoGetDeviceProperty
RtlValidSid
RtlLengthSid
KeInitializeSpinLock
MmMapLockedPagesSpecifyCache
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
IoGetRequestorSessionId
IoWMIRegistrationControl
MmGetSystemRoutineAddress
_vsnwprintf
RtlCompareMemory
RtlInitUnicodeString
_purecall
KeDelayExecutionThread
PsCreateSystemThread
ZwClose
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
KeClearEvent
MmProbeAndLockPages
MmUnlockPages
MmUnmapLockedPages
IoAllocateMdl
IoFreeMdl
ObReferenceObjectByHandle
ObfDereferenceObject
__C_specific_handler
ExEventObjectType
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInitializePagedLookasideList
ExDeletePagedLookasideList
PsGetVersion
RtlCopyUnicodeString
DbgPrintEx
ExFreePoolWithTag
ExAllocatePoolWithTag
IofCompleteRequest
KeSetEvent

wpprecorder.sys

WppAutoLogStop
WppAutoLogStart
WppAutoLogTrace
imp_WppRecorderReplay

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

wdfldr.sys

WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/drivers/7.0.1420.0/setup_server_ung.exe
.exe windows:5 windows x64 arch:x64

edf9ef543db8b1135c58531ade48d75f

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:eb:23:f9:23:a1:77:ee:8f:db:7e:c4:79:e9:98:cc:c2:1f:9a:d6:66:e9:c5:ee:ad:3f:d4:5b:a1:77:9d:36
Signer

Actual PE Digest

93:eb:23:f9:23:a1:77:ee:8f:db:7e:c4:79:e9:98:cc:c2:1f:9a:d6:66:e9:c5:ee:ad:3f:d4:5b:a1:77:9d:36

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

L:\Work\Bin\x64\Release\setup_server.pdb

Imports

kernel32

CreateEventW
CreateFileW
CopyFileW
MultiByteToWideChar
WideCharToMultiByte
DeviceIoControl
GlobalFree
GlobalAlloc
CloseHandle
SetStdHandle
FlushFileBuffers
LoadLibraryW
GetOverlappedResult
LocalFree
LocalAlloc
GetCurrentProcess
lstrlenW
SetLastError
GetModuleHandleW
GetProcAddress
GetSystemDirectoryW
GetModuleFileNameW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
Sleep
GetCommandLineW
GetVersion
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
WriteFile
WriteConsoleW
ExitProcess
HeapCreate
HeapSetInformation
CompareStringW
LCMapStringW
FlsAlloc
GetCurrentThreadId
FlsFree
FlsSetValue
FlsGetValue
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
EncodePointer
DecodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

wsprintfW
MessageBoxW

advapi32

RegDeleteKeyW
RegCreateKeyExW
DeleteService
ControlService
StartServiceW
CreateServiceW
OpenServiceW
CloseServiceHandle
OpenSCManagerW
RegOpenKeyExW
RegFlushKey
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegEnumValueW

shlwapi

PathRemoveExtensionW
PathStripPathW
PathRemoveFileSpecW

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
CM_Locate_DevNodeW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Sibling
CM_Get_Parent
CM_Get_Device_IDW
SetupCopyOEMInfW
SetupDiInstallClassW
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
CM_Get_Child
SetupDiOpenClassRegKey
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/eltima.exe
.exe windows:6 windows x64 arch:x64

d4c96fbda48718a886f8f8dbd18f739f

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:76:f7:29:c3:31:31:ee:2a:e5:4b:1a:1b:30:eb:65:ee:14:8c:36:6e:e5:11:a0:fd:21:3e:3c:c2:1f:f9:59
Signer

Actual PE Digest

1f:76:f7:29:c3:31:31:ee:2a:e5:4b:1a:1b:30:eb:65:ee:14:8c:36:6e:e5:11:a0:fd:21:3e:3c:c2:1f:f9:59

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

userenv

GetUserProfileDirectoryW

shlwapi

PathFileExistsW

u2ec

ord48

kernel32

SetEndOfFile
HeapSize
ReadConsoleW
ReadFile
CreateFileW
GetProcessHeap
SetEnvironmentVariableW
GetStdHandle
GetFileAttributesW
GetFullPathNameW
WriteFile
CloseHandle
GetLastError
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetDynamicTimeZoneInformation
MultiByteToWideChar
WriteConsoleW
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
LocalFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetStdHandle
GetTimeZoneInformation
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
GetFileType
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetStringTypeW
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
DeleteFileW
CreateDirectoryW
MoveFileExW
GetModuleHandleExW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW

shell32

ShellExecuteExW

ole32

CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

advapi32

OpenProcessToken

Sections

.text
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/get_eltima_version.bat
.bat .vbs
resources/app.asar.unpacked/release/native/eltima10/install_eltima.bat
.bat .vbs
resources/app.asar.unpacked/release/native/eltima10/metadata.txt
resources/app.asar.unpacked/release/native/eltima10/service/UsbService64.exe
.exe windows:6 windows x64 arch:x64

85039998ee62e828d10a8d50d828ce83

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:9e:80:df:05:65:d5:25:c8:28:b2:cb:aa:83:c0:fe:c4:ac:cb:83:45:6b:69:54:7c:71:55:2b:8a:ea:95:1a
Signer

Actual PE Digest

77:9e:80:df:05:65:d5:25:c8:28:b2:cb:aa:83:c0:fe:c4:ac:cb:83:45:6b:69:54:7c:71:55:2b:8a:ea:95:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Bin\x64\Rlz-oem\UsbService64.pdb

Imports

kernel32

GetSystemInfo
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SwitchToFiber
DeleteFiber
CreateFiber
GetSystemTime
SystemTimeToFileTime
RtlVirtualUnwind
GetStdHandle
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
ConvertFiberToThread
ConvertThreadToFiber
FindClose
FindFirstFileW
FindNextFileW
LoadLibraryA
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GlobalLock
GlobalUnlock
lstrcmpW
MulDiv
EncodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetStdHandle
CreateTimerQueueTimer
GetFileSizeEx
GetConsoleOutputCP
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FreeLibraryAndExitThread
ExitThread
GetCommandLineA
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
VirtualQuery
VirtualProtect
LoadLibraryExW
RtlUnwindEx
RtlPcToFileHeader
AreFileApisANSI
DeleteFileW
SetFilePointerEx
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesW
GetCurrentDirectoryW
CreateWaitableTimerA
GetModuleHandleA
ResumeThread
SetWaitableTimer
OpenEventA
QueryPerformanceFrequency
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
VerifyVersionInfoW
VerSetConditionMask
SetLastError
GetEnvironmentVariableW
GetTickCount
WaitForMultipleObjects
ReleaseMutex
ReadFile
TerminateThread
ResetEvent
DuplicateHandle
GetTickCount64
CreateMutexW
WaitNamedPipeW
DecodePointer
TerminateProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
RtlCaptureContext
GetOverlappedResult
GetModuleFileNameW
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetNamedPipeHandleState
RaiseException
WriteFile
SetFilePointer
GetCurrentThreadId
GetCommandLineW
CreateThread
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryW
FreeLibrary
DeviceIoControl
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
QueryDosDeviceW
DefineDosDeviceW
FormatMessageA
CreateEventA
WaitForSingleObjectEx
SetEvent
CloseHandle
CreateFileW
Sleep
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
LocalFree
LocalAlloc
FindResourceW
SizeofResource
LockResource
RtlLookupFunctionEntry
CreateDirectoryW
GetFileSize
GetLocalTime
GetVersion
GetModuleHandleExW
WaitForMultipleObjectsEx
ReleaseSemaphore
CreateSemaphoreA
DeleteTimerQueue
CreateTimerQueue
DeleteTimerQueueTimer
LoadResource
GetProcAddress
GetModuleHandleW
FindResourceExW
GetCurrentProcess
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
FlushFileBuffers
RtlUnwind

user32

TranslateMessage
DispatchMessageW
BroadcastSystemMessageW
RegisterDeviceNotificationW
DefWindowProcW
GetWindowTextLengthW
GetWindowLongW
PostMessageW
SetWindowContextHelpId
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetWindowLongPtrW
wsprintfW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetWindowTextW
GetMessageW
BeginPaint
ReleaseDC
InvalidateRect
ReleaseCapture
RegisterWindowMessageW
GetParent
GetClassInfoExW
GetDesktopWindow
GetDlgItem
GetClientRect
SetWindowLongW
SetCapture
GetClassNameW
LoadCursorW
CharNextW
SetFocus
CreateAcceleratorTableW
MoveWindow
GetSysColor
IsChild
DestroyAcceleratorTable
ClientToScreen
RedrawWindow
InvalidateRgn
EndPaint
IsWindow
GetWindowLongPtrW
SetWindowTextW
SendMessageW
ScreenToClient
FillRect
MapDialogRect
EndDialog
GetWindow
GetFocus
GetDC
SetWindowPos
CallWindowProcW

advapi32

OpenSCManagerW
OpenServiceA
QueryServiceStatusEx
OpenProcessToken
AdjustTokenPrivileges
AllocateAndInitializeSid
CopySid
DuplicateTokenEx
EqualSid
FreeSid
GetLengthSid
GetTokenInformation
ImpersonateLoggedOnUser
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
LookupAccountNameW
RegSetValueExW
RegFlushKey
RegEnumValueW
RegDeleteValueW
RegCreateKeyExW
StartServiceW
OpenServiceW
DeleteService
CreateServiceW
ControlService
ChangeServiceConfigW
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetServiceStatus
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
RevertToSelf
IsValidSid
CloseServiceHandle

ole32

OleUninitialize
CLSIDFromProgID
StringFromGUID2
CoCreateInstance
CreateStreamOnHGlobal
OleInitialize
CLSIDFromString
OleLockRunning
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree

shell32

SHGetSpecialFolderPathW

oleaut32

SysAllocString
VariantChangeType
SysFreeString
SysAllocStringLen
SysStringLen
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
VariantInit
VariantClear

shlwapi

PathFileExistsW
PathRemoveFileSpecW

setupapi

SetupDiGetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
CM_Enable_DevNode
CM_Get_Child
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Get_Device_IDW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_Parent
CM_Get_DevNode_Registry_PropertyW
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
CM_Disable_DevNode

crypt32

CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertOpenStore
CryptMsgClose
CertCloseStore
CertGetCertificateContextProperty
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CryptUnprotectData
CertFreeCertificateContext
CryptProtectData

secur32

LsaGetLogonSessionData
GetUserNameExW
LsaEnumerateLogonSessions
LsaFreeReturnBuffer

wtsapi32

WTSFreeMemory
WTSEnumerateSessionsW
WTSVirtualChannelOpen
WTSVirtualChannelClose
WTSQuerySessionInformationW
WTSVirtualChannelQuery
WTSQueryUserToken

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

ws2_32

inet_ntop
getnameinfo
getaddrinfo
__WSAFDIsSet
accept
bind
closesocket
connect
ioctlsocket
htons
listen
recv
select
send
WSASetLastError
inet_pton
WSACleanup
WSAStartup
sendto
recvfrom
freeaddrinfo
setsockopt
WSAIoctl
WSAGetLastError
socket
shutdown

gdi32

DeleteObject
GetObjectW
DeleteDC
GetDeviceCaps
GetStockObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
CreateSolidBrush

wintrust

WinVerifyTrust

winhttp

WinHttpAddRequestHeaders
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpConnect
WinHttpOpen
WinHttpCrackUrl
WinHttpSendRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpReceiveResponse

bcrypt

BCryptGenRandom

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 980KB - Virtual size: 979KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/service/auth64.dll
.dll windows:6 windows x64 arch:x64

b7bb2477cf42f75d4c44c47cc6415740

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d7:5f:03:fb:1b:4c:97:8f:d3:a9:00:e1:8e:ad:fd:c7:f8:d3:4d:38:42:f5:4d:d8:11:87:36:6c:e4:c3:4f:06
Signer

Actual PE Digest

d7:5f:03:fb:1b:4c:97:8f:d3:a9:00:e1:8e:ad:fd:c7:f8:d3:4d:38:42:f5:4d:d8:11:87:36:6c:e4:c3:4f:06

Digest Algorithm

sha256

PE Digest Matches

true

4a:2d:ef:a8:2c:20:ea:87:aa:78:e1:08:32:8a:bc:05:72:40:18:9e
Signer

Actual PE Digest

4a:2d:ef:a8:2c:20:ea:87:aa:78:e1:08:32:8a:bc:05:72:40:18:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\bin\x64\Release\auth64.pdb

Imports

crypt32

CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

kernel32

GetProcAddress
MultiByteToWideChar
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
RtlVirtualUnwind
SwitchToFiber
DeleteFiber
CreateFiber
WideCharToMultiByte
WriteFile
GetCurrentProcessId
GetSystemTimeAsFileTime
ConvertFiberToThread
ConvertThreadToFiber
CloseHandle
FreeLibrary
LoadLibraryA
LoadLibraryW
FindClose
FindFirstFileW
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetSystemTime
SystemTimeToFileTime
IsDebuggerPresent
OutputDebugStringW
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetFileType
GetEnvironmentVariableW
GetStdHandle
GetProcessHeap
DeleteCriticalSection
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
GetModuleHandleW
QueryPerformanceCounter
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
GetCurrentDirectoryW
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetConsoleOutputCP
FlushFileBuffers
LCMapStringW
CompareStringW
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
LoadLibraryExW
ExitProcess
SetConsoleCtrlHandler
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameW

user32

GetProcessWindowStation
MessageBoxW
GetUserObjectInformationW

advapi32

CryptDecrypt
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
DeregisterEventSource
CryptExportKey
CryptGetUserKey
CryptGetProvParam

ws2_32

closesocket
WSASetLastError
send
recv
WSAGetLastError
WSACleanup

bcrypt

BCryptGenRandom

Exports

Exports

AuthClient
AuthServer

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/service/crypt64.dll
.dll windows:5 windows x64 arch:x64

f937ff25d0e6e4a4698cd934de9e27ae

Code Sign

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/08/2013, 20:26

Not After

15/08/2023, 20:36

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:0a:f7:82:fc:29:66:95:20:4c:24:08:62:ee:6b:90
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/11/2018, 00:00

Not After

08/11/2021, 23:59

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc,O=Electronic Team\, Inc,POSTALCODE=22314,STREET=Ste 170+STREET=901 N Pitt St,L=Alexandria,ST=Virginia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:35:d8:d5:59:5b:06:71:41:2b:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/08/2013, 20:26

Not After

15/08/2023, 20:36

Subject

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/12/2014, 00:00

Not After

02/12/2029, 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:0a:f7:82:fc:29:66:95:20:4c:24:08:62:ee:6b:90
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/11/2018, 00:00

Not After

08/11/2021, 23:59

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc,O=Electronic Team\, Inc,POSTALCODE=22314,STREET=Ste 170+STREET=901 N Pitt St,L=Alexandria,ST=Virginia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:06:06:2d:00:ca:33:f4:a3:1f:1a:69:bc:96:f7:6c:b3:b4:7f:92:70:c2:50:1f:4a:b4:e6:88:0c:5f:6b:47
Signer

Actual PE Digest

18:06:06:2d:00:ca:33:f4:a3:1f:1a:69:bc:96:f7:6c:b3:b4:7f:92:70:c2:50:1f:4a:b4:e6:88:0c:5f:6b:47

Digest Algorithm

sha256

PE Digest Matches

true

af:b9:77:c0:48:a7:2c:dd:e0:27:ba:b4:74:b2:a9:d8:ac:07:cb:7f
Signer

Actual PE Digest

af:b9:77:c0:48:a7:2c:dd:e0:27:ba:b4:74:b2:a9:d8:ac:07:cb:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Work\Eltima\u2ec\trunk\bin\x64\Release\crypt64.pdb

Imports

kernel32

GetLastError
LeaveCriticalSection
EnterCriticalSection
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
EncodePointer
DecodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RtlUnwindEx
HeapAlloc
RaiseException
RtlPcToFileHeader
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
MultiByteToWideChar
GetStringTypeW

advapi32

CryptReleaseContext
CryptDestroyKey
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptGenKey
CryptAcquireContextW

ws2_32

send
recv

Exports

Exports

BeginConnection
CloseConnection
PostRecvData
PreSendData

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/service/sessapart64.dll
.dll windows:6 windows x64 arch:x64

e615cac1b7d244ed17262aecdcb484d0

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b2:86:55:30:1d:72:7e:91:50:c6:c4:14:4a:ad:15:78:2f:27:1d:93:cb:24:8f:f8:04:7c:43:30:36:c0:a3:20
Signer

Actual PE Digest

b2:86:55:30:1d:72:7e:91:50:c6:c4:14:4a:ad:15:78:2f:27:1d:93:cb:24:8f:f8:04:7c:43:30:36:c0:a3:20

Digest Algorithm

sha256

PE Digest Matches

true

f5:4f:db:8c:c6:06:87:e3:87:dc:1f:4b:5f:b2:80:c5:7f:88:ba:a7
Signer

Actual PE Digest

f5:4f:db:8c:c6:06:87:e3:87:dc:1f:4b:5f:b2:80:c5:7f:88:ba:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Bin\x64\Release\sessapart.pdb

Imports

ntdll

RtlAllocateHeap
RtlDowncaseUnicodeChar
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlInitUnicodeString
NtDeviceIoControlFile
NtOpenFile
NtClose
RtlNtStatusToDosError
RtlFreeHeap
NtAllocateVirtualMemory
NtSetContextThread
NtGetContextThread
NtResumeThread
NtSuspendThread
NtFlushInstructionCache
NtQueryVirtualMemory
NtProtectVirtualMemory
NtFreeVirtualMemory

kernel32

GlobalAlloc
MultiByteToWideChar
LocalFree
CreateEventW
SetEvent
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
WaitForSingleObject
InitializeCriticalSection
DeviceIoControl
GetProcessHeap
HeapFree
HeapAlloc
CloseHandle
CreateFileW
GlobalFree
DisableThreadLibraryCalls

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/service/sessapartldr64.dll
.dll windows:10 windows x64 arch:x64

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

74:b6:7e:59:5d:e9:1b:4f:2a:a0:c2:42:cb:29:b8:63:dc:53:c5:58:20:72:76:4d:b1:91:95:e9:7c:db:ea:20
Signer

Actual PE Digest

74:b6:7e:59:5d:e9:1b:4f:2a:a0:c2:42:cb:29:b8:63:dc:53:c5:58:20:72:76:4d:b1:91:95:e9:7c:db:ea:20

Digest Algorithm

sha256

PE Digest Matches

true

fb:10:b0:4c:c0:c9:b1:75:14:b4:34:0c:90:69:81:b7:a5:93:2e:9b
Signer

Actual PE Digest

fb:10:b0:4c:c0:c9:b1:75:14:b4:34:0c:90:69:81:b7:a5:93:2e:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Bin\x64\Release\sessapartldr.pdb

Exports

Exports

LoadDllThunk

Sections

.text
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/service/ung.act
resources/app.asar.unpacked/release/native/eltima10/service/usb4rdp64.dll
.dll windows:6 windows x64 arch:x64

8e68e54282e4f80391ab5b012b0dba61

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9a:8b:af:e7:e9:81:dd:6c:95:91:37:a2:a2:63:d2:52:87:4f:6e:9c:ba:0c:60:a6:1f:17:23:06:8c:05:63:a6
Signer

Actual PE Digest

9a:8b:af:e7:e9:81:dd:6c:95:91:37:a2:a2:63:d2:52:87:4f:6e:9c:ba:0c:60:a6:1f:17:23:06:8c:05:63:a6

Digest Algorithm

sha256

PE Digest Matches

true

4f:86:b3:78:28:d1:20:e7:03:12:f3:36:c3:1d:ab:96:06:18:92:8a
Signer

Actual PE Digest

4f:86:b3:78:28:d1:20:e7:03:12:f3:36:c3:1d:ab:96:06:18:92:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Bin\x64\Release\usb4rdp.pdb

Imports

ws2_32

getaddrinfo
recv
send
closesocket
freeaddrinfo
WSAGetLastError
connect
socket
WSAStartup

kernel32

InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
OpenMutexW
GetLastError
CloseHandle
WaitForSingleObject
ReleaseMutex
CreateEventW
LocalAlloc
CreateMutexW
LocalFree
WideCharToMultiByte
GetProcAddress
GetCurrentProcess
MultiByteToWideChar
GetCommandLineW
PeekNamedPipe
GetTickCount64
ReadFile
GetOverlappedResult
DebugBreak
WriteFile
InitializeCriticalSectionEx
RaiseException
CreateThread
GetCurrentProcessId
CreateNamedPipeW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
LCMapStringW
CreateFileW
WriteConsoleW
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW

Exports

Exports

VirtualChannelEntry

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/u2ec.dll
.dll windows:6 windows x64 arch:x64

0243b39f4405bfa90e18a1a00d4c7093

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:6c:11:b7:82:93:b8:5e:2d:1a:d0:f8:bf:13:2b:fb:7d:9b:df:b6:1c:c7:b0:7e:cd:d7:2e:79:22:c1:f7:4d
Signer

Actual PE Digest

6f:6c:11:b7:82:93:b8:5e:2d:1a:d0:f8:bf:13:2b:fb:7d:9b:df:b6:1c:c7:b0:7e:cd:d7:2e:79:22:c1:f7:4d

Digest Algorithm

sha256

PE Digest Matches

true

36:16:6f:8a:32:5e:cd:d1:00:5c:9c:c4:4b:95:aa:0b:d7:7c:8f:64
Signer

Actual PE Digest

36:16:6f:8a:32:5e:cd:d1:00:5c:9c:c4:4b:95:aa:0b:d7:7c:8f:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Bin\x64\Release\u2ec64.pdb

Imports

crypt32

CryptProtectData
CertFreeCertificateContext
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptUnprotectData
CertFindCertificateInStore

kernel32

GlobalHandle
FormatMessageA
CreateEventA
OpenEventW
WaitForSingleObjectEx
SetEvent
CreateThread
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStdHandle
GetEnvironmentVariableW
GetFileType
WriteFile
GetModuleHandleExW
RtlVirtualUnwind
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
FreeLibrary
LoadLibraryA
LoadLibraryW
FindClose
FindFirstFileW
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
DeviceIoControl
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
ReadFile
SetConsoleCtrlHandler
ExitProcess
VirtualQuery
VirtualProtect
LoadLibraryExW
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
CreateWaitableTimerA
GetModuleHandleA
GetLogicalProcessorInformation
GetSystemInfo
ResumeThread
Sleep
SetWaitableTimer
OpenEventA
WaitForMultipleObjectsEx
ReleaseSemaphore
QueryPerformanceFrequency
GetStartupInfoW
IsProcessorFeaturePresent
GlobalFree
CloseHandle
CreateFileW
SetLastError
GetCurrentThreadId
GlobalUnlock
GlobalLock
GetModuleFileNameW
MulDiv
lstrcmpW
GetACP
FormatMessageW
GetCommandLineW
LocalAlloc
LocalFree
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DecodePointer
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
GlobalAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
RtlUnwind

user32

SetWindowLongPtrW
SendMessageW
PostMessageW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MoveWindow
SetWindowPos
GetClientRect
ClientToScreen
ScreenToClient
BeginPaint
GetWindowLongPtrW
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
RedrawWindow
SetCapture
SetFocus
GetWindow
IsChild
GetParent
GetWindowLongW
DestroyWindow
CreateWindowExW
GetDlgItem
SetWindowContextHelpId
IsWindow
GetClassNameW
GetClassInfoExW
LoadCursorW
RegisterClassExW
CharNextW
GetSysColor
DestroyAcceleratorTable
UnregisterClassW
GetFocus
SetWindowLongW
EndPaint
FillRect
GetUserObjectInformationW
GetProcessWindowStation
SendDlgItemMessageW
DialogBoxParamW
MessageBoxW
GetActiveWindow
CreateDialogIndirectParamW
wsprintfW
EndDialog
MapDialogRect
CallWindowProcW
RegisterWindowMessageW
DefWindowProcW
ReleaseCapture
CreateAcceleratorTableW
GetDesktopWindow

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
SelectObject
GetDeviceCaps

advapi32

RegCreateKeyExW
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegFlushKey
RegSetValueExW
RegDeleteValueW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegEnumValueW
RegDeleteKeyW
OpenSCManagerW

shell32

CommandLineToArgvW

ole32

CoTaskMemAlloc
OleUninitialize
OleInitialize
OleLockRunning
StringFromGUID2
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocString
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantChangeType
SysFreeString
VariantInit
VariantClear

setupapi

CM_Locate_DevNodeW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDW
CM_Get_Parent
CM_Get_Child
CM_Get_Sibling
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

ws2_32

closesocket
send
recv
getaddrinfo
socket
freeaddrinfo
ioctlsocket
connect
WSAGetLastError
select
getnameinfo
inet_ntop
WSAStartup
getsockname
getsockopt
ntohs
gethostbyname
WSACleanup
setsockopt
listen
bind
accept
WSASetLastError

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory
WTSQuerySessionInformationW

bcrypt

BCryptGenRandom

Exports

Exports

CheckUsbService
ClientAddRemoteDev
ClientAddRemoteDevEx
ClientAddRemoteDevManually
ClientAddRemoteDevManuallyEx
ClientEnumAvailRemoteDev
ClientEnumAvailRemoteDevOnServer
ClientEnumAvailRemoteDevOnServerTimeout
ClientEnumRemoteDevOverRdp
ClientGetConnectedDevValueByName
ClientGetCurrentSessionId
ClientGetRdpAutoconnect
ClientGetRdpIsolation
ClientGetRemoteDevName
ClientGetRemoteDevNetSettings
ClientGetRemoteDevValueByName
ClientGetSessionIds
ClientGetStateRemoteDev
ClientGetStateSharedDevice
ClientIsIsolationAvailable
ClientRemoteDevDisconnect
ClientRemoteDevRequiresAuth
ClientRemoteDisconnectIsEnabled
ClientRemoveEnumOfRemoteDev
ClientRemoveRemoteDev
ClientSetRdpAutoconnect
ClientSetRdpIsolation
ClientStartRemoteDev
ClientStartRemoteDevIsolateSession
ClientStartRemoteDevIsolateUser
ClientStopRemoteDev
ClientTrafficRemoteDevIsCompressed
ClientTrafficRemoteDevIsEncrypted
LicenseActivate
LicenseGetInfoValueByName
LicenseIsOk
LicenseRegister
ServerAllowDevRemoteDisconnect
ServerCreateEnumUsbDev
ServerDisconnectRemoteDev
ServerGetLastError
ServerGetSharedUsbDevIsCompressed
ServerGetSharedUsbDevIsCrypt
ServerGetSharedUsbDevNetSettings
ServerGetSharedUsbDevRequiresAuth
ServerGetUsbDevClassCode
ServerGetUsbDevFromHub
ServerGetUsbDevName
ServerGetUsbDevNameEx
ServerGetUsbDevStatus
ServerGetUsbDevValueByName
ServerRemoveEnumUsbDev
ServerSetDevUserDescription
ServerSetNoReset
ServerSetSharedUsbDevAuth
ServerSetSharedUsbDevCompress
ServerSetSharedUsbDevCrypt
ServerSetUsbDevValueByName
ServerShareUsbDev
ServerShareUsbDev2
ServerShareUsbWithPredefinedValues
ServerUnshareAllUsbDev
ServerUnshareUsbDev
ServerUsbDevIsConnected
ServerUsbDevIsHub
ServerUsbDevIsShared
SetCallBackOnChangeDevList
SetCallBackOnLicenseStatusChange
UpdateUsbTree

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/eltima10/uninstall_eltima.bat
.bat .vbs
resources/app.asar.unpacked/release/native/eventHandler.js
resources/app.asar.unpacked/release/native/flac++.dll
.dll windows:6 windows x64 arch:x64

dd27f4c9c32abb364ad6d59c6af219e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\flac-1.3.3-r6-windows-vs2019-x64-bender-1.5.0-Release\build\src\libFLAC++\RelWithDebInfo\FLAC++.pdb

Imports

flac

FLAC__format_vorbiscomment_entry_name_is_legal
FLAC__format_vorbiscomment_entry_value_is_legal
FLAC__format_vorbiscomment_entry_is_legal
FLAC__metadata_get_streaminfo
FLAC__metadata_get_tags
FLAC__metadata_get_cuesheet
FLAC__metadata_get_picture
FLAC__metadata_simple_iterator_new
FLAC__metadata_simple_iterator_delete
FLAC__metadata_simple_iterator_status
FLAC__metadata_simple_iterator_init
FLAC__metadata_simple_iterator_is_writable
FLAC__metadata_simple_iterator_next
FLAC__metadata_simple_iterator_prev
FLAC__metadata_simple_iterator_is_last
FLAC__metadata_simple_iterator_get_block_offset
FLAC__metadata_simple_iterator_get_block_type
FLAC__metadata_simple_iterator_get_block_length
FLAC__metadata_simple_iterator_get_application_id
FLAC__metadata_simple_iterator_get_block
FLAC__metadata_simple_iterator_set_block
FLAC__metadata_simple_iterator_insert_block_after
FLAC__metadata_simple_iterator_delete_block
FLAC__metadata_chain_new
FLAC__metadata_chain_delete
FLAC__metadata_chain_status
FLAC__metadata_chain_read
FLAC__metadata_chain_read_ogg
FLAC__metadata_chain_read_with_callbacks
FLAC__metadata_chain_read_ogg_with_callbacks
FLAC__metadata_chain_check_if_tempfile_needed
FLAC__metadata_chain_write
FLAC__metadata_chain_write_with_callbacks
FLAC__metadata_chain_write_with_callbacks_and_tempfile
FLAC__metadata_chain_merge_padding
FLAC__metadata_chain_sort_padding
FLAC__metadata_iterator_new
FLAC__metadata_iterator_delete
FLAC__metadata_iterator_init
FLAC__metadata_iterator_next
FLAC__metadata_iterator_prev
FLAC__metadata_iterator_get_block_type
FLAC__metadata_iterator_get_block
FLAC__metadata_iterator_set_block
FLAC__metadata_iterator_delete_block
FLAC__metadata_iterator_insert_block_before
FLAC__metadata_iterator_insert_block_after
FLAC__metadata_object_new
FLAC__metadata_object_clone
FLAC__metadata_object_delete
FLAC__metadata_object_is_equal
FLAC__metadata_object_application_set_data
FLAC__metadata_object_seektable_resize_points
FLAC__metadata_object_seektable_set_point
FLAC__metadata_object_seektable_insert_point
FLAC__metadata_object_seektable_delete_point
FLAC__metadata_object_seektable_is_legal
FLAC__metadata_object_seektable_template_append_placeholders
FLAC__metadata_object_seektable_template_append_point
FLAC__metadata_object_seektable_template_append_points
FLAC__metadata_object_seektable_template_append_spaced_points
FLAC__metadata_object_seektable_template_append_spaced_points_by_samples
FLAC__metadata_object_seektable_template_sort
FLAC__metadata_object_vorbiscomment_set_vendor_string
FLAC__metadata_object_vorbiscomment_resize_comments
FLAC__metadata_object_vorbiscomment_set_comment
FLAC__metadata_object_vorbiscomment_insert_comment
FLAC__metadata_object_vorbiscomment_append_comment
FLAC__metadata_object_vorbiscomment_replace_comment
FLAC__metadata_object_vorbiscomment_delete_comment
FLAC__metadata_object_vorbiscomment_find_entry_from
FLAC__metadata_object_vorbiscomment_remove_entry_matching
FLAC__metadata_object_vorbiscomment_remove_entries_matching
FLAC__metadata_object_cuesheet_track_new
FLAC__metadata_object_cuesheet_track_clone
FLAC__metadata_object_cuesheet_track_delete
FLAC__metadata_object_cuesheet_track_resize_indices
FLAC__metadata_object_cuesheet_track_insert_index
FLAC__metadata_object_cuesheet_track_insert_blank_index
FLAC__metadata_object_cuesheet_track_delete_index
FLAC__metadata_object_cuesheet_resize_tracks
FLAC__metadata_object_cuesheet_set_track
FLAC__metadata_object_cuesheet_insert_track
FLAC__metadata_object_cuesheet_insert_blank_track
FLAC__metadata_object_cuesheet_delete_track
FLAC__metadata_object_cuesheet_is_legal
FLAC__metadata_object_cuesheet_calculate_cddb_id
FLAC__metadata_object_picture_set_mime_type
FLAC__metadata_object_picture_set_description
FLAC__metadata_object_picture_set_data
FLAC__metadata_object_picture_is_legal
FLAC__Metadata_SimpleIteratorStatusString
FLAC__Metadata_ChainStatusString
FLAC__stream_decoder_new
FLAC__stream_decoder_delete
FLAC__stream_decoder_set_ogg_serial_number
FLAC__stream_decoder_set_md5_checking
FLAC__stream_decoder_set_metadata_respond
FLAC__stream_decoder_set_metadata_respond_application
FLAC__stream_decoder_set_metadata_respond_all
FLAC__stream_decoder_set_metadata_ignore
FLAC__stream_decoder_set_metadata_ignore_application
FLAC__stream_decoder_set_metadata_ignore_all
FLAC__stream_decoder_get_state
FLAC__stream_decoder_get_resolved_state_string
FLAC__stream_decoder_get_md5_checking
FLAC__stream_decoder_get_total_samples
FLAC__stream_decoder_get_channels
FLAC__stream_decoder_get_channel_assignment
FLAC__stream_decoder_get_bits_per_sample
FLAC__stream_decoder_get_sample_rate
FLAC__stream_decoder_get_blocksize
FLAC__stream_decoder_get_decode_position
FLAC__stream_decoder_init_stream
FLAC__stream_decoder_init_ogg_stream
FLAC__stream_decoder_init_FILE
FLAC__stream_decoder_init_ogg_FILE
FLAC__stream_decoder_init_file
FLAC__stream_decoder_init_ogg_file
FLAC__stream_decoder_finish
FLAC__stream_decoder_flush
FLAC__stream_decoder_reset
FLAC__stream_decoder_process_single
FLAC__stream_decoder_process_until_end_of_metadata
FLAC__stream_decoder_process_until_end_of_stream
FLAC__stream_decoder_skip_single_frame
FLAC__stream_decoder_seek_absolute
FLAC__StreamDecoderStateString
FLAC__stream_encoder_new
FLAC__stream_encoder_delete
FLAC__stream_encoder_set_ogg_serial_number
FLAC__stream_encoder_set_verify
FLAC__stream_encoder_set_streamable_subset
FLAC__stream_encoder_set_channels
FLAC__stream_encoder_set_bits_per_sample
FLAC__stream_encoder_set_sample_rate
FLAC__stream_encoder_set_compression_level
FLAC__stream_encoder_set_blocksize
FLAC__stream_encoder_set_do_mid_side_stereo
FLAC__stream_encoder_set_loose_mid_side_stereo
FLAC__stream_encoder_set_apodization
FLAC__stream_encoder_set_max_lpc_order
FLAC__stream_encoder_set_qlp_coeff_precision
FLAC__stream_encoder_set_do_qlp_coeff_prec_search
FLAC__stream_encoder_set_do_escape_coding
FLAC__stream_encoder_set_do_exhaustive_model_search
FLAC__stream_encoder_set_min_residual_partition_order
FLAC__stream_encoder_set_max_residual_partition_order
FLAC__stream_encoder_set_rice_parameter_search_dist
FLAC__stream_encoder_set_total_samples_estimate
FLAC__stream_encoder_set_metadata
FLAC__stream_encoder_get_state
FLAC__stream_encoder_get_verify_decoder_state
FLAC__stream_encoder_get_resolved_state_string
FLAC__stream_encoder_get_verify_decoder_error_stats
FLAC__stream_encoder_get_verify
FLAC__stream_encoder_get_streamable_subset
FLAC__stream_encoder_get_channels
FLAC__stream_encoder_get_bits_per_sample
FLAC__stream_encoder_get_sample_rate
FLAC__stream_encoder_get_blocksize
FLAC__stream_encoder_get_do_mid_side_stereo
FLAC__stream_encoder_get_loose_mid_side_stereo
FLAC__stream_encoder_get_max_lpc_order
FLAC__stream_encoder_get_qlp_coeff_precision
FLAC__stream_encoder_get_do_qlp_coeff_prec_search
FLAC__stream_encoder_get_do_escape_coding
FLAC__stream_encoder_get_do_exhaustive_model_search
FLAC__stream_encoder_get_min_residual_partition_order
FLAC__stream_encoder_get_max_residual_partition_order
FLAC__stream_encoder_get_rice_parameter_search_dist
FLAC__stream_encoder_get_total_samples_estimate
FLAC__stream_encoder_init_stream
FLAC__stream_encoder_init_ogg_stream
FLAC__stream_encoder_init_FILE
FLAC__stream_encoder_init_ogg_FILE
FLAC__stream_encoder_init_file
FLAC__stream_encoder_init_ogg_file
FLAC__stream_encoder_finish
FLAC__stream_encoder_process
FLAC__stream_encoder_process_interleaved
FLAC__StreamEncoderStateString

kernel32

MultiByteToWideChar
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetFileAttributesExW
SetFileAttributesW
DeleteFileW
MoveFileExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
GetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
GetStringTypeW
WriteFile
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
SetEndOfFile
ReadFile
ReadConsoleW
SetFilePointerEx
HeapSize
HeapReAlloc
FlushFileBuffers
GetFileSizeEx
OutputDebugStringW
RtlUnwind

Exports

Exports

??0Application@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0Application@Metadata@FLAC@@QEAA@AEBV012@@Z
??0Application@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0Application@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0Application@Metadata@FLAC@@QEAA@XZ
??0Chain@Metadata@FLAC@@QEAA@XZ
??0CueSheet@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0CueSheet@Metadata@FLAC@@QEAA@AEBV012@@Z
??0CueSheet@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0CueSheet@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0CueSheet@Metadata@FLAC@@QEAA@XZ
??0Entry@VorbisComment@Metadata@FLAC@@QEAA@AEBV0123@@Z
??0Entry@VorbisComment@Metadata@FLAC@@QEAA@PEBD0@Z
??0Entry@VorbisComment@Metadata@FLAC@@QEAA@PEBD0I@Z
??0Entry@VorbisComment@Metadata@FLAC@@QEAA@PEBD@Z
??0Entry@VorbisComment@Metadata@FLAC@@QEAA@PEBDI@Z
??0Entry@VorbisComment@Metadata@FLAC@@QEAA@XZ
??0File@Decoder@FLAC@@QEAA@XZ
??0File@Encoder@FLAC@@QEAA@XZ
??0Iterator@Metadata@FLAC@@QEAA@XZ
??0Padding@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0Padding@Metadata@FLAC@@QEAA@AEBV012@@Z
??0Padding@Metadata@FLAC@@QEAA@I@Z
??0Padding@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0Padding@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0Padding@Metadata@FLAC@@QEAA@XZ
??0Picture@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0Picture@Metadata@FLAC@@QEAA@AEBV012@@Z
??0Picture@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0Picture@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0Picture@Metadata@FLAC@@QEAA@XZ
??0Prototype@Metadata@FLAC@@IEAA@AEBUFLAC__StreamMetadata@@@Z
??0Prototype@Metadata@FLAC@@IEAA@AEBV012@@Z
??0Prototype@Metadata@FLAC@@IEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0Prototype@Metadata@FLAC@@IEAA@PEBUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QEAA@AEBV012@@Z
??0SeekTable@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0SeekTable@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0SeekTable@Metadata@FLAC@@QEAA@XZ
??0SimpleIterator@Metadata@FLAC@@QEAA@XZ
??0State@Stream@Decoder@FLAC@@QEAA@W4FLAC__StreamDecoderState@@@Z
??0State@Stream@Encoder@FLAC@@QEAA@W4FLAC__StreamEncoderState@@@Z
??0Status@Chain@Metadata@FLAC@@QEAA@W4FLAC__Metadata_ChainStatus@@@Z
??0Status@SimpleIterator@Metadata@FLAC@@QEAA@W4FLAC__Metadata_SimpleIteratorStatus@@@Z
??0Stream@Decoder@FLAC@@QEAA@XZ
??0Stream@Encoder@FLAC@@QEAA@XZ
??0StreamInfo@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0StreamInfo@Metadata@FLAC@@QEAA@AEBV012@@Z
??0StreamInfo@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0StreamInfo@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0StreamInfo@Metadata@FLAC@@QEAA@XZ
??0Track@CueSheet@Metadata@FLAC@@QEAA@AEBV0123@@Z
??0Track@CueSheet@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata_CueSheet_Track@@@Z
??0Track@CueSheet@Metadata@FLAC@@QEAA@XZ
??0Unknown@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0Unknown@Metadata@FLAC@@QEAA@AEBV012@@Z
??0Unknown@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0Unknown@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0Unknown@Metadata@FLAC@@QEAA@XZ
??0VorbisComment@Metadata@FLAC@@QEAA@AEBUFLAC__StreamMetadata@@@Z
??0VorbisComment@Metadata@FLAC@@QEAA@AEBV012@@Z
??0VorbisComment@Metadata@FLAC@@QEAA@PEAUFLAC__StreamMetadata@@_N@Z
??0VorbisComment@Metadata@FLAC@@QEAA@PEBUFLAC__StreamMetadata@@@Z
??0VorbisComment@Metadata@FLAC@@QEAA@XZ
??1Application@Metadata@FLAC@@UEAA@XZ
??1Chain@Metadata@FLAC@@UEAA@XZ
??1CueSheet@Metadata@FLAC@@UEAA@XZ
??1Entry@VorbisComment@Metadata@FLAC@@UEAA@XZ
??1File@Decoder@FLAC@@UEAA@XZ
??1File@Encoder@FLAC@@UEAA@XZ
??1Iterator@Metadata@FLAC@@UEAA@XZ
??1Padding@Metadata@FLAC@@UEAA@XZ
??1Picture@Metadata@FLAC@@UEAA@XZ
??1Prototype@Metadata@FLAC@@UEAA@XZ
??1SeekTable@Metadata@FLAC@@UEAA@XZ
??1SimpleIterator@Metadata@FLAC@@UEAA@XZ
??1Stream@Decoder@FLAC@@UEAA@XZ
??1Stream@Encoder@FLAC@@UEAA@XZ
??1StreamInfo@Metadata@FLAC@@UEAA@XZ
??1Track@CueSheet@Metadata@FLAC@@UEAA@XZ
??1Unknown@Metadata@FLAC@@UEAA@XZ
??1VorbisComment@Metadata@FLAC@@UEAA@XZ
??4Application@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4Application@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4Application@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4CueSheet@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4CueSheet@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4CueSheet@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4Entry@VorbisComment@Metadata@FLAC@@QEAAAEAV0123@AEBV0123@@Z
??4Padding@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4Padding@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4Padding@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4Picture@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4Picture@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4Picture@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4Prototype@Metadata@FLAC@@IEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4Prototype@Metadata@FLAC@@IEAAAEAV012@AEBV012@@Z
??4Prototype@Metadata@FLAC@@IEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4SeekTable@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4SeekTable@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4SeekTable@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4State@Stream@Decoder@FLAC@@QEAAAEAV0123@$$QEAV0123@@Z
??4State@Stream@Decoder@FLAC@@QEAAAEAV0123@AEBV0123@@Z
??4State@Stream@Encoder@FLAC@@QEAAAEAV0123@$$QEAV0123@@Z
??4State@Stream@Encoder@FLAC@@QEAAAEAV0123@AEBV0123@@Z
??4Status@Chain@Metadata@FLAC@@QEAAAEAV0123@$$QEAV0123@@Z
??4Status@Chain@Metadata@FLAC@@QEAAAEAV0123@AEBV0123@@Z
??4Status@SimpleIterator@Metadata@FLAC@@QEAAAEAV0123@$$QEAV0123@@Z
??4Status@SimpleIterator@Metadata@FLAC@@QEAAAEAV0123@AEBV0123@@Z
??4StreamInfo@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4StreamInfo@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4StreamInfo@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4Track@CueSheet@Metadata@FLAC@@QEAAAEAV0123@AEBV0123@@Z
??4Unknown@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4Unknown@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4Unknown@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??4VorbisComment@Metadata@FLAC@@QEAAAEAV012@AEBUFLAC__StreamMetadata@@@Z
??4VorbisComment@Metadata@FLAC@@QEAAAEAV012@AEBV012@@Z
??4VorbisComment@Metadata@FLAC@@QEAAAEAV012@PEBUFLAC__StreamMetadata@@@Z
??8Application@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8Application@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8Application@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8CueSheet@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8CueSheet@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8CueSheet@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8Padding@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8Padding@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8Padding@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8Picture@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8Picture@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8Picture@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8Prototype@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8Prototype@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8Prototype@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8SeekTable@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8SeekTable@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8SeekTable@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8StreamInfo@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8StreamInfo@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8StreamInfo@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8Unknown@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8Unknown@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8Unknown@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??8VorbisComment@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??8VorbisComment@Metadata@FLAC@@QEBA_NAEBV012@@Z
??8VorbisComment@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9Application@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9Application@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9Application@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9CueSheet@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9CueSheet@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9CueSheet@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9Padding@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9Padding@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9Padding@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9Picture@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9Picture@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9Picture@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9Prototype@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9Prototype@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9Prototype@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9SeekTable@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9SeekTable@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9SeekTable@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9StreamInfo@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9StreamInfo@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9StreamInfo@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9Unknown@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9Unknown@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9Unknown@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??9VorbisComment@Metadata@FLAC@@QEBA_NAEBUFLAC__StreamMetadata@@@Z
??9VorbisComment@Metadata@FLAC@@QEBA_NAEBV012@@Z
??9VorbisComment@Metadata@FLAC@@QEBA_NPEBUFLAC__StreamMetadata@@@Z
??BPrototype@Metadata@FLAC@@QEBAPEBUFLAC__StreamMetadata@@XZ
??BState@Stream@Decoder@FLAC@@QEBA?AW4FLAC__StreamDecoderState@@XZ
??BState@Stream@Encoder@FLAC@@QEBA?AW4FLAC__StreamEncoderState@@XZ
??BStatus@Chain@Metadata@FLAC@@QEBA?AW4FLAC__Metadata_ChainStatus@@XZ
??BStatus@SimpleIterator@Metadata@FLAC@@QEBA?AW4FLAC__Metadata_SimpleIteratorStatus@@XZ
??BStream@Decoder@FLAC@@QEBA_NXZ
??BStream@Encoder@FLAC@@QEBA_NXZ
??_7Application@Metadata@FLAC@@6B@
??_7Chain@Metadata@FLAC@@6B@
??_7CueSheet@Metadata@FLAC@@6B@
??_7Entry@VorbisComment@Metadata@FLAC@@6B@
??_7File@Decoder@FLAC@@6B@
??_7File@Encoder@FLAC@@6B@
??_7Iterator@Metadata@FLAC@@6B@
??_7Padding@Metadata@FLAC@@6B@
??_7Picture@Metadata@FLAC@@6B@
??_7Prototype@Metadata@FLAC@@6B@
??_7SeekTable@Metadata@FLAC@@6B@
??_7SimpleIterator@Metadata@FLAC@@6B@
??_7Stream@Decoder@FLAC@@6B@
??_7Stream@Encoder@FLAC@@6B@
??_7StreamInfo@Metadata@FLAC@@6B@
??_7Track@CueSheet@Metadata@FLAC@@6B@
??_7Unknown@Metadata@FLAC@@6B@
??_7VorbisComment@Metadata@FLAC@@6B@
?append_comment@VorbisComment@Metadata@FLAC@@QEAA_NAEBVEntry@123@@Z
?as_cstring@State@Stream@Decoder@FLAC@@QEBAPEBDXZ
?as_cstring@State@Stream@Encoder@FLAC@@QEBAPEBDXZ
?as_cstring@Status@Chain@Metadata@FLAC@@QEBAPEBDXZ
?as_cstring@Status@SimpleIterator@Metadata@FLAC@@QEBAPEBDXZ
?assign@Application@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@CueSheet@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@Padding@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@Picture@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@SeekTable@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@StreamInfo@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@Unknown@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign@VorbisComment@Metadata@FLAC@@QEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?assign_object@Prototype@Metadata@FLAC@@IEAAAEAV123@PEAUFLAC__StreamMetadata@@_N@Z
?calculate_cddb_id@CueSheet@Metadata@FLAC@@QEBAIXZ
?check_if_tempfile_needed@Chain@Metadata@FLAC@@QEAA_N_N@Z
?clear@Chain@Metadata@FLAC@@MEAAXXZ
?clear@Entry@VorbisComment@Metadata@FLAC@@AEAAXXZ
?clear@Iterator@Metadata@FLAC@@MEAAXXZ
?clear@Prototype@Metadata@FLAC@@MEAAXXZ
?clear@SimpleIterator@Metadata@FLAC@@IEAAXXZ
?clear_entry@Entry@VorbisComment@Metadata@FLAC@@AEAAXXZ
?clear_field_name@Entry@VorbisComment@Metadata@FLAC@@AEAAXXZ
?clear_field_value@Entry@VorbisComment@Metadata@FLAC@@AEAAXXZ
?clone@Metadata@FLAC@@YAPEAVPrototype@12@PEBV312@@Z
?compose_field@Entry@VorbisComment@Metadata@FLAC@@AEAAXXZ
?construct@Entry@VorbisComment@Metadata@FLAC@@AEAAXPEBD0@Z
?construct@Entry@VorbisComment@Metadata@FLAC@@AEAAXPEBD0I@Z
?construct@Entry@VorbisComment@Metadata@FLAC@@AEAAXPEBD@Z
?construct@Entry@VorbisComment@Metadata@FLAC@@AEAAXPEBDI@Z
?delete_block@Iterator@Metadata@FLAC@@QEAA_N_N@Z
?delete_block@SimpleIterator@Metadata@FLAC@@QEAA_N_N@Z
?delete_comment@VorbisComment@Metadata@FLAC@@QEAA_NI@Z
?delete_index@CueSheet@Metadata@FLAC@@QEAA_NII@Z
?delete_point@SeekTable@Metadata@FLAC@@QEAA_NI@Z
?delete_track@CueSheet@Metadata@FLAC@@QEAA_NI@Z
?eof_callback@Stream@Decoder@FLAC@@MEAA_NXZ
?eof_callback_@Stream@Decoder@FLAC@@KAHPEBUFLAC__StreamDecoder@@PEAX@Z
?error_callback_@Stream@Decoder@FLAC@@KAXPEBUFLAC__StreamDecoder@@W4FLAC__StreamDecoderErrorStatus@@PEAX@Z
?find_entry_from@VorbisComment@Metadata@FLAC@@QEAAHIPEBD@Z
?finish@Stream@Decoder@FLAC@@UEAA_NXZ
?finish@Stream@Encoder@FLAC@@UEAA_NXZ
?flush@Stream@Decoder@FLAC@@UEAA_NXZ
?get_application_id@SimpleIterator@Metadata@FLAC@@QEAA_NPEAE@Z
?get_bits_per_sample@Stream@Decoder@FLAC@@UEBAIXZ
?get_bits_per_sample@Stream@Encoder@FLAC@@UEBAIXZ
?get_bits_per_sample@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_block@Iterator@Metadata@FLAC@@QEAAPEAVPrototype@23@XZ
?get_block@SimpleIterator@Metadata@FLAC@@QEAAPEAVPrototype@23@XZ
?get_block_length@SimpleIterator@Metadata@FLAC@@QEBAIXZ
?get_block_offset@SimpleIterator@Metadata@FLAC@@QEBAJXZ
?get_block_type@Iterator@Metadata@FLAC@@QEBA?AW4FLAC__MetadataType@@XZ
?get_block_type@SimpleIterator@Metadata@FLAC@@QEBA?AW4FLAC__MetadataType@@XZ
?get_blocksize@Stream@Decoder@FLAC@@UEBAIXZ
?get_blocksize@Stream@Encoder@FLAC@@UEBAIXZ
?get_channel_assignment@Stream@Decoder@FLAC@@UEBA?AW4FLAC__ChannelAssignment@@XZ
?get_channels@Stream@Decoder@FLAC@@UEBAIXZ
?get_channels@Stream@Encoder@FLAC@@UEBAIXZ
?get_channels@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_colors@Picture@Metadata@FLAC@@QEBAIXZ
?get_comment@VorbisComment@Metadata@FLAC@@QEBA?AVEntry@123@I@Z
?get_cuesheet@Metadata@FLAC@@YA_NPEBDAEAPEAVCueSheet@12@@Z
?get_cuesheet@Metadata@FLAC@@YA_NPEBDAEAVCueSheet@12@@Z
?get_data@Application@Metadata@FLAC@@QEBAPEBEXZ
?get_data@Picture@Metadata@FLAC@@QEBAPEBEXZ
?get_data@Unknown@Metadata@FLAC@@QEBAPEBEXZ
?get_data_length@Picture@Metadata@FLAC@@QEBAIXZ
?get_decode_position@Stream@Decoder@FLAC@@UEBA_NPEA_K@Z
?get_depth@Picture@Metadata@FLAC@@QEBAIXZ
?get_description@Picture@Metadata@FLAC@@QEBAPEBEXZ
?get_do_escape_coding@Stream@Encoder@FLAC@@UEBA_NXZ
?get_do_exhaustive_model_search@Stream@Encoder@FLAC@@UEBA_NXZ
?get_do_mid_side_stereo@Stream@Encoder@FLAC@@UEBA_NXZ
?get_do_qlp_coeff_prec_search@Stream@Encoder@FLAC@@UEBA_NXZ
?get_entry@Entry@VorbisComment@Metadata@FLAC@@QEBA?AUFLAC__StreamMetadata_VorbisComment_Entry@@XZ
?get_field@Entry@VorbisComment@Metadata@FLAC@@QEBAPEBDXZ
?get_field_length@Entry@VorbisComment@Metadata@FLAC@@QEBAIXZ
?get_field_name@Entry@VorbisComment@Metadata@FLAC@@QEBAPEBDXZ
?get_field_name_length@Entry@VorbisComment@Metadata@FLAC@@QEBAIXZ
?get_field_value@Entry@VorbisComment@Metadata@FLAC@@QEBAPEBDXZ
?get_field_value_length@Entry@VorbisComment@Metadata@FLAC@@QEBAIXZ
?get_height@Picture@Metadata@FLAC@@QEBAIXZ
?get_id@Application@Metadata@FLAC@@QEBAPEBEXZ
?get_index@Track@CueSheet@Metadata@FLAC@@QEBA?AUFLAC__StreamMetadata_CueSheet_Index@@I@Z
?get_is_cd@CueSheet@Metadata@FLAC@@QEBA_NXZ
?get_is_last@Prototype@Metadata@FLAC@@QEBA_NXZ
?get_isrc@Track@CueSheet@Metadata@FLAC@@QEBAPEBDXZ
?get_lead_in@CueSheet@Metadata@FLAC@@QEBA_KXZ
?get_length@Prototype@Metadata@FLAC@@QEBAIXZ
?get_loose_mid_side_stereo@Stream@Encoder@FLAC@@UEBA_NXZ
?get_max_blocksize@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_max_framesize@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_max_lpc_order@Stream@Encoder@FLAC@@UEBAIXZ
?get_max_residual_partition_order@Stream@Encoder@FLAC@@UEBAIXZ
?get_md5_checking@Stream@Decoder@FLAC@@UEBA_NXZ
?get_md5sum@StreamInfo@Metadata@FLAC@@QEBAPEBEXZ
?get_media_catalog_number@CueSheet@Metadata@FLAC@@QEBAPEBDXZ
?get_mime_type@Picture@Metadata@FLAC@@QEBAPEBDXZ
?get_min_blocksize@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_min_framesize@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_min_residual_partition_order@Stream@Encoder@FLAC@@UEBAIXZ
?get_num_comments@VorbisComment@Metadata@FLAC@@QEBAIXZ
?get_num_indices@Track@CueSheet@Metadata@FLAC@@QEBAEXZ
?get_num_points@SeekTable@Metadata@FLAC@@QEBAIXZ
?get_num_tracks@CueSheet@Metadata@FLAC@@QEBAIXZ
?get_number@Track@CueSheet@Metadata@FLAC@@QEBAEXZ
?get_offset@Track@CueSheet@Metadata@FLAC@@QEBA_KXZ
?get_picture@Metadata@FLAC@@YA_NPEBDAEAPEAVPicture@12@W4FLAC__StreamMetadata_Picture_Type@@0PEBEIIII@Z
?get_picture@Metadata@FLAC@@YA_NPEBDAEAVPicture@12@W4FLAC__StreamMetadata_Picture_Type@@0PEBEIIII@Z
?get_point@SeekTable@Metadata@FLAC@@QEBA?AUFLAC__StreamMetadata_SeekPoint@@I@Z
?get_pre_emphasis@Track@CueSheet@Metadata@FLAC@@QEBA_NXZ
?get_qlp_coeff_precision@Stream@Encoder@FLAC@@UEBAIXZ
?get_rice_parameter_search_dist@Stream@Encoder@FLAC@@UEBAIXZ
?get_sample_rate@Stream@Decoder@FLAC@@UEBAIXZ
?get_sample_rate@Stream@Encoder@FLAC@@UEBAIXZ
?get_sample_rate@StreamInfo@Metadata@FLAC@@QEBAIXZ
?get_state@Stream@Decoder@FLAC@@QEBA?AVState@123@XZ
?get_state@Stream@Encoder@FLAC@@QEBA?AVState@123@XZ
?get_streamable_subset@Stream@Encoder@FLAC@@UEBA_NXZ
?get_streaminfo@Metadata@FLAC@@YA_NPEBDAEAVStreamInfo@12@@Z
?get_tags@Metadata@FLAC@@YA_NPEBDAEAPEAVVorbisComment@12@@Z
?get_tags@Metadata@FLAC@@YA_NPEBDAEAVVorbisComment@12@@Z
?get_total_samples@Stream@Decoder@FLAC@@UEBA_KXZ
?get_total_samples@StreamInfo@Metadata@FLAC@@QEBA_KXZ
?get_total_samples_estimate@Stream@Encoder@FLAC@@UEBA_KXZ
?get_track@CueSheet@Metadata@FLAC@@QEBA?AVTrack@123@I@Z
?get_track@Track@CueSheet@Metadata@FLAC@@QEBAPEBUFLAC__StreamMetadata_CueSheet_Track@@XZ
?get_type@Picture@Metadata@FLAC@@QEBA?AW4FLAC__StreamMetadata_Picture_Type@@XZ
?get_type@Prototype@Metadata@FLAC@@QEBA?AW4FLAC__MetadataType@@XZ
?get_type@Track@CueSheet@Metadata@FLAC@@QEBAIXZ
?get_vendor_string@VorbisComment@Metadata@FLAC@@QEBAPEBEXZ
?get_verify@Stream@Encoder@FLAC@@UEBA_NXZ
?get_verify_decoder_error_stats@Stream@Encoder@FLAC@@UEAAXPEA_KPEAI11PEAH2@Z
?get_verify_decoder_state@Stream@Encoder@FLAC@@UEBA?AVState@1Decoder@3@XZ
?get_width@Picture@Metadata@FLAC@@QEBAIXZ
?init@File@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?init@File@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@PEAU_iobuf@@@Z
?init@File@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@PEBD@Z
?init@File@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?init@File@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@PEAU_iobuf@@@Z
?init@File@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@PEBD@Z
?init@Iterator@Metadata@FLAC@@QEAAXAEAVChain@23@@Z
?init@SimpleIterator@Metadata@FLAC@@QEAA_NPEBD_N1@Z
?init@Stream@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@XZ
?init@Stream@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@XZ
?init_ogg@File@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?init_ogg@File@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@PEAU_iobuf@@@Z
?init_ogg@File@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@PEBD@Z
?init_ogg@File@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?init_ogg@File@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@PEAU_iobuf@@@Z
?init_ogg@File@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@PEBD@Z
?init_ogg@Stream@Decoder@FLAC@@UEAA?AW4FLAC__StreamDecoderInitStatus@@XZ
?init_ogg@Stream@Encoder@FLAC@@UEAA?AW4FLAC__StreamEncoderInitStatus@@XZ
?insert_blank_index@CueSheet@Metadata@FLAC@@QEAA_NII@Z
?insert_blank_track@CueSheet@Metadata@FLAC@@QEAA_NI@Z
?insert_block_after@Iterator@Metadata@FLAC@@QEAA_NPEAVPrototype@23@@Z
?insert_block_after@SimpleIterator@Metadata@FLAC@@QEAA_NPEAVPrototype@23@_N@Z
?insert_block_before@Iterator@Metadata@FLAC@@QEAA_NPEAVPrototype@23@@Z
?insert_comment@VorbisComment@Metadata@FLAC@@QEAA_NIAEBVEntry@123@@Z
?insert_index@CueSheet@Metadata@FLAC@@QEAA_NIIAEBUFLAC__StreamMetadata_CueSheet_Index@@@Z
?insert_point@SeekTable@Metadata@FLAC@@QEAA_NIAEBUFLAC__StreamMetadata_SeekPoint@@@Z
?insert_track@CueSheet@Metadata@FLAC@@QEAA_NIAEBVTrack@123@@Z
?is_last@SimpleIterator@Metadata@FLAC@@QEBA_NXZ
?is_legal@CueSheet@Metadata@FLAC@@QEBA_N_NPEAPEBD@Z
?is_legal@Picture@Metadata@FLAC@@QEAA_NPEAPEBD@Z
?is_legal@SeekTable@Metadata@FLAC@@QEBA_NXZ
?is_valid@Chain@Metadata@FLAC@@QEBA_NXZ
?is_valid@Entry@VorbisComment@Metadata@FLAC@@UEBA_NXZ
?is_valid@Iterator@Metadata@FLAC@@QEBA_NXZ
?is_valid@Prototype@Metadata@FLAC@@QEBA_NXZ
?is_valid@SimpleIterator@Metadata@FLAC@@QEBA_NXZ
?is_valid@Stream@Decoder@FLAC@@UEBA_NXZ
?is_valid@Stream@Encoder@FLAC@@UEBA_NXZ
?is_valid@Track@CueSheet@Metadata@FLAC@@UEBA_NXZ
?is_writable@SimpleIterator@Metadata@FLAC@@QEBA_NXZ
?length_callback@Stream@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderLengthStatus@@PEA_K@Z
?length_callback_@Stream@Decoder@FLAC@@KA?AW4FLAC__StreamDecoderLengthStatus@@PEBUFLAC__StreamDecoder@@PEA_KPEAX@Z
?merge_padding@Chain@Metadata@FLAC@@QEAAXXZ
?metadata_callback@Stream@Decoder@FLAC@@MEAAXPEBUFLAC__StreamMetadata@@@Z
?metadata_callback@Stream@Encoder@FLAC@@MEAAXPEBUFLAC__StreamMetadata@@@Z
?metadata_callback_@Stream@Decoder@FLAC@@KAXPEBUFLAC__StreamDecoder@@PEBUFLAC__StreamMetadata@@PEAX@Z
?metadata_callback_@Stream@Encoder@FLAC@@KAXPEBUFLAC__StreamEncoder@@PEBUFLAC__StreamMetadata@@PEAX@Z
?next@Iterator@Metadata@FLAC@@QEAA_NXZ
?next@SimpleIterator@Metadata@FLAC@@QEAA_NXZ
?parse_field@Entry@VorbisComment@Metadata@FLAC@@AEAAXXZ
?prev@Iterator@Metadata@FLAC@@QEAA_NXZ
?prev@SimpleIterator@Metadata@FLAC@@QEAA_NXZ
?process@Stream@Encoder@FLAC@@UEAA_NQEBQEBHI@Z
?process_interleaved@Stream@Encoder@FLAC@@UEAA_NQEBHI@Z
?process_single@Stream@Decoder@FLAC@@UEAA_NXZ
?process_until_end_of_metadata@Stream@Decoder@FLAC@@UEAA_NXZ
?process_until_end_of_stream@Stream@Decoder@FLAC@@UEAA_NXZ
?progress_callback@File@Encoder@FLAC@@MEAAX_K0II@Z
?progress_callback_@File@Encoder@FLAC@@CAXPEBUFLAC__StreamEncoder@@_K1IIPEAX@Z
?read@Chain@Metadata@FLAC@@QEAA_NPEAXUFLAC__IOCallbacks@@_N@Z
?read@Chain@Metadata@FLAC@@QEAA_NPEBD_N@Z
?read_callback@File@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderReadStatus@@QEAEPEA_K@Z
?read_callback@Stream@Encoder@FLAC@@MEAA?AW4FLAC__StreamEncoderReadStatus@@QEAEPEA_K@Z
?read_callback_@Stream@Decoder@FLAC@@KA?AW4FLAC__StreamDecoderReadStatus@@PEBUFLAC__StreamDecoder@@QEAEPEA_KPEAX@Z
?read_callback_@Stream@Encoder@FLAC@@KA?AW4FLAC__StreamEncoderReadStatus@@PEBUFLAC__StreamEncoder@@QEAEPEA_KPEAX@Z
?remove_entries_matching@VorbisComment@Metadata@FLAC@@QEAAHPEBD@Z
?remove_entry_matching@VorbisComment@Metadata@FLAC@@QEAAHPEBD@Z
?replace_comment@VorbisComment@Metadata@FLAC@@QEAA_NAEBVEntry@123@_N@Z
?reset@Stream@Decoder@FLAC@@UEAA_NXZ
?resize_comments@VorbisComment@Metadata@FLAC@@QEAA_NI@Z
?resize_indices@CueSheet@Metadata@FLAC@@QEAA_NII@Z
?resize_points@SeekTable@Metadata@FLAC@@QEAA_NI@Z
?resize_tracks@CueSheet@Metadata@FLAC@@QEAA_NI@Z
?resolved_as_cstring@State@Stream@Decoder@FLAC@@QEBAPEBDAEBV234@@Z
?resolved_as_cstring@State@Stream@Encoder@FLAC@@QEBAPEBDAEBV234@@Z
?seek_absolute@Stream@Decoder@FLAC@@UEAA_N_K@Z
?seek_callback@Stream@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderSeekStatus@@_K@Z
?seek_callback@Stream@Encoder@FLAC@@MEAA?AW4FLAC__StreamEncoderSeekStatus@@_K@Z
?seek_callback_@Stream@Decoder@FLAC@@KA?AW4FLAC__StreamDecoderSeekStatus@@PEBUFLAC__StreamDecoder@@_KPEAX@Z
?seek_callback_@Stream@Encoder@FLAC@@KA?AW4FLAC__StreamEncoderSeekStatus@@PEBUFLAC__StreamEncoder@@_KPEAX@Z
?set_apodization@Stream@Encoder@FLAC@@UEAA_NPEBD@Z
?set_bits_per_sample@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_bits_per_sample@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_block@Iterator@Metadata@FLAC@@QEAA_NPEAVPrototype@23@@Z
?set_block@SimpleIterator@Metadata@FLAC@@QEAA_NPEAVPrototype@23@_N@Z
?set_blocksize@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_channels@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_channels@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_colors@Picture@Metadata@FLAC@@QEBAXI@Z
?set_comment@VorbisComment@Metadata@FLAC@@QEAA_NIAEBVEntry@123@@Z
?set_compression_level@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_data@Application@Metadata@FLAC@@QEAA_NPEAEI_N@Z
?set_data@Application@Metadata@FLAC@@QEAA_NPEBEI@Z
?set_data@Picture@Metadata@FLAC@@QEAA_NPEBEI@Z
?set_data@Unknown@Metadata@FLAC@@QEAA_NPEAEI_N@Z
?set_data@Unknown@Metadata@FLAC@@QEAA_NPEBEI@Z
?set_depth@Picture@Metadata@FLAC@@QEBAXI@Z
?set_description@Picture@Metadata@FLAC@@QEAA_NPEBE@Z
?set_do_escape_coding@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_do_exhaustive_model_search@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_do_mid_side_stereo@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_do_qlp_coeff_prec_search@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_field@Entry@VorbisComment@Metadata@FLAC@@QEAA_NPEBD@Z
?set_field@Entry@VorbisComment@Metadata@FLAC@@QEAA_NPEBDI@Z
?set_field_name@Entry@VorbisComment@Metadata@FLAC@@QEAA_NPEBD@Z
?set_field_value@Entry@VorbisComment@Metadata@FLAC@@QEAA_NPEBD@Z
?set_field_value@Entry@VorbisComment@Metadata@FLAC@@QEAA_NPEBDI@Z
?set_height@Picture@Metadata@FLAC@@QEBAXI@Z
?set_id@Application@Metadata@FLAC@@QEAAXQEBE@Z
?set_index@CueSheet@Metadata@FLAC@@QEAAXIIAEBUFLAC__StreamMetadata_CueSheet_Index@@@Z
?set_index@Track@CueSheet@Metadata@FLAC@@QEAAXIAEBUFLAC__StreamMetadata_CueSheet_Index@@@Z
?set_is_cd@CueSheet@Metadata@FLAC@@QEAAX_N@Z
?set_is_last@Prototype@Metadata@FLAC@@QEAAX_N@Z
?set_isrc@Track@CueSheet@Metadata@FLAC@@QEAAXQEBD@Z
?set_lead_in@CueSheet@Metadata@FLAC@@QEAAX_K@Z
?set_length@Padding@Metadata@FLAC@@QEAAXI@Z
?set_loose_mid_side_stereo@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_max_blocksize@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_max_framesize@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_max_lpc_order@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_max_residual_partition_order@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_md5_checking@Stream@Decoder@FLAC@@UEAA_N_N@Z
?set_md5sum@StreamInfo@Metadata@FLAC@@QEAAXQEBE@Z
?set_media_catalog_number@CueSheet@Metadata@FLAC@@QEAAXQEBD@Z
?set_metadata@Stream@Encoder@FLAC@@UEAA_NPEAPEAUFLAC__StreamMetadata@@I@Z
?set_metadata@Stream@Encoder@FLAC@@UEAA_NPEAPEAVPrototype@Metadata@3@I@Z
?set_metadata_ignore@Stream@Decoder@FLAC@@UEAA_NW4FLAC__MetadataType@@@Z
?set_metadata_ignore_all@Stream@Decoder@FLAC@@UEAA_NXZ
?set_metadata_ignore_application@Stream@Decoder@FLAC@@UEAA_NQEBE@Z
?set_metadata_respond@Stream@Decoder@FLAC@@UEAA_NW4FLAC__MetadataType@@@Z
?set_metadata_respond_all@Stream@Decoder@FLAC@@UEAA_NXZ
?set_metadata_respond_application@Stream@Decoder@FLAC@@UEAA_NQEBE@Z
?set_mime_type@Picture@Metadata@FLAC@@QEAA_NPEBD@Z
?set_min_blocksize@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_min_framesize@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_min_residual_partition_order@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_number@Track@CueSheet@Metadata@FLAC@@QEAAXE@Z
?set_offset@Track@CueSheet@Metadata@FLAC@@QEAAX_K@Z
?set_ogg_serial_number@Stream@Decoder@FLAC@@UEAA_NJ@Z
?set_ogg_serial_number@Stream@Encoder@FLAC@@UEAA_NJ@Z
?set_point@SeekTable@Metadata@FLAC@@QEAAXIAEBUFLAC__StreamMetadata_SeekPoint@@@Z
?set_pre_emphasis@Track@CueSheet@Metadata@FLAC@@QEAAX_N@Z
?set_qlp_coeff_precision@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_reference@Prototype@Metadata@FLAC@@AEAAX_N@Z
?set_rice_parameter_search_dist@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_sample_rate@Stream@Encoder@FLAC@@UEAA_NI@Z
?set_sample_rate@StreamInfo@Metadata@FLAC@@QEAAXI@Z
?set_streamable_subset@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_total_samples@StreamInfo@Metadata@FLAC@@QEAAX_K@Z
?set_total_samples_estimate@Stream@Encoder@FLAC@@UEAA_N_K@Z
?set_track@CueSheet@Metadata@FLAC@@QEAA_NIAEBVTrack@123@@Z
?set_type@Picture@Metadata@FLAC@@QEAAXW4FLAC__StreamMetadata_Picture_Type@@@Z
?set_type@Track@CueSheet@Metadata@FLAC@@QEAAXI@Z
?set_vendor_string@VorbisComment@Metadata@FLAC@@QEAA_NPEBE@Z
?set_verify@Stream@Encoder@FLAC@@UEAA_N_N@Z
?set_width@Picture@Metadata@FLAC@@QEBAXI@Z
?skip_single_frame@Stream@Decoder@FLAC@@UEAA_NXZ
?sort_padding@Chain@Metadata@FLAC@@QEAAXXZ
?status@Chain@Metadata@FLAC@@QEAA?AVStatus@123@XZ
?status@SimpleIterator@Metadata@FLAC@@QEAA?AVStatus@123@XZ
?tell_callback@Stream@Decoder@FLAC@@MEAA?AW4FLAC__StreamDecoderTellStatus@@PEA_K@Z
?tell_callback@Stream@Encoder@FLAC@@MEAA?AW4FLAC__StreamEncoderTellStatus@@PEA_K@Z
?tell_callback_@Stream@Decoder@FLAC@@KA?AW4FLAC__StreamDecoderTellStatus@@PEBUFLAC__StreamDecoder@@PEA_KPEAX@Z
?tell_callback_@Stream@Encoder@FLAC@@KA?AW4FLAC__StreamEncoderTellStatus@@PEBUFLAC__StreamEncoder@@PEA_KPEAX@Z
?template_append_placeholders@SeekTable@Metadata@FLAC@@QEAA_NI@Z
?template_append_point@SeekTable@Metadata@FLAC@@QEAA_N_K@Z

Sections

.text
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/flac.dll
.dll windows:6 windows x64 arch:x64

49dc23e3492adfd7dc1022c3bf13c187

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\flac-1.3.3-r6-windows-vs2019-x64-bender-1.5.0-Release\build\src\libFLAC\RelWithDebInfo\FLAC.pdb

Imports

kernel32

GetFileType
MultiByteToWideChar
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
GetFileAttributesExW
SetFileAttributesW
DeleteFileW
MoveFileExW
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetCurrentThread
GetStdHandle
HeapReAlloc
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteFile
GetConsoleOutputCP
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
GetStringTypeW
FlushFileBuffers
GetTimeZoneInformation
OutputDebugStringW
SetEndOfFile
HeapSize
RtlUnwind

Exports

Exports

FLAC_API_SUPPORTS_OGG_FLAC
FLAC__ChannelAssignmentString
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE2_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ESCAPE_PARAMETER
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_ORDER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_PARAMETER_LEN
FLAC__ENTROPY_CODING_METHOD_PARTITIONED_RICE_RAW_LEN
FLAC__ENTROPY_CODING_METHOD_TYPE_LEN
FLAC__EntropyCodingMethodTypeString
FLAC__FRAME_FOOTER_CRC_LEN
FLAC__FRAME_HEADER_BITS_PER_SAMPLE_LEN
FLAC__FRAME_HEADER_BLOCKING_STRATEGY_LEN
FLAC__FRAME_HEADER_BLOCK_SIZE_LEN
FLAC__FRAME_HEADER_CHANNEL_ASSIGNMENT_LEN
FLAC__FRAME_HEADER_CRC_LEN
FLAC__FRAME_HEADER_RESERVED_LEN
FLAC__FRAME_HEADER_SAMPLE_RATE_LEN
FLAC__FRAME_HEADER_SYNC
FLAC__FRAME_HEADER_SYNC_LEN
FLAC__FRAME_HEADER_ZERO_PAD_LEN
FLAC__FrameNumberTypeString
FLAC__MetadataTypeString
FLAC__Metadata_ChainStatusString
FLAC__Metadata_SimpleIteratorStatusString
FLAC__STREAM_METADATA_APPLICATION_ID_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_INDEX_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_IS_CD_LEN
FLAC__STREAM_METADATA_CUESHEET_LEAD_IN_LEN
FLAC__STREAM_METADATA_CUESHEET_MEDIA_CATALOG_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_NUM_TRACKS_LEN
FLAC__STREAM_METADATA_CUESHEET_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_ISRC_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUMBER_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_NUM_INDICES_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_OFFSET_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_PRE_EMPHASIS_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_RESERVED_LEN
FLAC__STREAM_METADATA_CUESHEET_TRACK_TYPE_LEN
FLAC__STREAM_METADATA_IS_LAST_LEN
FLAC__STREAM_METADATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_COLORS_LEN
FLAC__STREAM_METADATA_PICTURE_DATA_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_DEPTH_LEN
FLAC__STREAM_METADATA_PICTURE_DESCRIPTION_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_HEIGHT_LEN
FLAC__STREAM_METADATA_PICTURE_MIME_TYPE_LENGTH_LEN
FLAC__STREAM_METADATA_PICTURE_TYPE_LEN
FLAC__STREAM_METADATA_PICTURE_WIDTH_LEN
FLAC__STREAM_METADATA_SEEKPOINT_FRAME_SAMPLES_LEN
FLAC__STREAM_METADATA_SEEKPOINT_PLACEHOLDER
FLAC__STREAM_METADATA_SEEKPOINT_SAMPLE_NUMBER_LEN
FLAC__STREAM_METADATA_SEEKPOINT_STREAM_OFFSET_LEN
FLAC__STREAM_METADATA_STREAMINFO_BITS_PER_SAMPLE_LEN
FLAC__STREAM_METADATA_STREAMINFO_CHANNELS_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MAX_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MD5SUM_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_BLOCK_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_MIN_FRAME_SIZE_LEN
FLAC__STREAM_METADATA_STREAMINFO_SAMPLE_RATE_LEN
FLAC__STREAM_METADATA_STREAMINFO_TOTAL_SAMPLES_LEN
FLAC__STREAM_METADATA_TYPE_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_ENTRY_LENGTH_LEN
FLAC__STREAM_METADATA_VORBIS_COMMENT_NUM_COMMENTS_LEN
FLAC__STREAM_SYNC
FLAC__STREAM_SYNC_LEN
FLAC__STREAM_SYNC_STRING
FLAC__SUBFRAME_LPC_QLP_COEFF_PRECISION_LEN
FLAC__SUBFRAME_LPC_QLP_SHIFT_LEN
FLAC__SUBFRAME_TYPE_CONSTANT_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_FIXED_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_LEN
FLAC__SUBFRAME_TYPE_LPC_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_TYPE_VERBATIM_BYTE_ALIGNED_MASK
FLAC__SUBFRAME_WASTED_BITS_FLAG_LEN
FLAC__SUBFRAME_ZERO_PAD_LEN
FLAC__StreamDecoderErrorStatusString
FLAC__StreamDecoderInitStatusString
FLAC__StreamDecoderLengthStatusString
FLAC__StreamDecoderReadStatusString
FLAC__StreamDecoderSeekStatusString
FLAC__StreamDecoderStateString
FLAC__StreamDecoderTellStatusString
FLAC__StreamDecoderWriteStatusString
FLAC__StreamEncoderInitStatusString
FLAC__StreamEncoderReadStatusString
FLAC__StreamEncoderSeekStatusString
FLAC__StreamEncoderStateString
FLAC__StreamEncoderTellStatusString
FLAC__StreamEncoderWriteStatusString
FLAC__StreamMetadata_Picture_TypeString
FLAC__SubframeTypeString
FLAC__VENDOR_STRING
FLAC__VERSION_STRING
FLAC__format_blocksize_is_subset
FLAC__format_cuesheet_is_legal
FLAC__format_picture_is_legal
FLAC__format_sample_rate_is_subset
FLAC__format_sample_rate_is_valid
FLAC__format_seektable_is_legal
FLAC__format_seektable_sort
FLAC__format_vorbiscomment_entry_is_legal
FLAC__format_vorbiscomment_entry_name_is_legal
FLAC__format_vorbiscomment_entry_value_is_legal
FLAC__metadata_chain_check_if_tempfile_needed
FLAC__metadata_chain_delete
FLAC__metadata_chain_merge_padding
FLAC__metadata_chain_new
FLAC__metadata_chain_read
FLAC__metadata_chain_read_ogg
FLAC__metadata_chain_read_ogg_with_callbacks
FLAC__metadata_chain_read_with_callbacks
FLAC__metadata_chain_sort_padding
FLAC__metadata_chain_status
FLAC__metadata_chain_write
FLAC__metadata_chain_write_with_callbacks
FLAC__metadata_chain_write_with_callbacks_and_tempfile
FLAC__metadata_get_cuesheet
FLAC__metadata_get_picture
FLAC__metadata_get_streaminfo
FLAC__metadata_get_tags
FLAC__metadata_iterator_delete
FLAC__metadata_iterator_delete_block
FLAC__metadata_iterator_get_block
FLAC__metadata_iterator_get_block_type
FLAC__metadata_iterator_init
FLAC__metadata_iterator_insert_block_after
FLAC__metadata_iterator_insert_block_before
FLAC__metadata_iterator_new
FLAC__metadata_iterator_next
FLAC__metadata_iterator_prev
FLAC__metadata_iterator_set_block
FLAC__metadata_object_application_set_data
FLAC__metadata_object_clone
FLAC__metadata_object_cuesheet_calculate_cddb_id
FLAC__metadata_object_cuesheet_delete_track
FLAC__metadata_object_cuesheet_insert_blank_track
FLAC__metadata_object_cuesheet_insert_track
FLAC__metadata_object_cuesheet_is_legal
FLAC__metadata_object_cuesheet_resize_tracks
FLAC__metadata_object_cuesheet_set_track
FLAC__metadata_object_cuesheet_track_clone
FLAC__metadata_object_cuesheet_track_delete
FLAC__metadata_object_cuesheet_track_delete_index
FLAC__metadata_object_cuesheet_track_insert_blank_index
FLAC__metadata_object_cuesheet_track_insert_index
FLAC__metadata_object_cuesheet_track_new
FLAC__metadata_object_cuesheet_track_resize_indices
FLAC__metadata_object_delete
FLAC__metadata_object_is_equal
FLAC__metadata_object_new
FLAC__metadata_object_picture_is_legal
FLAC__metadata_object_picture_set_data
FLAC__metadata_object_picture_set_description
FLAC__metadata_object_picture_set_mime_type
FLAC__metadata_object_seektable_delete_point
FLAC__metadata_object_seektable_insert_point
FLAC__metadata_object_seektable_is_legal
FLAC__metadata_object_seektable_resize_points
FLAC__metadata_object_seektable_set_point
FLAC__metadata_object_seektable_template_append_placeholders
FLAC__metadata_object_seektable_template_append_point
FLAC__metadata_object_seektable_template_append_points
FLAC__metadata_object_seektable_template_append_spaced_points
FLAC__metadata_object_seektable_template_append_spaced_points_by_samples
FLAC__metadata_object_seektable_template_sort
FLAC__metadata_object_vorbiscomment_append_comment
FLAC__metadata_object_vorbiscomment_delete_comment
FLAC__metadata_object_vorbiscomment_entry_from_name_value_pair
FLAC__metadata_object_vorbiscomment_entry_matches
FLAC__metadata_object_vorbiscomment_entry_to_name_value_pair
FLAC__metadata_object_vorbiscomment_find_entry_from
FLAC__metadata_object_vorbiscomment_insert_comment
FLAC__metadata_object_vorbiscomment_remove_entries_matching
FLAC__metadata_object_vorbiscomment_remove_entry_matching
FLAC__metadata_object_vorbiscomment_replace_comment
FLAC__metadata_object_vorbiscomment_resize_comments
FLAC__metadata_object_vorbiscomment_set_comment
FLAC__metadata_object_vorbiscomment_set_vendor_string
FLAC__metadata_simple_iterator_delete
FLAC__metadata_simple_iterator_delete_block
FLAC__metadata_simple_iterator_get_application_id
FLAC__metadata_simple_iterator_get_block
FLAC__metadata_simple_iterator_get_block_length
FLAC__metadata_simple_iterator_get_block_offset
FLAC__metadata_simple_iterator_get_block_type
FLAC__metadata_simple_iterator_init
FLAC__metadata_simple_iterator_insert_block_after
FLAC__metadata_simple_iterator_is_last
FLAC__metadata_simple_iterator_is_writable
FLAC__metadata_simple_iterator_new
FLAC__metadata_simple_iterator_next
FLAC__metadata_simple_iterator_prev
FLAC__metadata_simple_iterator_set_block
FLAC__metadata_simple_iterator_status
FLAC__stream_decoder_delete
FLAC__stream_decoder_finish
FLAC__stream_decoder_flush
FLAC__stream_decoder_get_bits_per_sample
FLAC__stream_decoder_get_blocksize
FLAC__stream_decoder_get_channel_assignment
FLAC__stream_decoder_get_channels
FLAC__stream_decoder_get_decode_position
FLAC__stream_decoder_get_md5_checking
FLAC__stream_decoder_get_resolved_state_string
FLAC__stream_decoder_get_sample_rate
FLAC__stream_decoder_get_state
FLAC__stream_decoder_get_total_samples
FLAC__stream_decoder_init_FILE
FLAC__stream_decoder_init_file
FLAC__stream_decoder_init_ogg_FILE
FLAC__stream_decoder_init_ogg_file
FLAC__stream_decoder_init_ogg_stream
FLAC__stream_decoder_init_stream
FLAC__stream_decoder_new
FLAC__stream_decoder_process_single
FLAC__stream_decoder_process_until_end_of_metadata
FLAC__stream_decoder_process_until_end_of_stream
FLAC__stream_decoder_reset
FLAC__stream_decoder_seek_absolute
FLAC__stream_decoder_set_md5_checking
FLAC__stream_decoder_set_metadata_ignore
FLAC__stream_decoder_set_metadata_ignore_all
FLAC__stream_decoder_set_metadata_ignore_application
FLAC__stream_decoder_set_metadata_respond
FLAC__stream_decoder_set_metadata_respond_all
FLAC__stream_decoder_set_metadata_respond_application
FLAC__stream_decoder_set_ogg_serial_number
FLAC__stream_decoder_skip_single_frame
FLAC__stream_encoder_delete
FLAC__stream_encoder_disable_constant_subframes
FLAC__stream_encoder_disable_fixed_subframes
FLAC__stream_encoder_disable_verbatim_subframes
FLAC__stream_encoder_finish
FLAC__stream_encoder_get_bits_per_sample
FLAC__stream_encoder_get_blocksize
FLAC__stream_encoder_get_channels
FLAC__stream_encoder_get_do_escape_coding
FLAC__stream_encoder_get_do_exhaustive_model_search
FLAC__stream_encoder_get_do_md5
FLAC__stream_encoder_get_do_mid_side_stereo
FLAC__stream_encoder_get_do_qlp_coeff_prec_search
FLAC__stream_encoder_get_loose_mid_side_stereo
FLAC__stream_encoder_get_max_lpc_order
FLAC__stream_encoder_get_max_residual_partition_order
FLAC__stream_encoder_get_min_residual_partition_order
FLAC__stream_encoder_get_qlp_coeff_precision
FLAC__stream_encoder_get_resolved_state_string
FLAC__stream_encoder_get_rice_parameter_search_dist
FLAC__stream_encoder_get_sample_rate
FLAC__stream_encoder_get_state
FLAC__stream_encoder_get_streamable_subset
FLAC__stream_encoder_get_total_samples_estimate
FLAC__stream_encoder_get_verify
FLAC__stream_encoder_get_verify_decoder_error_stats
FLAC__stream_encoder_get_verify_decoder_state
FLAC__stream_encoder_init_FILE
FLAC__stream_encoder_init_file
FLAC__stream_encoder_init_ogg_FILE
FLAC__stream_encoder_init_ogg_file
FLAC__stream_encoder_init_ogg_stream
FLAC__stream_encoder_init_stream
FLAC__stream_encoder_new
FLAC__stream_encoder_process
FLAC__stream_encoder_process_interleaved
FLAC__stream_encoder_set_apodization
FLAC__stream_encoder_set_bits_per_sample
FLAC__stream_encoder_set_blocksize
FLAC__stream_encoder_set_channels
FLAC__stream_encoder_set_compression_level
FLAC__stream_encoder_set_do_escape_coding
FLAC__stream_encoder_set_do_exhaustive_model_search
FLAC__stream_encoder_set_do_md5
FLAC__stream_encoder_set_do_mid_side_stereo
FLAC__stream_encoder_set_do_qlp_coeff_prec_search
FLAC__stream_encoder_set_loose_mid_side_stereo
FLAC__stream_encoder_set_max_lpc_order
FLAC__stream_encoder_set_max_residual_partition_order
FLAC__stream_encoder_set_metadata
FLAC__stream_encoder_set_min_residual_partition_order
FLAC__stream_encoder_set_ogg_serial_number
FLAC__stream_encoder_set_qlp_coeff_precision
FLAC__stream_encoder_set_rice_parameter_search_dist
FLAC__stream_encoder_set_sample_rate
FLAC__stream_encoder_set_streamable_subset
FLAC__stream_encoder_set_total_samples_estimate
FLAC__stream_encoder_set_verify
get_client_data_from_decoder

Sections

.text
Size: 698KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/fonts/Eina01_Bold.otf
resources/app.asar.unpacked/release/native/fonts/Eina01_Regular.otf
resources/app.asar.unpacked/release/native/fonts/Eina01_SemiBold.otf
resources/app.asar.unpacked/release/native/gamecontrollerdb.txt
resources/app.asar.unpacked/release/native/h2645bitstream.dll
.dll windows:6 windows x64 arch:x64

0ba2e8449e04499d8a5f62285c5f92c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\h264bitstream-1.0.0-r4-windows-vs2019-x64-bender-1.5.0-Release\build\RelWithDebInfo\h2645bitstream.pdb

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
HeapSize
HeapReAlloc
CloseHandle
ReadFile
ReadConsoleW
CreateFileW
WriteConsoleW
OutputDebugStringW
RtlUnwind

Exports

Exports

__local_stdio_printf_options
find_nal_unit
h264_free
h264_more_rbsp_data
h264_new
h264_read_access_unit_delimiter_rbsp
h264_read_dec_ref_pic_marking
h264_read_end_of_seq_rbsp
h264_read_end_of_stream_rbsp
h264_read_filler_data_rbsp
h264_read_hrd_parameters
h264_read_nal_unit
h264_read_pic_parameter_set_rbsp
h264_read_pred_weight_table
h264_read_rbsp_slice_trailing_bits
h264_read_rbsp_trailing_bits
h264_read_ref_pic_list_reordering
h264_read_scaling_list
h264_read_seq_parameter_set_rbsp
h264_read_slice_header
h264_read_slice_layer_rbsp
h264_read_vui_parameters
h264_write_access_unit_delimiter_rbsp
h264_write_dec_ref_pic_marking
h264_write_end_of_seq_rbsp
h264_write_end_of_stream_rbsp
h264_write_filler_data_rbsp
h264_write_hrd_parameters
h264_write_nal_unit
h264_write_pic_parameter_set_rbsp
h264_write_pps_nal_unit
h264_write_pred_weight_table
h264_write_rbsp_slice_trailing_bits
h264_write_rbsp_trailing_bits
h264_write_ref_pic_list_reordering
h264_write_scaling_list
h264_write_seq_parameter_set_rbsp
h264_write_slice_header
h264_write_slice_layer_rbsp
h264_write_sps_nal_unit
h264_write_vui_parameters
hevc_free
hevc_is_idr
hevc_is_irap
hevc_new
hevc_read_nal_unit
nal_to_rbsp
printf
rbsp_to_nal

Sections

.text
Size: 511KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/icudtl.dat
resources/app.asar.unpacked/release/native/index.html
.html
resources/app.asar.unpacked/release/native/libEGL.dll
.dll windows:5 windows x64 arch:x64

d6dcd675be3e7c3bd6f03649d2176cbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libEGL.dll.pdb

Imports

kernel32

CloseHandle
CreateFileW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncValuesCHROMIUM
eglInitialize
eglLabelObjectKHR
eglMakeCurrent
eglPostSubBufferNV
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQuerySurface
eglQuerySurfacePointerANGLE
eglReleaseDeviceANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/libGLESv2.dll
.dll windows:5 windows x64 arch:x64

b7300db31a352939a4ebd67f730b48c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libGLESv2.dll.pdb

Imports

kernel32

ChangeTimerQueueTimer
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateMutexW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DecodePointer
DeleteCriticalSection
DeleteTimerQueueTimer
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetNumaHighestNodeNumber
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MultiByteToWideChar
OutputDebugStringA
QueryDepthSList
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
ReadConsoleW
ReadFile
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetThreadAffinityMask
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SwitchToThread
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnregisterWait
UnregisterWaitEx
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

CreateWindowExA
CreateWindowExW
DefWindowProcA
DestroyWindow
GetClientRect
GetDC
GetWindowThreadProcessId
InvalidateRect
IsIconic
IsWindow
LoadCursorA
RegisterClassA
ReleaseDC
UnregisterClassA
WindowFromDC

gdi32

ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers

d3d9

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_SetMarker
Direct3DCreate9

setupapi

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

advapi32

RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

??0PlatformMethods@angle@@QEAA@XZ
??4PlatformMethods@angle@@QEAAAEAU01@$$QEAU01@@Z
??4PlatformMethods@angle@@QEAAAEAU01@AEBU01@@Z
?ActiveShaderProgram@gl@@YAXII@Z
?ActiveShaderProgramContextANGLE@gl@@YAXPEAXII@Z
?ActiveTexture@gl@@YAXI@Z
?ActiveTextureContextANGLE@gl@@YAXPEAXI@Z
?AlphaFunc@gl@@YAXIM@Z
?AlphaFuncContextANGLE@gl@@YAXPEAXIM@Z
?AlphaFuncx@gl@@YAXIH@Z
?AlphaFuncxContextANGLE@gl@@YAXPEAXIH@Z
?AttachShader@gl@@YAXII@Z
?AttachShaderContextANGLE@gl@@YAXPEAXII@Z
?BeginQuery@gl@@YAXII@Z
?BeginQueryContextANGLE@gl@@YAXPEAXII@Z
?BeginQueryEXT@gl@@YAXII@Z
?BeginQueryEXTContextANGLE@gl@@YAXPEAXII@Z
?BeginTransformFeedback@gl@@YAXI@Z
?BeginTransformFeedbackContextANGLE@gl@@YAXPEAXI@Z
?BindAttribLocation@gl@@YAXIIPEBD@Z
?BindAttribLocationContextANGLE@gl@@YAXPEAXIIPEBD@Z
?BindBuffer@gl@@YAXII@Z
?BindBufferBase@gl@@YAXIII@Z
?BindBufferBaseContextANGLE@gl@@YAXPEAXIII@Z
?BindBufferContextANGLE@gl@@YAXPEAXII@Z
?BindBufferRange@gl@@YAXIII_J0@Z
?BindBufferRangeContextANGLE@gl@@YAXPEAXIII_J1@Z
?BindFragDataLocationEXT@gl@@YAXIIPEBD@Z
?BindFragDataLocationEXTContextANGLE@gl@@YAXPEAXIIPEBD@Z
?BindFragDataLocationIndexedEXT@gl@@YAXIIIPEBD@Z
?BindFragDataLocationIndexedEXTContextANGLE@gl@@YAXPEAXIIIPEBD@Z
?BindFragmentInputLocationCHROMIUM@gl@@YAXIHPEBD@Z
?BindFragmentInputLocationCHROMIUMContextANGLE@gl@@YAXPEAXIHPEBD@Z
?BindFramebuffer@gl@@YAXII@Z
?BindFramebufferContextANGLE@gl@@YAXPEAXII@Z
?BindFramebufferOES@gl@@YAXII@Z
?BindFramebufferOESContextANGLE@gl@@YAXPEAXII@Z
?BindImageTexture@gl@@YAXIIHEHII@Z
?BindImageTextureContextANGLE@gl@@YAXPEAXIIHEHII@Z
?BindProgramPipeline@gl@@YAXI@Z
?BindProgramPipelineContextANGLE@gl@@YAXPEAXI@Z
?BindRenderbuffer@gl@@YAXII@Z
?BindRenderbufferContextANGLE@gl@@YAXPEAXII@Z
?BindRenderbufferOES@gl@@YAXII@Z
?BindRenderbufferOESContextANGLE@gl@@YAXPEAXII@Z
?BindSampler@gl@@YAXII@Z
?BindSamplerContextANGLE@gl@@YAXPEAXII@Z
?BindTexture@gl@@YAXII@Z
?BindTextureContextANGLE@gl@@YAXPEAXII@Z
?BindTransformFeedback@gl@@YAXII@Z
?BindTransformFeedbackContextANGLE@gl@@YAXPEAXII@Z
?BindUniformLocationCHROMIUM@gl@@YAXIHPEBD@Z
?BindUniformLocationCHROMIUMContextANGLE@gl@@YAXPEAXIHPEBD@Z
?BindVertexArray@gl@@YAXI@Z
?BindVertexArrayContextANGLE@gl@@YAXPEAXI@Z
?BindVertexArrayOES@gl@@YAXI@Z
?BindVertexArrayOESContextANGLE@gl@@YAXPEAXI@Z
?BindVertexBuffer@gl@@YAXII_JH@Z
?BindVertexBufferContextANGLE@gl@@YAXPEAXII_JH@Z
?BlendColor@gl@@YAXMMMM@Z
?BlendColorContextANGLE@gl@@YAXPEAXMMMM@Z
?BlendEquation@gl@@YAXI@Z
?BlendEquationContextANGLE@gl@@YAXPEAXI@Z
?BlendEquationSeparate@gl@@YAXII@Z
?BlendEquationSeparateContextANGLE@gl@@YAXPEAXII@Z
?BlendFunc@gl@@YAXII@Z
?BlendFuncContextANGLE@gl@@YAXPEAXII@Z
?BlendFuncSeparate@gl@@YAXIIII@Z
?BlendFuncSeparateContextANGLE@gl@@YAXPEAXIIII@Z
?BlitFramebuffer@gl@@YAXHHHHHHHHII@Z
?BlitFramebufferANGLE@gl@@YAXHHHHHHHHII@Z
?BlitFramebufferANGLEContextANGLE@gl@@YAXPEAXHHHHHHHHII@Z
?BlitFramebufferContextANGLE@gl@@YAXPEAXHHHHHHHHII@Z
?BufferData@gl@@YAXI_JPEBXI@Z
?BufferDataContextANGLE@gl@@YAXPEAXI_JPEBXI@Z
?BufferSubData@gl@@YAXI_J0PEBX@Z
?BufferSubDataContextANGLE@gl@@YAXPEAXI_J1PEBX@Z
?CheckFramebufferStatus@gl@@YAII@Z
?CheckFramebufferStatusContextANGLE@gl@@YAIPEAXI@Z
?CheckFramebufferStatusOES@gl@@YAII@Z
?CheckFramebufferStatusOESContextANGLE@gl@@YAIPEAXI@Z
?Clear@gl@@YAXI@Z
?ClearBufferfi@gl@@YAXIHMH@Z
?ClearBufferfiContextANGLE@gl@@YAXPEAXIHMH@Z
?ClearBufferfv@gl@@YAXIHPEBM@Z
?ClearBufferfvContextANGLE@gl@@YAXPEAXIHPEBM@Z
?ClearBufferiv@gl@@YAXIHPEBH@Z
?ClearBufferivContextANGLE@gl@@YAXPEAXIHPEBH@Z
?ClearBufferuiv@gl@@YAXIHPEBI@Z
?ClearBufferuivContextANGLE@gl@@YAXPEAXIHPEBI@Z
?ClearColor@gl@@YAXMMMM@Z
?ClearColorContextANGLE@gl@@YAXPEAXMMMM@Z
?ClearColorx@gl@@YAXHHHH@Z
?ClearColorxContextANGLE@gl@@YAXPEAXHHHH@Z
?ClearContextANGLE@gl@@YAXPEAXI@Z
?ClearDepthf@gl@@YAXM@Z
?ClearDepthfContextANGLE@gl@@YAXPEAXM@Z
?ClearDepthx@gl@@YAXH@Z
?ClearDepthxContextANGLE@gl@@YAXPEAXH@Z
?ClearStencil@gl@@YAXH@Z
?ClearStencilContextANGLE@gl@@YAXPEAXH@Z
?ClientActiveTexture@gl@@YAXI@Z
?ClientActiveTextureContextANGLE@gl@@YAXPEAXI@Z
?ClientWaitSync@gl@@YAIPEAU__GLsync@@I_K@Z
?ClientWaitSyncContextANGLE@gl@@YAIPEAXPEAU__GLsync@@I_K@Z
?ClipPlanef@gl@@YAXIPEBM@Z
?ClipPlanefContextANGLE@gl@@YAXPEAXIPEBM@Z
?ClipPlanex@gl@@YAXIPEBH@Z
?ClipPlanexContextANGLE@gl@@YAXPEAXIPEBH@Z
?Color4f@gl@@YAXMMMM@Z
?Color4fContextANGLE@gl@@YAXPEAXMMMM@Z
?Color4ub@gl@@YAXEEEE@Z
?Color4ubContextANGLE@gl@@YAXPEAXEEEE@Z
?Color4x@gl@@YAXHHHH@Z
?Color4xContextANGLE@gl@@YAXPEAXHHHH@Z
?ColorMask@gl@@YAXEEEE@Z
?ColorMaskContextANGLE@gl@@YAXPEAXEEEE@Z
?ColorPointer@gl@@YAXHIHPEBX@Z
?ColorPointerContextANGLE@gl@@YAXPEAXHIHPEBX@Z
?CompileShader@gl@@YAXI@Z
?CompileShaderContextANGLE@gl@@YAXPEAXI@Z
?CompressedCopyTextureCHROMIUM@gl@@YAXII@Z
?CompressedCopyTextureCHROMIUMContextANGLE@gl@@YAXPEAXII@Z
?CompressedTexImage2D@gl@@YAXIHIHHHHPEBX@Z
?CompressedTexImage2DContextANGLE@gl@@YAXPEAXIHIHHHHPEBX@Z
?CompressedTexImage2DRobustANGLE@gl@@YAXIHIHHHHHPEBX@Z
?CompressedTexImage2DRobustANGLEContextANGLE@gl@@YAXPEAXIHIHHHHHPEBX@Z
?CompressedTexImage3D@gl@@YAXIHIHHHHHPEBX@Z
?CompressedTexImage3DContextANGLE@gl@@YAXPEAXIHIHHHHHPEBX@Z
?CompressedTexImage3DRobustANGLE@gl@@YAXIHIHHHHHHPEBX@Z
?CompressedTexImage3DRobustANGLEContextANGLE@gl@@YAXPEAXIHIHHHHHHPEBX@Z
?CompressedTexSubImage2D@gl@@YAXIHHHHHIHPEBX@Z
?CompressedTexSubImage2DContextANGLE@gl@@YAXPEAXIHHHHHIHPEBX@Z
?CompressedTexSubImage2DRobustANGLE@gl@@YAXIHHHHHIHHPEBX@Z
?CompressedTexSubImage2DRobustANGLEContextANGLE@gl@@YAXPEAXIHHHHHIHHPEBX@Z
?CompressedTexSubImage3D@gl@@YAXIHHHHHHHIHPEBX@Z
?CompressedTexSubImage3DContextANGLE@gl@@YAXPEAXIHHHHHHHIHPEBX@Z
?CompressedTexSubImage3DRobustANGLE@gl@@YAXIHHHHHHHIHHPEBX@Z
?CompressedTexSubImage3DRobustANGLEContextANGLE@gl@@YAXPEAXIHHHHHHHIHHPEBX@Z
?CopyBufferSubData@gl@@YAXII_J00@Z
?CopyBufferSubDataContextANGLE@gl@@YAXPEAXII_J11@Z
?CopySubTexture3DANGLE@gl@@YAXIHIIHHHHHHHHHHEEE@Z
?CopySubTexture3DANGLEContextANGLE@gl@@YAXPEAXIHIIHHHHHHHHHHEEE@Z
?CopySubTextureCHROMIUM@gl@@YAXIHIIHHHHHHHEEE@Z
?CopySubTextureCHROMIUMContextANGLE@gl@@YAXPEAXIHIIHHHHHHHEEE@Z
?CopyTexImage2D@gl@@YAXIHIHHHHH@Z
?CopyTexImage2DContextANGLE@gl@@YAXPEAXIHIHHHHH@Z
?CopyTexSubImage2D@gl@@YAXIHHHHHHH@Z
?CopyTexSubImage2DContextANGLE@gl@@YAXPEAXIHHHHHHH@Z
?CopyTexSubImage3D@gl@@YAXIHHHHHHHH@Z
?CopyTexSubImage3DContextANGLE@gl@@YAXPEAXIHHHHHHHH@Z
?CopyTexture3DANGLE@gl@@YAXIHIIHHIEEE@Z
?CopyTexture3DANGLEContextANGLE@gl@@YAXPEAXIHIIHHIEEE@Z
?CopyTextureCHROMIUM@gl@@YAXIHIIHHIEEE@Z
?CopyTextureCHROMIUMContextANGLE@gl@@YAXPEAXIHIIHHIEEE@Z
?CoverFillPathCHROMIUM@gl@@YAXII@Z
?CoverFillPathCHROMIUMContextANGLE@gl@@YAXPEAXII@Z
?CoverFillPathInstancedCHROMIUM@gl@@YAXHIPEBXIIIPEBM@Z
?CoverFillPathInstancedCHROMIUMContextANGLE@gl@@YAXPEAXHIPEBXIIIPEBM@Z
?CoverStrokePathCHROMIUM@gl@@YAXII@Z
?CoverStrokePathCHROMIUMContextANGLE@gl@@YAXPEAXII@Z
?CoverStrokePathInstancedCHROMIUM@gl@@YAXHIPEBXIIIPEBM@Z
?CoverStrokePathInstancedCHROMIUMContextANGLE@gl@@YAXPEAXHIPEBXIIIPEBM@Z
?CoverageModulationCHROMIUM@gl@@YAXI@Z
?CoverageModulationCHROMIUMContextANGLE@gl@@YAXPEAXI@Z
?CreateProgram@gl@@YAIXZ
?CreateProgramContextANGLE@gl@@YAIPEAX@Z
?CreateShader@gl@@YAII@Z
?CreateShaderContextANGLE@gl@@YAIPEAXI@Z
?CreateShaderProgramv@gl@@YAIIHPEBQEBD@Z
?CreateShaderProgramvContextANGLE@gl@@YAIPEAXIHPEBQEBD@Z
?CullFace@gl@@YAXI@Z
?CullFaceContextANGLE@gl@@YAXPEAXI@Z
?CurrentPaletteMatrixOES@gl@@YAXI@Z
?CurrentPaletteMatrixOESContextANGLE@gl@@YAXPEAXI@Z
?DebugMessageCallbackKHR@gl@@YAXP6AXIIIIHPEBDPEBX@Z1@Z
?DebugMessageCallbackKHRContextANGLE@gl@@YAXPEAXP6AXIIIIHPEBDPEBX@Z2@Z
?DebugMessageControlKHR@gl@@YAXIIIHPEBIE@Z
?DebugMessageControlKHRContextANGLE@gl@@YAXPEAXIIIHPEBIE@Z
?DebugMessageInsertKHR@gl@@YAXIIIIHPEBD@Z
?DebugMessageInsertKHRContextANGLE@gl@@YAXPEAXIIIIHPEBD@Z
?DeleteBuffers@gl@@YAXHPEBI@Z
?DeleteBuffersContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteFencesNV@gl@@YAXHPEBI@Z
?DeleteFencesNVContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteFramebuffers@gl@@YAXHPEBI@Z
?DeleteFramebuffersContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteFramebuffersOES@gl@@YAXHPEBI@Z
?DeleteFramebuffersOESContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeletePathsCHROMIUM@gl@@YAXIH@Z
?DeletePathsCHROMIUMContextANGLE@gl@@YAXPEAXIH@Z
?DeleteProgram@gl@@YAXI@Z
?DeleteProgramContextANGLE@gl@@YAXPEAXI@Z
?DeleteProgramPipelines@gl@@YAXHPEBI@Z
?DeleteProgramPipelinesContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteQueries@gl@@YAXHPEBI@Z
?DeleteQueriesContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteQueriesEXT@gl@@YAXHPEBI@Z
?DeleteQueriesEXTContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteRenderbuffers@gl@@YAXHPEBI@Z
?DeleteRenderbuffersContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteRenderbuffersOES@gl@@YAXHPEBI@Z
?DeleteRenderbuffersOESContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteSamplers@gl@@YAXHPEBI@Z
?DeleteSamplersContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteShader@gl@@YAXI@Z
?DeleteShaderContextANGLE@gl@@YAXPEAXI@Z
?DeleteSync@gl@@YAXPEAU__GLsync@@@Z
?DeleteSyncContextANGLE@gl@@YAXPEAXPEAU__GLsync@@@Z
?DeleteTextures@gl@@YAXHPEBI@Z
?DeleteTexturesContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteTransformFeedbacks@gl@@YAXHPEBI@Z
?DeleteTransformFeedbacksContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteVertexArrays@gl@@YAXHPEBI@Z
?DeleteVertexArraysContextANGLE@gl@@YAXPEAXHPEBI@Z
?DeleteVertexArraysOES@gl@@YAXHPEBI@Z
?DeleteVertexArraysOESContextANGLE@gl@@YAXPEAXHPEBI@Z
?DepthFunc@gl@@YAXI@Z
?DepthFuncContextANGLE@gl@@YAXPEAXI@Z
?DepthMask@gl@@YAXE@Z
?DepthMaskContextANGLE@gl@@YAXPEAXE@Z
?DepthRangef@gl@@YAXMM@Z
?DepthRangefContextANGLE@gl@@YAXPEAXMM@Z
?DepthRangex@gl@@YAXHH@Z
?DepthRangexContextANGLE@gl@@YAXPEAXHH@Z
?DetachShader@gl@@YAXII@Z
?DetachShaderContextANGLE@gl@@YAXPEAXII@Z
?Disable@gl@@YAXI@Z
?DisableClientState@gl@@YAXI@Z
?DisableClientStateContextANGLE@gl@@YAXPEAXI@Z
?DisableContextANGLE@gl@@YAXPEAXI@Z
?DisableVertexAttribArray@gl@@YAXI@Z
?DisableVertexAttribArrayContextANGLE@gl@@YAXPEAXI@Z
?DiscardFramebufferEXT@gl@@YAXIHPEBI@Z
?DiscardFramebufferEXTContextANGLE@gl@@YAXPEAXIHPEBI@Z
?DispatchCompute@gl@@YAXIII@Z
?DispatchComputeContextANGLE@gl@@YAXPEAXIII@Z
?DispatchComputeIndirect@gl@@YAX_J@Z
?DispatchComputeIndirectContextANGLE@gl@@YAXPEAX_J@Z
?DrawArrays@gl@@YAXIHH@Z
?DrawArraysContextANGLE@gl@@YAXPEAXIHH@Z
?DrawArraysIndirect@gl@@YAXIPEBX@Z
?DrawArraysIndirectContextANGLE@gl@@YAXPEAXIPEBX@Z
?DrawArraysInstanced@gl@@YAXIHHH@Z
?DrawArraysInstancedANGLE@gl@@YAXIHHH@Z
?DrawArraysInstancedANGLEContextANGLE@gl@@YAXPEAXIHHH@Z
?DrawArraysInstancedContextANGLE@gl@@YAXPEAXIHHH@Z
?DrawBuffers@gl@@YAXHPEBI@Z
?DrawBuffersContextANGLE@gl@@YAXPEAXHPEBI@Z
?DrawBuffersEXT@gl@@YAXHPEBI@Z
?DrawBuffersEXTContextANGLE@gl@@YAXPEAXHPEBI@Z
?DrawElements@gl@@YAXIHIPEBX@Z
?DrawElementsContextANGLE@gl@@YAXPEAXIHIPEBX@Z
?DrawElementsIndirect@gl@@YAXIIPEBX@Z
?DrawElementsIndirectContextANGLE@gl@@YAXPEAXIIPEBX@Z
?DrawElementsInstanced@gl@@YAXIHIPEBXH@Z
?DrawElementsInstancedANGLE@gl@@YAXIHIPEBXH@Z
?DrawElementsInstancedANGLEContextANGLE@gl@@YAXPEAXIHIPEBXH@Z
?DrawElementsInstancedContextANGLE@gl@@YAXPEAXIHIPEBXH@Z
?DrawRangeElements@gl@@YAXIIIHIPEBX@Z
?DrawRangeElementsContextANGLE@gl@@YAXPEAXIIIHIPEBX@Z
?DrawTexfOES@gl@@YAXMMMMM@Z
?DrawTexfOESContextANGLE@gl@@YAXPEAXMMMMM@Z
?DrawTexfvOES@gl@@YAXPEBM@Z
?DrawTexfvOESContextANGLE@gl@@YAXPEAXPEBM@Z
?DrawTexiOES@gl@@YAXHHHHH@Z
?DrawTexiOESContextANGLE@gl@@YAXPEAXHHHHH@Z
?DrawTexivOES@gl@@YAXPEBH@Z
?DrawTexivOESContextANGLE@gl@@YAXPEAXPEBH@Z
?DrawTexsOES@gl@@YAXFFFFF@Z
?DrawTexsOESContextANGLE@gl@@YAXPEAXFFFFF@Z
?DrawTexsvOES@gl@@YAXPEBF@Z
?DrawTexsvOESContextANGLE@gl@@YAXPEAXPEBF@Z
?DrawTexxOES@gl@@YAXHHHHH@Z
?DrawTexxOESContextANGLE@gl@@YAXPEAXHHHHH@Z
?DrawTexxvOES@gl@@YAXPEBH@Z
?DrawTexxvOESContextANGLE@gl@@YAXPEAXPEBH@Z
?EGLImageTargetRenderbufferStorageOES@gl@@YAXIPEAX@Z
?EGLImageTargetRenderbufferStorageOESContextANGLE@gl@@YAXPEAXI0@Z
?EGLImageTargetTexture2DOES@gl@@YAXIPEAX@Z
?EGLImageTargetTexture2DOESContextANGLE@gl@@YAXPEAXI0@Z
?Enable@gl@@YAXI@Z
?EnableClientState@gl@@YAXI@Z
?EnableClientStateContextANGLE@gl@@YAXPEAXI@Z
?EnableContextANGLE@gl@@YAXPEAXI@Z
?EnableVertexAttribArray@gl@@YAXI@Z
?EnableVertexAttribArrayContextANGLE@gl@@YAXPEAXI@Z
?EndQuery@gl@@YAXI@Z
?EndQueryContextANGLE@gl@@YAXPEAXI@Z
?EndQueryEXT@gl@@YAXI@Z
?EndQueryEXTContextANGLE@gl@@YAXPEAXI@Z
?EndTransformFeedback@gl@@YAXXZ
?EndTransformFeedbackContextANGLE@gl@@YAXPEAX@Z
?FenceSync@gl@@YAPEAU__GLsync@@II@Z
?FenceSyncContextANGLE@gl@@YAPEAU__GLsync@@PEAXII@Z
?Finish@gl@@YAXXZ
?FinishContextANGLE@gl@@YAXPEAX@Z
?FinishFenceNV@gl@@YAXI@Z
?FinishFenceNVContextANGLE@gl@@YAXPEAXI@Z
?Flush@gl@@YAXXZ
?FlushContextANGLE@gl@@YAXPEAX@Z
?FlushMappedBufferRange@gl@@YAXI_J0@Z
?FlushMappedBufferRangeContextANGLE@gl@@YAXPEAXI_J1@Z
?FlushMappedBufferRangeEXT@gl@@YAXI_J0@Z
?FlushMappedBufferRangeEXTContextANGLE@gl@@YAXPEAXI_J1@Z
?Fogf@gl@@YAXIM@Z
?FogfContextANGLE@gl@@YAXPEAXIM@Z
?Fogfv@gl@@YAXIPEBM@Z
?FogfvContextANGLE@gl@@YAXPEAXIPEBM@Z
?Fogx@gl@@YAXIH@Z
?FogxContextANGLE@gl@@YAXPEAXIH@Z
?Fogxv@gl@@YAXIPEBH@Z
?FogxvContextANGLE@gl@@YAXPEAXIPEBH@Z
?FramebufferParameteri@gl@@YAXIIH@Z
?FramebufferParameteriContextANGLE@gl@@YAXPEAXIIH@Z
?FramebufferRenderbuffer@gl@@YAXIIII@Z
?FramebufferRenderbufferContextANGLE@gl@@YAXPEAXIIII@Z
?FramebufferRenderbufferOES@gl@@YAXIIII@Z
?FramebufferRenderbufferOESContextANGLE@gl@@YAXPEAXIIII@Z
?FramebufferTexture2D@gl@@YAXIIIIH@Z
?FramebufferTexture2DContextANGLE@gl@@YAXPEAXIIIIH@Z
?FramebufferTexture2DOES@gl@@YAXIIIIH@Z
?FramebufferTexture2DOESContextANGLE@gl@@YAXPEAXIIIIH@Z
?FramebufferTextureEXT@gl@@YAXIIIH@Z
?FramebufferTextureEXTContextANGLE@gl@@YAXPEAXIIIH@Z
?FramebufferTextureLayer@gl@@YAXIIIHH@Z
?FramebufferTextureLayerContextANGLE@gl@@YAXPEAXIIIHH@Z
?FramebufferTextureMultiviewLayeredANGLE@gl@@YAXIIIHHH@Z
?FramebufferTextureMultiviewLayeredANGLEContextANGLE@gl@@YAXPEAXIIIHHH@Z
?FramebufferTextureMultiviewSideBySideANGLE@gl@@YAXIIIHHPEBH@Z
?FramebufferTextureMultiviewSideBySideANGLEContextANGLE@gl@@YAXPEAXIIIHHPEBH@Z
?FrontFace@gl@@YAXI@Z
?FrontFaceContextANGLE@gl@@YAXPEAXI@Z
?Frustumf@gl@@YAXMMMMMM@Z
?FrustumfContextANGLE@gl@@YAXPEAXMMMMMM@Z
?Frustumx@gl@@YAXHHHHHH@Z
?FrustumxContextANGLE@gl@@YAXPEAXHHHHHH@Z
?GenBuffers@gl@@YAXHPEAI@Z
?GenBuffersContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenFencesNV@gl@@YAXHPEAI@Z
?GenFencesNVContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenFramebuffers@gl@@YAXHPEAI@Z
?GenFramebuffersContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenFramebuffersOES@gl@@YAXHPEAI@Z
?GenFramebuffersOESContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenPathsCHROMIUM@gl@@YAIH@Z
?GenPathsCHROMIUMContextANGLE@gl@@YAIPEAXH@Z
?GenProgramPipelines@gl@@YAXHPEAI@Z
?GenProgramPipelinesContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenQueries@gl@@YAXHPEAI@Z
?GenQueriesContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenQueriesEXT@gl@@YAXHPEAI@Z
?GenQueriesEXTContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenRenderbuffers@gl@@YAXHPEAI@Z
?GenRenderbuffersContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenRenderbuffersOES@gl@@YAXHPEAI@Z
?GenRenderbuffersOESContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenSamplers@gl@@YAXHPEAI@Z
?GenSamplersContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenTextures@gl@@YAXHPEAI@Z
?GenTexturesContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenTransformFeedbacks@gl@@YAXHPEAI@Z
?GenTransformFeedbacksContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenVertexArrays@gl@@YAXHPEAI@Z
?GenVertexArraysContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenVertexArraysOES@gl@@YAXHPEAI@Z
?GenVertexArraysOESContextANGLE@gl@@YAXPEAXHPEAI@Z
?GenerateMipmap@gl@@YAXI@Z
?GenerateMipmapContextANGLE@gl@@YAXPEAXI@Z
?GenerateMipmapOES@gl@@YAXI@Z
?GenerateMipmapOESContextANGLE@gl@@YAXPEAXI@Z
?GetActiveAttrib@gl@@YAXIIHPEAH0PEAIPEAD@Z
?GetActiveAttribContextANGLE@gl@@YAXPEAXIIHPEAH1PEAIPEAD@Z
?GetActiveUniform@gl@@YAXIIHPEAH0PEAIPEAD@Z
?GetActiveUniformBlockName@gl@@YAXIIHPEAHPEAD@Z
?GetActiveUniformBlockNameContextANGLE@gl@@YAXPEAXIIHPEAHPEAD@Z
?GetActiveUniformBlockiv@gl@@YAXIIIPEAH@Z
?GetActiveUniformBlockivContextANGLE@gl@@YAXPEAXIIIPEAH@Z
?GetActiveUniformBlockivRobustANGLE@gl@@YAXIIIHPEAH0@Z
?GetActiveUniformBlockivRobustANGLEContextANGLE@gl@@YAXPEAXIIIHPEAH1@Z
?GetActiveUniformContextANGLE@gl@@YAXPEAXIIHPEAH1PEAIPEAD@Z
?GetActiveUniformsiv@gl@@YAXIHPEBIIPEAH@Z
?GetActiveUniformsivContextANGLE@gl@@YAXPEAXIHPEBIIPEAH@Z
?GetAttachedShaders@gl@@YAXIHPEAHPEAI@Z
?GetAttachedShadersContextANGLE@gl@@YAXPEAXIHPEAHPEAI@Z
?GetAttribLocation@gl@@YAHIPEBD@Z
?GetAttribLocationContextANGLE@gl@@YAHPEAXIPEBD@Z
?GetBooleani_v@gl@@YAXIIPEAE@Z
?GetBooleani_vContextANGLE@gl@@YAXPEAXIIPEAE@Z
?GetBooleani_vRobustANGLE@gl@@YAXIIHPEAHPEAE@Z
?GetBooleani_vRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAHPEAE@Z
?GetBooleanv@gl@@YAXIPEAE@Z
?GetBooleanvContextANGLE@gl@@YAXPEAXIPEAE@Z
?GetBooleanvRobustANGLE@gl@@YAXIHPEAHPEAE@Z
?GetBooleanvRobustANGLEContextANGLE@gl@@YAXPEAXIHPEAHPEAE@Z
?GetBufferParameteri64v@gl@@YAXIIPEA_J@Z
?GetBufferParameteri64vContextANGLE@gl@@YAXPEAXIIPEA_J@Z
?GetBufferParameteri64vRobustANGLE@gl@@YAXIIHPEAHPEA_J@Z
?GetBufferParameteri64vRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAHPEA_J@Z
?GetBufferParameteriv@gl@@YAXIIPEAH@Z
?GetBufferParameterivContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetBufferParameterivRobustANGLE@gl@@YAXIIHPEAH0@Z
?GetBufferParameterivRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAH1@Z
?GetBufferPointerv@gl@@YAXIIPEAPEAX@Z
?GetBufferPointervContextANGLE@gl@@YAXPEAXIIPEAPEAX@Z
?GetBufferPointervOES@gl@@YAXIIPEAPEAX@Z
?GetBufferPointervOESContextANGLE@gl@@YAXPEAXIIPEAPEAX@Z
?GetBufferPointervRobustANGLE@gl@@YAXIIHPEAHPEAPEAX@Z
?GetBufferPointervRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAHPEAPEAX@Z
?GetClipPlanef@gl@@YAXIPEAM@Z
?GetClipPlanefContextANGLE@gl@@YAXPEAXIPEAM@Z
?GetClipPlanex@gl@@YAXIPEAH@Z
?GetClipPlanexContextANGLE@gl@@YAXPEAXIPEAH@Z
?GetDebugMessageLogKHR@gl@@YAIIHPEAI000PEAHPEAD@Z
?GetDebugMessageLogKHRContextANGLE@gl@@YAIPEAXIHPEAI111PEAHPEAD@Z
?GetError@gl@@YAIXZ
?GetErrorContextANGLE@gl@@YAIPEAX@Z
?GetFenceivNV@gl@@YAXIIPEAH@Z
?GetFenceivNVContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetFixedv@gl@@YAXIPEAH@Z
?GetFixedvContextANGLE@gl@@YAXPEAXIPEAH@Z
?GetFloatv@gl@@YAXIPEAM@Z
?GetFloatvContextANGLE@gl@@YAXPEAXIPEAM@Z
?GetFloatvRobustANGLE@gl@@YAXIHPEAHPEAM@Z
?GetFloatvRobustANGLEContextANGLE@gl@@YAXPEAXIHPEAHPEAM@Z
?GetFragDataIndexEXT@gl@@YAHIPEBD@Z
?GetFragDataIndexEXTContextANGLE@gl@@YAHPEAXIPEBD@Z
?GetFragDataLocation@gl@@YAHIPEBD@Z
?GetFragDataLocationContextANGLE@gl@@YAHPEAXIPEBD@Z
?GetFramebufferAttachmentParameteriv@gl@@YAXIIIPEAH@Z
?GetFramebufferAttachmentParameterivContextANGLE@gl@@YAXPEAXIIIPEAH@Z
?GetFramebufferAttachmentParameterivOES@gl@@YAXIIIPEAH@Z
?GetFramebufferAttachmentParameterivOESContextANGLE@gl@@YAXPEAXIIIPEAH@Z
?GetFramebufferAttachmentParameterivRobustANGLE@gl@@YAXIIIHPEAH0@Z
?GetFramebufferAttachmentParameterivRobustANGLEContextANGLE@gl@@YAXPEAXIIIHPEAH1@Z
?GetFramebufferParameteriv@gl@@YAXIIPEAH@Z
?GetFramebufferParameterivContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetFramebufferParameterivRobustANGLE@gl@@YAXIIHPEAH0@Z
?GetFramebufferParameterivRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAH1@Z
?GetGraphicsResetStatusEXT@gl@@YAIXZ
?GetGraphicsResetStatusEXTContextANGLE@gl@@YAIPEAX@Z
?GetInteger64i_v@gl@@YAXIIPEA_J@Z
?GetInteger64i_vContextANGLE@gl@@YAXPEAXIIPEA_J@Z
?GetInteger64i_vRobustANGLE@gl@@YAXIIHPEAHPEA_J@Z
?GetInteger64i_vRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAHPEA_J@Z
?GetInteger64v@gl@@YAXIPEA_J@Z
?GetInteger64vContextANGLE@gl@@YAXPEAXIPEA_J@Z
?GetInteger64vRobustANGLE@gl@@YAXIHPEAHPEA_J@Z
?GetInteger64vRobustANGLEContextANGLE@gl@@YAXPEAXIHPEAHPEA_J@Z
?GetIntegeri_v@gl@@YAXIIPEAH@Z
?GetIntegeri_vContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetIntegeri_vRobustANGLE@gl@@YAXIIHPEAH0@Z
?GetIntegeri_vRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAH1@Z
?GetIntegerv@gl@@YAXIPEAH@Z
?GetIntegervContextANGLE@gl@@YAXPEAXIPEAH@Z
?GetIntegervRobustANGLE@gl@@YAXIHPEAH0@Z
?GetIntegervRobustANGLEContextANGLE@gl@@YAXPEAXIHPEAH1@Z
?GetInternalformativ@gl@@YAXIIIHPEAH@Z
?GetInternalformativContextANGLE@gl@@YAXPEAXIIIHPEAH@Z
?GetInternalformativRobustANGLE@gl@@YAXIIIHPEAH0@Z
?GetInternalformativRobustANGLEContextANGLE@gl@@YAXPEAXIIIHPEAH1@Z
?GetLightfv@gl@@YAXIIPEAM@Z
?GetLightfvContextANGLE@gl@@YAXPEAXIIPEAM@Z
?GetLightxv@gl@@YAXIIPEAH@Z
?GetLightxvContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetMaterialfv@gl@@YAXIIPEAM@Z
?GetMaterialfvContextANGLE@gl@@YAXPEAXIIPEAM@Z
?GetMaterialxv@gl@@YAXIIPEAH@Z
?GetMaterialxvContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetMultisamplefv@gl@@YAXIIPEAM@Z
?GetMultisamplefvANGLE@gl@@YAXIIPEAM@Z
?GetMultisamplefvANGLEContextANGLE@gl@@YAXPEAXIIPEAM@Z
?GetMultisamplefvContextANGLE@gl@@YAXPEAXIIPEAM@Z
?GetMultisamplefvRobustANGLE@gl@@YAXIIHPEAHPEAM@Z
?GetMultisamplefvRobustANGLEContextANGLE@gl@@YAXPEAXIIHPEAHPEAM@Z
?GetObjectLabelKHR@gl@@YAXIIHPEAHPEAD@Z
?GetObjectLabelKHRContextANGLE@gl@@YAXPEAXIIHPEAHPEAD@Z
?GetObjectPtrLabelKHR@gl@@YAXPEBXHPEAHPEAD@Z
?GetObjectPtrLabelKHRContextANGLE@gl@@YAXPEAXPEBXHPEAHPEAD@Z
?GetPathParameterfvCHROMIUM@gl@@YAXIIPEAM@Z
?GetPathParameterfvCHROMIUMContextANGLE@gl@@YAXPEAXIIPEAM@Z
?GetPathParameterivCHROMIUM@gl@@YAXIIPEAH@Z
?GetPathParameterivCHROMIUMContextANGLE@gl@@YAXPEAXIIPEAH@Z
?GetPointerv@gl@@YAXIPEAPEAX@Z
?GetPointervContextANGLE@gl@@YAXPEAXIPEAPEAX@Z
?GetPointervKHR@gl@@YAXIPEAPEAX@Z
?GetPointervKHRContextANGLE@gl@@YAXPEAXIPEAPEAX@Z
?GetPointervRobustANGLERobustANGLE@gl@@YAXIHPEAHPEAPEAX@Z
?GetPointervRobustANGLERobustANGLEContextANGLE@gl@@YAXPEAXIHPEAHPEAPEAX@Z
?GetProgramBinary@gl@@YAXIHPEAHPEAIPEAX@Z
?GetProgramBinaryContextANGLE@gl@@YAXPEAXIHPEAHPEAI0@Z
?GetProgramBinaryOES@gl@@YAXIHPEAHPEAIPEAX@Z
?GetProgramBinaryOESContextANGLE@gl@@YAXPEAXIHPEAHPEAI0@Z
?GetProgramInfoLog@gl@@YAXIHPEAHPEAD@Z
?GetProgramInfoLogContextANGLE@gl@@YAXPEAXIHPEAHPEAD@Z
?GetProgramInterfaceiv@gl@@YAXIIIPEAH@Z
?GetProgramInterfaceivContextANGLE@gl@@YAXPEAXIIIPEAH@Z
?GetProgramInterfaceivRobustANGLE@gl@@YAXIIIHPEAH0@Z
?GetProgramInterfaceivRobustANGLEContextANGLE@gl@@YAXPEAXIIIHPEAH1@Z
?GetProgramPipelineInfoLog@gl@@YAXIHPEAHPEAD@Z

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/libcef.dll
.dll windows:5 windows x64 arch:x64

461aab3eaf46b1b4992d2a3fbdd3b4ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libcef.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AllocConsole
AreFileApisANSI
AssignProcessToJobObject
AttachConsole
CancelIo
CancelIoEx
ChangeTimerQueueTimer
ClearCommBreak
ClearCommError
CloseHandle
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateJobObjectW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
CreateToolhelp32Snapshot
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteTimerQueueTimer
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindFirstVolumeW
FindNextFileA
FindNextFileW
FindNextVolumeW
FindResourceW
FindVolumeClose
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommModemStatus
GetCommState
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetComputerNameW
GetConsoleCP
GetConsoleMode
GetCurrencyFormatEx
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatEx
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileType
GetFullPathNameA
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocalTime
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalDriveStringsW
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetNumaHighestNodeNumber
GetNumberFormatEx
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileStringW
GetProcAddress
GetProcessAffinityMask
GetProcessHandleCount
GetProcessHeap
GetProcessHeaps
GetProcessId
GetProcessTimes
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadId
GetThreadLocale
GetThreadPriority
GetThreadPriorityBoost
GetThreadTimes
GetTickCount
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserDefaultUILanguage
GetUserGeoID
GetVersion
GetVersionExW
GetVolumeInformationW
GetVolumePathNameW
GetVolumePathNamesForVolumeNameW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSetInformation
HeapSize
HeapUnlock
HeapValidate
HeapWalk
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDBCSLeadByte
IsDebuggerPresent
IsProcessInJob
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
K32EmptyWorkingSet
K32EnumProcessModules
K32GetMappedFileNameW
K32GetModuleInformation
K32GetPerformanceInfo
K32GetProcessMemoryInfo
K32QueryWorkingSetEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocaleNameToLCID
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
PowerClearRequest
PowerCreateRequest
PowerSetRequest
Process32FirstW
Process32NextW
ProcessIdToSessionId
PurgeComm
QueryDepthSList
QueryDosDeviceW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
QueryUnbiasedInterruptTime
QueueUserAPC
RaiseException
RaiseFailFastException
ReadConsoleW
ReadFile
ReadProcessMemory
RegisterWaitForSingleObject
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
ReplaceFileW
ResetEvent
ResolveLocaleName
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SearchPathW
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessShutdownParameters
SetStdHandle
SetThreadAffinityMask
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
SignalObjectAndWait
SizeofResource
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateJobObject
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitCommEvent
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
Wow64GetThreadContext
WriteConsoleW
WriteFile
WriteProcessMemory
lstrcmpiA
lstrcmpiW
lstrlenW

ws2_32

WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAGetOverlappedResult
WSAIoctl
WSALookupServiceBeginW
WSALookupServiceEnd
WSALookupServiceNextW
WSARecvFrom
WSAResetEvent
WSASend
WSASendTo
WSASetEvent
WSASetServiceW
WSASocketW
WSAStartup
WSAWaitForMultipleEvents
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
send
sendto
setsockopt
shutdown
socket

iphlpapi

CancelIPChangeNotify
FreeMibTable
GetAdaptersAddresses
GetIfTable2
GetInterfaceInfo
IpReleaseAddress
IpRenewAddress
NotifyAddrChange

shell32

CommandLineToArgvW
DragQueryFileW
ord680
SHBrowseForFolderW
SHChangeNotify
SHCreateItemFromParsingName
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW
SHGetFolderPathW
SHGetKnownFolderPath
SHGetPathFromIDListW
SHGetPropertyStoreForWindow
SHGetSpecialFolderPathW
SHOpenFolderAndSelectItems
SHOpenWithDialog
ShellExecuteA
ShellExecuteExW
ShellExecuteW

advapi32

AccessCheck
AdjustTokenPrivileges
AllocateLocallyUniqueId
ConvertSidToStringSidA
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW
CopySid
CreateProcessAsUserW
CreateRestrictedToken
CreateWellKnownSid
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSignHashW
DeregisterEventSource
DuplicateToken
DuplicateTokenEx
EqualSid
EventRegister
EventUnregister
EventWrite
FreeSid
GetAce
GetKernelObjectSecurity
GetLengthSid
GetNamedSecurityInfoW
GetSecurityDescriptorSacl
GetSecurityInfo
GetSidSubAuthority
GetTokenInformation
GetUserNameW
ImpersonateAnonymousToken
ImpersonateLoggedOnUser
ImpersonateNamedPipeClient
InitializeAcl
InitializeSecurityDescriptor
InitializeSid
IsValidSid
LogonUserW
LookupAccountNameW
LookupPrivilegeValueW
LsaNtStatusToWinError
MapGenericMask
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegDisablePredefinedCache
RegEnumKeyExW
RegEnumValueW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceA
ReportEventA
RevertToSelf
SetEntriesInAclW
SetKernelObjectSecurity
SetSecurityDescriptorDacl
SetSecurityInfo
SetThreadToken
SetTokenInformation
SystemFunction036

winmm

midiInAddBuffer
midiInClose
midiInGetDevCapsW
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsW
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInGetNumDevs
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

ole32

CLSIDFromString
CoAllowSetForegroundWindow
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateStreamOnHGlobal
DoDragDrop
GetHGlobalFromStream
OleDuplicateData
OleInitialize
OleUninitialize
PropVariantClear
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2

user32

AdjustWindowRectEx
AllowSetForegroundWindow
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharNextW
ClientToScreen
ClipCursor
CloseClipboard
CloseDesktop
CloseTouchInputHandle
CloseWindowStation
CreateCaret
CreateDesktopW
CreateDialogParamW
CreateIconIndirect
CreatePopupMenu
CreateWindowExW
CreateWindowStationW
DefRawInputProc
DefWindowProcW
DestroyCaret
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
DisplayConfigGetDeviceInfo
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawTextExW
EmptyClipboard
EnableMenuItem
EnableWindow
EndMenu
EndPaint
EnumChildWindows
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumThreadWindows
EnumWindows
ExitWindowsEx
FillRect
FindWindowW
FlashWindowEx
FrameRect
GetActiveWindow
GetAncestor
GetAsyncKeyState
GetCapture
GetCaretBlinkTime
GetClassInfoExW
GetClassLongPtrW
GetClassNameW
GetClientRect
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDisplayConfigBufferSizes
GetDlgItem
GetDlgItemTextW
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetGuiResources
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetLastInputInfo
GetLayeredWindowAttributes
GetMenu
GetMenuInfo
GetMenuItemCount
GetMenuItemInfoW
GetMenuState
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetMessageW
GetMonitorInfoW
GetParent
GetProcessWindowStation
GetPropW
GetQueueStatus
GetRawInputData
GetRawInputDeviceInfoW
GetRawInputDeviceList
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetThreadDesktop
GetTopWindow
GetUserObjectInformationW
GetWindow
GetWindowDC
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuItemW
IntersectRect
InvalidateRect
InvertRect
IsChild
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjectsEx
NotifyWinEvent
OffsetRect
OpenClipboard
OpenInputDesktop
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PrintWindow
PtInRect
QueryDisplayConfig
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterHotKey
RegisterPowerSettingNotification
RegisterRawInputDevices
RegisterTouchWindow
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendInput
SendMessageTimeoutW
SendMessageW
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenuDefaultItem
SetMenuInfo
SetMenuItemInfoW
SetParent
SetProcessDPIAware
SetProcessWindowStation
SetPropW
SetRect
SetRectEmpty
SetThreadDesktop
SetTimer
SetWinEventHook
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCursor
ShowWindow
SystemParametersInfoW
ToUnicodeEx
TrackMouseEvent
TrackPopupMenu
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
UnregisterClassW
UnregisterDeviceNotification
UnregisterHotKey
UnregisterPowerSettingNotification
UpdateLayeredWindow
ValidateRect
WindowFromPoint

oleaut32

LoadRegTypeLi
LoadTypeLi
SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarUI4FromStr
VariantClear
VariantInit

gdi32

AddFontMemResourceEx
BeginPath
BitBlt
CancelDC
ChoosePixelFormat
CloseEnhMetaFile
CloseFigure
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
EndDoc
EndPage
EndPath
EnumEnhMetaFile
EnumFontFamiliesExA
EnumFontFamiliesExW
EqualRgn
ExtCreatePen
ExtEscape
ExtTextOutW
FillPath
GdiAlphaBlend
GdiComment
GdiFlush
GetBkColor
GetCharABCWidthsW
GetCharWidthW
GetClipBox
GetClipRgn
GetCurrentObject
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetFontData
GetFontUnicodeRanges
GetGlyphIndicesW
GetGlyphOutlineW
GetICMProfileW
GetObjectType
GetObjectW
GetOutlineTextMetricsW
GetRegionData
GetRgnBox
GetStockObject
GetTextExtentPoint32W
GetTextExtentPointI
GetTextFaceA
GetTextFaceW
GetTextMetricsW
GetWorldTransform
IntersectClipRect
LineTo
ModifyWorldTransform
MoveToEx
PlayEnhMetaFile
PlayEnhMetaFileRecord
PolyBezierTo
PtInRegion
RemoveFontMemResourceEx
RestoreDC
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SetAbortProc
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetDCBrushColor
SetDCPenColor
SetDIBits
SetDIBitsToDevice
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetMiterLimit
SetPixelFormat
SetPolyFillMode
SetROP2
SetRectRgn
SetStretchBltMode
SetTextAlign
SetTextColor
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
StrokeAndFillPath
StrokePath
SwapBuffers
WidenPath

secur32

AcquireCredentialsHandleA
AcquireCredentialsHandleW
CompleteAuthToken
DeleteSecurityContext
FreeContextBuffer
FreeCredentialsHandle
GetUserNameExW
InitializeSecurityContextA
InitializeSecurityContextW
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaFreeReturnBuffer
LsaLogonUser
QuerySecurityPackageInfoW

netapi32

NetApiBufferFree
NetUserGetInfo

oleacc

AccessibleChildren
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
WindowFromAccessibleObject

comctl32

InitCommonControlsEx

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

hid

HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetValueCaps

wintrust

CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext

crypt32

CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertCloseStore
CertCompareCertificateName
CertCreateCertificateChainEngine
CertDuplicateCertificateContext
CertFindCertificateInStore
CertFindChainInStore
CertFindExtension
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetIntendedKeyUsage
CertGetIssuerCertificateFromStore
CertGetNameStringW
CertOpenStore
CertOpenSystemStoreW
CertSetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertVerifyTimeValidity
CryptAcquireCertificatePrivateKey
CryptDecodeObjectEx
CryptInstallOIDFunctionAddress
CryptMsgClose
CryptMsgGetParam
CryptProtectData
CryptQueryObject
CryptUnprotectData
CryptVerifyCertificateSignatureEx

chrome_elf

GetCrashReports_ExportThunk
GetInstallDetailsPayload
InjectDumpForHungInput_ExportThunk
RequestSingleCrashUpload_ExportThunk
SignalChromeElf
SignalInitializeCrashReporting

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

propsys

InitPropVariantFromCLSID

shlwapi

AssocQueryStringW
ord437
PathFindExtensionW
PathFindFileNameW
PathMatchSpecW
PathRemoveExtensionW

dwmapi

DwmDefWindowProc
DwmExtendFrameIntoClientArea
DwmGetCompositionTimingInfo
DwmGetWindowAttribute
DwmIsCompositionEnabled
DwmSetWindowAttribute

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory
CreateDXGIFactory1

dbghelp

SymFromAddr
SymGetLineFromAddr64
SymGetSearchPathW
SymInitialize
SymSetOptions
SymSetSearchPathW

usp10

ScriptFreeCache
ScriptItemize
ScriptShape
ScriptStringAnalyse
ScriptStringFree
ScriptStringOut

d3d9

Direct3DCreate9Ex

dxva2

DXVA2CreateDirect3DDeviceManager9
DXVA2CreateVideoService

d3d11

D3D11CreateDevice

winhttp

WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpWriteData

urlmon

CoInternetCreateSecurityManager

credui

CredUIPromptForCredentialsW
CredUIPromptForWindowsCredentialsW

winspool.drv

ClosePrinter
DeviceCapabilitiesW
DocumentPropertiesW
EnumPrintersW
ord203
GetPrinterDriverW
GetPrinterW
OpenPrinterW

comdlg32

ChooseColorW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgExW

imm32

ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetContext
ImmGetConversionStatus
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmSetOpenStatus

cryptui

CryptUIDlgCertMgr
CryptUIDlgViewCertificateW

ncrypt

NCryptFreeObject
NCryptGetProperty
NCryptSignHash

dhcpcsvc

DhcpCApiInitialize
DhcpRequestParams

Exports

Exports

GetHandleVerifier
IsSandboxedProcess
RelaunchChromeBrowserWithNewCommandLineIfNeeded
cef_add_cross_origin_whitelist_entry
cef_api_hash
cef_base64decode
cef_base64encode
cef_begin_tracing
cef_binary_value_create
cef_browser_host_create_browser
cef_browser_host_create_browser_sync
cef_browser_view_create
cef_browser_view_get_for_browser
cef_clear_cross_origin_whitelist
cef_clear_scheme_handler_factories
cef_command_line_create
cef_command_line_get_global
cef_cookie_manager_create_manager
cef_cookie_manager_get_blocking_manager
cef_cookie_manager_get_global_manager
cef_crash_reporting_enabled
cef_create_context_shared
cef_create_directory
cef_create_new_temp_directory
cef_create_temp_directory_in_directory
cef_create_url
cef_currently_on
cef_delete_file
cef_dictionary_value_create
cef_directory_exists
cef_display_get_alls
cef_display_get_count
cef_display_get_matching_bounds
cef_display_get_nearest_point
cef_display_get_primary
cef_do_message_loop_work
cef_drag_data_create
cef_enable_highdpi_support
cef_end_tracing
cef_execute_java_script_with_user_gesture_for_tests
cef_execute_process
cef_format_url_for_security_display
cef_get_current_platform_thread_handle
cef_get_current_platform_thread_id
cef_get_extensions_for_mime_type
cef_get_mime_type
cef_get_min_log_level
cef_get_path
cef_get_temp_directory
cef_get_vlog_level
cef_image_create
cef_initialize
cef_is_cert_status_error
cef_is_cert_status_minor_error
cef_is_web_plugin_unstable
cef_label_button_create
cef_launch_process
cef_list_value_create
cef_load_crlsets_file
cef_log
cef_menu_button_create
cef_menu_model_create
cef_now_from_system_trace_time
cef_panel_create
cef_parse_json
cef_parse_jsonand_return_error
cef_parse_url
cef_post_data_create
cef_post_data_element_create
cef_post_delayed_task
cef_post_task
cef_print_settings_create
cef_process_message_create
cef_quit_message_loop
cef_refresh_web_plugins
cef_register_extension
cef_register_scheme_handler_factory
cef_register_web_plugin_crash
cef_register_widevine_cdm
cef_remove_cross_origin_whitelist_entry
cef_request_context_create_context
cef_request_context_get_global_context
cef_request_create
cef_resource_bundle_get_global
cef_response_create
cef_run_message_loop
cef_scroll_view_create
cef_server_create
cef_set_crash_key_value
cef_set_osmodal_loop
cef_shutdown
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_stream_reader_create_for_handler
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_string_ascii_to_utf16
cef_string_ascii_to_wide
cef_string_list_alloc
cef_string_list_append
cef_string_list_clear
cef_string_list_copy
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_clear
cef_string_map_find
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_clear
cef_string_multimap_enumerate
cef_string_multimap_find_count
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_alloc
cef_string_userfree_utf16_free
cef_string_userfree_utf8_alloc
cef_string_userfree_utf8_free
cef_string_userfree_wide_alloc
cef_string_userfree_wide_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_lower
cef_string_utf16_to_upper
cef_string_utf16_to_utf8
cef_string_utf16_to_wide
cef_string_utf8_clear
cef_string_utf8_cmp
cef_string_utf8_set
cef_string_utf8_to_utf16
cef_string_utf8_to_wide
cef_string_wide_clear
cef_string_wide_cmp
cef_string_wide_set
cef_string_wide_to_utf16
cef_string_wide_to_utf8
cef_task_runner_get_for_current_thread
cef_task_runner_get_for_thread
cef_textfield_create
cef_thread_create
cef_time_delta
cef_time_from_doublet
cef_time_from_timet
cef_time_now
cef_time_to_doublet
cef_time_to_timet
cef_trace_counter
cef_trace_counter_id
cef_trace_event_async_begin
cef_trace_event_async_end
cef_trace_event_async_step_into
cef_trace_event_async_step_past
cef_trace_event_begin
cef_trace_event_end
cef_trace_event_instant
cef_translator_test_create
cef_translator_test_ref_ptr_library_child_child_create
cef_translator_test_ref_ptr_library_child_create
cef_translator_test_ref_ptr_library_create
cef_translator_test_scoped_library_child_child_create
cef_translator_test_scoped_library_child_create
cef_translator_test_scoped_library_create
cef_unregister_internal_web_plugin
cef_uridecode
cef_uriencode
cef_urlrequest_create
cef_v8context_get_current_context
cef_v8context_get_entered_context
cef_v8context_in_context
cef_v8stack_trace_get_current
cef_v8value_create_array
cef_v8value_create_array_buffer
cef_v8value_create_bool
cef_v8value_create_date
cef_v8value_create_double
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_uint
cef_v8value_create_undefined
cef_value_create
cef_version_info
cef_visit_web_plugin_info
cef_waitable_event_create
cef_window_create_top_level
cef_write_json
cef_xml_reader_create
cef_zip_directory
cef_zip_reader_create

Sections

.text
Size: 85.8MB - Virtual size: 85.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 108B

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 305B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

prot
Size: 512B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 948KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/locales/am.pak
resources/app.asar.unpacked/release/native/locales/ar.pak
resources/app.asar.unpacked/release/native/locales/bg.pak
resources/app.asar.unpacked/release/native/locales/bn.pak
resources/app.asar.unpacked/release/native/locales/ca.pak
resources/app.asar.unpacked/release/native/locales/cs.pak
resources/app.asar.unpacked/release/native/locales/da.pak
resources/app.asar.unpacked/release/native/locales/de.pak
resources/app.asar.unpacked/release/native/locales/el.pak
resources/app.asar.unpacked/release/native/locales/en-GB.pak
resources/app.asar.unpacked/release/native/locales/en-US.pak
resources/app.asar.unpacked/release/native/locales/es-419.pak
resources/app.asar.unpacked/release/native/locales/es.pak
resources/app.asar.unpacked/release/native/locales/et.pak
resources/app.asar.unpacked/release/native/locales/fa.pak
resources/app.asar.unpacked/release/native/locales/fi.pak
resources/app.asar.unpacked/release/native/locales/fil.pak
resources/app.asar.unpacked/release/native/locales/fr.pak
resources/app.asar.unpacked/release/native/locales/gu.pak
resources/app.asar.unpacked/release/native/locales/he.pak
resources/app.asar.unpacked/release/native/locales/hi.pak
resources/app.asar.unpacked/release/native/locales/hr.pak
resources/app.asar.unpacked/release/native/locales/hu.pak
resources/app.asar.unpacked/release/native/locales/id.pak
resources/app.asar.unpacked/release/native/locales/it.pak
resources/app.asar.unpacked/release/native/locales/ja.pak
resources/app.asar.unpacked/release/native/locales/kn.pak
resources/app.asar.unpacked/release/native/locales/ko.pak
resources/app.asar.unpacked/release/native/locales/lt.pak
resources/app.asar.unpacked/release/native/locales/lv.pak
resources/app.asar.unpacked/release/native/locales/ml.pak
resources/app.asar.unpacked/release/native/locales/mr.pak
resources/app.asar.unpacked/release/native/locales/ms.pak
resources/app.asar.unpacked/release/native/locales/nb.pak
resources/app.asar.unpacked/release/native/locales/nl.pak
resources/app.asar.unpacked/release/native/locales/pl.pak
resources/app.asar.unpacked/release/native/locales/pt-BR.pak
resources/app.asar.unpacked/release/native/locales/pt-PT.pak
resources/app.asar.unpacked/release/native/locales/ro.pak
resources/app.asar.unpacked/release/native/locales/ru.pak
resources/app.asar.unpacked/release/native/locales/sk.pak
resources/app.asar.unpacked/release/native/locales/sl.pak
resources/app.asar.unpacked/release/native/locales/sr.pak
resources/app.asar.unpacked/release/native/locales/sv.pak
resources/app.asar.unpacked/release/native/locales/sw.pak
resources/app.asar.unpacked/release/native/locales/ta.pak
resources/app.asar.unpacked/release/native/locales/te.pak
resources/app.asar.unpacked/release/native/locales/th.pak
resources/app.asar.unpacked/release/native/locales/tr.pak
resources/app.asar.unpacked/release/native/locales/uk.pak
resources/app.asar.unpacked/release/native/locales/vi.pak
resources/app.asar.unpacked/release/native/locales/zh-CN.pak
resources/app.asar.unpacked/release/native/locales/zh-TW.pak
resources/app.asar.unpacked/release/native/natives_blob.bin
.js
resources/app.asar.unpacked/release/native/networkintel/win_network.bat
resources/app.asar.unpacked/release/native/notif.js
.js
resources/app.asar.unpacked/release/native/overlay/bundle.961789ccc61cc27ca0d8.js
.js
resources/app.asar.unpacked/release/native/overlay/fonts/73caea1bb88f8c88b9f10641872ac58c.otf
resources/app.asar.unpacked/release/native/overlay/fonts/be2de363bb91049f60a3d3b76028440e.otf
resources/app.asar.unpacked/release/native/overlay/fonts/e18d31a8d87a5e7f866a506b5ae23330.otf
resources/app.asar.unpacked/release/native/overlay/images/arrows.svg
resources/app.asar.unpacked/release/native/overlay/images/battery-charging.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/battery-empty.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/battery-full.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/battery-low.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/battery-medium.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/bitrate-arrow.svg
resources/app.asar.unpacked/release/native/overlay/images/caret.svg
resources/app.asar.unpacked/release/native/overlay/images/chevron-left.svg
resources/app.asar.unpacked/release/native/overlay/images/chevron-right.svg
resources/app.asar.unpacked/release/native/overlay/images/community-forum-icon.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/contact-support-icon.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/controller.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/cursor-locked.svg
resources/app.asar.unpacked/release/native/overlay/images/cursor-unlocked.svg
resources/app.asar.unpacked/release/native/overlay/images/discord.svg
resources/app.asar.unpacked/release/native/overlay/images/display.svg
resources/app.asar.unpacked/release/native/overlay/images/error.svg
resources/app.asar.unpacked/release/native/overlay/images/extend-window.svg
resources/app.asar.unpacked/release/native/overlay/images/external-link.svg
resources/app.asar.unpacked/release/native/overlay/images/full-screen.svg
resources/app.asar.unpacked/release/native/overlay/images/help-center-icon.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/help.svg
resources/app.asar.unpacked/release/native/overlay/images/info.svg
resources/app.asar.unpacked/release/native/overlay/images/keyboard-mouse.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/left-joystick-click.svg
resources/app.asar.unpacked/release/native/overlay/images/left-joystick.svg
resources/app.asar.unpacked/release/native/overlay/images/left-trigger.svg
resources/app.asar.unpacked/release/native/overlay/images/legacyDisplay.svg
resources/app.asar.unpacked/release/native/overlay/images/logitech.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/mic_substract.svg
resources/app.asar.unpacked/release/native/overlay/images/playstation.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/quit-stream.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/quit.svg
resources/app.asar.unpacked/release/native/overlay/images/restart-stream.svg
resources/app.asar.unpacked/release/native/overlay/images/right-joystick-click.svg
resources/app.asar.unpacked/release/native/overlay/images/right-joystick.svg
resources/app.asar.unpacked/release/native/overlay/images/right-trigger.svg
resources/app.asar.unpacked/release/native/overlay/images/settings.svg
resources/app.asar.unpacked/release/native/overlay/images/shadow-icon-white.svg
resources/app.asar.unpacked/release/native/overlay/images/shutdown.svg
resources/app.asar.unpacked/release/native/overlay/images/stadia.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/stats.svg
resources/app.asar.unpacked/release/native/overlay/images/steam.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/switch.svg
.xml
resources/app.asar.unpacked/release/native/overlay/images/triangle-2.svg
resources/app.asar.unpacked/release/native/overlay/images/triangle-3.svg
resources/app.asar.unpacked/release/native/overlay/images/windowed.svg
resources/app.asar.unpacked/release/native/overlay/images/xbox.svg
.xml
resources/app.asar.unpacked/release/native/overlay/index.html
.html
resources/app.asar.unpacked/release/native/resources/420.H264
resources/app.asar.unpacked/release/native/resources/420.H265
resources/app.asar.unpacked/release/native/resources/444.H265
resources/app.asar.unpacked/release/native/resources/UsbFilterFile.json
resources/app.asar.unpacked/release/native/sentry.dll
.dll windows:6 windows x64 arch:x64

7847abe24f1311364ce61dbc46b9591c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\sentry_sdk-0.5.0-r0-windows-vs2019-x64-bender-1.5.0-Release\build\RelWithDebInfo\sentry.pdb

Imports

dbghelp

SymGetModuleBase64
SymFunctionTableAccess64
StackWalk64
SymFromAddr
SymInitialize
SymGetOptions
SymSetOptions

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winhttp

WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
RegGetValueA
SystemFunction036

kernel32

GetCommandLineW
GetCommandLineA
HeapQueryInformation
HeapSize
GetCurrentDirectoryW
SetCurrentDirectoryW
SetStdHandle
GetEnvironmentStringsW
GetTimeZoneInformation
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitOnceExecuteOnce
GetSystemTime
SystemTimeToFileTime
GetProcAddress
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount64
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
RaiseException
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObject
CreateThread
GetThreadId
GetModuleHandleA
GetCurrentProcess
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
RemoveDirectoryW
GetLastError
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcessId
VirtualQuery
FreeLibrary
LoadLibraryExW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
TerminateProcess
RtlCaptureStackBackTrace
GetCurrentThread
CreateFileW
GetFileAttributesW
LockFileEx
SetEndOfFile
UnlockFileEx
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
SetEvent
SleepEx
CreateEventW
Sleep
GetCurrentThreadId
GetExitCodeThread
CreateProcessW
FlushInstructionCache
OpenProcess
GetVersion
VirtualAllocEx
VirtualProtectEx
WriteProcessMemory
GetFileSizeEx
ReadFile
RtlUnwind
WriteFile
GetNamedPipeInfo
FindFirstFileExW
GetFileTime
MoveFileExW
LoadLibraryW
GetModuleHandleW
FormatMessageA
DuplicateHandle
GetSystemInfo
VirtualQueryEx
ReadProcessMemory
SetLastError
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetSystemTimeAsFileTime
LocalFree
OutputDebugStringW
GetLocalTime
FormatMessageW
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetLocaleInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFullPathNameW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
HeapReAlloc
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW

Exports

Exports

sentry_add_breadcrumb
sentry_capture_event
sentry_clear_crashed_last_run
sentry_clear_modulecache
sentry_close
sentry_end_session
sentry_envelope_free
sentry_envelope_get_event
sentry_envelope_get_transaction
sentry_envelope_serialize
sentry_envelope_write_to_file
sentry_event_add_exception
sentry_event_add_thread
sentry_event_value_add_stacktrace
sentry_flush
sentry_free
sentry_get_crashed_last_run
sentry_get_modules_list
sentry_handle_exception
sentry_init
sentry_malloc
sentry_new_function_transport
sentry_options_add_attachment
sentry_options_add_attachmentw
sentry_options_free
sentry_options_get_auto_session_tracking
sentry_options_get_ca_certs
sentry_options_get_debug
sentry_options_get_dist
sentry_options_get_dsn
sentry_options_get_environment
sentry_options_get_http_proxy
sentry_options_get_max_breadcrumbs
sentry_options_get_max_spans
sentry_options_get_release
sentry_options_get_require_user_consent
sentry_options_get_sample_rate
sentry_options_get_shutdown_timeout
sentry_options_get_symbolize_stacktraces
sentry_options_get_traces_sample_rate
sentry_options_get_transport_thread_name
sentry_options_new
sentry_options_set_auto_session_tracking
sentry_options_set_backend
sentry_options_set_before_send
sentry_options_set_ca_certs
sentry_options_set_database_path
sentry_options_set_database_pathw
sentry_options_set_debug
sentry_options_set_dist
sentry_options_set_dsn
sentry_options_set_environment
sentry_options_set_handler_path
sentry_options_set_handler_pathw
sentry_options_set_http_proxy
sentry_options_set_logger
sentry_options_set_max_breadcrumbs
sentry_options_set_max_spans
sentry_options_set_on_crash
sentry_options_set_release
sentry_options_set_require_user_consent
sentry_options_set_sample_rate
sentry_options_set_shutdown_timeout
sentry_options_set_symbolize_stacktraces
sentry_options_set_system_crash_reporter_enabled
sentry_options_set_traces_sample_rate
sentry_options_set_transport
sentry_options_set_transport_thread_name
sentry_reinstall_backend
sentry_remove_context
sentry_remove_extra
sentry_remove_fingerprint
sentry_remove_tag
sentry_remove_user
sentry_sdk_name
sentry_sdk_user_agent
sentry_sdk_version
sentry_set_context
sentry_set_extra
sentry_set_fingerprint
sentry_set_level
sentry_set_span
sentry_set_tag
sentry_set_transaction
sentry_set_transaction_object
sentry_set_user
sentry_shutdown
sentry_span_finish
sentry_span_iter_headers
sentry_span_remove_data
sentry_span_remove_tag
sentry_span_set_data
sentry_span_set_status
sentry_span_set_tag
sentry_span_start_child
sentry_start_session
sentry_transaction_context_new
sentry_transaction_context_remove_sampled
sentry_transaction_context_set_name
sentry_transaction_context_set_operation
sentry_transaction_context_set_sampled
sentry_transaction_context_update_from_header
sentry_transaction_finish
sentry_transaction_iter_headers
sentry_transaction_remove_data
sentry_transaction_remove_tag
sentry_transaction_set_data
sentry_transaction_set_name
sentry_transaction_set_status
sentry_transaction_set_tag
sentry_transaction_start
sentry_transaction_start_child
sentry_transport_free
sentry_transport_new
sentry_transport_set_flush_func
sentry_transport_set_free_func
sentry_transport_set_shutdown_func
sentry_transport_set_startup_func
sentry_transport_set_state
sentry_unwind_stack
sentry_unwind_stack_from_ucontext
sentry_user_consent_get
sentry_user_consent_give
sentry_user_consent_reset
sentry_user_consent_revoke
sentry_uuid_as_bytes
sentry_uuid_as_string
sentry_uuid_from_bytes
sentry_uuid_from_string
sentry_uuid_is_nil
sentry_uuid_new_v4
sentry_uuid_nil
sentry_value_append
sentry_value_as_double
sentry_value_as_int32
sentry_value_as_string
sentry_value_decref
sentry_value_freeze
sentry_value_get_by_index
sentry_value_get_by_index_owned
sentry_value_get_by_key
sentry_value_get_by_key_owned
sentry_value_get_length
sentry_value_get_type
sentry_value_incref
sentry_value_is_frozen
sentry_value_is_null
sentry_value_is_true
sentry_value_new_bool
sentry_value_new_breadcrumb
sentry_value_new_double
sentry_value_new_event
sentry_value_new_exception
sentry_value_new_int32
sentry_value_new_list
sentry_value_new_message_event
sentry_value_new_null
sentry_value_new_object
sentry_value_new_stacktrace
sentry_value_new_string
sentry_value_new_thread
sentry_value_refcount
sentry_value_remove_by_index
sentry_value_remove_by_key
sentry_value_set_by_index
sentry_value_set_by_key
sentry_value_set_stacktrace
sentry_value_to_json
sentry_value_to_msgpack

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 323B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/shadow.ico
resources/app.asar.unpacked/release/native/shadowusb/ShadowUSBInstaller.exe
.exe windows:5 windows x86 arch:x86

42d651751c1d75ed4fa8fe71751854ff

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e0:25:f0:8c:c7:a2:a2:34:56:91:5f:18:12:df:c4:1a:cb:e3:09:73:6c:30:c2:57:d2:12:19:34:15:19:9a:66
Signer

Actual PE Digest

e0:25:f0:8c:c7:a2:a2:34:56:91:5f:18:12:df:c4:1a:cb:e3:09:73:6c:30:c2:57:d2:12:19:34:15:19:9a:66

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\66\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
CloseEventLog
OpenEventLogW
ReportEventW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW

oleaut32

VariantInit
SysAllocString
VariantClear
SysFreeString

gdi32

DeleteDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
CreateCompatibleDC

shell32

CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CLSIDFromProgID
CoInitializeSecurity

kernel32

GetCPInfo
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineA
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetCommandLineW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
LoadLibraryExW
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
GetComputerNameW
SetCurrentDirectoryW
GetFileType
GetACP
ExitProcess
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/shadowusb/shadowusb.ps1
.ps1
resources/app.asar.unpacked/release/native/snapshot_blob.bin
resources/app.asar.unpacked/release/native/style.css
resources/app.asar.unpacked/release/native/swiftshader/libEGL.dll
.dll windows:5 windows x64 arch:x64

fc7eecf4929006385479406d8d2715fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libEGL.dll.pdb

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetClientRect
GetDC
IsWindow
ReleaseDC

gdi32

GetDeviceCaps

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSyncKHR
eglCopyBuffers
eglCreateContext
eglCreateImageKHR
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurfaceEXT
eglCreateSyncKHR
eglCreateWindowSurface
eglDestroyContext
eglDestroyImageKHR
eglDestroySurface
eglDestroySyncKHR
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttribKHR
eglInitialize
eglMakeCurrent
eglQueryAPI
eglQueryContext
eglQueryString
eglQuerySurface
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
libEGL_swiftshader

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/swiftshader/libGLESv2.dll
.dll windows:5 windows x64 arch:x64

3abef692c2f15af3ac535c0b1e589ec5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libGLESv2.dll.pdb

Imports

kernel32

ChangeTimerQueueTimer
CloseHandle
CompareStringW
CreateEventA
CreateEventW
CreateFileW
CreateThread
CreateTimerQueue
CreateTimerQueueTimer
DecodePointer
DeleteCriticalSection
DeleteFileW
DeleteTimerQueueTimer
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FlushInstructionCache
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
PeekNamedPipe
QueryDepthSList
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
RegisterWaitForSingleObject
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetThreadAffinityMask
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SwitchToThread
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnregisterWait
UnregisterWaitEx
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

ChangeDisplaySettingsA
ClientToScreen
GetClientRect
GetDC
GetSystemMetrics
GetWindowLongA
GetWindowRect
ReleaseDC
SetRect
SetWindowLongA
SetWindowPos

gdi32

CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceGammaRamp
SelectObject
SetDeviceGammaRamp
StretchBlt

ws2_32

WSACleanup
WSAStartup
accept
bind
closesocket
getaddrinfo
listen
recv
select
send
socket

Exports

Exports

glActiveTexture
glAttachShader
glBeginQuery
glBeginQueryEXT
glBeginTransformFeedback
glBindAttribLocation
glBindBuffer
glBindBufferBase
glBindBufferRange
glBindFramebuffer
glBindFramebufferOES
glBindRenderbuffer
glBindRenderbufferOES
glBindSampler
glBindTexture
glBindTransformFeedback
glBindVertexArray
glBindVertexArrayOES
glBlendColor
glBlendEquation
glBlendEquationSeparate
glBlendFunc
glBlendFuncSeparate
glBlitFramebuffer
glBlitFramebufferANGLE
glBufferData
glBufferSubData
glCheckFramebufferStatus
glCheckFramebufferStatusOES
glClear
glClearBufferfi
glClearBufferfv
glClearBufferiv
glClearBufferuiv
glClearColor
glClearDepthf
glClearStencil
glClientWaitSync
glColorMask
glCompileShader
glCompressedTexImage2D
glCompressedTexImage3D
glCompressedTexSubImage2D
glCompressedTexSubImage3D
glCopyBufferSubData
glCopyTexImage2D
glCopyTexSubImage2D
glCopyTexSubImage3D
glCreateProgram
glCreateShader
glCullFace
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteFramebuffersOES
glDeleteProgram
glDeleteQueries
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteRenderbuffersOES
glDeleteSamplers
glDeleteShader
glDeleteSync
glDeleteTextures
glDeleteTransformFeedbacks
glDeleteVertexArrays
glDeleteVertexArraysOES
glDepthFunc
glDepthMask
glDepthRangef
glDetachShader
glDisable
glDisableVertexAttribArray
glDrawArrays
glDrawArraysInstanced
glDrawBuffers
glDrawBuffersEXT
glDrawElements
glDrawElementsInstanced
glDrawRangeElements
glEGLImageTargetRenderbufferStorageOES
glEGLImageTargetTexture2DOES
glEnable
glEnableVertexAttribArray
glEndQuery
glEndQueryEXT
glEndTransformFeedback
glFenceSync
glFinish
glFinishFenceNV
glFlush
glFlushMappedBufferRange
glFramebufferRenderbuffer
glFramebufferRenderbufferOES
glFramebufferTexture2D
glFramebufferTexture2DOES
glFramebufferTextureLayer
glFrontFace
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenFramebuffersOES
glGenQueries
glGenQueriesEXT
glGenRenderbuffers
glGenRenderbuffersOES
glGenSamplers
glGenTextures
glGenTransformFeedbacks
glGenVertexArrays
glGenVertexArraysOES
glGenerateMipmap
glGenerateMipmapOES
glGetActiveAttrib
glGetActiveUniform
glGetActiveUniformBlockName
glGetActiveUniformBlockiv
glGetActiveUniformsiv
glGetAttachedShaders
glGetAttribLocation
glGetBooleanv
glGetBufferParameteri64v
glGetBufferParameteriv
glGetBufferPointerv
glGetError
glGetFenceivNV
glGetFloatv
glGetFragDataLocation
glGetFramebufferAttachmentParameteriv
glGetFramebufferAttachmentParameterivOES
glGetGraphicsResetStatusEXT
glGetInteger64i_v
glGetInteger64v
glGetIntegeri_v
glGetIntegerv
glGetInternalformativ
glGetProgramBinary
glGetProgramInfoLog
glGetProgramiv
glGetQueryObjectuiv
glGetQueryObjectuivEXT
glGetQueryiv
glGetQueryivEXT
glGetRenderbufferParameteriv
glGetRenderbufferParameterivOES
glGetSamplerParameterfv
glGetSamplerParameteriv
glGetShaderInfoLog
glGetShaderPrecisionFormat
glGetShaderSource
glGetShaderiv
glGetString
glGetStringi
glGetSynciv
glGetTexParameterfv
glGetTexParameteriv
glGetTransformFeedbackVarying
glGetUniformBlockIndex
glGetUniformIndices
glGetUniformLocation
glGetUniformfv
glGetUniformiv
glGetUniformuiv
glGetVertexAttribIiv
glGetVertexAttribIuiv
glGetVertexAttribPointerv
glGetVertexAttribfv
glGetVertexAttribiv
glGetnUniformfvEXT
glGetnUniformivEXT
glHint
glInvalidateFramebuffer
glInvalidateSubFramebuffer
glIsBuffer
glIsEnabled
glIsFenceNV
glIsFramebuffer
glIsFramebufferOES
glIsProgram
glIsQuery
glIsQueryEXT
glIsRenderbuffer
glIsRenderbufferOES
glIsSampler
glIsShader
glIsSync
glIsTexture
glIsTransformFeedback
glIsVertexArray
glIsVertexArrayOES
glLineWidth
glLinkProgram
glMapBufferRange
glPauseTransformFeedback
glPixelStorei
glPolygonOffset
glProgramBinary
glProgramParameteri
glReadBuffer
glReadPixels
glReadnPixelsEXT
glReleaseShaderCompiler
glRenderbufferStorage
glRenderbufferStorageMultisample
glRenderbufferStorageMultisampleANGLE
glRenderbufferStorageOES
glResumeTransformFeedback
glSampleCoverage
glSamplerParameterf
glSamplerParameterfv
glSamplerParameteri
glSamplerParameteriv
glScissor
glSetFenceNV
glShaderBinary
glShaderSource
glStencilFunc
glStencilFuncSeparate
glStencilMask
glStencilMaskSeparate
glStencilOp
glStencilOpSeparate
glTestFenceNV
glTexImage2D
glTexImage3D
glTexImage3DOES
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexStorage2D
glTexStorage3D
glTexSubImage2D
glTexSubImage3D
glTransformFeedbackVaryings
glUniform1f
glUniform1fv
glUniform1i
glUniform1iv
glUniform1ui
glUniform1uiv
glUniform2f
glUniform2fv
glUniform2i
glUniform2iv
glUniform2ui
glUniform2uiv
glUniform3f
glUniform3fv
glUniform3i
glUniform3iv
glUniform3ui
glUniform3uiv
glUniform4f
glUniform4fv
glUniform4i
glUniform4iv
glUniform4ui
glUniform4uiv
glUniformBlockBinding
glUniformMatrix2fv
glUniformMatrix2x3fv
glUniformMatrix2x4fv
glUniformMatrix3fv
glUniformMatrix3x2fv
glUniformMatrix3x4fv
glUniformMatrix4fv
glUniformMatrix4x2fv
glUniformMatrix4x3fv
glUnmapBuffer
glUseProgram
glValidateProgram
glVertexAttrib1f
glVertexAttrib1fv
glVertexAttrib2f
glVertexAttrib2fv
glVertexAttrib3f
glVertexAttrib3fv
glVertexAttrib4f
glVertexAttrib4fv
glVertexAttribDivisor
glVertexAttribI4i
glVertexAttribI4iv
glVertexAttribI4ui
glVertexAttribI4uiv
glVertexAttribIPointer
glVertexAttribPointer
glViewport
glWaitSync
libGLESv2_swiftshader

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/u2ec.dll
.dll windows:6 windows x64 arch:x64

0243b39f4405bfa90e18a1a00d4c7093

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:f5:6a:3a:41:0b:d0:27:f7:f4:cd:cb
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

26/10/2021, 16:14

Not After

26/10/2024, 16:14

Subject

SERIALNUMBER=08345597,CN=Electronic Team\, Inc.,O=Electronic Team\, Inc.,STREET=901 N Pitt St Ste 101,L=Alexandria,ST=Virginia,C=US,1.2.840.113549.1.9.1=#0c15737570706f727440656c656374726f6e69632e7573,1.3.6.1.4.1.311.60.2.1.2=#130856697267696e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:6c:11:b7:82:93:b8:5e:2d:1a:d0:f8:bf:13:2b:fb:7d:9b:df:b6:1c:c7:b0:7e:cd:d7:2e:79:22:c1:f7:4d
Signer

Actual PE Digest

6f:6c:11:b7:82:93:b8:5e:2d:1a:d0:f8:bf:13:2b:fb:7d:9b:df:b6:1c:c7:b0:7e:cd:d7:2e:79:22:c1:f7:4d

Digest Algorithm

sha256

PE Digest Matches

true

36:16:6f:8a:32:5e:cd:d1:00:5c:9c:c4:4b:95:aa:0b:d7:7c:8f:64
Signer

Actual PE Digest

36:16:6f:8a:32:5e:cd:d1:00:5c:9c:c4:4b:95:aa:0b:d7:7c:8f:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\Documents\sources\usb4rdp\trunk\Bin\x64\Release\u2ec64.pdb

Imports

crypt32

CryptProtectData
CertFreeCertificateContext
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptUnprotectData
CertFindCertificateInStore

kernel32

GlobalHandle
FormatMessageA
CreateEventA
OpenEventW
WaitForSingleObjectEx
SetEvent
CreateThread
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStdHandle
GetEnvironmentVariableW
GetFileType
WriteFile
GetModuleHandleExW
RtlVirtualUnwind
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
FreeLibrary
LoadLibraryA
LoadLibraryW
FindClose
FindFirstFileW
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
SetEndOfFile
WriteConsoleW
GetTimeZoneInformation
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
DeviceIoControl
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
ReadFile
SetConsoleCtrlHandler
ExitProcess
VirtualQuery
VirtualProtect
LoadLibraryExW
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
CreateWaitableTimerA
GetModuleHandleA
GetLogicalProcessorInformation
GetSystemInfo
ResumeThread
Sleep
SetWaitableTimer
OpenEventA
WaitForMultipleObjectsEx
ReleaseSemaphore
QueryPerformanceFrequency
GetStartupInfoW
IsProcessorFeaturePresent
GlobalFree
CloseHandle
CreateFileW
SetLastError
GetCurrentThreadId
GlobalUnlock
GlobalLock
GetModuleFileNameW
MulDiv
lstrcmpW
GetACP
FormatMessageW
GetCommandLineW
LocalAlloc
LocalFree
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DecodePointer
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
GlobalAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
RtlUnwind

user32

SetWindowLongPtrW
SendMessageW
PostMessageW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MoveWindow
SetWindowPos
GetClientRect
ClientToScreen
ScreenToClient
BeginPaint
GetWindowLongPtrW
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
RedrawWindow
SetCapture
SetFocus
GetWindow
IsChild
GetParent
GetWindowLongW
DestroyWindow
CreateWindowExW
GetDlgItem
SetWindowContextHelpId
IsWindow
GetClassNameW
GetClassInfoExW
LoadCursorW
RegisterClassExW
CharNextW
GetSysColor
DestroyAcceleratorTable
UnregisterClassW
GetFocus
SetWindowLongW
EndPaint
FillRect
GetUserObjectInformationW
GetProcessWindowStation
SendDlgItemMessageW
DialogBoxParamW
MessageBoxW
GetActiveWindow
CreateDialogIndirectParamW
wsprintfW
EndDialog
MapDialogRect
CallWindowProcW
RegisterWindowMessageW
DefWindowProcW
ReleaseCapture
CreateAcceleratorTableW
GetDesktopWindow

gdi32

GetObjectW
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
SelectObject
GetDeviceCaps

advapi32

RegCreateKeyExW
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegFlushKey
RegSetValueExW
RegDeleteValueW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegEnumValueW
RegDeleteKeyW
OpenSCManagerW

shell32

CommandLineToArgvW

ole32

CoTaskMemAlloc
OleUninitialize
OleInitialize
OleLockRunning
StringFromGUID2
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocString
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantChangeType
SysFreeString
VariantInit
VariantClear

setupapi

CM_Locate_DevNodeW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDW
CM_Get_Parent
CM_Get_Child
CM_Get_Sibling
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

ws2_32

closesocket
send
recv
getaddrinfo
socket
freeaddrinfo
ioctlsocket
connect
WSAGetLastError
select
getnameinfo
inet_ntop
WSAStartup
getsockname
getsockopt
ntohs
gethostbyname
WSACleanup
setsockopt
listen
bind
accept
WSASetLastError

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory
WTSQuerySessionInformationW

bcrypt

BCryptGenRandom

Exports

Exports

CheckUsbService
ClientAddRemoteDev
ClientAddRemoteDevEx
ClientAddRemoteDevManually
ClientAddRemoteDevManuallyEx
ClientEnumAvailRemoteDev
ClientEnumAvailRemoteDevOnServer
ClientEnumAvailRemoteDevOnServerTimeout
ClientEnumRemoteDevOverRdp
ClientGetConnectedDevValueByName
ClientGetCurrentSessionId
ClientGetRdpAutoconnect
ClientGetRdpIsolation
ClientGetRemoteDevName
ClientGetRemoteDevNetSettings
ClientGetRemoteDevValueByName
ClientGetSessionIds
ClientGetStateRemoteDev
ClientGetStateSharedDevice
ClientIsIsolationAvailable
ClientRemoteDevDisconnect
ClientRemoteDevRequiresAuth
ClientRemoteDisconnectIsEnabled
ClientRemoveEnumOfRemoteDev
ClientRemoveRemoteDev
ClientSetRdpAutoconnect
ClientSetRdpIsolation
ClientStartRemoteDev
ClientStartRemoteDevIsolateSession
ClientStartRemoteDevIsolateUser
ClientStopRemoteDev
ClientTrafficRemoteDevIsCompressed
ClientTrafficRemoteDevIsEncrypted
LicenseActivate
LicenseGetInfoValueByName
LicenseIsOk
LicenseRegister
ServerAllowDevRemoteDisconnect
ServerCreateEnumUsbDev
ServerDisconnectRemoteDev
ServerGetLastError
ServerGetSharedUsbDevIsCompressed
ServerGetSharedUsbDevIsCrypt
ServerGetSharedUsbDevNetSettings
ServerGetSharedUsbDevRequiresAuth
ServerGetUsbDevClassCode
ServerGetUsbDevFromHub
ServerGetUsbDevName
ServerGetUsbDevNameEx
ServerGetUsbDevStatus
ServerGetUsbDevValueByName
ServerRemoveEnumUsbDev
ServerSetDevUserDescription
ServerSetNoReset
ServerSetSharedUsbDevAuth
ServerSetSharedUsbDevCompress
ServerSetSharedUsbDevCrypt
ServerSetUsbDevValueByName
ServerShareUsbDev
ServerShareUsbDev2
ServerShareUsbWithPredefinedValues
ServerUnshareAllUsbDev
ServerUnshareUsbDev
ServerUsbDevIsConnected
ServerUsbDevIsHub
ServerUsbDevIsShared
SetCallBackOnChangeDevList
SetCallBackOnLicenseStatusChange
UpdateUsbTree

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/usboverip.js
.js
resources/app.asar.unpacked/release/native/uv.dll
.dll windows:6 windows x64 arch:x64

b6e7e86122eedd8ae0babd30875974d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\gitlab-runner\builds\tbeSvs9k\0\blade-group\dev\clients\apps\bender\work\libuv-1.40.0-r5-windows-vs2019-x64-bender-1.1.0-Release\build\RelWithDebInfo\uv.pdb

Imports

psapi

GetProcessMemoryInfo

user32

TranslateMessage
DispatchMessageA
MapVirtualKeyW
GetSystemMetrics
GetMessageA

advapi32

SetSecurityInfo
RegCloseKey
GetUserNameW
OpenProcessToken
GetSecurityInfo
SystemFunction036
RegGetValueW
RegQueryValueExW
AllocateAndInitializeSid
FreeSid
SetEntriesInAclA
RegOpenKeyExW

iphlpapi

ConvertInterfaceIndexToLuid
GetAdaptersAddresses
ConvertInterfaceLuidToNameW

userenv

GetUserProfileDirectoryW

ws2_32

WSADuplicateSocketW
socket
shutdown
listen
getsockname
getpeername
bind
WSAIoctl
select
WSASend
WSASocketW
GetNameInfoW
FreeAddrInfoW
GetAddrInfoW
WSAGetLastError
setsockopt
getsockopt
closesocket
htons
WSARecv
htonl
connect
WSARecvFrom
WSASendTo
gethostname
WSAStartup
WSASetLastError
ioctlsocket

kernel32

GetCommandLineA
GetCommandLineW
GetProcessHeap
GetStringTypeW
OutputDebugStringW
HeapSize
QueueUserWorkItem
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetConsoleOutputCP
SetStdHandle
SetFileAttributesW
GetFileAttributesExW
RtlPcToFileHeader
RaiseException
EncodePointer
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
GetModuleHandleW
GetLastError
PostQueuedCompletionStatus
CloseHandle
SetErrorMode
CreateIoCompletionPort
GetQueuedCompletionStatus
FreeLibrary
GetProcAddress
LoadLibraryExW
LocalFree
FormatMessageA
MultiByteToWideChar
DebugBreak
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFinalPathNameByHandleW
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetFilePointerEx
SetFileTime
WriteFile
SetLastError
DeviceIoControl
GetSystemInfo
GetSystemTimeAsFileTime
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingA
ReOpenFile
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WideCharToMultiByte
GetCurrentDirectoryW
GetLongPathNameW
GetShortPathNameW
ReadDirectoryChangesW
GetFileType
GetConsoleMode
DuplicateHandle
ConnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
CreateNamedPipeW
WaitNamedPipeW
CancelIoEx
CancelSynchronousIo
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
CreateEventA
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
GetCurrentThread
RtlUnwind
CreateNamedPipeA
GetNamedPipeHandleStateA
RegisterWaitForSingleObject
UnregisterWait
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SetEvent
ReleaseSemaphore
CreateSemaphoreW
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetNativeSystemInfo
CreateSemaphoreA
SetHandleInformation
GetEnvironmentVariableW
TerminateProcess
GetExitCodeProcess
CreateProcessW
OpenProcess
UnregisterWaitEx
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
LCMapStringW
GetStdHandle
CreateFileA
GetStartupInfoW
Sleep
SetConsoleCtrlHandler
CancelIo
SetFileCompletionNotificationModes
ResetEvent
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
ReadConsoleW
WriteConsoleW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
WriteConsoleInputW
VerSetConditionMask
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetTempPathW
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessTimes
SetPriorityClass
GetPriorityClass
GlobalMemoryStatusEx
GetVersionExW
GetModuleFileNameW
GetProcessIoCounters
VerifyVersionInfoA
FileTimeToSystemTime
GetConsoleTitleW
SetConsoleTitleW
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleHandleA
LoadLibraryA
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
InitializeSListHead

Exports

Exports

uv_accept
uv_async_init
uv_async_send
uv_backend_fd
uv_backend_timeout
uv_barrier_destroy
uv_barrier_init
uv_barrier_wait
uv_buf_init
uv_cancel
uv_chdir
uv_check_init
uv_check_start
uv_check_stop
uv_close
uv_cond_broadcast
uv_cond_destroy
uv_cond_init
uv_cond_signal
uv_cond_timedwait
uv_cond_wait
uv_cpu_info
uv_cwd
uv_default_loop
uv_disable_stdio_inheritance
uv_dlclose
uv_dlerror
uv_dlopen
uv_dlsym
uv_err_name
uv_err_name_r
uv_exepath
uv_fileno
uv_free_cpu_info
uv_free_interface_addresses
uv_freeaddrinfo
uv_fs_access
uv_fs_chmod
uv_fs_chown
uv_fs_close
uv_fs_closedir
uv_fs_copyfile
uv_fs_event_getpath
uv_fs_event_init
uv_fs_event_start
uv_fs_event_stop
uv_fs_fchmod
uv_fs_fchown
uv_fs_fdatasync
uv_fs_fstat
uv_fs_fsync
uv_fs_ftruncate
uv_fs_futime
uv_fs_get_path
uv_fs_get_ptr
uv_fs_get_result
uv_fs_get_statbuf
uv_fs_get_system_error
uv_fs_get_type
uv_fs_lchown
uv_fs_link
uv_fs_lstat
uv_fs_lutime
uv_fs_mkdir
uv_fs_mkdtemp
uv_fs_mkstemp
uv_fs_open
uv_fs_opendir
uv_fs_poll_getpath
uv_fs_poll_init
uv_fs_poll_start
uv_fs_poll_stop
uv_fs_read
uv_fs_readdir
uv_fs_readlink
uv_fs_realpath
uv_fs_rename
uv_fs_req_cleanup
uv_fs_rmdir
uv_fs_scandir
uv_fs_scandir_next
uv_fs_sendfile
uv_fs_stat
uv_fs_statfs
uv_fs_symlink
uv_fs_unlink
uv_fs_utime
uv_fs_write
uv_get_constrained_memory
uv_get_free_memory
uv_get_osfhandle
uv_get_process_title
uv_get_total_memory
uv_getaddrinfo
uv_getnameinfo
uv_getrusage
uv_gettimeofday
uv_guess_handle
uv_handle_get_data
uv_handle_get_loop
uv_handle_get_type
uv_handle_set_data
uv_handle_size
uv_handle_type_name
uv_has_ref
uv_hrtime
uv_idle_init
uv_idle_start
uv_idle_stop
uv_if_indextoiid
uv_if_indextoname
uv_inet_ntop
uv_inet_pton
uv_interface_addresses
uv_ip4_addr
uv_ip4_name
uv_ip6_addr
uv_ip6_name
uv_is_active
uv_is_closing
uv_is_readable
uv_is_writable
uv_key_create
uv_key_delete
uv_key_get
uv_key_set
uv_kill
uv_library_shutdown
uv_listen
uv_loadavg
uv_loop_alive
uv_loop_close
uv_loop_configure
uv_loop_delete
uv_loop_fork
uv_loop_get_data
uv_loop_init
uv_loop_new
uv_loop_set_data
uv_loop_size
uv_metrics_idle_time
uv_mutex_destroy
uv_mutex_init
uv_mutex_init_recursive
uv_mutex_lock
uv_mutex_trylock
uv_mutex_unlock
uv_now
uv_once
uv_open_osfhandle
uv_os_environ
uv_os_free_environ
uv_os_free_passwd
uv_os_get_passwd
uv_os_getenv
uv_os_gethostname
uv_os_getpid
uv_os_getppid
uv_os_getpriority
uv_os_homedir
uv_os_setenv
uv_os_setpriority
uv_os_tmpdir
uv_os_uname
uv_os_unsetenv
uv_pipe_bind
uv_pipe_chmod
uv_pipe_connect
uv_pipe_getpeername
uv_pipe_getsockname
uv_pipe_init
uv_pipe_open
uv_pipe_pending_count
uv_pipe_pending_instances
uv_pipe_pending_type
uv_poll_init
uv_poll_init_socket
uv_poll_start
uv_poll_stop
uv_prepare_init
uv_prepare_start
uv_prepare_stop
uv_print_active_handles
uv_print_all_handles
uv_process_get_pid
uv_process_kill
uv_queue_work
uv_random
uv_read_start
uv_read_stop
uv_recv_buffer_size
uv_ref
uv_replace_allocator
uv_req_get_data
uv_req_get_type
uv_req_set_data
uv_req_size
uv_req_type_name
uv_resident_set_memory
uv_run
uv_rwlock_destroy
uv_rwlock_init
uv_rwlock_rdlock
uv_rwlock_rdunlock
uv_rwlock_tryrdlock
uv_rwlock_trywrlock
uv_rwlock_wrlock
uv_rwlock_wrunlock
uv_sem_destroy
uv_sem_init
uv_sem_post
uv_sem_trywait
uv_sem_wait
uv_send_buffer_size
uv_set_process_title
uv_setup_args
uv_shutdown
uv_signal_init
uv_signal_start
uv_signal_start_oneshot
uv_signal_stop
uv_sleep
uv_spawn
uv_stop
uv_stream_get_write_queue_size
uv_stream_set_blocking
uv_strerror
uv_strerror_r
uv_tcp_bind
uv_tcp_close_reset
uv_tcp_connect
uv_tcp_getpeername
uv_tcp_getsockname
uv_tcp_init
uv_tcp_init_ex
uv_tcp_keepalive
uv_tcp_nodelay
uv_tcp_open
uv_tcp_simultaneous_accepts
uv_thread_create
uv_thread_create_ex
uv_thread_equal
uv_thread_join
uv_thread_self
uv_timer_again
uv_timer_get_due_in
uv_timer_get_repeat
uv_timer_init
uv_timer_set_repeat
uv_timer_start
uv_timer_stop
uv_translate_sys_error
uv_try_write
uv_tty_get_vterm_state
uv_tty_get_winsize
uv_tty_init
uv_tty_reset_mode
uv_tty_set_mode
uv_tty_set_vterm_state
uv_udp_bind
uv_udp_connect
uv_udp_get_send_queue_count
uv_udp_get_send_queue_size
uv_udp_getpeername
uv_udp_getsockname
uv_udp_init
uv_udp_init_ex
uv_udp_open
uv_udp_recv_start
uv_udp_recv_stop
uv_udp_send
uv_udp_set_broadcast
uv_udp_set_membership
uv_udp_set_multicast_interface
uv_udp_set_multicast_loop
uv_udp_set_multicast_ttl
uv_udp_set_source_membership
uv_udp_set_ttl
uv_udp_try_send
uv_udp_using_recvmmsg
uv_unref
uv_update_time
uv_uptime
uv_version
uv_version_string
uv_walk
uv_write
uv_write2

Sections

.text
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/v8_context_snapshot.bin
resources/app.asar.unpacked/release/native/version.txt
resources/elevate.exe
.exe windows:6 windows x86 arch:x86

c3afe98a750f2d4f1ed5d2ac323cb5e0

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:17:48:6a:f4:45:e8:c7:65:ef:e7:ef:5c:1e:bf:78:70:ff:d4:74:c4:3d:45:8e:6c:29:ff:f5:ac:ff:9d:94
Signer

Actual PE Digest

a3:17:48:6a:f4:45:e8:c7:65:ef:e7:ef:5c:1e:bf:78:70:ff:d4:74:c4:3d:45:8e:6c:29:ff:f5:ac:ff:9d:94

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dev\elevate\bin\x86\Release\Elevate.pdb

Imports

kernel32

GetLastError
CloseHandle
GetVersionExW
WaitForSingleObject
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
CreateFileW
DecodePointer
GetEnvironmentVariableW

shell32

ShellExecuteExW

advapi32

SystemFunction036

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
snapshot_blob.bin
swiftshader/libEGL.dll
.dll windows:5 windows x64 arch:x64

67db432914b7baa0738050364c019173

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libEGL.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetClientRect
GetDC
IsWindow
ReleaseDC

gdi32

GetDeviceCaps

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSyncKHR
eglCopyBuffers
eglCreateContext
eglCreateImageKHR
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurfaceEXT
eglCreateSyncKHR
eglCreateWindowSurface
eglDestroyContext
eglDestroyImageKHR
eglDestroySurface
eglDestroySyncKHR
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttribKHR
eglInitialize
eglMakeCurrent
eglQueryAPI
eglQueryContext
eglQueryString
eglQuerySurface
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
libEGL_swiftshader

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
swiftshader/libGLESv2.dll
.dll windows:5 windows x64 arch:x64

8b4ec8564c21d6087c06b61d3d5ffbbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

libGLESv2.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventA
CreateEventW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

ChangeDisplaySettingsA
ClientToScreen
GetClientRect
GetDC
GetSystemMetrics
GetWindowLongA
GetWindowRect
ReleaseDC
SetRect
SetWindowLongA
SetWindowPos

gdi32

CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceGammaRamp
SelectObject
SetDeviceGammaRamp
StretchBlt

ws2_32

WSACleanup
WSAStartup
accept
bind
closesocket
getaddrinfo
listen
recv
select
send
socket

Exports

Exports

glActiveTexture
glAttachShader
glBeginQuery
glBeginQueryEXT
glBeginTransformFeedback
glBindAttribLocation
glBindBuffer
glBindBufferBase
glBindBufferRange
glBindFramebuffer
glBindFramebufferOES
glBindRenderbuffer
glBindRenderbufferOES
glBindSampler
glBindTexture
glBindTransformFeedback
glBindVertexArray
glBindVertexArrayOES
glBlendColor
glBlendEquation
glBlendEquationSeparate
glBlendFunc
glBlendFuncSeparate
glBlitFramebuffer
glBlitFramebufferANGLE
glBufferData
glBufferSubData
glCheckFramebufferStatus
glCheckFramebufferStatusOES
glClear
glClearBufferfi
glClearBufferfv
glClearBufferiv
glClearBufferuiv
glClearColor
glClearDepthf
glClearStencil
glClientWaitSync
glColorMask
glCompileShader
glCompressedTexImage2D
glCompressedTexImage3D
glCompressedTexSubImage2D
glCompressedTexSubImage3D
glCopyBufferSubData
glCopyTexImage2D
glCopyTexSubImage2D
glCopyTexSubImage3D
glCreateProgram
glCreateShader
glCullFace
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteFramebuffersOES
glDeleteProgram
glDeleteQueries
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteRenderbuffersOES
glDeleteSamplers
glDeleteShader
glDeleteSync
glDeleteTextures
glDeleteTransformFeedbacks
glDeleteVertexArrays
glDeleteVertexArraysOES
glDepthFunc
glDepthMask
glDepthRangef
glDetachShader
glDisable
glDisableVertexAttribArray
glDrawArrays
glDrawArraysInstanced
glDrawBuffers
glDrawBuffersEXT
glDrawElements
glDrawElementsInstanced
glDrawRangeElements
glEGLImageTargetRenderbufferStorageOES
glEGLImageTargetTexture2DOES
glEnable
glEnableVertexAttribArray
glEndQuery
glEndQueryEXT
glEndTransformFeedback
glFenceSync
glFinish
glFinishFenceNV
glFlush
glFlushMappedBufferRange
glFramebufferRenderbuffer
glFramebufferRenderbufferOES
glFramebufferTexture2D
glFramebufferTexture2DOES
glFramebufferTextureLayer
glFrontFace
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenFramebuffersOES
glGenQueries
glGenQueriesEXT
glGenRenderbuffers
glGenRenderbuffersOES
glGenSamplers
glGenTextures
glGenTransformFeedbacks
glGenVertexArrays
glGenVertexArraysOES
glGenerateMipmap
glGenerateMipmapOES
glGetActiveAttrib
glGetActiveUniform
glGetActiveUniformBlockName
glGetActiveUniformBlockiv
glGetActiveUniformsiv
glGetAttachedShaders
glGetAttribLocation
glGetBooleanv
glGetBufferParameteri64v
glGetBufferParameteriv
glGetBufferPointerv
glGetError
glGetFenceivNV
glGetFloatv
glGetFragDataLocation
glGetFramebufferAttachmentParameteriv
glGetFramebufferAttachmentParameterivOES
glGetGraphicsResetStatusEXT
glGetInteger64i_v
glGetInteger64v
glGetIntegeri_v
glGetIntegerv
glGetInternalformativ
glGetProgramBinary
glGetProgramInfoLog
glGetProgramiv
glGetQueryObjectuiv
glGetQueryObjectuivEXT
glGetQueryiv
glGetQueryivEXT
glGetRenderbufferParameteriv
glGetRenderbufferParameterivOES
glGetSamplerParameterfv
glGetSamplerParameteriv
glGetShaderInfoLog
glGetShaderPrecisionFormat
glGetShaderSource
glGetShaderiv
glGetString
glGetStringi
glGetSynciv
glGetTexParameterfv
glGetTexParameteriv
glGetTransformFeedbackVarying
glGetUniformBlockIndex
glGetUniformIndices
glGetUniformLocation
glGetUniformfv
glGetUniformiv
glGetUniformuiv
glGetVertexAttribIiv
glGetVertexAttribIuiv
glGetVertexAttribPointerv
glGetVertexAttribfv
glGetVertexAttribiv
glGetnUniformfvEXT
glGetnUniformivEXT
glHint
glInvalidateFramebuffer
glInvalidateSubFramebuffer
glIsBuffer
glIsEnabled
glIsFenceNV
glIsFramebuffer
glIsFramebufferOES
glIsProgram
glIsQuery
glIsQueryEXT
glIsRenderbuffer
glIsRenderbufferOES
glIsSampler
glIsShader
glIsSync
glIsTexture
glIsTransformFeedback
glIsVertexArray
glIsVertexArrayOES
glLineWidth
glLinkProgram
glMapBufferRange
glPauseTransformFeedback
glPixelStorei
glPolygonOffset
glProgramBinary
glProgramParameteri
glReadBuffer
glReadPixels
glReadnPixelsEXT
glReleaseShaderCompiler
glRenderbufferStorage
glRenderbufferStorageMultisample
glRenderbufferStorageMultisampleANGLE
glRenderbufferStorageOES
glResumeTransformFeedback
glSampleCoverage
glSamplerParameterf
glSamplerParameterfv
glSamplerParameteri
glSamplerParameteriv
glScissor
glSetFenceNV
glShaderBinary
glShaderSource
glStencilFunc
glStencilFuncSeparate
glStencilMask
glStencilMaskSeparate
glStencilOp
glStencilOpSeparate
glTestFenceNV
glTexImage2D
glTexImage3D
glTexImage3DOES
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexStorage2D
glTexStorage3D
glTexSubImage2D
glTexSubImage3D
glTransformFeedbackVaryings
glUniform1f
glUniform1fv
glUniform1i
glUniform1iv
glUniform1ui
glUniform1uiv
glUniform2f
glUniform2fv
glUniform2i
glUniform2iv
glUniform2ui
glUniform2uiv
glUniform3f
glUniform3fv
glUniform3i
glUniform3iv
glUniform3ui
glUniform3uiv
glUniform4f
glUniform4fv
glUniform4i
glUniform4iv
glUniform4ui
glUniform4uiv
glUniformBlockBinding
glUniformMatrix2fv
glUniformMatrix2x3fv
glUniformMatrix2x4fv
glUniformMatrix3fv
glUniformMatrix3x2fv
glUniformMatrix3x4fv
glUniformMatrix4fv
glUniformMatrix4x2fv
glUniformMatrix4x3fv
glUnmapBuffer
glUseProgram
glValidateProgram
glVertexAttrib1f
glVertexAttrib1fv
glVertexAttrib2f
glVertexAttrib2fv
glVertexAttrib3f
glVertexAttrib3fv
glVertexAttrib4f
glVertexAttrib4fv
glVertexAttribDivisor
glVertexAttribI4i
glVertexAttribI4iv
glVertexAttribI4ui
glVertexAttribI4uiv
glVertexAttribIPointer
glVertexAttribPointer
glViewport
glWaitSync
libGLESv2_swiftshader

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
v8_context_snapshot.bin
vk_swiftshader.dll
.dll windows:5 windows x64 arch:x64

9a4b90b161eb746862cd987fb9ff69c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vk_swiftshader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiberEx
CreateEventW
CreateFiberEx
CreateFileW
CreateRemoteThreadEx
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeleteProcThreadAttributeList
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformationEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeProcThreadAttributeList
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTextAttribute
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
SwitchToFiber
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetClientRect
GetDC
IsWindow
ReleaseDC

gdi32

CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetObjectA
SelectObject
StretchBlt

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBlitImage
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBufferToImage
vkCmdCopyImage
vkCmdCopyImageToBuffer
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdSetBlendConstants
vkCmdSetDepthBias
vkCmdSetDepthBounds
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetLineWidth
vkCmdSetScissor
vkCmdSetStencilCompareMask
vkCmdSetStencilReference
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWriteTimestamp
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores
vk_icdGetInstanceProcAddr
vk_icdNegotiateLoaderICDInterfaceVersion

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vk_swiftshader_icd.json
vulkan-1.dll
.dll windows:5 windows x64 arch:x64

00a11204bd7ac096090b7bdfc42df6d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

vulkan-1.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

cfgmgr32

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBlitImage
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBufferToImage
vkCmdCopyImage
vkCmdCopyImageToBuffer
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdSetBlendConstants
vkCmdSetDepthBias
vkCmdSetDepthBounds
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetLineWidth
vkCmdSetScissor
vkCmdSetStencilCompareMask
vkCmdSetStencilReference
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWriteTimestamp
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateDisplayModeKHR
vkCreateDisplayPlaneSurfaceKHR
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateHeadlessSurfaceEXT
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSharedSwapchainsKHR
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetDisplayModeProperties2KHR
vkGetDisplayModePropertiesKHR
vkGetDisplayPlaneCapabilities2KHR
vkGetDisplayPlaneCapabilitiesKHR
vkGetDisplayPlaneSupportedDisplaysKHR
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceDisplayPlaneProperties2KHR
vkGetPhysicalDeviceDisplayPlanePropertiesKHR
vkGetPhysicalDeviceDisplayProperties2KHR
vkGetPhysicalDeviceDisplayPropertiesKHR
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilities2KHR
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormats2KHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores

Sections

.text
Size: 559KB - Virtual size: 558KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d31c5eb927119d00232e4d4b0e32fcdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
MultiByteToWideChar
lstrlenA
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyW
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessW
GetStartupInfoW
CreatePipe
GetProcAddress
lstrcpynW
DeleteFileW
lstrcmpiW
GetCurrentProcess
lstrcatW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
ExitProcess
GetCommandLineW
GlobalLock
GetVersion
lstrlenW

user32

SendMessageW
FindWindowExW
CharNextW
wsprintfW
CharPrevW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsProcess.dll
.dll windows:5 windows x86 arch:x86

439074d1c01f7b16781bdf060930814a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
OpenProcess
MultiByteToWideChar
lstrlenA
lstrlenW
LoadLibraryA
lstrcmpiW
lstrcpynW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
GlobalAlloc

user32

GetWindowThreadProcessId
EnumWindows
wsprintfW
PostMessageW

Exports

Exports

_CloseProcess
_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 927B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis7z.dll
.dll windows:6 windows x86 arch:x86

2656ea25cde98f31a490513c2db04ae8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
FormatMessageW
GetFileInformationByHandle
SetLastError
DeviceIoControl
GetModuleHandleW
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetStdHandle
WaitForMultipleObjects
GetTickCount
GetConsoleMode
AreFileApisANSI
SetFileApisToOEM
SetFileApisToANSI
GlobalAlloc
GlobalFree
lstrcpynW
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
GetCurrentDirectoryW
CreateDirectoryW
CreateSemaphoreW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
GetCurrentProcessId
GetCurrentThreadId
MoveFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleHandleA
SetEndOfFile
GetCurrentProcess
GetSystemInfo
GlobalMemoryStatus
GetProcessAffinityMask
IsProcessorFeaturePresent
WriteConsoleW
HeapSize
GetStringTypeW
DecodePointer
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
WaitForSingleObject
CreateEventW
ReleaseSemaphore
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
VirtualFree
VirtualAlloc
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileW
DeleteFileW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
GetConsoleCP
FlushFileBuffers
GetFileType
HeapReAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess

user32

SendMessageW
FindWindowExW
SetWindowTextW
GetDlgItem
wsprintfW
CharUpperW

advapi32

SetFileSecurityW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

oleaut32

VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
VariantCopy

Exports

Exports

Extract
ExtractWithCallback
ExtractWithDetails

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Uninstall Shadow.exe
.exe windows:4 windows x86 arch:x86

b34f154ec913d2d2c435cbd644e91687

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

04/03/2020, 00:00

Not After

04/03/2023, 23:59

Subject

CN=Blade,O=Blade,POSTALCODE=75002,STREET=151 Rue Saint Denis,L=Paris,ST=Ile De France,C=FR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:a7:b8:a1:4b:67:96:b4:32:94:9f:93:a4:f3:1f:c4:6d:5e:a5:99:5e:15:5a:37:53:d7:0f:a8:ca:94:8d:0e
Signer

Actual PE Digest

06:a7:b8:a1:4b:67:96:b4:32:94:9f:93:a4:f3:1f:c4:6d:5e:a5:99:5e:15:5a:37:53:d7:0f:a8:ca:94:8d:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
ExitProcess
GetShortPathNameW
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 992KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StdUtils.dll
.dll windows:5 windows x86 arch:x86

7b79709c0d5576549eb261e3410f95f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

iswspace
??3@YAXPAX@Z
_msize
_wsetlocale
_snprintf
iswcntrl
_beginthreadex
time
srand
rand
clock
_getpid
_wsplitpath
iswgraph
__wgetmainargs
wcsncpy
_wcsnicmp
wcschr
calloc
free
_wcsicmp
_snwprintf
swscanf
abort
??2@YAPAXI@Z
memset
memcpy

shlwapi

ord176

crypt32

CryptProtectData
CryptUnprotectData

kernel32

GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
HeapValidate
InterlockedDecrement
InterlockedIncrement
GetSystemTime
OutputDebugStringA
GetExitCodeProcess
InitializeCriticalSection
SystemTimeToFileTime
TerminateThread
WaitForSingleObject
LocalFree
GetFullPathNameW
GetVersion
GetFileAttributesW
LoadLibraryW
FreeLibrary
CloseHandle
lstrcpynW
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
Sleep
VerSetConditionMask
GetCurrentProcess
GetModuleHandleW
FatalAppExitW
GetVersionExW
TerminateProcess
GetModuleFileNameW
RaiseException
VerifyVersionInfoW
GetLastError
GetProcAddress
SetFilePointerEx
WriteFile
ReadFile
CreateFileW
GetFileSizeEx
GetCommandLineW

user32

MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
wsprintfW
DestroyWindow
SetTimer
UnregisterClassW
KillTimer
LoadStringW
MessageBoxW
GetWindowThreadProcessId
AllowSetForegroundWindow
CreateWindowExW
RegisterClassW
MessageBoxA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteExW
SHFileOperationW
ShellExecuteW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Exports

Exports

AppendToFile
ExecShellAsUser
ExecShellWaitEx
FormatStr
FormatStr2
FormatStr3
GetAllParameters
GetDays
GetDirectoryPart
GetDrivePart
GetExtensionPart
GetFileNamePart
GetHours
GetLibVersion
GetMinutes
GetOsEdition
GetOsReleaseId
GetOsReleaseName
GetParameter
GetParentPath
GetRealOsBuildNo
GetRealOsName
GetRealOsVersion
HashFile
HashText
InvokeShellVerb
NormalizePath
ParameterCnt
ParameterStr
ProtectStr
Rand
RandBytes
RandList
RandMax
RandMinMax
RevStr
SHFileCopy
SHFileMove
ScanStr
ScanStr2
ScanStr3
SetVerboseMode
SplitPath
StrFromUtf8
StrToUtf8
TestParameter
Time
TimerCreate
TimerDestroy
TrimStr
TrimStrLeft
TrimStrRight
UnprotectStr
ValidDomainName
ValidFileName
ValidPathSpec
VerifyRealOsBuildNo
VerifyRealOsVersion
WaitForProcEx

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WinShell.dll
.dll windows:4 windows x86 arch:x86

a75c904bad153f5af2c37cfdf66eba5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GlobalFree

ole32

CoCreateInstance

Exports

Exports

SetLnkAUMI
UninstAppUserModelId
UninstShortcut

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d31c5eb927119d00232e4d4b0e32fcdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
MultiByteToWideChar
lstrlenA
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyW
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessW
GetStartupInfoW
CreatePipe
GetProcAddress
lstrcpynW
DeleteFileW
lstrcmpiW
GetCurrentProcess
lstrcatW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
ExitProcess
GetCommandLineW
GlobalLock
GetVersion
lstrlenW

user32

SendMessageW
FindWindowExW
CharNextW
wsprintfW
CharPrevW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsProcess.dll
.dll windows:5 windows x86 arch:x86

439074d1c01f7b16781bdf060930814a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
OpenProcess
MultiByteToWideChar
lstrlenA
lstrlenW
LoadLibraryA
lstrcmpiW
lstrcpynW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
GlobalAlloc

user32

GetWindowThreadProcessId
EnumWindows
wsprintfW
PostMessageW

Exports

Exports

_CloseProcess
_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 927B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/release/native/overlay/shadow_loader.webm
manifest.json

Sharing

General

Malware Config

Signatures

Files

b34f154ec913d2d2c435cbd644e91687

Code Sign

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

f9:72:0e:c3:99:0d:ac:45:fd:96:b2:cc:49:bb:3e:bb:cf:82:58:e2:f5:a1:70:1f:f9:ac:55:95:af:ba:b0:b2Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 451KB

.ndata Size: - Virtual size: 1.1MB

.rsrc Size: 143KB - Virtual size: 142KB

90179d905cdca282880541c826651c15

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: - Virtual size: 128B

.rsrc Size: 512B - Virtual size: 408B

.reloc Size: 1024B - Virtual size: 868B

7b79709c0d5576549eb261e3410f95f8

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

crypt32

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 1KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

f9:72:0e:c3:99:0d:ac:45:fd:96:b2:cc:49:bb:3e:bb:cf:82:58:e2:f5:a1:70:1f:f9:ac:55:95:af:ba:b0:b2
Signer

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 451KB

.ndata
Size: - Virtual size: 1.1MB

.rsrc
Size: 143KB - Virtual size: 142KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 128B

.rsrc
Size: 512B - Virtual size: 408B

.reloc
Size: 1024B - Virtual size: 868B

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 1KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 648B

.text
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 76B

1b:8d:e8:a0:d7:d2:21:8d:4d:28:bc:4d:3d:87:01:69
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b2:1c:a1:9a:b2:1d:78:a3:83:2c:00:f0:51:b7:30:cc:06:cb:25:34:fa:e9:7c:14:ad:1b:60:54:ae:fe:9c:e8
Signer

.text
Size: 113.7MB - Virtual size: 113.7MB

.rdata
Size: 20.7MB - Virtual size: 20.7MB

.data
Size: 513KB - Virtual size: 4.2MB

.pdata
Size: 3.6MB - Virtual size: 3.6MB