Blitz-1[.]17[.]25[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Blitz-1.17.25.exe
Size

77.9MB
MD5

28ea0bd742f128073c4d8d4feab6797a
SHA1

25df9423fcc26b85978ffdbfe89eaa7b1b0520a7
SHA256

160c221b40dad9ed1ea90c12230912e5f53fd64aa40687413c6cb017b91dbb82
SHA512

b672fd66d1eccd9b1ce964ab9dffbd16191987c355ef7efa7728b5b533992bba89b99c6dbb12be6696cba22a9d455b6bf2b25c0537abbfb7280b4cb515dcba4b
SSDEEP

1572864:+hHORNfOS/srA61sz/1uf3MfGPmVSGPxkh8yObqO0+02Eh:+1ORNnkg1uf3YGuSOwHOng2K

Score

3^/10

Malware Config

Signatures

Unsigned PE 26 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/SpiderBanner.dll
unpack001/$PLUGINSDIR/StdUtils.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/WinShell.dll
unpack002/ffmpeg.dll
unpack002/libEGL.dll
unpack002/libGLESv2.dll
unpack002/resources/app.asar.unpacked/node_modules/leveldown/prebuilds/win32-ia32/node.napi.node
unpack002/resources/app.asar.unpacked/node_modules/leveldown/prebuilds/win32-x64/node.napi.node
unpack002/resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.node
unpack002/resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/liblzma.dll
unpack002/resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/node.napi.node
unpack002/resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/electron.napi.node
unpack002/resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/liblzma.dll
unpack002/resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/node.napi.node
unpack002/resources/elevate.exe
unpack002/vk_swiftshader.dll
unpack002/vulkan-1.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$PLUGINSDIR/nsis7z.dll
unpack004/$PLUGINSDIR/INetC.dll
unpack004/$PLUGINSDIR/StdUtils.dll
unpack004/$PLUGINSDIR/System.dll
unpack004/$PLUGINSDIR/WinShell.dll
unpack004/$PLUGINSDIR/nsExec.dll

Files

Blitz-1.17.25.exe
.exe windows:4 windows x86 arch:x86

b34f154ec913d2d2c435cbd644e91687

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ef:71:cb:15:66:8b:17:a6:03:70:33:ef:b7:d1:7a:2f:3d:a5:b6:c7:9a:a0:e8:13:f4:2c:87:d1:59:48:7e:ca
Signer

Actual PE Digest

ef:71:cb:15:66:8b:17:a6:03:70:33:ef:b7:d1:7a:2f:3d:a5:b6:c7:9a:a0:e8:13:f4:2c:87:d1:59:48:7e:ca

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
ExitProcess
GetShortPathNameW
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/SpiderBanner.dll
.dll windows:5 windows x86 arch:x86

90179d905cdca282880541c826651c15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynW
lstrcpyW
CloseHandle
CreateThread
Sleep
GetModuleHandleW
lstrcmpiW
GlobalAlloc
GlobalFree
lstrlenW

user32

ShowWindow
SetWindowPos
SetWindowLongW
CreateWindowExW
DefWindowProcW
FindWindowExW
GetSystemMetrics
DestroyIcon
LoadImageW
CallWindowProcW
UpdateWindow
SendMessageW
SendDlgItemMessageW
GetActiveWindow
WaitMessage
DispatchMessageW
PeekMessageW
IsWindow
CreateDialogParamW
GetWindowPlacement
InvalidateRect
DestroyWindow
BeginPaint
GetClientRect
wsprintfW
FillRect
DrawEdge
EndPaint
GetDlgItem

gdi32

SetTextColor
SetBkColor
DeleteObject
CreateBrushIndirect
GetTextExtentPoint32W
SelectObject
CreateFontW
ExtTextOutW

Exports

Exports

Destroy
Show
ShowPBOnly

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StdUtils.dll
.dll windows:5 windows x86 arch:x86

7b79709c0d5576549eb261e3410f95f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

iswspace
??3@YAXPAX@Z
_msize
_wsetlocale
_snprintf
iswcntrl
_beginthreadex
time
srand
rand
clock
_getpid
_wsplitpath
iswgraph
__wgetmainargs
wcsncpy
_wcsnicmp
wcschr
calloc
free
_wcsicmp
_snwprintf
swscanf
abort
??2@YAPAXI@Z
memset
memcpy

shlwapi

ord176

crypt32

CryptProtectData
CryptUnprotectData

kernel32

GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
HeapValidate
InterlockedDecrement
InterlockedIncrement
GetSystemTime
OutputDebugStringA
GetExitCodeProcess
InitializeCriticalSection
SystemTimeToFileTime
TerminateThread
WaitForSingleObject
LocalFree
GetFullPathNameW
GetVersion
GetFileAttributesW
LoadLibraryW
FreeLibrary
CloseHandle
lstrcpynW
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
Sleep
VerSetConditionMask
GetCurrentProcess
GetModuleHandleW
FatalAppExitW
GetVersionExW
TerminateProcess
GetModuleFileNameW
RaiseException
VerifyVersionInfoW
GetLastError
GetProcAddress
SetFilePointerEx
WriteFile
ReadFile
CreateFileW
GetFileSizeEx
GetCommandLineW

user32

MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
wsprintfW
DestroyWindow
SetTimer
UnregisterClassW
KillTimer
LoadStringW
MessageBoxW
GetWindowThreadProcessId
AllowSetForegroundWindow
CreateWindowExW
RegisterClassW
MessageBoxA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteExW
SHFileOperationW
ShellExecuteW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Exports

Exports

AppendToFile
ExecShellAsUser
ExecShellWaitEx
FormatStr
FormatStr2
FormatStr3
GetAllParameters
GetDays
GetDirectoryPart
GetDrivePart
GetExtensionPart
GetFileNamePart
GetHours
GetLibVersion
GetMinutes
GetOsEdition
GetOsReleaseId
GetOsReleaseName
GetParameter
GetParentPath
GetRealOsBuildNo
GetRealOsName
GetRealOsVersion
HashFile
HashText
InvokeShellVerb
NormalizePath
ParameterCnt
ParameterStr
ProtectStr
Rand
RandBytes
RandList
RandMax
RandMinMax
RevStr
SHFileCopy
SHFileMove
ScanStr
ScanStr2
ScanStr3
SetVerboseMode
SplitPath
StrFromUtf8
StrToUtf8
TestParameter
Time
TimerCreate
TimerDestroy
TrimStr
TrimStrLeft
TrimStrRight
UnprotectStr
ValidDomainName
ValidFileName
ValidPathSpec
VerifyRealOsBuildNo
VerifyRealOsVersion
WaitForProcEx

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WinShell.dll
.dll windows:4 windows x86 arch:x86

a75c904bad153f5af2c37cfdf66eba5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GlobalFree

ole32

CoCreateInstance

Exports

Exports

SetLnkAUMI
UninstAppUserModelId
UninstShortcut

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/app-32.7z
.7z
Blitz.exe
.exe windows:5 windows x86 arch:x86

3504e9efc3bff20186710679ce3e12e4

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e9:aa:9b:63:1a:c2:ef:c2:92:ad:95:0b:6f:5c:9a:51:29:2f:46:88:ed:79:ea:7e:41:e9:d4:e7:52:82:c3:73
Signer

Actual PE Digest

e9:aa:9b:63:1a:c2:ef:c2:92:ad:95:0b:6f:5c:9a:51:29:2f:46:88:ed:79:ea:7e:41:e9:d4:e7:52:82:c3:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

electron.exe.pdb

Imports

ffmpeg

av_buffer_create
av_buffer_get_opaque
av_dict_get
av_dict_set
av_frame_alloc
av_frame_free
av_frame_unref
av_free
av_get_bytes_per_sample
av_get_cpu_flags
av_image_check_size
av_log_set_level
av_malloc
av_max_alloc
av_new_packet
av_packet_alloc
av_packet_copy_props
av_packet_free
av_packet_get_side_data
av_packet_unref
av_read_frame
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
av_stream_get_first_dts
av_stream_get_side_data
av_strerror
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_descriptor_get
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context

uiautomationcore

UiaClientsAreListening
UiaGetReservedMixedAttributeValue
UiaGetReservedNotSupportedValue
UiaHostProviderFromHwnd
UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseStructureChangedEvent
UiaReturnRawElementProvider

dbghelp

StackWalk64
SymCleanup
SymFromAddr
SymFunctionTableAccess64
SymGetLineFromAddr64
SymGetModuleBase64
SymGetSearchPathW
SymInitialize
SymSetOptions
SymSetSearchPathW
UnDecorateSymbolName

msimg32

AlphaBlend

oleaut32

LoadRegTypeLi
LoadTypeLi
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayPutElement
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarBstrCmp
VarUI4FromStr
VariantClear
VariantCopy
VariantInit

winmm

midiInAddBuffer
midiInClose
midiInGetDevCapsW
midiInGetNumDevs
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInUnprepareHeader
midiOutClose
midiOutGetDevCapsW
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInGetNumDevs
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

ws2_32

FreeAddrInfoW
GetAddrInfoW
GetNameInfoW
WSACloseEvent
WSACreateEvent
WSADuplicateSocketW
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAGetOverlappedResult
WSAIoctl
WSALookupServiceBeginW
WSALookupServiceEnd
WSALookupServiceNextW
WSARecv
WSARecvFrom
WSAResetEvent
WSASend
WSASendTo
WSASetEvent
WSASetLastError
WSASetServiceW
WSASocketW
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getpeername
getsockname
getsockopt
htonl
htons
inet_ntop
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AllocConsole
AreFileApisANSI
AssignProcessToJobObject
AttachConsole
CallbackMayRunLong
CancelIo
CancelIoEx
CancelSynchronousIo
CheckRemoteDebuggerPresent
ClearCommError
CloseHandle
CloseThreadpool
CloseThreadpoolWork
CompareStringW
ConnectNamedPipe
ConvertFiberToThread
ConvertThreadToFiberEx
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiberEx
CreateFileA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateJobObjectW
CreateMemoryResourceNotification
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateSemaphoreA
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpool
CreateThreadpoolWork
CreateToolhelp32Snapshot
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumResourceNamesW
EnumSystemLocalesEx
EnumSystemLocalesW
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileA
FindFirstFileExA
FindFirstFileExW
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceW
FlsAlloc
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommModemStatus
GetCommState
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetCurrencyFormatEx
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDateFormatEx
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableW
GetErrorMode
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocalTime
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeHandleStateW
GetNativeSystemInfo
GetNumberFormatEx
GetNumberOfConsoleInputEvents
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileStringW
GetProcAddress
GetProcessHandleCount
GetProcessHeap
GetProcessHeaps
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetProductInfo
GetQueuedCompletionStatus
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadId
GetThreadLocale
GetThreadPreferredUILanguages
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserDefaultUILanguage
GetUserGeoID
GetVersionExW
GetVolumeInformationW
GetVolumePathNameW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapLock
HeapReAlloc
HeapSetInformation
HeapSize
HeapUnlock
HeapValidate
HeapWalk
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeProcThreadAttributeList
InitializeSListHead
InitializeSRWLock
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessInJob
IsProcessorFeaturePresent
IsThreadAFiber
IsValidCodePage
IsValidLocale
IsWow64Process
K32EnumProcessModules
K32GetModuleFileNameExW
K32GetModuleInformation
K32GetPerformanceInfo
K32GetProcessMemoryInfo
K32QueryWorkingSetEx
LCIDToLocaleName
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocaleNameToLCID
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenFileMappingW
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
PowerClearRequest
PowerCreateRequest
PowerSetRequest
Process32FirstW
Process32NextW
ProcessIdToSessionId
PurgeComm
QueryDosDeviceW
QueryFullProcessImageNameW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
QueueUserWorkItem
RaiseException
RaiseFailFastException
ReOpenFile
ReadConsoleInputW
ReadConsoleW
ReadDirectoryChangesW
ReadFile
ReadProcessMemory
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ReplaceFileW
ResetEvent
ResolveLocaleName
ResumeThread
RtlCaptureStackBackTrace
RtlUnwind
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleW
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessDEPPolicy
SetProcessShutdownParameters
SetStdHandle
SetThreadAffinityMask
SetThreadPriority
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SubmitThreadpoolWork
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateJobObject
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitForThreadpoolWorkCallbacks
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleInputW
WriteConsoleW
WriteFile
WriteProcessMemory
lstrcmpiA
lstrcmpiW
lstrlenW

crypt32

CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertAddStoreToCollection
CertCloseStore
CertCompareCertificateName
CertCreateCTLContext
CertCreateCertificateChainEngine
CertDuplicateCertificateContext
CertFindCertificateInStore
CertFindChainInStore
CertFindExtension
CertFreeCTLContext
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertGetIssuerCertificateFromStore
CertOpenStore
CertOpenSystemStoreW
CertSetCertificateContextProperty
CertVerifyCertificateChainPolicy
CertVerifyTimeValidity
CryptAcquireCertificatePrivateKey
CryptDecodeObjectEx
CryptInstallOIDFunctionAddress
CryptProtectData
CryptUnprotectData
CryptVerifyCertificateSignatureEx

iphlpapi

CancelIPChangeNotify
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToNameW
GetAdaptersAddresses
GetInterfaceInfo
IpReleaseAddress
IpRenewAddress
NotifyAddrChange

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock
GetUserProfileDirectoryW

dwrite

DWriteCreateFactory

winspool.drv

ClosePrinter
DeviceCapabilitiesW
DocumentPropertiesW
EnumPrintersW
ord203
GetPrinterDriverW
GetPrinterW
OpenPrinterW

secur32

AcquireCredentialsHandleA
AcquireCredentialsHandleW
CompleteAuthToken
DeleteSecurityContext
FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW

winhttp

WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpWriteData

dhcpcsvc

DhcpCApiInitialize
DhcpRequestParams

Exports

Exports

??$TryToCopyAndConvertArrayToCppBuffer@$0CAAAA@H@v8@@YA_NV?$Local@VArray@v8@@@0@PAHI@Z
??$TryToCopyAndConvertArrayToCppBuffer@$0DAAAA@I@v8@@YA_NV?$Local@VArray@v8@@@0@PAII@Z
??$TryToCopyAndConvertArrayToCppBuffer@$0GAAAA@M@v8@@YA_NV?$Local@VArray@v8@@@0@PAMI@Z
??$TryToCopyAndConvertArrayToCppBuffer@$0HAAAA@N@v8@@YA_NV?$Local@VArray@v8@@@0@PANI@Z
??0?$MemorySpan@$$CBD@v8@@QAE@PBDI@Z
??0?$MemorySpan@$$CBD@v8@@QAE@XZ
??0?$MemorySpan@$$CBE@v8@@QAE@PBEI@Z
??0?$MemorySpan@$$CBE@v8@@QAE@XZ
??0?$MemorySpan@$$CBVCFunction@v8@@@v8@@QAE@PBVCFunction@1@I@Z
??0?$MemorySpan@$$CBVCFunction@v8@@@v8@@QAE@XZ
??0?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IAE@$$QAV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IAE@ABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IAE@XZ
??0?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IAE@$$QAV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IAE@ABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IAE@XZ
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@$$QAV012@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@$$QAV012@ABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@ABV012@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@ABV012@ABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@ABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@I@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@IABUCpuProfileDeoptFrame@v8@@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@IABUCpuProfileDeoptFrame@v8@@ABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@IABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@2@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@2@ABV?$allocator@UCpuProfileDeoptFrame@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@XZ
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@$$QAV012@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@$$QAV012@ABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@ABV012@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@ABV012@ABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@ABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@I@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@IABUCpuProfileDeoptInfo@v8@@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@IABUCpuProfileDeoptInfo@v8@@ABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@IABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@2@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@2@ABV?$allocator@UCpuProfileDeoptInfo@v8@@@12@@Z
??0?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@XZ
??0ActivityControl@v8@@QAE@ABV01@@Z
??0ActivityControl@v8@@QAE@XZ
??0AllocationProfile@v8@@QAE@ABV01@@Z
??0AllocationProfile@v8@@QAE@XZ
??0Allocator@ArrayBuffer@v8@@QAE@ABV012@@Z
??0Allocator@ArrayBuffer@v8@@QAE@XZ
??0AllowJavascriptExecutionScope@Isolate@v8@@QAE@PAV12@@Z
??0ArrayBufferAllocator@node@@QAE@$$QAV01@@Z
??0ArrayBufferAllocator@node@@QAE@ABV01@@Z
??0ArrayBufferAllocator@node@@QAE@XZ
??0AsyncResource@node@@QAE@PAVIsolate@v8@@V?$Local@VObject@v8@@@3@PBDN@Z
??0BackupIncumbentScope@Context@v8@@QAE@V?$Local@VContext@v8@@@2@@Z
??0Binary@protocol@v8_inspector@@AAE@V?$shared_ptr@V?$vector@EV?$allocator@E@__1@std@@@__1@std@@@__1@std@@@Z
??0Binary@protocol@v8_inspector@@QAE@$$QAV012@@Z
??0Binary@protocol@v8_inspector@@QAE@ABV012@@Z
??0Binary@protocol@v8_inspector@@QAE@XZ
??0CFunction@v8@@QAE@PBXPBVCFunctionInfo@1@@Z
??0CFunction@v8@@QAE@XZ
??0CFunctionInfo@v8@@QAE@ABVCTypeInfo@1@IPBV21@@Z
??0CachedData@ScriptCompiler@v8@@QAE@PBEHW4BufferPolicy@012@@Z
??0CachedData@ScriptCompiler@v8@@QAE@XZ
??0CallbackScope@AsyncResource@node@@QAE@PAV12@@Z
??0CallbackScope@node@@QAE@PAVEnvironment@1@V?$Local@VObject@v8@@@v8@@Uasync_context@1@@Z
??0CallbackScope@node@@QAE@PAVIsolate@v8@@V?$Local@VObject@v8@@@3@Uasync_context@1@@Z
??0Channel@V8Inspector@v8_inspector@@QAE@ABV012@@Z
??0Channel@V8Inspector@v8_inspector@@QAE@XZ
??0CodeEventHandler@v8@@QAE@PAVIsolate@1@@Z
??0CommandLineAPIScope@V8InspectorSession@v8_inspector@@QAE@ABV012@@Z
??0CommandLineAPIScope@V8InspectorSession@v8_inspector@@QAE@XZ
??0CommonEnvironmentSetup@node@@AAE@PAVMultiIsolatePlatform@1@PAV?$vector@V?$basic_string@DU?$char_traits@D@__1@std@@V?$allocator@D@23@@__1@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@__1@std@@V?$allocator@D@23@@__1@std@@@23@@__1@std@@V?$function@$$A6APAVEnvironment@node@@PBVCommonEnvironmentSetup@2@@Z@45@@Z
??0CompiledWasmModule@v8@@AAE@V?$shared_ptr@VNativeModule@wasm@internal@v8@@@__1@std@@PBDI@Z
??0CompiledWasmModule@v8@@QAE@$$QAV01@@Z
??0CompiledWasmModule@v8@@QAE@ABV01@@Z
??0ConsumeCodeCacheTask@ScriptCompiler@v8@@AAE@V?$unique_ptr@VBackgroundDeserializeTask@internal@v8@@U?$default_delete@VBackgroundDeserializeTask@internal@v8@@@__1@std@@@__1@std@@@Z
??0CppHeap@v8@@AAE@XZ
??0CppHeap@v8@@QAE@ABV01@@Z
??0CpuProfileDeoptInfo@v8@@QAE@$$QAU01@@Z
??0CpuProfileDeoptInfo@v8@@QAE@ABU01@@Z
??0CpuProfileDeoptInfo@v8@@QAE@XZ
??0CpuProfilingOptions@v8@@QAE@$$QAV01@@Z
??0CpuProfilingOptions@v8@@QAE@ABV01@@Z
??0CpuProfilingOptions@v8@@QAE@W4CpuProfilingMode@1@IHV?$MaybeLocal@VContext@v8@@@1@@Z
??0CreateParams@Isolate@v8@@QAE@ABU012@@Z
??0CreateParams@Isolate@v8@@QAE@XZ
??0CrossThreadPersistentRegion@internal@cppgc@@QAE@ABVFatalOutOfMemoryHandler@12@@Z
??0Delegate@ValueDeserializer@v8@@QAE@ABV012@@Z
??0Delegate@ValueDeserializer@v8@@QAE@XZ
??0Delegate@ValueSerializer@v8@@QAE@ABV012@@Z
??0Delegate@ValueSerializer@v8@@QAE@XZ
??0DisallowGarbageCollectionScope@subtle@cppgc@@QAE@AAVHeapHandle@2@@Z
??0DisallowJavascriptExecutionScope@Isolate@v8@@QAE@PAV12@W4OnFailure@012@@Z
??0DiscardedSamplesDelegate@v8@@QAE@ABV01@@Z
??0DiscardedSamplesDelegate@v8@@QAE@XZ
??0Domain@API@Schema@protocol@v8_inspector@@QAE@$$QAV01234@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QAE@ABV01234@@Z
??0Domain@API@Schema@protocol@v8_inspector@@QAE@XZ
??0EmbedderGraph@v8@@QAE@ABV01@@Z
??0EmbedderGraph@v8@@QAE@XZ
??0EmbedderHeapTracer@v8@@QAE@ABV01@@Z
??0EmbedderHeapTracer@v8@@QAE@XZ
??0EmbedderRootsHandler@v8@@QAE@ABV01@@Z
??0EmbedderRootsHandler@v8@@QAE@XZ
??0EmbedderStateScope@v8@@QAE@PAVIsolate@1@V?$Local@VContext@v8@@@1@W4EmbedderStateTag@1@@Z
??0EscapableHandleScope@v8@@QAE@PAVIsolate@1@@Z
??0Exported@protocol@v8_inspector@@QAE@ABV012@@Z
??0Exported@protocol@v8_inspector@@QAE@XZ
??0Extension@v8@@QAE@PBD0HPAPBDH@Z
??0ExtensionConfiguration@v8@@QAE@HQAPBD@Z
??0ExtensionConfiguration@v8@@QAE@XZ
??0ExternalOneByteStringResource@String@v8@@IAE@XZ
??0ExternalResourceVisitor@v8@@QAE@ABV01@@Z
??0ExternalResourceVisitor@v8@@QAE@XZ
??0ExternalSourceStream@ScriptCompiler@v8@@QAE@ABV012@@Z
??0ExternalSourceStream@ScriptCompiler@v8@@QAE@XZ
??0ExternalStringResource@String@v8@@IAE@XZ
??0ExternalStringResourceBase@String@v8@@IAE@XZ
??0GCInfoTable@internal@cppgc@@QAE@PAVPageAllocator@v8@@@Z
??0HandleScope@v8@@QAE@PAVIsolate@1@@Z
??0Heap@cppgc@@AAE@XZ
??0Heap@cppgc@@QAE@ABV01@@Z
??0HeapCodeStatistics@v8@@QAE@XZ
??0HeapObjectStatistics@v8@@QAE@XZ
??0HeapSpaceStatistics@v8@@QAE@XZ
??0HeapStatistics@v8@@QAE@XZ
??0Inspectable@V8InspectorSession@v8_inspector@@QAE@ABV012@@Z
??0Inspectable@V8InspectorSession@v8_inspector@@QAE@XZ
??0IsolatePlatformDelegate@node@@QAE@$$QAV01@@Z
??0IsolatePlatformDelegate@node@@QAE@ABV01@@Z
??0IsolatePlatformDelegate@node@@QAE@XZ
??0Location@v8@@QAE@HH@Z
??0Locker@v8@@QAE@PAVIsolate@1@@Z
??0LongTaskStats@metrics@v8@@QAE@XZ
??0MeasureMemoryDelegate@v8@@QAE@ABV01@@Z
??0MeasureMemoryDelegate@v8@@QAE@XZ
??0MicrotaskQueue@v8@@AAE@XZ
??0MicrotasksScope@v8@@QAE@PAVIsolate@1@PAVMicrotaskQueue@1@W4Type@01@@Z
??0MicrotasksScope@v8@@QAE@PAVIsolate@1@W4Type@01@@Z
??0MultiIsolatePlatform@node@@QAE@ABV01@@Z
??0MultiIsolatePlatform@node@@QAE@XZ
??0NameProvider@cppgc@@QAE@ABV01@@Z
??0NameProvider@cppgc@@QAE@XZ
??0NoGarbageCollectionScope@subtle@cppgc@@QAE@AAVHeapHandle@2@@Z
??0OSROptimizedCodeCache@internal@v8@@IAE@I@Z
??0OSROptimizedCodeCache@internal@v8@@QAE@XZ
??0OutputStream@v8@@QAE@ABV01@@Z
??0OutputStream@v8@@QAE@XZ
??0OverrideEmbedderStackStateScope@testing@cppgc@@QAE@AAVHeapHandle@2@W4EmbedderStackState@2@@Z
??0PersistentHandleVisitor@v8@@QAE@ABV01@@Z
??0PersistentHandleVisitor@v8@@QAE@XZ
??0PersistentRegion@internal@cppgc@@QAE@ABVFatalOutOfMemoryHandler@12@@Z
??0PersistentRegionBase@internal@cppgc@@IAE@ABVFatalOutOfMemoryHandler@12@@Z
??0PersistentRegionLock@internal@cppgc@@QAE@XZ
??0Platform@cppgc@@QAE@ABV01@@Z
??0Platform@cppgc@@QAE@XZ
??0PrefinalizerRegistration@internal@cppgc@@QAE@PAXP6A_NABVLivenessBroker@2@0@Z@Z
??0PropertyDescriptor@v8@@QAE@V?$Local@VValue@v8@@@1@0@Z
??0PropertyDescriptor@v8@@QAE@V?$Local@VValue@v8@@@1@@Z
??0PropertyDescriptor@v8@@QAE@V?$Local@VValue@v8@@@1@_N@Z
??0PropertyDescriptor@v8@@QAE@XZ
??0Recorder@metrics@v8@@QAE@ABV012@@Z
??0Recorder@metrics@v8@@QAE@XZ
??0RegisterState@v8@@QAE@ABU01@@Z
??0RegisterState@v8@@QAE@XZ
??0RemoteObject@API@Runtime@protocol@v8_inspector@@QAE@$$QAV01234@@Z
??0RemoteObject@API@Runtime@protocol@v8_inspector@@QAE@ABV01234@@Z
??0RemoteObject@API@Runtime@protocol@v8_inspector@@QAE@XZ
??0ResourceConstraints@v8@@QAE@XZ
??0SafeForTerminationScope@Isolate@v8@@QAE@PAV12@@Z
??0SameThreadEnabledCheckingPolicyBase@internal@cppgc@@QAE@XZ
??0Scope@Isolate@v8@@QAE@PAV12@@Z
??0ScriptOrigin@v8@@QAE@PAVIsolate@1@V?$Local@VValue@v8@@@1@HH_NH1222V?$Local@VData@v8@@@1@@Z
??0ScriptStreamingTask@ScriptCompiler@v8@@AAE@PAUScriptStreamingData@internal@2@@Z
??0SealHandleScope@v8@@QAE@PAVIsolate@1@@Z
??0SearchMatch@API@Debugger@protocol@v8_inspector@@QAE@$$QAV01234@@Z
??0SearchMatch@API@Debugger@protocol@v8_inspector@@QAE@ABV01234@@Z
??0SearchMatch@API@Debugger@protocol@v8_inspector@@QAE@XZ
??0SharedMemoryStatistics@v8@@QAE@XZ
??0SnapshotCreator@v8@@QAE@PAVIsolate@1@PBHPAVStartupData@1@@Z
??0SnapshotCreator@v8@@QAE@PBHPAVStartupData@1@@Z
??0SourceLocation@cppgc@@AAE@PBD0I@Z
??0SourceLocation@cppgc@@QAE@XZ
??0StackTrace@API@Runtime@protocol@v8_inspector@@QAE@$$QAV01234@@Z
??0StackTrace@API@Runtime@protocol@v8_inspector@@QAE@ABV01234@@Z
??0StackTrace@API@Runtime@protocol@v8_inspector@@QAE@XZ
??0StackTraceId@API@Runtime@protocol@v8_inspector@@QAE@$$QAV01234@@Z
??0StackTraceId@API@Runtime@protocol@v8_inspector@@QAE@ABV01234@@Z
??0StackTraceId@API@Runtime@protocol@v8_inspector@@QAE@XZ
??0StandaloneTestingHeap@testing@cppgc@@QAE@AAVHeapHandle@2@@Z
??0StreamedSource@ScriptCompiler@v8@@QAE@V?$unique_ptr@VExternalSourceStream@ScriptCompiler@v8@@U?$default_delete@VExternalSourceStream@ScriptCompiler@v8@@@__1@std@@@__1@std@@W4Encoding@012@@Z
??0String16@v8_inspector@@QAE@PBD@Z
??0String16@v8_inspector@@QAE@PBG@Z
??0StringBuffer@v8_inspector@@QAE@ABV01@@Z
??0StringBuffer@v8_inspector@@QAE@XZ
??0StringView@v8_inspector@@QAE@PBEI@Z
??0StringView@v8_inspector@@QAE@PBGI@Z
??0StringView@v8_inspector@@QAE@XZ
??0SuppressMicrotaskExecutionScope@Isolate@v8@@QAE@PAV12@PAVMicrotaskQueue@2@@Z
??0TickSample@internal@v8@@QAE@XZ
??0TracedGlobalHandleVisitor@EmbedderHeapTracer@v8@@QAE@ABV012@@Z
??0TracedGlobalHandleVisitor@EmbedderHeapTracer@v8@@QAE@XZ
??0TryCatch@v8@@QAE@PAVIsolate@1@@Z
??0Unlocker@v8@@QAE@PAVIsolate@1@@Z
??0Utf8Value@String@v8@@QAE@PAVIsolate@2@V?$Local@VValue@v8@@@2@@Z
??0V8ContextInfo@v8_inspector@@QAE@V?$Local@VContext@v8@@@v8@@HVStringView@1@@Z
??0V8DebuggerId@v8_inspector@@AAE@U?$pair@_J_J@__1@std@@@Z
??0V8DebuggerId@v8_inspector@@QAE@XZ
??0V8Inspector@v8_inspector@@QAE@ABV01@@Z
??0V8Inspector@v8_inspector@@QAE@XZ
??0V8InspectorClient@v8_inspector@@QAE@ABV01@@Z
??0V8InspectorClient@v8_inspector@@QAE@XZ
??0V8InspectorSession@v8_inspector@@QAE@ABV01@@Z
??0V8InspectorSession@v8_inspector@@QAE@XZ
??0V8StackTrace@v8_inspector@@QAE@ABV01@@Z
??0V8StackTrace@v8_inspector@@QAE@XZ
??0V8StackTraceId@v8_inspector@@QAE@IU?$pair@_J_J@__1@std@@@Z
??0V8StackTraceId@v8_inspector@@QAE@IU?$pair@_J_J@__1@std@@_N@Z
??0V8StackTraceId@v8_inspector@@QAE@VStringView@1@@Z
??0V8StackTraceId@v8_inspector@@QAE@XZ
??0Value@String@v8@@QAE@PAVIsolate@2@V?$Local@VValue@v8@@@2@@Z
??0ValueDeserializer@v8@@QAE@PAVIsolate@1@PBEI@Z
??0ValueDeserializer@v8@@QAE@PAVIsolate@1@PBEIPAVDelegate@01@@Z
??0ValueSerializer@v8@@QAE@PAVIsolate@1@@Z
??0ValueSerializer@v8@@QAE@PAVIsolate@1@PAVDelegate@01@@Z
??0Visitor@cppgc@@QAE@ABV01@@Z
??0Visitor@cppgc@@QAE@VKey@01@@Z
??0WasmModuleObjectBuilderStreaming@v8@@AAE@$$QAV01@@Z
??0WasmModuleObjectBuilderStreaming@v8@@QAE@PAVIsolate@1@@Z
??0WasmStreaming@v8@@QAE@V?$unique_ptr@VWasmStreamingImpl@WasmStreaming@v8@@U?$default_delete@VWasmStreamingImpl@WasmStreaming@v8@@@__1@std@@@__1@std@@@Z
??0WebDriverValue@v8_inspector@@QAE@VStringView@1@V?$MaybeLocal@VValue@v8@@@v8@@@Z
??0WebSnapshotDeserializer@internal@v8@@AAE@PAVIsolate@12@V?$Handle@VObject@internal@v8@@@12@V?$Vector@$$CBE@base@2@@Z
??0WebSnapshotDeserializer@internal@v8@@QAE@PAVIsolate@12@V?$Handle@VScript@internal@v8@@@12@@Z
??0WebSnapshotDeserializer@internal@v8@@QAE@PAVIsolate@2@PBEI@Z
??0WebSnapshotSerializer@internal@v8@@QAE@PAVIsolate@12@@Z
??0WebSnapshotSerializer@internal@v8@@QAE@PAVIsolate@2@@Z
??1?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@IAE@XZ
??1?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@IAE@XZ
??1?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAE@XZ
??1?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAE@XZ
??1ActivityControl@v8@@UAE@XZ
??1AllocationProfile@v8@@UAE@XZ
??1Allocator@ArrayBuffer@v8@@UAE@XZ
??1AllowJavascriptExecutionScope@Isolate@v8@@QAE@XZ
??1ArrayBufferAllocator@node@@UAE@XZ
??1AsyncResource@node@@UAE@XZ
??1BackingStore@v8@@QAE@XZ
??1BackupIncumbentScope@Context@v8@@QAE@XZ
??1Binary@protocol@v8_inspector@@QAE@XZ
??1CachedData@ScriptCompiler@v8@@QAE@XZ
??1CallbackScope@AsyncResource@node@@QAE@XZ
??1CallbackScope@node@@QAE@XZ
??1Channel@V8Inspector@v8_inspector@@UAE@XZ
??1CodeEventHandler@v8@@UAE@XZ
??1CommandLineAPIScope@V8InspectorSession@v8_inspector@@UAE@XZ
??1CommonEnvironmentSetup@node@@QAE@XZ
??1CompiledWasmModule@v8@@QAE@XZ
??1ConsumeCodeCacheTask@ScriptCompiler@v8@@QAE@XZ
??1CppHeap@v8@@UAE@XZ
??1CppHeapCreateParams@v8@@QAE@XZ
??1CpuProfileDeoptInfo@v8@@QAE@XZ
??1CpuProfilingOptions@v8@@QAE@XZ
??1CreateParams@Isolate@v8@@QAE@XZ
??1CrossThreadPersistentRegion@internal@cppgc@@QAE@XZ
??1Delegate@ValueDeserializer@v8@@UAE@XZ
??1Delegate@ValueSerializer@v8@@UAE@XZ
??1DisallowGarbageCollectionScope@subtle@cppgc@@QAE@XZ
??1DisallowJavascriptExecutionScope@Isolate@v8@@QAE@XZ
??1DiscardedSamplesDelegate@v8@@UAE@XZ
??1Domain@API@Schema@protocol@v8_inspector@@UAE@XZ
??1EmbedderGraph@v8@@UAE@XZ
??1EmbedderHeapTracer@v8@@UAE@XZ
??1EmbedderRootsHandler@v8@@UAE@XZ
??1EmbedderStateScope@v8@@QAE@XZ
??1EscapableHandleScope@v8@@QAE@XZ
??1Exported@protocol@v8_inspector@@UAE@XZ
??1Extension@v8@@UAE@XZ
??1ExternalOneByteStringResource@String@v8@@UAE@XZ
??1ExternalResourceVisitor@v8@@UAE@XZ
??1ExternalSourceStream@ScriptCompiler@v8@@UAE@XZ
??1ExternalStringResource@String@v8@@UAE@XZ
??1ExternalStringResourceBase@String@v8@@UAE@XZ
??1GCInfoTable@internal@cppgc@@QAE@XZ
??1HandleScope@v8@@QAE@XZ
??1Heap@cppgc@@UAE@XZ
??1Inspectable@V8InspectorSession@v8_inspector@@UAE@XZ
??1Locker@v8@@QAE@XZ
??1MeasureMemoryDelegate@v8@@UAE@XZ
??1MicrotaskQueue@v8@@UAE@XZ
??1MicrotasksScope@v8@@QAE@XZ
??1MultiIsolatePlatform@node@@UAE@XZ
??1NameProvider@cppgc@@UAE@XZ
??1NoGarbageCollectionScope@subtle@cppgc@@QAE@XZ
??1OutputStream@v8@@UAE@XZ
??1OverrideEmbedderStackStateScope@testing@cppgc@@QAE@XZ
??1PersistentHandleVisitor@v8@@UAE@XZ
??1PersistentRegion@internal@cppgc@@QAE@XZ
??1PersistentRegionBase@internal@cppgc@@QAE@XZ
??1PersistentRegionLock@internal@cppgc@@QAE@XZ
??1Platform@cppgc@@UAE@XZ
??1PropertyDescriptor@v8@@QAE@XZ
??1Recorder@metrics@v8@@UAE@XZ
??1RegisterState@v8@@QAE@XZ
??1RemoteObject@API@Runtime@protocol@v8_inspector@@UAE@XZ
??1SafeForTerminationScope@Isolate@v8@@QAE@XZ
??1Scope@Isolate@v8@@QAE@XZ
??1SealHandleScope@v8@@QAE@XZ
??1SearchMatch@API@Debugger@protocol@v8_inspector@@UAE@XZ
??1SnapshotCreator@v8@@QAE@XZ
??1StackTrace@API@Runtime@protocol@v8_inspector@@UAE@XZ
??1StackTraceId@API@Runtime@protocol@v8_inspector@@UAE@XZ
??1StreamedSource@ScriptCompiler@v8@@QAE@XZ
??1StringBuffer@v8_inspector@@UAE@XZ
??1SuppressMicrotaskExecutionScope@Isolate@v8@@QAE@XZ
??1TracedGlobalHandleVisitor@EmbedderHeapTracer@v8@@UAE@XZ
??1TryCatch@v8@@QAE@XZ
??1Unlocker@v8@@QAE@XZ
??1Utf8Value@String@v8@@QAE@XZ
??1V8Inspector@v8_inspector@@UAE@XZ
??1V8InspectorClient@v8_inspector@@UAE@XZ
??1V8InspectorSession@v8_inspector@@UAE@XZ
??1V8StackTrace@v8_inspector@@UAE@XZ
??1Value@String@v8@@QAE@XZ
??1ValueDeserializer@v8@@QAE@XZ
??1ValueSerializer@v8@@QAE@XZ
??1Visitor@cppgc@@UAE@XZ
??1WasmModuleObjectBuilderStreaming@v8@@QAE@XZ
??1WasmStreaming@v8@@QAE@XZ
??1WebSnapshotDeserializer@internal@v8@@QAE@XZ
??1WebSnapshotSerializer@internal@v8@@QAE@XZ
??2EscapableHandleScope@v8@@CAPAXI@Z
??2GlobalGCInfoTable@internal@cppgc@@CAPAXI@Z
??2HandleScope@v8@@CAPAXI@Z
??2SealHandleScope@v8@@CAPAXI@Z
??2TryCatch@v8@@CAPAXI@Z
??3BackingStore@v8@@SAXPAX@Z
??3EscapableHandleScope@v8@@CAXPAXI@Z
??3GlobalGCInfoTable@internal@cppgc@@CAXPAXI@Z
??3HandleScope@v8@@CAXPAXI@Z
??3SealHandleScope@v8@@CAXPAXI@Z
??3TryCatch@v8@@CAXPAXI@Z
??4?$CTypeInfoBuilder@H$S@v8@@QAEAAV01@$$QAV01@@Z
??4?$CTypeInfoBuilder@H$S@v8@@QAEAAV01@ABV01@@Z
??4?$CTypeInfoBuilder@I$S@v8@@QAEAAV01@$$QAV01@@Z
??4?$CTypeInfoBuilder@I$S@v8@@QAEAAV01@ABV01@@Z
??4?$CTypeInfoBuilder@M$S@v8@@QAEAAV01@$$QAV01@@Z
??4?$CTypeInfoBuilder@M$S@v8@@QAEAAV01@ABV01@@Z
??4?$CTypeInfoBuilder@N$S@v8@@QAEAAV01@$$QAV01@@Z
??4?$CTypeInfoBuilder@N$S@v8@@QAEAAV01@ABV01@@Z
??4?$MemorySpan@$$CBD@v8@@QAEAAV01@$$QAV01@@Z
??4?$MemorySpan@$$CBD@v8@@QAEAAV01@ABV01@@Z
??4?$MemorySpan@$$CBE@v8@@QAEAAV01@$$QAV01@@Z
??4?$MemorySpan@$$CBE@v8@@QAEAAV01@ABV01@@Z
??4?$MemorySpan@$$CBVCFunction@v8@@@v8@@QAEAAV01@$$QAV01@@Z
??4?$MemorySpan@$$CBVCFunction@v8@@@v8@@QAEAAV01@ABV01@@Z
??4?$__vector_base@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAEAAV012@ABV012@@Z
??4?$__vector_base@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAEAAV012@ABV012@@Z
??4?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAEAAV012@$$QAV012@@Z
??4?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAEAAV012@ABV012@@Z
??4?$vector@UCpuProfileDeoptFrame@v8@@V?$allocator@UCpuProfileDeoptFrame@v8@@@__1@std@@@__1@std@@QAEAAV012@V?$initializer_list@UCpuProfileDeoptFrame@v8@@@2@@Z
??4?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAEAAV012@$$QAV012@@Z
??4?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAEAAV012@ABV012@@Z
??4?$vector@UCpuProfileDeoptInfo@v8@@V?$allocator@UCpuProfileDeoptInfo@v8@@@__1@std@@@__1@std@@QAEAAV012@V?$initializer_list@UCpuProfileDeoptInfo@v8@@@2@@Z
??4AccessorSignature@v8@@QAEAAV01@$$QAV01@@Z
??4AccessorSignature@v8@@QAEAAV01@ABV01@@Z
??4ActivityControl@v8@@QAEAAV01@ABV01@@Z
??4AllocationHandle@cppgc@@QAEAAV01@$$QAV01@@Z
??4AllocationHandle@cppgc@@QAEAAV01@ABV01@@Z
??4AllocationProfile@v8@@QAEAAV01@ABV01@@Z
??4Allocator@ArrayBuffer@v8@@QAEAAV012@ABV012@@Z
??4Array@v8@@QAEAAV01@$$QAV01@@Z
??4Array@v8@@QAEAAV01@ABV01@@Z
??4ArrayBuffer@v8@@QAEAAV01@$$QAV01@@Z
??4ArrayBuffer@v8@@QAEAAV01@ABV01@@Z
??4ArrayBufferAllocator@node@@QAEAAV01@$$QAV01@@Z
??4ArrayBufferAllocator@node@@QAEAAV01@ABV01@@Z
??4ArrayBufferView@v8@@QAEAAV01@$$QAV01@@Z
??4ArrayBufferView@v8@@QAEAAV01@ABV01@@Z
??4AtomicsWaitWakeHandle@Isolate@v8@@QAEAAV012@$$QAV012@@Z
??4AtomicsWaitWakeHandle@Isolate@v8@@QAEAAV012@ABV012@@Z
??4BackingStore@v8@@QAEAAV01@ABV01@@Z
??4BackupIncumbentScope@Context@v8@@QAEAAV012@ABV012@@Z
??4BaseObjectSizeTrait@internal@cppgc@@QAEAAU012@$$QAU012@@Z
??4BaseObjectSizeTrait@internal@cppgc@@QAEAAU012@ABU012@@Z
??4BigInt64Array@v8@@QAEAAV01@$$QAV01@@Z
??4BigInt64Array@v8@@QAEAAV01@ABV01@@Z
??4BigInt@v8@@QAEAAV01@$$QAV01@@Z
??4BigInt@v8@@QAEAAV01@ABV01@@Z
??4BigIntObject@v8@@QAEAAV01@$$QAV01@@Z
??4BigIntObject@v8@@QAEAAV01@ABV01@@Z
??4BigUint64Array@v8@@QAEAAV01@$$QAV01@@Z
??4BigUint64Array@v8@@QAEAAV01@ABV01@@Z
??4Binary@protocol@v8_inspector@@QAEAAV012@$$QAV012@@Z
??4Binary@protocol@v8_inspector@@QAEAAV012@ABV012@@Z
??4Boolean@v8@@QAEAAV01@$$QAV01@@Z
??4Boolean@v8@@QAEAAV01@ABV01@@Z
??4BooleanObject@v8@@QAEAAV01@$$QAV01@@Z
??4BooleanObject@v8@@QAEAAV01@ABV01@@Z
??4CFunction@v8@@QAEAAV01@$$QAV01@@Z
??4CFunction@v8@@QAEAAV01@ABV01@@Z
??4Channel@V8Inspector@v8_inspector@@QAEAAV012@ABV012@@Z
??4CodeEvent@v8@@QAEAAV01@$$QAV01@@Z
??4CodeEvent@v8@@QAEAAV01@ABV01@@Z
??4CommandLineAPIScope@V8InspectorSession@v8_inspector@@QAEAAV012@ABV012@@Z
??4Context@v8@@QAEAAV01@$$QAV01@@Z
??4Context@v8@@QAEAAV01@ABV01@@Z
??4CppHeap@v8@@QAEAAV01@ABV01@@Z
??4CpuProfile@v8@@QAEAAV01@$$QAV01@@Z
??4CpuProfile@v8@@QAEAAV01@ABV01@@Z
??4CpuProfileDeoptInfo@v8@@QAEAAU01@$$QAU01@@Z
??4CpuProfileDeoptInfo@v8@@QAEAAU01@ABU01@@Z
??4CpuProfileNode@v8@@QAEAAV01@$$QAV01@@Z
??4CpuProfileNode@v8@@QAEAAV01@ABV01@@Z
??4CpuProfilingOptions@v8@@QAEAAV01@$$QAV01@@Z
??4CpuProfilingOptions@v8@@QAEAAV01@ABV01@@Z
??4CreateParams@Isolate@v8@@QAEAAU012@ABU012@@Z
??4Data@v8@@QAEAAV01@$$QAV01@@Z
??4Data@v8@@QAEAAV01@ABV01@@Z
??4DataView@v8@@QAEAAV01@$$QAV01@@Z
??4DataView@v8@@QAEAAV01@ABV01@@Z
??4Date@v8@@QAEAAV01@$$QAV01@@Z
??4Date@v8@@QAEAAV01@ABV01@@Z
??4Delegate@ValueDeserializer@v8@@QAEAAV012@ABV012@@Z
??4Delegate@ValueSerializer@v8@@QAEAAV012@ABV012@@Z
??4DeleteACHHandle@node@@QAEAAU01@$$QAU01@@Z
??4DeleteACHHandle@node@@QAEAAU01@ABU01@@Z
??4DiscardedSamplesDelegate@v8@@QAEAAV01@ABV01@@Z
??4Domain@API@Schema@protocol@v8_inspector@@QAEAAV01234@$$QAV01234@@Z
??4Domain@API@Schema@protocol@v8_inspector@@QAEAAV01234@ABV01234@@Z
??4EmbedderGraph@v8@@QAEAAV01@ABV01@@Z
??4EmbedderHeapTracer@v8@@QAEAAV01@ABV01@@Z
??4EmbedderRootsHandler@v8@@QAEAAV01@ABV01@@Z
??4EnsureGCInfoIndexTrait@internal@cppgc@@QAEAAU012@$$QAU012@@Z
??4EnsureGCInfoIndexTrait@internal@cppgc@@QAEAAU012@ABU012@@Z
??4Exception@v8@@QAEAAV01@$$QAV01@@Z
??4Exception@v8@@QAEAAV01@ABV01@@Z
??4Exported@protocol@v8_inspector@@QAEAAV012@ABV012@@Z
??4External@v8@@QAEAAV01@$$QAV01@@Z
??4External@v8@@QAEAAV01@ABV01@@Z
??4ExternalResourceVisitor@v8@@QAEAAV01@ABV01@@Z
??4ExternalSourceStream@ScriptCompiler@v8@@QAEAAV012@ABV012@@Z
??4FixedArray@v8@@QAEAAV01@$$QAV01@@Z
??4FixedArray@v8@@QAEAAV01@ABV01@@Z
??4Float32Array@v8@@QAEAAV01@$$QAV01@@Z
??4Float32Array@v8@@QAEAAV01@ABV01@@Z
??4Float64Array@v8@@QAEAAV01@$$QAV01@@Z
??4Float64Array@v8@@QAEAAV01@ABV01@@Z
??4Function@v8@@QAEAAV01@$$QAV01@@Z
??4Function@v8@@QAEAAV01@ABV01@@Z
??4FunctionTemplate@v8@@QAEAAV01@$$QAV01@@Z
??4FunctionTemplate@v8@@QAEAAV01@ABV01@@Z
??4Heap@cppgc@@QAEAAV01@ABV01@@Z
??4HeapCodeStatistics@v8@@QAEAAV01@$$QAV01@@Z
??4HeapCodeStatistics@v8@@QAEAAV01@ABV01@@Z
??4HeapGraphEdge@v8@@QAEAAV01@$$QAV01@@Z
??4HeapGraphEdge@v8@@QAEAAV01@ABV01@@Z
??4HeapGraphNode@v8@@QAEAAV01@$$QAV01@@Z
??4HeapGraphNode@v8@@QAEAAV01@ABV01@@Z
??4HeapHandle@cppgc@@QAEAAV01@$$QAV01@@Z
??4HeapHandle@cppgc@@QAEAAV01@ABV01@@Z
??4HeapObjectStatistics@v8@@QAEAAV01@$$QAV01@@Z
??4HeapObjectStatistics@v8@@QAEAAV01@ABV01@@Z
??4HeapSnapshot@v8@@QAEAAV01@$$QAV01@@Z
??4HeapSnapshot@v8@@QAEAAV01@ABV01@@Z
??4HeapSpaceStatistics@v8@@QAEAAV01@$$QAV01@@Z
??4HeapSpaceStatistics@v8@@QAEAAV01@ABV01@@Z
??4HeapState@subtle@cppgc@@QAEAAV012@$$QAV012@@Z
??4HeapState@subtle@cppgc@@QAEAAV012@ABV012@@Z
??4HeapStatistics@v8@@QAEAAV01@$$QAV01@@Z
??4HeapStatistics@v8@@QAEAAV01@ABV01@@Z
??4Inspectable@V8InspectorSession@v8_inspector@@QAEAAV012@ABV012@@Z
??4Int16Array@v8@@QAEAAV01@$$QAV01@@Z
??4Int16Array@v8@@QAEAAV01@ABV01@@Z
??4Int32@v8@@QAEAAV01@$$QAV01@@Z
??4Int32@v8@@QAEAAV01@ABV01@@Z
??4Int32Array@v8@@QAEAAV01@$$QAV01@@Z
??4Int32Array@v8@@QAEAAV01@ABV01@@Z
??4Int8Array@v8@@QAEAAV01@$$QAV01@@Z
??4Int8Array@v8@@QAEAAV01@ABV01@@Z
??4Integer@v8@@QAEAAV01@$$QAV01@@Z
??4Integer@v8@@QAEAAV01@ABV01@@Z
??4IsolatePlatformDelegate@node@@QAEAAV01@$$QAV01@@Z
??4IsolatePlatformDelegate@node@@QAEAAV01@ABV01@@Z
??4JSON@v8@@QAEAAV01@$$QAV01@@Z
??4JSON@v8@@QAEAAV01@ABV01@@Z
??4LivenessBroker@cppgc@@QAEAAV01@$$QAV01@@Z
??4LivenessBroker@cppgc@@QAEAAV01@ABV01@@Z
??4Location@v8@@QAEAAV01@$$QAV01@@Z
??4Location@v8@@QAEAAV01@ABV01@@Z
??4LongTaskStats@metrics@v8@@QAEAAU012@$$QAU012@@Z
??4LongTaskStats@metrics@v8@@QAEAAU012@ABU012@@Z
??4MakeGarbageCollectedTraitInternal@internal@cppgc@@QAEAAV012@$$QAV012@@Z
??4MakeGarbageCollectedTraitInternal@internal@cppgc@@QAEAAV012@ABV012@@Z
??4Map@v8@@QAEAAV01@$$QAV01@@Z
??4Map@v8@@QAEAAV01@ABV01@@Z
??4MeasureMemoryDelegate@v8@@QAEAAV01@ABV01@@Z
??4Message@v8@@QAEAAV01@$$QAV01@@Z
??4Message@v8@@QAEAAV01@ABV01@@Z
??4Module@v8@@QAEAAV01@$$QAV01@@Z
??4Module@v8@@QAEAAV01@ABV01@@Z
??4ModuleRequest@v8@@QAEAAV01@$$QAV01@@Z
??4ModuleRequest@v8@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 101.2MB - Virtual size: 101.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18.9MB - Virtual size: 18.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 325B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 207B

CPADinfo
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

malloc_h
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LICENSE.electron.txt
LICENSES.chromium.html
chrome_100_percent.pak
chrome_200_percent.pak
d3dcompiler_47.dll
.dll windows:10 windows x86 arch:x86

185ce3a45c3a9cfb3bf83afd7f79c140

Code Sign

33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:24

Not After

02-12-2021 21:24

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:01:09:e5:f9:cf:93:de:bb:73:ba:83:76:3f:3b:3a:15:05:a8:8b:66:6c:b6:da:27:97:34:46:68:78:5b:68
Signer

Actual PE Digest

84:01:09:e5:f9:cf:93:de:bb:73:ba:83:76:3f:3b:3a:15:05:a8:8b:66:6c:b6:da:27:97:34:46:68:78:5b:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

kernel32

WriteFile
FreeLibrary
Sleep
TlsAlloc
TlsSetValue
HeapDestroy
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
GetSystemInfo
GetProcAddress
LoadLibraryExW
SetLastError
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetStdHandle
GetFileType
GetStartupInfoW
RaiseException
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleW
GetModuleHandleExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadFile
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetModuleFileNameW
ReadConsoleW
HeapSize
HeapReAlloc
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
LocalAlloc
LocalFree
GetFileSizeEx
GetLastError
CreateFileW
HeapFree
GetProcessHeap
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
SetFileAttributesW
DeleteFileW
SetEndOfFile
DeviceIoControl
MapViewOfFileEx
CreateFileMappingA
ExpandEnvironmentStringsW
HeapAlloc
OutputDebugStringA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
HeapCreate
GetModuleFileNameA
CreateFileA
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
GetCommandLineA
GetCommandLineW
GetDriveTypeW
GetCurrentDirectoryW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
MultiByteToWideChar
SetEnvironmentVariableW
DisableThreadLibraryCalls

advapi32

CryptDestroyHash
CryptAcquireContextW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
CryptGetHashParam
CryptCreateHash
CryptHashData
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptReleaseContext

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ffmpeg.dll
.dll windows:5 windows x86 arch:x86

c7497313062f9c96c83518b36f70731f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ffmpeg.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateThread
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

av_buffer_create
av_buffer_get_opaque
av_dict_count
av_dict_free
av_dict_get
av_dict_set
av_force_cpu_flags
av_frame_alloc
av_frame_clone
av_frame_free
av_frame_unref
av_free
av_get_bytes_per_sample
av_get_cpu_flags
av_image_check_size
av_init_packet
av_log_set_level
av_malloc
av_max_alloc
av_new_packet
av_packet_alloc
av_packet_copy_props
av_packet_free
av_packet_get_side_data
av_packet_unref
av_rdft_calc
av_rdft_end
av_rdft_init
av_read_frame
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
av_stream_get_first_dts
av_stream_get_side_data
av_strerror
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_descriptor_get
avcodec_descriptor_next
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_context
avcodec_get_name
avcodec_open2
avcodec_parameters_to_context
avcodec_receive_frame
avcodec_send_packet
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context
avio_close

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 126B

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
icudtl.dat
libEGL.dll
.dll windows:5 windows x86 arch:x86

14cd5ffd5d2a5e20eb8ffa21377b813a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

libEGL.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglExportVkImageANGLE
eglForceGPUSwitchANGLE
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglLockSurfaceKHR
eglMakeCurrent
eglPostSubBufferNV
eglPrepareSwapBuffersANGLE
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryDmaBufFormatsEXT
eglQueryDmaBufModifiersEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurface64KHR
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSetDamageRegionKHR
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglUnlockSurfaceKHR
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR

Sections

.text
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 126B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libGLESv2.dll
.dll windows:5 windows x86 arch:x86

a3cf5bdf45630e05f03d9a6f7db22e7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

libGLESv2.dll.pdb

Imports

user32

CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyWindow
GetClassInfoW
GetClientRect
GetDC
GetWindowThreadProcessId
InvalidateRect
IsIconic
IsWindow
LoadCursorW
RegisterClassW
ReleaseDC
UnregisterClassA
WindowFromDC

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
CreateThread
DecodePointer
DeleteCriticalSection
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

dxgi

CreateDXGIFactory1
CreateDXGIFactory

gdi32

ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers

Exports

Exports

??0PlatformMethods@angle@@QAE@XZ
??4PlatformMethods@angle@@QAEAAU01@$$QAU01@@Z
??4PlatformMethods@angle@@QAEAAU01@ABU01@@Z
Cr_z_adler32
Cr_z_adler32_combine
Cr_z_adler32_z
Cr_z_compress
Cr_z_compress2
Cr_z_compressBound
Cr_z_crc32
Cr_z_crc32_combine
Cr_z_crc32_z
Cr_z_deflate
Cr_z_deflateBound
Cr_z_deflateCopy
Cr_z_deflateEnd
Cr_z_deflateGetDictionary
Cr_z_deflateInit2_
Cr_z_deflateInit_
Cr_z_deflateParams
Cr_z_deflatePending
Cr_z_deflatePrime
Cr_z_deflateReset
Cr_z_deflateResetKeep
Cr_z_deflateSetDictionary
Cr_z_deflateSetHeader
Cr_z_deflateTune
Cr_z_get_crc_table
Cr_z_zError
Cr_z_zlibCompileFlags
Cr_z_zlibVersion
EGL_BindAPI
EGL_BindTexImage
EGL_ChooseConfig
EGL_ClientWaitSync
EGL_ClientWaitSyncKHR
EGL_CopyBuffers
EGL_CreateContext
EGL_CreateDeviceANGLE
EGL_CreateImage
EGL_CreateImageKHR
EGL_CreateNativeClientBufferANDROID
EGL_CreatePbufferFromClientBuffer
EGL_CreatePbufferSurface
EGL_CreatePixmapSurface
EGL_CreatePlatformPixmapSurface
EGL_CreatePlatformPixmapSurfaceEXT
EGL_CreatePlatformWindowSurface
EGL_CreatePlatformWindowSurfaceEXT
EGL_CreateStreamKHR
EGL_CreateStreamProducerD3DTextureANGLE
EGL_CreateSync
EGL_CreateSyncKHR
EGL_CreateWindowSurface
EGL_DebugMessageControlKHR
EGL_DestroyContext
EGL_DestroyImage
EGL_DestroyImageKHR
EGL_DestroyStreamKHR
EGL_DestroySurface
EGL_DestroySync
EGL_DestroySyncKHR
EGL_DupNativeFenceFDANDROID
EGL_ExportVkImageANGLE
EGL_ForceGPUSwitchANGLE
EGL_GetCompositorTimingANDROID
EGL_GetCompositorTimingSupportedANDROID
EGL_GetConfigAttrib
EGL_GetConfigs
EGL_GetCurrentContext
EGL_GetCurrentDisplay
EGL_GetCurrentSurface
EGL_GetDisplay
EGL_GetError
EGL_GetFrameTimestampSupportedANDROID
EGL_GetFrameTimestampsANDROID
EGL_GetMscRateANGLE
EGL_GetNativeClientBufferANDROID
EGL_GetNextFrameIdANDROID
EGL_GetPlatformDisplay
EGL_GetPlatformDisplayEXT
EGL_GetProcAddress
EGL_GetSyncAttrib
EGL_GetSyncAttribKHR
EGL_GetSyncValuesCHROMIUM
EGL_HandleGPUSwitchANGLE
EGL_Initialize
EGL_LabelObjectKHR
EGL_LockSurfaceKHR
EGL_MakeCurrent
EGL_PostSubBufferNV
EGL_PrepareSwapBuffersANGLE
EGL_PresentationTimeANDROID
EGL_ProgramCacheGetAttribANGLE
EGL_ProgramCachePopulateANGLE
EGL_ProgramCacheQueryANGLE
EGL_ProgramCacheResizeANGLE
EGL_QueryAPI
EGL_QueryContext
EGL_QueryDebugKHR
EGL_QueryDeviceAttribEXT
EGL_QueryDeviceStringEXT
EGL_QueryDisplayAttribANGLE
EGL_QueryDisplayAttribEXT
EGL_QueryDmaBufFormatsEXT
EGL_QueryDmaBufModifiersEXT
EGL_QueryStreamKHR
EGL_QueryStreamu64KHR
EGL_QueryString
EGL_QueryStringiANGLE
EGL_QuerySurface
EGL_QuerySurface64KHR
EGL_QuerySurfacePointerANGLE
EGL_ReacquireHighPowerGPUANGLE
EGL_ReleaseDeviceANGLE
EGL_ReleaseHighPowerGPUANGLE
EGL_ReleaseTexImage
EGL_ReleaseThread
EGL_SetBlobCacheFuncsANDROID
EGL_SetDamageRegionKHR
EGL_SignalSyncKHR
EGL_StreamAttribKHR
EGL_StreamConsumerAcquireKHR
EGL_StreamConsumerGLTextureExternalAttribsNV
EGL_StreamConsumerGLTextureExternalKHR
EGL_StreamConsumerReleaseKHR
EGL_StreamPostD3DTextureANGLE
EGL_SurfaceAttrib
EGL_SwapBuffers
EGL_SwapBuffersWithDamageKHR
EGL_SwapBuffersWithFrameTokenANGLE
EGL_SwapInterval
EGL_Terminate
EGL_UnlockSurfaceKHR
EGL_WaitClient
EGL_WaitGL
EGL_WaitNative
EGL_WaitSync
EGL_WaitSyncKHR
_ANGLEGetDisplayPlatform@20
_ANGLEResetDisplayPlatform@4
_EGL_BindAPI@4
_EGL_BindTexImage@12
_EGL_ChooseConfig@20
_EGL_ClientWaitSync@20
_EGL_ClientWaitSyncKHR@20
_EGL_CopyBuffers@12
_EGL_CreateContext@16
_EGL_CreateDeviceANGLE@12
_EGL_CreateImage@20
_EGL_CreateImageKHR@20
_EGL_CreateNativeClientBufferANDROID@4
_EGL_CreatePbufferFromClientBuffer@20
_EGL_CreatePbufferSurface@12
_EGL_CreatePixmapSurface@16
_EGL_CreatePlatformPixmapSurface@16
_EGL_CreatePlatformPixmapSurfaceEXT@16
_EGL_CreatePlatformWindowSurface@16
_EGL_CreatePlatformWindowSurfaceEXT@16
_EGL_CreateStreamKHR@8
_EGL_CreateStreamProducerD3DTextureANGLE@12
_EGL_CreateSync@12
_EGL_CreateSyncKHR@12
_EGL_CreateWindowSurface@16
_EGL_DebugMessageControlKHR@8
_EGL_DestroyContext@8
_EGL_DestroyImage@8
_EGL_DestroyImageKHR@8
_EGL_DestroyStreamKHR@8
_EGL_DestroySurface@8
_EGL_DestroySync@8
_EGL_DestroySyncKHR@8
_EGL_DupNativeFenceFDANDROID@8
_EGL_ExportVkImageANGLE@16
_EGL_ForceGPUSwitchANGLE@12
_EGL_GetCompositorTimingANDROID@20
_EGL_GetCompositorTimingSupportedANDROID@12
_EGL_GetConfigAttrib@16
_EGL_GetConfigs@16
_EGL_GetCurrentContext@0
_EGL_GetCurrentDisplay@0
_EGL_GetCurrentSurface@4
_EGL_GetDisplay@4
_EGL_GetError@0
_EGL_GetFrameTimestampSupportedANDROID@12
_EGL_GetFrameTimestampsANDROID@28
_EGL_GetMscRateANGLE@16
_EGL_GetNativeClientBufferANDROID@4
_EGL_GetNextFrameIdANDROID@12
_EGL_GetPlatformDisplay@12
_EGL_GetPlatformDisplayEXT@12
_EGL_GetProcAddress@4
_EGL_GetSyncAttrib@16
_EGL_GetSyncAttribKHR@16
_EGL_GetSyncValuesCHROMIUM@20
_EGL_HandleGPUSwitchANGLE@4
_EGL_Initialize@12
_EGL_LabelObjectKHR@16
_EGL_LockSurfaceKHR@12
_EGL_MakeCurrent@16
_EGL_PostSubBufferNV@24
_EGL_PrepareSwapBuffersANGLE@8
_EGL_PresentationTimeANDROID@16
_EGL_ProgramCacheGetAttribANGLE@8
_EGL_ProgramCachePopulateANGLE@20
_EGL_ProgramCacheQueryANGLE@24
_EGL_ProgramCacheResizeANGLE@12
_EGL_QueryAPI@0
_EGL_QueryContext@16
_EGL_QueryDebugKHR@8
_EGL_QueryDeviceAttribEXT@12
_EGL_QueryDeviceStringEXT@8
_EGL_QueryDisplayAttribANGLE@12
_EGL_QueryDisplayAttribEXT@12
_EGL_QueryDmaBufFormatsEXT@16
_EGL_QueryDmaBufModifiersEXT@24
_EGL_QueryStreamKHR@16
_EGL_QueryStreamu64KHR@16
_EGL_QueryString@8
_EGL_QueryStringiANGLE@12
_EGL_QuerySurface64KHR@16
_EGL_QuerySurface@16
_EGL_QuerySurfacePointerANGLE@16
_EGL_ReacquireHighPowerGPUANGLE@8
_EGL_ReleaseDeviceANGLE@4
_EGL_ReleaseHighPowerGPUANGLE@8
_EGL_ReleaseTexImage@12
_EGL_ReleaseThread@0
_EGL_SetBlobCacheFuncsANDROID@12
_EGL_SetDamageRegionKHR@16
_EGL_SignalSyncKHR@12
_EGL_StreamAttribKHR@16
_EGL_StreamConsumerAcquireKHR@8
_EGL_StreamConsumerGLTextureExternalAttribsNV@12
_EGL_StreamConsumerGLTextureExternalKHR@8
_EGL_StreamConsumerReleaseKHR@8
_EGL_StreamPostD3DTextureANGLE@16
_EGL_SurfaceAttrib@16
_EGL_SwapBuffers@8
_EGL_SwapBuffersWithDamageKHR@16
_EGL_SwapBuffersWithFrameTokenANGLE@16
_EGL_SwapInterval@8
_EGL_Terminate@4
_EGL_UnlockSurfaceKHR@8
_EGL_WaitClient@0
_EGL_WaitGL@0
_EGL_WaitNative@4
_EGL_WaitSync@12
_EGL_WaitSyncKHR@12
_GL_AcquireTexturesANGLE@12
_GL_ActiveShaderProgram@8
_GL_ActiveShaderProgramEXT@8
_GL_ActiveTexture@4
_GL_AlphaFunc@8
_GL_AlphaFuncx@8
_GL_AttachShader@8
_GL_BeginPerfMonitorAMD@4
_GL_BeginQuery@8
_GL_BeginQueryEXT@8
_GL_BeginTransformFeedback@4
_GL_BindAttribLocation@12
_GL_BindBuffer@8
_GL_BindBufferBase@12
_GL_BindBufferRange@20
_GL_BindFragDataLocationEXT@12
_GL_BindFragDataLocationIndexedEXT@16
_GL_BindFramebuffer@8
_GL_BindFramebufferOES@8
_GL_BindImageTexture@28
_GL_BindProgramPipeline@4
_GL_BindProgramPipelineEXT@4
_GL_BindRenderbuffer@8
_GL_BindRenderbufferOES@8
_GL_BindSampler@8
_GL_BindTexture@8
_GL_BindTransformFeedback@8
_GL_BindUniformLocationCHROMIUM@12
_GL_BindVertexArray@4
_GL_BindVertexArrayOES@4
_GL_BindVertexBuffer@16
_GL_BlendBarrier@0
_GL_BlendBarrierKHR@0
_GL_BlendColor@16
_GL_BlendEquation@4
_GL_BlendEquationSeparate@8
_GL_BlendEquationSeparatei@12
_GL_BlendEquationSeparateiEXT@12
_GL_BlendEquationSeparateiOES@12
_GL_BlendEquationi@8
_GL_BlendEquationiEXT@8
_GL_BlendEquationiOES@8
_GL_BlendFunc@8
_GL_BlendFuncSeparate@16
_GL_BlendFuncSeparatei@20
_GL_BlendFuncSeparateiEXT@20
_GL_BlendFuncSeparateiOES@20
_GL_BlendFunci@12
_GL_BlendFunciEXT@12
_GL_BlendFunciOES@12
_GL_BlitFramebuffer@40
_GL_BlitFramebufferANGLE@40
_GL_BlitFramebufferNV@40
_GL_BufferData@16
_GL_BufferStorageEXT@16
_GL_BufferStorageExternalEXT@20
_GL_BufferStorageMemEXT@20
_GL_BufferSubData@16
_GL_CheckFramebufferStatus@4
_GL_CheckFramebufferStatusOES@4
_GL_Clear@4
_GL_ClearBufferfi@16
_GL_ClearBufferfv@12
_GL_ClearBufferiv@12
_GL_ClearBufferuiv@12
_GL_ClearColor@16
_GL_ClearColorx@16
_GL_ClearDepthf@4
_GL_ClearDepthx@4
_GL_ClearStencil@4
_GL_ClientActiveTexture@4
_GL_ClientWaitSync@16
_GL_ClipControlEXT@8
_GL_ClipPlanef@8
_GL_ClipPlanex@8
_GL_Color4f@16
_GL_Color4ub@16
_GL_Color4x@16
_GL_ColorMask@16
_GL_ColorMaski@20
_GL_ColorMaskiEXT@20
_GL_ColorMaskiOES@20
_GL_ColorPointer@16
_GL_CompileShader@4
_GL_CompressedCopyTextureCHROMIUM@8
_GL_CompressedTexImage2D@32
_GL_CompressedTexImage2DRobustANGLE@36
_GL_CompressedTexImage3D@36
_GL_CompressedTexImage3DOES@36
_GL_CompressedTexImage3DRobustANGLE@40
_GL_CompressedTexSubImage2D@36
_GL_CompressedTexSubImage2DRobustANGLE@40
_GL_CompressedTexSubImage3D@44
_GL_CompressedTexSubImage3DOES@44
_GL_CompressedTexSubImage3DRobustANGLE@48
_GL_CopyBufferSubData@20
_GL_CopyImageSubData@60
_GL_CopyImageSubDataEXT@60
_GL_CopyImageSubDataOES@60
_GL_CopySubTexture3DANGLE@68
_GL_CopySubTextureCHROMIUM@56
_GL_CopyTexImage2D@32
_GL_CopyTexSubImage2D@32
_GL_CopyTexSubImage3D@36
_GL_CopyTexSubImage3DOES@36
_GL_CopyTexture3DANGLE@40
_GL_CopyTextureCHROMIUM@40
_GL_CoverageModulationCHROMIUM@4
_GL_CreateMemoryObjectsEXT@8
_GL_CreateProgram@0
_GL_CreateShader@4
_GL_CreateShaderProgramv@12
_GL_CreateShaderProgramvEXT@12
_GL_CullFace@4
_GL_CurrentPaletteMatrixOES@4
_GL_DebugMessageCallback@8
_GL_DebugMessageCallbackKHR@8
_GL_DebugMessageControl@24
_GL_DebugMessageControlKHR@24
_GL_DebugMessageInsert@24
_GL_DebugMessageInsertKHR@24
_GL_DeleteBuffers@8
_GL_DeleteFencesNV@8
_GL_DeleteFramebuffers@8
_GL_DeleteFramebuffersOES@8
_GL_DeleteMemoryObjectsEXT@8
_GL_DeletePerfMonitorsAMD@8
_GL_DeleteProgram@4
_GL_DeleteProgramPipelines@8
_GL_DeleteProgramPipelinesEXT@8
_GL_DeleteQueries@8
_GL_DeleteQueriesEXT@8
_GL_DeleteRenderbuffers@8
_GL_DeleteRenderbuffersOES@8
_GL_DeleteSamplers@8
_GL_DeleteSemaphoresEXT@8
_GL_DeleteShader@4
_GL_DeleteSync@4
_GL_DeleteTextures@8
_GL_DeleteTransformFeedbacks@8
_GL_DeleteVertexArrays@8
_GL_DeleteVertexArraysOES@8
_GL_DepthFunc@4
_GL_DepthMask@4
_GL_DepthRangef@8
_GL_DepthRangex@8
_GL_DetachShader@8
_GL_Disable@4
_GL_DisableClientState@4
_GL_DisableExtensionANGLE@4
_GL_DisableVertexAttribArray@4
_GL_Disablei@8
_GL_DisableiEXT@8
_GL_DisableiOES@8
_GL_DiscardFramebufferEXT@12
_GL_DispatchCompute@12
_GL_DispatchComputeIndirect@4
_GL_DrawArrays@12
_GL_DrawArraysIndirect@8
_GL_DrawArraysInstanced@16
_GL_DrawArraysInstancedANGLE@16
_GL_DrawArraysInstancedBaseInstanceANGLE@20
_GL_DrawArraysInstancedEXT@16
_GL_DrawBuffers@8
_GL_DrawBuffersEXT@8
_GL_DrawElements@16
_GL_DrawElementsBaseVertex@20
_GL_DrawElementsBaseVertexEXT@20
_GL_DrawElementsBaseVertexOES@20
_GL_DrawElementsIndirect@12
_GL_DrawElementsInstanced@20
_GL_DrawElementsInstancedANGLE@20
_GL_DrawElementsInstancedBaseVertex@24
_GL_DrawElementsInstancedBaseVertexBaseInstanceANGLE@28
_GL_DrawElementsInstancedBaseVertexEXT@24
_GL_DrawElementsInstancedBaseVertexOES@24
_GL_DrawElementsInstancedEXT@20
_GL_DrawRangeElements@24
_GL_DrawRangeElementsBaseVertex@28
_GL_DrawRangeElementsBaseVertexEXT@28
_GL_DrawRangeElementsBaseVertexOES@28
_GL_DrawTexfOES@20
_GL_DrawTexfvOES@4
_GL_DrawTexiOES@20
_GL_DrawTexivOES@4
_GL_DrawTexsOES@20
_GL_DrawTexsvOES@4
_GL_DrawTexxOES@20
_GL_DrawTexxvOES@4
_GL_EGLImageTargetRenderbufferStorageOES@8
_GL_EGLImageTargetTexStorageEXT@12
_GL_EGLImageTargetTexture2DOES@8
_GL_EGLImageTargetTextureStorageEXT@12
_GL_Enable@4
_GL_EnableClientState@4
_GL_EnableVertexAttribArray@4
_GL_Enablei@8
_GL_EnableiEXT@8
_GL_EnableiOES@8
_GL_EndPerfMonitorAMD@4
_GL_EndQuery@4
_GL_EndQueryEXT@4
_GL_EndTransformFeedback@0
_GL_FenceSync@8
_GL_Finish@0
_GL_FinishFenceNV@4
_GL_Flush@0
_GL_FlushMappedBufferRange@12
_GL_FlushMappedBufferRangeEXT@12
_GL_Fogf@8
_GL_Fogfv@8
_GL_Fogx@8
_GL_Fogxv@8
_GL_FramebufferFetchBarrierEXT@0
_GL_FramebufferParameteri@12
_GL_FramebufferParameteriMESA@12
_GL_FramebufferRenderbuffer@16
_GL_FramebufferRenderbufferOES@16
_GL_FramebufferTexture2D@20
_GL_FramebufferTexture2DMultisampleEXT@24
_GL_FramebufferTexture2DOES@20
_GL_FramebufferTexture3DOES@24
_GL_FramebufferTexture@16
_GL_FramebufferTextureEXT@16
_GL_FramebufferTextureLayer@20
_GL_FramebufferTextureMultiviewOVR@24
_GL_FramebufferTextureOES@16
_GL_FrontFace@4
_GL_Frustumf@24
_GL_Frustumx@24
_GL_GenBuffers@8
_GL_GenFencesNV@8
_GL_GenFramebuffers@8
_GL_GenFramebuffersOES@8
_GL_GenPerfMonitorsAMD@8
_GL_GenProgramPipelines@8
_GL_GenProgramPipelinesEXT@8
_GL_GenQueries@8
_GL_GenQueriesEXT@8
_GL_GenRenderbuffers@8
_GL_GenRenderbuffersOES@8
_GL_GenSamplers@8
_GL_GenSemaphoresEXT@8
_GL_GenTextures@8
_GL_GenTransformFeedbacks@8
_GL_GenVertexArrays@8
_GL_GenVertexArraysOES@8
_GL_GenerateMipmap@4
_GL_GenerateMipmapOES@4
_GL_GetActiveAttrib@28
_GL_GetActiveUniform@28

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 132B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
locales/af.pak
locales/am.pak
locales/ar.pak
locales/bg.pak
locales/bn.pak
locales/ca.pak
locales/cs.pak
locales/da.pak
locales/de.pak
locales/el.pak
locales/en-GB.pak
locales/en-US.pak
locales/es-419.pak
locales/es.pak
locales/et.pak
locales/fa.pak
locales/fi.pak
locales/fil.pak
locales/fr.pak
locales/gu.pak
locales/he.pak
locales/hi.pak
locales/hr.pak
locales/hu.pak
locales/id.pak
locales/it.pak
locales/ja.pak
locales/kn.pak
locales/ko.pak
locales/lt.pak
locales/lv.pak
locales/ml.pak
locales/mr.pak
locales/ms.pak
locales/nb.pak
locales/nl.pak
locales/pl.pak
locales/pt-BR.pak
locales/pt-PT.pak
locales/ro.pak
locales/ru.pak
locales/sk.pak
locales/sl.pak
locales/sr.pak
locales/sv.pak
locales/sw.pak
locales/ta.pak
locales/te.pak
locales/th.pak
locales/tr.pak
locales/uk.pak
locales/ur.pak
locales/vi.pak
locales/zh-CN.pak
locales/zh-TW.pak
resources.pak
resources/.env.production
resources/app-update.yml
resources/app.asar
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/android-arm/node.napi.armv7.node
.elf linux arm
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/android-arm64/node.napi.armv8.node
.elf linux aarch64
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/darwin-x64/node.napi.node
.bundle macos arch:x64
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/linux-arm/node.napi.armv6.node
.elf linux arm
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/linux-arm/node.napi.armv7.node
.elf linux arm
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/linux-arm64/node.napi.armv8.node
.elf linux aarch64
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/linux-x64/node.napi.glibc.node
.elf linux x64
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/linux-x64/node.napi.musl.node
.elf linux x64
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/win32-ia32/node.napi.node
.dll windows:6 windows x86 arch:x86

67c8e08d8a20036e80dde41c5db04adb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\leveldown\build\Release\leveldown.pdb

Imports

kernel32

GetModuleHandleA
CreateDirectoryW
ReadFile
FindFirstFileW
GetFileSizeEx
FindNextFileW
WriteFile
RemoveDirectoryW
GetTempPathW
FindClose
CreateFileW
MultiByteToWideChar
Sleep
GetLastError
GetFileAttributesExW
QueryPerformanceFrequency
DeleteFileW
CloseHandle
SetFilePointerEx
LocalFree
MoveFileExW
WideCharToMultiByte
FormatMessageA
QueryPerformanceCounter
FlushFileBuffers
GetCurrentThreadId
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
SetLastError
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
HeapFree
HeapAlloc
OutputDebugStringW
GetACP
LCMapStringW
GetConsoleCP
GetConsoleMode
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
SetEndOfFile
ReadConsoleW
EncodePointer
DecodePointer
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA

Exports

Exports

_register_leveldown_

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/leveldown/prebuilds/win32-x64/node.napi.node
.dll windows:6 windows x64 arch:x64

07b68f049cc01297732e231dd6fdd4ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\leveldown\build\Release\leveldown.pdb

Imports

kernel32

GetModuleHandleA
CreateDirectoryW
ReadFile
FindFirstFileW
GetFileSizeEx
FindNextFileW
WriteFile
RemoveDirectoryW
GetTempPathW
FindClose
CreateFileW
MultiByteToWideChar
Sleep
GetLastError
GetFileAttributesExW
QueryPerformanceFrequency
DeleteFileW
CloseHandle
SetFilePointerEx
LocalFree
MoveFileExW
WideCharToMultiByte
FormatMessageA
QueryPerformanceCounter
FlushFileBuffers
GetCurrentThreadId
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
SetLastError
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
HeapFree
HeapAlloc
OutputDebugStringW
GetACP
LCMapStringW
GetConsoleCP
GetConsoleMode
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
SetEndOfFile
ReadConsoleW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
EncodePointer

Exports

Exports

_register_leveldown_

Sections

.text
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/.github/workflows/ci.yml
resources/app.asar.unpacked/node_modules/lzma-native/LICENSE
resources/app.asar.unpacked/node_modules/lzma-native/bin/lzmajs
.sh .js linux polyglot
resources/app.asar.unpacked/node_modules/lzma-native/index.js
.js
resources/app.asar.unpacked/node_modules/lzma-native/liblzma-build.sh
.sh .vbs linux polyglot
resources/app.asar.unpacked/node_modules/lzma-native/liblzma-config.sh
.sh .vbs linux polyglot
resources/app.asar.unpacked/node_modules/lzma-native/package.json
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-arm64/electron.napi.node
.bundle macos arch:arm64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-arm64/node.napi.node
.bundle macos arch:arm64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-x64/electron.napi.node
.bundle macos arch:x64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/darwin-x64/node.napi.node
.bundle macos arch:x64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/electron.napi.node
.elf linux x64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-arm64/node.napi.node
.elf linux x64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/electron.napi.node
.elf linux x64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/linux-x64/node.napi.node
.elf linux x64
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/electron.napi.node
.dll windows:6 windows x86 arch:x86

31336b494231f4d2dfdafc717b522797

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\lzma-native\lzma-native\build\Release\lzma_native.pdb

Imports

kernel32

GetModuleHandleA
VirtualQuery
VirtualProtect
GetSystemInfo
DecodePointer
CreateFileW
CloseHandle
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
OutputDebugStringW
WriteFile
HeapAlloc
HeapFree
GetCurrentThread
ExitProcess
WriteConsoleW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExA

liblzma

lzma_index_cat
lzma_index_uncompressed_size
lzma_index_file_size
lzma_index_total_size
lzma_index_block_count
lzma_index_stream_count
lzma_index_stream_padding
lzma_index_checks
lzma_index_stream_flags
lzma_index_end
lzma_index_memused
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_header_decode
lzma_cputhreads
lzma_alone_decoder
lzma_auto_decoder
lzma_stream_decoder
lzma_alone_encoder
lzma_stream_encoder_mt
lzma_stream_encoder
lzma_easy_encoder
lzma_index_decoder
lzma_raw_decoder
lzma_raw_encoder
lzma_memlimit_set
lzma_memlimit_get
lzma_memusage
lzma_get_progress
lzma_end
lzma_code
lzma_easy_decoder_memusage
lzma_easy_encoder_memusage
lzma_mode_is_supported
lzma_mf_is_supported
lzma_raw_decoder_memusage
lzma_raw_encoder_memusage
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_crc32
lzma_check_size
lzma_check_is_supported
lzma_version_string
lzma_version_number
lzma_lzma_preset
lzma_filters_update

Exports

Exports

_register_lzma_native_

Sections

.text
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/liblzma.dll
.dll windows:4 windows x86 arch:x86

2cf4836942d47fa0f21856740dc9a362

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__dllonexit
_amsg_exit
_beginthreadex
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcmp
memcpy
memmove
memset
strlen
strncmp
vfprintf

Exports

Exports

lzma_alone_decoder
lzma_alone_encoder
lzma_auto_decoder
lzma_block_buffer_bound
lzma_block_buffer_decode
lzma_block_buffer_encode
lzma_block_compressed_size
lzma_block_decoder
lzma_block_encoder
lzma_block_header_decode
lzma_block_header_encode
lzma_block_header_size
lzma_block_total_size
lzma_block_uncomp_encode
lzma_block_unpadded_size
lzma_check_is_supported
lzma_check_size
lzma_code
lzma_cputhreads
lzma_crc32
lzma_crc64
lzma_easy_buffer_encode
lzma_easy_decoder_memusage
lzma_easy_encoder
lzma_easy_encoder_memusage
lzma_end
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_filter_flags_decode
lzma_filter_flags_encode
lzma_filter_flags_size
lzma_filters_copy
lzma_filters_update
lzma_get_check
lzma_get_progress
lzma_index_append
lzma_index_block_count
lzma_index_buffer_decode
lzma_index_buffer_encode
lzma_index_cat
lzma_index_checks
lzma_index_decoder
lzma_index_dup
lzma_index_encoder
lzma_index_end
lzma_index_file_size
lzma_index_hash_append
lzma_index_hash_decode
lzma_index_hash_end
lzma_index_hash_init
lzma_index_hash_size
lzma_index_init
lzma_index_iter_init
lzma_index_iter_locate
lzma_index_iter_next
lzma_index_iter_rewind
lzma_index_memusage
lzma_index_memused
lzma_index_size
lzma_index_stream_count
lzma_index_stream_flags
lzma_index_stream_padding
lzma_index_stream_size
lzma_index_total_size
lzma_index_uncompressed_size
lzma_lzma_preset
lzma_memlimit_get
lzma_memlimit_set
lzma_memusage
lzma_mf_is_supported
lzma_mode_is_supported
lzma_physmem
lzma_properties_decode
lzma_properties_encode
lzma_properties_size
lzma_raw_buffer_decode
lzma_raw_buffer_encode
lzma_raw_decoder
lzma_raw_decoder_memusage
lzma_raw_encoder
lzma_raw_encoder_memusage
lzma_stream_buffer_bound
lzma_stream_buffer_decode
lzma_stream_buffer_encode
lzma_stream_decoder
lzma_stream_encoder
lzma_stream_encoder_mt
lzma_stream_encoder_mt_memusage
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_footer_encode
lzma_stream_header_decode
lzma_stream_header_encode
lzma_version_number
lzma_version_string
lzma_vli_decode
lzma_vli_encode
lzma_vli_size

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 964B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-ia32/node.napi.node
.dll windows:6 windows x86 arch:x86

31336b494231f4d2dfdafc717b522797

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\lzma-native\lzma-native\build\Release\lzma_native.pdb

Imports

kernel32

GetModuleHandleA
VirtualQuery
VirtualProtect
GetSystemInfo
DecodePointer
CreateFileW
CloseHandle
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
OutputDebugStringW
WriteFile
HeapAlloc
HeapFree
GetCurrentThread
ExitProcess
WriteConsoleW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExA

liblzma

lzma_index_cat
lzma_index_uncompressed_size
lzma_index_file_size
lzma_index_total_size
lzma_index_block_count
lzma_index_stream_count
lzma_index_stream_padding
lzma_index_checks
lzma_index_stream_flags
lzma_index_end
lzma_index_memused
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_header_decode
lzma_cputhreads
lzma_alone_decoder
lzma_auto_decoder
lzma_stream_decoder
lzma_alone_encoder
lzma_stream_encoder_mt
lzma_stream_encoder
lzma_easy_encoder
lzma_index_decoder
lzma_raw_decoder
lzma_raw_encoder
lzma_memlimit_set
lzma_memlimit_get
lzma_memusage
lzma_get_progress
lzma_end
lzma_code
lzma_easy_decoder_memusage
lzma_easy_encoder_memusage
lzma_mode_is_supported
lzma_mf_is_supported
lzma_raw_decoder_memusage
lzma_raw_encoder_memusage
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_crc32
lzma_check_size
lzma_check_is_supported
lzma_version_string
lzma_version_number
lzma_lzma_preset
lzma_filters_update

Exports

Exports

_register_lzma_native_

Sections

.text
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/electron.napi.node
.dll windows:6 windows x64 arch:x64

b0cc2d876678e554e432555c141be239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\lzma-native\lzma-native\build\Release\lzma_native.pdb

Imports

kernel32

GetModuleHandleA
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
CreateFileW
CloseHandle
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
OutputDebugStringW
WriteFile
HeapAlloc
HeapFree
GetCurrentThread
ExitProcess
WriteConsoleW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
RtlUnwind

liblzma

lzma_index_cat
lzma_index_uncompressed_size
lzma_index_file_size
lzma_index_total_size
lzma_index_block_count
lzma_index_stream_count
lzma_index_stream_padding
lzma_index_checks
lzma_index_stream_flags
lzma_index_end
lzma_index_memused
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_header_decode
lzma_cputhreads
lzma_alone_decoder
lzma_auto_decoder
lzma_stream_decoder
lzma_alone_encoder
lzma_stream_encoder_mt
lzma_stream_encoder
lzma_easy_encoder
lzma_index_decoder
lzma_raw_decoder
lzma_raw_encoder
lzma_memlimit_set
lzma_memlimit_get
lzma_memusage
lzma_get_progress
lzma_end
lzma_code
lzma_easy_decoder_memusage
lzma_easy_encoder_memusage
lzma_mode_is_supported
lzma_mf_is_supported
lzma_raw_decoder_memusage
lzma_raw_encoder_memusage
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_crc32
lzma_check_size
lzma_check_is_supported
lzma_version_string
lzma_version_number
lzma_lzma_preset
lzma_filters_update

Exports

Exports

_register_lzma_native_

Sections

.text
Size: 626KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/liblzma.dll
.dll windows:4 windows x64 arch:x64

d9a26efff0c7d4c7d938a91b5cf0e552

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalMemoryStatus
InitializeConditionVariable
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeConditionVariable

msvcrt

__dllonexit
__iob_func
_amsg_exit
_beginthreadex
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcmp
memcpy
memmove
memset
signal
strlen
strncmp
vfprintf

Exports

Exports

lzma_alone_decoder
lzma_alone_encoder
lzma_auto_decoder
lzma_block_buffer_bound
lzma_block_buffer_decode
lzma_block_buffer_encode
lzma_block_compressed_size
lzma_block_decoder
lzma_block_encoder
lzma_block_header_decode
lzma_block_header_encode
lzma_block_header_size
lzma_block_total_size
lzma_block_uncomp_encode
lzma_block_unpadded_size
lzma_check_is_supported
lzma_check_size
lzma_code
lzma_cputhreads
lzma_crc32
lzma_crc64
lzma_easy_buffer_encode
lzma_easy_decoder_memusage
lzma_easy_encoder
lzma_easy_encoder_memusage
lzma_end
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_filter_flags_decode
lzma_filter_flags_encode
lzma_filter_flags_size
lzma_filters_copy
lzma_filters_update
lzma_get_check
lzma_get_progress
lzma_index_append
lzma_index_block_count
lzma_index_buffer_decode
lzma_index_buffer_encode
lzma_index_cat
lzma_index_checks
lzma_index_decoder
lzma_index_dup
lzma_index_encoder
lzma_index_end
lzma_index_file_size
lzma_index_hash_append
lzma_index_hash_decode
lzma_index_hash_end
lzma_index_hash_init
lzma_index_hash_size
lzma_index_init
lzma_index_iter_init
lzma_index_iter_locate
lzma_index_iter_next
lzma_index_iter_rewind
lzma_index_memusage
lzma_index_memused
lzma_index_size
lzma_index_stream_count
lzma_index_stream_flags
lzma_index_stream_padding
lzma_index_stream_size
lzma_index_total_size
lzma_index_uncompressed_size
lzma_lzma_preset
lzma_memlimit_get
lzma_memlimit_set
lzma_memusage
lzma_mf_is_supported
lzma_mode_is_supported
lzma_physmem
lzma_properties_decode
lzma_properties_encode
lzma_properties_size
lzma_raw_buffer_decode
lzma_raw_buffer_encode
lzma_raw_decoder
lzma_raw_decoder_memusage
lzma_raw_encoder
lzma_raw_encoder_memusage
lzma_stream_buffer_bound
lzma_stream_buffer_decode
lzma_stream_buffer_encode
lzma_stream_decoder
lzma_stream_encoder
lzma_stream_encoder_mt
lzma_stream_encoder_mt_memusage
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_footer_encode
lzma_stream_header_decode
lzma_stream_header_encode
lzma_version_number
lzma_version_string
lzma_vli_decode
lzma_vli_encode
lzma_vli_size

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/prebuilds/win32-x64/node.napi.node
.dll windows:6 windows x64 arch:x64

b0cc2d876678e554e432555c141be239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\lzma-native\lzma-native\build\Release\lzma_native.pdb

Imports

kernel32

GetModuleHandleA
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
CreateFileW
CloseHandle
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
OutputDebugStringW
WriteFile
HeapAlloc
HeapFree
GetCurrentThread
ExitProcess
WriteConsoleW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
RtlUnwind

liblzma

lzma_index_cat
lzma_index_uncompressed_size
lzma_index_file_size
lzma_index_total_size
lzma_index_block_count
lzma_index_stream_count
lzma_index_stream_padding
lzma_index_checks
lzma_index_stream_flags
lzma_index_end
lzma_index_memused
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_header_decode
lzma_cputhreads
lzma_alone_decoder
lzma_auto_decoder
lzma_stream_decoder
lzma_alone_encoder
lzma_stream_encoder_mt
lzma_stream_encoder
lzma_easy_encoder
lzma_index_decoder
lzma_raw_decoder
lzma_raw_encoder
lzma_memlimit_set
lzma_memlimit_get
lzma_memusage
lzma_get_progress
lzma_end
lzma_code
lzma_easy_decoder_memusage
lzma_easy_encoder_memusage
lzma_mode_is_supported
lzma_mf_is_supported
lzma_raw_decoder_memusage
lzma_raw_encoder_memusage
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_crc32
lzma_check_size
lzma_check_is_supported
lzma_version_string
lzma_version_number
lzma_lzma_preset
lzma_filters_update

Exports

Exports

_register_lzma_native_

Sections

.text
Size: 626KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/app.asar.unpacked/node_modules/lzma-native/src/filter-array.cpp
resources/app.asar.unpacked/node_modules/lzma-native/src/index-parser.cpp
resources/app.asar.unpacked/node_modules/lzma-native/src/index-parser.h
resources/app.asar.unpacked/node_modules/lzma-native/src/liblzma-functions.cpp
resources/app.asar.unpacked/node_modules/lzma-native/src/liblzma-node.hpp
resources/app.asar.unpacked/node_modules/lzma-native/src/lzma-stream.cpp
resources/app.asar.unpacked/node_modules/lzma-native/src/module.cpp
resources/app.asar.unpacked/node_modules/lzma-native/src/mt-options.cpp
resources/app.asar.unpacked/node_modules/lzma-native/src/util.cpp
resources/binaries/PinManager.exe
.exe windows:6 windows x64 arch:x64

8dc2240754ccd3bf71c75285f92dbc91

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b3:21:ed:7c:0d:34:d6:7d:cb:9a:c6:e0:a6:fe:0e:b8:ff:bc:42:cc:27:2e:80:e5:b6:14:54:b9:37:70:37:32
Signer

Actual PE Digest

b3:21:ed:7c:0d:34:d6:7d:cb:9a:c6:e0:a6:fe:0e:b8:ff:bc:42:cc:27:2e:80:e5:b6:14:54:b9:37:70:37:32

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\NaderSl\source\repos\TaskbarPin\x64\Release\PinManager.pdb

Imports

shell32

ord190
ord155

ole32

CoUninitialize
CoInitialize
CoCreateInstance

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_message@std@@YAKKPEADK@Z
?uncaught_exception@std@@YA_NXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__current_exception_context
__current_exception
__C_specific_handler
__CxxFrameHandler3
__std_terminate
__std_exception_copy
__std_exception_destroy
memcpy
memmove
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

_callnewh
free
_set_new_mode
malloc

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_thread_local_exe_atexit_callback
_cexit
__p___wargv
__p___argc
exit
_exit
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_register_onexit_function
_c_exit
_invalid_parameter_noinfo_noreturn
terminate
_initterm_e

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
___lc_codepage_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

kernel32

CreateFileW
IsDebuggerPresent
AreFileApisANSI
CloseHandle
GetLastError
SetLastError
GetModuleHandleW
GetProcAddress
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
FindClose
InitializeSListHead

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/apex-internal.dll
.dll windows:6 windows x64 arch:x64

022bf19d23da797706989bd1924d7476

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

77:77:ed:1d:28:5b:9a:61:1a:15:b8:53:d9:f1:22:2e:53:d0:00:b1:2f:fa:67:7a:86:8a:b5:57:2c:c4:28:d1
Signer

Actual PE Digest

77:77:ed:1d:28:5b:9a:61:1a:15:b8:53:d9:f1:22:2e:53:d0:00:b1:2f:fa:67:7a:86:8a:b5:57:2c:c4:28:d1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\blitz-core\build_x64\Release\apex-internal.pdb

Imports

kernel32

WaitForSingleObject
GetCurrentProcessId
CreateThread
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryW
GetCurrentThreadId
WideCharToMultiByte
GetPrivateProfileIntW
CreateToolhelp32Snapshot
CreateEventW
VirtualProtect
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
SetEvent
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
Sleep
HeapReAlloc
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
CreateSemaphoreW
GetModuleHandleW
OpenFileMappingW
MapViewOfFile
HeapSize
RtlCaptureContext
CreateFileW
GetDriveTypeW
WriteFile
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GlobalMemoryStatusEx
GetLocalTime
GetComputerNameA
K32GetProcessMemoryInfo
FreeLibrary
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
ReadFile
ExitThread
LoadLibraryExW
TlsFree
MultiByteToWideChar
VirtualQuery
ReleaseSemaphore
GetProcAddress
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
CreateFileMappingW
GetModuleHandleA
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
WriteConsoleW
RtlUnwind
UnmapViewOfFile
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
SwitchToThread
FormatMessageA
LocalFree
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
ReleaseSRWLockShared
AcquireSRWLockShared
RtlPcToFileHeader
GetModuleHandleExW
IsProcessorFeaturePresent
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
InitializeCriticalSectionAndSpinCount
ResetEvent
InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter

user32

GetForegroundWindow
MessageBoxW
GetWindowThreadProcessId
IsWindow
CallWindowProcW
GetCapture
IsWindowVisible
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
IsChild
UnhookWindowsHookEx
DestroyWindow
CreateWindowExA
GetClientRect
WindowFromDC
SetWindowsHookExW
SetWindowLongPtrW
CallNextHookEx

shell32

SHGetSpecialFolderPathW

d3dcompiler_47

D3DCompile

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameA

Exports

Exports

msg_hook_proc_ov

Sections

.text
Size: 1007KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/blitz-overlay.dll
.dll windows:6 windows x86 arch:x86

5e5d6445ebc4caa7b401429d146d0b67

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

8c:bc:d1:4d:a9:f9:00:16:d6:af:e4:c5:59:5d:f1:25:bf:69:68:b3:54:bb:88:a3:96:d7:73:11:71:ce:0c:a5
Signer

Actual PE Digest

8c:bc:d1:4d:a9:f9:00:16:d6:af:e4:c5:59:5d:f1:25:bf:69:68:b3:54:bb:88:a3:96:d7:73:11:71:ce:0c:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\my\blitzdev\blitz-core2\build_Win32\Release\blitz-overlay.pdb

Imports

kernel32

GetModuleFileNameW
LoadLibraryW
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
CloseHandle
GetLastError
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
GetTickCount64
GetPrivateProfileIntW
CreateToolhelp32Snapshot
SetEvent
CreateEventW
WaitForMultipleObjects
VirtualProtect
InitOnceExecuteOnce
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
Sleep
HeapReAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
DisableThreadLibraryCalls
ReleaseSemaphore
CreateSemaphoreW
GetModuleHandleW
OpenFileMappingW
WriteConsoleW
GetDriveTypeW
WriteFile
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GlobalMemoryStatusEx
GetSystemInfo
GetLocalTime
GetComputerNameA
K32GetProcessMemoryInfo
FreeLibrary
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
ReadFile
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
InitializeSListHead
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CreateThread
MultiByteToWideChar
GetProcAddress
GetCommandLineA
CompareStringEx
HeapSize
SetStdHandle
GetStringTypeW
CreateFileMappingW
GetModuleHandleA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetACP
GetOEMCP
CreateFileW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
LocalFree
FormatMessageA
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
GetTempPathW
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetModuleHandleExW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx

user32

LoadCursorW
SetCursorPos
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
GetClientRect
WindowFromDC
GetForegroundWindow
DefRawInputProc
GetRawInputBuffer
GetRawInputData
GetCursorInfo
SetCursor
ShowCursor
SetWindowLongW
GetAsyncKeyState
IsWindowVisible
IsWindow
CallWindowProcW
LoadImageW
ScreenToClient
ClientToScreen
GetCursorPos
FindWindowA
CallNextHookEx
MessageBoxW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance
PropVariantClear

d3dcompiler_47

D3DCompile

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameA

Exports

Exports

_msg_hook_proc_ov@12

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/blitz_core.node
.dll windows:6 windows x86 arch:x86

a0ffd600bbd2357a61f7638c987f12c5

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

56:69:d9:03:58:8e:9f:b8:ef:ab:7a:e8:b6:d4:0d:e7:f1:db:f1:f4:d7:83:a9:83:fa:ba:3d:35:8f:89:46:10
Signer

Actual PE Digest

56:69:d9:03:58:8e:9f:b8:ef:ab:7a:e8:b6:d4:0d:e7:f1:db:f1:f4:d7:83:a9:83:fa:ba:3d:35:8f:89:46:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\my\blitzdev\blitz-core2\build_Win32\Release\blitz_core.pdb

Imports

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

ntdll

NtQueryInformationProcess
VerSetConditionMask
RtlUnwind

psapi

EnumProcesses

ws2_32

ntohs

iphlpapi

GetExtendedTcpTable

kernel32

ConnectNamedPipe
DisconnectNamedPipe
CancelSynchronousIo
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetCurrentProcess
GetCurrentProcessId
OpenProcess
ReadProcessMemory
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetModuleHandleExA
GetProcAddress
LoadLibraryA
CreateFileMappingA
QueryFullProcessImageNameW
CreateNamedPipeA
GetComputerNameA
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateRemoteThread
OpenThread
GetThreadTimes
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
GetModuleHandleA
LoadLibraryW
lstrlenW
Thread32First
Thread32Next
Sleep
SetEvent
CreateEventA
CreateThread
ReleaseSemaphore
GetVolumeInformationA
VirtualQuery
CreateFileMappingW
GetLastError
CreateFileW
GetDriveTypeW
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentThreadId
GlobalMemoryStatusEx
GetSystemInfo
GetLocalTime
K32GetProcessMemoryInfo
GetThreadContext
FreeLibrary
SetConsoleCtrlHandler
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
GetStdHandle
EnumSystemLocalesW
CloseHandle
CheckRemoteDebuggerPresent
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
HeapReAlloc
WriteFile
ReadFile
FlushFileBuffers
GetModuleHandleW
OpenFileMappingW
IsDebuggerPresent
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
ExitProcess
CreateSemaphoreW
HeapFree
VirtualProtect
TlsFree
LoadLibraryExA
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
FormatMessageA
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
GetStringTypeW
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
GetLocaleInfoEx
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateEventW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
HeapAlloc

user32

wsprintfW
GetDC
GetWindowRect
ReleaseDC
GetClientRect
UnhookWindowsHookEx
GetWindowThreadProcessId
PostThreadMessageA
MonitorFromWindow
FindWindowW
GetWindowLongA
IsWindowVisible

gdi32

GetDeviceCaps

shell32

SHGetFolderPathW

ole32

CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear
VariantChangeType

advapi32

RegEnumKeyExW
GetTokenInformation
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetUserNameA
OpenProcessToken

crypt32

CertFindCertificateInStore
CertFreeCertificateContext
CertVerifyTimeValidity
CryptQueryObject
CertCloseStore
CryptMsgClose

Exports

Exports

_register_blitz_core_
argon2_ctx
argon2_encodedlen
argon2_error_message
argon2_hash
argon2_type2string
argon2_verify
argon2_verify_ctx
argon2d_ctx
argon2d_hash_encoded
argon2d_hash_raw
argon2d_verify
argon2d_verify_ctx
argon2i_ctx
argon2i_hash_encoded
argon2i_hash_raw
argon2i_verify
argon2i_verify_ctx
argon2id_ctx
argon2id_hash_encoded
argon2id_hash_raw
argon2id_verify
argon2id_verify_ctx

Sections

.text
Size: 553KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/fortnite-internal.dll
.dll windows:6 windows x64 arch:x64

00e3faaf23594047cc0c7999437b8ebc

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

f9:a0:e2:72:cb:2b:42:28:d1:ea:54:7b:57:be:99:c8:42:b5:ad:c4:bf:d1:8f:16:ea:31:3c:a6:85:52:bd:2a
Signer

Actual PE Digest

f9:a0:e2:72:cb:2b:42:28:d1:ea:54:7b:57:be:99:c8:42:b5:ad:c4:bf:d1:8f:16:ea:31:3c:a6:85:52:bd:2a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\blitz-core\build_x64\Release\fortnite-internal.pdb

Imports

kernel32

GetModuleFileNameW
LoadLibraryW
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
GetLastError
GetPrivateProfileIntW
CloseHandle
WaitForSingleObject
CreateEventW
VirtualProtect
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
CreateToolhelp32Snapshot
SetEvent
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
Sleep
HeapReAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
CreateSemaphoreW
CreateFileMappingW
DisableThreadLibraryCalls
MapViewOfFile
UnmapViewOfFile
GetModuleHandleA
CreateFileW
HeapSize
WriteFile
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GlobalMemoryStatusEx
GetLocalTime
GetComputerNameA
K32GetProcessMemoryInfo
FreeLibrary
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
ReadFile
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
MultiByteToWideChar
GetProcAddress
OpenFileMappingW
GetModuleHandleW
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
RtlCaptureContext
CreateThread
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
ResetEvent
RtlUnwind
WriteConsoleW
GetDriveTypeW
WaitForSingleObjectEx
SwitchToThread
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
LocalFree
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
RtlPcToFileHeader
GetModuleHandleExW
IsProcessorFeaturePresent
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount

user32

MessageBoxW
FindWindowA
CallNextHookEx
IsWindowVisible
IsWindow
DestroyWindow
GetAsyncKeyState
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
SetWindowLongPtrW
CreateWindowExA
GetClientRect
WindowFromDC
GetForegroundWindow
DefRawInputProc
GetRawInputBuffer
GetRawInputData
SetCursor
ShowCursor
SetWindowsHookExW
GetWindowThreadProcessId
CallWindowProcW

shell32

SHGetSpecialFolderPathW

d3dcompiler_47

D3DCompile

advapi32

GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

??0BinaryReader@CppUtilities@@QEAA@AEBV01@@Z
??0BinaryReader@CppUtilities@@QEAA@PEAV?$basic_istream@DU?$char_traits@D@std@@@std@@W4Endianess@@_N@Z
??0ConversionException@CppUtilities@@QEAA@AEBV01@@Z
??0ConversionException@CppUtilities@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ConversionException@CppUtilities@@QEAA@PEBD@Z
??0ConversionException@CppUtilities@@QEAA@XZ
??1BinaryReader@CppUtilities@@QEAA@XZ
??1ConversionException@CppUtilities@@UEAA@XZ
??4ConversionException@CppUtilities@@QEAAAEAV01@AEBV01@@Z
??_7ConversionException@CppUtilities@@6B@
?bufferVariableLengthInteger@BinaryReader@CppUtilities@@AEAAXXZ
?canRead@BinaryReader@CppUtilities@@QEBA_NXZ
?clear@BinaryReader@CppUtilities@@QEBA_NH_N@Z
?computeCrc32@BinaryReader@CppUtilities@@SAIPEBD_K@Z
?crc32Table@BinaryReader@CppUtilities@@2QBIB
?detatchOwnership@BinaryReader@CppUtilities@@QEAAXXZ
?eof@BinaryReader@CppUtilities@@QEBA_NXZ
?fail@BinaryReader@CppUtilities@@QEBA_NXZ
?gcount@BinaryReader@CppUtilities@@QEBA_JXZ
?getBytes24@BE@CppUtilities@@YAXIPEAD@Z
?getBytes24@LE@CppUtilities@@YAXIPEAD@Z
?getBytes@BE@CppUtilities@@YAXFPEAD@Z
?getBytes@BE@CppUtilities@@YAXGPEAD@Z
?getBytes@BE@CppUtilities@@YAXHPEAD@Z
?getBytes@BE@CppUtilities@@YAXIPEAD@Z
?getBytes@BE@CppUtilities@@YAXMPEAD@Z
?getBytes@BE@CppUtilities@@YAXNPEAD@Z
?getBytes@BE@CppUtilities@@YAX_JPEAD@Z
?getBytes@BE@CppUtilities@@YAX_KPEAD@Z
?getBytes@LE@CppUtilities@@YAXFPEAD@Z
?getBytes@LE@CppUtilities@@YAXGPEAD@Z
?getBytes@LE@CppUtilities@@YAXHPEAD@Z
?getBytes@LE@CppUtilities@@YAXIPEAD@Z
?getBytes@LE@CppUtilities@@YAXMPEAD@Z
?getBytes@LE@CppUtilities@@YAXNPEAD@Z
?getBytes@LE@CppUtilities@@YAX_JPEAD@Z
?getBytes@LE@CppUtilities@@YAX_KPEAD@Z
?giveOwnership@BinaryReader@CppUtilities@@QEAAXXZ
?hasOwnership@BinaryReader@CppUtilities@@QEBA_NXZ
?ignore@BinaryReader@CppUtilities@@QEBA_N_JH@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAD@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAE@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAF@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAG@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAH@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAI@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAM@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAN@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAV?$vector@DV?$allocator@D@std@@@std@@_J@Z
?read@BinaryReader@CppUtilities@@QEAAXAEAV?$vector@EV?$allocator@E@std@@@std@@_J@Z
?read@BinaryReader@CppUtilities@@QEAAXAEA_J@Z
?read@BinaryReader@CppUtilities@@QEAAXAEA_K@Z
?read@BinaryReader@CppUtilities@@QEAAXAEA_N@Z
?read@BinaryReader@CppUtilities@@QEAAXPEAD_J@Z
?read@BinaryReader@CppUtilities@@QEAAXPEAE_J@Z
?readBool@BinaryReader@CppUtilities@@QEAA_NXZ
?readByte@BinaryReader@CppUtilities@@QEAAEXZ
?readChar@BinaryReader@CppUtilities@@QEAADXZ
?readCrc32@BinaryReader@CppUtilities@@QEAAI_K@Z
?readFixed16BE@BinaryReader@CppUtilities@@QEAAMXZ
?readFixed16LE@BinaryReader@CppUtilities@@QEAAMXZ
?readFixed8BE@BinaryReader@CppUtilities@@QEAAMXZ
?readFixed8LE@BinaryReader@CppUtilities@@QEAAMXZ
?readFloat32BE@BinaryReader@CppUtilities@@QEAAMXZ
?readFloat32LE@BinaryReader@CppUtilities@@QEAAMXZ
?readFloat64BE@BinaryReader@CppUtilities@@QEAANXZ
?readFloat64LE@BinaryReader@CppUtilities@@QEAANXZ
?readInt16BE@BinaryReader@CppUtilities@@QEAAFXZ
?readInt16LE@BinaryReader@CppUtilities@@QEAAFXZ
?readInt24BE@BinaryReader@CppUtilities@@QEAAHXZ
?readInt24LE@BinaryReader@CppUtilities@@QEAAHXZ
?readInt32BE@BinaryReader@CppUtilities@@QEAAHXZ
?readInt32LE@BinaryReader@CppUtilities@@QEAAHXZ
?readInt40BE@BinaryReader@CppUtilities@@QEAA_JXZ
?readInt40LE@BinaryReader@CppUtilities@@QEAA_JXZ
?readInt56BE@BinaryReader@CppUtilities@@QEAA_JXZ
?readInt56LE@BinaryReader@CppUtilities@@QEAA_JXZ
?readInt64BE@BinaryReader@CppUtilities@@QEAA_JXZ
?readInt64LE@BinaryReader@CppUtilities@@QEAA_JXZ
?readLengthPrefixedString@BinaryReader@CppUtilities@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?readRemainingBytes@BinaryReader@CppUtilities@@QEAA?AV?$fpos@U_Mbstatet@@@std@@XZ
?readStreamsize@BinaryReader@CppUtilities@@QEAA?AV?$fpos@U_Mbstatet@@@std@@XZ
?readString@BinaryReader@CppUtilities@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z
?readSynchsafeUInt32BE@BinaryReader@CppUtilities@@QEAAIXZ
?readSynchsafeUInt32LE@BinaryReader@CppUtilities@@QEAAIXZ
?readTerminatedString@BinaryReader@CppUtilities@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@E@Z
?readTerminatedString@BinaryReader@CppUtilities@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_KE@Z
?readUInt16BE@BinaryReader@CppUtilities@@QEAAGXZ
?readUInt16LE@BinaryReader@CppUtilities@@QEAAGXZ
?readUInt24BE@BinaryReader@CppUtilities@@QEAAIXZ
?readUInt24LE@BinaryReader@CppUtilities@@QEAAIXZ
?readUInt32BE@BinaryReader@CppUtilities@@QEAAIXZ
?readUInt32LE@BinaryReader@CppUtilities@@QEAAIXZ
?readUInt40BE@BinaryReader@CppUtilities@@QEAA_KXZ
?readUInt40LE@BinaryReader@CppUtilities@@QEAA_KXZ
?readUInt56BE@BinaryReader@CppUtilities@@QEAA_KXZ
?readUInt56LE@BinaryReader@CppUtilities@@QEAA_KXZ
?readUInt64BE@BinaryReader@CppUtilities@@QEAA_KXZ
?readUInt64LE@BinaryReader@CppUtilities@@QEAA_KXZ
?readVariableLengthUIntBE@BinaryReader@CppUtilities@@QEAA_KXZ
?readVariableLengthUIntLE@BinaryReader@CppUtilities@@QEAA_KXZ
?readWString@BinaryReader@CppUtilities@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_K@Z
?seekg@BinaryReader@CppUtilities@@QEBA_NV?$fpos@U_Mbstatet@@@std@@@Z
?seekg@BinaryReader@CppUtilities@@QEBA_N_JH@Z
?setStream@BinaryReader@CppUtilities@@QEAAXPEAV?$basic_istream@DU?$char_traits@D@std@@@std@@_N@Z
?stream@BinaryReader@CppUtilities@@QEAAPEAV?$basic_istream@DU?$char_traits@D@std@@@std@@XZ
?stream@BinaryReader@CppUtilities@@QEBAPEBV?$basic_istream@DU?$char_traits@D@std@@@std@@XZ
?swapOrder@CppUtilities@@YAGG@Z
?swapOrder@CppUtilities@@YAII@Z
?swapOrder@CppUtilities@@YA_K_K@Z
?tellg@BinaryReader@CppUtilities@@QEBA?AV?$fpos@U_Mbstatet@@@std@@XZ
?toFixed16@CppUtilities@@YAIM@Z
?toFixed8@CppUtilities@@YAGM@Z
?toFloat32@BE@CppUtilities@@YAMPEBD@Z
?toFloat32@CppUtilities@@YAMG@Z
?toFloat32@CppUtilities@@YAMI@Z
?toFloat32@LE@CppUtilities@@YAMPEBD@Z
?toFloat64@BE@CppUtilities@@YANPEBD@Z
?toFloat64@LE@CppUtilities@@YANPEBD@Z
?toInt16@BE@CppUtilities@@YAFPEBD@Z
?toInt16@LE@CppUtilities@@YAFPEBD@Z
?toInt32@BE@CppUtilities@@YAHPEBD@Z
?toInt32@LE@CppUtilities@@YAHPEBD@Z
?toInt64@BE@CppUtilities@@YA_JPEBD@Z
?toInt64@LE@CppUtilities@@YA_JPEBD@Z
?toNormalInt@CppUtilities@@YAII@Z
?toSynchsafeInt@CppUtilities@@YAII@Z
?toUInt16@BE@CppUtilities@@YAGPEBD@Z
?toUInt16@LE@CppUtilities@@YAGPEBD@Z
?toUInt24@BE@CppUtilities@@YAIPEBD@Z
?toUInt24@LE@CppUtilities@@YAIPEBD@Z
?toUInt32@BE@CppUtilities@@YAIPEBD@Z
?toUInt32@LE@CppUtilities@@YAIPEBD@Z
?toUInt64@BE@CppUtilities@@YA_KPEBD@Z
?toUInt64@LE@CppUtilities@@YA_KPEBD@Z
msg_hook_proc_ov

Sections

.text
Size: 841KB - Virtual size: 841KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/fortnite_napi.node
.dll windows:6 windows x86 arch:x86

e25c091afcab9def70213238fe89f593

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ef:b1:31:33:73:89:14:f7:e8:63:54:53:c1:92:8b:7a:6a:05:fb:a0:b7:0c:73:61:cf:b4:41:55:06:5b:88:fb
Signer

Actual PE Digest

ef:b1:31:33:73:89:14:f7:e8:63:54:53:c1:92:8b:7a:6a:05:fb:a0:b7:0c:73:61:cf:b4:41:55:06:5b:88:fb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\my\blitzdev\blitz-core2\build_Win32\Release\fortnite_napi.pdb

Imports

shell32

SHGetFolderPathW

kernel32

WriteConsoleW
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
HeapAlloc
HeapFree
GetProcessHeap
GetEnvironmentVariableA
GetFileAttributesA
GetSystemTimeAsFileTime
HeapSize
RaiseException
GetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
QueryPerformanceCounter
QueryPerformanceFrequency
LocalFree
FormatMessageA
CloseHandle
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetExitCodeThread
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
ReadConsoleW
HeapReAlloc
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle

Exports

Exports

??0BinaryReader@CppUtilities@@QAE@ABV01@@Z
??0BinaryReader@CppUtilities@@QAE@PAV?$basic_istream@DU?$char_traits@D@std@@@std@@W4Endianess@@_N@Z
??0BitReader@CppUtilities@@QAE@PBD0I@Z
??0BitReader@CppUtilities@@QAE@PBDII@Z
??0ConversionException@CppUtilities@@QAE@ABV01@@Z
??0ConversionException@CppUtilities@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ConversionException@CppUtilities@@QAE@PBD@Z
??0ConversionException@CppUtilities@@QAE@XZ
??1BinaryReader@CppUtilities@@QAE@XZ
??1ConversionException@CppUtilities@@UAE@XZ
??4BitReader@CppUtilities@@QAEAAV01@$$QAV01@@Z
??4BitReader@CppUtilities@@QAEAAV01@ABV01@@Z
??4ConversionException@CppUtilities@@QAEAAV01@ABV01@@Z
??_7ConversionException@CppUtilities@@6B@
?align@BitReader@CppUtilities@@QAEXXZ
?bitsAvailable@BitReader@CppUtilities@@QAEIXZ
?bufferVariableLengthInteger@BinaryReader@CppUtilities@@AAEXXZ
?canRead@BinaryReader@CppUtilities@@QBE_NXZ
?clear@BinaryReader@CppUtilities@@QBE_NH_N@Z
?computeCrc32@BinaryReader@CppUtilities@@SAIPBDI@Z
?crc32Table@BinaryReader@CppUtilities@@2QBIB
?detatchOwnership@BinaryReader@CppUtilities@@QAEXXZ
?eof@BinaryReader@CppUtilities@@QBE_NXZ
?fail@BinaryReader@CppUtilities@@QBE_NXZ
?gcount@BinaryReader@CppUtilities@@QBE_JXZ
?getBytes24@BE@CppUtilities@@YAXIPAD@Z
?getBytes24@LE@CppUtilities@@YAXIPAD@Z
?getBytes@BE@CppUtilities@@YAXFPAD@Z
?getBytes@BE@CppUtilities@@YAXGPAD@Z
?getBytes@BE@CppUtilities@@YAXHPAD@Z
?getBytes@BE@CppUtilities@@YAXIPAD@Z
?getBytes@BE@CppUtilities@@YAXMPAD@Z
?getBytes@BE@CppUtilities@@YAXNPAD@Z
?getBytes@BE@CppUtilities@@YAX_JPAD@Z
?getBytes@BE@CppUtilities@@YAX_KPAD@Z
?getBytes@LE@CppUtilities@@YAXFPAD@Z
?getBytes@LE@CppUtilities@@YAXGPAD@Z
?getBytes@LE@CppUtilities@@YAXHPAD@Z
?getBytes@LE@CppUtilities@@YAXIPAD@Z
?getBytes@LE@CppUtilities@@YAXMPAD@Z
?getBytes@LE@CppUtilities@@YAXNPAD@Z
?getBytes@LE@CppUtilities@@YAX_JPAD@Z
?getBytes@LE@CppUtilities@@YAX_KPAD@Z
?giveOwnership@BinaryReader@CppUtilities@@QAEXXZ
?hasOwnership@BinaryReader@CppUtilities@@QBE_NXZ
?ignore@BinaryReader@CppUtilities@@QBE_N_JH@Z
?read@BinaryReader@CppUtilities@@QAEXAAD@Z
?read@BinaryReader@CppUtilities@@QAEXAAE@Z
?read@BinaryReader@CppUtilities@@QAEXAAF@Z
?read@BinaryReader@CppUtilities@@QAEXAAG@Z
?read@BinaryReader@CppUtilities@@QAEXAAH@Z
?read@BinaryReader@CppUtilities@@QAEXAAI@Z
?read@BinaryReader@CppUtilities@@QAEXAAM@Z
?read@BinaryReader@CppUtilities@@QAEXAAN@Z
?read@BinaryReader@CppUtilities@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?read@BinaryReader@CppUtilities@@QAEXAAV?$vector@DV?$allocator@D@std@@@std@@_J@Z
?read@BinaryReader@CppUtilities@@QAEXAAV?$vector@EV?$allocator@E@std@@@std@@_J@Z
?read@BinaryReader@CppUtilities@@QAEXAA_J@Z
?read@BinaryReader@CppUtilities@@QAEXAA_K@Z
?read@BinaryReader@CppUtilities@@QAEXAA_N@Z
?read@BinaryReader@CppUtilities@@QAEXPAD_J@Z
?read@BinaryReader@CppUtilities@@QAEXPAE_J@Z
?readBit@BitReader@CppUtilities@@QAEEXZ
?readBool@BinaryReader@CppUtilities@@QAE_NXZ
?readByte@BinaryReader@CppUtilities@@QAEEXZ
?readChar@BinaryReader@CppUtilities@@QAEDXZ
?readCrc32@BinaryReader@CppUtilities@@QAEII@Z
?readFixed16BE@BinaryReader@CppUtilities@@QAEMXZ
?readFixed16LE@BinaryReader@CppUtilities@@QAEMXZ
?readFixed8BE@BinaryReader@CppUtilities@@QAEMXZ
?readFixed8LE@BinaryReader@CppUtilities@@QAEMXZ
?readFloat32BE@BinaryReader@CppUtilities@@QAEMXZ
?readFloat32LE@BinaryReader@CppUtilities@@QAEMXZ
?readFloat64BE@BinaryReader@CppUtilities@@QAENXZ
?readFloat64LE@BinaryReader@CppUtilities@@QAENXZ
?readInt16BE@BinaryReader@CppUtilities@@QAEFXZ
?readInt16LE@BinaryReader@CppUtilities@@QAEFXZ
?readInt24BE@BinaryReader@CppUtilities@@QAEHXZ
?readInt24LE@BinaryReader@CppUtilities@@QAEHXZ
?readInt32BE@BinaryReader@CppUtilities@@QAEHXZ
?readInt32LE@BinaryReader@CppUtilities@@QAEHXZ
?readInt40BE@BinaryReader@CppUtilities@@QAE_JXZ
?readInt40LE@BinaryReader@CppUtilities@@QAE_JXZ
?readInt56BE@BinaryReader@CppUtilities@@QAE_JXZ
?readInt56LE@BinaryReader@CppUtilities@@QAE_JXZ
?readInt64BE@BinaryReader@CppUtilities@@QAE_JXZ
?readInt64LE@BinaryReader@CppUtilities@@QAE_JXZ
?readLengthPrefixedString@BinaryReader@CppUtilities@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?readRemainingBytes@BinaryReader@CppUtilities@@QAE?AV?$fpos@U_Mbstatet@@@std@@XZ
?readStreamsize@BinaryReader@CppUtilities@@QAE?AV?$fpos@U_Mbstatet@@@std@@XZ
?readString@BinaryReader@CppUtilities@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?readSynchsafeUInt32BE@BinaryReader@CppUtilities@@QAEIXZ
?readSynchsafeUInt32LE@BinaryReader@CppUtilities@@QAEIXZ
?readTerminatedString@BinaryReader@CppUtilities@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@E@Z
?readTerminatedString@BinaryReader@CppUtilities@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IE@Z
?readUInt16BE@BinaryReader@CppUtilities@@QAEGXZ
?readUInt16LE@BinaryReader@CppUtilities@@QAEGXZ
?readUInt24BE@BinaryReader@CppUtilities@@QAEIXZ
?readUInt24LE@BinaryReader@CppUtilities@@QAEIXZ
?readUInt32BE@BinaryReader@CppUtilities@@QAEIXZ
?readUInt32LE@BinaryReader@CppUtilities@@QAEIXZ
?readUInt40BE@BinaryReader@CppUtilities@@QAE_KXZ
?readUInt40LE@BinaryReader@CppUtilities@@QAE_KXZ
?readUInt56BE@BinaryReader@CppUtilities@@QAE_KXZ
?readUInt56LE@BinaryReader@CppUtilities@@QAE_KXZ
?readUInt64BE@BinaryReader@CppUtilities@@QAE_KXZ
?readUInt64LE@BinaryReader@CppUtilities@@QAE_KXZ
?readVariableLengthUIntBE@BinaryReader@CppUtilities@@QAE_KXZ
?readVariableLengthUIntLE@BinaryReader@CppUtilities@@QAE_KXZ
?readWString@BinaryReader@CppUtilities@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
?reset@BitReader@CppUtilities@@QAEXPBD0I@Z
?reset@BitReader@CppUtilities@@QAEXPBDII@Z
?seekg@BinaryReader@CppUtilities@@QBE_NV?$fpos@U_Mbstatet@@@std@@@Z
?seekg@BinaryReader@CppUtilities@@QBE_N_JH@Z
?setStream@BinaryReader@CppUtilities@@QAEXPAV?$basic_istream@DU?$char_traits@D@std@@@std@@_N@Z
?skipBits@BitReader@CppUtilities@@QAEXI@Z
?stream@BinaryReader@CppUtilities@@QAEPAV?$basic_istream@DU?$char_traits@D@std@@@std@@XZ
?stream@BinaryReader@CppUtilities@@QBEPBV?$basic_istream@DU?$char_traits@D@std@@@std@@XZ
?swapOrder@CppUtilities@@YAGG@Z
?swapOrder@CppUtilities@@YAII@Z
?swapOrder@CppUtilities@@YA_K_K@Z
?tellg@BinaryReader@CppUtilities@@QBE?AV?$fpos@U_Mbstatet@@@std@@XZ
?toFixed16@CppUtilities@@YAIM@Z
?toFixed8@CppUtilities@@YAGM@Z
?toFloat32@BE@CppUtilities@@YAMPBD@Z
?toFloat32@CppUtilities@@YAMG@Z
?toFloat32@CppUtilities@@YAMI@Z
?toFloat32@LE@CppUtilities@@YAMPBD@Z
?toFloat64@BE@CppUtilities@@YANPBD@Z
?toFloat64@LE@CppUtilities@@YANPBD@Z
?toInt16@BE@CppUtilities@@YAFPBD@Z
?toInt16@LE@CppUtilities@@YAFPBD@Z
?toInt32@BE@CppUtilities@@YAHPBD@Z
?toInt32@LE@CppUtilities@@YAHPBD@Z
?toInt64@BE@CppUtilities@@YA_JPBD@Z
?toInt64@LE@CppUtilities@@YA_JPBD@Z
?toNormalInt@CppUtilities@@YAII@Z
?toSynchsafeInt@CppUtilities@@YAII@Z
?toUInt16@BE@CppUtilities@@YAGPBD@Z
?toUInt16@LE@CppUtilities@@YAGPBD@Z
?toUInt24@BE@CppUtilities@@YAIPBD@Z
?toUInt24@LE@CppUtilities@@YAIPBD@Z
?toUInt32@BE@CppUtilities@@YAIPBD@Z
?toUInt32@LE@CppUtilities@@YAIPBD@Z
?toUInt64@BE@CppUtilities@@YA_KPBD@Z
?toUInt64@LE@CppUtilities@@YA_KPBD@Z
_register_fortnite_napi_

Sections

.text
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/index.node
.dll windows:6 windows x86 arch:x86

3bcd20aaa110cf8d973099ee85f2a399

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

42:23:03:c3:e8:cd:86:ad:91:bf:22:b5:77:07:4b:6e:0c:07:2b:2d:41:b9:7a:5e:82:b0:60:4f:f3:b6:16:ae
Signer

Actual PE Digest

42:23:03:c3:e8:cd:86:ad:91:bf:22:b5:77:07:4b:6e:0c:07:2b:2d:41:b9:7a:5e:82:b0:60:4f:f3:b6:16:ae

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Coding\blitz\blitz-core\lib\blitz-init\native\target\i686-pc-windows-msvc\release\deps\blitz_init.pdb

Imports

bcrypt

BCryptGenRandom

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TlsGetValue
IsDebuggerPresent
GetModuleHandleExW
ReleaseMutex
ReleaseSRWLockShared
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetStdHandle
TerminateProcess
TlsAlloc
AcquireSRWLockShared
CreateMutexA
GetModuleHandleW
GetModuleHandleA
GetConsoleMode
WriteConsoleW
InitializeSListHead
TlsSetValue
DisableThreadLibraryCalls
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
strrchr
memmove
memcmp
__CxxFrameHandler3
memcpy
memset

api-ms-win-crt-string-l1-1-0

strcspn
strncmp
strlen

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
_msize

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
_endthreadex
_initialize_onexit_table
_execute_onexit_table
_cexit
_initialize_narrow_environment
_beginthreadex

api-ms-win-crt-math-l1-1-0

_libm_sse2_log_precise

Exports

Exports

napi_register_module_v1

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/lor-overlay.dll
.dll windows:6 windows x64 arch:x64

257ad303be7288c4fee7f8c9c6d8839e

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

f6:c8:b9:18:b8:37:a7:e9:ea:22:7e:00:06:20:1e:94:4d:6f:86:81:8f:0e:06:78:c3:2d:80:81:7e:9e:59:d0
Signer

Actual PE Digest

f6:c8:b9:18:b8:37:a7:e9:ea:22:7e:00:06:20:1e:94:4d:6f:86:81:8f:0e:06:78:c3:2d:80:81:7e:9e:59:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\blitz-core\build_x64\Release\lor-overlay.pdb

Imports

kernel32

GetModuleFileNameW
LoadLibraryW
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
GetLastError
CloseHandle
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
GetPrivateProfileIntW
CreateEventW
VirtualProtect
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
CreateToolhelp32Snapshot
SetEvent
WaitForMultipleObjects
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
Sleep
HeapReAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
DisableThreadLibraryCalls
ReleaseSemaphore
CreateSemaphoreW
CreateFileMappingW
GetModuleHandleA
RtlCaptureContext
CreateFileW
GetDriveTypeW
WriteFile
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GlobalMemoryStatusEx
GetLocalTime
GetComputerNameA
K32GetProcessMemoryInfo
FreeLibrary
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
ReadFile
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
MultiByteToWideChar
GetProcAddress
QueryPerformanceFrequency
GetModuleHandleW
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
CreateThread
RtlUnwind
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
ResetEvent
HeapSize
WriteConsoleW
OpenFileMappingW
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
FormatMessageA
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
LocalFree
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
RtlPcToFileHeader
GetModuleHandleExW
IsProcessorFeaturePresent
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount

user32

IsWindow
MessageBoxW
CallNextHookEx
GetAsyncKeyState
IsWindowVisible
WindowFromDC
SetWindowLongPtrW
LoadCursorW
SetCursorPos
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
DestroyWindow
CreateWindowExA
GetClientRect
GetWindowThreadProcessId
GetForegroundWindow
LoadImageW
ScreenToClient
ClientToScreen
GetCursorPos
DefRawInputProc
GetRawInputBuffer
GetRawInputData
GetCursorInfo
SetCursor
ShowCursor
SetWindowsHookExW
CallWindowProcW

shell32

SHGetSpecialFolderPathW

d3dcompiler_47

D3DCompile

advapi32

GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

msg_hook_proc_ov

Sections

.text
Size: 997KB - Virtual size: 997KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/minecraft.dll
.dll windows:6 windows x64 arch:x64

4a9cae8d56b57aa1bed4aabc7ef3f14f

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

28:8d:a2:92:2d:ed:0d:77:dd:83:c0:c0:39:fc:ff:d1:ea:fb:cf:65:98:4d:07:ea:8b:c8:1c:fa:44:dc:49:a9
Signer

Actual PE Digest

28:8d:a2:92:2d:ed:0d:77:dd:83:c0:c0:39:fc:ff:d1:ea:fb:cf:65:98:4d:07:ea:8b:c8:1c:fa:44:dc:49:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\TSM\Documents\GitHub\blitz-core\build_x64\Release\minecraft.pdb

Imports

jvm

JNI_GetCreatedJavaVMs

kernel32

GetCommandLineA
GetCurrentProcessId
CreateThread
VirtualAlloc
DisableThreadLibraryCalls
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
AllocConsole
FreeConsole
SetConsoleTitleA
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
GetSystemInfo
VirtualQuery
MultiByteToWideChar
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
GetStringTypeW
SetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceFrequency
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
LCMapStringW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap

user32

GetWindowThreadProcessId
MessageBoxW
CallNextHookEx
GetAsyncKeyState
GetForegroundWindow

Exports

Exports

msg_hook_proc_ov

Sections

.text
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/safe_x64_injector.exe
.exe windows:6 windows x64 arch:x64

6f095ad0f28caa70e588a81f1aa241fd

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a5:10:ed:ec:84:33:64:7a:08:4e:56:1e:06:53:72:bd:cc:aa:c7:f0:1a:55:bf:46:77:d4:86:b9:88:25:92:97
Signer

Actual PE Digest

a5:10:ed:ec:84:33:64:7a:08:4e:56:1e:06:53:72:bd:cc:aa:c7:f0:1a:55:bf:46:77:d4:86:b9:88:25:92:97

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
GetLastError
Sleep
FreeLibrary
GetProcAddress
LoadLibraryExW
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
RtlUnwind

user32

GetWindowThreadProcessId
FindWindowW
PostThreadMessageA
SetWindowsHookExA
UnhookWindowsHookEx

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/safe_x86_injector.exe
.exe windows:6 windows x86 arch:x86

c812a687ffb0e3ba6b46826eec857837

Code Sign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:49:65:a6:82:a1:bc:bd:f0:0f:36:df:fe:81:5d:12:a0:3b:88:33:df:a4:e5:79:f2:50:e4:f6:02:ca:10:3e
Signer

Actual PE Digest

70:49:65:a6:82:a1:bc:bd:f0:0f:36:df:fe:81:5d:12:a0:3b:88:33:df:a4:e5:79:f2:50:e4:f6:02:ca:10:3e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetLastError
Sleep
FreeLibrary
GetProcAddress
LoadLibraryExW
SetEndOfFile
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
WriteConsoleW

user32

GetWindowThreadProcessId
FindWindowW
PostThreadMessageA
SetWindowsHookExA
UnhookWindowsHookEx

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/valorant-internal-old.dll
.dll windows:6 windows x64 arch:x64

987b2ac17540028fd883e693cd7cc9b3

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7c:68:b6:44:a6:e8:44:76:44:b8:5e:45:47:bb:6c:56:30:d4:cb:7f:56:63:f6:87:bf:fd:04:ae:cf:b8:67:92
Signer

Actual PE Digest

7c:68:b6:44:a6:e8:44:76:44:b8:5e:45:47:bb:6c:56:30:d4:cb:7f:56:63:f6:87:bf:fd:04:ae:cf:b8:67:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\blitz-core\build_x64\Release\valorant-internal-old.pdb

Imports

kernel32

LoadLibraryW
MultiByteToWideChar
CloseHandle
GetLastError
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
GetPrivateProfileIntW
CreateEventW
VirtualProtect
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
SetEvent
WaitForMultipleObjects
CreateToolhelp32Snapshot
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
Sleep
HeapReAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
GetModuleFileNameW
ReleaseSemaphore
CreateSemaphoreW
CreateFileMappingW
GetModuleHandleW
RtlCaptureContext
CreateFileW
GetDriveTypeW
WriteFile
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GlobalMemoryStatusEx
GetLocalTime
GetComputerNameA
K32GetProcessMemoryInfo
FreeLibrary
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
ReadFile
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
DisableThreadLibraryCalls
CreateThread
QueryPerformanceFrequency
GetProcAddress
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleHandleA
RtlUnwind
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
ResetEvent
HeapSize
WriteConsoleW
OpenFileMappingW
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
FormatMessageA
LocalFree
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlPcToFileHeader
GetModuleHandleExW
IsProcessorFeaturePresent
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount

user32

IsWindow
MessageBoxW
CallNextHookEx
GetAsyncKeyState
IsWindowVisible
SetCursor
SetWindowLongPtrW
LoadCursorW
SetCursorPos
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
GetCursorInfo
GetWindowThreadProcessId
DestroyWindow
CreateWindowExA
GetClientRect
WindowFromDC
GetForegroundWindow
LoadImageW
ScreenToClient
ClientToScreen
GetCursorPos
SetWindowsHookExW
CallWindowProcW

shell32

SHGetSpecialFolderPathW

d3dcompiler_47

D3DCompile

advapi32

GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

msg_hook_proc_ov

Sections

.text
Size: 998KB - Virtual size: 997KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/binaries/valorant-internal.dll
.dll windows:6 windows x64 arch:x64

987b2ac17540028fd883e693cd7cc9b3

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:61:6d:51:cb:45:48:d2:32:56:01:fe:c5:95:c1:e7:0f:f5:b6:e0:65:c4:6d:58:84:38:b5:0c:be:23:86:0a
Signer

Actual PE Digest

ca:61:6d:51:cb:45:48:d2:32:56:01:fe:c5:95:c1:e7:0f:f5:b6:e0:65:c4:6d:58:84:38:b5:0c:be:23:86:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\Projects\blitz-core\build_x64\Release\valorant-internal.pdb

Imports

kernel32

LoadLibraryW
MultiByteToWideChar
CloseHandle
GetLastError
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
GetPrivateProfileIntW
CreateEventW
VirtualProtect
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
SetEvent
WaitForMultipleObjects
CreateToolhelp32Snapshot
HeapAlloc
HeapFree
GetProcessHeap
HeapCreate
GetCurrentProcess
Thread32Next
Thread32First
SuspendThread
ResumeThread
Sleep
HeapReAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
LoadLibraryA
QueryPerformanceCounter
GetModuleFileNameW
ReleaseSemaphore
CreateSemaphoreW
CreateFileMappingW
GetModuleHandleW
RtlCaptureContext
CreateFileW
GetDriveTypeW
WriteFile
RaiseException
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GlobalMemoryStatusEx
GetLocalTime
GetComputerNameA
K32GetProcessMemoryInfo
FreeLibrary
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
ExitProcess
SetConsoleCtrlHandler
ReadFile
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
DisableThreadLibraryCalls
CreateThread
QueryPerformanceFrequency
GetProcAddress
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleHandleA
RtlUnwind
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
ResetEvent
HeapSize
WriteConsoleW
OpenFileMappingW
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
FormatMessageA
LocalFree
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlPcToFileHeader
GetModuleHandleExW
IsProcessorFeaturePresent
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount

user32

IsWindow
MessageBoxW
CallNextHookEx
GetAsyncKeyState
IsWindowVisible
SetCursor
SetWindowLongPtrW
LoadCursorW
SetCursorPos
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
GetCursorInfo
GetWindowThreadProcessId
DestroyWindow
CreateWindowExA
GetClientRect
WindowFromDC
GetForegroundWindow
LoadImageW
ScreenToClient
ClientToScreen
GetCursorPos
SetWindowsHookExW
CallWindowProcW

shell32

SHGetSpecialFolderPathW

d3dcompiler_47

D3DCompile

advapi32

GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

msg_hook_proc_ov

Sections

.text
Size: 998KB - Virtual size: 997KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/elevate.exe
.exe windows:6 windows x86 arch:x86

c3afe98a750f2d4f1ed5d2ac323cb5e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Dev\elevate\bin\x86\Release\Elevate.pdb

Imports

kernel32

GetLastError
CloseHandle
GetVersionExW
WaitForSingleObject
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
CreateFileW
DecodePointer
GetEnvironmentVariableW

shell32

ShellExecuteExW

advapi32

SystemFunction036

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resources/overlay/index.html
.html
resources/overlay/index.js
.js
resources/overlay/index.js.gz
.gz
index.js
.js
snapshot_blob.bin
v8_context_snapshot.bin
vk_swiftshader.dll
.dll windows:5 windows x86 arch:x86

e4ad26ec9334769567aee040de43484d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

vk_swiftshader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiberEx
CreateEventW
CreateFiberEx
CreateFileW
CreateRemoteThreadEx
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeleteProcThreadAttributeList
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformationEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeProcThreadAttributeList
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
ResetEvent
RtlUnwind
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToFiber
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UpdateProcThreadAttribute
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetClientRect
GetDC
IsWindow
ReleaseDC

gdi32

StretchDIBits

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBeginRendering
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBindVertexBuffers2
vkCmdBlitImage
vkCmdBlitImage2
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBuffer2
vkCmdCopyBufferToImage
vkCmdCopyBufferToImage2
vkCmdCopyImage
vkCmdCopyImage2
vkCmdCopyImageToBuffer
vkCmdCopyImageToBuffer2
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdEndRendering
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPipelineBarrier2
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetEvent2
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdResolveImage2
vkCmdSetBlendConstants
vkCmdSetCullMode
vkCmdSetDepthBias
vkCmdSetDepthBiasEnable
vkCmdSetDepthBounds
vkCmdSetDepthBoundsTestEnable
vkCmdSetDepthCompareOp
vkCmdSetDepthTestEnable
vkCmdSetDepthWriteEnable
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetEvent2
vkCmdSetFrontFace
vkCmdSetLineWidth
vkCmdSetPrimitiveRestartEnable
vkCmdSetPrimitiveTopology
vkCmdSetRasterizerDiscardEnable
vkCmdSetScissor
vkCmdSetScissorWithCount
vkCmdSetStencilCompareMask
vkCmdSetStencilOp
vkCmdSetStencilReference
vkCmdSetStencilTestEnable
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdSetViewportWithCount
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWaitEvents2
vkCmdWriteTimestamp
vkCmdWriteTimestamp2
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreatePrivateDataSlot
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyPrivateDataSlot
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceBufferMemoryRequirements
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceImageMemoryRequirements
vkGetDeviceImageSparseMemoryRequirements
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceToolProperties
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetPrivateData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueSubmit2
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSetPrivateData
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores
vk_icdGetInstanceProcAddr
vk_icdNegotiateLoaderICDInterfaceVersion

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 182B

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vk_swiftshader_icd.json
vulkan-1.dll
.dll windows:5 windows x86 arch:x86

555db08aac990c6cbb99d14d12be6861

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

vulkan-1.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

cfgmgr32

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBeginRendering
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBindVertexBuffers2
vkCmdBlitImage
vkCmdBlitImage2
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBuffer2
vkCmdCopyBufferToImage
vkCmdCopyBufferToImage2
vkCmdCopyImage
vkCmdCopyImage2
vkCmdCopyImageToBuffer
vkCmdCopyImageToBuffer2
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdEndRendering
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPipelineBarrier2
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetEvent2
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdResolveImage2
vkCmdSetBlendConstants
vkCmdSetCullMode
vkCmdSetDepthBias
vkCmdSetDepthBiasEnable
vkCmdSetDepthBounds
vkCmdSetDepthBoundsTestEnable
vkCmdSetDepthCompareOp
vkCmdSetDepthTestEnable
vkCmdSetDepthWriteEnable
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetEvent2
vkCmdSetFrontFace
vkCmdSetLineWidth
vkCmdSetPrimitiveRestartEnable
vkCmdSetPrimitiveTopology
vkCmdSetRasterizerDiscardEnable
vkCmdSetScissor
vkCmdSetScissorWithCount
vkCmdSetStencilCompareMask
vkCmdSetStencilOp
vkCmdSetStencilReference
vkCmdSetStencilTestEnable
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdSetViewportWithCount
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWaitEvents2
vkCmdWriteTimestamp
vkCmdWriteTimestamp2
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateDisplayModeKHR
vkCreateDisplayPlaneSurfaceKHR
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateHeadlessSurfaceEXT
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreatePrivateDataSlot
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSharedSwapchainsKHR
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyPrivateDataSlot
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceBufferMemoryRequirements
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceImageMemoryRequirements
vkGetDeviceImageSparseMemoryRequirements
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetDisplayModeProperties2KHR
vkGetDisplayModePropertiesKHR
vkGetDisplayPlaneCapabilities2KHR
vkGetDisplayPlaneCapabilitiesKHR
vkGetDisplayPlaneSupportedDisplaysKHR
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceDisplayPlaneProperties2KHR
vkGetPhysicalDeviceDisplayPlanePropertiesKHR
vkGetPhysicalDeviceDisplayProperties2KHR
vkGetPhysicalDeviceDisplayPropertiesKHR
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilities2KHR
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormats2KHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceToolProperties
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetPrivateData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueSubmit2
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSetPrivateData
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores

Sections

.text
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 178B

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d31c5eb927119d00232e4d4b0e32fcdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
MultiByteToWideChar
lstrlenA
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyW
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessW
GetStartupInfoW
CreatePipe
GetProcAddress
lstrcpynW
DeleteFileW
lstrcmpiW
GetCurrentProcess
lstrcatW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
ExitProcess
GetCommandLineW
GlobalLock
GetVersion
lstrlenW

user32

SendMessageW
FindWindowExW
CharNextW
wsprintfW
CharPrevW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsProcess.dll
.dll windows:5 windows x86 arch:x86

439074d1c01f7b16781bdf060930814a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
OpenProcess
MultiByteToWideChar
lstrlenA
lstrlenW
LoadLibraryA
lstrcmpiW
lstrcpynW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
GlobalAlloc

user32

GetWindowThreadProcessId
EnumWindows
wsprintfW
PostMessageW

Exports

Exports

_CloseProcess
_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 927B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis7z.dll
.dll windows:6 windows x86 arch:x86

2656ea25cde98f31a490513c2db04ae8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
FormatMessageW
GetFileInformationByHandle
SetLastError
DeviceIoControl
GetModuleHandleW
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetStdHandle
WaitForMultipleObjects
GetTickCount
GetConsoleMode
AreFileApisANSI
SetFileApisToOEM
SetFileApisToANSI
GlobalAlloc
GlobalFree
lstrcpynW
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
GetCurrentDirectoryW
CreateDirectoryW
CreateSemaphoreW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
GetCurrentProcessId
GetCurrentThreadId
MoveFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleHandleA
SetEndOfFile
GetCurrentProcess
GetSystemInfo
GlobalMemoryStatus
GetProcessAffinityMask
IsProcessorFeaturePresent
WriteConsoleW
HeapSize
GetStringTypeW
DecodePointer
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
WaitForSingleObject
CreateEventW
ReleaseSemaphore
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
VirtualFree
VirtualAlloc
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileW
DeleteFileW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
GetConsoleCP
FlushFileBuffers
GetFileType
HeapReAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess

user32

SendMessageW
FindWindowExW
SetWindowTextW
GetDlgItem
wsprintfW
CharUpperW

advapi32

SetFileSecurityW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

oleaut32

VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
VariantCopy

Exports

Exports

Extract
ExtractWithCallback
ExtractWithDetails

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Uninstall Blitz.exe
.exe windows:4 windows x86 arch:x86

b34f154ec913d2d2c435cbd644e91687

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-02-2021 00:00

Not After

30-01-2024 23:59

Subject

SERIALNUMBER=6614056,CN=Swift Media Entertainment\, Inc.,O=Swift Media Entertainment\, Inc.,L=Los Angeles,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

77:0f:8f:32:e6:c0:a5:81:96:1f:9a:aa:78:9f:d1:be:14:2c:bc:82:dc:d1:10:1a:3a:b1:21:17:d1:77:32:63
Signer

Actual PE Digest

77:0f:8f:32:e6:c0:a5:81:96:1f:9a:aa:78:9f:d1:be:14:2c:bc:82:dc:d1:10:1a:3a:b1:21:17:d1:77:32:63

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
ExitProcess
GetShortPathNameW
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW

user32

GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage

gdi32

SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17

ole32

OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 992KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/INetC.dll
.dll windows:5 windows x86 arch:x86

2c10f6f3e9eaa15d70f14c96e757b2e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

FtpCreateDirectoryW
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetSetOptionW
InternetQueryOptionW
HttpAddRequestHeadersA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestW
HttpAddRequestHeadersW
HttpEndRequestW
InternetConnectW
InternetCrackUrlW
InternetOpenW
HttpQueryInfoW
HttpSendRequestExW
HttpSendRequestW
InternetWriteFile
InternetReadFile

comctl32

ord17

shlwapi

UrlCombineW

kernel32

GlobalFree
WideCharToMultiByte
lstrlenA
CreateFileA
GlobalAlloc
WaitForSingleObject
TerminateThread
MultiByteToWideChar
GetModuleHandleW
MulDiv
lstrcmpiW
CreateFileW
GetFileSize
CloseHandle
CreateThread
GetTickCount
SetFilePointer
GetProcAddress
LoadLibraryA
lstrlenW
WriteFile
ReadFile
lstrcatW
LocalFree
lstrcpyW
LocalAlloc
lstrcmpW
lstrcpynW
GetLastError
DeleteFileW
SleepEx

user32

wsprintfA
FindWindowExW
CreateDialogParamW
EnableWindow
IsWindowVisible
IsDialogMessageW
GetMessageW
TranslateMessage
DispatchMessageW
RedrawWindow
KillTimer
DestroyWindow
UpdateWindow
LoadIconW
SetTimer
wsprintfW
IsWindow
MessageBoxW
GetParent
ShowWindow
SetWindowLongW
GetWindowLongW
SetWindowTextW
SendDlgItemMessageW
GetDlgItem
PostMessageW
GetWindowTextW
SendMessageW
SetDlgItemTextW
SetWindowPos
SystemParametersInfoW
GetClientRect
GetWindowRect

gdi32

SetBkColor
DeleteObject
SetTextColor
CreateSolidBrush

Exports

Exports

get
head
post
put

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StdUtils.dll
.dll windows:5 windows x86 arch:x86

7b79709c0d5576549eb261e3410f95f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

iswspace
??3@YAXPAX@Z
_msize
_wsetlocale
_snprintf
iswcntrl
_beginthreadex
time
srand
rand
clock
_getpid
_wsplitpath
iswgraph
__wgetmainargs
wcsncpy
_wcsnicmp
wcschr
calloc
free
_wcsicmp
_snwprintf
swscanf
abort
??2@YAPAXI@Z
memset
memcpy

shlwapi

ord176

crypt32

CryptProtectData
CryptUnprotectData

kernel32

GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchange
HeapValidate
InterlockedDecrement
InterlockedIncrement
GetSystemTime
OutputDebugStringA
GetExitCodeProcess
InitializeCriticalSection
SystemTimeToFileTime
TerminateThread
WaitForSingleObject
LocalFree
GetFullPathNameW
GetVersion
GetFileAttributesW
LoadLibraryW
FreeLibrary
CloseHandle
lstrcpynW
GlobalAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
Sleep
VerSetConditionMask
GetCurrentProcess
GetModuleHandleW
FatalAppExitW
GetVersionExW
TerminateProcess
GetModuleFileNameW
RaiseException
VerifyVersionInfoW
GetLastError
GetProcAddress
SetFilePointerEx
WriteFile
ReadFile
CreateFileW
GetFileSizeEx
GetCommandLineW

user32

MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
wsprintfW
DestroyWindow
SetTimer
UnregisterClassW
KillTimer
LoadStringW
MessageBoxW
GetWindowThreadProcessId
AllowSetForegroundWindow
CreateWindowExW
RegisterClassW
MessageBoxA

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteExW
SHFileOperationW
ShellExecuteW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear

Exports

Exports

AppendToFile
ExecShellAsUser
ExecShellWaitEx
FormatStr
FormatStr2
FormatStr3
GetAllParameters
GetDays
GetDirectoryPart
GetDrivePart
GetExtensionPart
GetFileNamePart
GetHours
GetLibVersion
GetMinutes
GetOsEdition
GetOsReleaseId
GetOsReleaseName
GetParameter
GetParentPath
GetRealOsBuildNo
GetRealOsName
GetRealOsVersion
HashFile
HashText
InvokeShellVerb
NormalizePath
ParameterCnt
ParameterStr
ProtectStr
Rand
RandBytes
RandList
RandMax
RandMinMax
RevStr
SHFileCopy
SHFileMove
ScanStr
ScanStr2
ScanStr3
SetVerboseMode
SplitPath
StrFromUtf8
StrToUtf8
TestParameter
Time
TimerCreate
TimerDestroy
TrimStr
TrimStrLeft
TrimStrRight
UnprotectStr
ValidDomainName
ValidFileName
ValidPathSpec
VerifyRealOsBuildNo
VerifyRealOsVersion
WaitForProcEx

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WinShell.dll
.dll windows:4 windows x86 arch:x86

a75c904bad153f5af2c37cfdf66eba5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GlobalFree

ole32

CoCreateInstance

Exports

Exports

SetLnkAUMI
UninstAppUserModelId
UninstShortcut

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d31c5eb927119d00232e4d4b0e32fcdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
MultiByteToWideChar
lstrlenA
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyW
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessW
GetStartupInfoW
CreatePipe
GetProcAddress
lstrcpynW
DeleteFileW
lstrcmpiW
GetCurrentProcess
lstrcatW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
ExitProcess
GetCommandLineW
GlobalLock
GetVersion
lstrlenW

user32

SendMessageW
FindWindowExW
CharNextW
wsprintfW
CharPrevW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b34f154ec913d2d2c435cbd644e91687

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

ef:71:cb:15:66:8b:17:a6:03:70:33:ef:b7:d1:7a:2f:3d:a5:b6:c7:9a:a0:e8:13:f4:2c:87:d1:59:48:7e:caSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 451KB

.ndata Size: - Virtual size: 1.1MB

.rsrc Size: 287KB - Virtual size: 287KB

90179d905cdca282880541c826651c15

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: - Virtual size: 128B

.rsrc Size: 512B - Virtual size: 408B

.reloc Size: 1024B - Virtual size: 868B

7b79709c0d5576549eb261e3410f95f8

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

shlwapi

crypt32

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 74KB - Virtual size: 74KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 1KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

ef:71:cb:15:66:8b:17:a6:03:70:33:ef:b7:d1:7a:2f:3d:a5:b6:c7:9a:a0:e8:13:f4:2c:87:d1:59:48:7e:ca
Signer

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 451KB

.ndata
Size: - Virtual size: 1.1MB

.rsrc
Size: 287KB - Virtual size: 287KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 128B

.rsrc
Size: 512B - Virtual size: 408B

.reloc
Size: 1024B - Virtual size: 868B

.text
Size: 74KB - Virtual size: 74KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 1KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 648B

.text
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 76B

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

0e:30:69:a7:d6:d2:31:b1:46:47:11:0d:ff:f2:fa:4a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

e9:aa:9b:63:1a:c2:ef:c2:92:ad:95:0b:6f:5c:9a:51:29:2f:46:88:ed:79:ea:7e:41:e9:d4:e7:52:82:c3:73
Signer

.text
Size: 101.2MB - Virtual size: 101.2MB

.rdata
Size: 18.9MB - Virtual size: 18.9MB

.data
Size: 328KB - Virtual size: 3.8MB

.00cfg
Size: 512B - Virtual size: 4B

.rodata
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 325B

.voltbl
Size: 512B - Virtual size: 207B

CPADinfo
Size: 512B - Virtual size: 40B

malloc_h
Size: 512B - Virtual size: 191B

.rsrc
Size: 339KB - Virtual size: 339KB