1a46b846acf42c0aacd0d89c7c4829bf_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

1a46b846acf42c0aacd0d89c7c4829bf_JaffaCakes118
Size

17.1MB
MD5

1a46b846acf42c0aacd0d89c7c4829bf
SHA1

6dc1befd587a630da5a4b7d2e2b8818fd9ac33ad
SHA256

85323b76756044d1b203f66391a9a8983e5ae208af7f8d68288aed9b7f94468b
SHA512

32b3d57075b0c7b742e1fe1a7c9b7ce246ee5b6b01d7e578af6ff04bab785440bea4941c1d5b6773736c3bf5e57f9666768d73e39ed0fefab801883b6dd3876e
SSDEEP

393216:qI/qDPRNuBc/r6L4dntjdrrsHOIRglC+bk2tuP27J7I:b/2Nv/eL4dnPkHOIgQ+g24P2hI

Score

3^/10

Malware Config

Signatures

Unsigned PE 31 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/BgWorker.dll
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/SkinBtn.dll
unpack001/$PLUGINSDIR/SkinProgress.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/WndProc.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/AVModule50.dll
unpack001/AdvertisingDll.dll
unpack001/ArtistTenRoom.dll
unpack001/DDVInstall/Http.dll
unpack001/HardwareINFO.dll
unpack001/IMClient.dll
unpack001/KillProcess.exe
unpack001/LobbyModule/LobbyClient.dll
unpack001/MixerXP.dll
unpack001/MultiChatGuest.dll
unpack001/MultiChatKTV.dll
unpack001/NetworkOpt.dll
unpack001/OnlineUpdate.exe
unpack001/ParkingLot.dll
unpack001/SealModule.dll
unpack002/$PLUGINSDIR/FindProcDLL.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack001/VideoHelper.dll
unpack001/Vote.dll
unpack001/WebVideo.dll
unpack001/public.dll
unpack001/publictool.dll
unpack001/updateitem.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/Uninst.exe	nsis_installer_1
static1/unpack001/Uninst.exe	nsis_installer_2

Files

1a46b846acf42c0aacd0d89c7c4829bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

36:3a:00:61:6e:af:7a:89:1e:0a:f7:92:04:4f:db:53:7f:c4:20:bd
Signer

Actual PE Digest

36:3a:00:61:6e:af:7a:89:1e:0a:f7:92:04:4f:db:53:7f:c4:20:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/BgWorker.dll
.dll windows:4 windows x86 arch:x86

db2755f409b81c4dbfc04f648cfb80b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GetModuleHandleA
CloseHandle
SetThreadPriority
CreateThread

user32

IsWindowUnicode
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects

Exports

Exports

CallAndWait

Sections

.text
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/SkinBtn.dll
.dll windows:4 windows x86 arch:x86

baf2d405231cd43dae48df474a521d01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GlobalAlloc
lstrcpynA
GetModuleHandleA
GlobalFree

user32

InvalidateRect
GetParent
SetWindowLongA
CallWindowProcA
GetPropA
SendMessageA
DrawTextA
DrawStateA
LoadImageA
RemovePropA
GetWindowLongA
SetPropA

gdi32

GetObjectA
CreateCompatibleDC
DeleteObject
SelectObject
DeleteDC
SetBkMode

msimg32

TransparentBlt

comctl32

_TrackMouseEvent

Exports

Exports

Init
Set
onClick

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 947B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/SkinProgress.dll
.dll windows:4 windows x86 arch:x86

df38729be926f91d3390389029adf53b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GlobalAlloc
GlobalFree
GetModuleHandleA

user32

GetWindowRect
BeginPaint
GetWindowDC
CallWindowProcA
ReleaseDC
EndPaint
GetWindowLongA
GetPropA
SetPropA
SetWindowLongA
RemovePropA
LoadImageA
SendMessageA

gdi32

DeleteDC
BitBlt
CreateCompatibleBitmap
StretchBlt
SelectObject
CreateCompatibleDC
GetObjectA
DeleteObject

Exports

Exports

Set

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 797B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WndProc.dll
.dll windows:4 windows x86 arch:x86

b3f659d7637a91b4fec12ff9b930080d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
GlobalAlloc

user32

CallWindowProcA
SetWindowLongA
GetPropA
SetPropA
wsprintfA

Exports

Exports

onCallback

Sections

.text
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 377B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/checkbox1.bmp
$PLUGINSDIR/checkbox2.bmp
$PLUGINSDIR/custom.bmp
$PLUGINSDIR/finish.bmp
$PLUGINSDIR/install.bmp
$PLUGINSDIR/install_step1.bmp
$PLUGINSDIR/install_step2.bmp
$PLUGINSDIR/install_step3.bmp
$PLUGINSDIR/license.txt
$PLUGINSDIR/loading1.bmp
$PLUGINSDIR/loading2.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/return.bmp
1vs1AVModule.xml
.xml
1vs1BAVModule.xml
.xml
1vs1SAVModule.xml
.xml
9158.exe
.exe windows:4 windows x86 arch:x86

2d38cfef69815d6985b96c65885ec6a6

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

c2:46:34:b8:b5:d7:5d:59:5e:c2:9d:40:c5:fa:28:4b:4e:05:8e:5f
Signer

Actual PE Digest

c2:46:34:b8:b5:d7:5d:59:5e:c2:9d:40:c5:fa:28:4b:4e:05:8e:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetGetConnectedState
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile

mvuilib

?OnLButtonUp@CUIDlgTemplate@@IAEXIVCPoint@@@Z
?SetToolTipText@CUIButtonTemplate@@QAEXPBD@Z
?SetColorFrame@CSkinComboBox@@QAEXK@Z
?SetTransParent@CUIButtonTemplate@@QAEXH@Z
?SetShowText@CBaseEditEx@@QAEXVCString@@@Z
?SetShowText@CSkinComboBox@@QAEXVCString@@@Z
?SetTextColor@CSkinComboBox@@QAEXKK@Z
??0CBaseEditEx@@QAE@XZ
??1CBaseEditEx@@UAE@XZ
?SetSkinConfContext@CUIDlgTemplate@@QAEXPAVCSkinConfContext@@@Z
?GetPictureExEx@CSkinConfContext@@QAEPAXPBDH@Z
?LoadMenuA@CMenuEx@@QAEHI@Z
?SetBackColor@CMenuEx@@QAEXK@Z
?ModifyMenuEx@CMenuEx@@QAEHIIIPBD@Z
?Create@CUIDlgTemplate@@QAEHIPAVCWnd@@@Z
?NeedShowHandCursor@CUINoRegularButtonTemplate@@QAEXH@Z
?SetSkinPath@CAppSysOperation@@SAXVCString@@@Z
?LoadSkin@CSkinConfContext@@QAEHVCString@@@Z
??0CSkinConfContext@@QAE@XZ
??1CSkinConfContext@@UAE@XZ
?SetBtnTextColor@CUIButtonTemplate@@QAEXK@Z
?SetFrameColor@CBaseEdit@@QAEXK@Z
?SetDrawFrame@CBaseEdit@@QAEXH@Z
??0CBaseEdit@@QAE@XZ
??1CBaseEdit@@UAE@XZ
?LoadSkinToBitmap@CAppSysOperation@@SA_NAAVCBitmap@@PAXAA_N@Z
?LoadSkin@CCustomDlg@@QAEHXZ
?messageMap@CCustomDlg@@1UAFX_MSGMAP@@B
??0CCustomDlg@@QAE@IPAVCWnd@@@Z
??1CCustomDlg@@UAE@XZ
?OnInitDialog@CUIDlgTemplate@@MAEHXZ
?SetIsRgn@CUIDlgTemplate@@QAEX_N@Z
?GetBitmapWidth@CAppSysOperation@@QAEHXZ
?GetBitmapHeight@CAppSysOperation@@QAEHXZ
?OnPaint@CUIDlgTemplate@@IAEXXZ
?messageMap@CUIDlgTemplate@@1UAFX_MSGMAP@@B
?SetTextColor@CBaseEdit@@QAEXKK@Z
?DoDataExchange@CUIDlgTemplate@@MAEXPAVCDataExchange@@@Z
?IsControlHaveSkin@CAppSysOperation@@UAEHXZ
?NeedShowHandCursor@CUIStaticTemplate@@QAEXH@Z
?SetToolTipText@CUINoRegularButtonTemplate@@QAEXPBD@Z
??0CUIListCtrlButtonEx@@QAE@XZ
??1CUIListCtrlButtonEx@@UAE@XZ
?LoadSkin@CUIListCtrlBaseTemplate@@UAEHPAX@Z
?DrawItem@CUIListCtrlBaseTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?PreSubclassWindow@CUIListCtrlBaseTemplate@@MAEXXZ
?GetMessageMap@CUIListCtrlEx@@MBEPBUAFX_MSGMAP@@XZ
??1CUIListCtrlEx@@UAE@XZ
??0CUIListCtrlEx@@QAE@XZ
?OnLButtonDown@CUIDlgTemplate@@IAEXIVCPoint@@@Z
?CleanBitmapMem@CAppSysOperation@@UAEHXZ
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@PAVCBitmap@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@@Z
?InitializeOperation@CAppSysOperation@@UAEXPAVCWnd@@@Z
?GetCurrentSkin@CUIButtonTemplate@@MAEHPAX@Z
?CleanSkin@CAppSysOperation@@UAEHPAX@Z
?LoadSkin@CUIButtonTemplate@@UAEHPAX@Z
?DrawContent@CAppSysOperation@@UAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?AdjustPosition@CAppSysOperation@@UAEHHHHH@Z
?AdjustPosition@CAppSysOperation@@UAEHUtagRECT@@@Z
?DrawSkin@CAppSysOperation@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?PaintBackGround@CAppSysOperation@@UAEHPAVCDC@@@Z
?CleanUp@CAppSysOperation@@UAEXXZ
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@PAVCBitmap@@@Z
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@@Z
?FitBitmapSize@CUIButtonTemplate@@UAEXXZ
?GetCtrlTextType@CAppSysAttribute@@UAEAAVCString@@XZ
?SetCtrlTextType@CAppSysAttribute@@UAEHVCString@@@Z
?GetCtrlTextHeight@CAppSysAttribute@@UAEHXZ
?SetCtrlTextHeight@CAppSysAttribute@@UAEXH@Z
?EnableCtrlTextBold@CAppSysAttribute@@UAEHXZ
?SetCtrlTextBold@CAppSysAttribute@@UAEXH@Z
?GetCtrlBackColor@CAppSysAttribute@@UAEKXZ
?SetCtrlBackColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlTextColor@CAppSysAttribute@@UAEKXZ
?SetCtrlTextColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlTextFont@CAppSysAttribute@@UAEAAUtagLOGFONTA@@XZ
?SetCtrlTextFont@CAppSysAttribute@@UAEXUtagLOGFONTA@@@Z
?DrawCheckBoxButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawRadioButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawPushButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?HandleMouseLeftBtnUp@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnDown@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseMove@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?DrawItem@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?PreTranslateMessage@CUIButtonTemplate@@MAEHPAUtagMSG@@@Z
?PreSubclassWindow@CUIButtonTemplate@@MAEXXZ
??0CUIButtonTemplate@@QAE@XZ
??1CUIButtonTemplate@@UAE@XZ
?messageMap@CUIButtonTemplate@@1UAFX_MSGMAP@@B
?SetHaveText@CUIButtonTemplate@@QAEX_NI@Z
?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
??1CColorStatic@@UAE@XZ
??1CUIStaticTemplate@@UAE@XZ
??0CColorStatic@@QAE@XZ
??0CUIStaticTemplate@@QAE@XZ
?SetBold@CUIStaticTemplate@@QAEX_N@Z
?SetBold@CColorStatic@@QAEX_N@Z
?SetColor@CColorStatic@@QAEXKKK@Z
??1CUINoRegularButtonTemplate@@UAE@XZ
??0CUINoRegularButtonTemplate@@QAE@XZ
?SetBtnTextColor@CUINoRegularButtonTemplate@@QAEXK@Z
?SetHaveText@CUINoRegularButtonTemplate@@QAEX_NI@Z
?GetCurrentSkin@CAppSysOperation@@UAEHPAX@Z
?LoadSkin@CAppSysOperation@@UAEHPAX@Z
?FitBitmapSize@CAppSysOperation@@UAEXXZ
??1CMenuEx@@UAE@XZ
?AppendMenuEx@CMenuEx@@QAEHIIPBD@Z
??0CMenuEx@@QAE@XZ
?NeedShowHandCursor@CUIButtonTemplate@@QAEXH@Z
?SetNeedHandCursor@CColorStatic@@QAEX_N@Z
?SetFontUnline@CColorStatic@@QAEX_N@Z
??1CMemDC@@UAE@XZ
??0CMemDC@@QAE@PAVCDC@@AAVCRect@@@Z
??1CSkinComboBox@@UAE@XZ
??0CSkinComboBox@@QAE@XZ
?SetFontColor@CColorStatic@@QAEXK@Z
?LoadSkin@CUIDlgTemplate@@UAEHPAX@Z
?PaintBackGround@CUIDlgTemplate@@MAEHPAVCDC@@@Z
??1CUIDlgTemplate@@UAE@XZ
??0CUIDlgTemplate@@QAE@IPAVCWnd@@@Z

msimg32

GradientFill

mfc42

ord6374
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3574
ord2379
ord800
ord537
ord540
ord860
ord858
ord535
ord5442
ord3318
ord665
ord5186
ord354
ord2818
ord4202
ord6134
ord4407
ord5290
ord5277
ord3708
ord567
ord781
ord4275
ord2864
ord6199
ord3874
ord3283
ord3258
ord1705
ord430
ord1269
ord641
ord6200
ord6136
ord2935
ord2516
ord361
ord3061
ord3767
ord2860
ord939
ord4129
ord1158
ord5710
ord2614
ord1200
ord1601
ord3571
ord3721
ord3626
ord3663
ord795
ord2414
ord1168
ord2116
ord3573
ord3693
ord755
ord2754
ord5787
ord5788
ord1641
ord470
ord816
ord562
ord3089
ord4133
ord4297
ord6119
ord4299
ord6880
ord924
ord640
ord2405
ord5785
ord1640
ord323
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord4234
ord2566
ord3619
ord3092
ord2642
ord6215
ord6241
ord4710
ord2370
ord6334
ord2289
ord1768
ord2086
ord6270
ord941
ord1644
ord2753
ord283
ord472
ord6172
ord5789
ord4284
ord4278
ord6663
ord2764
ord1175
ord1146
ord6157
ord3402
ord3716
ord790
ord3797
ord6197
ord3546
ord3742
ord818
ord1233
ord2859
ord2915
ord2302
ord2078
ord2135
ord6453
ord2763
ord2567
ord801
ord541
ord6883
ord5683
ord5163
ord5875
ord2452
ord2393
ord690
ord1988
ord5207
ord6059
ord389
ord6449
ord2727
ord6467
ord2730
ord2729
ord3237
ord6779
ord940
ord1979
ord6385
ord2688
ord926
ord6605
ord5651
ord3127
ord3616
ord350
ord922
ord1799
ord614
ord2623
ord290
ord4622
ord4226
ord2486
ord4003
ord804
ord686
ord609
ord6785
ord5981
ord4277
ord5600
ord1949
ord4034
ord551
ord3337
ord2820
ord3811
ord6662
ord3181
ord3178
ord668
ord4058
ord2781
ord2770
ord356
ord1980
ord5572
ord2380
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord815
ord561
ord4046
ord2145
ord2144
ord6225
ord5231
ord5247
ord2132
ord4601
ord6438
ord1205
ord1247
ord824
ord1232
ord2621
ord1134
ord5435
ord1683
ord1673
ord2628
ord5980
ord2641
ord4122
ord6214
ord6196
ord4298
ord5948
ord3088
ord3875
ord3872
ord3871
ord6198
ord4286
ord4283
ord3137
ord3796
ord5719
ord6092
ord3524
ord4032
ord6095
ord4035
ord2549
ord2433
ord3353
ord3579
ord426
ord726
ord826
ord2784
ord2725
ord5583
ord5608
ord384
ord4160
ord2863
ord2546
ord291
ord798
ord533
ord998
ord5607
ord2919
ord1997
ord6392
ord5194
ord6877
ord6876
ord3499
ord2515
ord355
ord923
ord536
ord5861
ord3706
ord2574
ord3572
ord2575
ord556
ord809
ord1793
ord6358
ord1088
ord2122
ord5873
ord613
ord289
ord6648
ord3610
ord656
ord2096
ord3287
ord4000
ord6008
ord3297
ord3303
ord4476
ord2803
ord326
ord2639
ord6021
ord6007
ord6907
ord2862
ord6901
ord3286
ord2582
ord4402
ord3370
ord3640
ord693
ord4243
ord3752
ord3910
ord2299
ord6195
ord3870
ord6930
ord3317
ord4224
ord2762
ord5356
ord5808
ord6058
ord1075
ord5204
ord3229
ord353
ord1187
ord4220
ord2584
ord3654
ord2438
ord2408
ord2097
ord807
ord4163
ord6625
ord554
ord5440
ord6383
ord5450
ord1576
ord2645
ord2450
ord3719
ord793
ord3733
ord810
ord4271
ord3914
ord3296
ord3290
ord4125
ord4694
ord5148
ord3398
ord6928
ord539
ord6111
ord4123
ord3996
ord1929
ord6380
ord4287
ord1105
ord2123
ord4480
ord3005
ord538
ord861
ord1795
ord5781
ord3711
ord783
ord2112
ord6442
ord3138
ord6128
ord2714
ord2455
ord1176
ord3643
ord394
ord696
ord909
ord5628
ord4185
ord398
ord700
ord955
ord4189
ord3021
ord913
ord5594
ord5632
ord3692
ord5791
ord3301
ord3293
ord6696
ord6675
ord6888
ord6905
ord2089
ord2100
ord3763
ord2513
ord293
ord4538
ord2587
ord4406
ord3394
ord3729
ord4267
ord3920
ord4317
ord2385
ord5241
ord4396
ord1776
ord4078
ord6055
ord2077
ord2029
ord5621
ord1638
ord4167
ord823
ord1083
ord6307
ord803
ord825
ord278
ord501
ord543
ord521
ord605
ord773
ord3584
ord3570
ord966
ord1971
ord5478
ord5796
ord4863
ord4335
ord4447
ord4411
ord2031
ord5481
ord5810
ord6143

msvcrt

??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
fprintf
towupper
isdigit
_beginthreadex
_atoi64
_mbsrchr
memmove
isspace
isalnum
calloc
difftime
_stricmp
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
printf
_mbsicmp
localtime
strftime
puts
rand
_local_unwind2
_except_handler3
_snprintf
_purecall
_mkdir
realloc
malloc
free
_ftol
time
strncpy
sprintf
_mbscmp
atoi
__CxxFrameHandler
fseek
ftell
strchr
strtoul
wcscpy
_strdup
strrchr
srand
fread
_vsnprintf
fwrite
fopen
wcsncpy
_itoa
_setmbcp
fclose

kernel32

GetTickCount
GetStartupInfoA
GetWindowsDirectoryA
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
lstrcatA
lstrcmpiA
lstrcpynA
GetVersion
IsValidCodePage
GetCPInfo
GetCurrentThreadId
GetSystemDirectoryA
GlobalFree
IsBadWritePtr
VirtualQuery
GetLocalTime
SetUnhandledExceptionFilter
UnmapViewOfFile
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
lstrcmpA
LoadLibraryExA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentProcess
SetProcessWorkingSetSize
GetLastError
SetErrorMode
GetCommandLineA
GetFileSize
Sleep
DeviceIoControl
GetVersionExA
DeleteFileA
RemoveDirectoryA
CreateDirectoryA
FindFirstFileA
FindClose
GetFileAttributesA
GetModuleFileNameA
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalFree
LocalAlloc
lstrlenA
FormatMessageA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrcpyA
GetModuleHandleA
CloseHandle
CreateThread
OutputDebugStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
TerminateThread
GetExitCodeThread
SetFilePointer
ReadFile
CreateFileA
WriteFile
WinExec
GetProcAddress
LoadLibraryA
FreeLibrary
InitializeCriticalSection

user32

GetWindowTextA
DrawStateA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LookupIconIdFromDirectory
CreateIconFromResourceEx
CreateIconFromResource
GetWindowDC
SetWindowRgn
GetFocus
SetFocus
CopyRect
SetForegroundWindow
KillTimer
GetMenuItemCount
GetMenuItemID
GetSubMenu
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
GetClassInfoA
IsWindowVisible
WindowFromPoint
UpdateWindow
GetDesktopWindow
GetMenuState
SetWindowLongA
SystemParametersInfoA
FindWindowA
SendMessageTimeoutA
MessageBoxA
SetWindowPos
InflateRect
LoadIconA
GetSystemMetrics
SetTimer
GetDC
SetRect
FillRect
GetForegroundWindow
GetSysColor
RemoveMenu
InsertMenuA
GetMenuStringA
ReleaseDC
InvalidateRect
PtInRect
LoadBitmapA
CreatePopupMenu
GetCursorPos
OffsetRect
IsWindow
ShowWindow
GetMessagePos
EndDeferWindowPos
EnableWindow
SendMessageA
LoadMenuA
wvsprintfA
CreateMenu
DeferWindowPos
BeginDeferWindowPos
PostMessageA
GetWindowLongA
ModifyMenuA
GetWindowRgn
IsRectEmpty
SetParent
GetScrollInfo
UnregisterClassA
MoveWindow
CreateWindowExA
GetClassNameA
RegisterClassExA
RegisterClassA
DrawFocusRect
DefWindowProcA
DestroyWindow
EnableMenuItem
IsZoomed
CallWindowProcA
GetWindow
IsChild
GetParent
LoadImageA
wsprintfA
RedrawWindow
LoadCursorA
GetClientRect
ScreenToClient
ClientToScreen
SetCursor
GetWindowRect
SetCapture
ReleaseCapture

gdi32

CreateCompatibleDC
StretchBlt
GetObjectA
CreatePen
CreateSolidBrush
Rectangle
RealizePalette
BitBlt
Ellipse
FillPath
SetDIBits
CreateRectRgnIndirect
GetDIBColorTable
CreatePalette
OffsetRgn
CreateEllipticRgn
PtInRegion
SelectClipRgn
GetTextColor
CreateICA
GetDIBits
ExtCreateRegion
SelectPalette
DeleteObject
GetMapMode
GetTextMetricsA
CreateRoundRectRgn
GetTextExtentPoint32A
GetPixel
CreateRectRgn
BeginPath
EndPath
PathToRegion
CombineRgn
GetCurrentObject
CreateDIBitmap
CreateBitmap
SetBkColor
GetDeviceCaps
SetTextColor
SetBkMode
CreateHalftonePalette
GetPaletteEntries
CreateDIBSection
SelectObject
SetDIBColorTable
SetStretchBltMode
DeleteDC
GdiFlush
TextOutA
CreateCompatibleBitmap
CreateFontA
Polygon
GetStockObject
CreateFontIndirectA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey

shell32

ExtractIconA
Shell_NotifyIconA
SHGetSpecialFolderPathA
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Draw
ImageList_AddMasked
ImageList_GetImageCount
ImageList_ReplaceIcon

ole32

CoUninitialize
CreateILockBytesOnHGlobal
OleCreateStaticFromData
OleSetContainedObject
StgCreateDocfileOnILockBytes
OleRun
CoCreateInstance
CoInitializeEx
CoInitialize
CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
SafeArrayGetLBound
SysAllocStringLen
VariantInit
VariantCopy
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
SysStringLen
SafeArrayGetUBound
GetErrorInfo
SetErrorInfo
CreateErrorInfo

wsock32

WSACleanup
WSAGetLastError
inet_addr
gethostbyname
closesocket
socket
sendto
recvfrom
select
gethostname

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_7out_of_range@std@@6B@
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

gdiplus

GdipDrawImageRectI
GdipCloneImage
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipDisposeImage
GdipDeletePen
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipCreatePen1
GdipLoadImageFromFileICM

publictool

?BufferCpy@CBuffer@@QAEXPAEKK@Z
?GetDIB@CxImageEx@@QBEPAXXZ
?GetBits@CxImageEx@@QAEPAEK@Z
?base64_decode@CBase64@@SAHPADI0@Z
??0CHash@@QAE@K@Z
?Load@CxImageEx@@QAE_NPBDK@Z
?SetPos@CBuffer@@QAEXKK@Z
??0CxImageEx@@QAE@K@Z
??1CxImageEx@@UAE@XZ
?GetBuffer@CBuffer@@QAEPAEXZ
?GetHashItemNum@CHash@@QAEHXZ
?QueryItem@CHash@@QAEPAXJ@Z
?QueryItem@CHash@@QAEPAXPBD@Z
?DeleteItem@CHash@@QAEPAXPBD@Z
?DeleteItem@CHash@@QAEPAXJ@Z
?GetRealBuffer@CBuffer@@QAEPBEXZ
?InitParam@CHash@@QAEHXZ
??0CBuffer@@QAE@K@Z
??1CHash@@UAE@XZ
??0CBuffer@@QAE@ABV0@@Z
??0CBuffer@@QAE@PAEK@Z
??1CBuffer@@UAE@XZ
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?GetRealLen@CBuffer@@QAEKXZ
?InsertItem@CHash@@QAEHJPAX@Z
?InsertItem@CHash@@QAEHPBDPAX@Z
?FindFirst@CHash@@QAEXH@Z
?GetBufferLen@CBuffer@@QAEKXZ
?FindNext@CHash@@QAEPAXXZ
?base64_encode@CBase64@@SAHPADI0@Z

idletrac

?Hook_GetAppWnd@@YAXPAUHWND__@@@Z
?Hook_IdleTrackerInit@@YAHXZ
?Hook_UserOnLeave@@YAXXZ
?Hook_ReSetLastTickCount@@YAXXZ
?Hook_IdleTrackerGetLastTickCount@@YAKXZ
?Hook_DelAppWnd@@YAXPAUHWND__@@@Z

netapi32

Netbios

shlwapi

PathFileExistsA
PathIsDirectoryA

winmm

mixerOpen
sndPlaySoundA
PlaySoundA
mixerSetControlDetails
waveOutOpen
mixerGetID
waveOutClose
waveInClose
waveInUnprepareHeader
waveInPrepareHeader
mixerGetControlDetailsA
waveInStart
waveInOpen
mixerGetNumDevs
waveInAddBuffer
mixerClose
mixerGetDevCapsA
mixerGetLineControlsA
mixerGetLineInfoA

pdh

PdhGetRawCounterValue
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhRemoveCounter
PdhAddCounterA
PdhCloseQuery
PdhOpenQueryA
PdhComputeCounterStatistics

Exports

Exports

??0CRoomInfo@@QAE@ABV0@@Z
??0CRoomInfo@@QAE@XZ
??1CRoomInfo@@UAE@XZ
??4CEasySecret@@QAEAAV0@ABV0@@Z
??4CRoomInfo@@UAEAAV0@ABV0@@Z
??_7CRoomInfo@@6B@
?ClearAll@CRoomInfo@@QAEXXZ
?DeleteAllUser@CRoomInfo@@QAEXXZ
?GetCurrentNumber@CRoomInfo@@QAEHXZ
?GetCurrentRoomStats@CRoomInfo@@QAEHXZ
?GetEnterRoomType@CRoomInfo@@QAEHXZ
?GetID@CRoomInfo@@QAE?AVCString@@XZ
?GetIntroduce@CRoomInfo@@QAE?AVCString@@XZ
?GetLeader@CRoomInfo@@QAEPAVCUserInfo@@XZ
?GetLevel@CRoomInfo@@QAEHXZ
?GetLimitNumber@CRoomInfo@@QAEHXZ
?GetMasterID@CRoomInfo@@QAE?AVCString@@XZ
?GetName@CRoomInfo@@QAE?AVCString@@XZ
?GetOther@CRoomInfo@@QAE?AVCString@@XZ
?GetPassword@CRoomInfo@@QAE?AVCString@@XZ
?GetPort@CRoomInfo@@QAEHXZ
?GetRoomLevel@CRoomInfo@@QAEHXZ
?GetSort@CRoomInfo@@QAEHXZ
?GetStatus@CRoomInfo@@QAEHXZ
?GetType@CRoomInfo@@QAEHXZ
?GetUser@CRoomInfo@@QAEXHPAVCHash@@@Z
?GetVip@CRoomInfo@@QAE_NXZ
?SetCurrentNumber@CRoomInfo@@QAEXH@Z
?SetCurrentRoomStats@CRoomInfo@@QAEXH@Z
?SetEnterRoomType@CRoomInfo@@QAEXH@Z
?SetID@CRoomInfo@@QAEXPBD@Z
?SetIntroduce@CRoomInfo@@QAEXPBD@Z
?SetLevel@CRoomInfo@@QAEXH@Z
?SetLimitNumber@CRoomInfo@@QAEXH@Z
?SetMasterID@CRoomInfo@@QAEXABVCString@@@Z
?SetName@CRoomInfo@@QAEXPBD@Z
?SetOther@CRoomInfo@@QAEXVCString@@@Z
?SetPassword@CRoomInfo@@QAEXPBD@Z
?SetPort@CRoomInfo@@QAEXH@Z
?SetRoomLevel@CRoomInfo@@QAEXH@Z
?SetSort@CRoomInfo@@QAEXH@Z
?SetStatus@CRoomInfo@@QAEXH@Z
?SetType@CRoomInfo@@QAEXH@Z
?SetVipRoom@CRoomInfo@@QAEX_N@Z
?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 956KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
9158AVCore2.dll
.dll windows:4 windows x86 arch:x86

be9da2191c5d4dda64a50a71ca738e0d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a0:77:b7:6a:af:d3:5a:9f:c8:07:39:c6:c7:60:5b:43:35:c8:bc:6d
Signer

Actual PE Digest

a0:77:b7:6a:af:d3:5a:9f:c8:07:39:c6:c7:60:5b:43:35:c8:bc:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CreateThread
FindAtomA
GetAtomNameA
WaitForSingleObject

msvcrt

_strdup
_unlink
__dllonexit
_assert
_errno
_iob
_snprintf
_vsnprintf
abort
ceil
cos
cosh
exit
exp
fclose
fflush
floor
fopen
fprintf
fread
free
frexp
fseek
ftell
fwrite
ldexp
log
malloc
memcpy
memmove
memset
perror
qsort
realloc
rename
sin
sinh
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strpbrk
strstr
strtod
tan
tanh
toupper
vfprintf

Exports

Exports

DCT_common_init
DCtab_chrom
DCtab_lum
MPV_common_end
MPV_common_init
MPV_common_init_mmx
MPV_decode_defaults
MPV_decode_mb
MPV_encode_end
MPV_encode_init
MPV_encode_picture
MPV_frame_end
MPV_frame_start
X264_frame
X264_init
add_pixels_clamped_mmx
align_get_bits
align_put_bits
av_add_i
av_add_q
av_build_filternew
av_cmp_i
av_d2q
av_dbl2int
av_div_i
av_div_q
av_fast_realloc
av_first_parser
av_flt2int
av_free
av_free_static
av_freep
av_get_pict_type_char
av_i2int
av_int2dbl
av_int2flt
av_int2i
av_log
av_log2_i
av_log_get_level
av_log_set_callback
av_log_set_level
av_malloc
av_mallocz
av_mallocz_static
av_mod_i
av_mul_i
av_mul_q
av_parser_change
av_parser_close
av_parser_init
av_parser_parse
av_realloc
av_realloc_static
av_reduce
av_register_codec_parser
av_rescale
av_rescale_q
av_rescale_rnd
av_shr_i
av_strdup
av_sub_i
av_sub_q
av_vlog
av_xiphlacing
avcodec_align_dimensions
avcodec_alloc_context
avcodec_alloc_frame
avcodec_build
avcodec_check_dimensions
avcodec_close
avcodec_decode_audio
avcodec_decode_subtitle
avcodec_decode_video
avcodec_default_execute
avcodec_default_free_buffers
avcodec_default_get_buffer
avcodec_default_get_format
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_subtitle
avcodec_encode_video
avcodec_find_best_pix_fmt
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_get_chroma_sub_sample
avcodec_get_context_defaults
avcodec_get_frame_defaults
avcodec_get_pix_fmt
avcodec_get_pix_fmt_loss
avcodec_get_pix_fmt_name
avcodec_init
avcodec_open
avcodec_register_all
avcodec_set_dimensions
avcodec_string
avcodec_thread_init
avcodec_version
avpicture_alloc
avpicture_deinterlace
avpicture_fill
avpicture_free
avpicture_get_size
avpicture_layout
besselnew
cbpc_b_tab
cbpy_tab
check_marker
compute_mb_neighboors
cropTbl
draw_edges
dsputil_init
dsputil_init_mmx
dsputil_init_pix_mmx
dsputil_static_init
fdct_ifast
fdct_ifast248
fdct_r_row_sse2
ff_aic_dc_scale_table
ff_alternate_horizontal_scan
ff_alternate_vertical_scan
ff_avg_qpel16_mc11_old_c
ff_avg_qpel16_mc12_old_c
ff_avg_qpel16_mc13_old_c
ff_avg_qpel16_mc31_old_c
ff_avg_qpel16_mc32_old_c
ff_avg_qpel16_mc33_old_c
ff_avg_qpel8_mc11_old_c
ff_avg_qpel8_mc12_old_c
ff_avg_qpel8_mc13_old_c
ff_avg_qpel8_mc31_old_c
ff_avg_qpel8_mc32_old_c
ff_avg_qpel8_mc33_old_c
ff_block_permute
ff_build_rac_states
ff_clean_h263_qscales
ff_clean_intra_table_entries
ff_clean_mpeg4_qscales
ff_combine_frame
ff_copy_bits
ff_draw_horiz_band
ff_emulated_edge_mc
ff_epzs_motion_search
ff_er_add_slice
ff_er_frame_end
ff_er_frame_start
ff_estimate_b_frame_motion
ff_estimate_p_frame_motion
ff_eval
ff_faandct
ff_faandct248
ff_fdct248_islow
ff_fdct_mmx
ff_fdct_mmx2
ff_fdct_sse2
ff_fft_calc_c
ff_fft_calc_sse
ff_fft_end
ff_fft_init
ff_fft_permute
ff_find_unused_picture
ff_fix_long_mvs
ff_fix_long_p_mvs
ff_flv_encode_picture_header
ff_gcd
ff_get_best_fcode
ff_get_mb_score
ff_golomb_vlc_len
ff_h261_encode_init
ff_h261_encode_mb
ff_h261_encode_picture_header
ff_h261_loop_filter
ff_h261_reorder_mb_index
ff_h263_chroma_qscale_table
ff_h263_decode_end
ff_h263_decode_frame
ff_h263_decode_init
ff_h263_decode_mb
ff_h263_decode_mba
ff_h263_encode_mba
ff_h263_encode_motion
ff_h263_get_gob_height
ff_h263_loop_filter
ff_h263_loop_filter_strength
ff_h263_resync
ff_h263_round_chroma
ff_h263_update_motion_val
ff_h264_idct8_add_c
ff_h264_idct_add_c
ff_h264_idct_add_mmx2
ff_h264_lowres_idct_add_c
ff_h264_lowres_idct_put_c
ff_h264_lps_range
ff_h264_lps_state
ff_h264_mps_state
ff_h264_norm_shift
ff_imdct_calc
ff_init_block_index
ff_init_cabac_decoder
ff_init_cabac_encoder
ff_init_cabac_states
ff_init_me
ff_init_range_decoder
ff_init_range_encoder
ff_init_scantable
ff_interleaved_golomb_vlc_len
ff_interleaved_se_golomb_vlc_code
ff_interleaved_ue_golomb_vlc_code
ff_jpeg_fdct_islow
ff_log2_tab
ff_mba_length
ff_mba_max
ff_mdct_calc
ff_mdct_end
ff_mdct_init
ff_mmx_idct
ff_mmxext_idct
ff_mpeg1_dc_scale_table
ff_mpeg1_default_intra_matrix
ff_mpeg1_default_non_intra_matrix
ff_mpeg4_c_dc_scale_table
ff_mpeg4_clean_buffers
ff_mpeg4_decode_mb
ff_mpeg4_decode_partitions
ff_mpeg4_decode_picture_header
ff_mpeg4_default_intra_matrix
ff_mpeg4_default_non_intra_matrix
ff_mpeg4_encode_video_packet_header
ff_mpeg4_find_frame_end
ff_mpeg4_get_video_packet_prefix_length
ff_mpeg4_init_partitions
ff_mpeg4_merge_partitions
ff_mpeg4_resync_prefix
ff_mpeg4_set_direct_mv
ff_mpeg4_stuffing
ff_mpeg4_y_dc_scale_table
ff_mpeg_flush
ff_msmp4_dc_chroma_vlc
ff_msmp4_dc_luma_vlc
ff_msmp4_mb_i_table
ff_msmp4_mb_i_vlc
ff_msmpeg4_decode_init
ff_msmpeg4_encode_init
ff_parse_close
ff_pre_estimate_p_frame_motion
ff_print_debug_info
ff_put_no_rnd_qpel16_mc11_old_c
ff_put_no_rnd_qpel16_mc12_old_c
ff_put_no_rnd_qpel16_mc13_old_c
ff_put_no_rnd_qpel16_mc31_old_c
ff_put_no_rnd_qpel16_mc32_old_c
ff_put_no_rnd_qpel16_mc33_old_c
ff_put_no_rnd_qpel8_mc11_old_c
ff_put_no_rnd_qpel8_mc12_old_c
ff_put_no_rnd_qpel8_mc13_old_c
ff_put_no_rnd_qpel8_mc31_old_c
ff_put_no_rnd_qpel8_mc32_old_c
ff_put_no_rnd_qpel8_mc33_old_c
ff_put_qpel16_mc11_old_c
ff_put_qpel16_mc12_old_c
ff_put_qpel16_mc13_old_c
ff_put_qpel16_mc31_old_c
ff_put_qpel16_mc32_old_c
ff_put_qpel16_mc33_old_c
ff_put_qpel8_mc11_old_c
ff_put_qpel8_mc12_old_c
ff_put_qpel8_mc13_old_c
ff_put_qpel8_mc31_old_c
ff_put_qpel8_mc32_old_c
ff_put_qpel8_mc33_old_c
ff_rac_terminate
ff_rate_control_init
ff_rate_control_uninit
ff_rate_estimate_qscale
ff_reverse
ff_se_golomb_vlc_code
ff_set_cmp
ff_set_mpeg4_time
ff_set_qscale
ff_simple_idct_add_mmx
ff_simple_idct_mmx
ff_simple_idct_put_mmx
ff_sqrt_tab
ff_table0_dc_chroma
ff_table0_dc_lum
ff_table1_dc_chroma
ff_table1_dc_lum
ff_ue_golomb_len
ff_ue_golomb_vlc_code
ff_update_duplicate_context
ff_vbv_update
ff_vp3_dsp_init_mmx
ff_vp3_idct_add_c
ff_vp3_idct_c
ff_vp3_idct_mmx
ff_vp3_idct_put_c
ff_vp3_idct_sse2
ff_write_pass1_stats
ff_write_quant_matrix
ff_yuv420p_list
ff_zigzag248_direct
ff_zigzag_direct
first_avcodec
flv_decoder
flv_encoder
flv_h263_decode_picture_header
free_vlc
get_bits_long
get_ref_mmx
h261_cbp_tab
h261_decode_picture_header
h261_decoder
h261_encoder
h261_mba_bits
h261_mba_code
h261_mtype_bits
h261_mtype_code
h261_mv_tab
h261_parser
h261_tcoeff_level
h261_tcoeff_run
h261_tcoeff_vlc
h263_decode_init_vlc
h263_decode_picture_header
h263_decoder
h263_encode_gob_header
h263_encode_init
h263_encode_mb
h263_encode_picture_header
h263_encoder
h263_get_picture_format
h263_parser
h263_pred_motion
h263i_decoder
h263p_encoder
h264_decoder
h264_parser
img_convert
img_copy
img_get_alpha_info
img_resample
img_resample_close
img_resample_full_init
img_resample_init
init_rl
init_vlc
init_vlc_rl
intel_h263_decode_picture_header
inter_MCBPC_bits
inter_MCBPC_code
inter_level
inter_run
inter_vlc
intra_MCBPC_bits
intra_MCBPC_code
intra_level
intra_level_aic
intra_run
intra_run_aic
intra_vlc
intra_vlc_aic
inv_zigzag_direct16
inverse
j_rev_dct
j_rev_dct1
j_rev_dct2
j_rev_dct4
mc_luma_mmx
mjpeg_encoder
mm_flags
mm_support
mpeg4_decoder
mpeg4_encode_mb
mpeg4_encode_picture_header
mpeg4_encoder
mpeg4_pred_ac
mpeg4video_parser
mpegaudio_parser
mpegvideo_parser
msmpeg4_decode_ext_header
msmpeg4_decode_picture_header
msmpeg4_encode_ext_header
msmpeg4_encode_mb
msmpeg4_encode_picture_header
msmpeg4v1_decoder
msmpeg4v1_encoder
msmpeg4v2_decoder
msmpeg4v2_encoder
msmpeg4v3_decoder
msmpeg4v3_encoder
mvtab
predict_16x16_v_mmx
predict_8x8c_v_mmx
put_pixels_clamped_mmx
put_signed_pixels_clamped_mmx
put_string
register_avcodec
rv10_encoder
rv20_encoder
show_bits_long
simple_idct
simple_idct248_put
simple_idct48_add
simple_idct84_add
simple_idct_add
simple_idct_put
squareTbl
sws_close
sws_enlarge
sws_freeContext
sws_getContext
sws_init
sws_scale
tab_frw_01234567_sse2
to_AVFrame
vlc_dc_chroma_bits
vlc_dc_chroma_code
wmv1_decoder
wmv1_encoder
x264_add16x16_idct_mmxext
x264_add4x4_idct_mmxext
x264_add8x8_idct_mmxext
x264_cabac_context_init
x264_cabac_decode_bypass
x264_cabac_decode_decision
x264_cabac_decode_init
x264_cabac_decode_terminal
x264_cabac_encode_bypass
x264_cabac_encode_decision
x264_cabac_encode_flush
x264_cabac_encode_init
x264_cabac_encode_terminal
x264_cabac_mb_skip
x264_cabac_model_get
x264_cabac_model_init
x264_cabac_model_update
x264_center_filter_mmxext
x264_cpu_cpuid
x264_cpu_cpuid_test
x264_cpu_detect
x264_cpu_restore
x264_cqm_init
x264_cqm_parse_file
x264_cqm_parse_jmlist
x264_csp_init
x264_dct4x4dc_mmxext
x264_dct_init
x264_emms
x264_encoder
x264_encoder_close
x264_encoder_encode
x264_encoder_headers
x264_encoder_open
x264_encoder_reconfig
x264_eval
x264_frame_copy_picture
x264_frame_deblocking_filter
x264_frame_delete
x264_frame_expand_border
x264_frame_expand_border_filtered
x264_frame_expand_border_lowres
x264_frame_filter
x264_frame_init_lowres
x264_frame_new
x264_free
x264_horizontal_filter_mmxext
x264_idct4x4dc_mmxext
x264_log
x264_macroblock_analyse
x264_macroblock_bipred_init
x264_macroblock_cache_end
x264_macroblock_cache_init
x264_macroblock_cache_load
x264_macroblock_cache_save
x264_macroblock_encode
x264_macroblock_encode_pskip
x264_macroblock_luma_write_cavlc
x264_macroblock_probe_skip
x264_macroblock_slice_init
x264_macroblock_write_cabac
x264_macroblock_write_cavlc
x264_malloc
x264_mb_dequant_2x2_dc
x264_mb_dequant_4x4
x264_mb_dequant_4x4_dc
x264_mb_dequant_8x8
x264_mb_encode_i4x4
x264_mb_encode_i8x8
x264_mb_load_mv_direct8x8
x264_mb_mc
x264_mb_predict_intra4x4_mode
x264_mb_predict_mv
x264_mb_predict_mv_16x16
x264_mb_predict_mv_direct16x16
x264_mb_predict_mv_pskip
x264_mb_predict_mv_ref16x16

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 279KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9158IE.exe
.exe windows:4 windows x86 arch:x86

e14a159cd716e9818213b78a4af4a052

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

9e:41:67:f9:ef:25:10:2b:0a:f9:38:33:28:da:d9:59:76:f3:47:12
Signer

Actual PE Digest

9e:41:67:f9:ef:25:10:2b:0a:f9:38:33:28:da:d9:59:76:f3:47:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5980
ord2641
ord4122
ord6214
ord6196
ord4298
ord5948
ord3088
ord3875
ord3872
ord3871
ord6198
ord4286
ord4283
ord3137
ord3796
ord5719
ord6092
ord3524
ord4032
ord6095
ord4035
ord2549
ord2433
ord3353
ord3579
ord426
ord823
ord726
ord826
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord1146
ord1168
ord4287
ord6199
ord4299
ord2379
ord2818
ord535
ord6215
ord665
ord1979
ord6385
ord5186
ord354
ord2086
ord2864
ord3874
ord3092
ord924
ord773
ord501
ord5621
ord2915
ord1083
ord5572
ord922
ord3619
ord1641
ord3663
ord3626
ord2414
ord4284
ord6877
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord6055
ord1776
ord5290
ord3721
ord2628
ord795
ord567
ord4275
ord2860
ord5875
ord6449
ord2727
ord6467
ord2730
ord2729
ord3237
ord1799
ord614
ord2623
ord290
ord4226
ord2486
ord4003
ord2575
ord3574
ord3571
ord2574
ord4396
ord3402
ord3572
ord609
ord556
ord809
ord1793
ord4160
ord6358
ord1088
ord2122
ord640
ord2405
ord5785
ord1640
ord323
ord2859
ord6197
ord6172
ord5873
ord3706
ord3584
ord543
ord803
ord536
ord941
ord5583
ord2393
ord6657
ord5442
ord3507
ord6881
ord1074
ord5204
ord3229
ord690
ord3318
ord389
ord939
ord4277
ord5981
ord6241
ord2688
ord5356
ord5808
ord6058
ord1075
ord6059
ord6605
ord798
ord1988
ord533
ord5207
ord3742
ord818
ord3005
ord2135
ord1233
ord6880
ord1601
ord538
ord2919
ord4123
ord2642
ord861
ord3089
ord2763
ord4129
ord5710
ord539
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord801
ord616
ord541
ord1768
ord2820
ord3811
ord6663
ord1949
ord4034
ord1673
ord1683
ord5435
ord1134
ord2621
ord824
ord537
ord2764
ord4278
ord926
ord858
ord5683
ord1200
ord2514
ord4601
ord2132
ord5247
ord5231
ord6225
ord2144
ord2145
ord4046
ord825
ord561
ord540
ord860
ord815
ord800
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord3573
ord4673
ord1576

msvcrt

__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p__fmode
?terminate@@YAXXZ
_onexit
__dllonexit
strstr
towupper
__CxxFrameHandler
_setmbcp
_CxxThrowException
wcslen
__set_app_type
??1type_info@@UAE@XZ
_controlfp
atol
_snprintf
_mbscmp
atoi
_purecall
fclose
fopen
fread
fwrite
fseek
ftell
fflush
fputc
getc
fgets
fscanf
_beginthreadex
free
malloc
_except_handler3
_local_unwind2
isspace
isalnum
wcsncpy

kernel32

CreateEventA
CloseHandle
TerminateThread
GetExitCodeThread
WaitForSingleObject
SetEvent
Sleep
DeleteCriticalSection
LeaveCriticalSection
lstrlenA
FindResourceA
CreateThread
GetTickCount
ResetEvent
GetStartupInfoA
InitializeCriticalSection
WritePrivateProfileStringA
FreeLibrary
GetModuleFileNameA
GetCommandLineA
GetProcAddress
GetLastError
LoadLibraryA
OutputDebugStringA
SetProcessWorkingSetSize
GetCurrentProcess
GetModuleHandleA
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedDecrement
WideCharToMultiByte
InterlockedIncrement
lstrlenW
MultiByteToWideChar
LockResource
SizeofResource
EnterCriticalSection
FindResourceW
LocalFree
LoadResource

user32

GetSubMenu
LoadMenuA
GetClientRect
LoadIconA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetCursorPos
LoadCursorA
SetCursor
GetParent
GetWindowDC
LoadBitmapA
LoadImageA
InvalidateRect
ReleaseDC
SetWindowRgn
GetWindowRect
SetFocus
RemoveMenu
EnableWindow
SendMessageA
CopyRect
KillTimer
SetTimer
PostMessageA

gdi32

SetBkColor
SetTextColor
DeleteDC
DeleteObject
StretchBlt
CreateRectRgn
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
GetPixel
BitBlt
GetObjectA
CreateFontIndirectA
CreateSolidBrush
CreateFontA
SelectObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

comctl32

_TrackMouseEvent

ole32

CoUninitialize
CoCreateInstance
CoInitialize
OleRun

oleaut32

SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
VariantChangeType
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
VariantInit
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
GetErrorInfo
SetErrorInfo
CreateErrorInfo

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

winmm

mmioAscend
mmioRead
mmioDescend
mmioGetInfo
mmioCreateChunk
mmioSeek
mmioSetInfo
mmioAdvance
mmioWrite
mixerGetDevCapsA
mixerGetNumDevs
mmioOpenA
mmioClose
mmioOpenW

publictool

?Size@CxMemFile@@UAEJXZ
?Tell@CxMemFile@@UAEJXZ
?Seek@CxMemFile@@UAE_NJH@Z
?Write@CxMemFile@@UAEIPBXII@Z
?Read@CxMemFile@@UAEIPAXII@Z
?Close@CxMemFile@@UAE_NXZ
??0CxMemFile@@QAE@PAEK@Z
??1CxMemFile@@UAE@XZ
?Destroy@CxImage@@QAE_NXZ
?DestroyFrames@CxImage@@QAE_NXZ
??0CxImage@@QAE@K@Z
?Flush@CxMemFile@@UAE_NXZ
?Save@CxImage@@QAE_NPBDK@Z
?SetJpegQuality@CxImage@@QAEXE@Z
?IncreaseBpp@CxImage@@QAE_NK@Z
?IsGrayScale@CxImage@@QAE_NXZ
?IsValid@CxImage@@QBE_NXZ
?Load@CxImage@@QAE_NPBDK@Z
?base64_encode@CBase64@@SAHPADI0@Z
?GetS@CxMemFile@@UAEPADPADH@Z
?Scanf@CxMemFile@@UAEJPBDPAX@Z
?base64_decode@CBase64@@SAHPADI0@Z
?Eof@CxMemFile@@UAE_NXZ
?Error@CxMemFile@@UAEJXZ
?PutC@CxMemFile@@UAE_NE@Z
??0CxImage@@QAE@ABV0@_N11@Z
?GetC@CxMemFile@@UAEJXZ

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CEasySecret@@QAEAAV0@ABV0@@Z
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
9158KTVPlayer.exe
.exe windows:4 windows x86 arch:x86

9cafa0c733e0cae9197ea1d3b35bcf76

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

77:40:6f:d6:6d:b3:c4:4d:29:9d:e4:ed:d8:95:43:e4:2c:5b:3b:ae
Signer

Actual PE Digest

77:40:6f:d6:6d:b3:c4:4d:29:9d:e4:ed:d8:95:43:e4:2c:5b:3b:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord2514
ord800
ord4277
ord2763
ord537
ord1232
ord1168
ord2621
ord1134
ord2725
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord2512
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord6055
ord1776
ord5290
ord3402
ord1146
ord567
ord540
ord2135
ord818
ord2688
ord6215
ord4299
ord4287
ord6241
ord4160
ord2863
ord5575
ord2379
ord860
ord4033
ord433
ord823
ord1949
ord4034
ord2554
ord4486
ord6375
ord4274
ord4407
ord4673
ord1576

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
atol
_setmbcp
exit

kernel32

GetCommandLineA
CloseHandle
GetModuleHandleA
GetStartupInfoA
CreateMutexA

user32

PostMessageA
SetTimer
SendMessageA
AppendMenuA
GetSystemMenu
IsWindow
KillTimer
EnableWindow
GetClassInfoA
LoadIconA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
9158VCComm.dll
.dll windows:4 windows x86 arch:x86

8bee02b8e1f0aca7d2a819f4fbb924ad

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:bb:d4:69:e4:91:ae:af:3b:5b:eb:de:ef:4f:c2:bc:44:fa:48:94
Signer

Actual PE Digest

d0:bb:d4:69:e4:91:ae:af:3b:5b:eb:de:ef:4f:c2:bc:44:fa:48:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\work\6.6\虚拟视频\soundmodule\bin\release\9158VCComm.pdb

Imports

kernel32

OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
GetModuleHandleA
OutputDebugStringA
CreateProcessA
GetLastError
Sleep
CreateThread
SetThreadPriority
ResumeThread
GetExitCodeThread
TerminateThread
GetModuleFileNameA
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
WriteFile
GetStdHandle
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RtlUnwind
SetHandleCount
GetFileType
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
SetFilePointer
LoadLibraryA
GetLocaleInfoA
CreateFileA
SetStdHandle
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
GetStartupInfoA
WaitForSingleObject

user32

DefWindowProcA
FindWindowA
PostMessageA
SetWindowLongA
CreateWindowExA
RegisterClassA
LoadIconA
LoadCursorA
DestroyWindow
GetWindowLongA

gdi32

GetStockObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoTaskMemFree
StringFromCLSID
CoCreateGuid

Exports

Exports

CreateVirtualCameraCommObject

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ACore.dll
.dll windows:4 windows x86 arch:x86

e3ba61b3b00623372ff882132496db49

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5a:bf:52:ff:33:3d:44:ec:ba:cf:e5:49:6e:b0:22:d6:8d:2d:5b:19
Signer

Actual PE Digest

5a:bf:52:ff:33:3d:44:ec:ba:cf:e5:49:6e:b0:22:d6:8d:2d:5b:19

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
GetModuleFileNameA
GetPrivateProfileIntA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
CloseHandle
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MultiByteToWideChar
ReadFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
InitializeCriticalSection
SetStdHandle
CreateFileA
RaiseException
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetEndOfFile

Exports

Exports

beCloseStream
beDeinitStream
beEncodeChunk
beEncodeChunkFloatS16NI
beFlushNoGap
beInitStream
beVersion
beWriteInfoTag
beWriteVBRHeader
lame_close
lame_encode_buffer_interleaved
lame_encode_flush
lame_get_in_samplerate
lame_get_num_channels
lame_get_num_samples
lame_get_out_samplerate
lame_get_scale
lame_get_scale_left
lame_get_scale_right
lame_init
lame_init_params
lame_mp3_tags_fid
lame_set_in_samplerate
lame_set_num_channels
lame_set_num_samples
lame_set_out_samplerate
lame_set_scale
lame_set_scale_left
lame_set_scale_right

Sections

.text
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVManager.dll
.dll windows:4 windows x86 arch:x86

004ca1ff5469d2f99336bf228abb4cdf

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:2b:62:1d:6c:ff:23:e8:ca:3f:08:9d:9f:82:9a:1d:5e:08:3e:2b
Signer

Actual PE Digest

4f:2b:62:1d:6c:ff:23:e8:ca:3f:08:9d:9f:82:9a:1d:5e:08:3e:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
LeaveCriticalSection
OutputDebugStringA
GetExitCodeThread
Sleep
CreateThread
EnterCriticalSection
GetTickCount

audio

?CreateAudioInObject@@YAPAVIAudioIn@@XZ
?CreateAudioOutObject@@YAPAVIAudioOut@@XZ

avsocket

?CreateAVSocketObject@@YAPAVIAVSocket@@XZ

video

?CreateVideoInObject@@YAPAVIVideoIn@@XZ
?CreateVideoOutObject@@YAPAVIVideoOut@@XZ

msvcrt

__dllonexit
_onexit
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
fwrite
sprintf
fopen
fclose
vsprintf
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

?CreateAVManagerObject@@YAPAVIAVManager@@XZ

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVModule176.xml
.xml
AVModule320.xml
.xml
AVModule320_Private.xml
.xml
AVModule40.dll
.dll windows:4 windows x86 arch:x86

7bb9d53259dafc7205b8e6925a0f22a2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

51:aa:67:94:e7:54:ec:9a:90:92:92:5c:d3:4c:74:0a:24:4b:d7:07
Signer

Actual PE Digest

51:aa:67:94:e7:54:ec:9a:90:92:92:5c:d3:4c:74:0a:24:4b:d7:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

p2pclient

?NewVSP2PClient@@YAPAVCVSP2PClientInterface@@XZ
?FreeVSP2PClient@@YAXPAVCVSP2PClientInterface@@@Z
??_7IClientInterface@@6B@

mfc42

ord3079
ord4080
ord4627
ord4424
ord3742
ord3571
ord818
ord540
ord567
ord3626
ord2414
ord2452
ord4275
ord1641
ord2124
ord860
ord2818
ord5875
ord2860
ord2864
ord6157
ord3920
ord640
ord2405
ord5785
ord1640
ord323
ord2380
ord2567
ord2754
ord6172
ord5789
ord755
ord470
ord5290
ord2385
ord4837
ord2642
ord4299
ord6215
ord2379
ord6442
ord6605
ord2086
ord958
ord665
ord1979
ord6385
ord5186
ord354
ord2820
ord3811
ord5442
ord3318
ord6453
ord922
ord858
ord4278
ord5683
ord3402
ord2135
ord3089
ord773
ord941
ord501
ord5621
ord535
ord1106
ord1233
ord1083
ord1200
ord5607
ord1168
ord3825
ord342
ord1182
ord998
ord809
ord556
ord2859
ord5572
ord2915
ord6358
ord1088
ord2122
ord1949
ord4034
ord341
ord654
ord5603
ord2753
ord5858
ord5810
ord5481
ord2031
ord4411
ord4447
ord4335
ord4863
ord5796
ord5478
ord1971
ord966
ord3570
ord3584
ord605
ord521
ord543
ord278
ord6307
ord4919
ord4975
ord1638
ord3831
ord5809
ord803
ord1948
ord2396
ord3346
ord5300
ord5303
ord4079
ord4699
ord5307
ord5289
ord4622
ord817
ord565
ord2726
ord4226
ord3573
ord3977
ord1247
ord2763
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord324
ord4234
ord4710
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord3798
ord4353
ord6374
ord5163
ord5241
ord4407
ord1776
ord4078
ord6055
ord800
ord537
ord3663
ord823
ord825
ord1253
ord2077

msvcrt

_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
difftime
??1type_info@@UAE@XZ
_CxxThrowException
__dllonexit
__CxxFrameHandler
_ftol
atoi
_onexit
strstr
_purecall
_mbscmp
time

kernel32

CreateDirectoryA
FindResourceA
LoadResource
SizeofResource
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GlobalUnlock
InterlockedDecrement
LoadLibraryA
GetWindowsDirectoryA
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLastError
LocalFree
lstrlenA
GlobalLock
GlobalAlloc
GetModuleFileNameA
WaitForSingleObject
Sleep
OutputDebugStringA
GetTickCount
InterlockedIncrement
FreeLibrary

user32

SetRect
FillRect
GetWindowDC
LoadCursorA
CopyIcon
PeekMessageA
CopyRect
SendMessageA
GetParent
GetClientRect
IsWindow
SetCursor
GetDC
ReleaseDC
DestroyCursor
PostThreadMessageA
RedrawWindow
LoadImageA
EnableWindow
PtInRect
IsWindowVisible
PostMessageA
GetWindowRect
InvalidateRect

gdi32

BitBlt
SetStretchBltMode
CreateCompatibleDC
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
StretchBlt
GetObjectA
StretchDIBits

comctl32

_TrackMouseEvent

ole32

CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleRun

olepro32

ord251

oleaut32

SysAllocStringByteLen
VariantClear
SysStringByteLen
SysFreeString
GetErrorInfo
SysAllocString

wsock32

setsockopt
gethostbyname
ntohs
WSAGetLastError
ioctlsocket
inet_addr

msimg32

AlphaBlend

Exports

Exports

??0CAVBaseWnd@@QAE@XZ
??0CAVInput@@QAE@XZ
??0CAVManager@@QAE@PAVCWnd@@@Z
??0CAVOutput@@QAE@XZ
??1CAVBaseWnd@@UAE@XZ
??1CAVInput@@UAE@XZ
??1CAVManager@@UAE@XZ
??1CAVOutput@@UAE@XZ
??_7CAVBaseWnd@@6B@
??_7CAVInput@@6B@
??_7CAVManager@@6B@
??_7CAVOutput@@6BCAVBaseWnd@@@
??_7CAVOutput@@6BISocketMessage@@@
?AfterCreate@CAVBaseWnd@@MAEXXZ
?AfterCreate@CAVInput@@MAEXXZ
?AfterCreate@CAVOutput@@MAEXXZ
?AfterSetBackImage@CAVBaseWnd@@MAEXXZ
?AfterSetBackImage@CAVInput@@MAEXXZ
?AfterSetBackImage@CAVOutput@@MAEXXZ
?Close@CAVBaseWnd@@UAEXXZ
?Close@CAVInput@@UAEXXZ
?Close@CAVManager@@QAEXXZ
?Close@CAVOutput@@UAEXXZ
?Create@CAVBaseWnd@@UAEHPBD0KABUtagRECT@@PAVCWnd@@IPAUCCreateContext@@@Z
?CreateEx@CAVBaseWnd@@QAEHKPBD0KABUtagRECT@@PAVCWnd@@IPAX@Z
?CreateFloatTool@CAVBaseWnd@@QAEXXZ
?CreateFloatToolEx@CAVBaseWnd@@QAEXXZ
?CreateNormalTool@CAVBaseWnd@@QAEXXZ
?CreateNormalToolEx@CAVBaseWnd@@QAEXXZ
?CreateZoomDlg@CAVBaseWnd@@QAEXXZ
?DefWindowProcA@CAVBaseWnd@@MAEJIIJ@Z
?DeleteInput@CAVManager@@UAEHXZ
?DeleteOutput@CAVManager@@UAEHH@Z
?FloatDocking@CAVBaseWnd@@MAEXH@Z
?FloatDocking@CAVInput@@MAEXH@Z
?FloatDocking@CAVOutput@@MAEXH@Z
?GetCamera@CAVBaseWnd@@QAEHXZ
?GetDisplayAudio@CAVBaseWnd@@QAEHXZ
?GetDisplayVideo@CAVBaseWnd@@QAEHXZ
?GetInput@CAVManager@@QAEPAVCWnd@@XZ
?GetInputAudioOpen@CAVManager@@QAEHXZ
?GetMessageMap@CAVBaseWnd@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CAVInput@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CAVOutput@@MBEPBUAFX_MSGMAP@@XZ
?GetNetRate@CAVManager@@QAEIXZ
?GetOutput@CAVManager@@QAEPAVCWnd@@H@Z
?GetOutputAudioOpen@CAVManager@@QAEHH@Z
?GetOutputVideoOpen@CAVManager@@QAEHH@Z
?GetRoomID@CAVManager@@QAEHXZ
?GetUserID@CAVBaseWnd@@QAEHXZ
?GetWordColor@CAVInput@@QAEKXZ
?GetWordColor@CAVManager@@QAEKXZ
?InitConfigInfo@CAVManager@@QAEHPBD@Z
?InsertCustomInput@CAVManager@@UAEHHPBDVCRect@@IH@Z
?InsertCustomOutput@CAVManager@@UAEHHPBDVCRect@@I@Z
?InsertInput@CAVManager@@UAEHHPBDVCRect@@IHH@Z
?InsertOutput@CAVManager@@UAEHHPBDVCRect@@IH@Z
?NotifyFloatTool@CAVBaseWnd@@QAEHIJPAJ@Z
?OnAudioFull@CAVInput@@IAEJIJ@Z
?OnClose@CAVBaseWnd@@IAEXXZ
?OnCreate@CAVBaseWnd@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnCreate@CAVInput@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnCreate@CAVOutput@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnDestroy@CAVBaseWnd@@IAEXXZ
?OnDestroy@CAVOutput@@IAEXXZ
?OnDisplayAudio@CAVOutput@@IAEJIJ@Z
?OnDisplayVideo@CAVOutput@@IAEJIJ@Z
?OnEraseBkgnd@CAVBaseWnd@@IAEHPAVCDC@@@Z
?OnLButtonDown@CAVBaseWnd@@IAEXIVCPoint@@@Z
?OnLButtonUp@CAVBaseWnd@@IAEXIVCPoint@@@Z
?OnMouseLeave@CAVBaseWnd@@IAEJIJ@Z
?OnMouseMove@CAVBaseWnd@@IAEXIVCPoint@@@Z
?OnNotify@CAVBaseWnd@@MAEHIJPAJ@Z
?OnPaint@CAVBaseWnd@@IAEXXZ
?OnSendAudioData@CAVOutput@@IAEJIJ@Z
?OnSendVideoData@CAVOutput@@IAEJIJ@Z
?OnSize@CAVBaseWnd@@IAEXIHH@Z
?OnSize@CAVInput@@IAEXIHH@Z
?OnSocketAddAudioData@CAVOutput@@UAEXPAVCBuffer@@K@Z
?OnSocketAddVideoData@CAVOutput@@UAEXPAVCBuffer@@K@Z
?OnStaticClose@CAVBaseWnd@@IAEJIJ@Z
?OnTimer@CAVOutput@@IAEXI@Z
?OnUserStatus@CAVOutput@@IAEJIJ@Z
?OnVideoDataReturn@CAVBaseWnd@@IAEJIJ@Z
?OnVideoFull@CAVInput@@IAEJIJ@Z
?OnWaveMsgInfo@CAVBaseWnd@@IAEJIJ@Z
?OnWaveMsgInfoMany@CAVBaseWnd@@IAEJIJ@Z
?PlayAudioFromBuffer@CAVOutput@@QAEXXZ
?PlayVideoFromBuffer@CAVOutput@@QAEXXZ
?PreTranslateMessage@CAVBaseWnd@@UAEHPAUtagMSG@@@Z
?PreTranslateMessage@CAVInput@@UAEHPAUtagMSG@@@Z
?SaveSnapshotFile@CAVBaseWnd@@QAEHPAEH@Z
?SetAVConfigInfo@CAVBaseWnd@@QAEXPAVCAVConfigInfo@@@Z
?SetBackPicFile@CAVBaseWnd@@QAEHPAEH@Z
?SetBackPicFile@CAVBaseWnd@@QAEHPBD@Z
?SetBmpFile@CAVManager@@QAEXPBD@Z
?SetBmpFileTop@CAVManager@@QAEXPBD@Z
?SetBufferTime@CAVManager@@QAEXH@Z
?SetDisplayAudio@CAVBaseWnd@@UAEXH@Z
?SetDisplayAudio@CAVInput@@UAEXH@Z
?SetDisplayAudio@CAVOutput@@UAEXH@Z
?SetDisplayVideo@CAVBaseWnd@@UAEXH@Z
?SetDisplayVideo@CAVInput@@UAEXH@Z
?SetDisplayVideo@CAVOutput@@UAEXH@Z
?SetForbidP2P@CAVManager@@QAEXXZ
?SetInputAudioOpen@CAVManager@@QAEXH@Z
?SetInputBackImage@CAVManager@@QAEHPAEH@Z
?SetInputBackImage@CAVManager@@QAEHPBD@Z
?SetIsInputWindow@CAVBaseWnd@@QAEXH@Z
?SetNetInfo@CAVManager@@QAEXPBDI@Z
?SetOutputAudioOpen@CAVManager@@QAEXHH@Z
?SetOutputBackImage@CAVManager@@QAEHHPAEH@Z
?SetOutputBackImage@CAVManager@@QAEHHPBD@Z
?SetOutputVideoOpen@CAVManager@@QAEXHH@Z
?SetSnapshotFilePath@CAVManager@@QAEXPBD@Z
?SetSnapshotPath@CAVBaseWnd@@QAEXPBD@Z
?SetToolStyle@CAVBaseWnd@@QAEXH@Z
?SetUDPThread@CAVBaseWnd@@QAEXPAVCUDPThread@@@Z
?SetUserInfo@CAVBaseWnd@@QAEXHPBD@Z
?SetUserInfo@CAVManager@@QAEXHHPBD@Z
?SetVideoAlwaysOpen@CAVInput@@QAEXXZ
?SetVideoAlwaysOpen@CAVManager@@QAEXXZ
?SetVideoDevice@CAVInput@@QAEXH@Z
?SetVideoInfo@CAVManager@@QAEXHHH@Z
?SetVideoOpen@CAVBaseWnd@@QAEXH@Z
?SetVideoOpen@CAVManager@@QAEXH@Z
?SetVideoQuality@CAVManager@@QAEXH@Z
?SetVideoWord@CAVInput@@QAEXPBD@Z
?SetVideoWord@CAVManager@@QAEXPBD@Z
?SetWordColor@CAVInput@@QAEXK@Z
?SetWordColor@CAVManager@@QAEXK@Z
?StartSocket@CAVManager@@QAEXXZ
?StartThread@CAVManager@@QAEXXZ
?_GetBaseMessageMap@CAVBaseWnd@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CAVInput@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CAVOutput@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@CAVBaseWnd@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CAVInput@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CAVOutput@@0QBUAFX_MSGMAP_ENTRY@@B
?messageMap@CAVBaseWnd@@1UAFX_MSGMAP@@B
?messageMap@CAVInput@@1UAFX_MSGMAP@@B
?messageMap@CAVOutput@@1UAFX_MSGMAP@@B

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVModule50.dll
.dll windows:4 windows x86 arch:x86

a9e96a7e9d035e798b627d4e47833401

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

avmanager

?CreateAVManagerObject@@YAPAVIAVManager@@XZ

mfc42

ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord3571
ord3626
ord818
ord540
ord567
ord2414
ord2452
ord4275
ord1641
ord2124
ord860
ord2818
ord5875
ord2860
ord2864
ord640
ord2405
ord5785
ord1640
ord323
ord2380
ord2567
ord2754
ord755
ord6172
ord5789
ord470
ord5290
ord2385
ord4837
ord2642
ord4299
ord6215
ord2379
ord6442
ord6605
ord2086
ord958
ord665
ord2985
ord6385
ord5186
ord354
ord2820
ord3811
ord6453
ord922
ord858
ord4278
ord5683
ord773
ord941
ord501
ord5621
ord1233
ord1083
ord5607
ord1168
ord1253
ord342
ord1182
ord809
ord556
ord2859
ord3089
ord5572
ord2915
ord6358
ord1088
ord2122
ord654
ord341
ord5603
ord2753
ord5858
ord3573
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord324
ord4234
ord4710
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord3798
ord4353
ord6374
ord5163
ord5241
ord4407
ord1776
ord4078
ord6055
ord537
ord800
ord3663
ord823
ord825
ord1979

msvcrt

??1type_info@@UAE@XZ
_CxxThrowException
_mbscmp
__CxxFrameHandler
_onexit
atoi
strstr
_purecall
_ftol
_except_handler3
?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
__dllonexit

kernel32

WideCharToMultiByte
lstrlenW
InterlockedDecrement
MultiByteToWideChar
LocalFree
SizeofResource
LoadResource
FindResourceA
CreateDirectoryA
GetTickCount
GetModuleFileNameA
FreeLibrary
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
GetLastError
lstrlenA
GetWindowsDirectoryA

user32

PtInRect
IsWindowVisible
SetTimer
InvalidateRect
EnableWindow
LoadImageA
RedrawWindow
CopyIcon
DestroyCursor
ReleaseDC
GetDC
SetCursor
SetRect
FillRect
GetWindowDC
LoadCursorA
GetWindowRect
PostMessageA
IsWindow
GetClientRect
GetParent
SendMessageA
CopyRect
KillTimer

gdi32

DeleteObject
CreateCompatibleBitmap
SetStretchBltMode
StretchDIBits
GetObjectA
CreateCompatibleDC
StretchBlt
BitBlt
CreateSolidBrush

comctl32

_TrackMouseEvent

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
GetErrorInfo

msimg32

AlphaBlend

Exports

Exports

??0CAVBaseWnd@@QAE@XZ
??0CAVInput@@QAE@XZ
??0CAVManager@@QAE@PAVCWnd@@@Z
??0CAVOutput@@QAE@XZ
??1CAVBaseWnd@@UAE@XZ
??1CAVInput@@UAE@XZ
??1CAVManager@@UAE@XZ
??1CAVOutput@@UAE@XZ
??_7CAVBaseWnd@@6B@
??_7CAVInput@@6B@
??_7CAVManager@@6B@
??_7CAVOutput@@6B@
?AddAudioData@CAVManager@@QAEXPAEH@Z
?AddAudioDataEx@CAVManager@@QAEXPAEH0H@Z
?AddLineInput@CAVManager@@QAE_NHHPBDHH@Z
?AddLineOutput@CAVManager@@QAE_NHHPBDH@Z
?AfterCreate@CAVBaseWnd@@MAEXXZ
?AfterCreate@CAVInput@@MAEXXZ
?AfterCreate@CAVOutput@@MAEXXZ
?AfterSetBackImage@CAVBaseWnd@@MAEXXZ
?AfterSetBackImage@CAVInput@@MAEXXZ
?AfterSetBackImage@CAVOutput@@MAEXXZ
?Close@CAVBaseWnd@@UAEXXZ
?Close@CAVInput@@UAEXXZ
?Close@CAVManager@@QAEXXZ
?Close@CAVOutput@@UAEXXZ
?CloseLinePut@CAVManager@@QAEXXZ
?Create@CAVBaseWnd@@UAEHPBD0KABUtagRECT@@PAVCWnd@@IPAUCCreateContext@@@Z
?CreateEx@CAVBaseWnd@@QAEHKPBD0KABUtagRECT@@PAVCWnd@@IPAX@Z
?CreateFloatTool@CAVBaseWnd@@QAEXXZ
?CreateFloatToolEx@CAVBaseWnd@@QAEXXZ
?CreateNormalTool@CAVBaseWnd@@QAEXXZ
?CreateNormalToolEx@CAVBaseWnd@@QAEXXZ
?CreateZoomDlg@CAVBaseWnd@@QAEXXZ
?DefWindowProcA@CAVBaseWnd@@MAEJIIJ@Z
?DeleteInput@CAVManager@@UAEHXZ
?DeleteLinePut@CAVManager@@QAEXH@Z
?DeleteLinePutInput@CAVManager@@QAEXXZ
?DeleteLinePutOutput@CAVManager@@QAEXH@Z
?DeleteOutput@CAVManager@@UAEHH@Z
?FloatDocking@CAVBaseWnd@@MAEXH@Z
?FloatDocking@CAVInput@@MAEXH@Z
?FloatDocking@CAVOutput@@MAEXH@Z
?GetAudioFrameLength@CAVManager@@QAEHXZ
?GetAudioValueUpdate@CAVBaseWnd@@QAE_NH@Z
?GetCamera@CAVBaseWnd@@QAEHXZ
?GetDisplayAudio@CAVBaseWnd@@QAEHXZ
?GetDisplayVideo@CAVBaseWnd@@QAEHXZ
?GetInput@CAVManager@@QAEPAVCWnd@@XZ
?GetInputAudioOpen@CAVManager@@QAEHXZ
?GetLineModule@CAVBaseWnd@@QAE_NXZ
?GetLinePutInput@CAVManager@@QAEPAVCAVBaseWnd@@XZ
?GetLinePutOutput@CAVManager@@QAEPAVCAVBaseWnd@@H@Z
?GetMessageMap@CAVBaseWnd@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CAVInput@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CAVOutput@@MBEPBUAFX_MSGMAP@@XZ
?GetNetRate@CAVManager@@QAEIXZ
?GetOutput@CAVManager@@QAEPAVCWnd@@H@Z
?GetOutputAudioOpen@CAVManager@@QAEHH@Z
?GetOutputVideoOpen@CAVManager@@QAEHH@Z
?GetPutType@CAVBaseWnd@@QAEHXZ
?GetRoomID@CAVManager@@QAEHXZ
?GetUserID@CAVBaseWnd@@QAEHXZ
?GetWordColor@CAVInput@@QAEKXZ
?GetWordColor@CAVManager@@QAEKXZ
?InitConfigInfo@CAVManager@@QAEHPBD@Z
?InsertCustomInput@CAVManager@@UAEHHPBDVCRect@@IH@Z
?InsertCustomOutput@CAVManager@@UAEHHPBDVCRect@@I@Z
?InsertInput@CAVManager@@UAEHHPBDVCRect@@IHH@Z
?InsertLinePut@CAVManager@@QAEHVCRect@@I@Z
?InsertOutput@CAVManager@@UAEHHPBDVCRect@@IH@Z
?NotifyFloatTool@CAVBaseWnd@@QAEHIJPAJ@Z
?OnAudioFull@CAVInput@@IAEJIJ@Z
?OnChangeOutputAVStatus@CAVManager@@UAEXHHH@Z
?OnClose@CAVBaseWnd@@IAEXXZ
?OnCreate@CAVBaseWnd@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnCreate@CAVInput@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnCreate@CAVOutput@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnDestroy@CAVBaseWnd@@IAEXXZ
?OnDestroy@CAVOutput@@IAEXXZ
?OnDisplayAudio@CAVOutput@@IAEJIJ@Z
?OnDisplayVideo@CAVOutput@@IAEJIJ@Z
?OnEraseBkgnd@CAVBaseWnd@@IAEHPAVCDC@@@Z
?OnInputAuidoData@CAVManager@@UAEXPADH@Z
?OnInputAuidoValue@CAVManager@@UAEXHH@Z
?OnInputVideoData@CAVManager@@UAEXPADH@Z
?OnLButtonDown@CAVBaseWnd@@IAEXIVCPoint@@@Z
?OnLButtonUp@CAVBaseWnd@@IAEXIVCPoint@@@Z
?OnMouseLeave@CAVBaseWnd@@IAEJIJ@Z
?OnMouseMove@CAVBaseWnd@@IAEXIVCPoint@@@Z
?OnNotify@CAVBaseWnd@@MAEHIJPAJ@Z
?OnOutputAuidoValue@CAVManager@@UAEXHHHKPAEH0H@Z
?OnOutputVideoData@CAVManager@@UAEXHPADH@Z
?OnPaint@CAVBaseWnd@@IAEXXZ
?OnSize@CAVBaseWnd@@IAEXIHH@Z
?OnSize@CAVInput@@IAEXIHH@Z
?OnSocketAddAudioData@CAVOutput@@UAEXPAVCBuffer@@K@Z
?OnSocketAddVideoData@CAVOutput@@UAEXPAVCBuffer@@K@Z
?OnStaticClose@CAVBaseWnd@@IAEJIJ@Z
?OnTimer@CAVBaseWnd@@IAEXI@Z
?OnTimer@CAVOutput@@IAEXI@Z
?OnVideoData@CAVBaseWnd@@QAEXPADH@Z
?OnVideoDataReturn@CAVBaseWnd@@IAEJIJ@Z
?OnVideoFull@CAVInput@@IAEJIJ@Z
?OnWaveMsgInfo@CAVBaseWnd@@IAEJIJ@Z
?OnWaveMsgInfoMany@CAVBaseWnd@@IAEJIJ@Z
?PlayAudioFromBuffer@CAVOutput@@QAEXXZ
?PlayVideoFromBuffer@CAVOutput@@QAEXXZ
?PreTranslateMessage@CAVBaseWnd@@UAEHPAUtagMSG@@@Z
?PreTranslateMessage@CAVInput@@UAEHPAUtagMSG@@@Z
?RemoveLinePut@CAVManager@@QAEXHH@Z
?SaveSnapshotFile@CAVBaseWnd@@QAEHPAEH@Z
?SetAVConfigInfo@CAVBaseWnd@@QAEXPAVCAVConfigInfo@@@Z
?SetAVManager@CAVBaseWnd@@QAEXPAVIAVManager@@@Z
?SetAudioInfo@CAVManager@@QAEXHHHHH_N0@Z
?SetAudioValue@CAVBaseWnd@@QAEXHH@Z
?SetBackPicFile@CAVBaseWnd@@QAEHPAEH@Z
?SetBackPicFile@CAVBaseWnd@@QAEHPBD@Z
?SetBmpFile@CAVManager@@QAEXPBD@Z
?SetBmpFileTop@CAVManager@@QAEXPBD@Z
?SetBufferTime@CAVManager@@QAEXH@Z
?SetDisplayAudio@CAVBaseWnd@@UAEXH@Z
?SetDisplayAudio@CAVInput@@UAEXH@Z
?SetDisplayAudio@CAVOutput@@UAEXH@Z
?SetDisplayVideo@CAVBaseWnd@@UAEXH@Z
?SetDisplayVideo@CAVInput@@UAEXH@Z
?SetDisplayVideo@CAVOutput@@UAEXH@Z
?SetFont@CAVManager@@QAEXPAVCFont@@@Z
?SetForbidP2P@CAVManager@@QAEXXZ
?SetHaveTool@CAVBaseWnd@@QAEX_N@Z
?SetIAudioDataMsg@CAVManager@@QAEXPAVIAudioDataMsg@@@Z
?SetInputAudioOpen@CAVManager@@QAEXH@Z
?SetInputBackImage@CAVManager@@QAEHPAEH@Z
?SetInputBackImage@CAVManager@@QAEHPBD@Z
?SetIsInputWindow@CAVBaseWnd@@QAEXH@Z
?SetLineModule@CAVBaseWnd@@QAEX_N@Z
?SetNetInfo@CAVManager@@QAEXPBDI@Z
?SetNewFont@CAVBaseWnd@@QAEXPAVCFont@@@Z
?SetOutputAudioOpen@CAVManager@@QAEXHH@Z
?SetOutputBackImage@CAVManager@@QAEHHPAEH@Z
?SetOutputBackImage@CAVManager@@QAEHHPBD@Z
?SetOutputVideoOpen@CAVManager@@QAEXHH@Z
?SetSnapshot@CAVBaseWnd@@QAEXH@Z
?SetSnapshotFilePath@CAVManager@@QAEXPBD@Z
?SetSnapshotPath@CAVBaseWnd@@QAEXPBD@Z
?SetToolStyle@CAVBaseWnd@@QAEXH@Z
?SetUserInfo@CAVBaseWnd@@QAEXHPBD@Z
?SetUserInfo@CAVManager@@QAEXHHPBD@Z
?SetVideoAlwaysOpen@CAVInput@@QAEXXZ
?SetVideoAlwaysOpen@CAVManager@@QAEXXZ
?SetVideoDevice@CAVInput@@QAEXH@Z
?SetVideoInfo@CAVManager@@QAEXHHH@Z
?SetVideoInfoEx@CAVManager@@QAEXHHHHH@Z
?SetVideoOpen@CAVBaseWnd@@QAEXH@Z
?SetVideoOpen@CAVManager@@QAEXH@Z
?SetVideoQuality@CAVManager@@QAEXH@Z
?SetVideoWord@CAVInput@@QAEXPBD@Z
?SetVideoWord@CAVManager@@QAEXPBD@Z
?SetWaveIn@CAVManager@@QAE_N_N@Z
?SetWordColor@CAVInput@@QAEXK@Z
?SetWordColor@CAVManager@@QAEXK@Z
?SnapshotInput@CAVManager@@QAEXXZ
?SnapshotOutput@CAVManager@@QAEXH@Z
?StartSocket@CAVManager@@QAEXXZ
?StartThread@CAVManager@@QAEXXZ
?StopPlay@CAVOutput@@QAEXXZ
?_GetBaseMessageMap@CAVBaseWnd@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CAVInput@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CAVOutput@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@CAVBaseWnd@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CAVInput@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CAVOutput@@0QBUAFX_MSGMAP_ENTRY@@B
?messageMap@CAVBaseWnd@@1UAFX_MSGMAP@@B
?messageMap@CAVInput@@1UAFX_MSGMAP@@B
?messageMap@CAVOutput@@1UAFX_MSGMAP@@B

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVSocket.dll
.dll windows:4 windows x86 arch:x86

8d819f3ae4511e3d15b3b941f2daae0e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b8:67:f0:fb:7c:14:60:1b:63:3a:ce:e4:03:29:30:b9:0b:9c:fe:cd
Signer

Actual PE Digest

b8:67:f0:fb:7c:14:60:1b:63:3a:ce:e4:03:29:30:b9:0b:9c:fe:cd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

p2pclient

?NewVSP2PClient@@YAPAVCVSP2PClientInterface@@XZ
?FreeVSP2PClient@@YAXPAVCVSP2PClientInterface@@@Z
??_7IClientInterface@@6B@

kernel32

CloseHandle
SetThreadPriority
OutputDebugStringA
LeaveCriticalSection
GetTickCount
CreateThread
GetExitCodeThread
TerminateThread
Sleep
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection

ws2_32

select
__WSAFDIsSet
accept
send
recv
ioctlsocket
connect
gethostbyname
WSASetLastError
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAStartup
WSAGetLastError
WSACleanup
WSAAsyncSelect
WSAEventSelect
WSACreateEvent
getpeername
setsockopt
getsockopt
closesocket
recvfrom
ntohs
sendto
htonl
htons
bind
inet_addr
socket
listen

msvcrt

__dllonexit
_onexit
_adjust_fdiv
_initterm
free
strstr
_purecall
_ftol
vsprintf
memmove
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc

Exports

Exports

?CreateAVSocketObject@@YAPAVIAVSocket@@XZ

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVUI.dll
.dll windows:4 windows x86 arch:x86

203ea0bb98c6833eab112357188c9979

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

ae:f8:0a:16:37:43:3f:9d:09:04:da:62:fa:94:22:e5:33:28:11:33
Signer

Actual PE Digest

ae:f8:0a:16:37:43:3f:9d:09:04:da:62:fa:94:22:e5:33:28:11:33

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

avmodule50

??0CAVManager@@QAE@PAVCWnd@@@Z
?SetFont@CAVManager@@QAEXPAVCFont@@@Z
?InsertLinePut@CAVManager@@QAEHVCRect@@I@Z
?AddLineInput@CAVManager@@QAE_NHHPBDHH@Z
?AddLineOutput@CAVManager@@QAE_NHHPBDH@Z
?RemoveLinePut@CAVManager@@QAEXHH@Z
?DeleteLinePut@CAVManager@@QAEXH@Z
?Close@CAVManager@@QAEXXZ
?SnapshotInput@CAVManager@@QAEXXZ
?SnapshotOutput@CAVManager@@QAEXH@Z
?SetWaveIn@CAVManager@@QAE_N_N@Z
?GetAudioFrameLength@CAVManager@@QAEHXZ
?AddAudioDataEx@CAVManager@@QAEXPAEH0H@Z
?AddAudioData@CAVManager@@QAEXPAEH@Z
?SetVideoInfoEx@CAVManager@@QAEXHHHHH@Z
?SetAudioInfo@CAVManager@@QAEXHHHHH_N0@Z
?SetVideoQuality@CAVManager@@QAEXH@Z
?GetOutputVideoOpen@CAVManager@@QAEHH@Z
?SetOutputVideoOpen@CAVManager@@QAEXHH@Z
?GetOutputAudioOpen@CAVManager@@QAEHH@Z
?SetOutputAudioOpen@CAVManager@@QAEXHH@Z
?GetNetRate@CAVManager@@QAEIXZ
?SetVideoOpen@CAVManager@@QAEXH@Z
?SetVideoAlwaysOpen@CAVManager@@QAEXXZ
?SetBufferTime@CAVManager@@QAEXH@Z
?SetInputBackImage@CAVManager@@QAEHPAEH@Z
?SetInputBackImage@CAVManager@@QAEHPBD@Z
?SetOutputBackImage@CAVManager@@QAEHHPAEH@Z
?SetOutputBackImage@CAVManager@@QAEHHPBD@Z
?GetInputAudioOpen@CAVManager@@QAEHXZ
?SetInputAudioOpen@CAVManager@@QAEXH@Z
?SetSnapshotFilePath@CAVManager@@QAEXPBD@Z
?SetVideoInfo@CAVManager@@QAEXHHH@Z
?InitConfigInfo@CAVManager@@QAEHPBD@Z
?SetUserInfo@CAVManager@@QAEXHHPBD@Z
?SetNetInfo@CAVManager@@QAEXPBDI@Z
?StartSocket@CAVManager@@QAEXXZ
?StartThread@CAVManager@@QAEXXZ
?GetRoomID@CAVManager@@QAEHXZ
?GetOutput@CAVManager@@QAEPAVCWnd@@H@Z
?GetInput@CAVManager@@QAEPAVCWnd@@XZ

mfc42

ord823
ord1168
ord1253
ord342
ord1182
ord2864
ord825

msvcrt

__CxxFrameHandler
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

CreateModule

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AdvertisingDll.dll
.dll windows:4 windows x86 arch:x86

137e3da70dbb1dd3dc5df4f6c073adf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord6055
ord4078
ord1776
ord4407
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord3742
ord818
ord800
ord535
ord537
ord540
ord567
ord4275
ord5241
ord6442
ord1233
ord924
ord860
ord6215
ord3337
ord3811
ord2818
ord5572
ord2915
ord922
ord538
ord4202
ord6283
ord858
ord6282
ord798
ord1997
ord2808
ord6407
ord1089
ord690
ord1988
ord823
ord5207
ord6059
ord389
ord2614
ord2379
ord6453
ord4299
ord6197
ord6605
ord2864
ord3663
ord6449
ord6467
ord5148
ord1200
ord3005
ord2135
ord1601
ord1168
ord861
ord2688
ord3089
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord3922
ord1182
ord5731
ord2512
ord2554
ord4486
ord6375
ord2725
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord939
ord5199
ord532
ord4274
ord1116
ord1176
ord1575
ord1577
ord269

msvcrt

??1type_info@@UAE@XZ
strpbrk
_mbsspnp
_access
_mbspbrk
memmove
_adjust_fdiv
malloc
_purecall
__CxxFrameHandler
_initterm
free
_onexit
__dllonexit
_mbsnbicmp
_mbsrchr
_CxxThrowException
_mbscmp
atoi
_mkdir

kernel32

LocalFree
lstrlenA
MultiByteToWideChar
InterlockedIncrement
GetLastError
GetFileAttributesA
CreateDirectoryA
CopyFileA
GetPrivateProfileStringA
DeleteFileA
InterlockedDecrement
lstrlenW
WideCharToMultiByte
WritePrivateProfileStringA
CreateThread
GetPrivateProfileIntA
GetExitCodeThread
TerminateThread
CloseHandle
OutputDebugStringA
LocalAlloc

user32

EnableWindow
GetDesktopWindow
PostMessageA
KillTimer
IsWindow
SendMessageA
GetParent
SetTimer
GetClientRect

ole32

OleRun
CoInitialize
CoCreateInstance

oleaut32

VariantClear
VariantInit
SysAllocString
GetErrorInfo
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString

urlmon

URLDownloadToFileA

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

wininet

InternetGetConnectedState

shlwapi

PathFileExistsA

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
CreateInst

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ArtistTenRoom.dll
.dll windows:4 windows x86 arch:x86

53cc6e3fdf9aeab1d91fd8391a3c4a74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1187
ord6215
ord4299
ord3619
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord3742
ord809
ord1641
ord556
ord3626
ord3663
ord2414
ord755
ord2379
ord2754
ord470
ord640
ord2405
ord4079
ord5787
ord6172
ord5789
ord5875
ord1640
ord323
ord2764
ord3706
ord5981
ord6358
ord5290
ord1088
ord2122
ord6128
ord5768
ord6129
ord3754
ord3753
ord3756
ord6130
ord3573
ord2393
ord6605
ord798
ord533
ord567
ord818
ord4275
ord1168
ord6442
ord2725
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord1988
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord389
ord354
ord6059
ord5207
ord5186
ord1979
ord6385
ord665
ord690
ord537
ord2818
ord535
ord5683
ord4277
ord924
ord922
ord823
ord860
ord1083
ord858
ord5621
ord803
ord825
ord501
ord540
ord543
ord773
ord800
ord5788
ord3584

msvcrt

_initterm
__CxxFrameHandler
_CxxThrowException
_mbscmp
_purecall
atoi
_except_handler3
__dllonexit
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
free
malloc

kernel32

LocalFree
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
OutputDebugStringA
WaitForSingleObject
GetExitCodeThread
TerminateThread
CloseHandle
CreateThread
LeaveCriticalSection
EnterCriticalSection
Sleep
DeleteCriticalSection
InitializeCriticalSection
GetLastError
LocalAlloc

user32

PtInRect
RegisterClassExA
DefWindowProcA
LoadCursorA
EnableWindow
SetCursor
SendMessageA
InvalidateRect
FillRect
GetClientRect
GetSystemMetrics
PostMessageA
IsWindow
IsWindowVisible

gdi32

CreatePen
CreateSolidBrush
StretchBlt
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
PtInRegion
CombineRgn
CreateFontA
CreateRectRgn
GetStockObject
CreateEllipticRgn
Rectangle
DeleteObject

comctl32

_TrackMouseEvent

ole32

CoCreateInstance
CoInitialize
OleRun

oleaut32

VariantClear
SysFreeString
SysAllocString
GetErrorInfo

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

shlwapi

PathFileExistsA

publictool

?Load@CxImageEx@@QAE_NPBDK@Z
?MakeBitmap@CxImageEx@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?GetHeight@CxImageEx@@QBEKXZ
?GetWidth@CxImageEx@@QBEKXZ
??0CxImageEx@@QAE@K@Z
??1CxImageEx@@UAE@XZ
?IsValid@CxImageEx@@QBE_NXZ

Exports

Exports

CreateArtistTenRoom

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ArtistTenRoomImage/n8.png
.png
Audio.dll
.dll windows:4 windows x86 arch:x86

f2feaa86e4eac2789c3bc59991ecdd41

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

06:2f:76:d9:b8:7a:80:10:df:25:f3:e2:05:a5:ca:98:18:d0:d1:09
Signer

Actual PE Digest

06:2f:76:d9:b8:7a:80:10:df:25:f3:e2:05:a5:ca:98:18:d0:d1:09

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LoadResource
GetModuleHandleA
FindResourceA
CreateThread
GetExitCodeThread
TerminateThread
LockResource
CloseHandle
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary

user32

PeekMessageA
PostThreadMessageA

winmm

waveInReset
waveInStop
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveInOpen
waveInUnprepareHeader
waveInAddBuffer
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek
mmioCreateChunk
mmioGetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
waveInClose
waveInPrepareHeader
waveInGetNumDevs
waveInStart

audioad

ADUninit
ADSetParam
ADDo
ADInit

msvcrt

free
malloc
strrchr
sprintf
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
_adjust_fdiv
_onexit
__dllonexit
vsprintf

Exports

Exports

?CreateAudioInObject@@YAPAVIAudioIn@@XZ
?CreateAudioOutObject@@YAPAVIAudioOut@@XZ

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AudioAD.dll
.dll windows:4 windows x86 arch:x86

66b90a60387ae3f7fd4f6a6345812ded

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:dc:5d:68:d1:fa:e5:d5:d9:53:be:15:ca:ee:c8:17:01:f0:f8
Signer

Actual PE Digest

6d:02:dc:5d:68:d1:fa:e5:d5:d9:53:be:15:ca:ee:c8:17:01:f0:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetProcAddress
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
RaiseException
CloseHandle
SetStdHandle

Exports

Exports

ADDo
ADDo_Float
ADInit
ADSetParam
ADUninit

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AudioCodec1000.dll
.dll windows:4 windows x86 arch:x86

f5b8986965f5e48f26c1ea4cbd65d424

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

12:25:6b:86:bb:83:20:20:03:8e:13:4b:03:43:f4:eb:1c:c1:b4:62
Signer

Actual PE Digest

12:25:6b:86:bb:83:20:20:03:8e:13:4b:03:43:f4:eb:1c:c1:b4:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA

msvcrt

free
malloc
exit
_ftol
_initterm
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_CIpow

acore

beInitStream
beEncodeChunk
beCloseStream

Exports

Exports

?CreateAudioDecoder1000@@YAPAVIAudioDecoder@@XZ
?CreateAudioEncoder1000@@YAPAVIAudioEncoder@@XZ

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1023B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AudioCodec2000.dll
.dll windows:4 windows x86 arch:x86

f4b50a1a29669662aef7508cb2ebafaf

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9d:3c:a4:ee:dd:68:4e:23:08:b1:3f:54:1b:83:c0:23:6a:3d:d9:94
Signer

Actual PE Digest

9d:3c:a4:ee:dd:68:4e:23:08:b1:3f:54:1b:83:c0:23:6a:3d:d9:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
malloc
free
sprintf
memset
pow
log10
fabs
floor
_ftol
abs
sqrt
ceil
log
memcpy
exp
atan
memmove
labs
cos
sin
_initterm
_adjust_fdiv
_CIpow
qsort

Exports

Exports

?CreateAudioDecoder2000@@YAPAVIAudioDecoder@@XZ
?CreateAudioEncoder2000@@YAPAVIAudioEncoder@@XZ

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AudioCodec2100.dll
.dll windows:5 windows x86 arch:x86

95c71a4addf93fec1e503611a83b4bbf

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:a5:64:05:45:45:5f:6f:6f:7c:60:c0:e8:c8:fa:3a:46:52:cb:b5
Signer

Actual PE Digest

33:a5:64:05:45:45:5f:6f:6f:7c:60:c0:e8:c8:fa:3a:46:52:cb:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Program\NewChat\Client\AV\bin\AudioCodec2100.pdb

Imports

kernel32

DecodePointer
EncodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RaiseException
GetLastError
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW

Exports

Exports

?CreateAudioDecoder2100@@YAPAVIAudioDecoder@@XZ
?CreateAudioDecoder2101@@YAPAVIAudioDecoder@@XZ
?CreateAudioEncoder2100@@YAPAVIAudioEncoder@@XZ
?CreateAudioEncoder2101@@YAPAVIAudioEncoder@@XZ

Sections

.text
Size: 449KB - Virtual size: 449KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AudioCodec3000.dll
.dll windows:5 windows x86 arch:x86

8647872061391d0b60f8da9a0db23593

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4b:ec:a2:1b:ed:cd:82:29:66:19:6d:9d:ff:58:2c:89:91:87:c0:ee
Signer

Actual PE Digest

4b:ec:a2:1b:ed:cd:82:29:66:19:6d:9d:ff:58:2c:89:91:87:c0:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Program\NewChat\Client\AV\Bin\AudioCodec3000.pdb

Imports

kernel32

DecodePointer
EncodePointer
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

?CreateAudioDecoder3000@@YAPAVIAudioDecoder@@XZ
?CreateAudioDecoder3001@@YAPAVIAudioDecoder@@XZ
?CreateAudioDecoder3002@@YAPAVIAudioDecoder@@XZ
?CreateAudioEncoder3000@@YAPAVIAudioEncoder@@XZ
?CreateAudioEncoder3001@@YAPAVIAudioEncoder@@XZ
?CreateAudioEncoder3002@@YAPAVIAudioEncoder@@XZ

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AutoDown.exe
.exe windows:4 windows x86 arch:x86

2abe3b92e6ce36ac1963a1e1e76a2456

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

77:01:d1:47:63:9b:65:b6:e7:ed:69:fe:7f:11:01:3b:a3:a3:a4:e4
Signer

Actual PE Digest

77:01:d1:47:63:9b:65:b6:e7:ed:69:fe:7f:11:01:3b:a3:a3:a4:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4998
ord4710
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord641
ord4234
ord3584
ord3402
ord3711
ord3571
ord783
ord800
ord860
ord4224
ord1146
ord1168
ord543
ord540
ord2135
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6814
ord6839
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5281
ord3748
ord1725
ord5260
ord6614
ord6691
ord4432
ord6514
ord818
ord2841
ord803
ord2302
ord4299
ord6199
ord6215
ord2112
ord2864
ord4277
ord2763
ord537
ord858
ord4129
ord5683
ord5572
ord2919
ord3663
ord2863
ord2915
ord2393
ord941
ord5356
ord5808
ord1075
ord5204
ord6059
ord3229
ord389
ord823
ord755
ord470
ord2818
ord3706
ord924
ord4853
ord2764
ord2566
ord2614
ord4133
ord4297
ord5788
ord472
ord2753
ord2107
ord922
ord535
ord5148
ord3752
ord3089
ord6128
ord3874
ord939
ord6803
ord2642
ord640
ord2405
ord5789
ord6172
ord5785
ord1640
ord323
ord5450
ord5440
ord6383
ord6394
ord6877
ord6930
ord4278
ord3790
ord5651
ord3616
ord665
ord3127
ord1979
ord6010
ord5186
ord350
ord354
ord6385
ord5645
ord5583
ord6597
ord6800
ord6478
ord6880
ord6453
ord6699
ord6835
ord1228
ord6663
ord809
ord556
ord1088
ord2122
ord3797
ord2859
ord1200
ord926
ord1949
ord4034
ord2820
ord3811
ord3626
ord825
ord567
ord1641
ord795
ord3721
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord4376
ord5265
ord1134
ord2621
ord2514
ord815
ord561
ord3738
ord4622
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord5277
ord2379
ord2385
ord6374
ord5875
ord2860
ord3619
ord4275
ord6197
ord2414
ord5163
ord5241
ord4407
ord1776
ord4078
ord4160
ord6055
ord1576

msvcrt

_XcptFilter
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
_mbsrchr
_mbsstr
strstr
_ltoa
_mbsnbicmp
vsprintf
_mbsicmp
fopen
fread
fclose
_purecall
_ftol
sprintf
_mbscmp
atol
atoi
__CxxFrameHandler
_setmbcp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit

kernel32

IsBadWritePtr
VirtualQuery
GetModuleHandleA
FormatMessageA
SetUnhandledExceptionFilter
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
CreateFileA
GetLastError
SetFilePointer
WriteFile
FlushFileBuffers
SetEvent
GetExitCodeThread
TerminateThread
CloseHandle
WaitForSingleObject
Sleep
CreateEventA
CreateThread
LeaveCriticalSection
EnterCriticalSection
CopyFileA
DeleteFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetTickCount
GetPrivateProfileStringA
OutputDebugStringA
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoA

user32

wvsprintfA
CopyIcon
FindWindowA
ReleaseDC
SetTimer
LoadIconA
LoadCursorA
SendMessageA
InflateRect
SetWindowLongA
AppendMenuA
ReleaseCapture
SetCursor
GetDC
RedrawWindow
SetCapture
MessageBeep
GetSysColor
GetParent
GetWindowRect
LoadImageA
IsWindowVisible
IsWindow
SetRect
PostMessageA
OffsetRect
PtInRect
InvalidateRect
ShowScrollBar
SetWindowRgn
MessageBoxA
KillTimer
SetWindowPos
DestroyIcon
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
EnableWindow

gdi32

GetTextExtentPoint32A
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
CreateRoundRectRgn
CreateFontA
GetObjectA
CreateFontIndirectA

advapi32

RegOpenKeyExA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteExA
Shell_NotifyIconA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

shlwapi

PathFileExistsA

ws2_32

setsockopt
recv
htons
connect
closesocket
socket
WSAGetLastError
gethostbyname
inet_addr
inet_ntoa
WSACleanup
WSAStartup
send

ddvec

?EC_File@DE_DLL@@QAEHPBD0@Z
??0DE_DLL@@QAE@XZ
??1DE_DLL@@UAE@XZ
?DC_File@DE_DLL@@QAEHPBD0@Z

ddvctrllib

??0CCressXML@@QAE@XZ
?LoadFile@CCressXML@@QAEHPBD@Z
?PaintToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HH@Z
?SelectNodeToList@CCressXML@@QAEHPBD@Z
?QueryNode@CCressXML@@QAE?AV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@H@Z
?DrawBorder@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@UtagPOINT@@UtagSIZE@@3HK@Z
?ADD_Log@CLog@@QAEXABVCString@@H@Z
?ADD_Log@CLog@@QAEXPBDHH@Z
?TransparentToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HHHHK@Z
??1CCressXML@@UAE@XZ
?loadbmpS@@YAHPBDAAVCBitmap@@@Z
?SetCurFace@CResizeButton@@QAEXPAVCBitmap@@HHH@Z
?LoadBitmapA@CResizeButton@@QAEHPBDHHH@Z
?Char2IntEx@CLibFunc@@SAHPBDPAHAAH@Z
?CharToColor@CLibFunc@@SAKPBDH@Z
??1CResizeButton@@UAE@XZ
??0CResizeButton@@QAE@XZ
?SetLogPath@CLog@@QAEXPBD0@Z
?g_Log@@3VCLog@@A
?GetAttrValueByName@CCressXML@@QAE?AVCString@@PBD@Z

wininet

InternetGetConnectedState

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Banner.xml
.xml
Banner/Default.bmp
Banner/log_close.bmp
Banner/log_min.bmp
Banner/logbg.bmp
BugReport.exe
.exe windows:4 windows x86 arch:x86

7b6d1321490b69fa9bd0e997a7bbe8f6

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c4:b2:b1:59:20:93:ad:78:35:cf:61:15:63:28:50:7d:58:88:58:2a
Signer

Actual PE Digest

c4:b2:b1:59:20:93:ad:78:35:cf:61:15:63:28:50:7d:58:88:58:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mvuilib

?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?SetHaveText@CUIButtonTemplate@@QAEX_NI@Z
?SetBtnTextColor@CUIButtonTemplate@@QAEXK@Z
?SetColor@CColorStatic@@QAEXKKK@Z
??0CUIButtonTemplate@@QAE@XZ
??1CColorStatic@@UAE@XZ
??1CUIButtonTemplate@@UAE@XZ
?SetSkinPath@CAppSysOperation@@SAXVCString@@@Z
?LoadSkin@CSkinConfContext@@QAEHVCString@@@Z
??0CSkinConfContext@@QAE@XZ
??0CColorStatic@@QAE@XZ
??1CSkinConfContext@@UAE@XZ

mfc42

ord540
ord561
ord825
ord2514
ord858
ord4278
ord2764
ord537
ord2621
ord1134
ord924
ord535
ord6877
ord2725
ord5683
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord6055
ord1776
ord5290
ord3402
ord3610
ord3571
ord860
ord823
ord1146
ord1168
ord567
ord3663
ord3626
ord2414
ord2302
ord939
ord4160
ord2863
ord2379
ord2818
ord3873
ord6215
ord536
ord2642
ord6241
ord3092
ord6199
ord1768
ord2078
ord4299
ord1641
ord6605
ord3619
ord640
ord2405
ord5875
ord2452
ord5785
ord1640
ord323
ord2754
ord2645
ord755
ord2567
ord6880
ord470
ord6283
ord6282
ord665
ord354
ord1979
ord1576
ord3318
ord5186
ord2574
ord3572
ord2575
ord4396
ord3574
ord609
ord556
ord809
ord1793
ord4275
ord2122
ord2859
ord6197
ord3706
ord815
ord800
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord656
ord5442

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
sprintf
atoi
??1type_info@@UAE@XZ
_setmbcp
_CxxThrowException
__dllonexit
_onexit
_exit
_XcptFilter
_mbscmp
exit
_acmdln
__getmainargs
_initterm
__CxxFrameHandler

kernel32

GetFileSize
GetModuleFileNameA
CreateFileA
CreateSemaphoreA
GetLastError
CloseHandle
GetCommandLineA
SetEvent
WaitForSingleObject
CreateThread
CreateEventA
GetModuleHandleA
GetStartupInfoA
WinExec
ReadFile
SetFilePointer
GlobalMemoryStatus
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
lstrlenW
lstrlenA
LocalFree
MultiByteToWideChar

user32

EnableWindow
SetCursor
GetWindowDC
InvalidateRect
ReleaseDC
GetWindowRect
SendMessageA
AppendMenuA
GetSystemMenu
PostMessageA
GetClientRect
PtInRect
LoadImageA
LoadIconA
SetWindowRgn

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetPixel
GetObjectA
CreateFontA
BitBlt
StretchBlt
SetBkColor
SetTextColor
DeleteDC
CreateRectRgn
CombineRgn
DeleteObject
CreateBitmap

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comctl32

_TrackMouseEvent

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

GetErrorInfo
SysFreeString
VariantClear
SysAllocString

ws2_32

getsockopt
setsockopt
recv
send
closesocket
socket
htons
connect
gethostname
gethostbyname
WSAGetLastError
inet_addr
WSAStartup
WSACleanup
inet_ntoa

shlwapi

PathFileExistsA
StrFormatByteSizeA
PathIsDirectoryA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ChatBmp/9158Logo.bmp
ChatBmp/AVStaticCom.bmp
ChatBmp/TenAVStaticCom.bmp
ChatBmp/TenUserNameBK.bmp
ChatBmp/UserNameBK.bmp
ChatBmp/UserNameBK1vs1.bmp
ChatBmp/UserNameBKKTV.bmp
ChatBmp/WaveBK.bmp
ColorWord/1.gif
.gif
ColorWord/10.gif
.gif
ColorWord/2.gif
.gif
ColorWord/3.gif
.gif
ColorWord/4-1.gif
.gif
ColorWord/4-2.gif
.gif
ColorWord/4-3.gif
.gif
ColorWord/4-4.gif
.gif
ColorWord/4-5.gif
.gif
ColorWord/4.gif
.gif
ColorWord/5.gif
.gif
ColorWord/6-1.gif
.gif
ColorWord/6-2.gif
.gif
ColorWord/7-1.gif
.gif
ColorWord/7-2.gif
.gif
ColorWord/7-3.gif
.gif
ColorWord/7-4.gif
.gif
ColorWord/7-5.gif
.gif
ColorWord/7-6.gif
.gif
ColorWord/7.gif
.gif
ColorWord/7101.gif
.gif
ColorWord/8.gif
.gif
ColorWord/cz12.gif
.gif
ColorWord/cz13.gif
.gif
ColorWord/e.gif
.gif
ColorWord/g.gif
.gif
ColorWord/h.gif
.gif
ColorWord/hh.gif
.gif
ColorWord/i.gif
.gif
ColorWord/l.gif
.gif
ColorWord/lai.gif
.gif
ColorWord/love.gif
.gif
ColorWord/niu.gif
.gif
ColorWord/o.gif
.gif
ColorWord/q.gif
.gif
ColorWord/qi.gif
.gif
ColorWord/s.gif
.gif
ColorWord/star1.gif
.gif
ColorWord/star2.gif
.gif
ColorWord/star3.gif
.gif
ColorWord/star_b.gif
.gif
ColorWord/star_t.gif
.gif
ColorWord/ud.gif
.gif
ColorWord/v.gif
.gif
ColorWord/word.xml
.xml
ColorWord/zan.gif
.gif
ColorWord/°ô.gif
.gif
ColorWord/ÔÞ1.gif
.gif
ColorfulFonts/1_1.bmp
ColorfulFonts/1_2.bmp
ColorfulFonts/1_3.gif
.gif
ColorfulFonts/2_1.bmp
ColorfulFonts/2_2.bmp
ColorfulFonts/2_3.gif
.gif
ColorfulFonts/3_1.bmp
ColorfulFonts/3_2.bmp
ColorfulFonts/3_3.gif
.gif
ColorfulFonts/4_1.bmp
ColorfulFonts/4_2.bmp
ColorfulFonts/4_3.gif
.gif
ColorfulFonts/5_1.bmp
ColorfulFonts/5_2.bmp
ColorfulFonts/5_3.gif
.gif
ColorfulFonts/6_1.bmp
ColorfulFonts/6_2.bmp
ColorfulFonts/6_3.gif
.gif
ColorfulFonts/colorful-words.xml
DDVCtrlLib.dll
.dll windows:4 windows x86 arch:x86

3f664f110b12b93a79332cf1c0182a6f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:af:0b:18:f4:bb:d7:af:7d:ff:52:ac:f3:aa:c6:d2:e6:9f:0d:c3
Signer

Actual PE Digest

15:af:0b:18:f4:bb:d7:af:7d:ff:52:ac:f3:aa:c6:d2:e6:9f:0d:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord6380
ord6215
ord2086
ord2614
ord860
ord2645
ord2642
ord816
ord1768
ord3920
ord562
ord4376
ord4853
ord3619
ord324
ord4234
ord3706
ord6453
ord3874
ord5261
ord2078
ord4710
ord6055
ord1776
ord5290
ord4424
ord3742
ord2753
ord2566
ord2393
ord665
ord1979
ord1567
ord5442
ord268
ord3318
ord5186
ord354
ord818
ord567
ord4275
ord2152
ord1233
ord858
ord924
ord2864
ord5981
ord2754
ord3402
ord3721
ord809
ord795
ord556
ord1088
ord2122
ord3262
ord6358
ord535
ord2859
ord6880
ord941
ord5572
ord2915
ord1200
ord926
ord1146
ord6197
ord5683
ord5873
ord4277
ord2763
ord939
ord940
ord1997
ord5465
ord798
ord5194
ord533
ord925
ord1862
ord4220
ord2584
ord3654
ord2438
ord2450
ord2971
ord4133
ord4297
ord5788
ord472
ord4083
ord2863
ord5787
ord283
ord812
ord5862
ord559
ord5710
ord5651
ord3616
ord3127
ord350
ord6385
ord4396
ord3574
ord2575
ord609
ord4284
ord3573
ord3693
ord2380
ord6199
ord470
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord323
ord1640
ord1641
ord5785
ord6172
ord5875
ord2860
ord5789
ord2818
ord2405
ord640
ord755
ord3571
ord2379
ord2302
ord540
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord4129
ord2985
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord5265
ord2414
ord641
ord3626
ord1182
ord342
ord1253
ord1168
ord800
ord537
ord823
ord825
ord3797
ord3663

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
__CxxFrameHandler
_mbsnbcpy
_CxxThrowException
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
toupper
malloc
free
_stat
fopen
fwrite
fclose
sprintf
strstr
_mbsstr
_mbsinc
_mbclen
_ftol
atoi

kernel32

GetPrivateProfileIntA
GetProcAddress
CreateFileA
WriteFile
CloseHandle
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
SizeofResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetLastError
LocalFree
GetLocalTime

user32

IsWindow
InvalidateRect
SetTimer
GetClientRect
SendMessageA
PostMessageA
CopyRect
ScreenToClient
EqualRect
GetWindowLongA
ReleaseDC
KillTimer
ClientToScreen
GetParent
GetSysColor
MessageBeep
SetCapture
SetWindowRgn
LoadIconA
DrawFocusRect
SetRect
FillRect
GetWindowTextA
DrawStateA
GetDC
EnableWindow
MessageBoxExA
DestroyIcon
AppendMenuA
GetMenuItemID
ReleaseCapture
PtInRect
SetCursor
SetWindowLongA
InflateRect
CopyIcon
LoadCursorA
GetWindowRect
GetMenuItemCount
GetMenuItemInfoA
GetSubMenu
OffsetRect
DrawIconEx
DrawEdge
GetSystemMetrics
SystemParametersInfoA
LoadImageA
LoadBitmapA
RedrawWindow

gdi32

GetPixel
CreateRectRgn
GetStockObject
GetTextExtentPoint32A
DeleteObject
DeleteDC
SetTextColor
SetBkColor
SelectObject
CreateBitmap
CreateRectRgnIndirect
GetDIBits
CombineRgn
SelectPalette
CreateDCA
GetDIBColorTable
GetBitmapBits
Rectangle
GetTextColor
CreateFontA
PatBlt
CreateDIBitmap
CreateSolidBrush
CreatePen
RoundRect
StretchBlt
GetDeviceCaps
GetObjectA
CreateFontIndirectA
CreateRoundRectRgn
CreateCompatibleDC
RealizePalette
BitBlt
CreateCompatibleBitmap

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_Draw
ImageList_GetImageInfo

ole32

StgCreateDocfileOnILockBytes
CoInitialize
CoCreateInstance
OleRun
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal

olepro32

ord251

oleaut32

SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantCopy
VariantInit
SysAllocStringLen
SysStringLen
SysAllocString
GetErrorInfo
VariantClear

winmm

sndPlaySoundA

Exports

Exports

??0CCressXML@@QAE@XZ
??0CDlgMessage@@QAE@PAVCWnd@@@Z
??0CDlgResize@@QAE@IPAVCWnd@@@Z
??0CGifBrowser@@QAE@XZ
??0CGifCore@@QAE@XZ
??0CGifPlayer@@QAE@XZ
??0CGifWnd@@QAE@XZ
??0CHash@@QAE@ABV0@@Z
??0CHash@@QAE@K@Z
??0CHash@@QAE@XZ
??0CHyperLink@@QAE@XZ
??0CLibFunc@@QAE@ABV0@@Z
??0CLibFunc@@QAE@XZ
??0CLog@@QAE@ABV0@@Z
??0CLog@@QAE@XZ
??0CMenuXP@@QAE@XZ
??0CPicture2@@QAE@ABV0@@Z
??0CPicture2@@QAE@XZ
??0CResizeBtnEx@@QAE@XZ
??0CResizeButton@@QAE@XZ
??0CXPButton@@QAE@XZ
??0CXPMenu@@QAE@XZ
??1CCressXML@@UAE@XZ
??1CDlgMessage@@UAE@XZ
??1CDlgResize@@UAE@XZ
??1CGifBrowser@@UAE@XZ
??1CGifCore@@UAE@XZ
??1CGifPlayer@@UAE@XZ
??1CGifWnd@@UAE@XZ
??1CHash@@UAE@XZ
??1CHyperLink@@UAE@XZ
??1CLibFunc@@UAE@XZ
??1CLog@@QAE@XZ
??1CMenuXP@@UAE@XZ
??1CPicture2@@UAE@XZ
??1CResizeBtnEx@@UAE@XZ
??1CResizeButton@@UAE@XZ
??1CXPButton@@UAE@XZ
??1CXPMenu@@UAE@XZ
??4CHash@@QAEAAV0@ABV0@@Z
??4CLibFunc@@QAEAAV0@ABV0@@Z
??4CLog@@QAEAAV0@ABV0@@Z
??4CPicture2@@QAEAAV0@ABV0@@Z
??_7CCressXML@@6B@
??_7CDlgMessage@@6B@
??_7CDlgResize@@6B@
??_7CGifBrowser@@6B@
??_7CGifCore@@6B@
??_7CGifPlayer@@6B@
??_7CGifWnd@@6B@
??_7CHash@@6B@
??_7CHyperLink@@6B@
??_7CLibFunc@@6B@
??_7CMenuXP@@6B@
??_7CPicture2@@6B@
??_7CResizeBtnEx@@6B@
??_7CResizeButton@@6B@
??_7CXPButton@@6B@
??_7CXPMenu@@6B@
??_FCDlgMessage@@QAEXXZ
?ADD_Log@CLog@@QAEXABVCString@@H@Z
?ADD_Log@CLog@@QAEXPBDHH@Z
?AddChild@CCressXML@@QAEXPBD0AAVCString@@1@Z
?AddChilds@CCressXML@@QAEXPBD0PAVCString@@1H@Z
?AddSideBar@CMenuXP@@QAEHPAVCMenuXPSideBar@@@Z
?AppendGiftData@CGifPlayer@@QAEPAU_GIFTANIMATEDATA@@XZ
?AppendODMenu@CMenuXP@@QAEHIPAVCMenuXPItem@@PAUtagACCEL@@@Z
?AppendODPopup@CMenuXP@@QAEHIPAVCMenu@@PAVCMenuXPItem@@@Z
?AppendSeparator@CMenuXP@@QAEHXZ
?Break@CMenuXP@@QAEXXZ
?BreakBar@CMenuXP@@QAEXXZ
?CalcWndRect@CDlgMessage@@MAEXXZ
?Char2IntEx@CLibFunc@@SAHPBDPAHAAH@Z
?Char2Point@CLibFunc@@SAHPAUtagPOINT@@PBD@Z
?Char2Rect@CLibFunc@@SAHPAUtagRECT@@PBD@Z
?Char2Size@CLibFunc@@SAHPAUtagSIZE@@PBD@Z
?CharToColor@CLibFunc@@SAKPBDH@Z
?CharToInt_16@CLibFunc@@SAJPBDH@Z
?Clear@CMenuXP@@IAEXXZ
?CopyRectFromRgn@CLibFunc@@SAXAAVCRgn@@QAUtagRECT@@@Z
?Create@CGifPlayer@@QAEHPAVCWnd@@K@Z
?Create@CGifWnd@@QAEHABUtagRECT@@PAVCWnd@@IK@Z
?CreateFontA@CLibFunc@@SAHAAVCFont@@HHPBD@Z
?CreateGradientBMP@CMenuXP@@IAEPAUHBITMAP__@@PAUHDC__@@KKHHHH@Z
?CtlColor@CHyperLink@@IAEPAUHBRUSH__@@PAVCDC@@I@Z
?CutString@CLibFunc@@SAHAAVCString@@HHH@Z
?CutString@CLibFunc@@SAHPADHHH@Z
?DefaultFont@CLibFunc@@SAPAVCFont@@XZ
?DeleteAllNode@CCressXML@@QAEXPBD0@Z
?DeleteItem@CHash@@QAEPAXJ@Z
?DeleteItem@CHash@@QAEPAXPBD@Z
?DeleteNode@CCressXML@@QAEXABVCString@@@Z
?Destroy@CHash@@QAEXXZ
?DestroyWindow@CGifPlayer@@UAEHXZ
?DoDataExchange@CDlgMessage@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CDlgResize@@MAEXPAVCDataExchange@@@Z
?DoGradientFill@CXPButton@@UAEXPAVCDC@@PAVCRect@@@Z
?Draw@CGifCore@@QAEHPAVCDC@@PBUtagRECT@@@Z
?Draw@CGifCore@@QAEHPAVCDC@@UtagPOINT@@@Z
?DrawBack@CDlgResize@@UAEXPAVCDC@@PBUtagRECT@@@Z
?DrawBackGround@CMenuXP@@MAEXPAVCDC@@VCRect@@HH@Z
?DrawBgClr@CXPMenu@@QAEXPAVCDC@@VCRect@@H@Z
?DrawBorder@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@UtagPOINT@@UtagSIZE@@3HK@Z
?DrawBorderSpecial@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@UtagPOINT@@UtagSIZE@@3HHK@Z
?DrawBtnFace@CResizeBtnEx@@UAEXPAVCDC@@UtagPOINT@@I@Z
?DrawBtnFace@CResizeButton@@UAEXPAVCDC@@UtagPOINT@@I@Z
?DrawBtnFaceEx@CResizeButton@@QAEXPAVCDC@@UtagPOINT@@1I@Z
?DrawButton@CMenuXP@@MAEXPAVCDC@@VCRect@@HHH@Z
?DrawCaption@CLibFunc@@SAXPAVCDC@@0UtagPOINT@@1HHUtagSIZE@@H@Z
?DrawCaption@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@UtagPOINT@@2HHUtagSIZE@@H@Z
?DrawCheckMark@CMenuXP@@MAEXPAVCDC@@VCRect@@H@Z
?DrawColor2GrayScale@CLibFunc@@SAXPAVCDC@@PAVCBitmap@@HH@Z
?DrawEmbossed@CMenuXP@@IAEXPAVCDC@@PAUHICON__@@VCRect@@HH@Z
?DrawFrame@CGifCore@@QAEXPAVCDC@@H@Z
?DrawHollowRect@CLibFunc@@SAXPAVCDC@@0PBUtagRECT@@1@Z
?DrawHollowRect@CLibFunc@@SAXPAVCDC@@PAVCBitmap@@PBUtagRECT@@2@Z
?DrawIcon@CMenuXP@@MAEXPAVCDC@@VCRect@@PAUHICON__@@HHH@Z
?DrawIcon@CXPMenu@@QAEXPAVCDC@@VCRect@@IIH@Z
?DrawIconArea@CMenuXP@@MAEXPAVCDC@@VCRect@@HHH@Z
?DrawImage@CXPMenu@@QAEXPAVCDC@@AAVCRect@@PAVCImageList@@HH@Z
?DrawInsideBorder@CXPButton@@UAEXPAVCDC@@PAVCRect@@@Z
?DrawItem@CMenuXP@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CResizeButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CXPButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CXPMenu@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawMenuText@CMenuXP@@MAEXAAVCDC@@VCRect@@VCString@@K@Z
?DrawNumberEx@CLibFunc@@SAXPAVCDC@@PAVCBitmap@@HHHHHHHKH@Z
?DrawSeparator@CXPMenu@@QAEXPAVCDC@@VCRect@@@Z
?DrawSideBar@CMenuXP@@MAEXPAVCDC@@VCRect@@PAUHICON__@@VCString@@@Z
?DrawTextA@CLibFunc@@SAHPAVCDC@@PBDHVCRect@@IH@Z
?DrawTextA@CMenuXP@@MAEXPAVCDC@@VCRect@@VCString@@HHH@Z
?DrawTextA@CXPMenu@@QAEXPAVCDC@@VCRect@@VCString@@@Z
?DrawTitle@CDlgResize@@MAEXPAVCDC@@@Z
?DrawTitle@CLibFunc@@SAXPAVCDC@@HHHHPAVCBitmap@@HHH@Z
?EndDialog@CDlgMessage@@IAEXH@Z
?FillRect@CMenuXP@@IAEXPAVCDC@@ABVCRect@@K@Z
?FindFirst@CHash@@QAEXH@Z
?FindGiftData@CGifPlayer@@QBEPAU_GIFTANIMATEDATA@@H@Z
?FindNext@CHash@@QAEPAXPAPAD@Z
?FindNext@CHash@@QAEPAXXZ
?FindSubMenuFromID@CMenuXP@@QAEPAV1@K@Z
?FinishedSence@CGifPlayer@@IAEXXZ
?FirstLetter@CLibFunc@@SAXHAAVCString@@@Z
?FreePictureData@CPicture2@@QAEXXZ
?GetAttrValueByName@CCressXML@@QAE?AVCString@@PBD@Z
?GetAutoSize@CHyperLink@@QBEHXZ
?GetBkColor@CGifCore@@QBEKXZ
?GetCurGifCore@CGifPlayer@@QBEPAVCGifCore@@XZ
?GetCurRgn@CGifCore@@QBEHAAVCRgn@@@Z
?GetCurTime@CLog@@QAEXAAVCString@@@Z
?GetCurrentPos@CHash@@QAEHXZ
?GetDelay@CGifCore@@QBEHXZ
?GetFirst@CHash@@QAEPAXH@Z
?GetFirst@CHash@@QAEPAXHAAHH@Z
?GetFirstLetter@CLibFunc@@SAXPBDAAVCString@@@Z
?GetFrameCount@CGifCore@@QBEHXZ
?GetFullXMLToString@CCressXML@@QAE?AVCString@@XZ
?GetHashArrayNum@CHash@@QAEKXZ
?GetHashItemNum@CHash@@QAEHXZ
?GetHeight@CResizeButton@@QBEHXZ
?GetHoverColour@CHyperLink@@QBEKXZ
?GetLinkColour@CHyperLink@@QBEKXZ
?GetLinkCursor@CHyperLink@@QBEPAUHICON__@@XZ
?GetLoadError@CCressXML@@QAEHXZ
?GetMessageMap@CDlgMessage@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CDlgResize@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CGifBrowser@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CGifPlayer@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CGifWnd@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CHyperLink@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CResizeButton@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CXPButton@@MBEPBUAFX_MSGMAP@@XZ
?GetMilliseconds@CLibFunc@@SAJABU_SYSTEMTIME@@0@Z
?GetNexNode@CCressXML@@QAE?AV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@V2@@Z
?GetNext@CHash@@QAEPAXPAPAXAAHH@Z
?GetNextBlock@CGifCore@@IBE?AW4GIFBlockTypes@1@XZ
?GetNextBlockLen@CGifCore@@IBEHXZ
?GetNextGraphicBlock@CGifCore@@IAEPAXPAI0PAUtagSIZE@@10@Z
?GetNodeNum@CCressXML@@QAEHPBD@Z
?GetNodeText@CCressXML@@QAE?AVCString@@XZ
?GetRegKey@CHyperLink@@KAJPAUHKEY__@@PBDPAD@Z
?GetRgnFromImage@CLibFunc@@SAXPAVCDC@@AAVCRgn@@PAVCBitmap@@K@Z
?GetRuntimeClass@CMenuXP@@UBEPAUCRuntimeClass@@XZ
?GetSize@CGifCore@@QBE?AUtagSIZE@@XZ
?GetSize@CPicture2@@QBE?AVCSize@@XZ
?GetSize@CResizeButton@@QBE?AUtagSIZE@@XZ
?GetSubBlocksLen@CGifCore@@IBEII@Z
?GetURL@CHyperLink@@QBE?AVCString@@XZ
?GetUnderline@CHyperLink@@QBEHXZ
?GetUpperDirectory@CLibFunc@@SAHPBDAAVCString@@H@Z
?GetValueByIndex@CCressXML@@QAE?AVCString@@H@Z
?GetValueByName@CCressXML@@QAE?AVCString@@PBD@Z
?GetVisited@CHyperLink@@QBEHXZ
?GetVisitedColour@CHyperLink@@QBEKXZ
?GetWidth@CResizeButton@@QBEHXZ
?GetXMLByName@CCressXML@@QAE?AVCString@@PBD@Z
?GetXMLToString@CCressXML@@QAE?AVCString@@XZ
?GotoURL@CHyperLink@@SAPAUHINSTANCE__@@PBDH@Z
?HashFun@CHash@@IAEKJAAK@Z
?HashFun@CHash@@IAEKPBDAAK@Z
?InitCtrlSkin@CDlgMessage@@MAEXXZ
?InitCtrlSkin@CDlgResize@@MAEXXZ
?InitItem@CDlgMessage@@IAEXXZ
?InitParam@CHash@@QAEHXZ
?InitToolTip@CResizeButton@@IAEXI@Z
?InsertItem@CHash@@QAEHJPAX@Z
?InsertItem@CHash@@QAEHPBDPAX@Z
?IsAnimatedGIF@CGifCore@@QBEHXZ
?IsGIF@CGifCore@@QBEHXZ
?IsInQueque@CGifPlayer@@IBEHHJ@Z
?IsLoadPicture@CPicture2@@QBEHXZ
?IsPlaying@CGifCore@@QBEHXZ
?IsPlaying@CGifPlayer@@QBEHXZ
?IsSubtract@CLibFunc@@SAHUtagPOINT@@UtagSIZE@@00@Z
?Load@CGifCore@@QAEHPAXK@Z
?Load@CGifCore@@QAEHPBD0@Z
?Load@CGifCore@@QAEHPBD@Z
?Load@CPicture2@@QAEHIPBD@Z
?Load@CPicture2@@QAEHVCString@@@Z
?LoadBitmapA@CResizeButton@@QAEHPBDHHH@Z
?LoadFile@CCressXML@@QAEHPBD@Z
?LoadGif@CGifWnd@@QAEHPBD@Z
?LoadGifEx@CGifBrowser@@QAEHPBDH@Z
?LoadGiftData@CGifPlayer@@QAEHPAU_GIFTANIMATEDATA@@HPBDH@Z
?LoadPictureData@CPicture2@@QAEHPBEH@Z
?LoadStringsFromFile@CLibFunc@@SAXPBDPAVCString@@H@Z
?LoadXML@CCressXML@@QAEHPBD@Z
?MeasureItem@CMenuXP@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?MeasureItem@CXPMenu@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnBtnDlgClose@CDlgResize@@IAEXXZ
?OnBtnDlgMin@CDlgResize@@IAEXXZ
?OnBtnDlgNormal@CDlgResize@@IAEXXZ
?OnCancel@CDlgMessage@@MAEXXZ
?OnClicked@CHyperLink@@IAEXXZ
?OnCloseResize@CDlgMessage@@MAEXH@Z
?OnCloseResize@CDlgResize@@MAEXH@Z
?OnCreate@CGifPlayer@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnDestroy@CDlgResize@@IAEXXZ
?OnEraseBkgnd@CDlgResize@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CGifPlayer@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CGifWnd@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CResizeButton@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CXPButton@@IAEHPAVCDC@@@Z
?OnInitDialog@CDlgMessage@@MAEHXZ
?OnInitDialog@CDlgResize@@MAEHXZ
?OnLButtonDown@CDlgMessage@@IAEXIVCPoint@@@Z
?OnMenuChar@CMenuXP@@SAJIIPAVCMenu@@@Z
?OnMouseHover@CXPButton@@IAEJIJ@Z
?OnMouseLeave@CResizeButton@@IAEJIJ@Z
?OnMouseLeave@CXPButton@@IAEJIJ@Z
?OnMouseMove@CHyperLink@@IAEXIVCPoint@@@Z
?OnMouseMove@CResizeButton@@IAEXIVCPoint@@@Z
?OnMouseMove@CXPButton@@IAEXIVCPoint@@@Z
?OnNcHitTest@CDlgResize@@IAEIVCPoint@@@Z
?OnNo@CDlgMessage@@MAEXXZ
?OnOK@CDlgMessage@@MAEXXZ
?OnPaint@CDlgMessage@@IAEXXZ
?OnPaint@CDlgResize@@IAEXXZ
?OnPaint@CGifBrowser@@IAEXXZ
?OnPaint@CGifPlayer@@IAEXXZ
?OnPaint@CGifWnd@@IAEXXZ
?OnSetCursor@CHyperLink@@IAEHPAVCWnd@@II@Z
?OnSetFocus@CGifPlayer@@IAEXPAVCWnd@@@Z
?OnSize@CDlgResize@@IAEXIHH@Z
?OnSizing@CDlgResize@@IAEXIPAUtagRECT@@@Z
?OnTimer@CDlgMessage@@IAEXI@Z
?OnTimer@CGifPlayer@@IAEXI@Z
?OnTimer@CGifWnd@@IAEXI@Z
?OnYes@CDlgMessage@@MAEXXZ
?OrientationItem@CDlgMessage@@MAEXHH@Z
?OrientationItem@CDlgResize@@MAEXHH@Z
?PaintToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HH@Z
?PaintToDC@@YAXPAVCDC@@PBUtagRECT@@PAVCBitmap@@HH@Z
?PositionWindow@CHyperLink@@IAEXXZ
?PreCreateWindow@CDlgResize@@MAEHAAUtagCREATESTRUCTA@@@Z
?PreSubclassWindow@CHyperLink@@MAEXXZ
?PreSubclassWindow@CResizeButton@@MAEXXZ
?PreSubclassWindow@CXPButton@@MAEXXZ
?PreTranslateMessage@CHyperLink@@UAEHPAUtagMSG@@@Z
?PreTranslateMessage@CResizeButton@@MAEHPAUtagMSG@@@Z
?PrepareDC@CGifCore@@IAEHHH@Z
?QueryItem@CHash@@QAEPAXJ@Z
?QueryItem@CHash@@QAEPAXPBD@Z
?QueryNode@CCressXML@@QAE?AV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@H@Z
?RemoveRectFromRgn@CLibFunc@@SAXAAVCRgn@@QAUtagRECT@@@Z
?ReplaceBtnFace@CResizeButton@@QAEHPAVCBitmap@@@Z
?ReportError@CHyperLink@@IAEXH@Z
?ResetDataPointer@CGifCore@@IAEXXZ
?ResetIconIndex@CResizeButton@@QAEXH@Z
?ResetSrcOffset@CResizeBtnEx@@QAEXUtagPOINT@@@Z
?SaveAsBitmap@CPicture2@@QAEHVCString@@@Z
?SaveBitmap2File@CLibFunc@@SAHPBDPAUHBITMAP__@@@Z
?SaveCurrentFace@@YAXPAVCDC@@AAPAVCBitmap@@HH@Z
?SaveCurrentFace@@YAXPAVCDC@@AAVCBitmap@@HH@Z
?SaveFile@CCressXML@@QAEHPBD@Z
?SelectNodeToList@CCressXML@@QAEHPBD@Z
?SelectNodeToList@CCressXML@@QAEHV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PBD@Z
?SetAttrValue@CCressXML@@QAEXPBD0@Z
?SetAutoSize@CHyperLink@@QAEXH@Z
?SetBackBitmap@CMenuXP@@QAEXPAUHBITMAP__@@@Z
?SetBackColor@CMenuXP@@QAEXK@Z
?SetBackData@CDlgResize@@QAEXPAVCBitmap@@UtagSIZE@@HK@Z
?SetBkColor@CGifBrowser@@QAEXK@Z
?SetBkColor@CGifCore@@QAEXK@Z
?SetBkColor@CGifWnd@@QAEXK@Z
?SetBoldTitle@CDlgResize@@QAEXH@Z
?SetBoldTitle@CResizeButton@@QAEXH@Z
?SetBtnText@CDlgMessage@@QAEXPBD00@Z
?SetButtonRes@CDlgMessage@@QAEXPAVCBitmap@@HHH@Z
?SetCenterPoint@CGifPlayer@@IAEXUtagPOINT@@PAVCGifCore@@@Z
?SetColours@CHyperLink@@QAEXKKK@Z
?SetCurFace@CResizeButton@@QAEXPAVCBitmap@@HHH@Z
?SetCurFaceEx@CResizeBtnEx@@QAEHPAVCBitmap@@UtagPOINT@@HHHHH@Z
?SetCurFont@CDlgResize@@QAEXPAVCFont@@@Z
?SetDefaultCursor@CHyperLink@@IAEXXZ
?SetDisabledTextColor@CMenuXP@@QAEXK@Z
?SetDrawTitle@CResizeButton@@QAEXH@Z
?SetIconAreaColor@CMenuXP@@QAEXK@Z
?SetIconBitmap@CResizeButton@@QAEXPAVCBitmap@@HHHH@Z
?SetIconBmp@CDlgResize@@QAEXPAVCBitmap@@HH@Z
?SetLinkCursor@CHyperLink@@QAEXPAUHICON__@@@Z
?SetLogPath@CLog@@QAEXPBD0@Z
?SetMenuFont@CMenuXP@@QAEHUtagLOGFONTA@@@Z
?SetMenuItemSize@CXPMenu@@QAEXHH@Z
?SetMenuItemSize@CXPMenu@@QAEXUtagSIZE@@@Z
?SetMenuStyle@CMenuXP@@QAEXW4MENUSTYLE@1@@Z
?SetModelType@CDlgMessage@@QAEXHHHH@Z
?SetMsgColor@CDlgMessage@@QAEXK@Z
?SetMsgTextIntervalBorder@CDlgMessage@@QAEXEEEE@Z
?SetPictureData@CMenuXP@@QAEXPAEH@Z
?SetPlayEffect@CGifPlayer@@QAEXH@Z
?SetPlaySound@CGifPlayer@@QAEXH@Z
?SetResPath@CGifPlayer@@QAEXPBD@Z
?SetResize@CDlgResize@@QAEXH@Z
?SetRoundRect@CDlgResize@@QAEXH@Z
?SetSelectedBarColor@CMenuXP@@QAEXK@Z
?SetSelectedTextColor@CMenuXP@@QAEXK@Z
?SetSideBarEndColor@CMenuXP@@QAEXK@Z
?SetSideBarStartColor@CMenuXP@@QAEXK@Z
?SetTextColor@CMenuXP@@QAEXK@Z
?SetTitleColor@CDlgResize@@QAEXK@Z
?SetTitleColor@CResizeButton@@QAEXK@Z
?SetTitlePoint@CDlgResize@@QAEXHH@Z
?SetToolTipText@CResizeButton@@QAEXPBDHI@Z
?SetTransparent@CResizeButton@@QAEXH@Z
?SetTransparentAlpha@CLibFunc@@SAXPAVCWnd@@EK@Z
?SetURL@CHyperLink@@QAEXVCString@@@Z
?SetUnderline@CHyperLink@@QAEXH@Z
?SetVisited@CHyperLink@@QAEXH@Z
?SetWndMinSize@CDlgResize@@QAEXUtagSIZE@@@Z
?SetXMLTitle@CCressXML@@QAEXPBD@Z
?Show@CPicture2@@QAEHPAVCDC@@HHHH@Z
?Show@CPicture2@@QAEHPAVCDC@@VCPoint@@1HH@Z
?Show@CPicture2@@QAEHPAVCDC@@VCRect@@@Z
?ShowBitmapResource@CPicture2@@QAEHPAVCDC@@HVCPoint@@@Z
?ShowMessage@CDlgMessage@@QAEHPBD0HH@Z
?ShowPart@CPicture2@@QAEHPAVCDC@@HHHHHHHH@Z
?Size2Content@CResizeButton@@QAEXXZ
?Size2Gif@CGifPlayer@@QAEXPAVCGifCore@@@Z
?SkipNextBlock@CGifCore@@IAEHXZ
?SkipNextGraphicBlock@CGifCore@@IAEHXZ
?StartPlay1@CGifPlayer@@QAEHUtagPOINT@@0HPBDHH@Z
?StartPlay3@CGifPlayer@@QAEHUtagPOINT@@0HPBDJPBJ@Z
?StartPlayEx@CGifPlayer@@QAEHUtagPOINT@@0HPBDHHHJPBJ@Z
?StepFrame@CGifCore@@QAEHXZ
?Stop@CGifCore@@QAEXXZ
?ToggleSence@CGifPlayer@@IAEXH@Z
?TransInt2Char_Comma@CLibFunc@@SAXJAAVCString@@@Z
?TransVersionA2I@CLibFunc@@SAKPBD@Z
?TransVersionI2A@CLibFunc@@SA?AVCString@@K@Z
?TransparentBMP@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@1HHHHH@Z
?TransparentBMP@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@HHHHHH@Z
?TransparentBlt2@@YAXPAUHDC__@@HHHH0HHHHI@Z
?TransparentToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HHHHK@Z
?TransparentToDC@@YAXPAVCDC@@HHPAVCBitmap@@K@Z
?TransparentToDC@@YAXPAVCDC@@UtagRECT@@PAVCBitmap@@1K@Z
?UnLoad@CGifCore@@QAEXXZ
?UpdateSizeOnDC@CPicture2@@QAEHPAVCDC@@@Z
?Visite@CHyperLink@@QAEXVCString@@@Z
?_GetBaseClass@CMenuXP@@KGPAUCRuntimeClass@@XZ
?_GetBaseMessageMap@CDlgMessage@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CDlgResize@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CGifBrowser@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CGifPlayer@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CGifWnd@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CHyperLink@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CResizeButton@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CXPButton@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@CDlgMessage@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CDlgResize@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CGifBrowser@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CGifPlayer@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CGifWnd@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CHyperLink@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CResizeButton@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CXPButton@@0QBUAFX_MSGMAP_ENTRY@@B
?classCMenuXP@CMenuXP@@2UCRuntimeClass@@B
?g_Log@@3VCLog@@A
?loadbmpS@@YAHPBDAAVCBitmap@@@Z
?loadbmpS@@YAXABVCString@@AAVCBitmap@@PAH2@Z
?loadbmpS@@YAXIAAVCBitmap@@PAH1@Z
?messageMap@CDlgMessage@@1UAFX_MSGMAP@@B
?messageMap@CDlgResize@@1UAFX_MSGMAP@@B
?messageMap@CGifBrowser@@1UAFX_MSGMAP@@B
?messageMap@CGifPlayer@@1UAFX_MSGMAP@@B
?messageMap@CGifWnd@@1UAFX_MSGMAP@@B
?messageMap@CHyperLink@@1UAFX_MSGMAP@@B
?messageMap@CResizeButton@@1UAFX_MSGMAP@@B
?messageMap@CXPButton@@1UAFX_MSGMAP@@B

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DDVEC.dll
.dll windows:4 windows x86 arch:x86

ca5fb99e980e62a1857a755349a73a5c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e9:63:54:19:91:42:77:c8:5e:a9:eb:9f:1d:65:f1:f3:35:22:ca:86
Signer

Actual PE Digest

e9:63:54:19:91:42:77:c8:5e:a9:eb:9f:1d:65:f1:f3:35:22:ca:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord4486
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord800
ord860
ord540
ord354
ord823
ord2915
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6375
ord3831
ord4274
ord269
ord826
ord600
ord1578
ord6467
ord1116

msvcrt

??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
__CxxFrameHandler

kernel32

LocalFree
LocalAlloc

Exports

Exports

??0DE_DLL@@QAE@ABV0@@Z
??0DE_DLL@@QAE@XZ
??1DE_DLL@@UAE@XZ
??4DE_DLL@@QAEAAV0@ABV0@@Z
??_7DE_DLL@@6B@
?DC_File@DE_DLL@@QAEHPBD0@Z
?EC_File@DE_DLL@@QAEHPBD0@Z

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DDVInstall/Client.ini
DDVInstall/DDVInstall.exe
.exe windows:4 windows x86 arch:x86

f3dbec2f081fd1b303ae293dead8c461

Code Sign

3c:91:31:cb:1f:f6:d0:1b:0e:9a:b8:d0:44:bf:12:be
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

02/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:cd:2b:e9:a7:d4:48:84:39:c3:df:8b:4d:d2:e8:ef
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

13/08/2009, 00:00

Not After

12/08/2012, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

fb:f9:45:6c:dd:15:61:4a:8f:8b:96:d1:f3:26:02:09:c9:57:3e:0a
Signer

Actual PE Digest

fb:f9:45:6c:dd:15:61:4a:8f:8b:96:d1:f3:26:02:09:c9:57:3e:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
send
gethostbyname
inet_addr
htons
connect
closesocket
socket
WSAGetLastError
setsockopt
WSAStartup

mfc42

ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord3571
ord3626
ord3663
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6814
ord6839
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord4078
ord1776
ord4407
ord2385
ord5163
ord6374
ord4353
ord5281
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3748
ord5065
ord1725
ord5260
ord2446
ord6614
ord5277
ord6691
ord4627
ord4432
ord641
ord6514
ord795
ord609
ord800
ord2414
ord2514
ord2621
ord1134
ord537
ord5265
ord4376
ord4853
ord4998
ord4710
ord4698
ord1775
ord5241
ord5280
ord3749
ord1727
ord5261
ord2124
ord4425
ord3597
ord324
ord4234
ord2574
ord3572
ord2575
ord4396
ord3574
ord6055
ord5290
ord3402
ord3721
ord1641
ord323
ord823
ord4224
ord1146
ord1168
ord860
ord567
ord540
ord2370
ord2302
ord3619
ord6334
ord535
ord6217
ord6241
ord4148
ord2642
ord3092
ord6215
ord6199
ord926
ord1576
ord6880
ord4299
ord2818
ord2915
ord924
ord858
ord4129
ord5683
ord5572
ord2919
ord4160
ord2863
ord2379
ord755
ord640
ord2405
ord5785
ord1640
ord470
ord1979
ord6385
ord665
ord2859
ord5186
ord354
ord1105
ord5875
ord3089
ord4476
ord6605
ord3499
ord2515
ord355
ord6597
ord6800
ord6478
ord6453
ord6699
ord6835
ord2864
ord1228
ord2614
ord4278
ord6663
ord809
ord556
ord4275
ord1088
ord2122
ord2860
ord3874
ord3797
ord6358
ord6197
ord941
ord1200
ord3698
ord765
ord3706
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord6172
ord5781
ord2754
ord6194
ord1929
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord6052
ord6803

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
_mbsnbcpy
_mbscmp
_mbsstr
strstr
_ltoa
atoi
_mbsicmp
_mbsnbicmp
_ftol
exit
__CxxFrameHandler
_setmbcp

kernel32

GetPrivateProfileStringA
GetModuleFileNameA
Sleep
GetTickCount
DeleteFileA
GetTempPathA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
GetModuleHandleA
GetStartupInfoA
GetPrivateProfileIntA

user32

PostMessageA
LoadIconA
GetSystemMetrics
LoadImageA
SendMessageA
AppendMenuA
GetSystemMenu
GetClientRect
MessageBoxA
GetDC
PtInRect
GetParent
GetSysColor
MessageBeep
SetCapture
RedrawWindow
ReleaseCapture
SetCursor
SetWindowLongA
IsWindow
InvalidateRect
InflateRect
ReleaseDC
CopyIcon
LoadCursorA
TabbedTextOutA
DrawTextA
GrayStringA
LoadBitmapA
EnableWindow
GetWindowRect

gdi32

CreateCompatibleBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontA
CreateRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
CreateCompatibleDC
GetObjectA
StretchBlt
BitBlt
SelectObject

advapi32

RegOpenKeyExA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DDVInstall/Http.dll
.dll windows:4 windows x86 arch:x86

377321258a0eab2781b024060dd66131

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

setsockopt
closesocket
recv
send
gethostbyname
htons
connect
getprotobyname
socket
WSAStartup
WSACleanup

mfc42

ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord1575
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord1116
ord1200
ord561
ord825
ord2725
ord800
ord4278
ord6663
ord860
ord540
ord6467
ord1578
ord600
ord826
ord269
ord1176
ord3259
ord815

msvcrt

?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_except_handler3
_onexit
__dllonexit
__CxxFrameHandler
sprintf
??2@YAPAXI@Z
atoi
_ltoa

kernel32

LocalFree
LocalAlloc

user32

MessageBoxA

Exports

Exports

??0CHttpSocket@@QAE@ABV0@@Z
??0CHttpSocket@@QAE@XZ
??1CHttpSocket@@UAE@XZ
??4CHttpSocket@@QAEAAV0@ABV0@@Z
??_7CHttpSocket@@6B@
?CloseSocket@CHttpSocket@@QAEHXZ
?Connect@CHttpSocket@@QAEHPADH@Z
?FormatRequestHeader@CHttpSocket@@QAEPBDPAD0AAJ00JJH@Z
?GetField@CHttpSocket@@QAEHPBDPADH@Z
?GetRequestHeader@CHttpSocket@@QBEHPADH@Z
?GetResponseHeader@CHttpSocket@@QAEPBDAAH@Z
?GetResponseLine@CHttpSocket@@QAEHPADH@Z
?GetServerState@CHttpSocket@@QAEHXZ
?Receive@CHttpSocket@@QAEJPADJ@Z
?SendRequest@CHttpSocket@@QAEHPBDJ@Z
?SetTimeout@CHttpSocket@@QAEHHH@Z
?Socket@CHttpSocket@@QAEHXZ

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 642B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DDVInstall/res/91555game.ico
DDVInstall/res/9158.ico
DDVInstall/res/9158vv.ico
DDVInstall/res/b_logo_1.bmp
DDVInstall/res/b_logo_2.bmp
DDVInstall/res/b_logo_3.bmp
DDVInstall/res/logo_1.bmp
DDVInstall/res/logo_2.bmp
DDVInstall/res/logo_3.bmp
DownLoad.exe
.exe windows:4 windows x86 arch:x86

050e27cd4d6ca90ab2b893bf70980901

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a2:fb:be:0f:5c:60:44:04:a7:16:8c:41:2d:bb:be:e0:07:5c:e7:f6
Signer

Actual PE Digest

a2:fb:be:0f:5c:60:44:04:a7:16:8c:41:2d:bb:be:e0:07:5c:e7:f6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4998
ord4710
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord641
ord4234
ord3584
ord3402
ord3711
ord3571
ord783
ord800
ord860
ord4224
ord1146
ord1168
ord543
ord540
ord2135
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6814
ord6839
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5281
ord3748
ord1725
ord5260
ord6614
ord6691
ord4432
ord6514
ord818
ord2841
ord803
ord2302
ord2614
ord2107
ord535
ord4299
ord6199
ord6215
ord2112
ord2864
ord4277
ord2763
ord537
ord858
ord4129
ord3663
ord5572
ord2919
ord4160
ord2863
ord2915
ord2393
ord941
ord5356
ord5808
ord1075
ord5204
ord6059
ord3229
ord389
ord823
ord755
ord470
ord4853
ord3706
ord924
ord6197
ord2764
ord2566
ord4133
ord4297
ord5788
ord472
ord2753
ord922
ord5148
ord3752
ord3089
ord6128
ord3874
ord939
ord6803
ord2642
ord640
ord2405
ord5789
ord6172
ord5785
ord1640
ord323
ord5450
ord5440
ord6383
ord6394
ord6877
ord6930
ord4278
ord3790
ord5651
ord3616
ord665
ord3127
ord1979
ord6010
ord5186
ord350
ord354
ord6385
ord5645
ord5583
ord6597
ord6800
ord6478
ord6880
ord6453
ord6699
ord6835
ord1228
ord6663
ord809
ord556
ord1088
ord2122
ord3797
ord2859
ord1200
ord926
ord1949
ord4034
ord2820
ord3811
ord3626
ord825
ord567
ord1641
ord795
ord3721
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord4376
ord5265
ord1134
ord2621
ord2514
ord815
ord561
ord3738
ord4622
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord5277
ord2379
ord2385
ord6374
ord5875
ord2860
ord3619
ord4275
ord2818
ord2414
ord5163
ord5241
ord4407
ord1776
ord4078
ord5683
ord6055
ord1576

msvcrt

_XcptFilter
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
_mbsrchr
_mbsstr
strstr
_ltoa
_mbsnbicmp
_vsnprintf
_mbsicmp
fopen
fread
fclose
_purecall
_ftol
sprintf
_mbscmp
atol
atoi
__CxxFrameHandler
_setmbcp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit

kernel32

IsBadWritePtr
VirtualQuery
GetModuleHandleA
FormatMessageA
SetUnhandledExceptionFilter
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
CreateFileA
GetLastError
SetFilePointer
WriteFile
FlushFileBuffers
SetEvent
GetExitCodeThread
TerminateThread
CloseHandle
WaitForSingleObject
Sleep
CreateEventA
CreateThread
LeaveCriticalSection
EnterCriticalSection
CopyFileA
DeleteFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetTickCount
GetPrivateProfileStringA
OutputDebugStringA
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoA

user32

wvsprintfA
CopyIcon
FindWindowA
ReleaseDC
SetTimer
LoadIconA
LoadCursorA
SendMessageA
InflateRect
SetWindowLongA
AppendMenuA
ReleaseCapture
SetCursor
GetDC
RedrawWindow
SetCapture
MessageBeep
GetSysColor
GetParent
GetWindowRect
LoadImageA
IsWindowVisible
IsWindow
SetRect
PostMessageA
OffsetRect
PtInRect
InvalidateRect
ShowScrollBar
SetWindowRgn
MessageBoxA
KillTimer
SetWindowPos
DestroyIcon
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
EnableWindow

gdi32

GetTextExtentPoint32A
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
CreateRoundRectRgn
CreateFontA
GetObjectA
CreateFontIndirectA

advapi32

RegOpenKeyExA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteExA
Shell_NotifyIconA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

shlwapi

PathFileExistsA

ws2_32

setsockopt
recv
htons
connect
closesocket
socket
WSAGetLastError
gethostbyname
inet_addr
inet_ntoa
WSACleanup
WSAStartup
send

ddvec

?EC_File@DE_DLL@@QAEHPBD0@Z
??0DE_DLL@@QAE@XZ
??1DE_DLL@@UAE@XZ
?DC_File@DE_DLL@@QAEHPBD0@Z

ddvctrllib

??0CCressXML@@QAE@XZ
?LoadFile@CCressXML@@QAEHPBD@Z
?PaintToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HH@Z
?SelectNodeToList@CCressXML@@QAEHPBD@Z
?QueryNode@CCressXML@@QAE?AV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@H@Z
?DrawBorder@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@UtagPOINT@@UtagSIZE@@3HK@Z
?ADD_Log@CLog@@QAEXABVCString@@H@Z
?ADD_Log@CLog@@QAEXPBDHH@Z
?TransparentToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HHHHK@Z
??1CCressXML@@UAE@XZ
?loadbmpS@@YAHPBDAAVCBitmap@@@Z
?SetCurFace@CResizeButton@@QAEXPAVCBitmap@@HHH@Z
?LoadBitmapA@CResizeButton@@QAEHPBDHHH@Z
?Char2IntEx@CLibFunc@@SAHPBDPAHAAH@Z
?CharToColor@CLibFunc@@SAKPBDH@Z
??1CResizeButton@@UAE@XZ
??0CResizeButton@@QAE@XZ
?SetLogPath@CLog@@QAEXPBD0@Z
?g_Log@@3VCLog@@A
?GetAttrValueByName@CCressXML@@QAE?AVCString@@PBD@Z

wininet

InternetGetConnectedState

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DynamicEffects.dll
.dll windows:4 windows x86 arch:x86

8f7bb661837776f7e6019a7372f9af2d

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

b2:6a:49:31:f5:e2:89:49:bb:21:e3:08:88:25:34:7d:ca:53:5f:e2
Signer

Actual PE Digest

b2:6a:49:31:f5:e2:89:49:bb:21:e3:08:88:25:34:7d:ca:53:5f:e2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

PlaySoundW

mfc42

ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord825
ord1105
ord800
ord823
ord2818
ord537
ord3402
ord3742
ord818
ord540
ord567
ord858
ord6442
ord1233
ord4275
ord535
ord2379
ord1200
ord860
ord941
ord4299
ord4278
ord3584
ord543
ord803
ord924
ord2614
ord922
ord6215
ord539
ord923
ord2864
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord3830
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord3953
ord5683
ord2725
ord1187
ord6605
ord798
ord1997
ord6392
ord5194
ord533
ord4129
ord1949
ord1168
ord4277
ord2764
ord6453
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord1116
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord1176
ord5199

msvcrt

free
_initterm
malloc
_adjust_fdiv
?terminate@@YAXXZ
_except_handler3
_CIpow
time
srand
rand
atoi
_ftol
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_beginthreadex
wcscpy
_onexit
__dllonexit
??1type_info@@UAE@XZ
_EH_prolog
exit
localtime
strftime
puts
_purecall
__CxxFrameHandler
_mbscmp

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
WaitForSingleObject
GetExitCodeThread
TerminateThread
OutputDebugStringA
lstrlenA
CreateDirectoryA
GetVersionExA
GetPrivateProfileIntA
WritePrivateProfileStringA
LocalFree
LocalAlloc
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
CreateThread
CloseHandle
MultiByteToWideChar
GetFileAttributesA

user32

SetWindowPos
DefWindowProcA
GetClassInfoExA
UnregisterClassA
RegisterClassExA
LoadCursorA
SetCursor
GetWindowRect
GetCursorPos
ScreenToClient
PtInRect
GetDesktopWindow
IsWindowVisible
SetRectEmpty
IsWindow
PostMessageA
GetClientRect
IsIconic
KillTimer
GetWindowLongA
SetWindowLongA
EnableWindow
SetTimer
GetDC
ReleaseDC
CopyRect

gdi32

DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt

comctl32

_TrackMouseEvent

ole32

StgIsStorageFile
StgOpenStorage
StringFromGUID2
CoTaskMemFree

gdiplus

GdipGetPropertySize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipImageSelectActiveFrame
GdipAddPathString
GdipSetSolidFillColor
GdipSetPenColor
GdipDrawImageI
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRectI
GdipScaleWorldTransform
GdipGetPropertyItem
GdipDrawImageRectRect
GdipDrawImageRectI
GdipCloneImage
GdipCloneBrush
GdipDisposeImage
GdipFree
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipCreateFontFamilyFromName
GdipCreateStringFormat
GdipCreatePen1
GdipSetPenLineJoin
GdipCreatePath
GdipAddPathStringI
GdipDrawPath
GdipFillPath
GdipDeletePath
GdipDeleteBrush
GdipDeletePen
GdipDeleteStringFormat
GdipDeleteFontFamily
GdipCreateFromHDC
GdipDrawImageRect
GdipReleaseDC
GdipDeleteGraphics
GdipAlloc
GdipLoadImageFromFile
GdipCreateSolidFill

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0logic_error@std@@QAE@ABV01@@Z

shlwapi

PathFileExistsW

msimg32

AlphaBlend

Exports

Exports

CreateDEManage

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DynamicEffects/BalloonEffect/balloon/smallballoon.png
.png
DynamicEffects/BalloonEffect/balloon/treadballoon1.png
.png
DynamicEffects/BalloonEffect/balloon/treadballoon2.png
.png
DynamicEffects/BalloonEffect/balloon/treadballoon3.png
.png
DynamicEffects/BalloonEffect/bigballoon/push27.png
.png
DynamicEffects/BalloonEffect/bigballoon/push28.png
.png
DynamicEffects/BalloonEffect/bigballoon/push29.png
.png
DynamicEffects/BalloonEffect/bigballoon/push30.png
.png
DynamicEffects/BalloonEffect/bigballoon/push31.png
.png
DynamicEffects/BalloonEffect/bigballoon/push32.png
.png
DynamicEffects/BalloonEffect/bigballoon/push33.png
.png
DynamicEffects/BalloonEffect/bigballoon/push34.png
.png
DynamicEffects/BalloonEffect/bigballoon/push35.png
.png
DynamicEffects/BalloonEffect/bigballoon/push36.png
.png
DynamicEffects/BalloonEffect/bigballoon/push37.png
.png
DynamicEffects/BalloonEffect/bigballoon/push38.png
.png
DynamicEffects/BalloonEffect/bigballoon/push39.png
.png
DynamicEffects/BalloonEffect/bigballoon/push40.png
.png
DynamicEffects/BalloonEffect/bigballoon/push41.png
.png
DynamicEffects/BalloonEffect/bigballoon/push42.png
.png
DynamicEffects/BalloonEffect/bigballoon/push43.png
.png
DynamicEffects/BalloonEffect/bigballoon/push44.png
.png
DynamicEffects/BalloonEffect/smallballoon/push1.png
.png
DynamicEffects/BalloonEffect/smallballoon/push10.png
.png
DynamicEffects/BalloonEffect/smallballoon/push11.png
.png
DynamicEffects/BalloonEffect/smallballoon/push12.png
.png
DynamicEffects/BalloonEffect/smallballoon/push13.png
.png
DynamicEffects/BalloonEffect/smallballoon/push14.png
.png
DynamicEffects/BalloonEffect/smallballoon/push15.png
.png
DynamicEffects/BalloonEffect/smallballoon/push16.png
.png
DynamicEffects/BalloonEffect/smallballoon/push17.png
.png
DynamicEffects/BalloonEffect/smallballoon/push18.png
.png
DynamicEffects/BalloonEffect/smallballoon/push19.png
.png
DynamicEffects/BalloonEffect/smallballoon/push2.png
.png
DynamicEffects/BalloonEffect/smallballoon/push20.png
.png
DynamicEffects/BalloonEffect/smallballoon/push21.png
.png
DynamicEffects/BalloonEffect/smallballoon/push22.png
.png
DynamicEffects/BalloonEffect/smallballoon/push23.png
.png
DynamicEffects/BalloonEffect/smallballoon/push24.png
.png
DynamicEffects/BalloonEffect/smallballoon/push25.png
.png
DynamicEffects/BalloonEffect/smallballoon/push26.png
.png
DynamicEffects/BalloonEffect/smallballoon/push3.png
.png
DynamicEffects/BalloonEffect/smallballoon/push4.png
.png
DynamicEffects/BalloonEffect/smallballoon/push5.png
.png
DynamicEffects/BalloonEffect/smallballoon/push6.png
.png
DynamicEffects/BalloonEffect/smallballoon/push7.png
.png
DynamicEffects/BalloonEffect/smallballoon/push8.png
.png
DynamicEffects/BalloonEffect/smallballoon/push9.png
.png
DynamicEffects/Bomb/Advanced/bomb1.png
.png
DynamicEffects/Bomb/Advanced/bomb2.png
.png
DynamicEffects/Bomb/Advanced/bomb3.png
.png
DynamicEffects/Bomb/Advanced/bomb4.png
.png
DynamicEffects/Bomb/CommonBomb/bomb1.png
.png
DynamicEffects/Bomb/CommonBomb/bomb2.png
.png
DynamicEffects/Bomb/CommonBomb/bomb3.png
.png
DynamicEffects/Bomb/CommonBomb/bomb4.png
.png
DynamicEffects/Bomb/Public/bomb10.png
.png
DynamicEffects/Bomb/Public/bomb11.png
.png
DynamicEffects/Bomb/Public/bomb12.png
.png
DynamicEffects/Bomb/Public/bomb13.png
.png
DynamicEffects/Bomb/Public/bomb5.png
.png
DynamicEffects/Bomb/Public/bomb6.png
.png
DynamicEffects/Bomb/Public/bomb7.png
.png
DynamicEffects/Bomb/Public/bomb8.png
.png
DynamicEffects/Bomb/Public/bomb9.png
.png
DynamicEffects/Bomb/super/bomb1.png
.png
DynamicEffects/Bomb/super/bomb2.png
.png
DynamicEffects/Bomb/super/bomb3.png
.png
DynamicEffects/Bomb/super/bomb4.png
.png
DynamicEffects/CaiTiao1.png
.png
DynamicEffects/CaiTiao2.png
.png
DynamicEffects/Close.png
.png
DynamicEffects/Effect/BK0.png
.png
DynamicEffects/Effect/BK1.png
.png
DynamicEffects/Effect/BK2.png
.png
DynamicEffects/Effect/common0.png
.png
DynamicEffects/Effect/common1.png
.png
DynamicEffects/Effect/common2.png
.png
DynamicEffects/Effect/common3.png
.png
DynamicEffects/Effect/light/light1.png
.png
DynamicEffects/Effect/light/light2.png
.png
DynamicEffects/Effect/light/light3.png
.png
DynamicEffects/Effect/light/light4.png
.png
DynamicEffects/Effect/light/light5.png
.png
DynamicEffects/Effect/light/light6.png
.png
DynamicEffects/Effect/light/light7.png
.png
DynamicEffects/Everlasting/a1.png
.png
DynamicEffects/Everlasting/a2.png
.png
DynamicEffects/Everlasting/a3.png
.png
DynamicEffects/Everlasting/a4.png
.png
DynamicEffects/PleaseOpenSound.png
.png
DynamicEffects/numeral.png
.png
DynamicEffects/pickfiretips.png
.png
DynamicEffects/superprizepicture/0.png
.png
DynamicEffects/superprizepicture/1.png
.png
DynamicEffects/superprizepicture/2.png
.png
DynamicEffects/superprizepicture/3.png
.png
DynamicEffects/superprizepicture/4.png
.png
DynamicEffects/superprizepicture/5.png
.png
DynamicEffects/unignited.png
.png
DynamicEffects/unignitedBk.png
.png
Effect/n8.png
.png
Fruit/1.bmp
Fruit/2.bmp
Fruit/3.bmp
Fruit/4.bmp
Fruit/5.bmp
Fruit/fruit.xml
.xml
GameLobby/Jibie.ini
GameLobby/ddvGame.ini
GdiPlus.dll
.dll windows:5 windows x86 arch:x86

7d265bc0350ed04fb2dffec878eb283e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4f:21:6f:50:43:4f:dc:23:ce:8b:e1:62:57:83:73:c8:51:09:06:d7
Signer

Actual PE Digest

4f:21:6f:50:43:4f:dc:23:ce:8b:e1:62:57:83:73:c8:51:09:06:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MicrosoftWindowsGdiPlus-1.0.2600.2180-gdiplus.pdb

Imports

kernel32

CreateSemaphoreA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
RaiseException
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
VirtualQuery
RtlUnwind
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
SearchPathA
GetOEMCP
InterlockedIncrement
LoadLibraryW
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy
LoadLibraryA
GetVersionExA
GetACP
GetModuleHandleW
GetProcAddress
GetSystemDefaultLCID

user32

MsgWaitForMultipleObjects
LoadBitmapW
LoadBitmapA
wsprintfW
ReleaseDC
GetDC
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
ClientToScreen
wvsprintfA
CreateIconIndirect
GetIconInfo
GetDCEx
GetWindowLongA
GetClassLongA
SystemParametersInfoA

gdi32

GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
PolyPolyline
GetNearestPaletteIndex
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
SetDIBColorTable
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
GetWindowExtEx
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt
CreateBrushIndirect
SetDIBits

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegOpenKeyW
RegOpenKeyA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExW
RegSetValueExA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegEnumValueA

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Guide/LoginGuide/AnchorWhisperUIXml.xml
.xml
Guide/LoginGuide/AudioSelectUIXml.xml
.xml
Guide/LoginGuide/AuditionUIXml.xml
.xml
Guide/LoginGuide/BeerFriedChickenUIXml.xml
.xml
Guide/LoginGuide/Carefor(9158)UIXml.xml
.xml
Guide/LoginGuide/Carefor(t58)UIXml.xml
.xml
Guide/LoginGuide/CityWideUIXml.xml
.xml
Guide/LoginGuide/DancingRoomUIXml.xml
.xml
Guide/LoginGuide/FavoriteUIXml.xml
.xml
Guide/LoginGuide/FreeUpMicUIXml.xml
.xml
Guide/LoginGuide/LeaveRoomUIXml.xml
.xml
Guide/LoginGuide/LineUpToSingUIXml.xml
.xml
Guide/LoginGuide/LoginReceiveUIXml.xml
.xml
Guide/LoginGuide/MicListUIXml.xml
.xml
Guide/LoginGuide/MicUIXml.xml
.xml
Guide/LoginGuide/OfficialUIXml.xml
.xml
Guide/LoginGuide/PayUIXml.xml
.xml
Guide/LoginGuide/PresentUIXml.xml
.xml
Guide/LoginGuide/QQLoginUIXml.xml
.xml
Guide/LoginGuide/RoomImpressionUIXml.xml
.xml
Guide/LoginGuide/SendColorBar(Mask)UIXml.xml
.xml
Guide/LoginGuide/SendColorBarUIXml.xml
.xml
Guide/LoginGuide/ShotUIXMl.xml
.xml
Guide/LoginGuide/SongFriendsUpMicUIXml.xml
.xml
Guide/LoginGuide/SongUIXml.xml
.xml
Guide/LoginGuide/TalkingRoomUIXml.xml
.xml
Guide/LoginGuide/TrainingSingUIXml.xml
.xml
Guide/LoginGuide/TwoMicRoom(MicList)UIXml.xml
.xml
Guide/LoginGuide/UserWhisperUIXml.xml
.xml
Guide/LoginGuide/audition.png
.png
Guide/LoginGuide/beerfriedchiken.png
.png
Guide/LoginGuide/btn_close.png
.png
Guide/LoginGuide/btn_skip.png
.png
Guide/LoginGuide/busroom_line_up_mic(mask).png
.png
Guide/LoginGuide/care_for_9158_listen.png
.png
Guide/LoginGuide/care_for_9158_sing.png
.png
Guide/LoginGuide/care_for_9158_talk.png
.png
Guide/LoginGuide/care_for_bkg(mask).png
.png
Guide/LoginGuide/care_for_t58_dance.png
.png
Guide/LoginGuide/city_wide(mask).png
.png
Guide/LoginGuide/color_bar(mask).png
.png
Guide/LoginGuide/color_bar.png
.png
Guide/LoginGuide/color_bar00(mask).png
.png
Guide/LoginGuide/color_bar01(mask).png
.png
Guide/LoginGuide/color_bar02(mask).png
.png
Guide/LoginGuide/color_bar03(mask).png
.png
Guide/LoginGuide/color_bar04(mask).png
.png
Guide/LoginGuide/color_bar_mask.png
.png
Guide/LoginGuide/dancing_room_01(mask).png
.png
Guide/LoginGuide/dancing_room_02(mask).png
.png
Guide/LoginGuide/dancing_room_03(mask).png
.png
Guide/LoginGuide/free_up_mic_01(mask).png
.png
Guide/LoginGuide/free_up_mic_02(mask).png
.png
Guide/LoginGuide/give_in_return.png
.png
Guide/LoginGuide/impression_guide.png
.png
Guide/LoginGuide/island_agent_whisper.png
.png
Guide/LoginGuide/leave_room(mask).png
.png
Guide/LoginGuide/line_up_mic(mask).png
.png
Guide/LoginGuide/line_up_number.png
.png
Guide/LoginGuide/line_up_to_sing_bkg(mask).png
.png
Guide/LoginGuide/line_up_to_sing_btn(mask).png
.png
Guide/LoginGuide/line_up_to_sing_tip(mask).png
.png
Guide/LoginGuide/loadingbkg(mask).png
.png
Guide/LoginGuide/login_receive(mask).png
.png
Guide/LoginGuide/mask.png
.png
Guide/LoginGuide/mask_2.png
.png
Guide/LoginGuide/mic_list_pos.png
.png
Guide/LoginGuide/mic_list_pos_2mic.png
.png
Guide/LoginGuide/nevernotice.png
.png
Guide/LoginGuide/nevernotice2.png
.png
Guide/LoginGuide/pay.png
.png
Guide/LoginGuide/percent_number.png
.png
Guide/LoginGuide/present_info.png
.png
Guide/LoginGuide/progressbar.png
.png
Guide/LoginGuide/qq_login(mask).png
.png
Guide/LoginGuide/remote_music_01(mask).png
.png
Guide/LoginGuide/remote_music_02(mask).png
.png
Guide/LoginGuide/remote_music_03(mask).png
.png
Guide/LoginGuide/remote_music_04(mask).png
.png
Guide/LoginGuide/reward_number.png
.png
Guide/LoginGuide/save_room_bkg(mask).png
.png
Guide/LoginGuide/save_room_bkg_success(mask).png
.png
Guide/LoginGuide/select_check_audio(save_room).png
.png
Guide/LoginGuide/select_old_user.png
.png
Guide/LoginGuide/shot(mask).png
.png
Guide/LoginGuide/song_friends_up_mic.png
.png
Guide/LoginGuide/talking_room_01(mask).png
.png
Guide/LoginGuide/talking_room_02(mask).png
.png
Guide/LoginGuide/training_sing_01(mask).png
.png
Guide/LoginGuide/training_sing_02(mask).png
.png
Guide/LoginGuide/user_achor_whisper.png
.png
Guide/LoginGuide/user_whisper.png
.png
Guide/WizardDll.dll
.dll windows:4 windows x86 arch:x86

6de4970986022cdf2c92eda23dae54bc

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:c9:48:64:46:4c:e0:a5:ac:de:f0:7d:38:c1:bb:5d:8d:56:6b:b3
Signer

Actual PE Digest

1a:c9:48:64:46:4c:e0:a5:ac:de:f0:7d:38:c1:bb:5d:8d:56:6b:b3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3147
ord3259
ord4465
ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord567
ord818
ord2688
ord2864
ord3136
ord2135
ord1949
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord2982
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord2725
ord3953
ord5683
ord1187
ord3584
ord773
ord543
ord501
ord803
ord5621
ord1083
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord825
ord6055
ord1168
ord6215
ord2152
ord922
ord4278
ord537
ord3663
ord4129
ord5710
ord2818
ord924
ord535
ord2764
ord823
ord540
ord860
ord858
ord800
ord5302

msvcrt

_CxxThrowException
atoi
_mbscmp
__CxxFrameHandler
wcscpy
atof
wcslen
_ftol
_adjust_fdiv
exit
_purecall
sprintf
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_CIpow
free
malloc
_initterm

kernel32

SetEvent
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
GetModuleFileNameA
EnterCriticalSection
VirtualQuery
WaitForSingleObject
TerminateThread
CloseHandle
GetExitCodeThread
CreateThread
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
OutputDebugStringA
Sleep
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrlenA
MultiByteToWideChar
LeaveCriticalSection
LocalFree
LocalAlloc
GetTickCount

user32

DefWindowProcA
GetCursorPos
SetTimer
EnableWindow
ReleaseDC
MoveWindow
ClientToScreen
SendMessageA
LoadCursorA
GetDC
GetWindowRect
DestroyWindow
IsWindow
IsIconic
IsWindowVisible
PtInRect
CopyRect
SetCursor
PostMessageA
GetParent
ShowWindow
SetWindowLongA
GetWindowLongA
SetRectEmpty
KillTimer
ScreenToClient
RegisterClassExA
PostQuitMessage
GetClientRect
UnregisterClassA
GetClassInfoExA
SetWindowPos
CreateWindowExA

gdi32

DeleteObject
BitBlt
SelectObject
CreateBitmap
CreateDIBSection
CreateCompatibleDC
DeleteDC

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

SysAllocString
VariantInit
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantChangeType
GetErrorInfo

gdiplus

GdipDrawImageRectI
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDeleteGraphics
GdipReleaseDC
GdipCreatePath
GdipCreatePen1
GdipCreateFontFamilyFromName
GdipAddPathString
GdipDrawPath
GdipDeleteFontFamily
GdipDeletePen
GdipDeletePath
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromFile
GdipSetSmoothingMode

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

shlwapi

PathFileExistsW

Exports

Exports

CreateWizardManage
GetDllIndex

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Guide/wizardinit.xml
.xml
Guide1.xml
.xml
Guide2.xml
.xml
HardwareINFO.dll
.dll windows:4 windows x86 arch:x86

c50cec94b3bc1043b5cd3f775b089a2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord5307
ord3738
ord561
ord815
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1116
ord1253
ord1255
ord6467
ord1578
ord600
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord4486
ord2554
ord6375
ord4274
ord4424
ord825
ord826
ord269

msvcrt

free
atoi
sprintf
_beginthreadex
_except_handler3
malloc
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_onexit
??2@YAPAXI@Z
__CxxFrameHandler
_local_unwind2
__dllonexit

kernel32

LocalFree
GetModuleHandleA
GetProcAddress
GetTickCount
Sleep
WaitForSingleObject
GetExitCodeThread
TerminateThread
CloseHandle
LocalAlloc

advapi32

RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

HD_End
HD_GetCpuFrq
HD_GetCpuINFO
HD_Start

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Head/0.bmp
Head/0_0.bmp
Head/0_1.bmp
Head/0_2.bmp
Head/0_3.bmp
Head/0_4.bmp
Head/0_5.bmp
Head/0_6.bmp
Head/0_7.bmp
Head/0_Purple.bmp
Head/0_bluevip.bmp
Head/0_bluevip.gif
.gif
Head/0_level15.bmp
Head/0_level15.gif
.gif
Head/0_paliesman.bmp
Head/0_paliesman.gif
.gif
Head/0_purplevip.bmp
Head/0_queenPurple.bmp
Head/0_redvip.bmp
Head/0_redvip.gif
.gif
Head/0_topestpurple.bmp
Head/1.bmp
Head/10_10.bmp
Head/1_10.bmp
Head/2.bmp
Head/2_10.bmp
Head/3.bmp
Head/3_10.bmp
Head/4.bmp
Head/4_10.bmp
Head/5.bmp
Head/5_10.bmp
Head/6.bmp
Head/6_10.bmp
Head/7.bmp
Head/7_10.bmp
Head/8_10.bmp
Head/9_10.bmp
Head/Approve.bmp
Head/CuAgent.bmp
Head/CuAgent.gif
.gif
Head/DiamondPurple.bmp
Head/DiamondPurple.gif
.gif
Head/DiamondPurple2.bmp
Head/DiamondPurple2.gif
.gif
Head/Dives.jpg
.jpg
Head/Down.bmp
Head/H0_1.bmp
Head/H0_1_opacity.bmp
Head/H0_2.bmp
Head/H1_1.bmp
Head/H1_2.bmp
Head/H2_1.bmp
Head/H2_2.bmp
Head/H3_1.bmp
Head/H3_2.bmp
Head/H4_1.bmp
Head/H4_2.bmp
Head/H5_1.bmp
Head/H5_2.bmp
Head/Head.xml
.xml
Head/HideUser.bmp
Head/IMCloseClick.png
.png
Head/IMCloseFocus.png
.png
Head/IMCloseNormal.png
.png
Head/IMFemaleTag.bmp
Head/IMMaleTag.bmp
Head/Moon.bmp
Head/NoApprove.bmp
Head/Private.gif
.gif
Head/PrivateAll.bmp
Head/PrivateFR.bmp
Head/PrivateYes.bmp
Head/Privatefriend.bmp
Head/Public.bmp
Head/Purple.bmp
Head/Purple.gif
.gif
Head/Purple2.bmp
Head/Purple2.gif
.gif
Head/SealProfession.bmp
Head/SealProfession.gif
.gif
Head/SealWeek.bmp
Head/ShowPhone.bmp
Head/Sun.bmp
Head/Sys1.gif
.gif
Head/Sys2.gif
.gif
Head/Sys3.gif
.gif
Head/Sys4.gif
.gif
Head/agent.gif
.gif
Head/bDj.bmp
Head/bMusic.bmp
Head/bdance.bmp
Head/camera.bmp
Head/camera_opacity.bmp
Head/cert.gif
.gif
Head/cert_b.bmp
Head/chat.gif
.gif
Head/chat1.gif
.gif
Head/chat1_b.bmp
Head/chat2.gif
.gif
Head/chat2_b.bmp
Head/chat3.gif
.gif
Head/chat3_b.bmp
Head/chat4.gif
.gif
Head/chat4_b.bmp
Head/chat5.gif
.gif
Head/chat5_b.bmp
Head/color.bmp
Head/compere.gif
.gif
Head/consume.gif
.gif
Head/consume0.gif
.gif
Head/consume1.gif
.gif
Head/crown.bmp
Head/crown1.gif
.gif
Head/crown_opacity.bmp
Head/dance.gif
.gif
Head/dance1.bmp
Head/dance1.gif
.gif
Head/dance1_b.bmp
Head/dance2.gif
.gif
Head/dance2_b.bmp
Head/dance3.gif
.gif
Head/dance3_b.bmp
Head/dance4.gif
.gif
Head/dance4_b.bmp
Head/dance5.gif
.gif
Head/dance5_b.bmp
Head/dance6.gif
.gif
Head/dance6_b.bmp
Head/dance_b.bmp
Head/diamond.bmp
Head/dj.gif
.gif
Head/dj_b.bmp
Head/era.bmp
Head/era.gif
.gif
Head/era2.gif
.gif
Head/gezhe.gif
.gif
Head/gezhe_b.bmp
Head/ggpurplevip.bmp
Head/ggpurplevip.gif
.gif
Head/ggpurplevip2.bmp
Head/ggpurplevip2.gif
.gif
Head/grayvip.bmp
Head/greenvip.bmp
Head/guestHead.bmp
Head/guestdown.bmp
Head/guestup.bmp
Head/hide.bmp
Head/leave.bmp
Head/level11.bmp
Head/level15.bmp
Head/mMaster.bmp
Head/mMaster.gif
.gif
Head/mMaster1.bmp
Head/mMasterGirl.bmp
Head/mMasterGirl.gif
.gif
Head/mMasterGirl1.bmp
Head/master.bmp
Head/master.gif
.gif
Head/masterman.bmp
Head/masterman.gif
.gif
Head/masterman1.bmp
Head/masterwoman.bmp
Head/masterwoman.gif
.gif
Head/mmpurplevip.gif
.gif
Head/mmusic1.gif
.gif
Head/mmusic2.gif
.gif
Head/mmusic3.gif
.gif
Head/mmusic4.gif
.gif
Head/mmusic5.gif
.gif
Head/mmusic6.gif
.gif
Head/mmusic7.gif
.gif
Head/mmusic8.gif
.gif
Head/mmusic9.gif
.gif
Head/morden.gif
.gif
Head/morden_b.bmp
Head/music.bmp
Head/music.gif
.gif
Head/music1.bmp
Head/music1.gif
.gif
Head/music1_b.bmp
Head/music2.gif
.gif
Head/music2_b.bmp
Head/music3.gif
.gif
Head/music3_b.bmp
Head/music4.gif
.gif
Head/music4_b.bmp
Head/music5.gif
.gif
Head/music5_b.bmp
Head/music6.gif
.gif
Head/music6_b.bmp
Head/music7.gif
.gif
Head/music8.gif
.gif
Head/music9.gif
.gif
Head/music_b.bmp
Head/new.png
.png
Head/nosay.bmp
Head/paliesman.bmp
Head/paliesman.gif
.gif
Head/paliesman_opacity.bmp
Head/people.gif
.gif
Head/phone.bmp
Head/purple_vip0.bmp
Head/purple_vip1.bmp
Head/purple_vip2.bmp
Head/purple_vip3.bmp
Head/purplevip.bmp
Head/purplevip2.bmp
Head/queenPurple.bmp
Head/queenPurple.gif
.gif
Head/queenPurple2.bmp
Head/queenPurple2.gif
.gif
Head/red_vip0.bmp
Head/red_vip1.bmp
Head/red_vip2.bmp
Head/red_vip3.bmp
Head/redgirl.gif
.gif
Head/redgirl_b.bmp
Head/redvip.bmp
Head/rich.GIF
.gif
Head/rich.bmp
Head/rich.png
.png
Head/show_iphone.bmp
Head/show_iphone2.bmp
Head/showmob.bmp
Head/showmob2.bmp
Head/showpic.bmp
Head/showpic2.bmp
Head/showweb.bmp
Head/showweb2.bmp
Head/star.bmp
Head/star.xml
.xml
Head/star1.gif
.gif
Head/star1.png
.png
Head/star2.gif
.gif
Head/star2.png
.png
Head/star3.png
.png
Head/star4.png
.png
Head/star5.png
.png
Head/status.bmp
Head/superbomb.png
.png
Head/teacher.gif
.gif
Head/teacher_b.bmp
Head/thetop.gif
.gif
Head/thetop2.gif
.gif
Head/thetop3.gif
.gif
Head/thetop4.gif
.gif
Head/tmpmaster.bmp
Head/topestpurple.bmp
Head/topestpurple.gif
.gif
Head/topestpurple2.bmp
Head/topestpurple2.gif
.gif
Head/topestpurpleHead.gif
.gif
Head/topestpurple_opacity.bmp
Head/ubusy.bmp
Head/uhide.bmp
Head/uleave.bmp
Head/uleave.png
.png
Head/user_photo.bmp
Head/vircamera.bmp
Head/worker.bmp
Head/worker.gif
.gif
Head/world_icon.bmp
IMClient.dll
.dll windows:4 windows x86 arch:x86

760bb810ae320f6fc5d9012e1f69971f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mvuilib

??1CUIListCtrlEx@@UAE@XZ
?PreSubclassWindow@CUIListCtrlBaseTemplate@@MAEXXZ
?FitBitmapSize@CAppSysOperation@@UAEXXZ
?LoadSkin@CUIListCtrlBaseTemplate@@UAEHPAX@Z
?GetCurrentSkin@CAppSysOperation@@UAEHPAX@Z
?AddGraph@CCarveGraph@@UAEHPAV1@@Z
??0CUIListCtrlEx@@QAE@XZ
?GetCurrentGraph@CCarveGraph@@UAEPAV1@XZ
?SetGraphParameters@CCarveGraph@@UAEHXZ
?InitCarveGraph@CCarveGraph@@UAEHXZ
?CarveGraphGround@CCarveGraph@@UAEHPAVCDC@@@Z
?CarveGraphDrawItem@CCarveGraph@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?IsGraphSupportCurrentControl@CCarveGraph@@UAEHXZ
?SetHaveText@CUIButtonTemplate@@QAEX_NI@Z
?SetBtnTextColor@CUIButtonTemplate@@QAEXK@Z
??0CMenuEx@@QAE@XZ
?SetBackColor@CMenuEx@@QAEXK@Z
?AppendMenuEx@CMenuEx@@QAEHIIPBD@Z
??1CMenuEx@@UAE@XZ
?NeedShowHandCursor@CUINoRegularButtonTemplate@@QAEXH@Z
?SetToolTipText@CUIButtonTemplate@@QAEXPBD@Z
??0CUINoRegularButtonTemplate@@QAE@XZ
??1CUINoRegularButtonTemplate@@UAE@XZ
?OnLButtonDown@CUIButtonTemplate@@IAEXIVCPoint@@@Z
?messageMap@CUIButtonTemplate@@1UAFX_MSGMAP@@B
?PreSubclassWindow@CUIButtonTemplate@@MAEXXZ
?PreTranslateMessage@CUIButtonTemplate@@MAEHPAUtagMSG@@@Z
?DrawItem@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?HandleMouseMove@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?RemoveGraph@CCarveGraph@@UAEHPAV1@@Z
?HandleMouseLeftBtnDown@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnUp@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?DrawPushButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawRadioButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawCheckBoxButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?SetCtrlTextFont@CAppSysAttribute@@UAEXUtagLOGFONTA@@@Z
?GetCtrlTextFont@CAppSysAttribute@@UAEAAUtagLOGFONTA@@XZ
?SetCtrlTextColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlTextColor@CAppSysAttribute@@UAEKXZ
?SetCtrlBackColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlBackColor@CAppSysAttribute@@UAEKXZ
?SetCtrlTextBold@CAppSysAttribute@@UAEXH@Z
?EnableCtrlTextBold@CAppSysAttribute@@UAEHXZ
?SetCtrlTextHeight@CAppSysAttribute@@UAEXH@Z
?GetCtrlTextHeight@CAppSysAttribute@@UAEHXZ
?SetCtrlTextType@CAppSysAttribute@@UAEHVCString@@@Z
?GetCtrlTextType@CAppSysAttribute@@UAEAAVCString@@XZ
?FitBitmapSize@CUIButtonTemplate@@UAEXXZ
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@@Z
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@PAVCBitmap@@@Z
?CleanUp@CAppSysOperation@@UAEXXZ
?PaintBackGround@CAppSysOperation@@UAEHPAVCDC@@@Z
?DrawSkin@CAppSysOperation@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?AdjustPosition@CAppSysOperation@@UAEHUtagRECT@@@Z
?AdjustPosition@CAppSysOperation@@UAEHHHHH@Z
?DrawContent@CAppSysOperation@@UAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?LoadSkin@CUIButtonTemplate@@UAEHPAX@Z
?CleanSkin@CAppSysOperation@@UAEHPAX@Z
?GetCurrentSkin@CUIButtonTemplate@@MAEHPAX@Z
?InitializeOperation@CAppSysOperation@@UAEXPAVCWnd@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@PAVCBitmap@@@Z
?CleanBitmapMem@CAppSysOperation@@UAEHXZ
?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?SetColor@CColorStatic@@QAEXKKK@Z
?SetBold@CColorStatic@@QAEX_N@Z
??1CColorStatic@@UAE@XZ
??0CColorStatic@@QAE@XZ
??0CUIButtonTemplate@@QAE@XZ
??1CUIButtonTemplate@@UAE@XZ
??1CCarveGraph@@UAE@XZ

mfc42

ord4317
ord6055
ord4078
ord1776
ord4407
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord825
ord800
ord2763
ord2818
ord540
ord535
ord755
ord2567
ord470
ord4299
ord2379
ord537
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord5241
ord3136
ord4425
ord3597
ord641
ord860
ord324
ord2302
ord4234
ord4710
ord858
ord941
ord2820
ord3811
ord926
ord924
ord922
ord4278
ord4129
ord5710
ord939
ord6877
ord6663
ord925
ord2764
ord5280
ord3663
ord823
ord665
ord354
ord6779
ord1979
ord5186
ord6385
ord773
ord501
ord804
ord686
ord609
ord1083
ord1768
ord6215
ord6785
ord2086
ord1168
ord4284
ord5683
ord2566
ord5981
ord4277
ord567
ord818
ord4275
ord2078
ord3693
ord3626
ord2414
ord4133
ord4297
ord5788
ord1641
ord5600
ord6199
ord2642
ord2754
ord6241
ord3402
ord3571
ord2135
ord1601
ord2864
ord2405
ord5785
ord640
ord5875
ord1640
ord323
ord2574
ord3572
ord2575
ord4396
ord3574
ord556
ord809
ord1793
ord1088
ord2122
ord2859
ord6197
ord6172
ord3706
ord3089
ord1253
ord342
ord1182
ord6438
ord5607
ord2862
ord3092
ord3996
ord4287
ord5572
ord2915
ord6270
ord1644
ord998
ord5621
ord6605
ord4204
ord6134
ord6648
ord3763
ord3874
ord613
ord289
ord2803
ord2639
ord3573
ord2753
ord6021
ord5787
ord6880
ord3708
ord781
ord4220
ord2584
ord3654
ord2438
ord1756
ord3719
ord793
ord3619
ord2452
ord2645
ord3283
ord1269
ord6200
ord6136
ord2935
ord2516
ord361
ord3061
ord3767
ord1200
ord3005
ord1233
ord4123
ord861
ord2688
ord3721
ord795
ord5789
ord3797
ord4402
ord3640
ord4243
ord6905
ord3301
ord6762
ord6696
ord283
ord1949
ord4034
ord4538
ord2587
ord4406
ord3394
ord3729
ord384
ord4267
ord3920
ord2860

msvcrt

_CxxThrowException
__CxxFrameHandler
_mbscmp
atoi
sprintf
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv

kernel32

GetLastError
lstrcmpA
OutputDebugStringA
GetVersion
Sleep
FormatMessageA
LocalAlloc
LocalFree
GetProcAddress
FreeLibrary
CreateDirectoryA
GetFileAttributesA
lstrlenA
GetModuleFileNameA
GetModuleHandleA
MultiByteToWideChar
InterlockedDecrement

user32

GetDesktopWindow
GetWindowRect
SetWindowRgn
ReleaseDC
InvalidateRect
GetWindowDC
GetParent
ScreenToClient
SetCursor
LoadImageA
LoadCursorA
GetDC
SetWindowLongA
PtInRect
GetCursorPos
WindowFromPoint
IsChild
SendMessageA
IsIconic
FlashWindow
SetForegroundWindow
ClientToScreen
CreatePopupMenu
GetClientRect
OffsetRect
InflateRect
EnableWindow
IsWindow
GetWindowLongA
PostMessageA
DrawStateA
GetWindowTextA
CopyRect
EnableMenuItem
AppendMenuA
SetCapture
ReleaseCapture
SetTimer
KillTimer
wsprintfA
RedrawWindow
FillRect
GetFocus
GetWindow
GetClassNameA
IsWindowVisible

gdi32

CreateRectRgn
CreateDIBitmap
GetStockObject
SetPixel
SelectObject
GetTextExtentPoint32A
GetTextMetricsA
StretchBlt
GetMapMode
CreateSolidBrush
DeleteObject
CombineRgn
SetTextColor
SetBkColor
CreateFontA
RoundRect
SetDIBits
GetDIBits
FillPath
EndPath
Ellipse
BeginPath
CreateCompatibleBitmap
CreateBitmap
GetPixel
Rectangle
CreateCompatibleDC
GetObjectA
BitBlt
CreatePen
DeleteDC

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

comctl32

_TrackMouseEvent
ImageList_Draw

ole32

OleRun
CoCreateInstance
CoInitialize
CreateILockBytesOnHGlobal
CoUninitialize
OleSetContainedObject
CoInitializeEx
StgCreateDocfileOnILockBytes

oleaut32

SafeArrayGetUBound
SysAllocString
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantInit
SysFreeString
VariantClear
GetErrorInfo
SafeArrayGetLBound

publictool

?QueryItem@CHash@@QAEPAXJ@Z
??1CxImageEx@@UAE@XZ
?GetBits@CxImageEx@@QAEPAEK@Z
?InsertItem@CHash@@QAEHJPAX@Z
?Load@CxImageEx@@QAE_NPBDK@Z
??0CxImageEx@@QAE@K@Z
?QueryItem@CHash@@QAEPAXPBD@Z
?InsertItem@CHash@@QAEHPBDPAX@Z
?GetHashItemNum@CHash@@QAEHXZ
??1CHash@@UAE@XZ
??0CHash@@QAE@K@Z
?InitParam@CHash@@QAEHXZ
?FindFirst@CHash@@QAEXH@Z
?FindNext@CHash@@QAEPAXXZ
?GetDIB@CxImageEx@@QBEPAXXZ

Exports

Exports

??0CCarveGraph@@QAE@ABV0@@Z
??4CCarveGraph@@QAEAAV0@ABV0@@Z
??_7CCarveGraph@@6B@
?FlagControlHaveSkin@CAppSysOperation@@QAEXH@Z
?GetCheckButtonChecked@CUINoRegularButtonTemplate@@IAEIXZ
?IsControlHaveSkin@CAppSysOperation@@UAEHXZ
?SetCheckButtonChecked@CUINoRegularButtonTemplate@@IAEXW4MOUSESTATE@@@Z
?SetSelectIndex@CMenuEx@@QAEXI@Z
CreateIMClient

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IdleTrac.dll
.dll windows:4 windows x86 arch:x86

263c12a197d3bb2ac758eba4a39da260

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:eb:ab:18:0b:78:7b:9c:57:e5:52:f0:8b:40:5e:bf:db:3b:2b:95
Signer

Actual PE Digest

44:eb:ab:18:0b:78:7b:9c:57:e5:52:f0:8b:40:5e:bf:db:3b:2b:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetTickCount

user32

SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx

Exports

Exports

?Hook_DelAppWnd@@YAXPAUHWND__@@@Z
?Hook_GetAppWnd@@YAXPAUHWND__@@@Z
?Hook_IdleTrackerGetLastTickCount@@YAKXZ
?Hook_IdleTrackerInit@@YAHXZ
?Hook_IdleTrackerTerm@@YAXXZ
?Hook_ReSetLastTickCount@@YAXXZ
?Hook_UserOnLeave@@YAXXZ

Sections

.text
Size: 4KB - Virtual size: 563B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 619B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IdleTra
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ImageOle.dll
.dll regsvr32 windows:4 windows x86 arch:x86

44660346896afa7fcf9a9e309322676b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d9:fe:80:25:2f:3f:11:e2:81:97:64:dc:d5:0a:d3:14:00:a4:fd:4b
Signer

Actual PE Digest

d9:fe:80:25:2f:3f:11:e2:81:97:64:dc:d5:0a:d3:14:00:a4:fd:4b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
DeleteCriticalSection
EnterCriticalSection
HeapDestroy
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSection
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
GetCurrentProcess
FlushInstructionCache
lstrlenW
CreateFileA
SetFilePointer
ReadFile
InterlockedDecrement
GetTickCount
CloseHandle
GlobalUnlock
InterlockedIncrement
GlobalLock
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar

user32

GetWindowLongA
CreateWindowExA
CallWindowProcA
EndPaint
GetFocus
ShowWindow
GetWindowTextA
GetClientRect
CharNextA
DefWindowProcA
IsWindow
GetClassNameA
GetKeyState
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
IsWindowVisible
KillTimer
WindowFromDC
DestroyWindow
SendMessageA
SetFocus
ReleaseDC
GetDC
GetParent
IsChild
InvalidateRect
EqualRect
IntersectRect
RegisterClassExA
UpdateWindow
SetTimer
SetWindowLongA
BeginPaint
GetClassInfoExA
LoadCursorA
wsprintfA

gdi32

RestoreDC
CreateDCA
DeleteDC
BitBlt
DeleteObject
SelectClipRgn
CreateRectRgn
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA

ole32

OleRegGetUserType
CoLoadLibrary
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
WriteClassStm
CreateOleAdviseHolder
OleRegEnumVerbs
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
OleSaveToStream

oleaut32

SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
RegisterTypeLi
LoadTypeLi
VariantChangeType
VariantClear
OleCreatePropertyFrame
VarUI4FromStr
SysAllocString
SysStringLen
SysFreeString

gdiplus

GdipDrawImageRectI
GdipImageSelectActiveFrame
GdipCreateFromHDC
GdipAlloc
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdiplusShutdown
GdiplusStartup
GdipImageGetFrameDimensionsList
GdipDeleteGraphics
GdipFree

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

msvcrt

__CxxFrameHandler
free
malloc
??2@YAPAXI@Z
realloc
strcat
memcpy
memset
memcmp
_purecall
_adjust_fdiv
strcpy
_mbsrchr
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Invoker9158.dll
.dll regsvr32 windows:4 windows x86 arch:x86

8e767431c63e6722bf3345f4b588f583

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:aa:76:b4:20:d2:82:14:45:59:10:d5:b7:71:39:9b:46:6a:0e:1e
Signer

Actual PE Digest

7f:aa:76:b4:20:d2:82:14:45:59:10:d5:b7:71:39:9b:46:6a:0e:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3922
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord3953
ord2725
ord1131
ord826
ord600
ord269
ord5731
ord2512
ord2554
ord4486
ord6375
ord815
ord4274
ord5683
ord4202
ord4277
ord1578
ord1255
ord1253
ord1570
ord1197
ord2818
ord539
ord924
ord861
ord6467
ord540
ord4278
ord858
ord535
ord860
ord1243
ord800
ord537
ord823
ord825
ord3830
ord342
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182

msvcrt

_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_purecall
strcmp
memcmp
_mbscmp
atoi
__CxxFrameHandler
memcpy

kernel32

WinExec
lstrlenA
CloseHandle
InterlockedIncrement
InterlockedDecrement
LocalFree
Process32Next
Process32First
CreateToolhelp32Snapshot
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
lstrlenW

user32

PostMessageA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

oleaut32

LoadRegTypeLi
SysStringLen
SysFreeString
VariantClear

atl

ord58
ord57
ord18
ord15
ord21
ord16
ord23
ord32
ord30

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ItemVer.xml
.xml
KillProcess.exe
.exe windows:4 windows x86 arch:x86

a24455875a598b8ba572823d93757c31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
TerminateProcess
OpenProcess
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLastError
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LobbyModule/LobbyClient.dll
.dll windows:4 windows x86 arch:x86

00a357eeac0e69f928468b833c3f169f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord801
ord518
ord541
ord1187
ord3584
ord803
ord537
ord6648
ord6883
ord4129
ord924
ord535
ord5608
ord2820
ord1200
ord939
ord941
ord5572
ord2919
ord543
ord3811
ord3337
ord354
ord5186
ord1979
ord665
ord2915
ord860
ord5683
ord4278
ord858
ord2818
ord825
ord540
ord800
ord1182
ord823
ord342
ord1253
ord2764
ord1168

msvcrt

_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
_snprintf
_mbscmp
strncpy
_mbsnbcpy
malloc
rand
_CxxThrowException
fprintf
fopen
_purecall
sprintf
__CxxFrameHandler
exit
_adjust_fdiv
time
fgets
strchr
strstr
fclose
atoi
_strupr

kernel32

CreateThread
GetExitCodeThread
WaitForSingleObject
OutputDebugStringA
GetTickCount
EnterCriticalSection
GetProcAddress
GetLastError
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
DeleteCriticalSection
Sleep
GetFileAttributesA
GetModuleFileNameA

user32

SendMessageA
PostMessageA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

ws2_32

WSAResetEvent
gethostbyname
WSACreateEvent
WSACleanup
WSAStartup
inet_ntoa
inet_addr
WSASetEvent
htons

Exports

Exports

CreateLobbyClient

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LobbyModule/RankClient.dll
.dll windows:4 windows x86 arch:x86

745a6ea928cf6ab2fc8313e90cb9efa4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:fa:de:25:84:ca:70:8d:49:f6:c7:f0:13:77:da:38:7d:36:85:f5
Signer

Actual PE Digest

68:fa:de:25:84:ca:70:8d:49:f6:c7:f0:13:77:da:38:7d:36:85:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord4486
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord1187
ord823
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord6375
ord2976
ord4274
ord1578
ord600
ord826
ord269
ord1116

msvcrt

exit
_purecall
__CxxFrameHandler
_CxxThrowException
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit

kernel32

LocalFree
LocalAlloc

user32

PostMessageA

ws2_32

WSACleanup
WSAStartup

Exports

Exports

CreateRankClient

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LobbyModule/UdpClient.dll
.dll windows:4 windows x86 arch:x86

bda1948a8e302931be38aaabcd82663a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:b0:b6:a8:39:47:bf:32:5a:db:59:a7:40:6b:3a:fd:b7:f2:c0:80
Signer

Actual PE Digest

66:b0:b6:a8:39:47:bf:32:5a:db:59:a7:40:6b:3a:fd:b7:f2:c0:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1182
ord342
ord1253
ord1168
ord823
ord825
ord1187

msvcrt

??1type_info@@UAE@XZ
_onexit
__dllonexit
free
__CxxFrameHandler
_purecall
exit
_initterm
malloc
_adjust_fdiv
_CxxThrowException

kernel32

CreateThread
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
TerminateThread
GetExitCodeThread
WaitForSingleObject
Sleep
SetCriticalSectionSpinCount

ws2_32

closesocket
WSASetEvent
sendto
WSAGetOverlappedResult
WSAGetLastError
WSARecvFrom
WSACloseEvent
WSASocketA
WSACleanup
WSAStartup
WSACreateEvent

msvcp60

??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Exports

Exports

CreateUdpClient

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MVUILib.dll
.dll windows:4 windows x86 arch:x86

7be64b477ca3115ac34d02a52191a396

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

28:2c:66:00:9e:61:50:4c:c4:e4:70:d7:b9:09:2a:62:ac:9c:b1:fa
Signer

Actual PE Digest

28:2c:66:00:9e:61:50:4c:c4:e4:70:d7:b9:09:2a:62:ac:9c:b1:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

publictool

?DeleteItem@CHash@@QAEPAXJ@Z
?GetWidth@CxImageEx@@QBEKXZ
?GetHeight@CxImageEx@@QBEKXZ
?Draw@CxImageEx@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z
?GetDIB@CxImageEx@@QBEPAXXZ
?GetBits@CxImageEx@@QAEPAEK@Z
?DeleteItem@CHash@@QAEPAXPBD@Z
?GetFirst@CHash@@QAEPAXHAAHH@Z
?GetNext@CHash@@QAEPAXPAPAXAAHH@Z
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?QueryItem@CHash@@QAEPAXPBD@Z
?QueryItem@CHash@@QAEPAXJ@Z
?InsertItem@CHash@@QAEHJPAX@Z
?InsertItem@CHash@@QAEHPBDPAX@Z
?FindFirst@CHash@@QAEXH@Z
?FindNext@CHash@@QAEPAXXZ
??1CxImageEx@@UAE@XZ
??1CHash@@UAE@XZ
??0CHash@@QAE@K@Z
?InitParam@CHash@@QAEHXZ
??0CxImageEx@@QAE@K@Z
?Load@CxImageEx@@QAE_NPBDK@Z

mfc42

ord3663
ord3733
ord810
ord4271
ord800
ord1146
ord1168
ord2818
ord540
ord6880
ord3721
ord3573
ord795
ord1641
ord3619
ord2860
ord5875
ord4284
ord4234
ord5265
ord4376
ord4853
ord4998
ord4710
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord641
ord326
ord325
ord324
ord922
ord535
ord823
ord3584
ord924
ord858
ord4278
ord5683
ord537
ord543
ord803
ord3301
ord3286
ord3293
ord1862
ord4220
ord2584
ord3654
ord3571
ord384
ord686
ord2438
ord2408
ord2753
ord2567
ord3693
ord5787
ord5788
ord2754
ord2452
ord2096
ord2097
ord1175
ord807
ord4163
ord6625
ord554
ord860
ord2614
ord5572
ord2919
ord2863
ord1644
ord5440
ord6383
ord5450
ord6394
ord3742
ord809
ord818
ord501
ord556
ord773
ord5621
ord1088
ord2078
ord2122
ord1083
ord4299
ord3089
ord2864
ord6358
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord2446
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord2725
ord3402
ord755
ord470
ord6453
ord2393
ord665
ord1979
ord283
ord5442
ord268
ord3318
ord5186
ord354
ord6242
ord6320
ord640
ord5789
ord6172
ord3874
ord323
ord5785
ord1640
ord6199
ord2405
ord2582
ord3370
ord4402
ord3640
ord693
ord4243
ord6696
ord2862
ord3797
ord4133
ord4297
ord472
ord4694
ord6907
ord3092
ord3910
ord6905
ord2575
ord4396
ord3574
ord3706
ord609
ord4123
ord2450
ord5873
ord613
ord6385
ord4224
ord289
ord700
ord398
ord2841
ord5148
ord3752
ord6762
ord5981
ord2107
ord955
ord5261
ord3021
ord5594
ord913
ord2915
ord5053
ord6662
ord1200
ord4277
ord4202
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord2448
ord2080
ord1802
ord2513
ord293
ord5834
ord2044
ord2086
ord2580
ord4400
ord3630
ord682
ord3996
ord6007
ord3708
ord781
ord5937
ord4132
ord6136
ord6134
ord3876
ord3716
ord790
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4398
ord1776
ord4078
ord6055
ord2578
ord4218
ord2023
ord2414
ord3626
ord656
ord3610
ord4407
ord2379
ord2859
ord2566
ord4480
ord4275
ord616
ord825
ord567
ord3582
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord1567
ord2124
ord2411
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord5307
ord4189

msvcrt

atoi
_mbscmp
memmove
__CxxFrameHandler
wcslen
??0exception@@QAE@ABV0@@Z
_CxxThrowException
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
sprintf
_ismbcdigit
atol
_beginthreadex
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ

kernel32

LocalFree
lstrlenA
GetVersion
lstrcpyA
OutputDebugStringA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetLastError
lstrcpynA
ResumeThread
Sleep
GetExitCodeThread
TerminateThread
CloseHandle
FindResourceA
LoadResource
SizeofResource
LockResource
GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetModuleHandleA
LocalAlloc

user32

SetWindowLongA
SetTimer
GetCursorPos
KillTimer
DrawEdge
GetSystemMetrics
GrayStringA
TabbedTextOutA
DrawTextA
ScreenToClient
IsWindowVisible
GetNextDlgGroupItem
GetCapture
OffsetRect
RedrawWindow
GetWindowRgn
SetWindowRgn
GetWindowLongA
ReleaseCapture
GetDlgItem
GetFocus
UpdateWindow
SetRect
GetParent
GetClientRect
ModifyMenuA
GetMenuState
CreateMenu
LoadMenuA
GetMenuItemCount
GetMenuStringA
GetSubMenu
CreatePopupMenu
InsertMenuA
ReleaseDC
GetWindowRect
GetWindowDC
EnableWindow
SendMessageA
SetCapture
AppendMenuA
GetMenuItemID
RemoveMenu
LoadBitmapA
LoadImageA
CopyRect
DrawStateA
GetSysColor
InflateRect
InvalidateRect
GetDC
FillRect
EqualRect
PostMessageA
PtInRect
LoadCursorA
SetCursor

gdi32

SetTextColor
SetBkColor
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
RoundRect
CreateRoundRectRgn
GetMapMode
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontA
GetDIBits
SelectObject
GetPixel
CombineRgn
OffsetRgn
SetBkMode
GetTextMetricsA
SetTextAlign
FillRgn
CreateRectRgn
GetRgnBox
PtInRegion
SelectClipRgn
GetBkColor
CreateDIBitmap
GetBitmapBits
SetBitmapBits
GetTextExtentPoint32A
CreatePen
Rectangle
CreateBitmap
CreateSolidBrush
CreateFontIndirectA
GetObjectA
DeleteDC
DeleteObject
BitBlt

comctl32

ImageList_Draw
ImageList_AddMasked
ImageList_GetImageCount
_TrackMouseEvent

ole32

CoInitialize
CoCreateInstance
OleRun
CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SysStringLen
SysAllocStringLen
VariantInit
VariantCopy
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
SysFreeString

msvcp60

??1_Lockit@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_7out_of_range@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0_Lockit@std@@QAE@XZ

Exports

Exports

??0CAppSysAttribute@@QAE@XZ
??0CAppSysOperation@@QAE@XZ
??0CBaseComboBox@@QAE@XZ
??0CBaseEdit@@QAE@XZ
??0CBaseEditEx@@QAE@XZ
??0CBaseTreeCtrl@@QAE@XZ
??0CCarveGraph@@QAE@ABV0@@Z
??0CCarveGraph@@QAE@XZ
??0CColorStatic@@QAE@XZ
??0CCustomDlg@@QAE@IPAVCWnd@@@Z
??0CCustomDlg@@QAE@PBDPAVCWnd@@@Z
??0CCustomDlg@@QAE@XZ
??0CIconStringMgr@@QAE@XZ
??0CMemDC@@QAE@PAVCDC@@AAVCRect@@@Z
??0CMenuEx@@QAE@XZ
??0CMultiBtn@@QAE@XZ
??0CMyPictureEx@@QAE@ABV0@@Z
??0CMyPictureEx@@QAE@XZ
??0CPictureEx@@QAE@XZ
??0CPictureExEx@@QAE@ABV0@@Z
??0CPictureExEx@@QAE@XZ
??0CRoundCornerRectangleGraph@@QAE@XZ
??0CSkinComboBox@@QAE@XZ
??0CSkinConfContext@@QAE@XZ
??0CSkinExComboBox@@QAE@XZ
??0CUIButtonTemplate@@QAE@XZ
??0CUIComboxTemplate@@QAE@XZ
??0CUIDlgTemplate@@QAE@IPAVCWnd@@@Z
??0CUIDlgTemplate@@QAE@PBDPAVCWnd@@@Z
??0CUIDlgTemplate@@QAE@XZ
??0CUIEditTemplate@@QAE@XZ
??0CUIHeadCtrlTemplate@@QAE@XZ
??0CUIListCtrlBaseTemplate@@QAE@XZ
??0CUIListCtrlButtonEx@@QAE@XZ
??0CUIListCtrlEx@@QAE@XZ
??0CUIListCtrlTemplate@@QAE@PAVCHeaderCtrl@@@Z
??0CUIListCtrlTemplate@@QAE@XZ
??0CUINoFrameEdit@@QAE@XZ
??0CUINoRegularButtonTemplate@@QAE@XZ
??0CUIOtherdrawListCtrlTemplate@@QAE@XZ
??0CUIOwnerdrawListCtrlTemplate@@QAE@XZ
??0CUIRichEditTemplate@@QAE@XZ
??0CUISliderTemplate@@QAE@XZ
??0CUISortListCtrlEx@@QAE@XZ
??0CUIStaticTemplate@@QAE@XZ
??1CAppSysAttribute@@UAE@XZ
??1CAppSysOperation@@UAE@XZ
??1CBaseComboBox@@UAE@XZ
??1CBaseEdit@@UAE@XZ
??1CBaseEditEx@@UAE@XZ
??1CBaseTreeCtrl@@UAE@XZ
??1CCarveGraph@@UAE@XZ
??1CColorStatic@@UAE@XZ
??1CCustomDlg@@UAE@XZ
??1CIconStringMgr@@UAE@XZ
??1CMemDC@@UAE@XZ
??1CMenuEx@@UAE@XZ
??1CMultiBtn@@UAE@XZ
??1CMyPictureEx@@UAE@XZ
??1CPictureEx@@UAE@XZ
??1CPictureExEx@@UAE@XZ
??1CRoundCornerRectangleGraph@@UAE@XZ
??1CSkinComboBox@@UAE@XZ
??1CSkinConfContext@@UAE@XZ
??1CSkinExComboBox@@UAE@XZ
??1CUIButtonTemplate@@UAE@XZ
??1CUIComboxTemplate@@UAE@XZ
??1CUIDlgTemplate@@UAE@XZ
??1CUIEditTemplate@@UAE@XZ
??1CUIHeadCtrlTemplate@@UAE@XZ
??1CUIListCtrlBaseTemplate@@UAE@XZ
??1CUIListCtrlButtonEx@@UAE@XZ
??1CUIListCtrlEx@@UAE@XZ
??1CUIListCtrlTemplate@@UAE@XZ
??1CUINoFrameEdit@@UAE@XZ
??1CUINoRegularButtonTemplate@@UAE@XZ
??1CUIOtherdrawListCtrlTemplate@@UAE@XZ
??1CUIOwnerdrawListCtrlTemplate@@UAE@XZ
??1CUIRichEditTemplate@@UAE@XZ
??1CUISliderTemplate@@UAE@XZ
??1CUISortListCtrlEx@@UAE@XZ
??1CUIStaticTemplate@@UAE@XZ
??4CCarveGraph@@QAEAAV0@ABV0@@Z
??4CMyPictureEx@@QAEAAV0@ABV0@@Z
??4CPictureExEx@@QAEAAV0@ABV0@@Z
??CCMemDC@@QAEPAV0@XZ
??_7CAppSysAttribute@@6B@
??_7CAppSysOperation@@6B@
??_7CBaseComboBox@@6B@
??_7CBaseEdit@@6B@
??_7CBaseEditEx@@6B@
??_7CBaseTreeCtrl@@6B@
??_7CCarveGraph@@6B@
??_7CColorStatic@@6B@
??_7CCustomDlg@@6BCAppSysOperation@@@
??_7CCustomDlg@@6BCDialog@@@
??_7CIconStringMgr@@6B@
??_7CMemDC@@6B@
??_7CMenuEx@@6B@
??_7CMultiBtn@@6B@
??_7CMyPictureEx@@6B@
??_7CPictureEx@@6B@
??_7CPictureExEx@@6B@
??_7CRoundCornerRectangleGraph@@6B@
??_7CSkinComboBox@@6BCAppSysOperation@@@
??_7CSkinComboBox@@6BCComboBox@@@
??_7CSkinConfContext@@6B@
??_7CSkinExComboBox@@6BCAppSysOperation@@@
??_7CSkinExComboBox@@6BCComboBox@@@
??_7CUIButtonTemplate@@6BCAppSysAttribute@@@
??_7CUIButtonTemplate@@6BCAppSysOperation@@@
??_7CUIButtonTemplate@@6BCButton@@@
??_7CUIComboxTemplate@@6BCAppSysAttribute@@@
??_7CUIComboxTemplate@@6BCAppSysOperation@@@
??_7CUIComboxTemplate@@6BCCarveGraph@@@
??_7CUIComboxTemplate@@6BCComboBox@@@
??_7CUIDlgTemplate@@6BCAppSysOperation@@@
??_7CUIDlgTemplate@@6BCDialog@@@
??_7CUIEditTemplate@@6BCAppSysAttribute@@@
??_7CUIEditTemplate@@6BCAppSysOperation@@@
??_7CUIEditTemplate@@6BCCarveGraph@@@
??_7CUIEditTemplate@@6BCEdit@@@
??_7CUIHeadCtrlTemplate@@6BCAppSysAttribute@@@
??_7CUIHeadCtrlTemplate@@6BCAppSysOperation@@@
??_7CUIHeadCtrlTemplate@@6BCHeaderCtrl@@@
??_7CUIListCtrlBaseTemplate@@6BCAppSysAttribute@@@
??_7CUIListCtrlBaseTemplate@@6BCAppSysOperation@@@
??_7CUIListCtrlBaseTemplate@@6BCListCtrl@@@
??_7CUIListCtrlButtonEx@@6BCAppSysAttribute@@@
??_7CUIListCtrlButtonEx@@6BCAppSysOperation@@@
??_7CUIListCtrlButtonEx@@6BCListCtrl@@@
??_7CUIListCtrlEx@@6BCAppSysAttribute@@@
??_7CUIListCtrlEx@@6BCAppSysOperation@@@
??_7CUIListCtrlEx@@6BCListCtrl@@@
??_7CUIListCtrlTemplate@@6BCAppSysAttribute@@@
??_7CUIListCtrlTemplate@@6BCAppSysOperation@@@
??_7CUIListCtrlTemplate@@6BCListCtrl@@@
??_7CUINoFrameEdit@@6B@
??_7CUINoRegularButtonTemplate@@6BCAppSysAttribute@@@
??_7CUINoRegularButtonTemplate@@6BCAppSysOperation@@@
??_7CUINoRegularButtonTemplate@@6BCButton@@@
??_7CUIOtherdrawListCtrlTemplate@@6BCAppSysAttribute@@@
??_7CUIOtherdrawListCtrlTemplate@@6BCAppSysOperation@@@
??_7CUIOtherdrawListCtrlTemplate@@6BCListCtrl@@@
??_7CUIOwnerdrawListCtrlTemplate@@6BCAppSysAttribute@@@
??_7CUIOwnerdrawListCtrlTemplate@@6BCAppSysOperation@@@
??_7CUIOwnerdrawListCtrlTemplate@@6BCListCtrl@@@
??_7CUIRichEditTemplate@@6BCAppSysAttribute@@@
??_7CUIRichEditTemplate@@6BCAppSysOperation@@@
??_7CUIRichEditTemplate@@6BCCarveGraph@@@
??_7CUIRichEditTemplate@@6BCRichEditCtrl@@@
??_7CUISliderTemplate@@6BCAppSysAttribute@@@
??_7CUISliderTemplate@@6BCAppSysOperation@@@
??_7CUISliderTemplate@@6BCSliderCtrl@@@
??_7CUISortListCtrlEx@@6BCAppSysAttribute@@@
??_7CUISortListCtrlEx@@6BCAppSysOperation@@@
??_7CUISortListCtrlEx@@6BCListCtrl@@@
??_7CUIStaticTemplate@@6BCAppSysAttribute@@@
??_7CUIStaticTemplate@@6BCAppSysOperation@@@
??_7CUIStaticTemplate@@6BCStatic@@@
?AddActivityIcon@CUIOtherdrawListCtrlTemplate@@QAEHHHPAX@Z
?AddArtStar@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?AddBadge@CUIOtherdrawListCtrlTemplate@@QAEHH@Z
?AddBtnInfo@CMultiBtn@@QAEXHPBD0@Z
?AddCBImageItems@CSkinExComboBox@@QAEXAAV?$vector@PAUHBITMAP__@@V?$allocator@PAUHBITMAP__@@@std@@@std@@V?$vector@PBDV?$allocator@PBD@std@@@3@@Z
?AddGraph@CCarveGraph@@UAEHPAV1@@Z
?AddIconItem@CIconStringMgr@@QAEXAAUICONString@@@Z
?AddItemStamp@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?AddLPVOIDInfo@CUIOtherdrawListCtrlTemplate@@QAEXPAXH@Z
?AddListColumn@CUIListCtrlTemplate@@UAEHUStructHeadCtrlData@@@Z
?AddListIcon@CUIOtherdrawListCtrlTemplate@@QAEHHPAX0@Z
?AddMobile@CUIOtherdrawListCtrlTemplate@@QAEHHPAX0@Z
?AddMsg@CUIRichEditTemplate@@QAEXAAVCString@@AAKHH@Z
?AddName@CUIRichEditTemplate@@QAEXAAVCString@@AAK@Z
?AddNewVip@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?AddStatus@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?AddText@CUIRichEditTemplate@@QAEXAAVCString@@AAK@Z
?AddText@CUIRichEditTemplate@@QAEXPBDAAK@Z
?AddWeb@CUIOtherdrawListCtrlTemplate@@QAEHHPAX0@Z
?AdjustPosition@CAppSysOperation@@UAEHHHHH@Z
?AdjustPosition@CAppSysOperation@@UAEHUtagRECT@@@Z
?AnimateOutSide@CPictureEx@@QAEXXZ
?AnimationGif@CUIOtherdrawListCtrlTemplate@@CGIPAX@Z
?AppendMenuEx@CMenuEx@@QAEHIIPBD@Z
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@@Z
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@PAVCBitmap@@@Z
?AttachHeaderCtrl@CUIListCtrlBaseTemplate@@QAEXXZ
?AttachHeaderCtrl@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?AttachHeaderCtrl@CUIOwnerdrawListCtrlTemplate@@QAEXXZ
?BmpToMem@CSkinExComboBox@@AAEXHPAVCDC@@VCRect@@@Z
?CalculateLeftImagePos@CMenuEx@@IAEXPAVCMenu@@@Z
?CarveGraphDrawItem@CCarveGraph@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?CarveGraphDrawItem@CRoundCornerRectangleGraph@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?CarveGraphDrawItem@CUIEditTemplate@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?CarveGraphGround@CCarveGraph@@UAEHPAVCDC@@@Z
?CarveGraphGround@CRoundCornerRectangleGraph@@UAEHPAVCDC@@@Z
?ChangeMenuStyle@CMenuEx@@IAEXPAVCMenu@@PAUHMENU__@@@Z
?CheckHover@CUIButtonTemplate@@IAEXVCPoint@@@Z
?CheckHover@CUINoRegularButtonTemplate@@IAEXVCPoint@@@Z
?CleanBitmapMem@CAppSysOperation@@UAEHXZ
?CleanButtonImageItemValid@CUIListCtrlTemplate@@MAEHXZ
?CleanIconItems@CIconStringMgr@@QAEXXZ
?CleanImageItemValid@CUIListCtrlTemplate@@MAEHXZ
?CleanListColumn@CUIListCtrlTemplate@@MAEHXZ
?CleanSkin@CAppSysOperation@@UAEHPAX@Z
?CleanSkin@CUISliderTemplate@@UAEHPAX@Z
?CleanTemplateImageList@CUIListCtrlTemplate@@MAEHXZ
?CleanUp@CAppSysOperation@@UAEXXZ
?CleanUp@CUIListCtrlTemplate@@MAEXXZ
?CloseThread@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?CombinePic@CMyPictureEx@@IAEXPAVCBitmap@@HHH@Z
?Compare@CUIListCtrlTemplate@@SGHJJJ@Z
?Create@CMultiBtn@@UAEHPBD0KABUtagRECT@@PAVCWnd@@IPAUCCreateContext@@@Z
?Create@CPictureEx@@QAEHABUtagRECT@@PAVCWnd@@IK@Z
?Create@CUIComboxTemplate@@QAEHKABUtagRECT@@PAVCWnd@@I@Z
?Create@CUIDlgTemplate@@QAEHIPAVCWnd@@@Z
?Create@CUIDlgTemplate@@QAEHPBDPAVCWnd@@@Z
?CreateListHeader@CUIListCtrlTemplate@@UAEHW4TEXTPOS@@@Z
?CreateMaskBitmap@CUINoRegularButtonTemplate@@AAEHPAUHDC__@@AAVCBitmap@@1HHHHK@Z
?CreateObject@CUIComboxTemplate@@SGPAVCObject@@XZ
?CreateRgnFromBitmap@CUINoRegularButtonTemplate@@IAEPAUHRGN__@@PAUHBITMAP__@@K@Z
?CtlColor@CBaseEdit@@QAEPAUHBRUSH__@@PAVCDC@@I@Z
?CtlColor@CColorStatic@@IAEPAUHBRUSH__@@PAVCDC@@I@Z
?CtlColor@CUIEditTemplate@@IAEPAUHBRUSH__@@PAVCDC@@I@Z
?CtlColor@CUIStaticTemplate@@IAEPAUHBRUSH__@@PAVCDC@@I@Z
?DefWindowProcA@CColorStatic@@MAEJIIJ@Z
?DelAllBadge@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?DelAllItemIcon@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?DelAllItemStamp@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?DelBadge@CUIOtherdrawListCtrlTemplate@@QAEHH@Z
?DelItemIcon@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?DelItemStamp@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?DelState@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?DeleteAllItemColor@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?DeleteAllToolTips@CUIOtherdrawListCtrlTemplate@@UAEXXZ
?DeleteItem@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?DeleteItem@CUIOwnerdrawListCtrlTemplate@@QAEXH@Z
?DoDataExchange@CUIDlgTemplate@@MAEXPAVCDataExchange@@@Z
?DragColumn@CUIListCtrlTemplate@@IAEXHH@Z
?DrawBK@CUISliderTemplate@@QAEXPAVCDC@@@Z
?DrawBitmapAddFont@CUIOtherdrawListCtrlTemplate@@QAEXPAUHDC__@@PAUHBITMAP__@@PBDHHHHHHHHH@Z
?DrawButton@CUIButtonTemplate@@IAEXPAVCDC@@PAVCRect@@I@Z
?DrawButton@CUIListCtrlButtonEx@@QAEXPAVCDC@@AAVCRect@@H@Z
?DrawButton@CUINoRegularButtonTemplate@@IAEXPAVCDC@@PAVCRect@@I@Z
?DrawButtonCaption@CUIButtonTemplate@@IAEXPAUHDC__@@PAVCRect@@HH@Z
?DrawButtonCaption@CUINoRegularButtonTemplate@@IAEXPAUHDC__@@PAVCRect@@HH@Z
?DrawButtonColumn@CUIListCtrlTemplate@@MAEHXZ
?DrawButtonImage@CUIListCtrlTemplate@@MAEHPAVCDC@@AAVCRect@@HHK@Z
?DrawChannel@CUISliderTemplate@@AAEXPAVCDC@@PAUtagNMCUSTOMDRAWINFO@@@Z
?DrawCheckBoxButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawCheckBoxButton@CUINoRegularButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawContent@CAppSysOperation@@UAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?DrawContent@CUIHeadCtrlTemplate@@UAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?DrawContent@CUIListCtrlTemplate@@MAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?DrawDlgWindowRgn@CUIDlgTemplate@@IAEXPAVCDC@@@Z
?DrawDropDown@CSkinComboBox@@QAEXPAVCDC@@@Z
?DrawItem@CMenuEx@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CSkinExComboBox@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIComboxTemplate@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIListCtrlBaseTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIListCtrlButtonEx@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIListCtrlTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUINoRegularButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIOtherdrawListCtrlTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItem@CUIOwnerdrawListCtrlTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawItemText@CUIListCtrlBaseTemplate@@IAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?DrawItemText@CUIOtherdrawListCtrlTemplate@@IAEHPAVCDC@@VCString@@AAVCRect@@H_N@Z
?DrawItemText@CUIOwnerdrawListCtrlTemplate@@IAEHPAVCDC@@VCString@@AAVCRect@@H_N@Z
?DrawMenuItemImage@CMenuEx@@IAEXPAVCDC@@AAVCRect@@HHHHPAUtagMENUITEM@@@Z
?DrawPushButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawPushButton@CUINoRegularButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawRadioButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawRadioButton@CUINoRegularButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawSkin@CAppSysOperation@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?DrawSkin@CUIComboxTemplate@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?DrawSkin@CUIListCtrlTemplate@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?DrawThumb@CUISliderTemplate@@AAEXPAVCDC@@PAUtagNMCUSTOMDRAWINFO@@@Z
?DrawTransparent@CUISliderTemplate@@QAEXH@Z
?EnableCtrlTextBold@CAppSysAttribute@@UAEHXZ
?EnableSort@CUIListCtrlTemplate@@IAEHH@Z
?EnableWndMove@CUIDlgTemplate@@IAEXH@Z
?FillHightLightRect@CUIListCtrlBaseTemplate@@IAEXPAVCDC@@AAVCRect@@KK@Z
?FillHightLightRect@CUIListCtrlTemplate@@AAEXPAVCDC@@AAVCRect@@KK@Z
?FillHightLightRect@CUIOtherdrawListCtrlTemplate@@IAEXPAVCDC@@AAVCRect@@KK@Z
?FillHightLightRect@CUIOwnerdrawListCtrlTemplate@@IAEXPAVCDC@@AAVCRect@@KK@Z
?FillItemColor@CUIListCtrlBaseTemplate@@IAEXPAVCDC@@AAVCRect@@K@Z
?FillItemColor@CUIListCtrlTemplate@@AAEXPAVCDC@@AAVCRect@@K@Z
?FillItemColor@CUIOtherdrawListCtrlTemplate@@IAEXPAVCDC@@AAVCRect@@K@Z
?FillItemColor@CUIOwnerdrawListCtrlTemplate@@IAEXPAVCDC@@AAVCRect@@K@Z
?FitBitmapSize@CAppSysOperation@@UAEXXZ
?FitBitmapSize@CUIButtonTemplate@@UAEXXZ
?FitBitmapSize@CUINoRegularButtonTemplate@@UAEXXZ
?FlagControlHaveSkin@CAppSysOperation@@QAEXH@Z
?FrameRgn3D@CUIButtonTemplate@@IAEXPAUHDC__@@QAUHRGN__@@H@Z
?FrameRgn3D@CUINoRegularButtonTemplate@@IAEXPAUHDC__@@QAUHRGN__@@H@Z
?GetAddIconItem@CIconStringMgr@@QAEPAUICONString@@AAVCString@@@Z
?GetAddIconItem@CIconStringMgr@@QAEPAUICONString@@H@Z
?GetBackGroundColor@CCarveGraph@@QAEKXZ
?GetBitmapHeight@CAppSysOperation@@QAEHXZ
?GetBitmapWidth@CAppSysOperation@@QAEHXZ
?GetBkColor@CPictureEx@@QBEKXZ
?GetButtonSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetCheckButtonChecked@CUIButtonTemplate@@IAEIXZ
?GetCheckButtonChecked@CUINoRegularButtonTemplate@@IAEIXZ
?GetComboxSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetCtrlBackColor@CAppSysAttribute@@UAEKXZ
?GetCtrlHeight@CAppSysOperation@@QAEHXZ
?GetCtrlTextColor@CAppSysAttribute@@UAEKXZ
?GetCtrlTextFont@CAppSysAttribute@@UAEAAUtagLOGFONTA@@XZ
?GetCtrlTextHeight@CAppSysAttribute@@UAEHXZ
?GetCtrlTextType@CAppSysAttribute@@UAEAAVCString@@XZ
?GetCtrlWidth@CAppSysOperation@@QAEHXZ
?GetCurrentControlType@CCarveGraph@@QAEIXZ
?GetCurrentGraph@CCarveGraph@@UAEPAV1@XZ
?GetCurrentSkin@CAppSysOperation@@UAEHPAX@Z
?GetCurrentSkin@CUIButtonTemplate@@MAEHPAX@Z
?GetCurrentSkin@CUINoRegularButtonTemplate@@MAEHPAX@Z
?GetCurrentWnd@CCarveGraph@@QAEPAUHWND__@@XZ
?GetDialogSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetEditBoxSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetFrameCount@CMyPictureEx@@QBEHXZ
?GetFrameCount@CPictureExEx@@QBEHXZ
?GetIconData@CUIOtherdrawListCtrlTemplate@@QAEPAUtagListItemData@@H@Z
?GetIconItems@CIconStringMgr@@QAEHXZ
?GetIconStringMgr@CUIComboxTemplate@@QAEPAVCIconStringMgr@@XZ
?GetImageDate@CUIOtherdrawListCtrlTemplate@@QAEPAUtagListItemData@@H@Z
?GetImageFromToolBar@CMenuEx@@IAEHIPAVCToolBar@@KI@Z
?GetImageSkinConf@CSkinConfContext@@QAEHPBDPAPAUHBITMAP__@@@Z
?GetIsMouseSensitive@CUIListCtrlEx@@QAE_NXZ
?GetItem@CUIComboxTemplate@@IAEPAUStructComboxItem@@H@Z
?GetItemHeight@CUIOtherdrawListCtrlTemplate@@QAEHXZ
?GetItemText@CUIComboxTemplate@@QAEAAVCString@@H@Z
?GetItemToolTipText@CUIOtherdrawListCtrlTemplate@@UAE?AVCString@@HH@Z
?GetListCtrlSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetMessageMap@CBaseComboBox@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CBaseEdit@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CBaseEditEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CBaseTreeCtrl@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CColorStatic@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CCustomDlg@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CMultiBtn@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CPictureEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CSkinComboBox@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CSkinExComboBox@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIButtonTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIComboxTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIDlgTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIEditTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIHeadCtrlTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIListCtrlBaseTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIListCtrlButtonEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIListCtrlEx@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIListCtrlTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUINoFrameEdit@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUINoRegularButtonTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIOtherdrawListCtrlTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIOwnerdrawListCtrlTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIRichEditTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUISliderTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CUIStaticTemplate@@MBEPBUAFX_MSGMAP@@XZ
?GetNextBlock@CMyPictureEx@@IBE?AW4GIFBlockTypes@1@XZ
?GetNextBlock@CPictureExEx@@IBE?AW4GIFBlockTypes@1@XZ
?GetNextBlockLen@CMyPictureEx@@IBEHXZ
?GetNextBlockLen@CPictureExEx@@IBEHXZ
?GetNextGraphicBlock@CMyPictureEx@@IAEPAXPAI0PAUtagSIZE@@10@Z
?GetNextGraphicBlock@CPictureExEx@@IAEPAXPAI0PAUtagSIZE@@10@Z
?GetPaintRect@CMyPictureEx@@QAEHPAUtagRECT@@@Z
?GetPaintRect@CPictureExEx@@QAEHPAUtagRECT@@@Z
?GetPicWnd@CUIOtherdrawListCtrlTemplate@@QAEPAVCWnd@@HH@Z
?GetPictureExEx@CSkinConfContext@@QAEPAXPBDH@Z
?GetRadioCheck@CUIButtonTemplate@@QAE_NXZ
?GetRadioCheck@CUINoRegularButtonTemplate@@QAE_NXZ
?GetRuntimeClass@CMenuEx@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@CUIComboxTemplate@@UBEPAUCRuntimeClass@@XZ
?GetSize@CMyPictureEx@@QBE?AUtagSIZE@@XZ
?GetSize@CPictureExEx@@QBE?AUtagSIZE@@XZ
?GetSliderCtrlSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetSpaceTextBmp@CUIComboxTemplate@@QAEHXZ
?GetStaticSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?GetSubBlocksLen@CMyPictureEx@@IBEII@Z
?GetSubBlocksLen@CPictureExEx@@IBEII@Z
?GetTextItemHeight@CUIComboxTemplate@@QAEHXZ
?GetWindowVer@CAppSysOperation@@SAXXZ
?GetWndMove@CUIDlgTemplate@@IAEHXZ
?GrayStringA@CMenuEx@@IAEXPAVCDC@@ABVCString@@VCRect@@@Z
?HandleLeftMouseListBtnClick@CUIListCtrlTemplate@@MAEHXZ
?HandleMouseLeftBtnDown@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnDown@CUINoRegularButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnUp@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnUp@CUINoRegularButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseMove@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseMove@CUINoRegularButtonTemplate@@MAEHIVCPoint@@@Z
?HitTest@CUIButtonTemplate@@IAEHVCPoint@@@Z
?HitTest@CUINoRegularButtonTemplate@@IAEHVCPoint@@@Z
?HitTestEx@CUIListCtrlButtonEx@@QAEHAAVCPoint@@AAH@Z
?Init@CUIListCtrlTemplate@@UAEHXZ
?InitCarveGraph@CCarveGraph@@UAEHXZ
?InitCarveGraph@CRoundCornerRectangleGraph@@UAEHXZ
?InitCarveGraph@CUIEditTemplate@@MAEHXZ
?InitializeOperation@CAppSysOperation@@UAEXPAVCWnd@@@Z
?InsertMenuEx@CMenuEx@@QAEHIIIPBD@Z
?IsAnimatedGIF@CMyPictureEx@@QBEHXZ
?IsAnimatedGIF@CPictureExEx@@QBEHXZ
?IsControlHaveSkin@CAppSysOperation@@UAEHXZ
?IsControlHaveSkin@CUIListCtrlTemplate@@MAEHXZ
?IsGIF@CMyPictureEx@@QBEHXZ
?IsGIF@CPictureExEx@@QBEHXZ
?IsGraphSupportCurrentControl@CCarveGraph@@UAEHXZ
?IsGraphSupportCurrentControl@CRoundCornerRectangleGraph@@UAEHXZ
?IsNumber@CUIListCtrlTemplate@@KAHPBD@Z
?IsPlaying@CMyPictureEx@@QBEHXZ
?IsPlaying@CPictureExEx@@QBEHXZ
?IsRadioGroup@CUIButtonTemplate@@IAEHXZ
?IsRadioGroup@CUINoRegularButtonTemplate@@IAEHXZ
?IsStyle3State@CUIButtonTemplate@@IAEHXZ
?IsStyle3State@CUINoRegularButtonTemplate@@IAEHXZ
?IsStyleAuto@CUIButtonTemplate@@IAEHXZ
?IsStyleAuto@CUINoRegularButtonTemplate@@IAEHXZ
?IsStyleCheckBox@CUIButtonTemplate@@IAEHXZ
?IsStyleCheckBox@CUINoRegularButtonTemplate@@IAEHXZ
?IsStyleRadio@CUIButtonTemplate@@IAEHXZ
?IsStyleRadio@CUINoRegularButtonTemplate@@IAEHXZ
?IsWin98@CAppSysOperation@@SAHXZ
?Load@CMyPictureEx@@QAEHPBDH@Z
?Load@CPictureEx@@QAEHPBDPAX@Z
?Load@CPictureExEx@@QAEHPAXK@Z
?Load@CPictureExEx@@QAEHPBD0@Z
?Load@CPictureExEx@@QAEHPBD@Z
?LoadBitmapA@CMyPictureEx@@IAEPAUHBITMAP__@@VCString@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@PAVCBitmap@@@Z
?LoadButtonSkin@CUIListCtrlButtonEx@@QAEHPAX@Z
?LoadMenuA@CMenuEx@@QAEHI@Z
?LoadPngBitmap@CMyPictureEx@@IAEPAUHBITMAP__@@VCString@@@Z
?LoadSkin@CAppSysOperation@@UAEHPAX@Z
?LoadSkin@CCustomDlg@@QAEHXZ
?LoadSkin@CSkinComboBox@@UAEHPAX@Z
?LoadSkin@CSkinConfContext@@QAEHVCString@@@Z
?LoadSkin@CUIButtonTemplate@@UAEHPAX@Z
?LoadSkin@CUIComboxTemplate@@UAEHPAX@Z
?LoadSkin@CUIDlgTemplate@@UAEHPAX@Z
?LoadSkin@CUIEditTemplate@@UAEHPAX@Z
?LoadSkin@CUIHeadCtrlTemplate@@UAEHPAX@Z
?LoadSkin@CUIListCtrlBaseTemplate@@UAEHPAX@Z
?LoadSkin@CUIListCtrlTemplate@@UAEHPAX@Z
?LoadSkin@CUINoRegularButtonTemplate@@UAEHPAX@Z
?LoadSkin@CUINoRegularButtonTemplate@@UAEHPAXPAVCDC@@@Z
?LoadSkin@CUIOtherdrawListCtrlTemplate@@UAEHPAX@Z
?LoadSkin@CUIOwnerdrawListCtrlTemplate@@UAEHPAX@Z
?LoadSkin@CUISliderTemplate@@UAEHPAX@Z
?LoadSkin@CUIStaticTemplate@@UAEHPAX@Z
?LoadSkinToBitmap@CAppSysOperation@@SA_NAAVCBitmap@@PAXAA_N@Z
?LoadTemplateButtonImageList@CUIListCtrlTemplate@@MAEHVCString@@HHK@Z
?LoadToolBar@CMenuEx@@QAEXII@Z
?MeasureItem@CMenuEx@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?MeasureItem@CSkinExComboBox@@MAEXPAUtagMEASUREITEMSTRUCT@@@Z
?MeasureItem@CUIComboxTemplate@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?MeasureItem@CUIOtherdrawListCtrlTemplate@@IAEXPAUtagMEASUREITEMSTRUCT@@@Z
?ModifyMenuEx@CMenuEx@@QAEHIIIPBD@Z
?MoveButtonWindow@CMultiBtn@@QAEXXZ
?NeedShowHandCursor@CBaseTreeCtrl@@QAEXH@Z
?NeedShowHandCursor@CUIButtonTemplate@@QAEXH@Z
?NeedShowHandCursor@CUINoRegularButtonTemplate@@QAEXH@Z
?NeedShowHandCursor@CUIStaticTemplate@@QAEXH@Z
?OnBMGetCheck@CUIButtonTemplate@@IAEJIJ@Z
?OnBMGetCheck@CUINoRegularButtonTemplate@@IAEJIJ@Z
?OnBMSetCheck@CUIButtonTemplate@@IAEJIJ@Z
?OnBMSetCheck@CUINoRegularButtonTemplate@@IAEJIJ@Z
?OnCBPaint@CUIComboxTemplate@@IAEXPAVCDC@@@Z
?OnCreate@CUIRichEditTemplate@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnCtlColor@CBaseComboBox@@IAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z
?OnCtlColor@CBaseEdit@@IAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z
?OnCtlColor@CSkinComboBox@@IAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z
?OnCustomDraw@CUISliderTemplate@@IAEXPAUtagNMHDR@@PAJ@Z
?OnDeleteallitems@CUIOtherdrawListCtrlTemplate@@IAEXPAUtagNMHDR@@PAJ@Z
?OnDeleteallitems@CUIOwnerdrawListCtrlTemplate@@IAEXPAUtagNMHDR@@PAJ@Z
?OnDestroy@CPictureEx@@IAEXXZ
?OnDestroy@CSkinComboBox@@IAEXXZ
?OnDestroy@CUIDlgTemplate@@IAEXXZ
?OnEditKillFocus@CSkinComboBox@@IAEJIJ@Z
?OnEraseBkgnd@CMultiBtn@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIButtonTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIComboxTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIDlgTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIHeadCtrlTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIListCtrlBaseTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIListCtrlTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUINoRegularButtonTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIOtherdrawListCtrlTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIOwnerdrawListCtrlTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUISliderTemplate@@IAEHPAVCDC@@@Z
?OnEraseBkgnd@CUIStaticTemplate@@IAEHPAVCDC@@@Z
?OnGetDlgCode@CUIButtonTemplate@@IAEIXZ
?OnGetDlgCode@CUINoRegularButtonTemplate@@IAEIXZ
?OnHScroll@CUIListCtrlBaseTemplate@@IAEXIIPAVCScrollBar@@@Z
?OnHScroll@CUIOtherdrawListCtrlTemplate@@IAEXIIPAVCScrollBar@@@Z
?OnHScroll@CUIOwnerdrawListCtrlTemplate@@IAEXIIPAVCScrollBar@@@Z
?OnHeaderChanged@CUIListCtrlTemplate@@IAEXPAUtagNMHDR@@PAJ@Z

Sections

.text
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MixerXP.dll
.dll windows:4 windows x86 arch:x86

be4b7496ae3a9a71597cbbc9706a6998

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord800
ord540
ord858
ord535
ord860
ord1168
ord825
ord342
ord1182
ord2764
ord537
ord823
ord1253

msvcrt

_initterm
malloc
_adjust_fdiv
free
strncpy
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3

kernel32

OutputDebugStringA

user32

DestroyWindow

winmm

waveOutGetDevCapsA
sndPlaySoundA
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetDevCapsA
waveInGetNumDevs
mixerGetNumDevs
mixerClose
waveOutClose
mixerGetID
waveOutOpen
waveInClose
waveInOpen
mixerOpen
waveOutGetNumDevs
waveInGetDevCapsA

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

Exports

Exports

CreateMixer9158

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MultiChatGuest.dll
.dll windows:4 windows x86 arch:x86

1aab2d6efc3c3ae972793d54d333e0eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mvuilib

?AddWeb@CUIOtherdrawListCtrlTemplate@@QAEHHPAX0@Z
?AddMobile@CUIOtherdrawListCtrlTemplate@@QAEHHPAX0@Z
?AddListIcon@CUIOtherdrawListCtrlTemplate@@QAEHHPAX0@Z
?AddArtStar@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?SetItemGifImage@CUIOtherdrawListCtrlTemplate@@QAEHHHPBDKVCString@@@Z
?SetItemConsumeImage@CUIOtherdrawListCtrlTemplate@@QAEHHHPBDKVCString@@H@Z
?SetItemColor@CUIOtherdrawListCtrlTemplate@@QAEXHK@Z
?CloseThread@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?DeleteItem@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?SetToolTipHitMask@CUIOtherdrawListCtrlTemplate@@QAEGG@Z
?SetListCtrlBackTpye@CUIOtherdrawListCtrlTemplate@@QAEX_N@Z
?SetSelectFrameColor@CUIOtherdrawListCtrlTemplate@@QAEXK@Z
?SetNewBackType@CUIOtherdrawListCtrlTemplate@@QAEXKK@Z
?SetSelectColor@CUIOtherdrawListCtrlTemplate@@QAEXK@Z
?AddLPVOIDInfo@CUIOtherdrawListCtrlTemplate@@QAEXPAXH@Z
?SelectItem@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?SetItemHeight@CUIOtherdrawListCtrlTemplate@@QAEXI@Z
?AddItemStamp@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?DelItemStamp@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?DelAllItemStamp@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?NeedShowHandCursor@CUINoRegularButtonTemplate@@QAEXH@Z
?SetBGColor@CBaseEdit@@QAEXK@Z
?AddStatus@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?DelState@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?AddActivityIcon@CUIOtherdrawListCtrlTemplate@@QAEHHHPAX@Z
??_7CPictureExEx@@6B@
??0CUIListCtrlButtonEx@@QAE@XZ
??1CPictureEx@@UAE@XZ
??0CPictureEx@@QAE@XZ
?SetDrawFrame@CUIListCtrlBaseTemplate@@QAEXH@Z
?SetFrameColor@CUIListCtrlBaseTemplate@@QAEXK@Z
?LoadSkin@CUIListCtrlBaseTemplate@@UAEHPAX@Z
?DrawItem@CUIListCtrlBaseTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?PreSubclassWindow@CUIListCtrlBaseTemplate@@MAEXXZ
?GetMessageMap@CUIListCtrlEx@@MBEPBUAFX_MSGMAP@@XZ
??1CUIListCtrlEx@@UAE@XZ
??0CUIListCtrlEx@@QAE@XZ
?messageMap@CUIListCtrlEx@@1UAFX_MSGMAP@@B
?LoadSkin@CUIOtherdrawListCtrlTemplate@@UAEHPAX@Z
?OnToolTipText@CUIOtherdrawListCtrlTemplate@@MAEHIPAUtagNMHDR@@PAJ@Z
?GetItemToolTipText@CUIOtherdrawListCtrlTemplate@@UAE?AVCString@@HH@Z
?SetItemToolTipText@CUIOtherdrawListCtrlTemplate@@UAEHHHPBD@Z
?DeleteAllToolTips@CUIOtherdrawListCtrlTemplate@@UAEXXZ
?DrawItem@CUIOtherdrawListCtrlTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?WindowProc@CUIOtherdrawListCtrlTemplate@@MAEJIIJ@Z
?OnToolHitTest@CUIOtherdrawListCtrlTemplate@@MBEHVCPoint@@PAUtagTOOLINFOA@@@Z
?PreSubclassWindow@CUIOtherdrawListCtrlTemplate@@MAEXXZ
??0CUIOtherdrawListCtrlTemplate@@QAE@XZ
??1CUIOtherdrawListCtrlTemplate@@UAE@XZ
?messageMap@CUIOtherdrawListCtrlTemplate@@1UAFX_MSGMAP@@B
?OnMouseMove@CUIOtherdrawListCtrlTemplate@@IAEXIVCPoint@@@Z
?LoadSkin@CSkinComboBox@@UAEHPAX@Z
?messageMap@CSkinComboBox@@1UAFX_MSGMAP@@B
?AddNewVip@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
?SetTransParent@CUIButtonTemplate@@QAEXH@Z
?AttachHeaderCtrl@CUIListCtrlBaseTemplate@@QAEXXZ
?SetSelectColor@CUIListCtrlBaseTemplate@@QAEXK@Z
?SetSelectFrameColor@CUIListCtrlBaseTemplate@@QAEXK@Z
?SetSelectTextColor@CUIListCtrlBaseTemplate@@QAEXK@Z
??1CUISortListCtrlEx@@UAE@XZ
??0CUISortListCtrlEx@@QAE@XZ
?AddCBImageItems@CSkinExComboBox@@QAEXAAV?$vector@PAUHBITMAP__@@V?$allocator@PAUHBITMAP__@@@std@@@std@@V?$vector@PBDV?$allocator@PBD@std@@@3@@Z
??0CSkinExComboBox@@QAE@XZ
??1CSkinExComboBox@@UAE@XZ
?SetTextColor@CBaseEdit@@QAEXKK@Z
?SetBold@CColorStatic@@QAEX_N@Z
?GetPictureExEx@CSkinConfContext@@QAEPAXPBDH@Z
?SetFontColor@CColorStatic@@QAEXK@Z
?AddBadge@CUIOtherdrawListCtrlTemplate@@QAEHH@Z
?DelBadge@CUIOtherdrawListCtrlTemplate@@QAEHH@Z
?SetBadge@CUIOtherdrawListCtrlTemplate@@QAEXVCString@@H@Z
?SetBackColor@CMenuEx@@QAEXK@Z
?LoadToolBar@CMenuEx@@QAEXII@Z
?ModifyMenuEx@CMenuEx@@QAEHIIIPBD@Z
?RemoveMenuEx@CMenuEx@@QAEHII@Z
??1CUIListCtrlButtonEx@@UAE@XZ
?Create@CUIDlgTemplate@@QAEHIPAVCWnd@@@Z
?LoadMenuA@CMenuEx@@QAEHI@Z
??0CUISliderTemplate@@QAE@XZ
??1CUISliderTemplate@@UAE@XZ
?LoadSkinToBitmap@CAppSysOperation@@SA_NAAVCBitmap@@PAXAA_N@Z
?LoadSkin@CCustomDlg@@QAEHXZ
?SetBold@CUIStaticTemplate@@QAEX_N@Z
?messageMap@CCustomDlg@@1UAFX_MSGMAP@@B
??0CCustomDlg@@QAE@IPAVCWnd@@@Z
??1CCustomDlg@@UAE@XZ
?LoadSkin@CAppSysOperation@@UAEHPAX@Z
?GetRuntimeClass@CMenuEx@@UBEPAUCRuntimeClass@@XZ
?DrawItem@CMenuEx@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?MeasureItem@CMenuEx@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?messageMap@CUIButtonTemplate@@1UAFX_MSGMAP@@B
?PreSubclassWindow@CUIButtonTemplate@@MAEXXZ
?PreTranslateMessage@CUIButtonTemplate@@MAEHPAUtagMSG@@@Z
?DrawItem@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?HandleMouseMove@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnDown@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnUp@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?DrawPushButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawRadioButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawCheckBoxButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?SetCtrlTextFont@CAppSysAttribute@@UAEXUtagLOGFONTA@@@Z
?GetCtrlTextFont@CAppSysAttribute@@UAEAAUtagLOGFONTA@@XZ
?SetCtrlTextColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlTextColor@CAppSysAttribute@@UAEKXZ
?SetCtrlBackColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlBackColor@CAppSysAttribute@@UAEKXZ
?SetCtrlTextBold@CAppSysAttribute@@UAEXH@Z
?EnableCtrlTextBold@CAppSysAttribute@@UAEHXZ
?SetCtrlTextHeight@CAppSysAttribute@@UAEXH@Z
?GetCtrlTextHeight@CAppSysAttribute@@UAEHXZ
?SetCtrlTextType@CAppSysAttribute@@UAEHVCString@@@Z
?GetCtrlTextType@CAppSysAttribute@@UAEAAVCString@@XZ
?FitBitmapSize@CUIButtonTemplate@@UAEXXZ
?PaintBackGround@CAppSysOperation@@UAEHPAVCDC@@@Z
?LoadSkin@CUIButtonTemplate@@UAEHPAX@Z
?GetCurrentSkin@CUIButtonTemplate@@MAEHPAX@Z
?SetFrameColor@CBaseEdit@@QAEXK@Z
?SetDrawFrame@CBaseEdit@@QAEXH@Z
??0CBaseEdit@@QAE@XZ
??1CBaseEdit@@UAE@XZ
?SetToolTipText@CUINoRegularButtonTemplate@@QAEXPBD@Z
??0CMemDC@@QAE@PAVCDC@@AAVCRect@@@Z
??1CMemDC@@UAE@XZ
?NeedShowHandCursor@CUIButtonTemplate@@QAEXH@Z
?SetToolTipText@CUIButtonTemplate@@QAEXPBD@Z
?SetNeedHandCursor@CColorStatic@@QAEX_N@Z
?OnInitDialog@CUIDlgTemplate@@MAEHXZ
?messageMap@CUIDlgTemplate@@1UAFX_MSGMAP@@B
?DoDataExchange@CUIDlgTemplate@@MAEXPAVCDataExchange@@@Z
??0CUIDlgTemplate@@QAE@IPAVCWnd@@@Z
??1CUIDlgTemplate@@UAE@XZ
?FitBitmapSize@CAppSysOperation@@UAEXXZ
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@@Z
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@PAVCBitmap@@@Z
?CleanUp@CAppSysOperation@@UAEXXZ
?PaintBackGround@CUIDlgTemplate@@MAEHPAVCDC@@@Z
?DrawSkin@CAppSysOperation@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?AdjustPosition@CAppSysOperation@@UAEHUtagRECT@@@Z
?AdjustPosition@CAppSysOperation@@UAEHHHHH@Z
?DrawContent@CAppSysOperation@@UAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?LoadSkin@CUIDlgTemplate@@UAEHPAX@Z
?CleanSkin@CAppSysOperation@@UAEHPAX@Z
?GetCurrentSkin@CAppSysOperation@@UAEHPAX@Z
?InitializeOperation@CAppSysOperation@@UAEXPAVCWnd@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@PAVCBitmap@@@Z
?CleanBitmapMem@CAppSysOperation@@UAEHXZ
?IsControlHaveSkin@CAppSysOperation@@UAEHXZ
??0CMenuEx@@QAE@XZ
?AppendMenuEx@CMenuEx@@QAEHIIPBD@Z
??1CMenuEx@@UAE@XZ
?SetHaveText@CUIButtonTemplate@@QAEX_NI@Z
?SetBtnTextColor@CUIButtonTemplate@@QAEXK@Z
??0CUIButtonTemplate@@QAE@XZ
??1CUIButtonTemplate@@UAE@XZ
?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?SetColorFrame@CSkinComboBox@@QAEXK@Z
?SetHaveText@CUINoRegularButtonTemplate@@QAEX_NI@Z
?SetBtnTextColor@CUINoRegularButtonTemplate@@QAEXK@Z
?SetFontUnline@CColorStatic@@QAEX_N@Z
??0CSkinComboBox@@QAE@XZ
??0CUINoRegularButtonTemplate@@QAE@XZ
??0CUIStaticTemplate@@QAE@XZ
??1CSkinComboBox@@UAE@XZ
??1CUINoRegularButtonTemplate@@UAE@XZ
??1CUIStaticTemplate@@UAE@XZ
?SetColor@CColorStatic@@QAEXKKK@Z
??0CColorStatic@@QAE@XZ
??1CColorStatic@@UAE@XZ

winmm

waveOutClose
mixerGetID
mixerGetControlDetailsA
mixerSetControlDetails
sndPlaySoundA
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek
mmioCreateChunk
mmioGetInfo
waveOutOpen
mmioClose
mmioOpenA
mmioOpenW
mmioAscend
mmioDescend
mmioRead
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetDevCapsA
mixerOpen
waveInClose
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveInOpen
mixerClose
mixerGetNumDevs

avmodule50

?StartThread@CAVManager@@QAEXXZ
?SetBufferTime@CAVManager@@QAEXH@Z
?SetAudioInfo@CAVManager@@QAEXHHHHH_N0@Z
?InitConfigInfo@CAVManager@@QAEHPBD@Z
?SetUserInfo@CAVManager@@QAEXHHPBD@Z
?SetNetInfo@CAVManager@@QAEXPBDI@Z
??0CAVManager@@QAE@PAVCWnd@@@Z
?DeleteLinePut@CAVManager@@QAEXH@Z
?StartSocket@CAVManager@@QAEXXZ
?AddLineOutput@CAVManager@@QAE_NHHPBDH@Z
?AddLineInput@CAVManager@@QAE_NHHPBDHH@Z
?InsertLinePut@CAVManager@@QAEHVCRect@@I@Z
?SetVideoInfoEx@CAVManager@@QAEXHHHHH@Z
?GetOutput@CAVManager@@QAEPAVCWnd@@H@Z
?SetOutputAudioOpen@CAVManager@@QAEXHH@Z
?AddAudioData@CAVManager@@QAEXPAEH@Z
?GetInputAudioOpen@CAVManager@@QAEHXZ
?GetInput@CAVManager@@QAEPAVCWnd@@XZ
?GetAudioFrameLength@CAVManager@@QAEHXZ
?SetWaveIn@CAVManager@@QAE_N_N@Z
?SetInputAudioOpen@CAVManager@@QAEXH@Z
?SetSnapshotFilePath@CAVManager@@QAEXPBD@Z
?Close@CAVManager@@QAEXXZ
?GetNetRate@CAVManager@@QAEIXZ

mfc42

ord3729
ord4406
ord2587
ord6119
ord562
ord816
ord5148
ord2113
ord4267
ord6128
ord3138
ord4287
ord2112
ord783
ord3711
ord4083
ord3289
ord2455
ord2408
ord1862
ord1795
ord861
ord4123
ord538
ord3005
ord4809
ord1116
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord656
ord3610
ord1601
ord3767
ord3061
ord361
ord2516
ord2935
ord781
ord3708
ord1929
ord6734
ord6379
ord398
ord700
ord955
ord4189
ord3021
ord913
ord5594
ord5632
ord819
ord568
ord6145
ord5863
ord1265
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord4033
ord433
ord4538
ord3394
ord2097
ord3920
ord4317
ord6111
ord825
ord3571
ord5265
ord4376
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord800
ord641
ord540
ord324
ord3626
ord3663
ord2414
ord4234
ord2864
ord823
ord858
ord924
ord6199
ord3092
ord2818
ord6241
ord4710
ord4299
ord2379
ord1768
ord1641
ord535
ord2405
ord5785
ord640
ord1640
ord323
ord6215
ord2086
ord1168
ord941
ord2764
ord4278
ord5683
ord537
ord5280
ord2302
ord2078
ord860
ord3874
ord3584
ord543
ord1187
ord803
ord668
ord3181
ord3178
ord4058
ord2781
ord2770
ord356
ord1175
ord2370
ord6334
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord1146
ord6055
ord1776
ord5290
ord3402
ord4424
ord3721
ord3619
ord795
ord2820
ord3811
ord567
ord3573
ord3693
ord755
ord6172
ord5789
ord2860
ord470
ord6442
ord1233
ord4284
ord2642
ord5710
ord4129
ord2763
ord5875
ord3089
ord4476
ord5981
ord922
ord6877
ord2915
ord1200
ord926
ord4853
ord326
ord2688
ord2135
ord818
ord3706
ord4133
ord4297
ord2859
ord5788
ord472
ord2754
ord609
ord693
ord6605
ord1099
ord4277
ord6663
ord6880
ord4402
ord3640
ord6905
ord3998
ord2567
ord3996
ord3301
ord4243
ord501
ord5621
ord1083
ord1949
ord4034
ord6134
ord2566
ord556
ord809
ord2452
ord1088
ord2122
ord2116
ord2546
ord1176
ord291
ord6358
ord939
ord613
ord289
ord773
ord6901
ord3977
ord6007
ord6907
ord5642
ord998
ord2639
ord2862
ord3286
ord6157
ord3716
ord790
ord4275
ord3797
ord6197
ord3546
ord3742
ord5787
ord283
ord4396
ord3574
ord3317
ord665
ord1979
ord6385
ord5186
ord354
ord923
ord6453
ord5810
ord5481
ord2031
ord4411
ord4447
ord4335
ord4863
ord5796
ord5478
ord1971
ord966
ord3570
ord605
ord521
ord278
ord6307
ord4167
ord1638
ord2029
ord2077
ord2575
ord940
ord6200
ord5937
ord6136
ord6779
ord6648
ord3763
ord2513
ord293
ord3771
ord2753
ord1574
ord5607
ord2762
ord5442
ord3318
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord801
ord541
ord804
ord686
ord2301
ord2289
ord536
ord4204
ord3283
ord3258
ord1705
ord430
ord1269
ord5572
ord4694
ord6883
ord539
ord6143
ord925
ord6785
ord6282
ord6283
ord3097
ord6569
ord542
ord2777
ord3337
ord1980
ord5600
ord3994
ord2776
ord6467
ord798
ord1997
ord6392
ord5194
ord533
ord2919
ord6778
ord2096
ord384
ord6930
ord1158
ord2614
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord692
ord3803
ord1799
ord614
ord2623
ord290
ord4226
ord2486
ord4003
ord6021
ord5440
ord6383
ord5450
ord6394
ord2784
ord2100
ord2580
ord4400
ord3630
ord682
ord2574
ord3572
ord1793
ord4160
ord5873
ord2515
ord355
ord6696
ord2108
ord3370
ord6762
ord6242
ord5861
ord3752
ord3910
ord4202
ord2089
ord4480
ord5651
ord3616
ord3127
ord5608
ord2393
ord5356
ord5808
ord6058
ord1075
ord5204
ord3229
ord6059
ord389
ord690
ord1988
ord5207
ord353
ord3293
ord3719
ord793
ord2645
ord1567
ord268
ord6888
ord6675
ord5807
ord3698
ord765
ord4224
ord2582

msvcrt

_itoa
_adjust_fdiv
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_EH_prolog
strstr
_vsnprintf
printf
fprintf
memmove
towupper
isdigit
_mbsrchr
isspace
isalnum
wcsncpy
_local_unwind2
_except_handler3
exit
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
malloc
_i64toa
_snprintf
srand
sprintf
localtime
strftime
puts
_beginthreadex
atol
wcslen
_atoi64
rand
strncpy
time
_ftol
wcscpy
atoi
_mbscmp
__CxxFrameHandler
fscanf
fgets
getc
fputc
fflush
ftell
fseek
_purecall
fclose
fopen
fread
fwrite

kernel32

WideCharToMultiByte
WinExec
WritePrivateProfileStringA
GetPrivateProfileStringA
FindResourceW
LoadResource
SizeofResource
LockResource
MultiByteToWideChar
lstrlenW
InterlockedIncrement
GetVersionExA
IsDBCSLeadByte
GetModuleFileNameA
OutputDebugStringA
GetTickCount
Sleep
WaitForSingleObject
lstrlenA
InterlockedDecrement
CreateThread
GetExitCodeThread
TerminateThread
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
LoadLibraryA
GetProcAddress
FreeLibrary
GetFileAttributesA
InitializeCriticalSection
GetModuleHandleA
lstrcmpA
GetSystemDirectoryA
MulDiv
lstrcpynA
GetWindowsDirectoryA
IsValidCodePage
GetCPInfo
GetVersion
LocalAlloc
LocalFree
FindFirstFileA
FindClose
GetCurrentThreadId
FindResourceA
GlobalFree
WriteFile
IsBadWritePtr
VirtualQuery
FormatMessageA
GetLocalTime
SetFilePointer
SetUnhandledExceptionFilter
CreateFileA
GetFileSize
ReadFile
GetLastError
CreateDirectoryA
DeleteCriticalSection

user32

CreateWindowExA
wvsprintfA
SetCapture
ReleaseCapture
wsprintfA
UnhookWindowsHookEx
CreateMenu
GetMenuStringA
ModifyMenuA
InsertMenuA
SetWindowsHookExA
CallNextHookEx
GetClassNameA
CallWindowProcA
IsRectEmpty
SetParent
GetScrollInfo
DestroyWindow
MessageBeep
CopyIcon
IsZoomed
RegisterClassA
MoveWindow
EnableMenuItem
MessageBoxA
InflateRect
CopyImage
UpdateWindow
GetDlgCtrlID
BeginPaint
EndPaint
DefWindowProcA
SetRect
SetRectEmpty
IsIconic
ScreenToClient
GetWindow
GetMenuState
GetMenuItemID
CreatePopupMenu
CopyRect
GetSysColor
LoadBitmapA
UnregisterClassA
SetWindowRgn
SetWindowPos
InvalidateRect
LoadImageA
ClientToScreen
FillRect
DrawTextA
KillTimer
GetWindowRect
PtInRect
LoadCursorA
SetCursor
SetTimer
IsWindowVisible
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetCursorPos
LoadMenuA
GetSubMenu
GetClientRect
IsWindow
SendMessageA
EnableWindow
GetDC
SetFocus
ShowScrollBar
GetWindowDC
ReleaseDC
GetParent
PostMessageA
GetWindowLongA
SetWindowLongA
OffsetRect
GetMenuItemCount
GetClassInfoExA
RedrawWindow
GetWindowTextA
DrawStateA
WindowFromPoint
IsChild
SetActiveWindow
ShowWindow
GetMenuItemRect
FindWindowA
LoadIconA
CheckMenuItem
GetDesktopWindow
GetSystemMetrics
RegisterClassExA
GetAsyncKeyState
GetFocus
SetForegroundWindow
SystemParametersInfoA
GetSystemMenu
RemoveMenu
FlashWindow
GetMenu

gdi32

FillPath
GetDIBits
SetDIBits
GetDeviceCaps
EnumFontFamiliesExA
CreateBitmap
SetBkColor
GetMapMode
GetTextMetricsA
GetTextExtentPoint32A
Rectangle
SetMapMode
SetBkMode
SetTextColor
TextOutA
CreateCompatibleBitmap
StretchBlt
GetPixel
SetPixel
CreateRoundRectRgn
CreateDIBSection
BitBlt
DeleteDC
CreateRectRgn
BeginPath
EndPath
PathToRegion
CombineRgn
CreateFontA
GetStockObject
CreateSolidBrush
CreatePen
SelectObject
RoundRect
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateDIBitmap
Ellipse
GetObjectA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

comctl32

InitCommonControlsEx
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Add
_TrackMouseEvent

ole32

CoInitialize
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoUninitialize
OleSetContainedObject
ReleaseStgMedium
OleDuplicateData
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
OleRun

olepro32

ord251

oleaut32

CreateErrorInfo
SysAllocStringByteLen
SysAllocString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysFreeString
SysStringLen
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
GetErrorInfo
SetErrorInfo
SysStringByteLen

wsock32

sendto
socket
gethostbyname
inet_addr
WSAGetLastError
select
__WSAFDIsSet
shutdown
closesocket
recvfrom
WSACleanup

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z

gdiplus

GdipCreatePen1
GdipDrawString
GdipDeleteFontFamily
GdipGetFontSize
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateStringFormat
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipFillRectangleI
GdipCreateSolidFill
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipCloneBrush
GdipDrawLineI
GdipCreateFontFamilyFromName
GdipCloneImage
GdipDrawImageRect
GdipLoadImageFromFile
GdipReleaseDC
GdipDeletePath
GdipDrawPath
GdipAddPathStringI
GdipCreatePath
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipDrawRectangleI
GdipDeletePen
GdipDeleteFont
GdipDisposeImage
GdipDeleteBrush
GdipDeleteStringFormat
GdipDeleteGraphics
GdipCreateFont

publictool

?Load@CxImage@@QAE_NPBDK@Z
?InitParam@CHash@@QAEHXZ
??0CHash@@QAE@K@Z
??1CHash@@UAE@XZ
?FindNext@CHash@@QAEPAXXZ
?FindFirst@CHash@@QAEXH@Z
?InsertItem@CHash@@QAEHJPAX@Z
?DeleteItem@CHash@@QAEPAXJ@Z
?SetPos@CBuffer@@QAEXKK@Z
?GetBufferLen@CBuffer@@QAEKXZ
?GetBuffer@CBuffer@@QAEPAEXZ
??0CBuffer@@QAE@K@Z
??1CBuffer@@UAE@XZ
?BufferCpy@CBuffer@@QAEXPAEKK@Z
?GetRealBuffer@CBuffer@@QAEPBEXZ
?GetRealLen@CBuffer@@QAEKXZ
??0CBuffer@@QAE@PAEK@Z
??0CBuffer@@QAE@ABV0@@Z
?IsValid@CxImage@@QBE_NXZ
??_FCxImageEx@@QAEXXZ
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?IsValid@CxImageEx@@QBE_NXZ
?SetTransColor@CxImageEx@@QAEXUtagRGBQUAD@@@Z
?SetTransIndex@CxImageEx@@QAEXJ@Z
?GetPixelColor@CxImageEx@@QAE?AUtagRGBQUAD@@JJ_N@Z
?base64_decode@CBase64@@SAHPADI0@Z
?GetHashItemNum@CHash@@QAEHXZ
?InsertItem@CHash@@QAEHPBDPAX@Z
?QueryItem@CHash@@QAEPAXPBD@Z
?UnCompressNetData@CZip@@SA_NPAEPAKPBEK@Z
?GetWidth@CxImageEx@@QBEKXZ
?GetNext@CHash@@QAEPAXPAPAXAAHH@Z
?GetFirst@CHash@@QAEPAXHAAHH@Z
?DeleteItem@CHash@@QAEPAXPBD@Z
??1CxImageEx@@UAE@XZ
?QueryItem@CHash@@QAEPAXJ@Z
??0CxImage@@QAE@ABV0@_N11@Z
?IsGrayScale@CxImage@@QAE_NXZ
?IncreaseBpp@CxImage@@QAE_NK@Z
?SetJpegQuality@CxImage@@QAEXE@Z
?Save@CxImage@@QAE_NPBDK@Z
??0CxImageEx@@QAE@K@Z
?Load@CxImageEx@@QAE_NPBDK@Z
?GetDIB@CxImageEx@@QBEPAXXZ
?base64_encode@CBase64@@SAHPADI0@Z
?GetBits@CxImageEx@@QAEPAEK@Z
??0CxImage@@QAE@K@Z
?DestroyFrames@CxImage@@QAE_NXZ
?Destroy@CxImage@@QAE_NXZ
??1CxMemFile@@UAE@XZ
??0CxMemFile@@QAE@PAEK@Z
?Close@CxMemFile@@UAE_NXZ
?Write@CxMemFile@@UAEIPBXII@Z
?Seek@CxMemFile@@UAE_NJH@Z
?Tell@CxMemFile@@UAEJXZ
?Size@CxMemFile@@UAEJXZ
?Flush@CxMemFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?Error@CxMemFile@@UAEJXZ
?PutC@CxMemFile@@UAE_NE@Z
?GetC@CxMemFile@@UAEJXZ
?GetS@CxMemFile@@UAEPADPADH@Z
?Scanf@CxMemFile@@UAEJPBDPAX@Z
?Read@CxMemFile@@UAEIPAXII@Z

shlwapi

PathFileExistsA
PathIsDirectoryA

pdh

PdhGetRawCounterValue
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhRemoveCounter
PdhAddCounterA
PdhCloseQuery
PdhOpenQueryA
PdhComputeCounterStatistics

Exports

Exports

??0CFlashTab@@QAE@PAVCWnd@@@Z
??0CPictureExEx@@QAE@XZ
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??0mutecontrol@@QAE@ABV0@@Z
??0mutecontrol@@QAE@XZ
??1CFlashTab@@UAE@XZ
??1CPictureExEx@@UAE@XZ
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??1mutecontrol@@UAE@XZ
??4CEasySecret@@QAEAAV0@ABV0@@Z
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??4mutecontrol@@QAEAAV0@ABV0@@Z
??_7CFlashTab@@6B@
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_7mutecontrol@@6B@
??_FCFlashTab@@QAEXXZ
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Close@mutecontrol@@QAEXXZ
?Create@mutecontrol@@QAEXPAVCWnd@@KK@Z
?DoDataExchange@CFlashTab@@MAEXPAVCDataExchange@@@Z
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetAppPath@CFlashTab@@AAEXXZ
?GetC@CxIOFile@@UAEJXZ
?GetFrameCount@CPictureExEx@@QBEHXZ
?GetMessageMap@CFlashTab@@MBEPBUAFX_MSGMAP@@XZ
?GetNextBlock@CPictureExEx@@IBE?AW4GIFBlockTypes@1@XZ
?GetNextBlockLen@CPictureExEx@@IBEHXZ
?GetNextGraphicBlock@CPictureExEx@@IAEPAXPAI0PAUtagSIZE@@10@Z
?GetPaintRect@CPictureExEx@@QAEHPAUtagRECT@@@Z
?GetS@CxIOFile@@UAEPADPADH@Z
?GetSize@CPictureExEx@@QBE?AUtagSIZE@@XZ
?GetSubBlocksLen@CPictureExEx@@IBEII@Z
?GetValue@mutecontrol@@QAEKXZ
?IsAnimatedGIF@CPictureExEx@@QBEHXZ
?IsGIF@CPictureExEx@@QBEHXZ
?IsPlaying@CPictureExEx@@QBEHXZ
?Load@CPictureExEx@@QAEHPAXK@Z
?Load@CPictureExEx@@QAEHPBD0@Z
?Load@CPictureExEx@@QAEHPBD@Z
?OnButtonClose@CFlashTab@@IAEXXZ
?OnInitDialog@CFlashTab@@MAEHXZ
?OnKillFocus@CFlashTab@@IAEXPAVCWnd@@@Z
?OnNotify@CFlashTab@@MAEHIJPAJ@Z
?OnPaint@CFlashTab@@IAEXXZ
?OnSelect@CFlashTab@@IAEJIJ@Z
?OnSetFocus@CFlashTab@@IAEJIJ@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?ResetDataPointer@CPictureExEx@@IAEXXZ
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?SetPaintRect@CPictureExEx@@QAEHPBUtagRECT@@@Z
?SetValue@mutecontrol@@QAEXK@Z
?Size@CxIOFile@@UAEJXZ
?SkipNextBlock@CPictureExEx@@IAEHXZ
?SkipNextGraphicBlock@CPictureExEx@@IAEHXZ
?Tell@CxIOFile@@UAEJXZ
?UnLoad@CPictureExEx@@QAEXXZ
?Write@CxIOFile@@UAEIPBXII@Z
?_GetBaseMessageMap@CFlashTab@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@CFlashTab@@0QBUAFX_MSGMAP_ENTRY@@B
?initCtrl@CFlashTab@@AAEXXZ
?messageMap@CFlashTab@@1UAFX_MSGMAP@@B
CreatePublicDLL

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 372KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 588KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MultiChatKTV.dll
.dll windows:4 windows x86 arch:x86

9b417439295aadc76cb3cba42bd4e3e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1200
ord1187
ord4220
ord2584
ord3654
ord924
ord2754
ord2438
ord2408
ord2753
ord537
ord3573
ord3693
ord5787
ord5788
ord283
ord2859
ord2452
ord2096
ord2097
ord1168
ord535
ord1175
ord1146
ord807
ord4163
ord6625
ord554
ord860
ord5572
ord2915
ord2863
ord1644
ord5440
ord6383
ord5450
ord6394
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord858
ord5875
ord323
ord1640
ord1641
ord686
ord5785
ord826
ord269
ord2567
ord2566
ord2405
ord640
ord2414
ord3663
ord3626
ord540
ord800
ord3571
ord823
ord384
ord825
ord1116

msvcrt

__CxxFrameHandler
_snprintf
memmove
_EH_prolog
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_purecall

kernel32

LocalFree
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
LocalAlloc

user32

GetDC
ReleaseDC
SendMessageA
CopyRect
LoadBitmapA
DrawStateA
InflateRect
GetSysColor
LoadImageA
GetClientRect
RemoveMenu
GetMenuItemID
AppendMenuA
InsertMenuA
ModifyMenuA
GetMenuState
CreateMenu
LoadMenuA
GetMenuItemCount
GetSubMenu
CreatePopupMenu
FillRect
GetMenuStringA

gdi32

Rectangle
GetObjectA
CreatePen
GetTextExtentPoint32A
CreateCompatibleDC
CreateSolidBrush
StretchBlt
BitBlt
CreateCompatibleBitmap

comctl32

ImageList_Draw
ImageList_AddMasked

Exports

Exports

CreateKTV
GetDllIndex

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MultiChatKTV3.dll
.dll windows:4 windows x86 arch:x86

40ea5254b01229da0e11b767763d111c

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

ab:f8:1b:47:7f:e3:de:3c:67:b0:da:29:57:59:84:c2:3b:43:bd:f1
Signer

Actual PE Digest

ab:f8:1b:47:7f:e3:de:3c:67:b0:da:29:57:59:84:c2:3b:43:bd:f1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1200
ord1187
ord4220
ord2584
ord3654
ord924
ord2754
ord2438
ord2408
ord2753
ord537
ord3573
ord3693
ord5787
ord5788
ord283
ord2859
ord2452
ord2096
ord2097
ord1168
ord535
ord1175
ord1146
ord807
ord4163
ord6625
ord554
ord860
ord5572
ord2915
ord2863
ord1644
ord5440
ord6383
ord5450
ord6394
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord858
ord5875
ord323
ord1640
ord1641
ord686
ord5785
ord826
ord269
ord2567
ord2566
ord2405
ord640
ord2414
ord3626
ord3663
ord540
ord800
ord3571
ord823
ord384
ord825
ord1116

msvcrt

__CxxFrameHandler
_snprintf
memmove
_EH_prolog
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_purecall

kernel32

LocalFree
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
LocalAlloc

user32

GetDC
ReleaseDC
SendMessageA
CopyRect
FillRect
LoadBitmapA
InflateRect
GetSysColor
LoadImageA
GetClientRect
GetSystemMetrics
RemoveMenu
GetMenuItemID
AppendMenuA
ModifyMenuA
GetMenuState
CreateMenu
LoadMenuA
GetMenuItemCount
GetSubMenu
CreatePopupMenu
GetMenuStringA
DrawStateA
InsertMenuA

gdi32

Rectangle
GetObjectA
CreatePen
GetTextExtentPoint32A
CreateCompatibleDC
CreateSolidBrush
StretchBlt
BitBlt
CreateCompatibleBitmap

comctl32

ImageList_Draw
ImageList_AddMasked

Exports

Exports

CreateKTV
GetDllIndex

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MultiTenRoom.dll
.dll windows:4 windows x86 arch:x86

c738b275c8dc976809b9bf200888aa03

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

c6:fe:60:db:59:1b:3a:e1:6b:5c:de:f3:dd:cf:d4:19:c7:0c:69:ca
Signer

Actual PE Digest

c6:fe:60:db:59:1b:3a:e1:6b:5c:de:f3:dd:cf:d4:19:c7:0c:69:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

sndPlaySoundA
mixerClose
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetLineControlsA
mixerGetNumDevs
mixerOpen
mixerGetDevCapsA
mixerGetLineInfoA

mvuilib

?SetItemConsumeImage@CUIOtherdrawListCtrlTemplate@@QAEHHHPBDKVCString@@H@Z
?RemoveMenuEx@CMenuEx@@QAEHII@Z
?LoadMenuA@CMenuEx@@QAEHI@Z
?SetItemHeight@CUIOtherdrawListCtrlTemplate@@QAEXI@Z
?ModifyMenuEx@CMenuEx@@QAEHIIIPBD@Z
?SelectItem@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?SetItemColor@CUIOtherdrawListCtrlTemplate@@QAEXHK@Z
?SetItemGifImage@CUIOtherdrawListCtrlTemplate@@QAEHHHPBDKVCString@@@Z
?SetToolTipHitMask@CUIOtherdrawListCtrlTemplate@@QAEGG@Z
?AddLPVOIDInfo@CUIOtherdrawListCtrlTemplate@@QAEXPAXH@Z
?OnMouseMove@CUIButtonTemplate@@IAEXIVCPoint@@@Z
?PreSubclassWindow@CColorStatic@@UAEXXZ
?WindowProc@CColorStatic@@MAEJIIJ@Z
?DefWindowProcA@CColorStatic@@MAEJIIJ@Z
?NeedShowHandCursor@CUIButtonTemplate@@QAEXH@Z
?SetToolTipText@CUIButtonTemplate@@QAEXPBD@Z
?SetSkinConfContext@CUIDlgTemplate@@QAEXPAVCSkinConfContext@@@Z
?Create@CUIDlgTemplate@@QAEHIPAVCWnd@@@Z
??1CBaseComboBox@@UAE@XZ
?DeleteItem@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?SetSelectColor@CUIOtherdrawListCtrlTemplate@@QAEXK@Z
?SetSelectFrameColor@CUIOtherdrawListCtrlTemplate@@QAEXK@Z
?SetListCtrlBackTpye@CUIOtherdrawListCtrlTemplate@@QAEX_N@Z
?GetBitmapWidth@CAppSysOperation@@QAEHXZ
?GetBitmapHeight@CAppSysOperation@@QAEHXZ
??0CUIOtherdrawListCtrlTemplate@@QAE@XZ
??1CUIOtherdrawListCtrlTemplate@@UAE@XZ
?OnInitDialog@CUIDlgTemplate@@MAEHXZ
?SetFrameColor@CUIListCtrlBaseTemplate@@QAEXK@Z
?SetDrawFrame@CUIListCtrlBaseTemplate@@QAEXH@Z
?messageMap@CUIDlgTemplate@@1UAFX_MSGMAP@@B
?DoDataExchange@CUIDlgTemplate@@MAEXPAVCDataExchange@@@Z
??0CUIDlgTemplate@@QAE@IPAVCWnd@@@Z
??0CUIListCtrlButtonEx@@QAE@XZ
??1CUIDlgTemplate@@UAE@XZ
??1CUIListCtrlButtonEx@@UAE@XZ
?FitBitmapSize@CAppSysOperation@@UAEXXZ
?PaintBackGround@CUIDlgTemplate@@MAEHPAVCDC@@@Z
?LoadSkin@CUIDlgTemplate@@UAEHPAX@Z
?GetCurrentSkin@CAppSysOperation@@UAEHPAX@Z
?OnLButtonDown@CUIButtonTemplate@@IAEXIVCPoint@@@Z
?SetBold@CColorStatic@@QAEX_N@Z
??1CMenuEx@@UAE@XZ
??0CMenuEx@@QAE@XZ
?AppendMenuEx@CMenuEx@@QAEHIIPBD@Z
?GetRuntimeClass@CMenuEx@@UBEPAUCRuntimeClass@@XZ
?DrawItem@CMenuEx@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?MeasureItem@CMenuEx@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?messageMap@CUIButtonTemplate@@1UAFX_MSGMAP@@B
?PreSubclassWindow@CUIButtonTemplate@@MAEXXZ
?PreTranslateMessage@CUIButtonTemplate@@MAEHPAUtagMSG@@@Z
?DrawItem@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?HandleMouseMove@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnDown@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?HandleMouseLeftBtnUp@CUIButtonTemplate@@MAEHIVCPoint@@@Z
?DrawPushButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawRadioButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawCheckBoxButton@CUIButtonTemplate@@MAEXPAUtagDRAWITEMSTRUCT@@@Z
?SetCtrlTextFont@CAppSysAttribute@@UAEXUtagLOGFONTA@@@Z
?GetCtrlTextFont@CAppSysAttribute@@UAEAAUtagLOGFONTA@@XZ
?SetCtrlTextColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlTextColor@CAppSysAttribute@@UAEKXZ
?SetCtrlBackColor@CAppSysAttribute@@UAEXK@Z
?GetCtrlBackColor@CAppSysAttribute@@UAEKXZ
?SetCtrlTextBold@CAppSysAttribute@@UAEXH@Z
?EnableCtrlTextBold@CAppSysAttribute@@UAEHXZ
??0CBaseComboBox@@QAE@XZ
??1CUIStaticTemplate@@UAE@XZ
??1CUINoRegularButtonTemplate@@UAE@XZ
??1CColorStatic@@UAE@XZ
??1CSkinComboBox@@UAE@XZ
??0CUIStaticTemplate@@QAE@XZ
??0CUINoRegularButtonTemplate@@QAE@XZ
??0CColorStatic@@QAE@XZ
??0CSkinComboBox@@QAE@XZ
?SetColor@CColorStatic@@QAEXKKK@Z
?SetFontUnline@CColorStatic@@QAEX_N@Z
?SetBtnTextColor@CUINoRegularButtonTemplate@@QAEXK@Z
?SetHaveText@CUINoRegularButtonTemplate@@QAEX_NI@Z
?SetColorFrame@CSkinComboBox@@QAEXK@Z
?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
??1CBaseEdit@@UAE@XZ
??1CUIButtonTemplate@@UAE@XZ
??0CBaseEdit@@QAE@XZ
?SetCtrlTextHeight@CAppSysAttribute@@UAEXH@Z
?GetCtrlTextHeight@CAppSysAttribute@@UAEHXZ
?SetCtrlTextType@CAppSysAttribute@@UAEHVCString@@@Z
?GetCtrlTextType@CAppSysAttribute@@UAEAAVCString@@XZ
?FitBitmapSize@CUIButtonTemplate@@UAEXXZ
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@@Z
?AttachBitmapHadle@CAppSysOperation@@UAEXPAUHBITMAP__@@PAVCBitmap@@@Z
?CleanUp@CAppSysOperation@@UAEXXZ
?PaintBackGround@CAppSysOperation@@UAEHPAVCDC@@@Z
?DrawSkin@CAppSysOperation@@UAEHPAUtagDRAWITEMSTRUCT@@@Z
?AdjustPosition@CAppSysOperation@@UAEHUtagRECT@@@Z
?AdjustPosition@CAppSysOperation@@UAEHHHHH@Z
?DrawContent@CAppSysOperation@@UAEHPAVCDC@@VCString@@AAVCRect@@H@Z
?LoadSkin@CUIButtonTemplate@@UAEHPAX@Z
?CleanSkin@CAppSysOperation@@UAEHPAX@Z
?GetCurrentSkin@CUIButtonTemplate@@MAEHPAX@Z
?InitializeOperation@CAppSysOperation@@UAEXPAVCWnd@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@@Z
?LoadBitmapFileToMem@CAppSysOperation@@UAEHPAUHINSTANCE__@@VCString@@PAVCBitmap@@@Z
?CleanBitmapMem@CAppSysOperation@@UAEHXZ
?IsControlHaveSkin@CAppSysOperation@@UAEHXZ
?SetNeedHandCursor@CColorStatic@@QAEX_N@Z
?SetHaveText@CUIButtonTemplate@@QAEX_NI@Z
?SetBtnTextColor@CUIButtonTemplate@@QAEXK@Z
?SetFrameColor@CBaseEdit@@QAEXK@Z
?SetDrawFrame@CBaseEdit@@QAEXH@Z
??0CUIButtonTemplate@@QAE@XZ

avmodule50

?GetOutput@CAVManager@@QAEPAVCWnd@@H@Z
?GetNetRate@CAVManager@@QAEIXZ
??0CAVManager@@QAE@PAVCWnd@@@Z
?SetNetInfo@CAVManager@@QAEXPBDI@Z
?StartThread@CAVManager@@QAEXXZ
?SetBufferTime@CAVManager@@QAEXH@Z
?SetAudioInfo@CAVManager@@QAEXHHHHH_N0@Z
?SetVideoInfoEx@CAVManager@@QAEXHHHHH@Z
?InitConfigInfo@CAVManager@@QAEHPBD@Z
?StartSocket@CAVManager@@QAEXXZ
?GetInput@CAVManager@@QAEPAVCWnd@@XZ
?Close@CAVManager@@QAEXXZ
?SetUserInfo@CAVManager@@QAEXHHPBD@Z
?SetSnapshotFilePath@CAVManager@@QAEXPBD@Z

mfc42

ord1243
ord3771
ord356
ord2770
ord1980
ord668
ord291
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord1182
ord1577
ord1575
ord1176
ord1116
ord342
ord5265
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord800
ord540
ord825
ord2302
ord860
ord2818
ord858
ord924
ord2078
ord6199
ord6241
ord535
ord537
ord4299
ord3874
ord2370
ord3092
ord6334
ord3571
ord4376
ord4853
ord5241
ord809
ord773
ord641
ord823
ord556
ord501
ord324
ord3663
ord3626
ord2414
ord4234
ord1088
ord2122
ord6215
ord6901
ord4710
ord6905
ord3977
ord6007
ord6907
ord5642
ord1083
ord998
ord2639
ord2862
ord3286
ord755
ord2754
ord470
ord2086
ord1168
ord6605
ord640
ord5785
ord1640
ord1641
ord1146
ord323
ord2405
ord6157
ord6055
ord1776
ord5290
ord3402
ord4424
ord3716
ord790
ord567
ord4275
ord2379
ord2859
ord3797
ord6197
ord3546
ord3742
ord818
ord1233
ord2864
ord3089
ord2135
ord3619
ord2116
ord4284
ord6172
ord5875
ord5789
ord2567
ord2566
ord283
ord1175
ord939
ord4396
ord3574
ord2438
ord6270
ord941
ord4129
ord1644
ord2763
ord4278
ord5683
ord5621
ord665
ord354
ord6779
ord940
ord1979
ord5442
ord3318
ord5186
ord6385
ord804
ord686
ord609
ord1768
ord6785
ord5981
ord922
ord4277
ord2764
ord3693
ord4133
ord4297
ord5788
ord5600
ord2642
ord3573
ord6663
ord2574
ord3572
ord2575
ord1793
ord4160
ord6358
ord5873
ord3706
ord3721
ord795
ord6453
ord2860
ord613
ord289
ord6021
ord5787
ord6880
ord926
ord3301
ord3996
ord2452
ord4476
ord384
ord2289
ord6696
ord2100
ord2096
ord2298
ord2119
ord353
ord1187
ord4220
ord2584
ord3654
ord2408
ord2753
ord2097
ord807
ord4163
ord6625
ord554
ord5572
ord2915
ord2863
ord5440
ord6383
ord5450
ord6394
ord3317
ord2582
ord4402
ord3640
ord3293
ord3910
ord4202
ord3452
ord2515
ord355
ord5710
ord5607
ord1200
ord3708
ord781
ord1756
ord6134
ord3719
ord793
ord326
ord2645
ord3998
ord2380
ord2776
ord690
ord2393
ord1988
ord5207
ord6059
ord389
ord1929
ord3005
ord1601
ord538
ord2919
ord4123
ord861
ord2688
ord539
ord4400
ord3630
ord682
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord2546
ord3753
ord3370
ord693
ord4243
ord6242
ord2714
ord3711
ord783
ord2112
ord6442
ord4287
ord3138
ord6128
ord3752
ord398
ord700
ord955
ord4189
ord3021
ord913
ord5594
ord5632
ord6877
ord6200
ord5937
ord6136
ord6648
ord3763
ord2513
ord293
ord5356
ord5808
ord1075
ord5204
ord3229
ord1949
ord4034
ord4538
ord2587
ord4406
ord3394
ord3729
ord4267
ord3920
ord4317
ord5575
ord4033
ord433
ord1799
ord614
ord2623
ord290
ord4622
ord4226
ord2486
ord4003
ord3584
ord543
ord803
ord3283
ord3258
ord1705
ord430
ord1269
ord2935
ord2516
ord361
ord3061
ord3767
ord1158
ord2614
ord2820
ord3811
ord536
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord815
ord561
ord3953
ord801
ord541
ord6111
ord6195
ord3870
ord4204
ord6283
ord925
ord4694
ord2065
ord6883
ord6143
ord3754

msvcrt

wcslen
_adjust_fdiv
_initterm
free
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__CxxFrameHandler
atoi
_mbscmp
_ftol
fclose
fprintf
fopen
sprintf
rand
_CxxThrowException
memmove
_mbsrchr
towupper
_purecall
malloc
strncpy
time
_i64toa
atol
_snprintf
_EH_prolog
__dllonexit
_onexit
_except_handler3

kernel32

GetFileSize
GetLastError
GlobalAlloc
GetModuleHandleA
GlobalUnlock
GetVersionExA
OutputDebugStringA
LocalAlloc
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
lstrcmpA
lstrcpynA
GetWindowsDirectoryA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetExitCodeThread
TerminateThread
WriteFile
IsBadWritePtr
VirtualQuery
FormatMessageA
SetFilePointer
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
CreateFileA
GlobalLock
ReadFile
GetTickCount
CreateThread
CloseHandle
GetLocalTime
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
Sleep
GetModuleFileNameA
WinExec

user32

GetAsyncKeyState
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClassNameA
SetActiveWindow
GetDesktopWindow
CopyIcon
MessageBeep
GetWindow
CallWindowProcA
GetScrollInfo
SetParent
IsRectEmpty
OffsetRect
UpdateWindow
GrayStringA
DrawTextA
TabbedTextOutA
SetForegroundWindow
IsIconic
FlashWindow
DrawIcon
LoadIconA
ReleaseCapture
SetCapture
EnableMenuItem
GetMessagePos
wvsprintfA
GetWindowLongA
SetWindowLongA
GetMenuItemRect
CreateWindowExA
ModifyMenuA
GetMenuState
CreateMenu
LoadMenuA
GetMenuItemCount
GetSubMenu
GetMenuStringA
InsertMenuA
AppendMenuA
GetMenuItemID
RemoveMenu
GetSysColor
ShowWindow
DestroyWindow
MessageBoxA
RedrawWindow
GetSystemMetrics
wsprintfA
CopyRect
GetWindowTextA
DrawStateA
SetWindowRgn
GetWindowDC
SetWindowPos
IsWindow
KillTimer
IsWindowVisible
SetTimer
PostMessageA
SetRectEmpty
GetClientRect
EnableWindow
GetFocus
GetDlgCtrlID
SendMessageA
WindowFromPoint
IsChild
SendMessageTimeoutA
InflateRect
CreatePopupMenu
GetWindowRect
LoadImageA
FillRect
ClientToScreen
GetParent
ScreenToClient
LoadCursorA
SetCursor
GetDC
ReleaseDC
InvalidateRect
PtInRect
LoadBitmapA
GetCursorPos

gdi32

GetTextExtentPoint32A
GetTextMetricsA
GetMapMode
PtVisible
CreatePen
ExtTextOutA
Escape
SetDIBits
GetDIBits
CreateFontIndirectA
EndPath
Ellipse
BeginPath
CreateRoundRectRgn
Rectangle
CreateCompatibleBitmap
CreateBitmap
SelectObject
SetBkColor
CreateRectRgn
CombineRgn
GetPixel
TextOutA
CreateSolidBrush
FillPath
CreateDIBitmap
SetTextColor
DeleteDC
DeleteObject
CreateFontA
GetStockObject
StretchBlt
BitBlt
GetObjectA
RectVisible
CreateCompatibleDC

advapi32

RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHGetMalloc

comctl32

FlatSB_EnableScrollBar
InitCommonControlsEx
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
InitializeFlatSB

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoInitialize
OleCreateStaticFromData
CreateILockBytesOnHGlobal
CoUninitialize
OleSetContainedObject
CoInitializeEx
OleRun

oleaut32

VariantClear
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantCopy
VariantInit
SysAllocStringLen
SysStringLen
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocString
SafeArrayPutElement
SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo

publictool

??1CBuffer@@UAE@XZ
?base64_decode@CBase64@@SAHPADI0@Z
?GetBits@CxImageEx@@QAEPAEK@Z
??1CxImageEx@@UAE@XZ
?QueryItem@CHash@@QAEPAXPBD@Z
??0CBuffer@@QAE@K@Z
?GetHashItemNum@CHash@@QAEHXZ
??1CHash@@UAE@XZ
??0CHash@@QAE@K@Z
?InitParam@CHash@@QAEHXZ
?QueryItem@CHash@@QAEPAXJ@Z
?FindFirst@CHash@@QAEXH@Z
?FindNext@CHash@@QAEPAXXZ
?GetBufferLen@CBuffer@@QAEKXZ
?SetPos@CBuffer@@QAEXKK@Z
?GetBuffer@CBuffer@@QAEPAEXZ
?base64_encode@CBase64@@SAHPADI0@Z
?DeleteItem@CHash@@QAEPAXJ@Z
?InsertItem@CHash@@QAEHJPAX@Z
??0CxImageEx@@QAE@K@Z
?Load@CxImageEx@@QAE_NPBDK@Z
?InsertItem@CHash@@QAEHPBDPAX@Z
?GetDIB@CxImageEx@@QBEPAXXZ

Exports

Exports

??0CRoomInfo@@QAE@ABV0@@Z
??0CRoomInfo@@QAE@XZ
??1CRoomInfo@@UAE@XZ
??4CEasySecret@@QAEAAV0@ABV0@@Z
??4CRoomInfo@@UAEAAV0@ABV0@@Z
??_7CRoomInfo@@6B@
?ClearAll@CRoomInfo@@QAEXXZ
?DeleteAllUser@CRoomInfo@@QAEXXZ
?GetCurrentNumber@CRoomInfo@@QAEHXZ
?GetCurrentRoomStats@CRoomInfo@@QAEHXZ
?GetEnterRoomType@CRoomInfo@@QAEHXZ
?GetID@CRoomInfo@@QAE?AVCString@@XZ
?GetIntroduce@CRoomInfo@@QAE?AVCString@@XZ
?GetLeader@CRoomInfo@@QAEPAVCUserInfo@@XZ
?GetLevel@CRoomInfo@@QAEHXZ
?GetLimitNumber@CRoomInfo@@QAEHXZ
?GetMasterID@CRoomInfo@@QAE?AVCString@@XZ
?GetName@CRoomInfo@@QAE?AVCString@@XZ
?GetOther@CRoomInfo@@QAE?AVCString@@XZ
?GetPassword@CRoomInfo@@QAE?AVCString@@XZ
?GetPort@CRoomInfo@@QAEHXZ
?GetRoomLevel@CRoomInfo@@QAEHXZ
?GetSort@CRoomInfo@@QAEHXZ
?GetStatus@CRoomInfo@@QAEHXZ
?GetType@CRoomInfo@@QAEHXZ
?GetUser@CRoomInfo@@QAEXHPAVCHash@@@Z
?GetVip@CRoomInfo@@QAE_NXZ
?SetCurrentNumber@CRoomInfo@@QAEXH@Z
?SetCurrentRoomStats@CRoomInfo@@QAEXH@Z
?SetEnterRoomType@CRoomInfo@@QAEXH@Z
?SetID@CRoomInfo@@QAEXPBD@Z
?SetIntroduce@CRoomInfo@@QAEXPBD@Z
?SetLevel@CRoomInfo@@QAEXH@Z
?SetLimitNumber@CRoomInfo@@QAEXH@Z
?SetMasterID@CRoomInfo@@QAEXABVCString@@@Z
?SetName@CRoomInfo@@QAEXPBD@Z
?SetOther@CRoomInfo@@QAEXVCString@@@Z
?SetPassword@CRoomInfo@@QAEXPBD@Z
?SetPort@CRoomInfo@@QAEXH@Z
?SetRoomLevel@CRoomInfo@@QAEXH@Z
?SetSort@CRoomInfo@@QAEXH@Z
?SetStatus@CRoomInfo@@QAEXH@Z
?SetType@CRoomInfo@@QAEXH@Z
?SetVipRoom@CRoomInfo@@QAEX_N@Z
CreateKTV
GetDllIndex

Sections

.text
Size: 556KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NetworkOpt.dll
.dll windows:4 windows x86 arch:x86

dc1b90a0e95e8d5cc7baef2fd0b3da4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mvuilib

?SetNeedHandCursor@CColorStatic@@QAEX_N@Z
?SetColor@CColorStatic@@QAEXKKK@Z
?SetFontUnline@CColorStatic@@QAEX_N@Z
??0CColorStatic@@QAE@XZ
??1CColorStatic@@UAE@XZ
?GetComponentSkinConf@CSkinConfContext@@QAEHIW4COMPONETTYPE@@VCString@@PAX@Z
?SetHaveText@CUINoRegularButtonTemplate@@QAEX_NI@Z
?SetToolTipText@CUINoRegularButtonTemplate@@QAEXPBD@Z
?SetBtnTextColor@CUINoRegularButtonTemplate@@QAEXK@Z
??0CUINoRegularButtonTemplate@@QAE@XZ
??1CUINoRegularButtonTemplate@@UAE@XZ

mfc42

ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3574
ord825
ord609
ord800
ord823
ord567
ord540
ord692
ord535
ord537
ord858
ord4299
ord6199
ord6241
ord924
ord5890
ord939
ord2818
ord4202
ord5875
ord3089
ord4476
ord6215
ord3803
ord2937
ord755
ord2567
ord470
ord3663
ord860
ord4278
ord3092
ord1768
ord2086
ord1168
ord3571
ord2574
ord3572
ord556
ord3626
ord809
ord2414
ord1793
ord4275
ord2379
ord640
ord2405
ord1641
ord5785
ord1640
ord323
ord2859
ord6197
ord1146
ord6172
ord5873
ord3706
ord1848
ord3370
ord3640
ord2582
ord4402
ord693
ord4243
ord3577
ord6696
ord2864
ord3293
ord6762
ord2124
ord2754
ord4133
ord4297
ord5788
ord472
ord6453
ord6242
ord501
ord6907
ord3998
ord4284
ord2764
ord5572
ord3302
ord2915
ord1083
ord5600
ord6467
ord1187
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord3352
ord2725
ord641
ord324
ord4234
ord2078
ord4710
ord6605
ord3619
ord2452
ord2645
ord4853
ord4376
ord2860
ord2116
ord2302
ord3698
ord3692
ord765
ord816
ord562
ord5791
ord613
ord289
ord3630
ord682
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord2380
ord5789
ord4400
ord4397
ord2576
ord4217
ord2024
ord2413
ord6366
ord1771
ord4644
ord3597
ord4425
ord5280
ord4407
ord1775
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4396
ord1776
ord4078
ord6055
ord3301
ord2575
ord6052
ord2514
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4998
ord5265
ord3996
ord3953

msvcrt

_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_ftol
_purecall
atoi
__CxxFrameHandler
_mbscmp

kernel32

GetLastError
LocalAlloc
LocalFree
GlobalMemoryStatus
GlobalAlloc
GlobalFree
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
lstrlenA

user32

IsRectEmpty
InflateRect
TabbedTextOutA
DrawTextA
GrayStringA
BeginPaint
GetClientRect
SendMessageA
EnableWindow
SetCursor
GetWindowDC
LoadBitmapA
LoadImageA
InvalidateRect
EndPaint
LoadCursorA
SetTimer
ReleaseDC
SetWindowRgn
GetWindowRect
PtInRect
GetParent
UpdateWindow
KillTimer
PostMessageA
GetKeyState
GetSysColor

gdi32

GetDIBColorTable
CreatePalette
GetDeviceCaps
RealizePalette
CreateHalftonePalette
CreateFontA
SelectObject
StretchBlt
SetBkColor
SetTextColor
CreateFontIndirectA
Escape
ExtTextOutA
TextOutA
RectVisible
GetStockObject
BitBlt
GetPixel
CreateBitmap
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
CreateRectRgn
CreatePen
DeleteObject
DeleteDC
PtVisible

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

ole32

CoInitialize
CoCreateInstance
OleRun

oleaut32

SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
GetErrorInfo

publictool

??0CHash@@QAE@K@Z
?InitParam@CHash@@QAEHXZ
?DeleteItem@CHash@@QAEPAXJ@Z
?FindFirst@CHash@@QAEXH@Z
?InsertItem@CHash@@QAEHJPAX@Z
?FindNext@CHash@@QAEPAXXZ
??1CHash@@UAE@XZ

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

pdh

PdhCollectQueryData
PdhAddCounterA
PdhOpenQueryA
PdhCloseQuery
PdhGetFormattedCounterValue

Exports

Exports

CreateNetworkOpt

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OnlineUpdate.exe
.exe windows:4 windows x86 arch:x86

00e758ae377d7ea08fbbacc17a5e0a5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord2725
ord6055
ord1776
ord5290
ord3402
ord3698
ord765
ord773
ord1146
ord1168
ord567
ord501
ord2135
ord3626
ord795
ord2414
ord818
ord2302
ord3092
ord4224
ord4160
ord2863
ord6199
ord2379
ord755
ord470
ord798
ord939
ord533
ord1083
ord4277
ord2764
ord4202
ord690
ord1988
ord5207
ord389
ord6059
ord1929
ord4275
ord3721
ord3619
ord5875
ord1641
ord2860
ord3797
ord3874
ord3089
ord5572
ord2915
ord1949
ord4034
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord6385
ord354
ord5186
ord665
ord3318
ord5442
ord1979
ord535
ord823
ord1200
ord3663
ord537
ord5683
ord4278
ord941
ord858
ord2818
ord825
ord540
ord860
ord4234
ord800
ord1576

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__CxxFrameHandler
atoi
_mbscmp
sprintf
_setmbcp
_CxxThrowException
wcslen
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_controlfp

kernel32

InterlockedDecrement
FormatMessageA
lstrlenA
LocalAlloc
LocalFree
GetModuleFileNameA
InterlockedIncrement
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
CreateThread
GetTempPathA
Sleep
WinExec
GetExitCodeThread
CreateDirectoryA
GetSystemDirectoryA
CopyFileA
FreeLibrary
TerminateThread
GetLastError
MultiByteToWideChar
WideCharToMultiByte

user32

CopyIcon
SetCursor
GetClientRect
LoadCursorA
DrawIcon
GetSystemMetrics
IsIconic
KillTimer
PostMessageA
GetSystemMenu
AppendMenuA
SendMessageA
SetTimer
LoadIconA
MessageBoxA
wsprintfA
EnableWindow
InvalidateRect

gdi32

CreateFontIndirectA
GetStockObject
GetObjectA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

SysAllocString
GetErrorInfo
SysFreeString
VariantClear

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ParkingLot.dll
.dll windows:4 windows x86 arch:x86

0b77e0ec97de7828cc64aaae09b44389

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord800
ord823
ord860
ord540
ord858
ord922
ord924
ord537
ord755
ord2379
ord470
ord640
ord2405
ord2754
ord1640
ord323
ord4277
ord5683
ord6215
ord4299
ord6199
ord2818
ord535
ord2116
ord923
ord3663
ord665
ord354
ord4278
ord1979
ord5186
ord6385
ord3584
ord773
ord543
ord501
ord803
ord5621
ord1083
ord690
ord1988
ord939
ord5207
ord6059
ord389
ord567
ord818
ord4275
ord6442
ord1233
ord4274
ord6375
ord4486
ord2554
ord2512
ord4353
ord3922
ord1089
ord5199
ord3831
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord4622
ord3738
ord561
ord815
ord1187
ord6128
ord5768
ord6129
ord3754
ord3753
ord3756
ord6130
ord2764
ord5981
ord3619
ord1641
ord3626
ord2414
ord6172
ord5875
ord5789
ord283
ord3571
ord3402
ord3721
ord809
ord795
ord556
ord3797
ord3874
ord5785
ord6358
ord3830
ord2976
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord2396
ord5290
ord6055
ord5731
ord825

msvcrt

__dllonexit
?terminate@@YAXXZ
_except_handler3
rand
atoi
_mbscmp
__CxxFrameHandler
fscanf
fgets
getc
fputc
fflush
ftell
fseek
fwrite
fread
fopen
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_CxxThrowException
fclose
free
_onexit
_purecall

kernel32

LocalFree
GetVersion
LoadLibraryA
GetProcAddress
FreeLibrary
LeaveCriticalSection
Sleep
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
TerminateThread
CloseHandle
GetExitCodeThread
CreateThread
OutputDebugStringA
GetLastError
lstrlenA
LocalAlloc

user32

PostMessageA
GetClientRect
EnableWindow
SendMessageA
LoadImageA
InvalidateRect
LoadCursorA
SetCursor
GetWindowLongA
SetWindowLongA
KillTimer
GetAsyncKeyState
SetTimer
GetSystemMetrics
IsWindowVisible
IsWindow
FillRect

gdi32

CreateCompatibleDC
CreateFontA
GetStockObject
CreateCompatibleBitmap
SelectObject
DeleteObject
BitBlt

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

ole32

OleRun
CoInitialize
CoCreateInstance

oleaut32

GetErrorInfo
VariantClear
SysFreeString
SysAllocString

shlwapi

PathFileExistsA

publictool

??0CxImageEx@@QAE@K@Z
??0CxImage@@QAE@ABV0@_N11@Z
??0CxImage@@QAE@K@Z
?DestroyFrames@CxImage@@QAE_NXZ
?Destroy@CxImage@@QAE_NXZ
??1CxMemFile@@UAE@XZ
??0CxMemFile@@QAE@PAEK@Z
?Close@CxMemFile@@UAE_NXZ
?Read@CxMemFile@@UAEIPAXII@Z
??1CxImageEx@@UAE@XZ
?Seek@CxMemFile@@UAE_NJH@Z
?Tell@CxMemFile@@UAEJXZ
?Size@CxMemFile@@UAEJXZ
?Flush@CxMemFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?PutC@CxMemFile@@UAE_NE@Z
?GetC@CxMemFile@@UAEJXZ
?GetS@CxMemFile@@UAEPADPADH@Z
?Scanf@CxMemFile@@UAEJPBDPAX@Z
?Load@CxImageEx@@QAE_NPBDK@Z
?Write@CxMemFile@@UAEIPBXII@Z
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?Error@CxMemFile@@UAEJXZ

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
CreateParkingLot

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProcessAddr.xml
.xml
SealModule.dll
.dll windows:4 windows x86 arch:x86

cae8280fe2fa6089ff80a28e168b3936

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mvuilib

?DelAllItemStamp@CUIOtherdrawListCtrlTemplate@@QAEXXZ
?DelItemStamp@CUIOtherdrawListCtrlTemplate@@QAEXH@Z
?AddItemStamp@CUIOtherdrawListCtrlTemplate@@QAEHHPAX@Z
??0CUIButtonTemplate@@QAE@XZ
??1CUIButtonTemplate@@UAE@XZ
??0CSkinComboBox@@QAE@XZ
??0CColorStatic@@QAE@XZ
??1CSkinComboBox@@UAE@XZ
??1CColorStatic@@UAE@XZ

mfc42

ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord3571
ord809
ord800
ord641
ord823
ord556
ord540
ord324
ord825
ord3626
ord3663
ord2414
ord4234
ord1088
ord2122
ord4299
ord6901
ord6241
ord2864
ord4710
ord858
ord6905
ord2862
ord537
ord6007
ord6907
ord535
ord1641
ord922
ord2818
ord924
ord2639
ord2096
ord384
ord3286
ord755
ord2754
ord470
ord6358
ord6877
ord5280
ord860
ord665
ord354
ord4278
ord1979
ord5442
ord3318
ord5186
ord2575
ord3574
ord2574
ord6055
ord1776
ord4396
ord5290
ord3402
ord4424
ord3572
ord609
ord567
ord1793
ord4275
ord2379
ord640
ord2405
ord5875
ord5785
ord1640
ord323
ord2859
ord6197
ord1146
ord1168
ord3706
ord2055
ord4402
ord3640
ord3081
ord3910
ord3719
ord793
ord1768
ord6215
ord2078
ord6605
ord3619
ord2452
ord2645
ord773
ord501
ord804
ord686
ord5621
ord2302
ord1083
ord6785
ord2086
ord4284
ord5683
ord1187
ord1200
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord2648
ord5307
ord5289
ord5714
ord3953
ord4622
ord3738
ord561
ord815
ord3370
ord693
ord398
ord700
ord4243
ord955
ord4189
ord3021
ord913
ord5594
ord5632
ord4538
ord3394
ord2587
ord4406
ord3729
ord4267
ord3693
ord4133
ord4297
ord3920
ord5788
ord2753
ord3573
ord5787
ord4317
ord5572
ord2915
ord6880
ord2642
ord4441
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord3293
ord6376
ord2514
ord4998
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord4853
ord4376
ord5265
ord2582
ord4698

msvcrt

_CxxThrowException
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
free
_onexit
__dllonexit
malloc
_purecall
atoi
_mbscmp
__CxxFrameHandler

kernel32

GetLastError
LocalAlloc
LocalFree
lstrcpynA
GetModuleFileNameA
GetProcAddress
FreeLibrary
GetModuleHandleA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrlenA

user32

GetCursorPos
OffsetRect
InflateRect
ScreenToClient
SendMessageA
GetClientRect
GetParent
ReleaseDC
GetDC
PostMessageA
EnableWindow
SetCursor
GetWindowDC
LoadImageA
InvalidateRect
SetWindowRgn
KillTimer
SetTimer
ReleaseCapture
SetCapture
PtInRect
LoadCursorA
GetWindowRect

gdi32

CreatePen
CreateFontA
SetDIBits
SetBkColor
SetTextColor
DeleteDC
GetDIBits
FillPath
SelectObject
CreateSolidBrush
BeginPath
Ellipse
CreateDIBitmap
BitBlt
GetPixel
CreateBitmap
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
CreateRectRgn
StretchBlt
DeleteObject
EndPath

comctl32

ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent

ole32

OleRun
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
GetErrorInfo
VariantClear

publictool

?InitParam@CHash@@QAEHXZ
?QueryItem@CHash@@QAEPAXJ@Z
??0CxImageEx@@QAE@K@Z
??1CHash@@UAE@XZ
?GetDIB@CxImageEx@@QBEPAXXZ
?GetBits@CxImageEx@@QAEPAEK@Z
?InsertItem@CHash@@QAEHJPAX@Z
??1CxImageEx@@UAE@XZ
?FindNext@CHash@@QAEPAXXZ
?FindFirst@CHash@@QAEXH@Z
?Load@CxImageEx@@QAE_NPBDK@Z
??0CHash@@QAE@K@Z

Exports

Exports

CreatePublic

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SkinRes/.svn/entries
.vbs
SkinRes/301.bmp
SkinRes/99Lover.xml
.xml
SkinRes/=UserInfoDlg.bmp
SkinRes/APPClose.bmp
SkinRes/AVbg3.bmp
SkinRes/ActAVModule.xml
.xml
SkinRes/ActAVModule265.xml
.xml
SkinRes/ActPhoneDlgSkin/.svn/entries
SkinRes/ActPhoneDlgSkin/ActAVChat.bmp
SkinRes/ActPhoneDlgSkin/ActAVStaticCom.bmp
SkinRes/ActPhoneDlgSkin/ActAVbg.bmp
SkinRes/ActPhoneDlgSkin/ActAVbg2.bmp
SkinRes/ActPhoneDlgSkin/ActPhoneMin.bmp
SkinRes/ActPhoneDlgSkin/actNetSpeed.bmp
SkinRes/ActPhoneDlgSkin/actPhoneBtn.bmp
SkinRes/ActPhoneDlgSkin/chooseGift.bmp
SkinRes/ActPhoneDlgSkin/color3.bmp
SkinRes/ActPhoneDlgSkin/color4.bmp
SkinRes/ActPhoneDlgSkin/moreGift.bmp
SkinRes/ActPhoneDlgSkin/sendGift.bmp
SkinRes/ActPhoneDlgSkin/userName.bmp
SkinRes/AlertAnimate.bmp
SkinRes/Animate.bmp
SkinRes/AppRequestAddButtom.bmp
SkinRes/AppRequestButtom.bmp
SkinRes/AppTitlePlayer.bmp
SkinRes/ArtistTenRoom/.svn/entries
SkinRes/ArtistTenRoom/default.jpg
.jpg
SkinRes/ArtistTenRoom/maskBG.bmp
SkinRes/ArtistTenRoom/playimage.png
.png
SkinRes/ArtistTenRoom/progress.png
.png
SkinRes/ArtistTenRoom/roombg.png
.png
SkinRes/BackgroundLB.bmp
SkinRes/BackgroundLT.bmp
SkinRes/BackgroundRB.bmp
SkinRes/BackgroundRT.bmp
SkinRes/BarActive.bmp
SkinRes/BarActive_bg.bmp
SkinRes/BarActive_v2.bmp
SkinRes/BarBack.bmp
SkinRes/BarBack_v2.bmp
SkinRes/BaseMap.bmp
SkinRes/BaseMap2.bmp
SkinRes/Breviary2.bmp
SkinRes/BroadCast.BMP
SkinRes/BroadCastBg.bmp
SkinRes/BroadCastBtn.bmp
SkinRes/Broadcastclose.bmp
SkinRes/BtnClear.bmp
SkinRes/BtnCloseInfor.bmp
SkinRes/BtnComplete.bmp
SkinRes/BtnMinInfor.bmp
SkinRes/BtnSelect.bmp
SkinRes/BtnSimple.bmp
SkinRes/CLoginSettingDlg.gif
.gif
SkinRes/ChatManage.bmp
SkinRes/CloseWeibo.bmp
SkinRes/Concume/.svn/entries
SkinRes/Concume/1.bmp
SkinRes/Concume/2.bmp
SkinRes/Concume/3.bmp
SkinRes/Concume/4.bmp
SkinRes/Concume/5.bmp
SkinRes/Concume/6.bmp
SkinRes/Concume/arrow.bmp
SkinRes/Concume/concume.png
.png
SkinRes/Concume/consume0.bmp
SkinRes/Concume/consume1.bmp
SkinRes/Concume/consume2.bmp
SkinRes/Concume/consume3.bmp
SkinRes/Dialog/.svn/entries
SkinRes/Dialog/Download.gif
.gif
SkinRes/DriftBroadcast.bmp
SkinRes/DriftingHorn.png
.png
SkinRes/Fav/.svn/entries
SkinRes/Fav/empty.png
.png
SkinRes/Fav/f5.png
.png
SkinRes/Fav/green.png
.png
SkinRes/Fav/hide.png
.png
SkinRes/Fav/img_bg.png
.png
SkinRes/Fav/lock.png
.png
SkinRes/Fav/red.png
.png
SkinRes/Fav/sel.png
.png
SkinRes/Fav/sel1.gif
.gif
SkinRes/Fav/sel2.gif
.gif
SkinRes/Fav/title_bg.png
.png
SkinRes/FirstLoginDlg.bmp
SkinRes/FirstLoginDlg.gif
.gif
SkinRes/FirstLoginDlg_Close.bmp
SkinRes/GiftBk.bmp
SkinRes/GiftBox.bmp
SkinRes/Hall/.svn/entries
SkinRes/Hall/MiniInfor.bmp
SkinRes/Hall/SearchRoomBottomLeft.bmp
SkinRes/Hall/SearchRoomBottomRight.bmp
SkinRes/Hall/SearchRoomTopLeft.bmp
SkinRes/Hall/SearchRoomTopRight.bmp
SkinRes/Hall/Signal.bmp
SkinRes/Hall/bag.bmp
SkinRes/Hall/currentver.bmp
SkinRes/Hall/headbutton.bmp
SkinRes/Hall/mainietopLeft.bmp
SkinRes/Hall/mainietopright.bmp
SkinRes/Hall/navigate_select.bmp
SkinRes/Hall/return.bmp
SkinRes/Hall/searchRoombtn.bmp
SkinRes/Hall/search_text_bg.bmp
SkinRes/Hall/µ¼º½_Î´Ñ¡ÖÐ.bmp
SkinRes/Hall/µ¼º½_Ñ¡ÖÐ.bmp
SkinRes/HallToolbar.bmp
SkinRes/HeadInfo/.svn/entries
.vbs
SkinRes/HeadInfo/bind.bmp
SkinRes/HeadInfo/btn_crown1.bmp
SkinRes/HeadInfo/btn_crown2.bmp
SkinRes/HeadInfo/btn_vip1.bmp
SkinRes/HeadInfo/btn_vip2.bmp
SkinRes/HeadInfo/close.bmp
SkinRes/HeadInfo/crown.jpg
.jpg
SkinRes/HeadInfo/disk.bmp
SkinRes/HeadInfo/password2.bmp
SkinRes/HeadInfo/phone.bmp
SkinRes/HeadInfo/set.bmp
SkinRes/HeadInfo/vip.jpg
.jpg
SkinRes/Hit.jpg
.jpg
SkinRes/Hit/.svn/entries
SkinRes/Hit/1.jpg
.jpg
SkinRes/Hit/10.jpg
.jpg
SkinRes/Hit/2.jpg
.jpg
SkinRes/Hit/3.jpg
.jpg
SkinRes/Hit/4.jpg
.jpg
SkinRes/Hit/5.jpg
.jpg
SkinRes/Hit/6.jpg
.jpg
SkinRes/Hit/7.jpg
.jpg
SkinRes/Hit/8.jpg
.jpg
SkinRes/Hit/9.jpg
.jpg
SkinRes/HollSplitter.bmp
SkinRes/HowMoney.bmp
SkinRes/IM.bmp
SkinRes/IM/.svn/entries
SkinRes/IM/ChatBK.png
.png
SkinRes/IM/HeadBK.bmp
SkinRes/IM/IMBK.png
.png
SkinRes/IM/IMBtn.bmp
SkinRes/IM/RoomNameBK.bmp
SkinRes/IM/UserNameBK.bmp
SkinRes/IM/close.bmp
SkinRes/IM/menu.bmp
SkinRes/IM/min.bmp
SkinRes/IMLogCloseBten.bmp
SkinRes/IMToolBar.bmp
SkinRes/IeClose.png
.png
SkinRes/Imsysinfobtn.bmp
SkinRes/ItemBackground.bmp
SkinRes/LoadMusicDlg.bmp
SkinRes/LogChange.bmp
SkinRes/LogMin.bmp
SkinRes/LogOut.bmp
SkinRes/LoginDlg.bmp
SkinRes/MaskBottom.bmp
SkinRes/MaskTop.bmp
SkinRes/MoneyRestPass.bmp
SkinRes/MoneyTip.bmp
SkinRes/Moneyupfreeze.bmp
SkinRes/MsgHint.bmp
SkinRes/MsgRechEdit.bmp
SkinRes/MulSealTab.bmp
SkinRes/MulSealTab1.bmp
SkinRes/MulTab.bmp
SkinRes/MulTab1.bmp
SkinRes/MultiRoom_CollectRoom.bmp
SkinRes/MultiRoom_RoomAddr.bmp
SkinRes/NetTransfer.bmp
SkinRes/NewUserSign.bmp
SkinRes/Next.bmp
SkinRes/Notifybutton.bmp
SkinRes/OK.bmp
SkinRes/OnVideo/.svn/entries
SkinRes/OnVideo/haixuan_bg.png
.png
SkinRes/OnVideo/haixuan_ico.png
.png
SkinRes/OnVideo/ico_1.png
.png
SkinRes/OnVideo/ico_2.png
.png
SkinRes/OnVideo/ico_3.png
.png
SkinRes/OnVideo/vote.bmp
SkinRes/OnVideo/vote_billboard.png
.png
SkinRes/OnVideo/vote_empty.png
.png
SkinRes/OnVideo/vote_full.png
.png
SkinRes/OnVideo/vote_ie_bk.bmp
SkinRes/OnVideo/vote_ie_close.bmp
SkinRes/OnVideo/vote_ie_icon.bmp
SkinRes/OnVideo/vote_on_video.png
.png
SkinRes/OnVideo/vote_ranking.png
.png
SkinRes/OnVideo/vote_tip.png
.png
SkinRes/OnVideo/·¿¼ä5.png
.png
SkinRes/Paper.png
.png
SkinRes/Prev.bmp
SkinRes/ProgressBack.bmp
SkinRes/ProgressFore.bmp
SkinRes/QRCode.bmp
SkinRes/ROOMMAN_MASTER.gif
.gif
SkinRes/ROOMMAN_MEMBER.gif
.gif
SkinRes/RankRate.bmp
SkinRes/Refresh.bmp
SkinRes/ScretPrint.gif
.gif
SkinRes/ScrollLimit.bmp
SkinRes/ScrollLimit2.bmp
SkinRes/SendRecvMin_Base.bmp
SkinRes/SendRecvMin_Close.bmp
SkinRes/SendRecvMin_Max.bmp
SkinRes/SendWeibo.bmp
SkinRes/ServerInfo.bmp
SkinRes/SmallIcon.bmp
SkinRes/Sure.bmp
SkinRes/SysInfo.bmp
SkinRes/Sysmessage.bmp
SkinRes/TG/.svn/entries
SkinRes/TG/99Lover.xml
.xml
SkinRes/TG/Login.bmp
SkinRes/TG/LoginDlg.bmp
SkinRes/TG/QRCode.bmp
SkinRes/TG/check.bmp
SkinRes/TG/city_bg.bmp
SkinRes/TG/city_close.bmp
SkinRes/TG/closes1.bmp
SkinRes/TG/combox.bmp
SkinRes/TG/guest - ¸±±¾.bmp
SkinRes/TG/guest.bmp
SkinRes/TG/menu.bmp
SkinRes/TG/mins1.bmp
SkinRes/TG/qq.bmp
SkinRes/TG/weibo.bmp
SkinRes/TG/weixin.bmp
SkinRes/TabFriend.bmp
SkinRes/TabFriend1.bmp
SkinRes/TenMusicBk.bmp
SkinRes/TenRoom.jpg
.jpg
SkinRes/TenRoomIntroduce.bmp
SkinRes/TenRoomToolbar.bmp
SkinRes/TenTab.bmp
SkinRes/TenTab1.bmp
SkinRes/TenTab2.bmp
SkinRes/TenTab3.bmp
SkinRes/TenTiTle.bmp
SkinRes/TenVMusicBk.bmp
SkinRes/TenVRoom.jpg
.jpg
SkinRes/Tenbuttom.bmp
SkinRes/Tentop.bmp
SkinRes/Thumb.bmp
SkinRes/TipClose.bmp
SkinRes/TipDown.bmp
SkinRes/TitleBk.bmp
SkinRes/Titlesplider.bmp
SkinRes/Topmask.bmp
SkinRes/TreeStatus.bmp
SkinRes/Unknown.jpg
.jpg
SkinRes/UserInfoDlg.bmp
SkinRes/VIPRoomSkin/.svn/entries
SkinRes/VIPRoomSkin/1v1Dialog.bmp
SkinRes/VIPRoomSkin/1v1End.bmp
SkinRes/VIPRoomSkin/1v1Switch.bmp
SkinRes/VIPRoomSkin/1v1close.bmp
SkinRes/VIPRoomSkin/AVbg.bmp
SkinRes/VIPRoomSkin/AVbg2.bmp
SkinRes/VIPRoomSkin/Font.bmp
SkinRes/VIPRoomSkin/FontCtrl.bmp
SkinRes/VIPRoomSkin/GiftBrowe.JPG
.jpg
SkinRes/VIPRoomSkin/ListAdminTitle.bmp
SkinRes/VIPRoomSkin/ListUserTitle.bmp
SkinRes/VIPRoomSkin/MulADTab.bmp
SkinRes/VIPRoomSkin/MulADTab1.bmp
SkinRes/VIPRoomSkin/MulSealTab.bmp
SkinRes/VIPRoomSkin/MulSealTab1.bmp
SkinRes/VIPRoomSkin/MulTab.bmp
SkinRes/VIPRoomSkin/MulTab1.bmp
SkinRes/VIPRoomSkin/MulTab1_3.bmp
SkinRes/VIPRoomSkin/MulTab_3.bmp
SkinRes/VIPRoomSkin/QuickChat.bmp
SkinRes/VIPRoomSkin/RankRate.bmp
SkinRes/VIPRoomSkin/RoomTitle.bmp
SkinRes/VIPRoomSkin/RoomTitleBG.bmp
SkinRes/VIPRoomSkin/RoomTitleLeft.bmp
SkinRes/VIPRoomSkin/RoomTitleLeft_v2.bmp
SkinRes/VIPRoomSkin/RoomTitleRight.bmp
SkinRes/VIPRoomSkin/TiTle.bmp
SkinRes/VIPRoomSkin/TitleInfo.bmp
SkinRes/VIPRoomSkin/TwoLeftBottom.bmp
SkinRes/VIPRoomSkin/UserNameBK.bmp
SkinRes/VIPRoomSkin/VIPLeftBottom.bmp
SkinRes/VIPRoomSkin/VIPRoombg.bmp
SkinRes/VIPRoomSkin/VideoRoomTitleLeft.bmp
SkinRes/VIPRoomSkin/arrow.bmp
SkinRes/VIPRoomSkin/arrow_up.bmp
SkinRes/VIPRoomSkin/broadcast.bmp
SkinRes/VIPRoomSkin/down.bmp
SkinRes/VIPRoomSkin/gift_in.bmp
SkinRes/VIPRoomSkin/giftsbg.bmp
SkinRes/VIPRoomSkin/left.bmp
SkinRes/VIPRoomSkin/left_bottom.bmp
SkinRes/VIPRoomSkin/left_top.bmp
SkinRes/VIPRoomSkin/listTitle.bmp
SkinRes/VIPRoomSkin/lv_help.bmp
SkinRes/VIPRoomSkin/right_bottom.bmp
SkinRes/VIPRoomSkin/right_top.bmp
SkinRes/VIPRoomSkin/row.bmp
SkinRes/VIPRoomSkin/searchbg.bmp
SkinRes/VIPRoomSkin/slitter.bmp
SkinRes/VIPRoomSkin/tip_speed.bmp
SkinRes/VIPRoomSkin/up.bmp
SkinRes/VIPRoomSkin/user_search.bmp
SkinRes/VIPRoomSkin/user_search_bg.bmp
SkinRes/VIPRoomSkin/where_is_me.bmp
SkinRes/VIPRoomSkin/zf.bmp
SkinRes/VIPRoomSkin/¸´¼þ TiTle.bmp
SkinRes/WaitRoom.gif
.gif
SkinRes/WarehouseBG.bmp
SkinRes/WholeRoom.bmp
SkinRes/WholeRoom2.bmp
SkinRes/X.bmp
SkinRes/X2.bmp
SkinRes/adclose.bmp
SkinRes/adclose2.bmp
SkinRes/admess.bmp
SkinRes/agent.bmp
SkinRes/agentrecharge.bmp
SkinRes/bg_giftHorn.png
.png
SkinRes/bigStar.png
.png
SkinRes/blInfor.bmp
SkinRes/bottom.bmp
SkinRes/bottommask.bmp
SkinRes/brInfor.bmp
SkinRes/broadbg.bmp
SkinRes/broadbg1.bmp
SkinRes/broadbg2.bmp
SkinRes/broadbg3.bmp
SkinRes/btn_giftHorn.bmp
SkinRes/btn_link_vip.bmp
SkinRes/buttom.bmp
SkinRes/buttonclose.bmp
SkinRes/buttonmin.bmp
SkinRes/buttons/.svn/entries
SkinRes/buttons/CancelAll.bmp
SkinRes/buttons/CancelMission.bmp
SkinRes/buttons/DlgBack_N.bmp
SkinRes/buttons/DlgClose_N.bmp
SkinRes/buttons/DlgHelp_N.bmp
SkinRes/buttons/DlgMin_N.bmp
SkinRes/buttons/close.bmp
SkinRes/buttons/http_dx.bmp
SkinRes/buttons/http_wt.bmp
SkinRes/buttons/min.bmp
SkinRes/charm_bottom.bmp
SkinRes/charm_top.bmp
SkinRes/close.bmp
SkinRes/close.png
.png
SkinRes/close3.bmp
SkinRes/closeAudition.bmp
SkinRes/close_white.bmp
SkinRes/closes1.bmp
SkinRes/color.bmp
SkinRes/consume.bmp
SkinRes/control.bmp
SkinRes/control2.bmp
SkinRes/crown_bg.png
.png
SkinRes/dianxin.bmp
SkinRes/dice.gif
.gif
SkinRes/dlg.gif
.gif
SkinRes/egg.png
.png
SkinRes/event.bmp
SkinRes/family.bmp
SkinRes/female.bmp
SkinRes/fireworks/.svn/entries
SkinRes/fireworks/ÆÕÍ¨ÑÌ»¨55.bmp
SkinRes/fireworks/ÑÌ»¨_²ÆÔ´¹ö¹ö55.jpg
.jpg
SkinRes/fireworks/ÑÌ»¨_¿ªÒµ´ó¼ª55.jpg
.jpg
SkinRes/fireworks/ÑÌ»¨_ÉúÈÕ55.jpg
.jpg
SkinRes/fireworks/ÑÌ»¨_Ï²½áÁ¬Àí55.jpg
.jpg
SkinRes/flashTab.bmp
SkinRes/flashTabDown.bmp
SkinRes/focus.bmp
SkinRes/fragment.bmp
SkinRes/getmoney.bmp
SkinRes/gift_in.bmp
SkinRes/good.png
.png
SkinRes/gov.gif
.gif
SkinRes/gov2.gif
.gif
SkinRes/gray.bmp
SkinRes/guessnumber.bmp
SkinRes/guidebtn.bmp
SkinRes/heart.bmp
SkinRes/help.bmp
SkinRes/home.bmp
SkinRes/houseback.bmp
SkinRes/houseimage.bmp
SkinRes/icon.ico
SkinRes/icon_gift.bmp
SkinRes/icon_history.bmp
SkinRes/icon_rt.png
.png
SkinRes/icon_·¿¼ä.bmp
SkinRes/icon_ÉèÖÃ.bmp
SkinRes/ie_bg.png
.png
SkinRes/immenu.bmp
SkinRes/inputing.gif
.gif
SkinRes/instruction.bmp
SkinRes/k2.gif
.gif
SkinRes/key1.bmp
SkinRes/key2.bmp
SkinRes/kiss1.gif
.gif
SkinRes/kiss2.gif
.gif
SkinRes/kiss_bg2.png
.png
SkinRes/kissinfo.png
.png
SkinRes/left.bmp
SkinRes/leftBackground.bmp
SkinRes/leftmask.bmp
SkinRes/loading.gif
.gif
SkinRes/lock.bmp
SkinRes/login.bmp
SkinRes/login.gif
.gif
SkinRes/logincancel.bmp
SkinRes/loginclose.bmp
SkinRes/loginmin.bmp
SkinRes/loginok.bmp
SkinRes/loginreg.bmp
SkinRes/loud.gif
.gif
SkinRes/male.bmp
SkinRes/max.bmp
SkinRes/maxloud.gif
.gif
SkinRes/menu.bmp
SkinRes/message.bmp
SkinRes/message/.svn/entries
SkinRes/message/aboutme.bmp
SkinRes/message/aboutmeRed.bmp
SkinRes/message/announce.bmp
SkinRes/message/announceRed.bmp
SkinRes/message/private.bmp
SkinRes/min.bmp
SkinRes/mins1.bmp
SkinRes/myaccount.bmp
SkinRes/mybank.bmp
SkinRes/new.bmp
SkinRes/nofocus.bmp
SkinRes/none.bmp
SkinRes/parkback.bmp
SkinRes/parkimage.bmp
SkinRes/pay.jpg
.jpg
SkinRes/phone.bmp
SkinRes/phonenotify.bmp
SkinRes/pic.gif
.gif
SkinRes/privatechat.bmp
SkinRes/prize.png
.png
SkinRes/prize1000.png
.png
SkinRes/prize500.png
.png
SkinRes/qqTalk.bmp
SkinRes/quick.gif
.gif
SkinRes/restore.bmp
SkinRes/return.bmp
SkinRes/right.bmp
SkinRes/rightBackground.bmp
SkinRes/rightmask.bmp
SkinRes/room_adjuest.bmp
SkinRes/room_adjuest2.bmp
SkinRes/room_link.bmp
SkinRes/room_nolink.bmp
SkinRes/room_phonevolume.bmp
SkinRes/room_setup.bmp
SkinRes/room_volume.bmp
SkinRes/roomaddresss.GIF
.gif
SkinRes/roomclose.bmp
SkinRes/roommax.bmp
SkinRes/roommin.bmp
SkinRes/roomrestore.bmp
SkinRes/run_bg.png
.png
SkinRes/scroll.bmp
SkinRes/search_close.bmp
SkinRes/search_text_bg.bmp
SkinRes/set.bmp
SkinRes/shield.bmp
SkinRes/skin.ini
SkinRes/smallStar.bmp
SkinRes/spinbtn_leftright.bmp
SkinRes/star/.svn/entries
SkinRes/star/close.png
.png
SkinRes/star/down1.png
.png
SkinRes/star/down2.png
.png
SkinRes/star/next.png
.png
SkinRes/star/next2.png
.png
SkinRes/star/prev.png
.png
SkinRes/star/prev2.png
.png
SkinRes/star/sg_bg.png
.png
SkinRes/star/share_qzone1.png
.png
SkinRes/star/share_qzone2.png
.png
SkinRes/star/share_t1.png
.png
SkinRes/star/share_t2.png
.png
SkinRes/star/share_weibo1.png
.png
SkinRes/star/share_weibo2.png
.png
SkinRes/status.bmp
SkinRes/support.png
.png
SkinRes/systemCenter.bmp
SkinRes/systemReg.bmp
SkinRes/systemSet.bmp
SkinRes/tenleft.bmp
SkinRes/tenright.bmp
SkinRes/tipbtnclose.bmp
SkinRes/titlebg.bmp
SkinRes/tlInfor.bmp
SkinRes/top.bmp
SkinRes/trInfor.bmp
SkinRes/treasuryimg/.svn/entries
SkinRes/treasuryimg/boxImage/autolottery.bmp
SkinRes/treasuryimg/boxImage/autolotterydisable.bmp
SkinRes/treasuryimg/boxImage/bg.bmp
SkinRes/treasuryimg/boxImage/coinbg.jpg
.jpg
SkinRes/treasuryimg/boxImage/exprience.bmp
SkinRes/treasuryimg/boxImage/exprience2.bmp
SkinRes/treasuryimg/boxImage/gold_help.png
.png
SkinRes/treasuryimg/boxImage/help.bmp
SkinRes/treasuryimg/boxImage/infoBG.bmp
SkinRes/treasuryimg/boxImage/numImage.png
.png
SkinRes/treasuryimg/boxImage/numImage2.png
.png
SkinRes/treasuryimg/boxImage/openbox.bmp
SkinRes/treasuryimg/boxImage/opendisable.bmp
SkinRes/treasuryimg/boxImage/opennow.bmp
SkinRes/treasuryimg/boxImage/stoplottery.bmp
SkinRes/treasuryimg/boxImage/treasurybox.jpg
.jpg
SkinRes/treasuryimg/boxeffect/0.jpg
.jpg
SkinRes/treasuryimg/boxeffect/1.jpg
.jpg
SkinRes/treasuryimg/boxeffect/2.jpg
.jpg
SkinRes/treasuryimg/boxeffect/3.jpg
.jpg
SkinRes/treasuryimg/boxeffect/4.jpg
.jpg
SkinRes/treasuryimg/boxeffect/5.jpg
.jpg
SkinRes/treasuryimg/boxeffect/6.jpg
.jpg
SkinRes/treasuryimg/boxeffect/7.jpg
.jpg
SkinRes/treasuryimg/boxeffect/8.jpg
.jpg
SkinRes/treasuryimg/boxeffect/9.jpg
.jpg
SkinRes/treasuryimg/numberImage/0.png
.png
SkinRes/treasuryimg/numberImage/1.png
.png
SkinRes/treasuryimg/numberImage/2.png
.png
SkinRes/treasuryimg/numberImage/3.png
.png
SkinRes/treasuryimg/numberImage/4.png
.png
SkinRes/treasuryimg/numberImage/5.png
.png
SkinRes/treasuryimg/numberImage/6.png
.png
SkinRes/treasuryimg/numberImage/7.png
.png
SkinRes/treasuryimg/numberImage/8.png
.png
SkinRes/treasuryimg/numberImage/9.png
.png
SkinRes/treasuryimg/numberImage/bk.bmp
SkinRes/treasuryimg/numberImage/coin.png
.png
SkinRes/tree.bmp
SkinRes/upscroll.bmp
SkinRes/userInfer.gif
.gif
SkinRes/userlogininfo.png
.png
SkinRes/usernameBK.bmp
SkinRes/vip.bmp
SkinRes/vipendtime1.png
.png
SkinRes/vipendtime2.png
.png
SkinRes/wait.gif
.gif
SkinRes/wangtong.bmp
SkinRes/waring.bmp
SkinRes/weakstar.bmp
SkinRes/weibo.bmp
SkinRes/weibo/.svn/entries
SkinRes/weibo/BaseMap.bmp
SkinRes/weibo/CloseWeibo.bmp
SkinRes/weibo/CloseWeibo2.bmp
SkinRes/weibo/Next.bmp
SkinRes/weibo/Prev.bmp
SkinRes/weibo/Refresh.bmp
SkinRes/weibo/SendWeiBoTop.bmp
SkinRes/weibo/SendWeibo.bmp
SkinRes/weibo/SmallMenuColor.bmp
SkinRes/weibo/SmallMenuDisable.bmp
SkinRes/weibo/SmallMenuHot.bmp
SkinRes/weibo/background.bmp
SkinRes/weibo/getmoney.bmp
SkinRes/weibo/roommanage.bmp
SkinRes/weibo/weibo.bmp
SkinRes/wincut.bmp
SkinRes/yh.bmp
SkinRes/zhufu.gif
.gif
SockClient.dll
.dll windows:4 windows x86 arch:x86

9f0d86c61cd491ae861e936989186545

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d9:81:a5:04:76:11:4c:88:d4:a4:b1:eb:73:60:b8:e1:9d:1b:79:c7
Signer

Actual PE Digest

d9:81:a5:04:76:11:4c:88:d4:a4:b1:eb:73:60:b8:e1:9d:1b:79:c7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

recv
select
__WSAFDIsSet
getsockopt
WSAGetLastError
send
htons
inet_addr
connect
socket
closesocket
WSACleanup
ioctlsocket
WSAStartup

mfc42

ord342
ord823
ord1182
ord540
ord800
ord537
ord860
ord2818
ord858
ord4278
ord5683
ord1253
ord5607
ord1083
ord5621
ord773
ord803
ord825
ord543
ord501
ord3584
ord1168

msvcrt

_adjust_fdiv
malloc
_initterm
free
__dllonexit
?terminate@@YAXXZ
_except_handler3
_mbsrchr
_purecall
__CxxFrameHandler
_onexit

kernel32

GetLocalTime
GetLastError
OutputDebugStringA
SetEvent
GetExitCodeThread
TerminateThread
WaitForSingleObject
Sleep
CreateEventA
CreateThread
WriteFile
IsBadWritePtr
VirtualQuery
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
GetModuleFileNameA
SetUnhandledExceptionFilter
WinExec
CloseHandle
SetFilePointer
InitializeCriticalSection
CreateFileA

user32

wvsprintfA
PostMessageA

publictool

??0CBuffer@@QAE@ABV0@@Z
??1CBuffer@@UAE@XZ
?BufferCpy@CBuffer@@QAEXPAEKK@Z
?SetPos@CBuffer@@QAEXKK@Z
?GetRealBuffer@CBuffer@@QAEPBEXZ
?GetBufferLen@CBuffer@@QAEKXZ
??0CBuffer@@QAE@K@Z
?GetRealLen@CBuffer@@QAEKXZ

Exports

Exports

CreateClientSock

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sysinfo/Sysinfo.ini
TenAVModule.xml
.xml
TmpConfig4WeiBo.ini
TreasuryDLL.dll
.dll windows:4 windows x86 arch:x86

daa201b382b3d7bec318eaad7c37fa0c

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

73:e0:e1:30:39:e1:6e:13:d4:72:5e:4a:0c:27:f9:40:05:c9:c3:e6
Signer

Actual PE Digest

73:e0:e1:30:39:e1:6e:13:d4:72:5e:4a:0c:27:f9:40:05:c9:c3:e6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord818
ord1641
ord567
ord825
ord3663
ord3626
ord2414
ord4275
ord2379
ord755
ord470
ord6442
ord1233
ord3571
ord640
ord800
ord2405
ord860
ord535
ord2818
ord540
ord5875
ord283
ord5785
ord1640
ord323
ord858
ord922
ord537
ord4277
ord4278
ord2764
ord5290
ord3005
ord2135
ord6880
ord3092
ord1601
ord538
ord5572
ord2919
ord1168
ord4123
ord2642
ord861
ord4299
ord2688
ord823
ord3089
ord2864
ord4129
ord2985
ord3798
ord5789
ord6172
ord6215
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord5683
ord2621
ord1134
ord3402
ord809
ord556
ord6358
ord6241
ord613
ord289
ord1088
ord2122
ord941
ord939
ord926
ord925
ord6877
ord1187
ord1949
ord4034
ord3262
ord3136
ord4465
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord5710
ord4837
ord826
ord269
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord539
ord3619

msvcrt

malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
_EH_prolog
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_mbscmp
wcslen
??0exception@@QAE@ABQBD@Z
towupper
_adjust_fdiv
atoi
__CxxFrameHandler

kernel32

LocalFree
InterlockedDecrement
OutputDebugStringA
GetModuleFileNameA
MultiByteToWideChar
Sleep
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenW
GetLastError
lstrlenA
LocalAlloc

user32

FillRect
GetClientRect
EnableWindow
GetWindowRect
SetTimer
KillTimer
GetWindowLongA
SetWindowLongA
SendMessageA
GetParent
InvalidateRect
IsWindowVisible
PostMessageA
LoadImageA
SetCursor
GetCursorPos
LoadCursorA
PtInRect

gdi32

SelectObject
CreateCompatibleBitmap
GetObjectA
GetTextExtentPoint32A
DeleteDC
CreateCompatibleDC
CreateFontA
BitBlt

comctl32

_TrackMouseEvent

oleaut32

SafeArrayGetLBound
SysStringLen
SysAllocStringLen
VariantChangeType
VariantCopy
SetErrorInfo
GetErrorInfo
SafeArrayGetUBound
SafeArrayCreate
SafeArrayPutElement
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysFreeString
VariantClear
SysAllocString
CreateErrorInfo

publictool

?Stretch@CxImageEx@@QAEJPAUHDC__@@JJJJK@Z
?Draw@CxImageEx@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z
?Load@CxImageEx@@QAE_NPBDK@Z
?IsValid@CxImageEx@@QBE_NXZ
?GetHeight@CxImageEx@@QBEKXZ
?GetWidth@CxImageEx@@QBEKXZ
??0CxImageEx@@QAE@K@Z
??1CxImageEx@@UAE@XZ
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z

msvcp60

??1out_of_range@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??_7out_of_range@std@@6B@
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

CreateTreasury

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Uninst.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:13:14:6d:8f:9d:ef:30:f0:d7:a4:f6:a0:7a:5e:0e:fc:62:a3:d1
Signer

Actual PE Digest

52:13:14:6d:8f:9d:ef:30:f0:d7:a4:f6:a0:7a:5e:0e:fc:62:a3:d1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UpdateConfig.xml
Video.dll
.dll windows:4 windows x86 arch:x86

f9c12e4f806979414c8c4061512b9b34

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d7:1f:62:d6:f8:f9:36:05:52:a1:71:7e:a3:2d:b0:a9:06:5e:8d:88
Signer

Actual PE Digest

d7:1f:62:d6:f8:f9:36:05:52:a1:71:7e:a3:2d:b0:a9:06:5e:8d:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CreateThread
GetExitCodeThread
TerminateThread
CloseHandle
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
OutputDebugStringA

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize

msvcrt

_adjust_fdiv
malloc
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
_ftol
sprintf
strrchr
vsprintf
free
_initterm

Exports

Exports

?CreateVideoInObject@@YAPAVIVideoIn@@XZ
?CreateVideoOutObject@@YAPAVIVideoOut@@XZ

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoAd/06b29a0b-4708-4736-8bc0-0d14db02df10.gif
.gif
VideoAd/29fe6b27-9a69-4722-ad70-eed69eba49ec.jpg
.jpg
VideoAd/2ea2b540-3704-4c2a-9d8b-5eab440d7fc2.swf
VideoAd/48233e07-2b5a-4f79-868c-55cc22e4e690.swf
VideoAd/6da6f05c-851d-4a14-8fb0-337beb4d5bfb.jpg
.jpg
VideoAd/6ed52e96-e1f1-4fcb-9103-a824535cce76.swf
VideoAd/79b74cb1-2ef6-4abe-9d99-68e79302e2e6.swf
VideoAd/92bd0618-c67d-4f15-b640-664d510bd668.jpg
.jpg
VideoAd/9f69af6d-ac87-4f08-a5be-4846d82c9ccc.jpg
.jpg
VideoAd/OpenVideo.png
.png
VideoAd/ad.css
VideoAd/ad.js
.js
VideoAd/ad_0.htm
.html
VideoAd/b68fdbed-e6c3-4f9e-b158-362f239b4e3f.swf
VideoAd/config.ini
VideoAd/d21128fb-2fbf-44c3-baf8-9db0c0f63d9c.jpg
.jpg
VideoAd/f33371d4-0869-4993-ac34-2f41f53cb2a3.gif
.gif
VideoCodec1000.dll
.dll windows:4 windows x86 arch:x86

bb083caa04afe288da7a2ac481dcb14f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

50:05:df:c4:ba:ec:26:67:67:e6:3e:75:7b:cd:6b:3d:2a:a6:db:ca
Signer

Actual PE Digest

50:05:df:c4:ba:ec:26:67:67:e6:3e:75:7b:cd:6b:3d:2a:a6:db:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
_initterm
malloc
_adjust_fdiv

videodecoder

VideoDecoder_Init
VideoDecoder_Decode
VideoDecoder_UnInit

videoencoder

VideoEncoder_Set_Param
VideoEncoder_Get_Default_Param
VideoEncoder_Init
VideoEncoder_Encode
VideoEncoder_UnInit
VideoEncoder_Open

Exports

Exports

?CreateVideoDecoder1000@@YAPAVIVideoDecoder0@@XZ
?CreateVideoEncoder1000@@YAPAVIVideoEncoder0@@XZ

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 897B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoCodec2000.dll
.dll windows:4 windows x86 arch:x86

416748eb1d0a3550a5a3573f79b3e29d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:40:6a:58:e6:c0:38:e7:61:d3:63:d6:6c:6b:3c:82:e1:a5:27:95
Signer

Actual PE Digest

61:40:6a:58:e6:c0:38:e7:61:d3:63:d6:6c:6b:3c:82:e1:a5:27:95

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle

Exports

Exports

?CreateVideoDecoder2000@@YAPAVIVideoDecoder0@@XZ
?CreateVideoEncoder2000@@YAPAVIVideoEncoder0@@XZ

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoDecoder.dll
.dll windows:4 windows x86 arch:x86

a88704134ccac4cd9b8398194a04fbf5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:f0:08:ed:53:38:7b:b5:1e:59:73:48:96:b5:58:b4:3f:2e:f5:80
Signer

Actual PE Digest

63:f0:08:ed:53:38:7b:b5:1e:59:73:48:96:b5:58:b4:3f:2e:f5:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\WorkSpace\VideoCodec\x264Workspace\H264Decoder\Release\h264.pdb

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
SetConsoleCtrlHandler
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
FatalAppExitA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
SetFilePointer
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
GetLocaleInfoW
ReadFile
CloseHandle
CreateFileA
RaiseException
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetFileAttributesA

Exports

Exports

VideoDecoder_Decode
VideoDecoder_Init
VideoDecoder_UnInit

Sections

.text
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoEncoder.dll
.dll windows:4 windows x86 arch:x86

22901ac825dfaa59be864dec42a77aba

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ac:3f:bb:bc:d8:ef:8a:6f:a7:1b:60:66:38:8a:af:5f:95:a7:d0:d9
Signer

Actual PE Digest

ac:3f:bb:bc:d8:ef:8a:6f:a7:1b:60:66:38:8a:af:5f:95:a7:d0:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_fstat
_strdup
_unlink
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_errno
_filelengthi64
_ftime
_iob
_stricmp
_strnicmp
_winmajor
abort
calloc
exp
fclose
fflush
fgetpos
fopen
fprintf
fputc
fread
free
fsetpos
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
pow
rename
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strpbrk
strspn
strstr
strtok
strtol
vfprintf
wcslen

Exports

Exports

VideoEncoder_Close
VideoEncoder_Encode
VideoEncoder_Get_Default_Param
VideoEncoder_Init
VideoEncoder_Open
VideoEncoder_Set_Param
VideoEncoder_UnInit

Sections

.text
Size: 808KB - Virtual size: 807KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoHelper.dll
.dll windows:4 windows x86 arch:x86

16534a5bf9ca22af9d9a13613901641d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

oleaut32

OleCreatePropertyFrame
SysFreeString
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantInit
VariantClear
SysAllocString

kernel32

GetStartupInfoA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
LocalFree
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
SetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
HeapAlloc
HeapReAlloc
VirtualAlloc
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
Sleep
LCMapStringA
LCMapStringW
SetFilePointer
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID

Exports

Exports

VH_Adjustment
VH_ChangeDevice
VH_Close
VH_CreateObject
VH_GetDeviceCount
VH_GetDeviceName
VH_Init

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Vote.dll
.dll windows:4 windows x86 arch:x86

7ec90830cd9d7ab1a24ef7470a9894f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3136
ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord609
ord567
ord825
ord3626
ord3663
ord2414
ord1793
ord4275
ord2379
ord800
ord540
ord640
ord2405
ord1641
ord5785
ord1640
ord323
ord823
ord2859
ord6197
ord1168
ord3706
ord537
ord3721
ord4407
ord3742
ord818
ord795
ord6453
ord2818
ord6215
ord6442
ord858
ord3005
ord2135
ord4465
ord1601
ord4123
ord2642
ord535
ord861
ord4299
ord2688
ord860
ord3089
ord2864
ord4278
ord924
ord3021
ord6605
ord2754
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord3953
ord5683
ord2725
ord755
ord470
ord2078
ord1768
ord1187
ord1949
ord4034
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord269
ord826
ord600
ord1578
ord6467
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4396
ord1776
ord4078
ord6055
ord3571
ord3574
ord1233
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord2575

msvcrt

malloc
_adjust_fdiv
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
exit
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_ftol
_purecall
wcslen
rand
_mbsrchr
wcscpy
__CxxFrameHandler

kernel32

lstrlenA
OutputDebugStringA
Sleep
GetModuleFileNameA
GetLastError
GetProcAddress
LoadLibraryA
FreeLibrary
LocalFree
LocalAlloc
MultiByteToWideChar

user32

SetCursor
SendMessageA
GetClientRect
GetWindowDC
GetWindowLongA
LoadImageA
InvalidateRect
ReleaseDC
SetWindowRgn
GetWindowRect
EnableWindow
SetWindowPos
RegisterClassExA
DefWindowProcA
CopyRect
SetTimer
KillTimer
GetParent
IsIconic
SetWindowLongA
GetClassInfoExA
UnregisterClassA
SetRectEmpty
IsWindowVisible
GetCursorPos
PostMessageA
GetDC
LoadCursorA
PtInRect

gdi32

DeleteDC
CreateRoundRectRgn
DeleteObject
CreateRectRgn
CombineRgn
SelectObject
CreateCompatibleDC
GetObjectA
GetPixel
BitBlt
StretchBlt
CreateDIBSection

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

oleaut32

VariantClear
SysFreeString
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocString
VariantInit
SafeArrayGetUBound
SafeArrayGetLBound

gdiplus

GdipDrawImageRectI
GdipCreateStringFormat
GdipSetStringFormatAlign
GdipCreateFontFamilyFromName
GdipCloneBrush
GdipCreateFromHDC
GdipDrawImageI
GdipDrawImageRectRectI
GdipCreateSolidFill
GdipCreateFont
GdipDeleteFontFamily
GdipDrawString
GdipReleaseDC
GdipDeleteFont
GdipDeleteBrush
GdipDeleteGraphics
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromFile
GdipDeleteStringFormat

msvcp60

??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0logic_error@std@@QAE@ABV01@@Z

shlwapi

PathFileExistsW

Exports

Exports

CreateVoteManage

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebServer.exe
.exe windows:4 windows x86 arch:x86

6e7e1555ed4ad65f6c1ef89bbcf4de19

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

01/03/2011, 01:00

Not After

01/03/2016, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

8f:fa:3b:58:26:14:18:eb:9f:f9:2d:7f:94:eb:69:3b:28:46:df:61
Signer

Actual PE Digest

8f:fa:3b:58:26:14:18:eb:9f:f9:2d:7f:94:eb:69:3b:28:46:df:61

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStartup
htons
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
WSACreateEvent
listen
bind
WSAGetLastError
WSASocketA
WSACleanup
closesocket
WSASend
WSARecv
WSAAccept
WSACloseEvent

mfc42

ord537
ord5442
ord958
ord665
ord3663
ord354
ord941
ord860
ord2044
ord2107
ord3903
ord2841
ord2448
ord1200
ord858
ord4278
ord5683
ord5710
ord2764
ord5450
ord5440
ord6383
ord5834
ord6394
ord540
ord823
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord641
ord795
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord6055
ord1776
ord800
ord3402
ord3721
ord1146
ord1168
ord567
ord2294
ord2362
ord2370
ord2302
ord4160
ord2863
ord2379
ord755
ord470
ord6334
ord6215
ord535
ord2976
ord825
ord3830
ord5714
ord2982
ord5290
ord1576

msvcrt

_controlfp
_except_handler3
strftime
__set_app_type
_purecall
memmove
__setusermatherr
__p__fmode
time
__p__commode
_adjust_fdiv
_errno
_beginthreadex
_initterm
??1type_info@@UAE@XZ
_setmbcp
_CxxThrowException
wcslen
_strlwr
__getmainargs
exit
_acmdln
fclose
_onexit
_XcptFilter
_exit
__dllonexit
atol
fwrite
fopen
localtime
atoi
sprintf
gmtime
__CxxFrameHandler
_mbscmp

kernel32

LocalFree
lstrlenA
GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryA
GetModuleFileNameA
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
TerminateThread
GetLastError
Sleep
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
ResetEvent
InterlockedIncrement
LeaveCriticalSection
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
CloseHandle
WaitForSingleObject

user32

SendMessageA
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
GetClientRect
LoadIconA
PostMessageA
SetTimer
KillTimer
EnableWindow
GetWindowThreadProcessId
IsIconic

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

ole32

OleRun
CoCreateInstance
CoInitialize

oleaut32

SysStringByteLen
SysAllocString
GetErrorInfo
SysFreeString
VariantClear
SysAllocStringByteLen

msvcp60

??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Xran@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0_Lockit@std@@QAE@XZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WebVideo.dll
.dll regsvr32 windows:4 windows x86 arch:x86

775ad69f3599481e815d933c46c2ce32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
InterlockedDecrement
MulDiv
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
lstrcatA
FlushFileBuffers
InterlockedIncrement
GetVersionExA
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetOEMCP
GetStringTypeW
GetStringTypeA
GetCPInfo
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LeaveCriticalSection
lstrcmpW
lstrcpynA
lstrcmpiA
GetProcessHeap
HeapFree
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WideCharToMultiByte
IsDBCSLeadByte
lstrlenA
lstrcpyA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
ExitProcess
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
LCMapStringW
LCMapStringA
GetCommandLineA
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
VirtualAlloc

user32

GetClientRect
CharNextA
UnregisterClassA
DestroyWindow
DefWindowProcA
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
SendMessageTimeoutA
RegisterClassExA
GetClassInfoExA
OffsetRect
CreateWindowExA
wsprintfA
GetParent
SetFocus
ShowWindow
GetFocus
IsChild
BeginPaint
LoadCursorA
EndPaint
GetKeyState
InvalidateRect
IsWindow
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
IntersectRect
EqualRect

gdi32

GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
CreateRectRgnIndirect
SetTextAlign
TextOutA
CreateDCA

advapi32

RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

shell32

ShellExecuteA
ShellExecuteW

ole32

StringFromGUID2
CoCreateInstance
OleRegGetMiscStatus
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder

oleaut32

SysFreeString
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
SysStringLen
LoadTypeLi
LoadRegTypeLi
VariantInit
VariantClear
VarUI4FromStr
SysAllocString

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetAppWnd

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
active.ini
allplat.xml
broadcastchat.xml
.xml
car.xml
.xml
car_in.txt
carimage/defaultcar.png
.png
chat.xml
.xml
chatQK.xml
.xml
client.xml
download/DownSvrList.ini
download/softlistinfor1.ini
face/0.gif
.gif
face/faceconfig.xml
.xml
file.txt
filnick.xml
.xml
filter.xml
.xml
flower_in.txt
help.xml
.xml
icon/1.png
.png
icon/2.png
.png
icon/itemconfig.xml
item/300_3.gif
.gif
item/300_s_122010.png
.png
item/301_2.gif
.gif
item/301_s_122010.png
.png
item/302_3.gif
.gif
item/302_s_122010.png
.png
item/303_2.gif
.gif
item/303_s_122010.png
.png
item/304_s_21118.png
.png
item/304_t_52515.gif
.gif
item/305_13.gif
.gif
item/305_s_122010.png
.png
item/307_s_111314.png
.png
item/307_t_111314.gif
.gif
item/308_s_101416.png
.png
item/308_t_101416.gif
.gif
item/310_s_11311.png
.png
item/310_t_11311.gif
.gif
item/311_s_112211.png
.png
item/311_t_112211.gif
.gif
item/313_s_112314.png
.png
item/313_t_112314.gif
.gif
item/314_s_111616.png
.png
item/314_t_111616.gif
.gif
item/315_s_3615.png
.png
item/315_t_3615.gif
.gif
item/32_s_21411.png
.png
item/32_t_21411.gif
.gif
item/38_s_122010.png
.png
item/38_t_112316.gif
.gif
item/67_s_122010.png
.png
item/67_t_72516.gif
.gif
item/itemconfig.xml
itembox/itemboxconfig.xml
itembox/s20151021015335.png
.png
lobby.ini
login9158.dll
.dll regsvr32 windows:4 windows x86 arch:x86

cc6945f32bb5b7e8580fa0a1e139be97

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

cf:7f:a7:01:d1:b9:04:8f:12:6e:21:8a:31:0d:77:43:05:5c:b2:86
Signer

Actual PE Digest

cf:7f:a7:01:d1:b9:04:8f:12:6e:21:8a:31:0d:77:43:05:5c:b2:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord5307
ord3953
ord2725
ord1131
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1116
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord815
ord4274
ord6467
ord825
ord540
ord861
ord6877
ord4204
ord860
ord858
ord2818
ord926
ord800
ord823
ord4129
ord5710
ord561
ord2764

msvcrt

free
memset
_mbscmp
__CxxFrameHandler
memcmp
memcpy
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
_purecall

kernel32

LocalFree
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
MultiByteToWideChar
OutputDebugStringA
CreateToolhelp32Snapshot
Process32First
OpenProcess
ReadProcessMemory
Process32Next
LocalAlloc

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

oleaut32

SysAllocString
SysFreeString
LoadRegTypeLi
SysStringLen
VariantClear

atl

ord18
ord21
ord58
ord32
ord30
ord57
ord15
ord16
ord23

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
nplogin.dll
.dll windows:5 windows x86 arch:x86

c042167f0e88cec898384d995a613012

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

34:b5:2f:49:8f:cc:41:cb:5c:c2:14:a4:d6:17:cd:b9:ba:e0:29:60
Signer

Actual PE Digest

34:b5:2f:49:8f:cc:41:cb:5c:c2:14:a4:d6:17:cd:b9:ba:e0:29:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\Job VC\9158_activex\npapi\npapi\Release\nplogin.pdb

Imports

kernel32

Process32First
OpenProcess
WideCharToMultiByte
SizeofResource
ReadProcessMemory
MultiByteToWideChar
GetProcAddress
Process32Next
LockResource
LoadResource
CreateToolhelp32Snapshot
OutputDebugStringA
WinExec
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
FindResourceW
FindResourceExW
lstrlenA
lstrcpynA
GetModuleHandleA
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
LCMapStringW
IsProcessorFeaturePresent
Sleep
HeapSize
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
WriteFile
GetModuleFileNameW
GetStringTypeW
HeapReAlloc
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetProcessHeap

user32

PostMessageA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocStringLen
SysFreeString

Exports

Exports

NP_GetEntryPoints
NP_GetMIMEDescription
NP_GetPluginVersion
NP_Initialize
NP_Shutdown

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
p2pClient.dll
.dll windows:4 windows x86 arch:x86

1d6a36d175c1f9c345da06b41ae8449d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

16/07/2036, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1a:f5:86:d6:64:d4:ad:1f:05:52:4f:d9:b3:bc:e3:4c
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/05/2012, 00:00

Not After

27/08/2015, 23:59

Subject

CN=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=JINHUA 9158 NETWORK SCIENCE AND TECHNOLOGY CO.\,LTD.,L=Jinhua,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ad:97:ed:03:78:76:b0:92:02:b2:ba:30:19:05:4e:b0:f1:bc:67:a4
Signer

Actual PE Digest

ad:97:ed:03:78:76:b0:92:02:b2:ba:30:19:05:4e:b0:f1:bc:67:a4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
GetVersion
SetLastError
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
GetProcAddress
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
GetProcessVersion
LocalFree
GetCurrentProcess
FlushFileBuffers
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
TerminateProcess
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
CreateProcessA
ExitProcess
VirtualAlloc
VirtualFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetTimeZoneInformation
SetLocalTime
SetSystemTime
GetLocalTime
GetSystemTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEvent
CreateEventA
GetTickCount
Sleep
CreateThread
GetLastError
WaitForSingleObject
TerminateThread
WriteFile
IsBadWritePtr
VirtualQuery
GetModuleHandleA
FormatMessageA
CreateFileA
SetFilePointer
CloseHandle
SetUnhandledExceptionFilter
GetModuleFileNameA

user32

TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
ReleaseDC
GetDC
GetMenuItemCount
wsprintfA
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
wvsprintfA
CallNextHookEx

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
CryptReleaseContext
CryptAcquireContextA
CryptGenRandom

oleaut32

SysAllocString

ws2_32

recv
send
connect
shutdown
recvfrom
sendto
ntohs
inet_ntoa
__WSAFDIsSet
select
accept
listen
WSAStartup
socket
WSAGetLastError
htons
bind
setsockopt
ioctlsocket
getsockname
closesocket
htonl

comctl32

ord17

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetClipBox
RestoreDC
ScaleViewportExtEx
DeleteObject
DeleteDC
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SaveDC
SetTextColor
SetBkColor
GetStockObject
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateBitmap
GetDeviceCaps
SelectObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

??0CVSP2PClientInterface@@QAE@ABV0@@Z
??0CVSP2PClientInterface@@QAE@XZ
??0IClientInterface@@QAE@ABV0@@Z
??0IClientInterface@@QAE@XZ
??4CVSP2PClientInterface@@QAEAAV0@ABV0@@Z
??4IClientInterface@@QAEAAV0@ABV0@@Z
??_7CVSP2PClientInterface@@6B@
??_7IClientInterface@@6B@
?FreeVSP2PClient@@YAXPAVCVSP2PClientInterface@@@Z
?NewVSP2PClient@@YAPAVCVSP2PClientInterface@@XZ

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
public.dll
.dll windows:4 windows x86 arch:x86

ae5bf7152f17583f4ac6de34db347ced

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2453
ord5450
ord5440
ord6383
ord5834
ord6394
ord3626
ord2452
ord2859
ord1175
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord1642
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1187
ord1641
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord2414
ord3903
ord2107
ord2044
ord3571
ord384
ord2096
ord2448
ord2841
ord2408
ord3318
ord5442
ord940
ord3663
ord4204
ord859
ord825
ord2784
ord923
ord922
ord354
ord5186
ord6385
ord1979
ord665
ord6883
ord5608
ord925
ord6877
ord4202
ord941
ord6648
ord6779
ord2764
ord389
ord6059
ord5207
ord939
ord1988
ord690
ord2915
ord5572
ord924
ord1083
ord5861
ord4129
ord5710
ord926
ord6663
ord5621
ord6143
ord541
ord501
ord860
ord5683
ord4278
ord858
ord801
ord773
ord537
ord535
ord540
ord2818
ord800
ord823
ord3136

msvcrt

fputc
fflush
ftell
fseek
fwrite
fread
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_EH_prolog
_mbsrchr
fscanf
fopen
fclose
fgets
getc
rand
printf
_mbsicmp
_mbsstr
_mbscmp
atoi
strstr
_purecall
wcslen
_CxxThrowException
__CxxFrameHandler
_ftol

kernel32

GlobalFree
lstrlenW
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
Process32First
Process32Next
lstrcpyA
lstrcatA
WinExec
GetSystemDefaultLangID
LCMapStringA
lstrlenA
GetPrivateProfileStringA
CreateThread
Sleep
GetExitCodeThread
TerminateThread
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
WriteFile
CreateFileA
GlobalLock
GlobalAlloc
SetUnhandledExceptionFilter
SetFilePointer
GetLocalTime
FormatMessageA
GetModuleHandleA
VirtualQuery
IsBadWritePtr
LocalFree
LocalAlloc
CreateToolhelp32Snapshot
GetLastError
GetModuleFileNameA

user32

SendMessageA
SendMessageTimeoutA
PostMessageA
IsWindow
LoadImageA
ReleaseDC
GetDC
wvsprintfA

gdi32

GetDeviceCaps
DeleteDC
DeleteObject
StretchDIBits
GetStockObject
SelectPalette
RealizePalette
GetDIBits
CreateDIBitmap
SetBitmapBits
GetBitmapBits
CreateDCA
BitBlt
CreateDIBSection
CreateCompatibleDC
SelectObject
SetStretchBltMode
GetObjectA

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA

comctl32

ImageList_AddMasked

ole32

CoCreateInstance
CoInitialize
OleRun

oleaut32

SysAllocStringLen
VariantInit
VariantCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
SysStringLen
SysAllocString

publictool

??0CxImage@@QAE@K@Z
?DestroyFrames@CxImage@@QAE_NXZ
?Destroy@CxImage@@QAE_NXZ
?GetWidth@CxImageEx@@QBEKXZ
?GetHeight@CxImageEx@@QBEKXZ
?Resample@CxImageEx@@QAE_NJJHPAVCxImage@@@Z
??1CxMemFile@@UAE@XZ
??0CxMemFile@@QAE@PAEK@Z
?Close@CxMemFile@@UAE_NXZ
?Read@CxMemFile@@UAEIPAXII@Z
?MakeBitmap@CxImageEx@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Seek@CxMemFile@@UAE_NJH@Z
?Tell@CxMemFile@@UAEJXZ
?Size@CxMemFile@@UAEJXZ
?Eof@CxMemFile@@UAE_NXZ
?Error@CxMemFile@@UAEJXZ
?PutC@CxMemFile@@UAE_NE@Z
?GetC@CxMemFile@@UAEJXZ
?GetS@CxMemFile@@UAEPADPADH@Z
?Scanf@CxMemFile@@UAEJPBDPAX@Z
??0CxImageEx@@QAE@K@Z
?Load@CxImageEx@@QAE_NPBDK@Z
??1CxImageEx@@UAE@XZ
?GetDIB@CxImageEx@@QBEPAXXZ
?GetBits@CxImageEx@@QAEPAEK@Z
?base64_encode@CBase64@@SAHPADI0@Z
?Load@CxImage@@QAE_NPBDK@Z
?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?Write@CxMemFile@@UAEIPBXII@Z
??0CxImage@@QAE@ABV0@_N11@Z
?Flush@CxMemFile@@UAE_NXZ

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

winmm

mixerGetNumDevs
mixerGetDevCapsA

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
CreatePublic

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
publictool.dll
.dll windows:4 windows x86 arch:x86

4b673255e8776f5b0c0c44260f45b40b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1176
ord1575
ord1168
ord1577
ord1182
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord815
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord1116
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord342
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord5683
ord4278
ord858
ord540
ord2818
ord823
ord537
ord825
ord535
ord800

msvcrt

_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
atan2
fabs
sqrt
log
exp
strtok
vfprintf
strtod
getenv
_snprintf
puts
gmtime
atof
atoi
tmpfile
strstr
perror
fgetc
_getcwd
_errno
strchr
sscanf
_lseek
_write
_read
_setmode
_unlink
_open
putc
_stricmp
strrchr
fputs
__mb_cur_max
_isctype
_pctype
abort
vsprintf
tmpnam
pow
memset
memcpy
strlen
strcpy
_iob
fprintf
exit
_swab
_CxxThrowException
strncmp
isprint
printf
__CxxLongjmpUnwind
_setjmp3
longjmp
ceil
_cabs
rand
qsort
_CIacos
ldiv
sprintf
calloc
strncpy
_CIpow
_CIfmod
_strnicmp
_ftol
floor
realloc
malloc
free
fscanf
fgets
getc
fputc
fflush
ftell
fseek
fwrite
fread
fopen
fclose
_purecall
_mbsrchr
memmove
__CxxFrameHandler
mktime
_close

kernel32

LocalAlloc
LocalFree
GetTickCount
ResumeThread
WaitForSingleObject
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
SizeofResource
LoadResource
LockResource
WriteFile
IsBadWritePtr
VirtualQuery
GetModuleHandleA
FormatMessageA
GetLocalTime
CreateFileA
SetFilePointer
CloseHandle
WinExec
SetUnhandledExceptionFilter
GetModuleFileNameA

user32

wvsprintfA
ReleaseDC
GetDC
GetIconInfo
GetSysColor
DrawTextA

gdi32

GetEnhMetaFileHeader
SetWinMetaFileBits
GetDeviceCaps
DeleteEnhMetaFile
ExtTextOutA
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
PlayEnhMetaFile
CreateRectRgn
CombineRgn
CreateFontIndirectA
GetStockObject
SetTextColor
SetBkMode
StretchDIBits
RectVisible
CreateCompatibleBitmap
CreateBitmap
SetBkColor
StretchBlt
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
DeleteObject
PatBlt
SelectObject
SetBrushOrgEx
CreateDIBPatternBrushPt
DeleteDC
CreateDIBSection
CreateCompatibleDC
GetDIBits
RealizePalette
GetObjectA
RestoreDC
BitBlt
SetDIBitsToDevice
SetStretchBltMode
SetEnhMetaFileBits

ws2_32

ntohs
htonl
ntohl
htons

Exports

Exports

??0CBase64@@QAE@XZ
??0CBuffer@@QAE@ABV0@@Z
??0CBuffer@@QAE@K@Z
??0CBuffer@@QAE@PAEK@Z
??0CBuffer@@QAE@XZ
??0CHash@@QAE@ABV0@@Z
??0CHash@@QAE@K@Z
??0CHash@@QAE@XZ
??0CZip@@QAE@ABV0@@Z
??0CZip@@QAE@XZ
??0CxExifInfo@CxImageJPG@@QAE@PAUtag_ExifInfo@1@@Z
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxImage@@QAE@ABV0@_N11@Z
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@KKKK@Z
??0CxImage@@QAE@PAEKK@Z
??0CxImage@@QAE@PAU_iobuf@@K@Z
??0CxImage@@QAE@PAVCxFile@@K@Z
??0CxImage@@QAE@PBDK@Z
??0CxImageEx@@QAE@ABV0@@Z
??0CxImageEx@@QAE@ABVCxImage@@_N11@Z
??0CxImageEx@@QAE@K@Z
??0CxImageEx@@QAE@KKKK@Z
??0CxImageEx@@QAE@PAEKK@Z
??0CxImageEx@@QAE@PAU_iobuf@@K@Z
??0CxImageEx@@QAE@PBDK@Z
??0CxImageGIF@@QAE@ABV0@@Z
??0CxImageGIF@@QAE@XZ
??0CxImageJPG@@QAE@ABV0@@Z
??0CxImageJPG@@QAE@XZ
??0CxImageTIF@@QAE@ABV0@@Z
??0CxImageTIF@@QAE@XZ
??0CxMemFile@@QAE@ABV0@@Z
??0CxMemFile@@QAE@PAEK@Z
??0CxPoint2@@QAE@ABV0@@Z
??0CxPoint2@@QAE@MM@Z
??0CxPoint2@@QAE@XZ
??0CxRect2@@QAE@ABV0@@Z
??0CxRect2@@QAE@MMMM@Z
??0CxRect2@@QAE@XZ
??1CBuffer@@UAE@XZ
??1CHash@@UAE@XZ
??1CZip@@UAE@XZ
??1CxExifInfo@CxImageJPG@@QAE@XZ
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??1CxImageEx@@UAE@XZ
??1CxImageGIF@@UAE@XZ
??1CxImageJPG@@UAE@XZ
??1CxImageTIF@@UAE@XZ
??1CxMemFile@@UAE@XZ
??4CBase64@@QAEAAV0@ABV0@@Z
??4CBuffer@@QAEAAV0@ABV0@@Z
??4CEasySecret@@QAEAAV0@ABV0@@Z
??4CHash@@QAEAAV0@ABV0@@Z
??4CZip@@QAEAAV0@ABV0@@Z
??4CxExifInfo@CxImageJPG@@QAEAAV01@ABV01@@Z
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxImage@@QAEAAV0@ABV0@@Z
??4CxImageEx@@QAEAAV0@ABV0@@Z
??4CxImageGIF@@QAEAAV0@ABV0@@Z
??4CxImageJPG@@QAEAAV0@ABV0@@Z
??4CxImageTIF@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??4CxPoint2@@QAEAAV0@ABV0@@Z
??4CxRect2@@QAEAAV0@ABV0@@Z
??_7CBuffer@@6B@
??_7CHash@@6B@
??_7CZip@@6B@
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxImageEx@@6B@
??_7CxImageGIF@@6B@
??_7CxImageJPG@@6B@
??_7CxImageTIF@@6B@
??_7CxMemFile@@6B@
??_FCxExifInfo@CxImageJPG@@QAEXXZ
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxImageEx@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?AdaptiveThreshold@CxImage@@QAE_NJJPAV1@JM@Z
?AdaptiveThreshold@CxImageEx@@QAE_NJJPAVCxImage@@JM@Z
?AddAveragingCont@CxImage@@IAEXABUtagRGBQUAD@@MAAM111@Z
?AddBuffer@CBuffer@@QAEHPAEH@Z
?Alloc@CxMemFile@@IAE_NK@Z
?AlphaClear@CxImage@@QAEXXZ
?AlphaClear@CxImageEx@@QAEXXZ
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?AlphaCopy@CxImageEx@@QAE_NAAVCxImage@@@Z
?AlphaCreate@CxImage@@QAE_NXZ
?AlphaCreate@CxImageEx@@QAE_NXZ
?AlphaDelete@CxImage@@QAEXXZ
?AlphaDelete@CxImageEx@@QAEXXZ
?AlphaFlip@CxImage@@QAE_NXZ
?AlphaFlip@CxImageEx@@QAE_NXZ
?AlphaFromTransparency@CxImage@@QAE_NXZ
?AlphaFromTransparency@CxImageEx@@QAE_NXZ
?AlphaGet@CxImage@@QAEEJJ@Z
?AlphaGet@CxImageEx@@QAEEJJ@Z
?AlphaGetMax@CxImage@@QBEEXZ
?AlphaGetMax@CxImageEx@@QBEEXZ
?AlphaGetPointer@CxImage@@QAEPAEJJ@Z
?AlphaGetPointer@CxImageEx@@QAEPAEJJ@Z
?AlphaInvert@CxImage@@QAEXXZ
?AlphaInvert@CxImageEx@@QAEXXZ
?AlphaIsValid@CxImage@@QAE_NXZ
?AlphaIsValid@CxImageEx@@QAE_NXZ
?AlphaMirror@CxImage@@QAE_NXZ
?AlphaMirror@CxImageEx@@QAE_NXZ
?AlphaPaletteClear@CxImage@@QAEXXZ
?AlphaPaletteClear@CxImageEx@@QAEXXZ
?AlphaPaletteEnable@CxImage@@QAEX_N@Z
?AlphaPaletteEnable@CxImageEx@@QAEX_N@Z
?AlphaPaletteIsEnabled@CxImage@@QAE_NXZ
?AlphaPaletteIsEnabled@CxImageEx@@QAE_NXZ
?AlphaPaletteIsValid@CxImage@@QAE_NXZ
?AlphaPaletteIsValid@CxImageEx@@QAE_NXZ
?AlphaPaletteSplit@CxImage@@QAE_NPAV1@@Z
?AlphaPaletteSplit@CxImageEx@@QAE_NPAVCxImage@@@Z
?AlphaSet@CxImage@@QAEXE@Z
?AlphaSet@CxImage@@QAEXJJE@Z
?AlphaSet@CxImage@@QAE_NAAV1@@Z
?AlphaSet@CxImageEx@@QAEXE@Z
?AlphaSet@CxImageEx@@QAEXJJE@Z
?AlphaSet@CxImageEx@@QAE_NAAVCxImage@@@Z
?AlphaSetMax@CxImage@@QAEXE@Z
?AlphaSetMax@CxImageEx@@QAEXE@Z
?AlphaSplit@CxImage@@QAE_NPAV1@@Z
?AlphaSplit@CxImageEx@@QAE_NPAVCxImage@@@Z
?AlphaStrip@CxImage@@QAEXXZ
?AlphaStrip@CxImageEx@@QAEXXZ
?Attach@CBuffer@@QAEXPAEK@Z
?BASE64_DECODE_TABLE@CBase64@@2QBIB
?BASE64_ENCODE_TABLE@CBase64@@2QBDB
?Bitfield2RGB@CxImage@@IAEXPAEKKKE@Z
?BlendPalette@CxImage@@QAEXKJ@Z
?BlendPalette@CxImageEx@@QAEXKJ@Z
?BlendPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@M_N@Z
?BlendPixelColor@CxImageEx@@QAEXJJUtagRGBQUAD@@M_N@Z
?BlindAlphaGet@CxImage@@IAEEJJ@Z
?BlindGetPixelColor@CxImage@@IAE?AUtagRGBQUAD@@JJ_N@Z
?BlindGetPixelIndex@CxImage@@IAEEJJ@Z
?BlindGetPixelPointer@CxImage@@IAEPAXJJ@Z
?BlindSelectionGet@CxImage@@IAEEJJ@Z
?BlindSelectionIsInside@CxImage@@IAE_NJJ@Z
?BlindSetPixelColor@CxImage@@IAEXJJUtagRGBQUAD@@_N@Z
?BlindSetPixelIndex@CxImage@@IAEXJJE@Z
?Blt@CxImage@@QAEJPAUHDC__@@JJ@Z
?Blt@CxImageEx@@QAEJPAUHDC__@@JJ@Z
?BufferCpy@CBuffer@@QAEXPAEKK@Z
?Center@CxRect2@@QBE?AVCxPoint2@@XZ
?CheckFormat@CxImage@@QAE_NPAEKK@Z
?CheckFormat@CxImage@@QAE_NPAVCxFile@@K@Z
?CheckFormat@CxImageEx@@QAE_NPAEKK@Z
?CircleTransform@CxImage@@QAE_NHJM@Z
?CircleTransform@CxImageEx@@QAE_NHJM@Z
?Clear@CxImage@@QAEXE@Z
?Clear@CxImageEx@@QAEXE@Z
?Close@CxIOFile@@UAE_NXZ
?Close@CxMemFile@@UAE_NXZ
?Colorize@CxImage@@QAE_NEEM@Z
?Colorize@CxImageEx@@QAE_NEEM@Z
?Combine@CxImage@@QAE_NPAV1@000J@Z
?Combine@CxImageEx@@QAE_NPAVCxImage@@000J@Z
?CompareColors@CxImage@@KAHPBX0@Z
?CompressNetData@CZip@@SA_NPAEPAKPBEK@Z
?Contour@CxImage@@QAE_NXZ
?Contour@CxImageEx@@QAE_NXZ
?ConvertAnyFormat@CxExifInfo@CxImageJPG@@IAENPAXH@Z
?ConvertColorSpace@CxImage@@QAE_NJJ@Z
?ConvertColorSpace@CxImageEx@@QAE_NJJ@Z
?Copy@CxImage@@QAEXABV1@_N11@Z
?Copy@CxImageEx@@QAEXABVCxImage@@_N11@Z
?CopyInfo@CxImage@@IAEXABV1@@Z
?CopyToHandle@CxImage@@QAEPAXXZ
?CopyToHandle@CxImageEx@@QAEPAXXZ
?Create@CxImage@@QAEPAXKKKK@Z
?Create@CxImageEx@@QAEPAXKKKK@Z
?CreateFromArray@CxImage@@QAE_NPAEKKKK_N@Z
?CreateFromArray@CxImageEx@@QAE_NPAEKKKK_N@Z
?CreateFromHANDLE@CxImage@@QAE_NPAX@Z
?CreateFromHANDLE@CxImageEx@@QAE_NPAX@Z
?CreateFromHBITMAP@CxImage@@QAE_NPAUHBITMAP__@@PAUHPALETTE__@@@Z
?CreateFromHBITMAP@CxImageEx@@QAE_NPAUHBITMAP__@@PAUHPALETTE__@@@Z
?CreateFromHICON@CxImage@@QAE_NPAUHICON__@@@Z
?CreateFromHICON@CxImageEx@@QAE_NPAUHICON__@@@Z
?CreateFromMatrix@CxImage@@QAE_NPAPAEKKKK_N@Z
?CreateFromMatrix@CxImageEx@@QAE_NPAPAEKKKK_N@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?Crop@CxImage@@QAE_NJJJJPAV1@@Z
?Crop@CxImageEx@@QAE_NABUtagRECT@@PAVCxImage@@@Z
?Crop@CxImageEx@@QAE_NJJJJPAVCxImage@@@Z
?CropRotatedRectangle@CxImage@@QAE_NJJJJMPAV1@@Z
?CropRotatedRectangle@CxImageEx@@QAE_NJJJJMPAVCxImage@@@Z
?CrossSection@CxRect2@@QBE?AV1@ABV1@@Z
?DFT@CxImage@@IAE_NHJPAN000@Z
?Decode@CxImage@@QAE_NPAEKK@Z
?Decode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
?Decode@CxImageEx@@QAE_NPAEKK@Z
?Decode@CxImageEx@@QAE_NPAU_iobuf@@K@Z
?Decode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Decode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Decode@CxImageTIF@@QAE_NPAU_iobuf@@@Z
?Decode@CxImageTIF@@QAE_NPAVCxFile@@@Z
?DecodeExif@CxExifInfo@CxImageJPG@@QAE_NPAVCxFile@@H@Z
?DecodeExif@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?DecodeExif@CxImageJPG@@QAE_NPAVCxFile@@@Z
?DecodeExtension@CxImageGIF@@IAE_NPAVCxFile@@@Z
?DecreaseBpp@CxImage@@QAE_NK_NPAUtagRGBQUAD@@K@Z
?DecreaseBpp@CxImageEx@@QAE_NK_NPAUtagRGBQUAD@@K@Z
?Decrypt@CEasySecret@@SA?AVCString@@V2@@Z
?DeleteItem@CHash@@QAEPAXJ@Z
?DeleteItem@CHash@@QAEPAXPBD@Z
?Destroy@CHash@@QAEXXZ
?Destroy@CxImage@@QAE_NXZ
?Destroy@CxImageEx@@QAE_NXZ
?DestroyFrames@CxImage@@QAE_NXZ
?DestroyFrames@CxImageEx@@QAE_NXZ
?Dilate@CxImage@@QAE_NJ@Z
?Dilate@CxImageEx@@QAE_NJ@Z
?DiscardAllButExif@CxExifInfo@CxImageJPG@@QAEXXZ
?Distance@CxPoint2@@QAEMMM@Z
?Distance@CxPoint2@@QAEMV1@@Z
?Dither@CxImage@@QAE_NJ@Z
?Dither@CxImageEx@@QAE_NJ@Z
?Draw2@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Draw2@CxImage@@QAEJPAUHDC__@@JJJJ@Z
?Draw2@CxImageEx@@QAEJPAUHDC__@@ABUtagRECT@@@Z
?Draw2@CxImageEx@@QAEJPAUHDC__@@JJJJ@Z
?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z
?Draw@CxImage@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?Draw@CxImageEx@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z
?Draw@CxImageEx@@QAEJPAUHDC__@@JJJJPAUtagRECT@@_N@Z
?DrawLine@CxImage@@QAEXHHHHK@Z
?DrawLine@CxImage@@QAEXHHHHUtagRGBQUAD@@_N@Z
?DrawLine@CxImageEx@@QAEXHHHHK@Z
?DrawLine@CxImageEx@@QAEXHHHHUtagRGBQUAD@@_N@Z
?DrawString@CxImage@@QAEJPAUHDC__@@JJPBDUtagRGBQUAD@@1JJEE_N@Z
?DrawString@CxImageEx@@QAEJPAUHDC__@@JJPBDUtagRGBQUAD@@1JJEE_N@Z
?DrawStringEx@CxImage@@QAEJPAUHDC__@@JJPAUtagCxTextInfo@1@_N@Z
?DrawStringEx@CxImageEx@@QAEJPAUHDC__@@JJPAUtagCxTextInfo@1@_N@Z
?Dump@CxImage@@QAEKPAE@Z
?Dump@CxImageEx@@QAEKPAE@Z
?DumpSize@CxImage@@QAEKXZ
?DumpSize@CxImageEx@@QAEKXZ
?Edge@CxImage@@QAE_NJ@Z
?Edge@CxImageEx@@QAE_NJ@Z
?Enable@CxImage@@QAEX_N@Z
?Enable@CxImageEx@@QAEX_N@Z
?Encode2RGBA@CxImage@@QAE_NAAPAEAAJ_N@Z
?Encode2RGBA@CxImage@@QAE_NPAVCxFile@@_N@Z
?Encode2RGBA@CxImageEx@@QAE_NAAPAEAAJ_N@Z
?Encode@CxImage@@QAE_NAAPAEAAJK@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@K@Z
?Encode@CxImage@@QAE_NPAU_iobuf@@PAPAV1@HK@Z
?Encode@CxImage@@QAE_NPAVCxFile@@K@Z
?Encode@CxImage@@QAE_NPAVCxFile@@PAPAV1@HK@Z
?Encode@CxImageEx@@QAE_NAAPAEAAJK@Z
?Encode@CxImageEx@@QAE_NPAU_iobuf@@K@Z
?Encode@CxImageEx@@QAE_NPAU_iobuf@@PAPAVCxImage@@HK@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageGIF@@QAE_NPAU_iobuf@@PAPAVCxImage@@H_N@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@@Z
?Encode@CxImageGIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H_N2@Z
?Encode@CxImageJPG@@QAE_NPAU_iobuf@@@Z
?Encode@CxImageJPG@@QAE_NPAVCxFile@@@Z
?Encode@CxImageTIF@@QAE_NPAU_iobuf@@PAPAVCxImage@@H@Z
?Encode@CxImageTIF@@QAE_NPAU_iobuf@@_N@Z
?Encode@CxImageTIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H@Z
?Encode@CxImageTIF@@QAE_NPAVCxFile@@_N@Z
?EncodeBody@CxImageGIF@@IAEXPAVCxFile@@_N@Z
?EncodeBody@CxImageTIF@@IAE_NPAUtiff@@_NHH@Z
?EncodeComment@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeExif@CxExifInfo@CxImageJPG@@QAE_NPAVCxFile@@@Z
?EncodeExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeHeader@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeLoopExtension@CxImageGIF@@IAEXPAVCxFile@@@Z
?EncodeRGB@CxImageGIF@@IAE_NPAVCxFile@@@Z
?EncodeSafeCheck@CxImage@@IAE_NPAVCxFile@@@Z
?Encrypt@CEasySecret@@SA?AVCString@@V2@@Z
?Eof@CxIOFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?Erode@CxImage@@QAE_NJ@Z
?Erode@CxImageEx@@QAE_NJ@Z
?Error@CxIOFile@@UAEJXZ
?Error@CxMemFile@@UAEJXZ
?Expand@CxImage@@QAE_NJJJJUtagRGBQUAD@@PAV1@@Z
?Expand@CxImage@@QAE_NJJUtagRGBQUAD@@PAV1@@Z
?Expand@CxImageEx@@QAE_NJJJJUtagRGBQUAD@@PAVCxImage@@@Z
?Expand@CxImageEx@@QAE_NJJUtagRGBQUAD@@PAVCxImage@@@Z
?FFT2@CxImage@@QAE_NPAV1@000J_N1@Z
?FFT2@CxImageEx@@QAE_NPAVCxImage@@000J_N1@Z
?FFT@CxImage@@IAE_NHHPAN0@Z
?Filter@CxImage@@QAE_NPAJJJJ@Z
?Filter@CxImageEx@@QAE_NPAJJJJ@Z
?FindFirst@CHash@@QAEXH@Z
?FindNext@CHash@@QAEPAXPAPAD@Z
?FindNext@CHash@@QAEPAXXZ
?FindSection@CxExifInfo@CxImageJPG@@IAEPAXH@Z
?Flip@CxImage@@QAE_N_N0@Z
?Flip@CxImageEx@@QAE_N_N0@Z
?FloodFill@CxImage@@QAE_NJJUtagRGBQUAD@@EE_NE@Z
?FloodFill@CxImageEx@@QAE_NJJUtagRGBQUAD@@EE_NE@Z
?Flush@CxIOFile@@UAE_NXZ
?Flush@CxMemFile@@UAE_NXZ
?Free@CxMemFile@@IAEXXZ
?FreeMemory@CxImage@@QAEXPAX@Z
?FreeMemory@CxImageEx@@QAEXPAX@Z
?Gamma@CxImage@@QAE_NM@Z
?Gamma@CxImageEx@@QAE_NM@Z
?GammaRGB@CxImage@@QAE_NMMM@Z
?GammaRGB@CxImageEx@@QAE_NMMM@Z
?GaussianBlur@CxImage@@QAE_NMPAV1@@Z
?GaussianBlur@CxImageEx@@QAE_NMPAVCxImage@@@Z
?Get16m@CxExifInfo@CxImageJPG@@IAEHPAX@Z
?Get16u@CxExifInfo@CxImageJPG@@IAEHPAX@Z
?Get32s@CxExifInfo@CxImageJPG@@IAEJPAX@Z
?Get32u@CxExifInfo@CxImageJPG@@IAEKPAX@Z
?GetAreaColorInterpolated@CxImage@@QAE?AUtagRGBQUAD@@MMMMW4InterpolationMethod@1@W4OverflowMethod@1@QAU2@@Z
?GetAreaColorInterpolated@CxImageEx@@QAE?AUtagRGBQUAD@@MMMMW4InterpolationMethod@1@W4OverflowMethod@1@QAU2@@Z
?GetBits@CxImage@@QAEPAEK@Z
?GetBits@CxImageEx@@QAEPAEK@Z
?GetBpp@CxImage@@QBEGXZ
?GetBpp@CxImageEx@@QBEGXZ
?GetBuffer@CBuffer@@QAEPAEXZ
?GetBuffer@CxMemFile@@QAEPAE_N@Z
?GetBufferLen@CBuffer@@QAEKXZ
?GetC@CxIOFile@@UAEJXZ
?GetC@CxMemFile@@UAEJXZ
?GetClrImportant@CxImage@@QBEKXZ
?GetClrImportant@CxImageEx@@QBEKXZ
?GetCodecOption@CxImage@@QAEKK@Z
?GetCodecOption@CxImageEx@@QAEKK@Z
?GetColorType@CxImage@@QAEEXZ
?GetColorType@CxImageEx@@QAEEXZ
?GetComment@CxImageGIF@@QAEXPAD@Z
?GetCurrentPos@CHash@@QAEHXZ
?GetDIB@CxImage@@QBEPAXXZ
?GetDIB@CxImageEx@@QBEPAXXZ
?GetDisposalMethod@CxImage@@QBEEXZ
?GetDisposalMethod@CxImageEx@@QBEEXZ
?GetEffWidth@CxImage@@QBEKXZ
?GetEffWidth@CxImageEx@@QBEKXZ
?GetEscape@CxImage@@QBEJXZ
?GetEscape@CxImageEx@@QBEJXZ
?GetFirst@CHash@@QAEPAXH@Z
?GetFirst@CHash@@QAEPAXHAAHH@Z
?GetFlags@CxImage@@QBEKXZ
?GetFlags@CxImageEx@@QBEKXZ
?GetFrame@CxImage@@QBEJXZ
?GetFrame@CxImage@@QBEPAV1@J@Z
?GetFrame@CxImageEx@@QBEJXZ
?GetFrame@CxImageEx@@QBEPAVCxImage@@J@Z
?GetFrameDelay@CxImage@@QBEKXZ
?GetFrameDelay@CxImageEx@@QBEKXZ
?GetHashArrayNum@CHash@@QAEKXZ
?GetHashItemNum@CHash@@QAEHXZ
?GetHeight@CxImage@@QBEKXZ
?GetHeight@CxImageEx@@QBEKXZ
?GetJpegQuality@CxImage@@QBEEXZ
?GetJpegQuality@CxImageEx@@QBEEXZ
?GetJpegQualityF@CxImage@@QBEMXZ
?GetJpegQualityF@CxImageEx@@QBEMXZ
?GetJpegScale@CxImage@@QBEEXZ
?GetJpegScale@CxImageEx@@QBEEXZ
?GetLastError@CxImage@@QAEPBDXZ
?GetLastError@CxImageEx@@QAEPBDXZ
?GetLayer@CxImage@@QAEPAV1@J@Z
?GetLayer@CxImageEx@@QAEPAVCxImage@@J@Z
?GetLoops@CxImageGIF@@QAEJXZ
?GetNearestIndex@CxImage@@QAEEUtagRGBQUAD@@@Z
?GetNearestIndex@CxImageEx@@QAEEUtagRGBQUAD@@@Z
?GetNext@CHash@@QAEPAXPAPAXAAHH@Z
?GetNumColors@CxImage@@QBEKXZ
?GetNumColors@CxImageEx@@QBEKXZ
?GetNumFrames@CxImage@@QBEJXZ
?GetNumFrames@CxImageEx@@QBEJXZ
?GetNumLayers@CxImage@@QBEJXZ
?GetNumLayers@CxImageEx@@QBEJXZ
?GetNumTypes@CxImage@@SAKXZ
?GetNumTypes@CxImageEx@@QAEKXZ
?GetOffset@CxImage@@QAEXPAJ0@Z
?GetOffset@CxImageEx@@QAEXPAJ0@Z
?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ
?GetPalette@CxImageEx@@QBEPAUtagRGBQUAD@@XZ
?GetPaletteColor@CxImage@@QAE?AUtagRGBQUAD@@E@Z
?GetPaletteColor@CxImage@@QAE_NEPAE00@Z
?GetPaletteColor@CxImageEx@@QAE?AUtagRGBQUAD@@E@Z
?GetPaletteColor@CxImageEx@@QAE_NEPAE00@Z
?GetPaletteSize@CxImage@@QAEKXZ
?GetPaletteSize@CxImageEx@@QAEKXZ
?GetParent@CxImage@@QBEPAV1@XZ
?GetParent@CxImageEx@@QBEPAVCxImage@@XZ
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z
?GetPixelColor@CxImageEx@@QAE?AUtagRGBQUAD@@JJ_N@Z
?GetPixelColorInterpolated@CxImage@@QAE?AUtagRGBQUAD@@MMW4InterpolationMethod@1@W4OverflowMethod@1@QAU2@@Z
?GetPixelColorInterpolated@CxImageEx@@QAE?AUtagRGBQUAD@@MMW4InterpolationMethod@1@W4OverflowMethod@1@QAU2@@Z
?GetPixelColorWithOverflow@CxImage@@QAE?AUtagRGBQUAD@@JJW4OverflowMethod@1@QAU2@@Z
?GetPixelColorWithOverflow@CxImageEx@@QAE?AUtagRGBQUAD@@JJW4OverflowMethod@1@PAU2@@Z
?GetPixelGray@CxImage@@QAEEJJ@Z
?GetPixelGray@CxImageEx@@QAEEJJ@Z
?GetPixelIndex@CxImage@@QAEEJJ@Z
?GetPixelIndex@CxImageEx@@QAEEJJ@Z
?GetProgress@CxImage@@QBEJXZ
?GetProgress@CxImageEx@@QBEJXZ
?GetRealBuffer@CBuffer@@QAEPBEXZ
?GetRealLen@CBuffer@@QAEKXZ
?GetRetreiveAllFrames@CxImage@@QBE_NXZ
?GetRetreiveAllFrames@CxImageEx@@QBE_NXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?GetS@CxMemFile@@UAEPADPADH@Z
?GetSize@CxImage@@QAEJXZ
?GetSize@CxImageEx@@QAEJXZ
?GetTransColor@CxImage@@QAE?AUtagRGBQUAD@@XZ
?GetTransColor@CxImageEx@@QAE?AUtagRGBQUAD@@XZ
?GetTransIndex@CxImage@@QBEJXZ
?GetTransIndex@CxImageEx@@QBEJXZ
?GetTransparentMask@CxImage@@QAE_NPAV1@@Z
?GetTransparentMask@CxImageEx@@QAE_NPAVCxImage@@@Z
?GetType@CxImage@@QBEKXZ
?GetType@CxImageEx@@QBEKXZ
?GetTypeIdFromIndex@CxImage@@SAKK@Z
?GetTypeIdFromIndex@CxImageEx@@QAEKK@Z
?GetTypeIdFromName@CxImage@@SAKPBD@Z
?GetTypeIdFromName@CxImageEx@@QAEKPBD@Z
?GetTypeIndexFromId@CxImage@@SAKK@Z
?GetTypeIndexFromId@CxImageEx@@QAEKK@Z
?GetVersion@CxImage@@SAPBDXZ
?GetVersion@CxImageEx@@QAEPBDXZ
?GetVersionNumber@CxImage@@SA?BMXZ
?GetVersionNumber@CxImageEx@@QAE?BMXZ
?GetWidth@CxImage@@QBEKXZ
?GetWidth@CxImageEx@@QBEKXZ
?GetXDPI@CxImage@@QBEJXZ
?GetXDPI@CxImageEx@@QBEJXZ
?GetYDPI@CxImage@@QBEJXZ
?GetYDPI@CxImageEx@@QBEJXZ
?Ghost@CxImage@@IAEXPBV1@@Z
?GifMix@CxImageGIF@@IAEXAAVCxImage@@AAUtag_image@1@@Z
?GifNextPixel@CxImageGIF@@IAEHXZ
?GrayScale@CxImage@@QAE_NXZ
?GrayScale@CxImageEx@@QAE_NXZ
?HSLtoRGB@CxImage@@SA?AUtagRGBQUAD@@K@Z
?HSLtoRGB@CxImage@@SA?AUtagRGBQUAD@@U2@@Z
?HSLtoRGB@CxImageEx@@QAE?AUtagRGBQUAD@@K@Z
?HSLtoRGB@CxImageEx@@QAE?AUtagRGBQUAD@@U2@@Z
?HashFun@CHash@@IAEKJAAK@Z
?HashFun@CHash@@IAEKPBDAAK@Z
?Height@CxRect2@@QBEMXZ
?Histogram@CxImage@@QAEJPAJ000J@Z
?Histogram@CxImageEx@@QAEJPAJ000J@Z
?HistogramEqualize@CxImage@@QAE_NXZ
?HistogramEqualize@CxImageEx@@QAE_NXZ
?HistogramLog@CxImage@@QAE_NXZ
?HistogramLog@CxImageEx@@QAE_NXZ
?HistogramNormalize@CxImage@@QAE_NXZ
?HistogramNormalize@CxImageEx@@QAE_NXZ
?HistogramRoot@CxImage@@QAE_NXZ
?HistogramRoot@CxImageEx@@QAE_NXZ
?HistogramStretch@CxImage@@QAE_NJN@Z
?HistogramStretch@CxImageEx@@QAE_NJN@Z
?HuePalette@CxImage@@QAEXM@Z
?HuePalette@CxImageEx@@QAEXM@Z
?HueToRGB@CxImage@@KAMMMM@Z
?IncreaseBpp@CxImage@@QAE_NK@Z
?IncreaseBpp@CxImageEx@@QAE_NK@Z
?InitParam@CHash@@QAEHXZ
?InitTextInfo@CxImage@@QAEXPAUtagCxTextInfo@1@@Z
?InitTextInfo@CxImageEx@@QAEXPAUtagCxTextInfo@1@@Z
?InsertItem@CHash@@QAEHJPAX@Z
?InsertItem@CHash@@QAEHPBDPAX@Z
?IsEnabled@CxImage@@QBE_NXZ
?IsEnabled@CxImageEx@@QBE_NXZ
?IsGrayScale@CxImage@@QAE_NXZ
?IsGrayScale@CxImageEx@@QAE_NXZ
?IsIndexed@CxImage@@QBE_NXZ
?IsIndexed@CxImageEx@@QBE_NXZ
?IsInside@CxImage@@QAE_NJJ@Z
?IsInside@CxImageEx@@QAE_NJJ@Z
?IsPowerof2@CxImage@@IAE_NJ@Z
?IsSamePalette@CxImage@@QAE_NAAV1@_N@Z
?IsSamePalette@CxImageEx@@QAE_NAAVCxImage@@_N@Z
?IsTransparent@CxImage@@QAE_NJJ@Z
?IsTransparent@CxImage@@QBE_NXZ
?IsTransparent@CxImageEx@@QAE_NJJ@Z
?IsTransparent@CxImageEx@@QBE_NXZ
?IsValid@CxImage@@QBE_NXZ
?IsValid@CxImageEx@@QBE_NXZ
?Jitter@CxImage@@QAE_NJ@Z

Sections

.text
Size: 1024KB - Virtual size: 1022KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
regedit.xml
rmH265Dec.dll
.dll windows:4 windows x86 arch:x86

861ccb3f001705efac6f11114f29fcdb

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

ff:51:bf:e2:71:23:55:1c:2e:d8:bc:35:44:c4:9f:a6:43:9f:ea:70
Signer

Actual PE Digest

ff:51:bf:e2:71:23:55:1c:2e:d8:bc:35:44:c4:9f:a6:43:9f:ea:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

printf
memmove
_adjust_fdiv
malloc
_initterm
free

kernel32

CloseHandle
SetEvent
WaitForSingleObject
SignalObjectAndWait
ReleaseMutex
Sleep

Exports

Exports

rmGetDecHandle

Sections

.text
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
rmH265Enc.dll
.dll windows:4 windows x86 arch:x86

47e7ab53191aa91804af5c98e154cca9

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Not Before

26/08/2015, 02:19

Not After

26/10/2018, 02:19

Subject

CN=金华就约我吧网络科技有限公司,O=金华就约我吧网络科技有限公司,L=金华市,ST=浙江省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/11/2014, 00:58

Not After

08/11/2029, 00:58

Subject

CN=WoSign Class 3 Code Signing CA G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:c2:85:30:e9:3b:36
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 22:46

Not After

31/12/2019, 23:59

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

17/09/2006, 19:46

Not After

17/09/2036, 19:46

Subject

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement
KeyUsageCertSign
KeyUsageCRLSign

c0:15:ba:c9:54:c4:bc:69:04:5b:8f:a8:16:87:79:de:e5:33:c4:79
Signer

Actual PE Digest

c0:15:ba:c9:54:c4:bc:69:04:5b:8f:a8:16:87:79:de:e5:33:c4:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\devel\x265_20150502-1\vs2005\rmH265EncTest\release\rmH265Enc.pdb

Imports

msvcr80

_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
strspn
strcspn
_stricmp
strtod
sprintf
fgets
fclose
fopen
__iob_func
strchr
fflush
malloc
strtol
sscanf
strncmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
fputc
_localtime64
feof
_fseeki64
fread
fwrite
fprintf
_time64
fputs
strftime
abort
_aligned_free
ftell
_aligned_malloc
fseek
_ftime64
__RTDynamicCast
strstr
fscanf
atoi
rename
?terminate@@YAXXZ
_vsnprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
isdigit
_encode_pointer
_strdup
_unlink
memcpy
memset
floor
_CIpow
_CIlog
_CIlog10
_CIsqrt
_CIexp
__CxxFrameHandler3

kernel32

CreateSemaphoreW
SetThreadPriority
GetSystemInfo
GetCurrentThread
CreateThread
InterlockedExchangeAdd
CreateEventW
CloseHandle
SetEvent
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ReleaseSemaphore

Exports

Exports

rmGetEncHandle

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
seal/1.bmp
seal/itemconfig.xml
serverlist.txt
sound/Blip.wav
sound/Folder1.wav
sound/IMSystem.wav
sound/IMcall.wav
sound/IMglobal.wav
sound/UserEnter.wav
sound/UserLeave.wav
sound/bomb.wav
sound/call.wav
sound/cash.wav
sound/fireworks.wav
sound/msg.wav
sound/soundInfo.xml
.xml
sound/system.wav
sound/ÉùÎÄ¼þËµÃ÷.txt
starpicture/300.bmp
starpicture/301.bmp
starpicture/304.bmp
starpicture/305.bmp
starpicture/314.bmp
starpicture/315.bmp
starpicture/320.bmp
starpicture/322.bmp
starpicture/quickgift.xml
.xml
sysmessage.xml
.xml
updateitem.dll
.dll windows:4 windows x86 arch:x86

a6620f64ec9358aeca2667e80e94ebb8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA

mfc42

ord6385
ord3584
ord773
ord543
ord501
ord803
ord5621
ord1175
ord924
ord922
ord2764
ord5186
ord690
ord1988
ord5207
ord6059
ord389
ord1083
ord939
ord1168
ord1253
ord342
ord1182
ord1979
ord4278
ord858
ord535
ord537
ord354
ord540
ord800
ord665
ord823
ord825
ord3663
ord5683

msvcrt

_onexit
__dllonexit
_adjust_fdiv
malloc
free
_purecall
_mbscmp
__CxxFrameHandler
_CxxThrowException
_initterm
??1type_info@@UAE@XZ

kernel32

LocalFree
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameA
Sleep
LeaveCriticalSection
CreateThread
GetExitCodeThread
CloseHandle
TerminateThread
WaitForSingleObject
GetLastError
EnterCriticalSection

user32

PostMessageA

ole32

OleRun
CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysFreeString
SysAllocString
GetErrorInfo

Exports

Exports

CreateItem

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ver.txt
webserver.xml
.xml
worldbrocast.xml
.xml

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2bCertificate

Extended Key Usages

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54Certificate

Extended Key Usages

Key Usages

19:c2:85:30:e9:3b:36Certificate

Key Usages

01Certificate

Key Usages

36:3a:00:61:6e:af:7a:89:1e:0a:f7:92:04:4f:db:53:7f:c4:20:bdSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 100KB

.rsrc Size: 281KB - Virtual size: 281KB

db2755f409b81c4dbfc04f648cfb80b9

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 987B

.reloc Size: 512B - Virtual size: 66B

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 104B

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

baf2d405231cd43dae48df474a521d01

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

5d:10:a7:bd:1c:78:2a:f4:68:0b:86:ca:c1:c8:1b:2b
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

37:a6:0e:92:5f:23:f8:0c:fd:cd:97:65:92:98:c3:54
Certificate

19:c2:85:30:e9:3b:36
Certificate

01
Certificate

36:3a:00:61:6e:af:7a:89:1e:0a:f7:92:04:4f:db:53:7f:c4:20:bd
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 100KB

.rsrc
Size: 281KB - Virtual size: 281KB

.text
Size: 1024B - Virtual size: 987B

.reloc
Size: 512B - Virtual size: 66B

.text
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 104B

.text
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 947B

.data
Size: - Virtual size: 24B

.reloc
Size: 512B - Virtual size: 284B

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 797B

.data
Size: - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 254B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

.text
Size: 1024B - Virtual size: 934B

.rdata
Size: 512B - Virtual size: 377B

.data
Size: - Virtual size: 20B

.reloc
Size: 512B - Virtual size: 284B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 572B