okayfreedom-vpn[.]exe

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsRandom.dll	acprotect

resource	yara_rule
static1/unpack001/$PLUGINSDIR/nsRandom.dll	upx

resource
unpack001/$PLUGINSDIR/Processes.dll
unpack001/$PLUGINSDIR/SimpleSC.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/UAC.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsRandom.dll
unpack002/out.upx
unpack001/7-zip/7za.exe
unpack001/client.dll
unpack001/openvpn/7/tap0901.sys
unpack001/openvpn64/7/tap0901.sys
unpack001/sqlite3.dll

okayfreedom-vpn.exe

.exe windows:4 windows x86 arch:x86

f4639a0b3116c2cfc71144b88a929cfd

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1b:77:1c:18:f2:c5:39:98:c5:49:ce:c3
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

11/11/2022, 12:18

Not After

19/12/2025, 10:30

Subject

SERIALNUMBER=HRB 121695,CN=Steganos Software GmbH,O=Steganos Software GmbH,STREET=Storkower Str. 158,L=Berlin,ST=Berlin,C=DE,1.3.6.1.4.1.311.60.2.1.1=#13174265726c696e2028436861726c6f7474656e6275726729,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02/11/2023, 10:30

Not After

04/12/2034, 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

bd:d3:31:82:47:6c:6e:11:2c:fa:1a:1d:71:8a:a3:2b:10:de:cc:81:bb:45:24:ed:7a:e2:09:9c:f8:95:fb:07
Signer

Actual PE Digest

bd:d3:31:82:47:6c:6e:11:2c:fa:1a:1d:71:8a:a3:2b:10:de:cc:81:bb:45:24:ed:7a:e2:09:9c:f8:95:fb:07

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW

RegEnumKeyW

RegQueryValueExW

RegSetValueExW

RegCloseKey

RegDeleteValueW

RegDeleteKeyW

AdjustTokenPrivileges

LookupPrivilegeValueW

OpenProcessToken

RegOpenKeyExW

RegCreateKeyExW

shell32

SHGetPathFromIDListW

SHBrowseForFolderW

SHGetFileInfoW

SHFileOperationW

ShellExecuteExW

ole32

CoCreateInstance

OleUninitialize

OleInitialize

IIDFromString

CoTaskMemFree

comctl32

ImageList_Destroy

ord17

ImageList_AddMasked

ImageList_Create

user32

MessageBoxIndirectW

GetDlgItemTextW

SetDlgItemTextW

CreatePopupMenu

AppendMenuW

TrackPopupMenu

OpenClipboard

EmptyClipboard

SetClipboardData

CloseClipboard

IsWindowVisible

CallWindowProcW

GetMessagePos

CheckDlgButton

LoadCursorW

SetCursor

GetSysColor

SetWindowPos

GetWindowLongW

IsWindowEnabled

SetClassLongW

GetSystemMenu

EnableMenuItem

GetWindowRect

ScreenToClient

EndDialog

RegisterClassW

SystemParametersInfoW

CharPrevW

GetClassInfoW

DialogBoxParamW

CharNextW

ExitWindowsEx

DestroyWindow

CreateDialogParamW

SetTimer

SetWindowTextW

PostQuitMessage

SetForegroundWindow

ShowWindow

wsprintfW

SendMessageTimeoutW

FindWindowExW

IsWindow

GetDlgItem

SetWindowLongW

LoadImageW

GetDC

ReleaseDC

EnableWindow

InvalidateRect

SendMessageW

DefWindowProcW

BeginPaint

GetClientRect

FillRect

DrawTextW

EndPaint

CharNextA

wsprintfA

DispatchMessageW

CreateWindowExW

PeekMessageW

GetSystemMetrics

gdi32

GetDeviceCaps

SetBkColor

SelectObject

DeleteObject

CreateBrushIndirect

CreateFontIndirectW

SetBkMode

SetTextColor

kernel32

lstrcmpiA

CreateFileW

GetTempFileNameW

RemoveDirectoryW

CreateProcessW

CreateDirectoryW

GetLastError

CreateThread

GlobalLock

GlobalUnlock

GetDiskFreeSpaceW

WideCharToMultiByte

lstrcpynW

lstrlenW

SetErrorMode

GetVersionExW

GetCommandLineW

GetTempPathW

GetWindowsDirectoryW

WriteFile

CopyFileW

ExitProcess

GetCurrentProcess

GetModuleFileNameW

GetFileSize

GetTickCount

Sleep

SetFileAttributesW

GetFileAttributesW

SetCurrentDirectoryW

MoveFileW

GetFullPathNameW

GetShortPathNameW

SearchPathW

CompareFileTime

SetFileTime

CloseHandle

lstrcmpiW

lstrcmpW

ExpandEnvironmentStringsW

GlobalFree

GlobalAlloc

GetModuleHandleW

LoadLibraryExW

FreeLibrary

WritePrivateProfileStringW

GetPrivateProfileStringW

lstrlenA

MultiByteToWideChar

ReadFile

SetFilePointer

FindClose

FindNextFileW

FindFirstFileW

DeleteFileW

MulDiv

lstrcpyA

MoveFileExW

lstrcatW

GetSystemDirectoryW

GetProcAddress

GetModuleHandleA

GetExitCodeProcess

WaitForSingleObject

SetEnvironmentVariableW

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/Processes.dll

.dll windows:6 windows x86 arch:x86

ae9e9813e9f2779a117476051e01fd2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

D:\dev\plugins\nsis\bin\processes.pdb

Imports

kernel32

GlobalAlloc

GlobalFree

lstrcpynW

lstrcpyW

MultiByteToWideChar

WideCharToMultiByte

CloseHandle

TerminateProcess

OpenProcess

FreeLibrary

GetProcAddress

LoadLibraryW

CreateFileW

OutputDebugStringW

DecodePointer

ReadConsoleW

ReadFile

GetConsoleMode

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

GetModuleHandleW

GetCurrentProcess

InterlockedPushEntrySList

InterlockedFlushSList

RtlUnwind

GetLastError

SetLastError

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

EncodePointer

RaiseException

ExitProcess

GetModuleHandleExW

GetModuleFileNameW

HeapFree

HeapAlloc

GetCurrentThread

GetStdHandle

GetFileType

FindClose

FindFirstFileExW

FindNextFileW

IsValidCodePage

GetACP

GetOEMCP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEnvironmentVariableW

GetDateFormatW

GetTimeFormatW

CompareStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

GetProcessHeap

SetConsoleCtrlHandler

GetStringTypeW

GetFileSizeEx

SetFilePointerEx

SetStdHandle

HeapSize

HeapReAlloc

FlushFileBuffers

WriteFile

GetConsoleOutputCP

WriteConsoleW

user32

UpdateWindow

wsprintfW

GetDesktopWindow

FindWindowW

Exports

FindDevice

FindProcess

KillProcess

Sections

.text
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/SimpleSC.dll

.dll windows:5 windows x86 arch:x86

a9546246ff97b887a4072a24f9106617

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

EnterCriticalSection

SetFilePointer

GetACP

CloseHandle

LocalFree

SuspendThread

VirtualProtect

TlsAlloc

GetTickCount

IsDebuggerPresent

GetFullPathNameW

VirtualFree

HeapAlloc

GetStartupInfoW

ExitProcess

GetFileAttributesW

InitializeCriticalSection

GetCPInfoExW

GetThreadPriority

GetCurrentProcess

SetThreadPriority

VirtualAlloc

RtlUnwind

GetCPInfo

GetCommandLineW

GetSystemInfo

ResumeThread

GetProcAddress

LeaveCriticalSection

EnumSystemLocalesW

GetStdHandle

GetVersionExW

VerifyVersionInfoW

GetModuleHandleW

FreeLibrary

HeapCreate

HeapDestroy

ReadFile

GetDiskFreeSpaceW

VerSetConditionMask

GetUserDefaultUILanguage

FindFirstFileW

TlsFree

HeapSize

lstrcpynW

SetLastError

GetModuleFileNameW

GetLastError

GlobalAlloc

lstrlenW

SetEndOfFile

CompareStringW

CreateThread

HeapFree

WideCharToMultiByte

MultiByteToWideChar

FindClose

LoadLibraryA

ResetEvent

SetEvent

CreateFileW

GetLocaleInfoW

GetVersion

RaiseException

FormatMessageW

SwitchToThread

GetExitCodeThread

GetLocalTime

WaitForSingleObject

GetCurrentThread

WriteFile

ExitThread

DeleteCriticalSection

GetDateFormatW

TlsGetValue

IsValidLocale

TlsSetValue

LoadLibraryExW

GetSystemDefaultUILanguage

EnumCalendarInfoW

LocalAlloc

GetCurrentThreadId

UnhandledExceptionFilter

VirtualQuery

CreateEventW

GlobalFree

VirtualQueryEx

GetThreadLocale

Sleep

SetThreadLocale

version

GetFileVersionInfoSizeW

VerQueryValueW

GetFileVersionInfoW

user32

CharUpperBuffW

CharNextW

MsgWaitForMultipleObjects

FindWindowExW

CharLowerBuffW

LoadStringW

CharUpperW

PeekMessageW

GetSystemMetrics

MessageBoxW

oleaut32

SysAllocStringLen

SafeArrayPtrOfIndex

VariantCopy

SafeArrayGetLBound

SafeArrayGetUBound

VariantInit

VariantClear

SysFreeString

SysReAllocStringLen

VariantChangeType

SafeArrayCreate

netapi32

NetWkstaGetInfo

NetApiBufferFree

advapi32

CloseServiceHandle

ControlService

CreateServiceW

LookupAccountNameW

DeleteService

LsaAddAccountRights

StartServiceW

UnlockServiceDatabase

GetServiceKeyNameW

GetServiceDisplayNameW

ChangeServiceConfigW

LsaClose

LockServiceDatabase

OpenServiceW

ChangeServiceConfig2W

EnumDependentServicesW

QueryServiceConfig2W

LsaRemoveAccountRights

QueryServiceStatus

AdjustTokenPrivileges

QueryServiceConfigW

LookupPrivilegeValueW

OpenSCManagerW

LsaOpenPolicy

OpenProcessToken

RegOpenKeyExW

RegQueryValueExW

RegCloseKey

Exports

ContinueService

ExistsService

GetErrorMessage

GetServiceBinaryPath

GetServiceDelayedAutoStartInfo

GetServiceDescription

GetServiceDisplayName

GetServiceFailure

GetServiceFailureFlag

GetServiceLogon

GetServiceName

GetServiceStartType

GetServiceStatus

GrantServiceLogonPrivilege

InstallService

PauseService

RemoveService

RemoveServiceLogonPrivilege

RestartService

ServiceIsPaused

ServiceIsRunning

ServiceIsStopped

SetServiceBinaryPath

SetServiceDelayedAutoStartInfo

SetServiceDescription

SetServiceFailure

SetServiceFailureFlag

SetServiceLogon

SetServiceStartType

StartService

StopService

TMethodImplementationIntercept

__dbk_fcall_wrapper

dbkFCallWrapperAddr

Sections

.text
Size: 956KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

.dll windows:4 windows x86 arch:x86

509a34b3a68a773e0afb4259e68f9f82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

GlobalFree

GlobalSize

lstrcpynW

lstrcpyW

GetProcAddress

WideCharToMultiByte

VirtualFree

FreeLibrary

lstrlenW

LoadLibraryW

GetModuleHandleW

MultiByteToWideChar

VirtualAlloc

VirtualProtect

GetLastError

user32

wsprintfW

ole32

StringFromGUID2

CLSIDFromString

Exports

Alloc

Call

Copy

Free

Get

Int64Op

Store

StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/UAC.dll

.dll windows:4 windows x86 arch:x86

0ef725341a4aecf8398c0e2132f38049

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

SetLastError

GetCurrentProcessId

GetCommandLineW

GetProcAddress

CreateThread

GlobalFree

LoadLibraryA

OpenProcess

GlobalAlloc

CreateFileMappingW

Sleep

MapViewOfFile

GetModuleHandleW

UnmapViewOfFile

CreateEventW

SetCurrentDirectoryW

GetVersionExW

GetExitCodeProcess

lstrcatW

LocalFree

GetPrivateProfileStringW

FormatMessageW

GetPrivateProfileIntW

CreateProcessW

CloseHandle

GetLastError

DuplicateHandle

GetCurrentThreadId

lstrlenW

SetEvent

WaitForSingleObject

lstrcmpiW

GetExitCodeThread

GetModuleFileNameW

user32

SetWindowPos

GetClientRect

GetWindowThreadProcessId

SetWindowLongW

DefWindowProcW

GetDlgItem

CallWindowProcW

CallNextHookEx

GetClassNameW

PeekMessageW

DestroyWindow

SendMessageW

SetForegroundWindow

IsWindowVisible

MsgWaitForMultipleObjects

LoadStringW

EndDialog

EnableWindow

DialogBoxParamW

LoadImageW

MessageBoxW

GetWindowLongW

DispatchMessageW

ShowWindow

wsprintfW

CreateDialogParamW

GetWindowRect

IsDialogMessageW

FindWindowExW

CharNextW

CreateWindowExW

LoadIconW

PostMessageW

SetWindowsHookExW

UnhookWindowsHookEx

TranslateMessage

shell32

ShellExecuteExW

advapi32

OpenServiceW

QueryServiceStatus

CloseServiceHandle

OpenProcessToken

OpenSCManagerW

GetUserNameW

AdjustTokenPrivileges

LookupPrivilegeValueW

GetTokenInformation

EqualSid

ole32

CoInitialize

Exports

_

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

.dll windows:4 windows x86 arch:x86

3b477381217c97b22146297f93df2a92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW

GetFileAttributesW

lstrcmpiW

MulDiv

lstrlenW

HeapFree

GetProcessHeap

GetCurrentDirectoryW

HeapReAlloc

GlobalFree

lstrcpynW

GlobalAlloc

HeapAlloc

SetCurrentDirectoryW

user32

GetPropW

DestroyWindow

CallWindowProcW

SetCursor

LoadCursorW

RemovePropW

CharPrevW

GetWindowLongW

DrawTextW

GetWindowTextW

SetWindowLongW

GetDlgItem

GetSysColor

SetWindowPos

CreateDialogParamW

MapWindowPoints

GetWindowRect

SetPropW

CreateWindowExW

IsWindow

SetTimer

KillTimer

DispatchMessageW

TranslateMessage

GetMessageW

IsDialogMessageW

ShowWindow

wsprintfW

MapDialogRect

GetClientRect

CharNextW

SendMessageW

DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderW

SHGetPathFromIDListW

comdlg32

GetSaveFileNameW

GetOpenFileNameW

CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Create

CreateControl

CreateItem

CreateTimer

GetUserData

KillTimer

OnBack

OnChange

OnClick

OnNotify

SelectFileDialog

SelectFolderDialog

SetRTL

SetUserData

Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/nsRandom.dll

.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

IMAGE_FILE_BYTES_REVERSED_HI

Exports

GetRandom

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

out.upx

.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/nsi_installer_background96.bmp

7-zip/7-zip.chm

.chm

7-zip/7za.exe

.exe windows:4 windows x86 arch:x86

15847eb10d7d06dcd5980e8a9b786fd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString

SysAllocStringByteLen

VariantClear

VariantCopy

SysFreeString

user32

CharLowerA

CharUpperA

CharLowerW

CharPrevExA

CharNextA

CharUpperW

kernel32

SetEndOfFile

GetStringTypeW

GetStringTypeA

LCMapStringW

LCMapStringA

SetConsoleCtrlHandler

FileTimeToLocalFileTime

GetCommandLineW

SetFileApisToOEM

GetVersionExA

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

GetConsoleMode

SetConsoleMode

GetStdHandle

MultiByteToWideChar

WideCharToMultiByte

GetLastError

FreeLibrary

LoadLibraryA

AreFileApisANSI

GetModuleFileNameA

LocalFree

FormatMessageA

FormatMessageW

GetWindowsDirectoryA

GetWindowsDirectoryW

CloseHandle

SetFileTime

CreateFileW

SetLastError

SetFileAttributesA

RemoveDirectoryA

MoveFileA

SetFileAttributesW

RemoveDirectoryW

MoveFileW

CreateDirectoryA

CreateDirectoryW

DeleteFileA

DeleteFileW

lstrlenA

GetFullPathNameA

GetFullPathNameW

GetCurrentDirectoryA

SetCurrentDirectoryA

SetCurrentDirectoryW

GetCurrentDirectoryW

SearchPathA

SearchPathW

GetTempPathA

GetTempPathW

GetTempFileNameA

GetTempFileNameW

FindClose

FindFirstFileA

FindFirstFileW

FindNextFileA

FindNextFileW

CreateFileA

GetFileSize

SetFilePointer

DeviceIoControl

ReadFile

WriteFile

GetCurrentProcess

GetProcAddress

CompareFileTime

FileTimeToSystemTime

GetSystemInfo

GlobalMemoryStatus

GetModuleHandleA

DosDateTimeToFileTime

FileTimeToDosDateTime

SystemTimeToFileTime

GetSystemTime

WaitForMultipleObjects

OpenEventA

UnmapViewOfFile

MapViewOfFile

OpenFileMappingA

GetTickCount

GetProcessTimes

LocalFileTimeToFileTime

QueryPerformanceCounter

GetCurrentThreadId

GetCurrentProcessId

VirtualAlloc

VirtualFree

WaitForSingleObject

CreateEventA

SetEvent

ResetEvent

CreateSemaphoreA

ReleaseSemaphore

InitializeCriticalSection

RtlUnwind

RaiseException

HeapAlloc

HeapFree

HeapReAlloc

CreateThread

TlsSetValue

TlsGetValue

ExitThread

GetCommandLineA

GetVersion

ExitProcess

TlsAlloc

SetUnhandledExceptionFilter

TerminateProcess

HeapSize

GetEnvironmentVariableA

HeapDestroy

HeapCreate

IsBadWritePtr

SetHandleCount

GetFileType

GetStartupInfoA

FlushFileBuffers

UnhandledExceptionFilter

FreeEnvironmentStringsA

FreeEnvironmentStringsW

GetEnvironmentStrings

GetEnvironmentStringsW

InterlockedDecrement

InterlockedIncrement

IsBadReadPtr

IsBadCodePtr

SetStdHandle

GetCPInfo

GetACP

GetOEMCP

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

7-zip/license.txt

7-zip/readme.txt

OKAYFREEDOM.res

.zip

res/CBMP/BMP_BUTTON_UPGRADE_DE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_DE_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_EN.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_EN_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_ES.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_ES_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_FR.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_FR_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_IT.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_IT_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_JP.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_JP_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_NL.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_NL_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_PL.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_PL_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_PT.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_PT_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_RU.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_RU_LARGE.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_SV.png

.png

res/CBMP/BMP_BUTTON_UPGRADE_SV_LARGE.png

.png

res/CBMP/BMP_EMPTY16.png

.png

res/CBMP/BMP_EMPTYNEW16.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_LARGE.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_MEDIUM.png

.png

res/CBMP/BMP_INVALID16.png

.png

res/CBMP/BMP_LOGO_SIAVPN16.png

.png

res/CBMP/BMP_OF_LOGO.png

.png

res/CBMP/BMP_OF_LOGO_LARGE.png

.png

res/CBMP/BMP_OF_LOGO_MEDIUM.png

.png

res/CBMP/BMP_OKAYFREEDOM_LOGO_FLOATBAR.png

.png

res/CBMP/BMP_OKAYFREEDOM_LOGO_TITLE.png

.png

res/CBMP/BMP_OKAYFREEDOM_LOGO_TITLE_LARGE.png

.png

res/CBMP/BMP_OKAYFREEDOM_LOGO_TITLE_MEDIUM.png

.png

res/CBMP/BMP_OKAYFREEDOM_TITLE.png

.png

res/CBMP/BMP_OKAYFREEDOM_TITLE_LARGE.png

.png

res/CBMP/BMP_OKAYFREEDOM_TITLE_MEDIUM.png

.png

res/CBMP/BMP_OKF_FLOATBAR2.png

.png

res/CBMP/BMP_OKF_FLOATBAR3.png

.png

res/CBMP/BMP_OKF_FLOATBAR3_LARGE.png

.png

res/CBMP/BMP_OKF_FLOATBAR3_MEDIUM.png

.png

res/CBMP/BMP_OKF_FLOATBAR_QUIT.png

.png

res/CBMP/BMP_OKF_FLOATBAR_QUIT_LARGE.png

.png

res/CBMP/BMP_SEPARATOR_SHADOW.png

.png

res/CBMP/BMP_SOS_BACKGROUND.png

.png

res/CBMP/BMP_SPLASH_BG.png

.png

res/CBMP/BMP_SPM_FLOATBAR_QUIT.png

.png

res/CBMP/BMP_SPM_FLOATBAR_QUIT_HOT.png

.png

res/CBMP/BMP_STEGANOS_LOGO.png

.png

res/CBMP/BMP_UPDATER_BACKGROUND.png

.png

res/CBMP/BMP_UPDATER_TITLE.png

.png

res/CBMP/BMP_UPDATER_TITLE_OKAYFREEDOM.png

.png

res/CBMP/BMP_UPDATESERVICE.png

.png

res/CBMP/BMP_UPDATESERVICE48.png

.png

res/CBMP/BMP_UPDATESERVICE64.png

.png

res/CBMP/BMP_VALID16.png

.png

res/ICON/IDI_PRODUCT.ico

res/ICON/IDI_UPDATESERVICE.ico

res/MANIFEST/OkayFreedomUpdater.exe.manifest

.xml

res/TEXTSTRINGTABLE/DE_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/EN_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/ES_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/FR_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/IT_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/JP_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/NL_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/PL_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/PT_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/RU_OKAYFREEDOM.txt

res/TEXTSTRINGTABLE/SV_OKAYFREEDOM.txt

res/XMLPRODUCT/PRODUCT_OKAYFREEDOM.sxp

OkayFreedomClient.exe

.exe windows:6 windows x86 arch:x86

1f4935115451df93fc662248ccb07017

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1b:77:1c:18:f2:c5:39:98:c5:49:ce:c3
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

11/11/2022, 12:18

Not After

19/12/2025, 10:30

Subject

SERIALNUMBER=HRB 121695,CN=Steganos Software GmbH,O=Steganos Software GmbH,STREET=Storkower Str. 158,L=Berlin,ST=Berlin,C=DE,1.3.6.1.4.1.311.60.2.1.1=#13174265726c696e2028436861726c6f7474656e6275726729,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02/11/2023, 10:30

Not After

04/12/2034, 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

d1:f4:e3:ba:1f:17:f3:e8:31:d3:68:f5:21:f1:28:92:58:08:45:01:02:f2:24:11:6c:ea:b5:53:0e:6c:e9:94
Signer

Actual PE Digest

d1:f4:e3:ba:1f:17:f3:e8:31:d3:68:f5:21:f1:28:92:58:08:45:01:02:f2:24:11:6c:ea:b5:53:0e:6c:e9:94

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW

GetFileAttributesExW

GetFileTime

GetLogicalDriveStringsW

GetVolumeInformationW

QueryDosDeviceW

ReadFile

RemoveDirectoryW

GetTempPathW

OutputDebugStringA

OutputDebugStringW

CloseHandle

SetHandleInformation

GetLastError

SetLastError

K32GetProcessImageFileNameW

K32GetProcessMemoryInfo

K32GetModuleFileNameExW

K32GetModuleBaseNameW

K32EnumProcessModules

Process32NextW

Process32FirstW

CreateToolhelp32Snapshot

GetDriveTypeA

WideCharToMultiByte

MultiByteToWideChar

CompareStringW

GetTimeZoneInformation

FileTimeToSystemTime

MoveFileW

CopyFileW

SetDllDirectoryW

LocalFree

LocalAlloc

GlobalLock

GlobalUnlock

LoadLibraryW

GetProcAddress

GetModuleFileNameW

FreeLibrary

DeleteTimerQueue

DeleteTimerQueueTimer

CreateTimerQueueTimer

CreateTimerQueue

GetVersionExW

GetSystemDirectoryW

GetTickCount

GetVersion

GetDiskFreeSpaceExW

GetDiskFreeSpaceW

FindNextFileW

FindFirstFileW

FindClose

FileTimeToLocalFileTime

DeleteFileW

CreateFileW

CreateDirectoryW

GetSystemDefaultUILanguage

GetSystemTime

OpenProcess

GetProcessId

CreateProcessW

TerminateThread

GetCurrentThreadId

GetCurrentThread

GetStringTypeW

InitializeCriticalSectionEx

EncodePointer

DecodePointer

CompareStringEx

GetCPInfo

LCMapStringEx

GetStdHandle

FreeConsole

AttachConsole

WriteConsoleA

WriteConsoleW

FillConsoleOutputCharacterW

GetConsoleScreenBufferInfo

SetConsoleCursorPosition

ReadConsoleOutputCharacterA

ExitProcess

MulDiv

GetCommandLineW

GlobalAlloc

GlobalSize

GlobalHandle

GlobalFree

SetErrorMode

GetSystemTimeAsFileTime

RaiseException

SetThreadPriority

GetExitCodeThread

ResumeThread

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

FormatMessageW

SetCurrentDirectoryW

GetFileAttributesW

GetFileType

WriteFile

SetNamedPipeHandleState

PeekNamedPipe

SetEvent

CreateEventW

WaitForMultipleObjects

GetFileSize

GetLongPathNameW

GetTempFileNameW

GetModuleHandleW

GetEnvironmentVariableW

IsDebuggerPresent

GetNativeSystemInfo

LoadResource

LockResource

SizeofResource

FindResourceW

GetComputerNameW

IsValidCodePage

QueryPerformanceCounter

QueryPerformanceFrequency

GetACP

GetLocaleInfoW

IsBadReadPtr

IsBadStringPtrA

GetSystemDirectoryA

LoadLibraryA

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsProcessorFeaturePresent

InitializeCriticalSectionAndSpinCount

ResetEvent

WaitForSingleObjectEx

GetStartupInfoW

InitializeSListHead

InterlockedPushEntrySList

RtlUnwind

LoadLibraryExW

GetFullPathNameW

SetEnvironmentVariableW

GetCurrentDirectoryW

GetFileInformationByHandle

SystemTimeToTzSpecificLocalTime

GetModuleHandleExW

ExitThread

FreeLibraryAndExitThread

MoveFileExW

SetStdHandle

FlushFileBuffers

GetConsoleMode

ReadConsoleW

GetConsoleOutputCP

SetFilePointerEx

GetDateFormatW

GetTimeFormatW

LCMapStringW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

GetFileSizeEx

HeapReAlloc

GetOEMCP

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEndOfFile

FindFirstFileExW

GetCommandLineA

HeapSize

CreateThread

GetExitCodeProcess

TerminateProcess

GetCurrentProcessId

GetCurrentProcess

Sleep

CreatePipe

CreateMutexW

WaitForSingleObject

ReleaseMutex

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

InitializeCriticalSection

DeviceIoControl

GetProcessHeap

HeapFree

HeapAlloc

CallNamedPipeW

ExpandEnvironmentStringsW

user32

CreateDialogParamW

GetDlgItem

SetWindowRgn

GetWindowPlacement

SetLayeredWindowAttributes

FlashWindowEx

IsIconic

IsZoomed

CreateDialogIndirectParamW

GetDialogBaseUnits

DrawMenuBar

EnableMenuItem

DrawTextW

DrawFocusRect

DrawIconEx

DrawStateW

SetRect

SetRectEmpty

CopyRect

OffsetRect

DrawEdge

DrawFrameControl

GetMenuState

CheckMenuItem

GetSubMenu

GetMenuItemID

SetMenuItemInfoW

GetSysColorBrush

CheckMenuRadioItem

CreateMenu

CreatePopupMenu

DestroyMenu

InsertMenuW

ModifyMenuW

RemoveMenu

SetMenuInfo

InsertMenuItemW

RegisterClipboardFormatW

GetClipboardFormatNameW

GetComboBoxInfo

ChildWindowFromPoint

CreateAcceleratorTableW

DestroyAcceleratorTable

TranslateAcceleratorW

MessageBeep

GetMessageW

PostThreadMessageW

ValidateRect

GetWindowDC

BeginPaint

EndPaint

UnionRect

GetDesktopWindow

ValidateRgn

IsRectEmpty

IsClipboardFormatAvailable

ChangeDisplaySettingsExW

EnumDisplaySettingsW

MonitorFromPoint

MonitorFromWindow

GetMonitorInfoW

EnumDisplayMonitors

WaitForInputIdle

MsgWaitForMultipleObjects

SetTimer

KillTimer

DdePostAdvise

DdeNameService

DdeCreateDataHandle

DdeGetData

DdeQueryStringW

TrackPopupMenu

GetMenuItemCount

IsWindowEnabled

ReleaseCapture

LoadIconW

GetCapture

MapVirtualKeyW

VkKeyScanW

GetDoubleClickTime

GetActiveWindow

SetFocus

EndDeferWindowPos

DeferWindowPos

BeginDeferWindowPos

MoveWindow

AnimateWindow

IsWindow

CreateWindowExW

CallWindowProcW

PostQuitMessage

DefWindowProcW

GetMessageTime

GetMessagePos

UnregisterHotKey

RegisterHotKey

PeekMessageW

DispatchMessageW

TranslateMessage

LoadCursorW

GetProcessDefaultLayout

UnregisterClassW

RegisterClassW

SystemParametersInfoW

HideCaret

SetCursor

SetWindowTextW

keybd_event

GetKeyState

DestroyWindow

IsMenu

GetWindowRect

SetMenu

PostMessageW

RegisterWindowMessageW

wsprintfW

SendMessageW

AttachThreadInput

ShowWindow

SetWindowPos

IsWindowVisible

BringWindowToTop

OpenClipboard

CloseClipboard

GetClipboardData

EmptyClipboard

EnableWindow

GetSystemMetrics

SetActiveWindow

GetSystemMenu

GetFocus

AppendMenuW

UpdateWindow

GetForegroundWindow

SetForegroundWindow

GetDC

ReleaseDC

GetWindowTextA

GetWindowTextW

GetWindowTextLengthW

MessageBoxW

GetWindowLongW

SetWindowLongW

FindWindowW

FindWindowExW

EnumWindows

GetClassNameW

LoadBitmapW

GetScrollInfo

SetScrollInfo

GetWindowThreadProcessId

GetWindow

DdeInitializeW

IsDialogMessageW

DdeUninitialize

DdeConnect

DdeDisconnect

DdeClientTransaction

DdeAccessData

DdeUnaccessData

CallNextHookEx

UnhookWindowsHookEx

SetWindowsHookExW

SetParent

GetCaretBlinkTime

DestroyIcon

CreateIconIndirect

DestroyCursor

GetIconInfo

GetAsyncKeyState

GetParent

PtInRect

InflateRect

LoadImageW

FillRect

GetSysColor

ChildWindowFromPointEx

WindowFromPoint

MapWindowPoints

ScreenToClient

ClientToScreen

GetCursorPos

SetCursorPos

GetClientRect

EnableScrollBar

ScrollWindow

RedrawWindow

InvalidateRect

GetUpdateRgn

SetCapture

DdeFreeStringHandle

DdeCreateStringHandleW

DdeGetLastError

DdeFreeDataHandle

GetMenuItemInfoW

gdi32

SetWorldTransform

ModifyWorldTransform

ExtTextOutW

CreatePolygonRgn

DPtoLP

LPtoDP

Polygon

Polyline

PolyBezier

SetViewportExtEx

CreateRectRgn

SetWindowOrgEx

GetBkColor

LineTo

MoveToEx

CombineRgn

EqualRgn

GetRgnBox

PtInRegion

RectInRegion

CreatePalette

SetROP2

GetPaletteEntries

CreateRectRgnIndirect

GetCharABCWidthsW

GetTextExtentExPointW

CreateDIBitmap

GetDIBits

CreateDIBSection

GetDIBColorTable

SetDIBColorTable

CreateICW

GetSystemPaletteEntries

CreateDCW

EnumFontFamiliesExW

StretchDIBits

GetWorldTransform

SetPixel

GetLayout

SetLayout

SetMapMode

SetGraphicsMode

ExtSelectClipRgn

SelectClipRgn

RoundRect

Rectangle

SetPolyFillMode

Pie

MaskBlt

GetWindowExtEx

SetViewportOrgEx

CloseEnhMetaFile

CreateEnhMetaFileW

DeleteEnhMetaFile

GetEnhMetaFileW

GetEnhMetaFileHeader

PlayEnhMetaFile

GetViewportExtEx

GetPixel

GetObjectType

GetGraphicsMode

GetClipBox

GetDeviceCaps

GetStockObject

SetBkMode

SetTextColor

ExtFloodFill

Ellipse

Arc

ExtCreatePen

CreatePen

CreateSolidBrush

CreatePatternBrush

CreateHatchBrush

CreateCompatibleBitmap

CreateBitmapIndirect

CreateBitmap

BitBlt

GetTextExtentPoint32W

SetBkColor

OffsetRgn

GetRegionData

ExtCreateRegion

GetOutlineTextMetricsW

CreateFontIndirectW

SetStretchBltMode

StretchBlt

DeleteDC

CreateCompatibleDC

GetObjectW

DeleteObject

GdiFlush

SetBrushOrgEx

GetTextMetricsW

PolyPolygon

SelectPalette

SelectObject

RealizePalette

ExcludeClipRect

GetNearestPaletteIndex

SetWindowExtEx

EndPage

StartPage

EndDoc

StartDocW

SetAbortProc

advapi32

FreeSid

RegEnumKeyW

GetUserNameW

RegSetValueExW

RegQueryValueExW

RegOpenKeyExW

RegEnumValueW

RegEnumKeyExW

RegDeleteValueW

RegDeleteKeyW

RegCreateKeyExW

RegCloseKey

SetSecurityDescriptorOwner

SetSecurityDescriptorGroup

SetSecurityDescriptorDacl

IsValidSid

IsValidSecurityDescriptor

InitializeSecurityDescriptor

InitializeAcl

GetTokenInformation

GetSidSubAuthorityCount

GetSidSubAuthority

GetSidIdentifierAuthority

GetLengthSid

OpenProcessToken

DuplicateToken

AllocateAndInitializeSid

AddAccessAllowedAce

AccessCheck

OpenThreadToken

shell32

SHCreateDirectoryExW

DragFinish

DragAcceptFiles

ExtractIconW

ExtractIconExW

CommandLineToArgvW

Shell_NotifyIconW

SHGetFolderPathW

SHChangeNotify

SHEmptyRecycleBinW

ShellExecuteExW

SHGetPathFromIDListW

SHGetFileInfoW

ord6

SHFileOperationW

ShellExecuteW

SHGetSpecialFolderLocation

DragQueryFileW

DragQueryPoint

rpcrt4

RpcStringFreeW

UuidToStringA

UuidCreate

UuidToStringW

shlwapi

UrlCanonicalizeW

UrlUnescapeW

AssocQueryStringW

SHAutoComplete

StrToIntW

client

Release

SetClientCallback

GetClientManager

wininet

InternetOpenW

InternetCloseHandle

InternetConnectW

InternetOpenUrlW

InternetReadFile

InternetQueryDataAvailable

InternetQueryOptionW

InternetSetOptionW

HttpOpenRequestW

HttpAddRequestHeadersW

HttpSendRequestW

HttpQueryInfoW

FindFirstUrlCacheEntryW

FindNextUrlCacheEntryW

FindCloseUrlCache

ws2_32

WSAAsyncSelect

ioctlsocket

WSASetLastError

gethostbyname

getservbyport

ntohl

htonl

shutdown

gethostname

WSAStartup

WSACleanup

getservbyname

WSAGetLastError

WSASocketW

closesocket

accept

bind

socket

htons

inet_addr

inet_ntoa

listen

ntohs

recv

recvfrom

send

sendto

setsockopt

gethostbyaddr

__WSAFDIsSet

connect

getsockname

getsockopt

select

crypt32

CertVerifySubjectCertificateContext

CertFindCertificateInStore

CertCloseStore

CertOpenStore

CertFreeCertificateContext

CertGetNameStringW

CertGetCertificateContextProperty

iphlpapi

IcmpSendEcho2

IcmpCreateFile

GetAdaptersInfo

SetIfEntry

GetTcpTable

GetIpForwardTable

GetIpNetTable

GetIfTable

GetIfEntry

vpn

GetVPNManager

SetCallback

winspool.drv

DocumentPropertiesW

GetPrinterW

OpenPrinterW

ClosePrinter

comdlg32

GetOpenFileNameW

PageSetupDlgW

PrintDlgW

ChooseFontW

GetSaveFileNameW

CommDlgExtendedError

ole32

OleUninitialize

ReleaseStgMedium

CoCreateInstance

OleInitialize

RevokeDragDrop

OleRun

OleLockRunning

CoTaskMemAlloc

CoTaskMemFree

CoLockObjectExternal

RegisterDragDrop

OleSetContainedObject

OleGetClipboard

OleFlushClipboard

OleIsCurrentClipboard

OleSetClipboard

oleaut32

SafeArrayUnlock

SafeArrayGetVartype

VariantTimeToSystemTime

SystemTimeToVariantTime

SysStringLen

SafeArrayLock

VariantClear

SetErrorInfo

VarBstrFromCy

VariantInit

SafeArrayPtrOfIndex

SafeArrayDestroy

SafeArrayCreate

SysFreeString

SysAllocString

GetErrorInfo

msimg32

GradientFill

AlphaBlend

oleacc

LresultFromObject

uxtheme

IsThemePartDefined

GetCurrentThemeName

SetWindowTheme

GetThemeBackgroundExtent

GetThemeFont

IsAppThemed

IsThemeActive

GetThemeSysFont

GetThemeSysColor

GetThemeInt

GetThemePartSize

GetThemeMargins

DrawThemeParentBackground

GetThemeColor

IsThemeBackgroundPartiallyTransparent

GetThemeBackgroundContentRect

DrawThemeBackground

CloseThemeData

OpenThemeData

comctl32

ImageList_Create

ImageList_GetIconSize

ImageList_GetImageInfo

ord17

ord16

ImageList_Destroy

ImageList_GetImageCount

ImageList_Add

ImageList_SetBkColor

ImageList_Draw

ImageList_Replace

Exports

pcre2_code_copy_16

pcre2_code_copy_with_tables_16

pcre2_code_free_16

pcre2_compile_16

pcre2_compile_context_copy_16

pcre2_compile_context_create_16

pcre2_compile_context_free_16

pcre2_config_16

pcre2_convert_context_copy_16

pcre2_convert_context_create_16

pcre2_convert_context_free_16

pcre2_general_context_copy_16

pcre2_general_context_create_16

pcre2_general_context_free_16

pcre2_get_error_message_16

pcre2_get_mark_16

pcre2_get_match_data_size_16

pcre2_get_ovector_count_16

pcre2_get_ovector_pointer_16

pcre2_get_startchar_16

pcre2_jit_compile_16

pcre2_jit_free_unused_memory_16

pcre2_jit_match_16

pcre2_jit_stack_assign_16

pcre2_jit_stack_create_16

pcre2_jit_stack_free_16

pcre2_match_16

pcre2_match_context_copy_16

pcre2_match_context_create_16

pcre2_match_context_free_16

pcre2_match_data_create_16

pcre2_match_data_create_from_pattern_16

pcre2_match_data_free_16

pcre2_set_bsr_16

pcre2_set_callout_16

pcre2_set_character_tables_16

pcre2_set_compile_extra_options_16

pcre2_set_compile_recursion_guard_16

pcre2_set_depth_limit_16

pcre2_set_glob_escape_16

pcre2_set_glob_separator_16

pcre2_set_heap_limit_16

pcre2_set_match_limit_16

pcre2_set_max_pattern_length_16

pcre2_set_newline_16

pcre2_set_offset_limit_16

pcre2_set_parens_nest_limit_16

pcre2_set_recursion_limit_16

pcre2_set_recursion_memory_management_16

pcre2_set_substitute_callout_16

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

OkayFreedomClient.res

.zip

res/XMLFEATURE/OkayFreedomClient.sxp

SteganosUI.res

.zip

res/BITMAP/IDB_MENUBORDER_NEUTRAL.bmp

res/BITMAP/IDB_MENU_BORDER_BLUE.bmp

res/BITMAP/IDB_STEGANOS_LOGO_SMALL.bmp

res/CBMP/BMP_ACTIVATIONNEW_DIALOG.png

.png

res/CBMP/BMP_APPLICATIONS_ICON16.png

.png

res/CBMP/BMP_APPLICATIONS_ICON32.png

.png

res/CBMP/BMP_ARROW_BACK16.png

.png

res/CBMP/BMP_ARROW_DOWN2_32.png

.png

res/CBMP/BMP_ARROW_DOWN32.png

.png

res/CBMP/BMP_ARROW_THIN.png

.png

res/CBMP/BMP_ATTACHMENT.png

.png

res/CBMP/BMP_ATTACHMENT_LARGE.png

.png

res/CBMP/BMP_ATTACHMENT_MEDIUM.png

.png

res/CBMP/BMP_BG_PREMIUM_NAGCREEN.png

.png

res/CBMP/BMP_BG_PREMIUM_NAGCREEN_LARGE.png

.png

res/CBMP/BMP_BG_PREMIUM_NAGCREEN_MEDIUM.png

.png

res/CBMP/BMP_BG_PREMIUM_NAGCREEN_PANELS.png

.png

res/CBMP/BMP_BG_PREMIUM_NAGCREEN_PANELS_LARGE.png

.png

res/CBMP/BMP_BG_PREMIUM_NAGCREEN_PANELS_MEDIUM.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_DE.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_DE_LARGE.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_DE_MEDIUM.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_EN.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_EN_LARGE.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_EN_MEDIUM.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_LARGE.png

.png

res/CBMP/BMP_BROWSER_INSTALL_PLUGIN_MEDIUM.png

.png

res/CBMP/BMP_BULLET.png

.png

res/CBMP/BMP_BULLET_NEW.png

.png

res/CBMP/BMP_BULLET_START.png

.png

res/CBMP/BMP_BULLET_START_LARGE.png

.png

res/CBMP/BMP_BULLET_START_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_ACTIVATE_DE.png

.png

res/CBMP/BMP_BUTTON_ACTIVATE_EN.png

.png

res/CBMP/BMP_BUTTON_ACTIVATE_ES.png

.png

res/CBMP/BMP_BUTTON_ACTIVATE_FR.png

.png

res/CBMP/BMP_BUTTON_ACTIVATE_PT.png

.png

res/CBMP/BMP_BUTTON_BUYNOW_DE.png

.png

res/CBMP/BMP_BUTTON_BUYNOW_EN.png

.png

res/CBMP/BMP_BUTTON_BUYNOW_ES.png

.png

res/CBMP/BMP_BUTTON_BUYNOW_FR.png

.png

res/CBMP/BMP_BUTTON_BUYNOW_JP.png

.png

res/CBMP/BMP_BUTTON_BUYNOW_PT.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_DE.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_EN.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_ES.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_FR.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_PT.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_TEMPLATE.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_TEMPLATE_LARGE.png

.png

res/CBMP/BMP_BUTTON_CONTINUE_TEMPLATE_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_DOT_1.png

.png

res/CBMP/BMP_BUTTON_DOT_FILLED_1.png

.png

res/CBMP/BMP_BUTTON_DOT_FILLED_LARGE.png

.png

res/CBMP/BMP_BUTTON_DOT_FILLED_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_DOT_LARGE.png

.png

res/CBMP/BMP_BUTTON_DOT_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_FIRST.png

.png

res/CBMP/BMP_BUTTON_FIRST_1.png

.png

res/CBMP/BMP_BUTTON_FIRST_2.png

.png

res/CBMP/BMP_BUTTON_FIRST_3.png

.png

res/CBMP/BMP_BUTTON_GEN_1.png

.png

res/CBMP/BMP_BUTTON_GEN_GRAY.png

.png

res/CBMP/BMP_BUTTON_GEN_LARGE.png

.png

res/CBMP/BMP_BUTTON_GEN_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_GETPASSWORD.png

.png

res/CBMP/BMP_BUTTON_LAST.png

.png

res/CBMP/BMP_BUTTON_LAST_1.png

.png

res/CBMP/BMP_BUTTON_LAST_2.png

.png

res/CBMP/BMP_BUTTON_LAST_3.png

.png

res/CBMP/BMP_BUTTON_LOGIN_DE.png

.png

res/CBMP/BMP_BUTTON_LOGIN_EN.png

.png

res/CBMP/BMP_BUTTON_LOGIN_ES.png

.png

res/CBMP/BMP_BUTTON_LOGIN_FR.png

.png

res/CBMP/BMP_BUTTON_LOGIN_PT.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_FULL.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_FULL_LARGE.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_FULL_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_FULL_SMALL.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_FULL_SMALL_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_LARGE.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_SMALL.png

.png

res/CBMP/BMP_BUTTON_NEWS_DOT_SMALL_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_NEXT.png

.png

res/CBMP/BMP_BUTTON_NEXT_1.png

.png

res/CBMP/BMP_BUTTON_NEXT_2.png

.png

res/CBMP/BMP_BUTTON_NEXT_3.png

.png

res/CBMP/BMP_BUTTON_PREVIOUS.png

.png

res/CBMP/BMP_BUTTON_PREVIOUS_1.png

.png

res/CBMP/BMP_BUTTON_PREVIOUS_2.png

.png

res/CBMP/BMP_BUTTON_PREVIOUS_3.png

.png

res/CBMP/BMP_BUTTON_REFRESH_DE.png

.png

res/CBMP/BMP_BUTTON_REFRESH_EN.png

.png

res/CBMP/BMP_BUTTON_REFRESH_ES.png

.png

res/CBMP/BMP_BUTTON_REFRESH_FR.png

.png

res/CBMP/BMP_BUTTON_REFRESH_PT.png

.png

res/CBMP/BMP_BUTTON_SIGNUP.png

.png

res/CBMP/BMP_BUTTON_SIGNUP_HOVER.png

.png

res/CBMP/BMP_BUTTON_SIGNUP_HOVER_LARGE.png

.png

res/CBMP/BMP_BUTTON_SIGNUP_HOVER_MEDIUM.png

.png

res/CBMP/BMP_BUTTON_SIGNUP_LARGE.png

.png

res/CBMP/BMP_BUTTON_SIGNUP_MEDIUM.png

.png

res/CBMP/BMP_BUY16.png

.png

res/CBMP/BMP_BUY20.png

.png

res/CBMP/BMP_BUY24.png

.png

res/CBMP/BMP_BUY32.png

.png

res/CBMP/BMP_BUY_HOVER16.png

.png

res/CBMP/BMP_BUY_HOVER20.png

.png

res/CBMP/BMP_BUY_HOVER24.png

.png

res/CBMP/BMP_BUY_HOVER32.png

.png

res/CBMP/BMP_CHECKBOXBORDER_CHECK_LARGE.png

.png

res/CBMP/BMP_CHECKBOXBORDER_LARGE.png

.png

res/CBMP/BMP_CHECKBOXCHECK.png

.png

res/CBMP/BMP_CHECKBOXCHECK_DISABLED.png

.png

res/CBMP/BMP_CHECKBOXCHECK_DISABLED_LARGE.png

.png

res/CBMP/BMP_CHECKBOXCHECK_DISABLED_MEDIUM.png

.png

res/CBMP/BMP_CHECKBOXCHECK_LARGE.png

.png

res/CBMP/BMP_CHECKBOXCHECK_MEDIUM.png

.png

res/CBMP/BMP_CLOUD_DIALOG.png

.png

res/CBMP/BMP_CLOUD_DIALOG_LARGE.png

.png

res/CBMP/BMP_CLOUD_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_CONFIGBUTTON_BG.png

.png

res/CBMP/BMP_CONFIGURE.png

.png

res/CBMP/BMP_CONFIG_DIALOG_LARGE.png

.png

res/CBMP/BMP_CONFIG_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_CONFIG_DIALOG_NEW.png

.png

res/CBMP/BMP_CONFIG_XP16.png

.png

res/CBMP/BMP_CONFIG_XP32.png

.png

res/CBMP/BMP_CONTENTWINDOW_BG.png

.png

res/CBMP/BMP_CONTRACT_BUTTON.png

.png

res/CBMP/BMP_CONTRACT_BUTTON_GRAY.png

.png

res/CBMP/BMP_DONE.png

.png

res/CBMP/BMP_DONE16.png

.png

res/CBMP/BMP_DONE28.png

.png

res/CBMP/BMP_DONE32.png

.png

res/CBMP/BMP_DONE48.png

.png

res/CBMP/BMP_EMPTY.png

.png

res/CBMP/BMP_EMPTY24.png

.png

res/CBMP/BMP_EMPTY32.png

.png

res/CBMP/BMP_EMPTY32_HIGHLIGHT_1.png

.png

res/CBMP/BMP_EMPTY32_NORMAL_1.png

.png

res/CBMP/BMP_EMPTY36.png

.png

res/CBMP/BMP_EMPTY48.png

.png

res/CBMP/BMP_EMPTY_GLOSS_1.png

.png

res/CBMP/BMP_EMPTY_HIGHLIGHT_1.png

.png

res/CBMP/BMP_EMPTY_NORMAL_1.png

.png

res/CBMP/BMP_EMPTY_NORMAL_2.png

.png

res/CBMP/BMP_ERROR.png

.png

res/CBMP/BMP_ERROR_LARGE.png

.png

res/CBMP/BMP_ERROR_MEDIUM.png

.png

res/CBMP/BMP_EXPAND_BUTTON.png

.png

res/CBMP/BMP_EXPAND_BUTTON_GRAY.png

.png

res/CBMP/BMP_EXTRACT_TO_CLIPBOARD16.png

.png

res/CBMP/BMP_EXTRACT_TO_CLIPBOARD32.png

.png

res/CBMP/BMP_FEEDBACK16.png

.png

res/CBMP/BMP_FEEDBACK32.png

.png

res/CBMP/BMP_FILETYPES_ICON16.png

.png

res/CBMP/BMP_FILE_TYPES32.png

.png

res/CBMP/BMP_FOLDER_CLOSED.png

.png

res/CBMP/BMP_FOLDER_OPEN.png

.png

res/CBMP/BMP_GETPASSWORD_DIALOG_LARGE.png

.png

res/CBMP/BMP_GETPASSWORD_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_GETPASSWORD_DIALOG_NEW.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_GLOSS_1.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_GLOSS_2.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_GLOSS_3.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_GLOSS_4.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_HIGHLIGHT_1.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_HIGHLIGHT_2.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_HIGHLIGHT_3.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_HIGHLIGHT_4.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_NORMAL_1.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_NORMAL_2.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_NORMAL_3.png

.png

res/CBMP/BMP_GLASSBUTTON_SQUARE_NORMAL_4.png

.png

res/CBMP/BMP_GOONLINE_1.png

.png

res/CBMP/BMP_GOONLINE_2.png

.png

res/CBMP/BMP_GOONLINE_3.png

.png

res/CBMP/BMP_GOONLINE_4.png

.png

res/CBMP/BMP_GOONLINE_LARGE.png

.png

res/CBMP/BMP_GOONLINE_MEDIUM.png

.png

res/CBMP/BMP_HELP.png

.png

res/CBMP/BMP_HELP16.png

.png

res/CBMP/BMP_HELP24.png

.png

res/CBMP/BMP_HELP2_20.png

.png

res/CBMP/BMP_HELP2_24.png

.png

res/CBMP/BMP_HELP2_HOVER20.png

.png

res/CBMP/BMP_HELP2_HOVER24.png

.png

res/CBMP/BMP_HELP32.png

.png

res/CBMP/BMP_HELP32_2.png

.png

res/CBMP/BMP_HELP36.png

.png

res/CBMP/BMP_HELP48.png

.png

res/CBMP/BMP_HELP64.png

.png

res/CBMP/BMP_HELP64_2.png

.png

res/CBMP/BMP_HELP_1.png

.png

res/CBMP/BMP_HELP_2.png

.png

res/CBMP/BMP_HELP_3.png

.png

res/CBMP/BMP_HELP_4.png

.png

res/CBMP/BMP_HELP_HOVER32.png

.png

res/CBMP/BMP_ICON_ANTISPYWARE16.png

.png

res/CBMP/BMP_ICON_ANTITHEFT16.png

.png

res/CBMP/BMP_ICON_BADPASSWORD16.png

.png

res/CBMP/BMP_ICON_BUY.png

.png

res/CBMP/BMP_ICON_BUY_32.png

.png

res/CBMP/BMP_ICON_BUY_36.png

.png

res/CBMP/BMP_ICON_BUY_48.png

.png

res/CBMP/BMP_ICON_CHECKMARK24.png

.png

res/CBMP/BMP_ICON_CHECKMARK36.png

.png

res/CBMP/BMP_ICON_CHECKMARK48.png

.png

res/CBMP/BMP_ICON_CLIPBOARD_16.png

.png

res/CBMP/BMP_ICON_CLIPBOARD_24.png

.png

res/CBMP/BMP_ICON_CLIPBOARD_32.png

.png

res/CBMP/BMP_ICON_COMFORTANDSECURITY16.png

.png

res/CBMP/BMP_ICON_DANGER16.png

.png

res/CBMP/BMP_ICON_EARTH1_16.png

.png

res/CBMP/BMP_ICON_ERROR.png

.png

res/CBMP/BMP_ICON_ERROR16.png

.png

res/CBMP/BMP_ICON_ERROR32.png

.png

res/CBMP/BMP_ICON_ERROR48.png

.png

res/CBMP/BMP_ICON_EXTERNALDRIVE16.png

.png

res/CBMP/BMP_ICON_FEATURE_SAFE16.png

.png

res/CBMP/BMP_ICON_FLOPPY16.png

.png

res/CBMP/BMP_ICON_HELP.png

.png

res/CBMP/BMP_ICON_HELP24.png

.png

res/CBMP/BMP_ICON_HELP_32.png

.png

res/CBMP/BMP_ICON_HELP_36.png

.png

res/CBMP/BMP_ICON_HELP_48.png

.png

res/CBMP/BMP_ICON_INFORMATION.png

.png

res/CBMP/BMP_ICON_INFORMATION16.png

.png

res/CBMP/BMP_ICON_INFORMATION28.png

.png

res/CBMP/BMP_ICON_INFORMATION32.png

.png

res/CBMP/BMP_ICON_INPUT.png

.png

res/CBMP/BMP_ICON_INPUT32.png

.png

res/CBMP/BMP_ICON_MEDIATYPE_DVD_DL16.png

.png

res/CBMP/BMP_ICON_MOBILE16.png

.png

res/CBMP/BMP_ICON_PHONE16.png

.png

res/CBMP/BMP_ICON_PRIVATEFAVORITES16.png

.png

res/CBMP/BMP_ICON_PROXYCHECK16.png

.png

res/CBMP/BMP_ICON_QUESTION.png

.png

res/CBMP/BMP_ICON_SAFE_FILE_TYPES16.png

.png

res/CBMP/BMP_ICON_SAFE_RESIZE_KUCHEN16.png

.png

res/CBMP/BMP_ICON_SAFE_SHORTCUTS16.png

.png

res/CBMP/BMP_ICON_SECURESURFING_CHECKANONIMITY16.png

.png

res/CBMP/BMP_ICON_SECURESURFING_IGNORE16.png

.png

res/CBMP/BMP_ICON_SEE_ADDFOLDER.png

.png

res/CBMP/BMP_ICON_SEE_SAVE16.png

.png

res/CBMP/BMP_ICON_SEE_SEND16.png

.png

res/CBMP/BMP_ICON_SETTINGS.png

.png

res/CBMP/BMP_ICON_SETTINGS_32.png

.png

res/CBMP/BMP_ICON_SETTINGS_36.png

.png

res/CBMP/BMP_ICON_SETTINGS_48.png

.png

res/CBMP/BMP_ICON_SETTINGS_BLACK16.png

.png

res/CBMP/BMP_ICON_SETTINGS_BLACK24.png

.png

res/CBMP/BMP_ICON_SETTINGS_BLACK36.png

.png

res/CBMP/BMP_ICON_SETTINGS_BLACK48.png

.png

res/CBMP/BMP_ICON_SMART_CARD.png

.png

res/CBMP/BMP_ICON_STARTER16.png

.png

res/CBMP/BMP_ICON_SUITE16.png

.png

res/CBMP/BMP_ICON_WARNING.png

.png

res/CBMP/BMP_ICON_WARNING16.png

.png

res/CBMP/BMP_ICON_WARNING28.png

.png

res/CBMP/BMP_ICON_WARNING32.png

.png

res/CBMP/BMP_ICON_WARNING48.png

.png

res/CBMP/BMP_ICON__USER_PASSWORDS16.png

.png

res/CBMP/BMP_IMAGEBUTTON_128_GLOSS_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_128_HIGHLIGHT_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_128_NORMAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_256_NORMAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_LARGE_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_LARGE_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_MEDIUM_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GENERAL_MEDIUM_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_GLOSS_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_HIGHLIGHT_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_NORMAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_GLOSS_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_GLOSS_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_GLOSS_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_HIGHLIGHT_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_HIGHLIGHT_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_HIGHLIGHT_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_NORMAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_NORMAL_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_EMPTY_NORMAL_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_SMALL_HIGHLIGHT_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_GLOSS_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_GLOSS_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_GLOSS_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_HIGHLIGHT_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_HIGHLIGHT_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_HIGHLIGHT_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_NORMAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_NORMAL_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKBWIDE_NORMAL_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_GLOSS_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_GLOSS_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_GLOSS_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_HIGHLIGHT_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_HIGHLIGHT_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_HIGHLIGHT_3.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_NORMAL_1.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_NORMAL_2.png

.png

res/CBMP/BMP_IMAGEBUTTON_VKB_NORMAL_3.png

.png

res/CBMP/BMP_INFO12.png

.png

res/CBMP/BMP_INFO16.png

.png

res/CBMP/BMP_INFO18.png

.png

res/CBMP/BMP_INFO24.png

.png

res/CBMP/BMP_INFO32.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_LARGE.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_MEDIUM.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_OLD.png

.png

res/CBMP/BMP_INFO_DIALOG.png

.png

res/CBMP/BMP_INFO_DIALOG_LARGE.png

.png

res/CBMP/BMP_INFO_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_INFO_DIALOG_NEW.png

.png

res/CBMP/BMP_INFO_POPUP_BACKGROUND.png

.png

res/CBMP/BMP_INFO_POPUP_BACKGROUND2.png

.png

res/CBMP/BMP_INFO_POPUP_BACKGROUND3.png

.png

res/CBMP/BMP_INFO_POPUP_BACKGROUND_SUCCESS.png

.png

res/CBMP/BMP_INFO_POPUP_BOTTOM.png

.png

res/CBMP/BMP_INFO_POPUP_BOTTOM_SUCCESS.png

.png

res/CBMP/BMP_INFO_POPUP_RIGHT.png

.png

res/CBMP/BMP_INFO_POPUP_RIGHT_SUCCESS.png

.png

res/CBMP/BMP_INTERFERER_DE.png

.png

res/CBMP/BMP_INTERFERER_DE_LARGE.png

.png

res/CBMP/BMP_INTERFERER_DE_MEDIUM.png

.png

res/CBMP/BMP_INTERFERER_EN.png

.png

res/CBMP/BMP_INTERFERER_EN_LARGE.png

.png

res/CBMP/BMP_INTERFERER_EN_MEDIUM.png

.png

res/CBMP/BMP_MESSAGE_BIG.png

.png

res/CBMP/BMP_MESSAGE_DIALOG.png

.png

res/CBMP/BMP_MESSAGE_DIALOG_LARGE.png

.png

res/CBMP/BMP_MESSAGE_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_MYSTEGANOS.png

.png

res/CBMP/BMP_MYSTEGANOS_LARGE.png

.png

res/CBMP/BMP_MYSTEGANOS_MEDIUM.png

.png

res/CBMP/BMP_NEWPASSWORD_DIALOG.png

.png

res/CBMP/BMP_NEWPASSWORD_DIALOG_LARGE.png

.png

res/CBMP/BMP_NEWPASSWORD_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_NEWSPANEL.png

.png

res/CBMP/BMP_NEWSPANEL_LARGE.png

.png

res/CBMP/BMP_NEWSPANEL_MEDIUM.png

.png

res/CBMP/BMP_NL_HEADER.png

.png

res/CBMP/BMP_NL_HEADER_LARGE.png

.png

res/CBMP/BMP_NL_HEADER_MEDIUM.png

.png

res/CBMP/BMP_PASSWORDQUALITY.png

.png

res/CBMP/BMP_PASSWORDQUALITY_LOW.png

.png

res/CBMP/BMP_PASSWORD_DOT16.png

.png

res/CBMP/BMP_PHONE.png

.png

res/CBMP/BMP_PICPASS_ICON.png

.png

res/CBMP/BMP_QUIT_XP16.png

.png

res/CBMP/BMP_RADIO_ACTIVE.png

.png

res/CBMP/BMP_RADIO_INACTIVE.png

.png

res/CBMP/BMP_RANDOMAREA.png

.png

res/CBMP/BMP_RANDOMAREA_LARGE.png

.png

res/CBMP/BMP_RANDOMAREA_MEDIUM.png

.png

res/CBMP/BMP_SEARCH16.png

.png

res/CBMP/BMP_SEE_ADDFILE.png

.png

res/CBMP/BMP_SEPARATOR.png

.png

res/CBMP/BMP_SEPARATOR_WIDE.png

.png

res/CBMP/BMP_SETTINGS2_20.png

.png

res/CBMP/BMP_SETTINGS2_24.png

.png

res/CBMP/BMP_SETTINGS2_32.png

.png

res/CBMP/BMP_SETTINGS2_HOVER20.png

.png

res/CBMP/BMP_SETTINGS2_HOVER24.png

.png

res/CBMP/BMP_SETTINGS2_HOVER32.png

.png

res/CBMP/BMP_SETTINGS32.png

.png

res/CBMP/BMP_SETTINGS_HOVER32.png

.png

res/CBMP/BMP_SPIN_0.png

.png

res/CBMP/BMP_SPIN_1.png

.png

res/CBMP/BMP_SPIN_10.png

.png

res/CBMP/BMP_SPIN_11.png

.png

res/CBMP/BMP_SPIN_12.png

.png

res/CBMP/BMP_SPIN_13.png

.png

res/CBMP/BMP_SPIN_14.png

.png

res/CBMP/BMP_SPIN_15.png

.png

res/CBMP/BMP_SPIN_16.png

.png

res/CBMP/BMP_SPIN_17.png

.png

res/CBMP/BMP_SPIN_18.png

.png

res/CBMP/BMP_SPIN_2.png

.png

res/CBMP/BMP_SPIN_3.png

.png

res/CBMP/BMP_SPIN_4.png

.png

res/CBMP/BMP_SPIN_5.png

.png

res/CBMP/BMP_SPIN_6.png

.png

res/CBMP/BMP_SPIN_7.png

.png

res/CBMP/BMP_SPIN_8.png

.png

res/CBMP/BMP_SPIN_9.png

.png

res/CBMP/BMP_SPLASH_SPIN_0.png

.png

res/CBMP/BMP_SPLASH_SPIN_1.png

.png

res/CBMP/BMP_SPLASH_SPIN_10.png

.png

res/CBMP/BMP_SPLASH_SPIN_11.png

.png

res/CBMP/BMP_SPLASH_SPIN_12.png

.png

res/CBMP/BMP_SPLASH_SPIN_13.png

.png

res/CBMP/BMP_SPLASH_SPIN_14.png

.png

res/CBMP/BMP_SPLASH_SPIN_15.png

.png

res/CBMP/BMP_SPLASH_SPIN_16.png

.png

res/CBMP/BMP_SPLASH_SPIN_17.png

.png

res/CBMP/BMP_SPLASH_SPIN_18.png

.png

res/CBMP/BMP_SPLASH_SPIN_2.png

.png

res/CBMP/BMP_SPLASH_SPIN_3.png

.png

res/CBMP/BMP_SPLASH_SPIN_4.png

.png

res/CBMP/BMP_SPLASH_SPIN_5.png

.png

res/CBMP/BMP_SPLASH_SPIN_6.png

.png

res/CBMP/BMP_SPLASH_SPIN_7.png

.png

res/CBMP/BMP_SPLASH_SPIN_8.png

.png

res/CBMP/BMP_SPLASH_SPIN_9.png

.png

res/CBMP/BMP_SPM_INFO_POPUP_BG_SMALL.png

.png

res/CBMP/BMP_STEGANOS_LOGO.png

.png

res/CBMP/BMP_STEGANOS_LOGO_CURRENT.png

.png

res/CBMP/BMP_STEGANOS_LOGO_CURRENT_LARGE.png

.png

res/CBMP/BMP_STEGANOS_LOGO_CURRENT_MEDIUM.png

.png

res/CBMP/BMP_STEGANOS_LOGO_NEW.png

.png

res/CBMP/BMP_STEGANOS_LOGO_REFLECTION.png

.png

res/CBMP/BMP_STEGANOS_LOGO_SMALL.bmp

res/CBMP/BMP_STEGANOS_LOGO_SMALLER_NEW.png

.png

res/CBMP/BMP_STEGANOS_LOGO_SMALL_NEW.png

.png

res/CBMP/BMP_STEGANOS_LOGO_SMALL_WHITE.png

.png

res/CBMP/BMP_STEGANOS_LOGO_WHITE.png

.png

res/CBMP/BMP_STEGANOS_LOGO_WHITE_HOVER.png

.png

res/CBMP/BMP_STEGANOS_LOGO_WHITE_NORMAL.png

.png

res/CBMP/BMP_THEME_BG_CD.png

.png

res/CBMP/BMP_THEME_BG_CD_CHECK.png

.png

res/CBMP/BMP_THEME_BG_CD_CHECK_LARGE.png

.png

res/CBMP/BMP_THEME_BG_CD_CHECK_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_CD_LARGE.png

.png

res/CBMP/BMP_THEME_BG_CD_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_CL.png

.png

res/CBMP/BMP_THEME_BG_CL_CHECK.png

.png

res/CBMP/BMP_THEME_BG_CL_CHECK_LARGE.png

.png

res/CBMP/BMP_THEME_BG_CL_CHECK_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_CL_LARGE.png

.png

res/CBMP/BMP_THEME_BG_CL_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_CM.png

.png

res/CBMP/BMP_THEME_BG_CM_CHECK.png

.png

res/CBMP/BMP_THEME_BG_CM_CHECK_LARGE.png

.png

res/CBMP/BMP_THEME_BG_CM_CHECK_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_CM_LARGE.png

.png

res/CBMP/BMP_THEME_BG_CM_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_MD.png

.png

res/CBMP/BMP_THEME_BG_MD_CHECK.png

.png

res/CBMP/BMP_THEME_BG_MD_CHECK_LARGE.png

.png

res/CBMP/BMP_THEME_BG_MD_CHECK_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_MD_LARGE.png

.png

res/CBMP/BMP_THEME_BG_MD_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_ML.png

.png

res/CBMP/BMP_THEME_BG_ML_CHECK.png

.png

res/CBMP/BMP_THEME_BG_ML_CHECK_LARGE.png

.png

res/CBMP/BMP_THEME_BG_ML_CHECK_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_ML_LARGE.png

.png

res/CBMP/BMP_THEME_BG_ML_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_MM.png

.png

res/CBMP/BMP_THEME_BG_MM_CHECK.png

.png

res/CBMP/BMP_THEME_BG_MM_CHECK_LARGE.png

.png

res/CBMP/BMP_THEME_BG_MM_CHECK_MEDIUM.png

.png

res/CBMP/BMP_THEME_BG_MM_LARGE.png

.png

res/CBMP/BMP_THEME_BG_MM_MEDIUM.png

.png

res/CBMP/BMP_TRIAL_DIALOG.png

.png

res/CBMP/BMP_TRIAL_DIALOG_LARGE.png

.png

res/CBMP/BMP_UPDATESERVICE.png

.png

res/CBMP/BMP_UPDATESERVICE16.png

.png

res/CBMP/BMP_UPDATESERVICE48.png

.png

res/CBMP/BMP_UPDATESERVICE64.png

.png

res/CBMP/BMP_USB_STICK.png

.png

res/CBMP/BMP_USB_STICK16.png

.png

res/CBMP/BMP_USB_STICK_BIG.png

.png

res/CBMP/BMP_WAITBAR.png

.png

res/CBMP/BMP_WAITBAR_BORDER_LEFT.png

.png

res/CBMP/BMP_WAITBAR_BORDER_RIGHT.png

.png

res/CBMP/BMP_WARNING.png

.png

res/CBMP/BMP_WARNING_LARGE.png

.png

res/CBMP/BMP_WARNING_MEDIUM.png

.png

res/CBMP/BMP_WIZARD_INTERIOR.png

.png

res/CBMP/BMP_WIZARD_INTERIOR_LARGE.png

.png

res/CBMP/BMP_WIZARD_INTERIOR_MEDIUM.png

.png

res/CBMP/BMP_WIZARD_THANKYOU.png

.png

res/CBMP/BMP_WIZARD_WELCOME.png

.png

res/CBMP/BMP_WIZARD_WELCOME_LARGE.png

.png

res/CBMP/BMP_WIZARD_WELCOME_MEDIUM.png

.png

res/CBMP/BROWSER_CHROME_DESELECTED.png

.png

res/CBMP/BROWSER_CHROME_DESELECTED_LARGE.png

.png

res/CBMP/BROWSER_CHROME_DESELECTED_MEDIUM.png

.png

res/CBMP/BROWSER_CHROME_SELECTED.png

.png

res/CBMP/BROWSER_CHROME_SELECTED_LARGE.png

.png

res/CBMP/BROWSER_CHROME_SELECTED_MEDIUM.png

.png

res/CBMP/BROWSER_EDGE_DESELECTED.png

.png

res/CBMP/BROWSER_EDGE_DESELECTED_LARGE.png

.png

res/CBMP/BROWSER_EDGE_DESELECTED_MEDIUM.png

.png

res/CBMP/BROWSER_EDGE_SELECTED.png

.png

res/CBMP/BROWSER_EDGE_SELECTED_LARGE.png

.png

res/CBMP/BROWSER_EDGE_SELECTED_MEDIUM.png

.png

res/CBMP/BROWSER_FIREFOX_DESELECTED.png

.png

res/CBMP/BROWSER_FIREFOX_DESELECTED_LARGE.png

.png

res/CBMP/BROWSER_FIREFOX_DESELECTED_MEDIUM.png

.png

res/CBMP/BROWSER_FIREFOX_SELECTED.png

.png

res/CBMP/BROWSER_FIREFOX_SELECTED_LARGE.png

.png

res/CBMP/BROWSER_FIREFOX_SELECTED_MEDIUM.png

.png

res/CURSOR/IDC_HYPERLINK.cur

res/ICON/IDI_ARROW.ico

res/ICON/IDI_BADPASSWORD.ico

res/ICON/IDI_BROWSE_SMALL.ico

res/ICON/IDI_BULLET.ico

res/ICON/IDI_CODEMETER.ico

res/ICON/IDI_COMPUTER.ico

res/ICON/IDI_CONFIG.ico

res/ICON/IDI_CONFIG_SMALL.ico

res/ICON/IDI_CONFIG_XP.ico

res/ICON/IDI_CRYSTAL_ACTION_CONFIGURE.ico

res/ICON/IDI_CRYSTAL_ACTION_SEARCH.ico

res/ICON/IDI_DEFAULT.ico

res/ICON/IDI_EMPTY.ico

res/ICON/IDI_ERASE.ico

res/ICON/IDI_ERROR.ico

res/ICON/IDI_EXTERNAL_DRIVE.ico

res/ICON/IDI_FEEDBACK.ico

res/ICON/IDI_FINGERPRINT.ico

res/ICON/IDI_FLOPPY.ico

res/ICON/IDI_FOLDER_CLOSED.ico

res/ICON/IDI_FOLDER_OPEN.ico

res/ICON/IDI_HELP.ico

res/ICON/IDI_HELP_XP.ico

res/ICON/IDI_MOBILE.ico

res/ICON/IDI_NOTE.ico

res/ICON/IDI_ORDER.ico

res/ICON/IDI_PHONE.ico

res/ICON/IDI_QUIT.ico

res/ICON/IDI_QUIT_XP.ico

res/ICON/IDI_SEF.ico

res/ICON/IDI_SMART_CARD.ico

res/ICON/IDI_STEGANOS.ico

res/ICON/IDI_STEGANOS_LOGO.ico

res/ICON/IDI_UNKNOWN_DEVICE.ico

res/ICON/IDI_UPDATESERVICE.ico

res/ICON/IDI_USB_STICK.ico

res/ICON/IDI_WARNING_XP.ico

res/ICON/IDI_WINDOW_XP.ico

res/ICON/IDI_WIN_WARNING.ico

res/TEXTSTRINGTABLE/CN_HELP.txt

res/TEXTSTRINGTABLE/CN_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/DE_HELP.txt

res/TEXTSTRINGTABLE/DE_LANGUAGES.txt

res/TEXTSTRINGTABLE/DE_NAMES.txt

res/TEXTSTRINGTABLE/DE_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/DE_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/DE_UNITS.txt

res/TEXTSTRINGTABLE/EN_HELP.txt

res/TEXTSTRINGTABLE/EN_LANGUAGES.txt

res/TEXTSTRINGTABLE/EN_NAMES.txt

res/TEXTSTRINGTABLE/EN_STEGANOSUIDLL.txt

.vbs

res/TEXTSTRINGTABLE/EN_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/EN_UNITS.txt

res/TEXTSTRINGTABLE/ES_HELP.txt

res/TEXTSTRINGTABLE/ES_LANGUAGES.txt

res/TEXTSTRINGTABLE/ES_NAMES.txt

res/TEXTSTRINGTABLE/ES_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/ES_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/ES_UNITS.txt

res/TEXTSTRINGTABLE/FR_HELP.txt

res/TEXTSTRINGTABLE/FR_LANGUAGES.txt

res/TEXTSTRINGTABLE/FR_NAMES.txt

res/TEXTSTRINGTABLE/FR_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/FR_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/FR_UNITS.txt

res/TEXTSTRINGTABLE/IT_HELP.txt

res/TEXTSTRINGTABLE/IT_LANGUAGES.txt

res/TEXTSTRINGTABLE/IT_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/IT_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/JP_HELP.txt

res/TEXTSTRINGTABLE/JP_LANGUAGES.txt

res/TEXTSTRINGTABLE/JP_NAMES.txt

res/TEXTSTRINGTABLE/JP_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/JP_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/JP_UNITS.txt

res/TEXTSTRINGTABLE/NL_HELP.txt

res/TEXTSTRINGTABLE/NL_LANGUAGES.txt

res/TEXTSTRINGTABLE/NL_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/NL_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/NL_UNITS.txt

res/TEXTSTRINGTABLE/PL_HELP.txt

res/TEXTSTRINGTABLE/PL_LANGUAGES.txt

res/TEXTSTRINGTABLE/PL_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/PL_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/PT_HELP.txt

res/TEXTSTRINGTABLE/PT_LANGUAGES.txt

res/TEXTSTRINGTABLE/PT_NAMES.txt

res/TEXTSTRINGTABLE/PT_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/PT_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/PT_UNITS.txt

res/TEXTSTRINGTABLE/RU_HELP.txt

res/TEXTSTRINGTABLE/RU_LANGUAGES.txt

res/TEXTSTRINGTABLE/RU_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/RU_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/SV_HELP.txt

res/TEXTSTRINGTABLE/SV_LANGUAGES.txt

res/TEXTSTRINGTABLE/SV_STEGANOSUIDLL.txt

res/TEXTSTRINGTABLE/SV_TEXTCONTENT.txt

res/TEXTSTRINGTABLE/URL_URLS.txt

Tleilaxu.res

.zip

res/XMLFEATURE/Tleilaxu.sxp

Updater.res

.zip

res/CBMP/BMP_UPDATER_BACKGROUND.png

.png

res/CBMP/BMP_UPDATER_BACKGROUND_LARGE.png

.png

res/CBMP/BMP_UPDATER_BACKGROUND_MEDIUM.png

.png

res/CBMP/BMP_UPDATER_TITLE.png

.png

res/CBMP/BMP_UPDATER_TITLE_NEUTRAL.png

.png

res/ICON/IDI_UPDATESERVICE.ico

res/MANIFEST/ArchiCryptUpdater.exe.manifest

.xml

res/MANIFEST/SteganosUpdater.exe.manifest

.xml

res/TEXTSTRINGTABLE/DE_UPDATER.txt

res/TEXTSTRINGTABLE/EN_UPDATER.txt

res/TEXTSTRINGTABLE/ES_UPDATER.txt

res/TEXTSTRINGTABLE/FR_UPDATER.txt

res/TEXTSTRINGTABLE/IT_UPDATER.txt

res/TEXTSTRINGTABLE/JP_UPDATER.txt

res/TEXTSTRINGTABLE/NL_UPDATER.txt

res/TEXTSTRINGTABLE/PL_UPDATER.txt

res/TEXTSTRINGTABLE/PT_UPDATER.txt

res/TEXTSTRINGTABLE/RU_UPDATER.txt

res/TEXTSTRINGTABLE/SV_UPDATER.txt

res/XMLFEATURE/Updater.sxp

XVPNClient.res

.zip

res/CBMP/BMP_EMPTYNEW24.png

.png

res/CBMP/BMP_EMPTYNEW36.png

.png

res/CBMP/BMP_EMPTYNEW48.png

.png

res/CBMP/BMP_PROGRESSBAR_EMPTY.png

.png

res/ICON/IDI_ICON_XVPN.ico

res/MANIFEST/VPNClient.exe.manifest

.xml

res/MANIFEST/VPNService.exe.manifest

.xml

res/TEXTSTRINGTABLE/DE_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/EN_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/ES_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/FR_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/IT_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/JP_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/NL_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/PL_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/PT_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/RU_XVPNCLIENT.txt

res/TEXTSTRINGTABLE/SV_XVPNCLIENT.txt

XVPNClient_OKAYFREEDOM.res

.zip

res/CBMP/BMP_BACKGROUND_SIAVPN2_SETTINGS.png

.png

res/CBMP/BMP_BUY16.png

.png

res/CBMP/BMP_CONFIG_XP16.png

.png

res/CBMP/BMP_FLAG_CH16.png

.png

res/CBMP/BMP_FLAG_CH64.png

.png

res/CBMP/BMP_FLAG_CH_CHECKED16.png

.png

res/CBMP/BMP_FLAG_DE16.png

.png

res/CBMP/BMP_FLAG_DE64.png

.png

res/CBMP/BMP_FLAG_DE_CHECKED16.png

.png

res/CBMP/BMP_FLAG_EG16.png

.png

res/CBMP/BMP_FLAG_EG64.png

.png

res/CBMP/BMP_FLAG_EG_CHECKED16.png

.png

res/CBMP/BMP_FLAG_ES16.png

.png

res/CBMP/BMP_FLAG_ES64.png

.png

res/CBMP/BMP_FLAG_ES_CHECKED16.png

.png

res/CBMP/BMP_FLAG_FR16.png

.png

res/CBMP/BMP_FLAG_FR64.png

.png

res/CBMP/BMP_FLAG_FR_CHECKED16.png

.png

res/CBMP/BMP_FLAG_JP16.png

.png

res/CBMP/BMP_FLAG_JP64.png

.png

res/CBMP/BMP_FLAG_JP_CHECKED16.png

.png

res/CBMP/BMP_FLAG_NL16.png

.png

res/CBMP/BMP_FLAG_NL64.png

.png

res/CBMP/BMP_FLAG_NL_CHECKED16.png

.png

res/CBMP/BMP_FLAG_RO16.png

.png

res/CBMP/BMP_FLAG_RO64.png

.png

res/CBMP/BMP_FLAG_RO_CHECKED16.png

.png

res/CBMP/BMP_FLAG_SG16.png

.png

res/CBMP/BMP_FLAG_SG64.png

.png

res/CBMP/BMP_FLAG_SG_CHECKED16.png

.png

res/CBMP/BMP_FLAG_TR16.png

.png

res/CBMP/BMP_FLAG_TR64.png

.png

res/CBMP/BMP_FLAG_TR_CHECKED16.png

.png

res/CBMP/BMP_FLAG_UK16.png

.png

res/CBMP/BMP_FLAG_UK64.png

.png

res/CBMP/BMP_FLAG_UK_CHECKED16.png

.png

res/CBMP/BMP_FLAG_US16.png

.png

res/CBMP/BMP_FLAG_US64.png

.png

res/CBMP/BMP_FLAG_US_CHECKED16.png

.png

res/CBMP/BMP_HELP16.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_NORMAL.png

.png

res/CBMP/BMP_IMAGEBUTTON_CONFIG_NORMAL_HOT.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_LARGE.png

.png

res/CBMP/BMP_INFOSCREEN_BACKGROUND_MEDIUM.png

.png

res/CBMP/BMP_INFO_DIALOG.png

.png

res/CBMP/BMP_INFO_DIALOG_LARGE.png

.png

res/CBMP/BMP_INFO_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_LOGO_AUTOOFF16.png

.png

res/CBMP/BMP_LOGO_AUTOOFF24.png

.png

res/CBMP/BMP_LOGO_AUTOOFF36.png

.png

res/CBMP/BMP_LOGO_AUTOOFF48.png

.png

res/CBMP/BMP_LOGO_AUTOOFF_CHECKED16.png

.png

res/CBMP/BMP_LOGO_AUTOOFF_CHECKED24.png

.png

res/CBMP/BMP_LOGO_AUTOOFF_CHECKED36.png

.png

res/CBMP/BMP_LOGO_AUTOOFF_CHECKED48.png

.png

res/CBMP/BMP_LOGO_AUTOON16.png

.png

res/CBMP/BMP_LOGO_AUTOON_CHECKED16.png

.png

res/CBMP/BMP_LOGO_FASTEST16.png

.png

res/CBMP/BMP_LOGO_FASTEST_CHECKED16.png

.png

res/CBMP/BMP_LOGO_INVITE16.png

.png

res/CBMP/BMP_LOGO_ON16.png

.png

res/CBMP/BMP_LOGO_ON24.png

.png

res/CBMP/BMP_LOGO_ON36.png

.png

res/CBMP/BMP_LOGO_ON48.png

.png

res/CBMP/BMP_LOGO_ON_CHECKED16.png

.png

res/CBMP/BMP_LOGO_ON_CHECKED24.png

.png

res/CBMP/BMP_LOGO_ON_CHECKED36.png

.png

res/CBMP/BMP_LOGO_ON_CHECKED48.png

.png

res/CBMP/BMP_LOGO_SIAVPN16.png

.png

res/CBMP/BMP_LOGO_SIAVPN2_16.png

.png

res/CBMP/BMP_LOGO_SIAVPN2_32.png

.png

res/CBMP/BMP_LOGO_SIAVPN2_48.png

.png

res/CBMP/BMP_LOGO_UNLOCK16.png

.png

res/CBMP/BMP_MESSAGE_DIALOG.png

.png

res/CBMP/BMP_MESSAGE_DIALOG_LARGE.png

.png

res/CBMP/BMP_MESSAGE_DIALOG_MEDIUM.png

.png

res/CBMP/BMP_QUIT_XP16.png

.png

res/CBMP/BMP_STEGANOS_LOGO.png

.png

res/ICON/IDI_FEATURE_VPNCLIENT.ico

res/ICON/IDI_FLAG_CH.ico

res/ICON/IDI_FLAG_DE.ico

res/ICON/IDI_FLAG_ES.ico

res/ICON/IDI_FLAG_FR.ico

res/ICON/IDI_FLAG_UK.ico

res/ICON/IDI_FLAG_US.ico

res/ICON/IDI_ICON_OKAYFREEDOM.ico

res/ICON/IDI_ICON_SIAVPN2.ico

res/ICON/IDI_OKAYFREEDOM_ICON.ico

res/ICON/IDI_PRODUCT.ico

res/ICON/IDI_SIAVPN_AUTO.ico

res/ICON/IDI_SIAVPN_CONNECTED.ico

res/ICON/IDI_SIAVPN_DISCONNECTED.ico

res/TEXTSTRINGTABLE/DE_PRODUCT.txt

res/TEXTSTRINGTABLE/EN_PRODUCT.txt

res/TEXTSTRINGTABLE/ES_PRODUCT.txt

res/TEXTSTRINGTABLE/FR_PRODUCT.txt

res/TEXTSTRINGTABLE/IT_PRODUCT.txt

res/TEXTSTRINGTABLE/JP_PRODUCT.txt

res/TEXTSTRINGTABLE/NL_PRODUCT.txt

res/TEXTSTRINGTABLE/PL_PRODUCT.txt

res/TEXTSTRINGTABLE/PT_PRODUCT.txt

res/TEXTSTRINGTABLE/RU_PRODUCT.txt

res/TEXTSTRINGTABLE/SV_PRODUCT.txt

client.dll

.dll windows:6 windows x86 arch:x86

1dfbb9cf7f5206c7b3fc01c1c46080a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

P:\code\clientdll\client.pdb

Imports

advapi32

GetUserNameW

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegDeleteValueW

RegEnumKeyExW

RegEnumValueW

RegOpenKeyExW

RegQueryValueExW

RegSetValueExW

shell32

SHFileOperationW

SHGetPathFromIDListW

SHGetSpecialFolderLocation

SHGetFolderPathW

user32

GetWindowThreadProcessId

AttachThreadInput

ShowWindow

SetWindowPos

IsWindowVisible

BringWindowToTop

EnableWindow

UpdateWindow

GetForegroundWindow

SetForegroundWindow

MessageBoxW

ws2_32

WSACleanup

WSAStartup

gethostbyname

inet_ntoa

WSAGetLastError

winhttp

WinHttpCloseHandle

WinHttpReceiveResponse

WinHttpSendRequest

WinHttpAddRequestHeaders

WinHttpOpenRequest

WinHttpQueryDataAvailable

WinHttpReadData

WinHttpOpen

WinHttpQueryHeaders

WinHttpConnect

iphlpapi

SetIfEntry

GetIpForwardTable

GetIfTable

GetIfEntry

GetAdaptersInfo

kernel32

GetOEMCP

GetACP

IsValidCodePage

FindFirstFileExW

HeapReAlloc

SetConsoleCtrlHandler

GetTimeZoneInformation

SetStdHandle

GetCommandLineA

GetCurrentDirectoryW

SetCurrentDirectoryW

ReadConsoleW

SetFilePointerEx

GetFileSizeEx

GetConsoleMode

GetConsoleOutputCP

WriteFile

FlushFileBuffers

EnumSystemLocalesW

GetUserDefaultLCID

IsValidLocale

GetLocaleInfoW

LCMapStringW

CompareStringW

GetTimeFormatW

GetDateFormatW

GetCurrentThread

WriteConsoleW

GetCommandLineW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEnvironmentVariableW

HeapSize

GetFullPathNameW

ExpandEnvironmentStringsW

CreateDirectoryW

CreateFileW

DeleteFileW

FindClose

FindFirstFileW

FindNextFileW

GetFileAttributesExW

QueryDosDeviceW

GetTempPathW

OutputDebugStringW

CloseHandle

GetLastError

HeapAlloc

HeapFree

GetProcessHeap

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

GetProcessId

OpenProcess

GetSystemDirectoryW

GetVersionExW

FreeLibrary

GetProcAddress

LoadLibraryW

GetComputerNameW

MultiByteToWideChar

WideCharToMultiByte

CreateToolhelp32Snapshot

Process32FirstW

Process32NextW

K32GetModuleFileNameExW

K32GetProcessMemoryInfo

K32GetProcessImageFileNameW

FormatMessageA

GetStringTypeW

InitializeCriticalSectionEx

LocalFree

GetLocaleInfoEx

EncodePointer

DecodePointer

LCMapStringEx

CompareStringEx

GetCPInfo

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

IsProcessorFeaturePresent

IsDebuggerPresent

GetStartupInfoW

GetModuleHandleW

QueryPerformanceCounter

GetSystemTimeAsFileTime

InitializeSListHead

GetModuleFileNameW

RaiseException

RtlUnwind

InterlockedPushEntrySList

InterlockedFlushSList

SetLastError

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

ExitProcess

GetModuleHandleExW

ReadFile

GetDriveTypeW

GetFileInformationByHandle

GetFileType

PeekNamedPipe

SystemTimeToTzSpecificLocalTime

FileTimeToSystemTime

GetStdHandle

SetEndOfFile

Exports

GetClientManager

Release

SetClientCallback

TestCallback

Sections

.text
Size: 772KB - Virtual size: 771KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

concrt140.dll

.dll windows:6 windows x86 arch:x86

cea4c25dc5ef830ccb5e12fba9b161ff

Code Sign

33:00:00:00:eb:69:aa:cc:3e:29:9f:2d:39:00:00:00:00:00:eb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:19

Not After

23/11/2019, 20:19

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5e:aa:66:6e:41:ad:ae:b8:e5:e3:71:a8:6a:23:3b:8b:1b:f5:89:2f:54:3d:da:4c:7a:38:97:3d:6a:da:45:54
Signer

Actual PE Digest

5e:aa:66:6e:41:ad:ae:b8:e5:e3:71:a8:6a:23:3b:8b:1b:f5:89:2f:54:3d:da:4c:7a:38:97:3d:6a:da:45:54

Digest Algorithm

sha256

PE Digest Matches

true

8e:e4:0c:2c:f9:54:8a:9e:f3:4c:47:69:ea:76:3d:d4:4d:2a:55:7d
Signer

Actual PE Digest

8e:e4:0c:2c:f9:54:8a:9e:f3:4c:47:69:ea:76:3d:d4:4d:2a:55:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d:\agent\_work\3\s\\binaries\x86ret\bin\i386\\concrt140.i386.pdb

Imports

msvcp140

__crtCloseThreadpoolWait

__crtSetThreadpoolWait

?_Xbad_function_call@std@@YAXXZ

__crtCreateThreadpoolWait

__crtCloseThreadpoolTimer

__crtWaitForThreadpoolTimerCallbacks

__crtCreateThreadpoolTimer

?__ExceptionPtrRethrow@@YAXPBX@Z

?__ExceptionPtrCurrentException@@YAXPAX@Z

?__ExceptionPtrCopy@@YAXPAXPBX@Z

?__ExceptionPtrCreate@@YAXPAX@Z

?__ExceptionPtrDestroy@@YAXPAX@Z

__crtSetThreadpoolTimer

__crtCreateSemaphoreExW

__crtGetCurrentProcessorNumber

__crtFlushProcessWriteBuffers

__crtGetTickCount64

__crtCreateEventExW

__crtInitializeCriticalSectionEx

?_Throw_C_error@std@@YAXH@Z

_Cnd_broadcast

_Cnd_wait

_Cnd_destroy_in_situ

_Cnd_init_in_situ

_Mtx_unlock

_Mtx_lock

_Mtx_destroy_in_situ

_Mtx_init_in_situ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

__crtFreeLibraryWhenCallbackReturns

vcruntime140

_purecall

__std_type_info_destroy_list

__std_terminate

__std_exception_copy

__std_exception_destroy

_CxxThrowException

memset

__uncaught_exception

memcpy

__RTDynamicCast

__current_exception

__current_exception_context

_except_handler4_common

__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function

_initterm_e

_initterm

_invalid_parameter_noinfo_noreturn

_cexit

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

terminate

_execute_onexit_table

_crt_atexit

api-ms-win-crt-heap-l1-1-0

free

malloc

_callnewh

api-ms-win-crt-math-l1-1-0

_CIexp

_CIsqrt

api-ms-win-crt-string-l1-1-0

wcsncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf

__stdio_common_vswprintf_s

__acrt_iob_func

fflush

kernel32

SetLastError

CreateTimerQueueTimer

GetLogicalProcessorInformation

TlsFree

TlsSetValue

TlsGetValue

TlsAlloc

GetThreadPriority

SetThreadPriority

CreateThread

SwitchToThread

SignalObjectAndWait

Sleep

GetCurrentThreadId

GetCurrentProcess

WaitForSingleObjectEx

SetEvent

GetLastError

DuplicateHandle

CloseHandle

GetCurrentThread

CreateTimerQueue

QueryDepthSList

InterlockedFlushSList

InterlockedPushEntrySList

InterlockedPopEntrySList

DeleteTimerQueueTimer

GetModuleHandleW

GetProcAddress

GetNumaHighestNodeNumber

DisableThreadLibraryCalls

GetSystemTimeAsFileTime

GetCurrentProcessId

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetModuleHandleA

GetModuleFileNameW

FreeLibraryAndExitThread

FreeLibrary

GetThreadTimes

OutputDebugStringW

LoadLibraryW

LoadLibraryExW

ChangeTimerQueueTimer

EncodePointer

UnregisterWaitEx

ReleaseSemaphore

InitializeSListHead

SetProcessAffinityMask

VirtualFree

VirtualProtect

VirtualAlloc

GetVersionExW

DeleteCriticalSection

TryEnterCriticalSection

LeaveCriticalSection

EnterCriticalSection

UnregisterWait

RegisterWaitForSingleObject

SetThreadAffinityMask

GetProcessAffinityMask

Exports

??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z

??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z

??0SchedulerPolicy@Concurrency@@QAA@IZZ

??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z

??0SchedulerPolicy@Concurrency@@QAE@XZ

??0_Cancellation_beacon@details@Concurrency@@QAE@XZ

??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z

??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z

??0_Condition_variable@details@Concurrency@@QAE@XZ

??0_Context@details@Concurrency@@QAE@PAVContext@2@@Z

??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ

??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

??0_ReaderWriterLock@details@Concurrency@@QAE@XZ

??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

??0_ReentrantLock@details@Concurrency@@QAE@XZ

??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ

??0_Runtime_object@details@Concurrency@@QAE@H@Z

??0_Runtime_object@details@Concurrency@@QAE@XZ

??0_Scheduler@details@Concurrency@@QAE@PAVScheduler@2@@Z

??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

??0_SpinLock@details@Concurrency@@QAE@ACJ@Z

??0_StructuredTaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z

??0_TaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z

??0_TaskCollection@details@Concurrency@@QAE@XZ

??0_Timer@details@Concurrency@@IAE@I_N@Z

??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z

??0agent@Concurrency@@QAE@AAVScheduler@1@@Z

??0agent@Concurrency@@QAE@XZ

??0bad_target@Concurrency@@QAE@PBD@Z

??0bad_target@Concurrency@@QAE@XZ

??0context_self_unblock@Concurrency@@QAE@PBD@Z

??0context_self_unblock@Concurrency@@QAE@XZ

??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z

??0context_unblock_unbalanced@Concurrency@@QAE@XZ

??0critical_section@Concurrency@@QAE@XZ

??0default_scheduler_exists@Concurrency@@QAE@PBD@Z

??0default_scheduler_exists@Concurrency@@QAE@XZ

??0event@Concurrency@@QAE@XZ

??0improper_lock@Concurrency@@QAE@PBD@Z

??0improper_lock@Concurrency@@QAE@XZ

??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z

??0improper_scheduler_attach@Concurrency@@QAE@XZ

??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z

??0improper_scheduler_detach@Concurrency@@QAE@XZ

??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z

??0improper_scheduler_reference@Concurrency@@QAE@XZ

??0invalid_link_target@Concurrency@@QAE@PBD@Z

??0invalid_link_target@Concurrency@@QAE@XZ

??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z

??0invalid_multiple_scheduling@Concurrency@@QAE@XZ

??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z

??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ

??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z

??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ

??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z

??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ

??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z

??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ

??0message_not_found@Concurrency@@QAE@PBD@Z

??0message_not_found@Concurrency@@QAE@XZ

??0missing_wait@Concurrency@@QAE@PBD@Z

??0missing_wait@Concurrency@@QAE@XZ

??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z

??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ

??0operation_timed_out@Concurrency@@QAE@PBD@Z

??0operation_timed_out@Concurrency@@QAE@XZ

??0reader_writer_lock@Concurrency@@QAE@XZ

??0scheduler_not_attached@Concurrency@@QAE@PBD@Z

??0scheduler_not_attached@Concurrency@@QAE@XZ

??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z

??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z

??0scheduler_worker_creation_error@Concurrency@@QAE@J@Z

??0scheduler_worker_creation_error@Concurrency@@QAE@PBDJ@Z

??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z

??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z

??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z

??0unsupported_os@Concurrency@@QAE@PBD@Z

??0unsupported_os@Concurrency@@QAE@XZ

??1SchedulerPolicy@Concurrency@@QAE@XZ

??1_Cancellation_beacon@details@Concurrency@@QAE@XZ

??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ

??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ

??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ

??1_Condition_variable@details@Concurrency@@QAE@XZ

??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ

??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ

??1_SpinLock@details@Concurrency@@QAE@XZ

??1_StructuredTaskCollection@details@Concurrency@@QAE@XZ

??1_TaskCollection@details@Concurrency@@QAE@XZ

??1_Timer@details@Concurrency@@MAE@XZ

??1agent@Concurrency@@UAE@XZ

??1critical_section@Concurrency@@QAE@XZ

??1event@Concurrency@@QAE@XZ

??1reader_writer_lock@Concurrency@@QAE@XZ

??1scoped_lock@critical_section@Concurrency@@QAE@XZ

??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ

??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ

??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@$$QAV012@@Z

??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z

??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@$$QAV012@@Z

??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z

??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z

??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ

??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ

??_F_Context@details@Concurrency@@QAEXXZ

??_F_Scheduler@details@Concurrency@@QAEXXZ

?AgentEventGuid@Concurrency@@3U_GUID@@B

?Alloc@Concurrency@@YAPAXI@Z

?Block@Context@Concurrency@@SAXXZ

?ChoreEventGuid@Concurrency@@3U_GUID@@B

?ConcRTEventGuid@Concurrency@@3U_GUID@@B

?ConcRT_ProviderGuid@Concurrency@@3U_GUID@@B

?ContextEventGuid@Concurrency@@3U_GUID@@B

?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z

?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z

?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ

?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@AAVlocation@2@@Z

?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ

?CurrentContext@Context@Concurrency@@SAPAV12@XZ

?Detach@CurrentScheduler@Concurrency@@SAXXZ

?DisableTracing@Concurrency@@YAJXZ

?EnableTracing@Concurrency@@YAJXZ

?Free@Concurrency@@YAXPAX@Z

?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ

?GetExecutionContextId@Concurrency@@YAIXZ

?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ

?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ

?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z

?GetProcessorCount@Concurrency@@YAIXZ

?GetProcessorNodeCount@Concurrency@@YAIXZ

?GetSchedulerId@Concurrency@@YAIXZ

?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ

?Id@Context@Concurrency@@SAIXZ

?Id@CurrentScheduler@Concurrency@@SAIXZ

?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NABVlocation@2@@Z

?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

?LockEventGuid@Concurrency@@3U_GUID@@B

?Log2@details@Concurrency@@YAKI@Z

?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z

?NFS_Free@details@Concurrency@@YAXPAX@Z

?NFS_GetLineSize@details@Concurrency@@YAIXZ

?Oversubscribe@Context@Concurrency@@SAX_N@Z

?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B

?PPLParallelForeachEventGuid@Concurrency@@3U_GUID@@B

?PPLParallelInvokeEventGuid@Concurrency@@3U_GUID@@B

?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z

?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ

?ResourceManagerEventGuid@Concurrency@@3U_GUID@@B

?ScheduleGroupEventGuid@Concurrency@@3U_GUID@@B

?ScheduleGroupId@Context@Concurrency@@SAIXZ

?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z

?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0AAVlocation@2@@Z

?SchedulerEventGuid@Concurrency@@3U_GUID@@B

?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z

?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z

?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z

?VirtualProcessorEventGuid@Concurrency@@3U_GUID@@B

?VirtualProcessorId@Context@Concurrency@@SAIXZ

?Yield@Context@Concurrency@@SAXXZ

?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ

?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ

?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z

?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ

?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ

?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z

?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ

?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ

?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ

?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z

?_Byte_reverse_table@details@Concurrency@@3QBEB

?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ

?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ

?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ

?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AAEXXZ

?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z

?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ

?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ

?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ

?_Current_node@location@Concurrency@@SA?AV12@XZ

?_Destroy@_AsyncTaskCollection@details@Concurrency@@EAEXXZ

?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ

?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ

?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ

?_GetCombinableSize@details@Concurrency@@YAIXZ

?_GetConcRTTraceInfo@Concurrency@@YAPBU_CONCRT_TRACE_INFO@details@1@XZ

?_GetConcurrency@details@Concurrency@@YAIXZ

?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ

?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ

?_GetScheduler@_Scheduler@details@Concurrency@@QAEPAVScheduler@3@XZ

?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ

?_Internal_assign@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXI@ZP6AX1PBXI@Z4@Z

?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IBEIXZ

?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IAEIP6AXPAXI@Z@Z

?_Internal_compact@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIPAXP6AX0I@ZP6AX0PBXI@Z@Z

?_Internal_copy@_Concurrent_vector_base_v4@details@Concurrency@@IAEXABV123@IP6AXPAXPBXI@Z@Z

?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IBE_NXZ

?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IAEXXZ

?_Internal_grow_by@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z

?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IAEIIIP6AXPAXPBXI@Z1@Z

?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPAX@Z

?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IAE_NPAX@Z

?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPBX@Z

?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IAEPAXIAAI@Z

?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIII@Z

?_Internal_resize@_Concurrent_vector_base_v4@details@Concurrency@@IAEXIIIP6AXPAXI@ZP6AX0PBXI@Z2@Z

?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IBEIXZ

?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IAEXAAV123@@Z

?_Internal_swap@_Concurrent_vector_base_v4@details@Concurrency@@IAEXAAV123@@Z

?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IBEXXZ

?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IBEXI@Z

?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ

?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ

?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ

?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z

?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ

?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ

?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z

?_Reference@_Scheduler@details@Concurrency@@QAEIXZ

?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ

?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ

?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ

?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ

?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ

?_Release@_Scheduler@details@Concurrency@@QAEIXZ

?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ

?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ

?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ

?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ

?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z

?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z

?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z

?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z

?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z

?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z

?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z

?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KAII@Z

?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z

?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z

?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ

?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ

?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ

?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ

?_SpinYield@Context@Concurrency@@SAXXZ

?_Start@_Timer@details@Concurrency@@IAEXXZ

?_Stop@_Timer@details@Concurrency@@IAEXXZ

?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ

?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z

?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ

?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ

?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ

?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ

?_UnderlyingYield@details@Concurrency@@YAXXZ

?_Value@_SpinCount@details@Concurrency@@SAIXZ

?_Yield@_Context@details@Concurrency@@SAXXZ

?cancel@agent@Concurrency@@QAE_NXZ

?current@location@Concurrency@@SA?AV12@XZ

?done@agent@Concurrency@@IAE_NXZ

?from_numa_node@location@Concurrency@@SA?AV12@G@Z

?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ

?is_current_task_group_canceling@Concurrency@@YA_NXZ

?lock@critical_section@Concurrency@@QAEXXZ

?lock@reader_writer_lock@Concurrency@@QAEXXZ

?lock_read@reader_writer_lock@Concurrency@@QAEXXZ

?native_handle@critical_section@Concurrency@@QAEAAV12@XZ

?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ

?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ

?reset@event@Concurrency@@QAEXXZ

?set@event@Concurrency@@QAEXXZ

?set_task_execution_resources@Concurrency@@YAXGPAU_GROUP_AFFINITY@@@Z

?set_task_execution_resources@Concurrency@@YAXK@Z

?start@agent@Concurrency@@QAE_NXZ

?status@agent@Concurrency@@QAE?AW4agent_status@2@XZ

?status_port@agent@Concurrency@@QAEPAV?$ISource@W4agent_status@Concurrency@@@2@XZ

?try_lock@critical_section@Concurrency@@QAE_NXZ

?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ

?try_lock_for@critical_section@Concurrency@@QAE_NI@Z

?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ

?unlock@critical_section@Concurrency@@QAEXXZ

?unlock@reader_writer_lock@Concurrency@@QAEXXZ

?wait@Concurrency@@YAXI@Z

?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z

?wait@agent@Concurrency@@SA?AW4agent_status@2@PAV12@I@Z

?wait@event@Concurrency@@QAEII@Z

?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z

?wait_for_all@agent@Concurrency@@SAXIPAPAV12@PAW4agent_status@2@I@Z

?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z

?wait_for_one@agent@Concurrency@@SAXIPAPAV12@AAW4agent_status@2@AAII@Z

Sections

.text
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

msvcp140.dll

.dll windows:6 windows x86 arch:x86

f2d585ff96afa3a77e09f5b37e7b3230

Code Sign

33:00:00:00:f5:82:36:5b:4e:30:d5:29:7a:00:00:00:00:00:f5
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

d2:57:14:b8:54:80:e6:37:b5:c7:62:fd:d4:50:b6:78:39:dd:36:ad:3a:1d:80:6a:c8:1c:7f:21:47:74:44:e7
Signer

Actual PE Digest

d2:57:14:b8:54:80:e6:37:b5:c7:62:fd:d4:50:b6:78:39:dd:36:ad:3a:1d:80:6a:c8:1c:7f:21:47:74:44:e7

Digest Algorithm

sha256

PE Digest Matches

true

37:78:4c:b1:4b:b3:11:75:4a:a3:21:b7:a7:ac:65:20:76:2f:09:ee
Signer

Actual PE Digest

37:78:4c:b1:4b:b3:11:75:4a:a3:21:b7:a7:ac:65:20:76:2f:09:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d:\agent\_work\3\s\\binaries\x86ret\bin\i386\\msvcp140.i386.pdb

Imports

vcruntime140

_except_handler4_common

__current_exception_context

memcmp

__uncaught_exceptions

__uncaught_exception

memchr

memmove

__std_terminate

_purecall

memset

memcpy

__CxxFrameHandler3

_CxxThrowException

__AdjustPointer

__current_exception

__std_exception_destroy

__std_type_info_destroy_list

__std_exception_copy

api-ms-win-crt-heap-l1-1-0

realloc

_callnewh

calloc

free

malloc

api-ms-win-crt-runtime-l1-1-0

abort

terminate

_invalid_parameter_noinfo_noreturn

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_endthreadex

_beginthreadex

_set_new_handler

_initterm_e

_initterm

_crt_atexit

_cexit

_errno

api-ms-win-crt-string-l1-1-0

isspace

iswalnum

iswspace

_wcsdup

isupper

wcscpy_s

wcsnlen

__strncnt

strcspn

isalnum

tolower

iswxdigit

islower

iswdigit

isxdigit

isdigit

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

setlocale

_lock_locales

___mb_cur_max_func

_unlock_locales

___lc_collate_cp_func

localeconv

__pctype_func

___lc_locale_name_func

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers

fclose

__stdio_common_vsprintf_s

fseek

_fsopen

_wfsopen

__acrt_iob_func

fgetwc

fputwc

ungetwc

fflush

fgetc

fgetpos

fputs

fputc

fread

ungetc

fsetpos

_fseeki64

fwrite

setvbuf

api-ms-win-crt-filesystem-l1-1-0

_wrename

_lock_file

_unlock_file

_wremove

_wchdir

_wrmdir

api-ms-win-crt-time-l1-1-0

_W_Getdays

_Getmonths

_W_Gettnames

_Wcsftime

_Strftime

_W_Getmonths

_Gettnames

_Getdays

api-ms-win-crt-environment-l1-1-0

_wgetcwd

api-ms-win-crt-math-l1-1-0

_CIpow

ldexp

frexp

_CIlog

api-ms-win-crt-convert-l1-1-0

strtod

strtof

btowc

api-ms-win-crt-utility-l1-1-0

rand_s

kernel32

RtlCaptureStackBackTrace

MultiByteToWideChar

GetCPInfo

WideCharToMultiByte

CompareStringW

LCMapStringW

GetLocaleInfoW

CreateDirectoryW

CreateFileW

FindClose

FindFirstFileExW

FindNextFileW

GetDiskFreeSpaceExW

GetFileAttributesExW

GetFileInformationByHandle

SetEndOfFile

SetFileAttributesW

SetFilePointerEx

LoadLibraryExA

FreeLibrary

VirtualQuery

VirtualProtect

GetSystemInfo

InitializeSListHead

GetCurrentProcessId

IsDebuggerPresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetProcAddress

GetModuleHandleW

GetTickCount

GetSystemTimeAsFileTime

CreateEventW

InitializeCriticalSectionAndSpinCount

SetLastError

IsProcessorFeaturePresent

RaiseException

GetStringTypeW

QueryPerformanceFrequency

QueryPerformanceCounter

GetModuleHandleExW

QueueUserWorkItem

DeleteCriticalSection

TryEnterCriticalSection

LeaveCriticalSection

EnterCriticalSection

GetNativeSystemInfo

GetExitCodeThread

GetCurrentThreadId

SwitchToThread

Sleep

WaitForSingleObjectEx

FormatMessageW

DecodePointer

EncodePointer

CreateHardLinkW

CopyFileW

GetLastError

CloseHandle

AreFileApisANSI

GetTempPathW

SetFileTime

Exports

??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z

??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z

??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEX_WABV_Locinfo@1@@Z

??0?$_Yarn@D@std@@QAE@ABV01@@Z

??0?$_Yarn@D@std@@QAE@PBD@Z

??0?$_Yarn@D@std@@QAE@XZ

??0?$_Yarn@G@std@@QAE@ABV01@@Z

??0?$_Yarn@G@std@@QAE@PBG@Z

??0?$_Yarn@G@std@@QAE@XZ

??0?$_Yarn@_W@std@@QAE@ABV01@@Z

??0?$_Yarn@_W@std@@QAE@PB_W@Z

??0?$_Yarn@_W@std@@QAE@XZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ

??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAE@$$QAV01@@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ

??0?$codecvt@DDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$codecvt@DDU_Mbstatet@@@std@@QAE@I@Z

??0?$codecvt@GDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z

??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z

??0?$codecvt@_SDU_Mbstatet@@@std@@QAE@I@Z

??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@KW4_Codecvt_mode@1@I@Z

??0?$codecvt@_UDU_Mbstatet@@@std@@QAE@I@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z

??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z

??0?$ctype@D@std@@QAE@PBF_NI@Z

??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z

??0?$ctype@G@std@@QAE@I@Z

??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z

??0?$ctype@_W@std@@QAE@I@Z

??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z

??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z

??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z

??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z

??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

??0Init@ios_base@std@@QAE@XZ

??0_Facet_base@std@@QAE@ABV01@@Z

??0_Facet_base@std@@QAE@XZ

??0_Init_locks@std@@QAE@XZ

??0_Locimp@locale@std@@AAE@ABV012@@Z

??0_Locimp@locale@std@@AAE@_N@Z

??0_Locinfo@std@@QAE@HPBD@Z

??0_Locinfo@std@@QAE@PBD@Z

??0_Lockit@std@@QAE@H@Z

??0_Lockit@std@@QAE@XZ

??0_Timevec@std@@QAE@ABV01@@Z

??0_Timevec@std@@QAE@PAX@Z

??0_UShinit@std@@QAE@XZ

??0_Winit@std@@QAE@XZ

??0codecvt_base@std@@QAE@I@Z

??0ctype_base@std@@QAE@I@Z

??0facet@locale@std@@IAE@I@Z

??0id@locale@std@@QAE@I@Z

??0ios_base@std@@IAE@XZ

??0task_continuation_context@Concurrency@@AAE@XZ

??0time_base@std@@QAE@I@Z

??1?$_Yarn@D@std@@QAE@XZ

??1?$_Yarn@G@std@@QAE@XZ

??1?$_Yarn@_W@std@@QAE@XZ

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??1?$codecvt@DDU_Mbstatet@@@std@@MAE@XZ

??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ

??1?$codecvt@_SDU_Mbstatet@@@std@@MAE@XZ

??1?$codecvt@_UDU_Mbstatet@@@std@@MAE@XZ

??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ

??1?$ctype@D@std@@MAE@XZ

??1?$ctype@G@std@@MAE@XZ

??1?$ctype@_W@std@@MAE@XZ

??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

??1Init@ios_base@std@@QAE@XZ

??1_Facet_base@std@@UAE@XZ

??1_Init_locks@std@@QAE@XZ

??1_Locimp@locale@std@@MAE@XZ

??1_Locinfo@std@@QAE@XZ

??1_Lockit@std@@QAE@XZ

??1_Timevec@std@@QAE@XZ

??1_UShinit@std@@QAE@XZ

??1_Winit@std@@QAE@XZ

??1codecvt_base@std@@UAE@XZ

??1ctype_base@std@@UAE@XZ

??1facet@locale@std@@MAE@XZ

??1ios_base@std@@UAE@XZ

??1time_base@std@@UAE@XZ

??4?$_Iosb@H@std@@QAEAAV01@$$QAV01@@Z

??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z

??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z

??4?$_Yarn@D@std@@QAEAAV01@PBD@Z

??4?$_Yarn@G@std@@QAEAAV01@ABV01@@Z

??4?$_Yarn@G@std@@QAEAAV01@PBG@Z

??4?$_Yarn@_W@std@@QAEAAV01@ABV01@@Z

??4?$_Yarn@_W@std@@QAEAAV01@PB_W@Z

??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_istream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_istream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IAEAAV01@$$QAV01@@Z

??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z

??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z

??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z

??4Init@ios_base@std@@QAEAAV012@ABV012@@Z

??4_Crt_new_delete@std@@QAEAAU01@$$QAU01@@Z

??4_Crt_new_delete@std@@QAEAAU01@ABU01@@Z

??4_Facet_base@std@@QAEAAV01@ABV01@@Z

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

??4_Timevec@std@@QAEAAV01@ABV01@@Z

??4_UShinit@std@@QAEAAV01@ABV01@@Z

??4_Winit@std@@QAEAAV01@ABV01@@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z

??7ios_base@std@@QBE_NXZ

??Bid@locale@std@@QAEIXZ

??Bios_base@std@@QBE_NXZ

??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@

??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@

??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@

??_7?$codecvt@DDU_Mbstatet@@@std@@6B@

??_7?$codecvt@GDU_Mbstatet@@@std@@6B@

??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@

??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@

??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@

??_7?$ctype@D@std@@6B@

??_7?$ctype@G@std@@6B@

??_7?$ctype@_W@std@@6B@

??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

??_7_Facet_base@std@@6B@

??_7_Locimp@locale@std@@6B@

??_7codecvt_base@std@@6B@

??_7ctype_base@std@@6B@

??_7facet@locale@std@@6B@

??_7ios_base@std@@6B@

??_7time_base@std@@6B@

??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@

??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@

??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@

??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@

??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@

??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@

??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@

??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@

??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@

??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@

??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@

??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@

??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ

??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ

??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ

??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ

??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ

??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

??_F?$codecvt@DDU_Mbstatet@@@std@@QAEXXZ

??_F?$codecvt@GDU_Mbstatet@@@std@@QAEXXZ

??_F?$codecvt@_SDU_Mbstatet@@@std@@QAEXXZ

??_F?$codecvt@_UDU_Mbstatet@@@std@@QAEXXZ

??_F?$codecvt@_WDU_Mbstatet@@@std@@QAEXXZ

??_F?$ctype@D@std@@QAEXXZ

??_F?$ctype@G@std@@QAEXXZ

??_F?$ctype@_W@std@@QAEXXZ

??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

??_F_Locinfo@std@@QAEXXZ

??_F_Timevec@std@@QAEXXZ

??_Fcodecvt_base@std@@QAEXXZ

??_Fctype_base@std@@QAEXXZ

??_Ffacet@locale@std@@QAEXXZ

??_Fid@locale@std@@QAEXXZ

??_Ftime_base@std@@QAEXXZ

?CaptureCallstack@platform@details@Concurrency@@YAIPAPAXII@Z

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?GetNextAsyncId@platform@details@Concurrency@@YAIXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ

?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z

?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z

?_Addstd@ios_base@std@@SAXPAV12@@Z

?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z

?_Atexit@@YAXP6AXXZ@Z

?_BADOFF@std@@3_JB

?_C_str@?$_Yarn@D@std@@QBEPBDXZ

?_C_str@?$_Yarn@G@std@@QBEPBGXZ

?_C_str@?$_Yarn@_W@std@@QBEPB_WXZ

?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z

?_Callfns@ios_base@std@@AAEXW4event@12@@Z

?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ

?_Clocptr@_Locimp@locale@std@@0PAV123@A

?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ

?_Donarrow@?$ctype@G@std@@IBEDGD@Z

?_Donarrow@?$ctype@_W@std@@IBED_WD@Z

?_Dowiden@?$ctype@G@std@@IBEGD@Z

?_Dowiden@?$ctype@_W@std@@IBE_WD@Z

?_Empty@?$_Yarn@D@std@@QBE_NXZ

?_Empty@?$_Yarn@G@std@@QBE_NXZ

?_Empty@?$_Yarn@_W@std@@QBE_NXZ

?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z

?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z

?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z

?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z

?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z

?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z

?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDI@Z

?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDI@Z

?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDI@Z

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z

?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ

?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ

?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ

?_Getdateorder@_Locinfo@std@@QBEHXZ

?_Getdays@_Locinfo@std@@QBEPBDXZ

?_Getfalse@_Locinfo@std@@QBEPBDXZ

?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z

?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z

?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z

?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z

?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z

?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z

?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z

?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z

?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z

?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z

?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z

?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAHABV?$ctype@D@2@@Z

?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAHABV?$ctype@G@2@@Z

?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAHABV?$ctype@_W@2@@Z

?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ

?_Getmonths@_Locinfo@std@@QBEPBDXZ

?_Getname@_Locinfo@std@@QBEPBDXZ

?_Getptr@_Timevec@std@@QBEPAXXZ

?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ

?_Gettrue@_Locinfo@std@@QBEPBDXZ

?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ

?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ

?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ

?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ

?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ

?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ

?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

?_Id_cnt@id@locale@std@@0HA

?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z

?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z

?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z

?_Incref@facet@locale@std@@UAEXXZ

?_Index@ios_base@std@@0HA

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

okayfreedom.product.ico

openvpn/7/OemVista.inf

openvpn/7/tap0901.cat

openvpn/7/tap0901.sys

.sys windows:10 windows x86 arch:x86

fb6aa2464546675332365ccf7f730ce9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\winsign\samuli\source\repos\tap-windows6\src\Release\tap0901.pdb

Imports

ntoskrnl.exe

RtlUnwind

RtlFreeAnsiString

KeBugCheckEx

IoCsqInsertIrp

ZwQueryValueKey

ZwOpenKey

ZwClose

RtlVerifyVersionInfo

VerSetConditionMask

RtlInitUnicodeString

memmove

MmMapLockedPagesSpecifyCache

IoCsqRemoveNextIrp

IoCsqInitialize

_vsnprintf

IofCompleteRequest

RtlAppendUnicodeStringToString

memset

memcpy

RtlUnicodeStringToAnsiString

hal

KfReleaseSpinLock

KfAcquireSpinLock

KeGetCurrentIrql

ndis.sys

NdisGetVersion

NdisFreeRWLock

NdisAllocateRWLock

NdisMIndicateReceiveNetBufferLists

NdisFreeMdl

NdisAllocateMdl

NdisAllocateNetBufferAndNetBufferList

NdisFreeNetBufferList

NdisSetEvent

NdisMRegisterMiniportDriver

NdisMIndicateStatusEx

NdisDeregisterDeviceEx

NdisRegisterDeviceEx

NdisMSetMiniportAttributes

NdisGetDataBuffer

NdisFreeNetBufferListPool

NdisAllocateNetBufferListPool

NdisGetSystemUpTimeEx

NdisAllocateMemoryWithTagPriority

NdisMDeregisterMiniportDriver

NdisMSendNetBufferListsComplete

NdisAllocateMemoryWithTag

NdisReadConfiguration

NdisAcquireRWLockRead

NdisAcquireRWLockWrite

NdisReleaseRWLock

NdisWaitEvent

NdisCloseConfiguration

NdisReadNetworkAddress

NdisFreeMemory

NdisInitializeEvent

NdisResetEvent

NdisOpenConfigurationEx

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

openvpn/OemVista.inf

openvpn/addtap.bat

openvpn/deltapall.bat

openvpn/tap0901.cat

openvpn/tap0901.sys

.sys windows:10 windows x86 arch:x86

4a6f8ea5fdf69af1a50c3cf5fa61a7e3

Code Sign

33:00:00:00:69:9d:42:c9:76:75:b5:08:82:00:00:00:00:00:69
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/01/2024, 20:09

Not After

10/01/2025, 20:09

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/10/2014, 20:31

Not After

15/10/2029, 20:41

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c0:72:11:43:2f:e6:ae:2e:a5:cd:59:a8:55:7e:3d:1d:57:3b:d2:81:d2:60:64:9f:b4:f0:b9:52:91:48:b9:4b
Signer

Actual PE Digest

c0:72:11:43:2f:e6:ae:2e:a5:cd:59:a8:55:7e:3d:1d:57:3b:d2:81:d2:60:64:9f:b4:f0:b9:52:91:48:b9:4b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\lev\Projects\tap-windows6\src\Release\tap0901.pdb

Imports

ntoskrnl.exe

RtlUnwind

RtlFreeAnsiString

KeBugCheckEx

IoCsqInsertIrp

ZwQueryValueKey

ZwOpenKey

ZwClose

RtlVerifyVersionInfo

VerSetConditionMask

RtlInitUnicodeString

memmove

MmMapLockedPagesSpecifyCache

IoCsqRemoveNextIrp

IoCsqInitialize

_vsnprintf

IofCompleteRequest

RtlAppendUnicodeStringToString

memset

memcpy

RtlUnicodeStringToAnsiString

hal

KfReleaseSpinLock

KfAcquireSpinLock

KeGetCurrentIrql

ndis.sys

NdisGetVersion

NdisFreeRWLock

NdisAllocateRWLock

NdisMIndicateReceiveNetBufferLists

NdisFreeMdl

NdisAllocateMdl

NdisFreeNetBufferList

NdisAllocateNetBufferAndNetBufferList

NdisSetEvent

NdisMRegisterMiniportDriver

NdisMIndicateStatusEx

NdisDeregisterDeviceEx

NdisRegisterDeviceEx

NdisMSetMiniportAttributes

NdisGetDataBuffer

NdisFreeNetBufferListPool

NdisAllocateNetBufferListPool

NdisGetSystemUpTimeEx

NdisAllocateMemoryWithTagPriority

NdisMDeregisterMiniportDriver

NdisMSendNetBufferListsComplete

NdisAllocateMemoryWithTag

NdisReadConfiguration

NdisAcquireRWLockRead

NdisAcquireRWLockWrite

NdisReleaseRWLock

NdisWaitEvent

NdisCloseConfiguration

NdisReadNetworkAddress

NdisFreeMemory

NdisInitializeEvent

NdisResetEvent

NdisOpenConfigurationEx

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

openvpn64/7/OemVista.inf

openvpn64/7/tap0901.cat

openvpn64/7/tap0901.sys

.sys windows:10 windows x64 arch:x64

6951888e15c9a7d15f304320298d1328

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\winsign\samuli\source\repos\tap-windows6\src\x64\Release\tap0901.pdb

Imports

ntoskrnl.exe

IoCsqRemoveNextIrp

KeBugCheckEx

IoCsqInsertIrp

ZwQueryValueKey

ZwOpenKey

ZwClose

RtlVerifyVersionInfo

VerSetConditionMask

RtlInitUnicodeString

MmMapLockedPagesSpecifyCache

__C_specific_handler

RtlUnicodeStringToAnsiString

IoCsqInitialize

_vsnprintf

IofCompleteRequest

RtlAppendUnicodeStringToString

KeReleaseSpinLock

KeAcquireSpinLockRaiseToDpc

RtlFreeAnsiString

ndis.sys

NdisFreeMemory

NdisMSendNetBufferListsComplete

NdisMDeregisterMiniportDriver

NdisMRegisterMiniportDriver

NdisGetVersion

NdisFreeRWLock

NdisAllocateRWLock

NdisMIndicateReceiveNetBufferLists

NdisFreeMdl

NdisAllocateMdl

NdisAllocateNetBufferAndNetBufferList

NdisFreeNetBufferList

NdisSetEvent

NdisAllocateMemoryWithTag

NdisMIndicateStatusEx

NdisDeregisterDeviceEx

NdisRegisterDeviceEx

NdisMSetMiniportAttributes

NdisGetDataBuffer

NdisFreeNetBufferListPool

NdisAllocateNetBufferListPool

NdisGetSystemUpTimeEx

NdisAcquireRWLockRead

NdisAcquireRWLockWrite

NdisReleaseRWLock

NdisReadConfiguration

NdisCloseConfiguration

NdisReadNetworkAddress

NdisOpenConfigurationEx

NdisInitializeEvent

NdisResetEvent

NdisWaitEvent

NdisAllocateMemoryWithTagPriority

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

openvpn64/OemVista.inf

openvpn64/addtap.bat

openvpn64/deltapall.bat

openvpn64/tap0901.cat

openvpn64/tap0901.sys

.sys windows:10 windows x64 arch:x64

026382f9f8961a15adf855ef63703f6b

Code Sign

33:00:00:00:69:9d:42:c9:76:75:b5:08:82:00:00:00:00:00:69
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/01/2024, 20:09

Not After

10/01/2025, 20:09

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/10/2014, 20:31

Not After

15/10/2029, 20:41

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

9e:17:64:00:e8:23:17:28:04:af:b9:5b:5e:b0:c0:3c:39:b8:e9:6a:6b:15:fa:b7:45:fa:91:90:da:45:eb:bb
Signer

Actual PE Digest

9e:17:64:00:e8:23:17:28:04:af:b9:5b:5e:b0:c0:3c:39:b8:e9:6a:6b:15:fa:b7:45:fa:91:90:da:45:eb:bb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\lev\Projects\tap-windows6\src\x64\Release\tap0901.pdb

Imports

ntoskrnl.exe

__C_specific_handler

KeBugCheckEx

IoCsqInsertIrp

ZwQueryValueKey

ZwOpenKey

ZwClose

RtlVerifyVersionInfo

VerSetConditionMask

RtlInitUnicodeString

MmMapLockedPagesSpecifyCache

KeGetCurrentIrql

RtlUnicodeStringToAnsiString

IoCsqRemoveNextIrp

IoCsqInitialize

_vsnprintf

IofCompleteRequest

RtlAppendUnicodeStringToString

KeReleaseSpinLock

KeAcquireSpinLockRaiseToDpc

RtlFreeAnsiString

ndis.sys

NdisReadNetworkAddress

NdisMSendNetBufferListsComplete

NdisMDeregisterMiniportDriver

NdisMRegisterMiniportDriver

NdisGetVersion

NdisFreeRWLock

NdisAllocateRWLock

NdisMIndicateReceiveNetBufferLists

NdisFreeMdl

NdisAllocateMdl

NdisFreeNetBufferList

NdisAllocateNetBufferAndNetBufferList

NdisSetEvent

NdisAllocateMemoryWithTag

NdisMIndicateStatusEx

NdisDeregisterDeviceEx

NdisRegisterDeviceEx

NdisMSetMiniportAttributes

NdisGetDataBuffer

NdisFreeNetBufferListPool

NdisAllocateNetBufferListPool

NdisGetSystemUpTimeEx

NdisAllocateMemoryWithTagPriority

NdisAcquireRWLockRead

NdisAcquireRWLockWrite

NdisReleaseRWLock

NdisReadConfiguration

NdisCloseConfiguration

NdisWaitEvent

NdisFreeMemory

NdisInitializeEvent

NdisResetEvent

NdisOpenConfigurationEx

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

prodid

sqlite3.dll

.dll windows:4 windows x86 arch:x86

923aa130c21002b50b462e446b3be0d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

AreFileApisANSI

CloseHandle

CreateFileA

CreateFileMappingA

CreateFileMappingW

CreateFileW

CreateMutexW

DeleteCriticalSection

DeleteFileA

DeleteFileW

EnterCriticalSection

FlushFileBuffers

FlushViewOfFile

FormatMessageA

FormatMessageW

FreeLibrary

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetDiskFreeSpaceA

GetDiskFreeSpaceW

GetFileAttributesA

GetFileAttributesExW

GetFileAttributesW

GetFileSize

GetFullPathNameA

GetFullPathNameW

GetLastError

GetModuleHandleA

GetProcAddress

GetProcessHeap

GetSystemInfo

GetSystemTime

GetSystemTimeAsFileTime

GetTempPathA

GetTempPathW

GetTickCount

GetVersionExA

GetVersionExW

HeapAlloc

HeapCompact

HeapCreate

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

HeapValidate

InitializeCriticalSection

InterlockedCompareExchange

LeaveCriticalSection

LoadLibraryA

LoadLibraryW

LocalFree

LockFile

LockFileEx

MapViewOfFile

MultiByteToWideChar

OutputDebugStringA

OutputDebugStringW

QueryPerformanceCounter

ReadFile

SetEndOfFile

SetFilePointer

SetUnhandledExceptionFilter

Sleep

SystemTimeToFileTime

TerminateProcess

TlsGetValue

TryEnterCriticalSection

UnhandledExceptionFilter

UnlockFile

UnlockFileEx

UnmapViewOfFile

VirtualProtect

VirtualQuery

WaitForSingleObject

WaitForSingleObjectEx

WideCharToMultiByte

WriteFile

msvcrt

__dllonexit

__setusermatherr

_amsg_exit

_beginthreadex

_endthreadex

_errno

_initterm

_iob

_lock

_onexit

localtime

calloc

fprintf

free

fwrite

malloc

memcmp

memmove

qsort

realloc

strcmp

strlen

strncmp

_unlock

abort

vfprintf

Exports

sqlite3_aggregate_context

sqlite3_aggregate_count

sqlite3_auto_extension

sqlite3_backup_finish

sqlite3_backup_init

sqlite3_backup_pagecount

sqlite3_backup_remaining

sqlite3_backup_step

sqlite3_bind_blob

sqlite3_bind_blob64

sqlite3_bind_double

sqlite3_bind_int

sqlite3_bind_int64

sqlite3_bind_null

sqlite3_bind_parameter_count

sqlite3_bind_parameter_index

sqlite3_bind_parameter_name

sqlite3_bind_text

sqlite3_bind_text16

sqlite3_bind_text64

sqlite3_bind_value

sqlite3_bind_zeroblob

sqlite3_bind_zeroblob64

sqlite3_blob_bytes

sqlite3_blob_close

sqlite3_blob_open

sqlite3_blob_read

sqlite3_blob_reopen

sqlite3_blob_write

sqlite3_busy_handler

sqlite3_busy_timeout

sqlite3_cancel_auto_extension

sqlite3_changes

sqlite3_clear_bindings

sqlite3_close

sqlite3_close_v2

sqlite3_collation_needed

sqlite3_collation_needed16

sqlite3_column_blob

sqlite3_column_bytes

sqlite3_column_bytes16

sqlite3_column_count

sqlite3_column_database_name

sqlite3_column_database_name16

sqlite3_column_decltype

sqlite3_column_decltype16

sqlite3_column_double

sqlite3_column_int

sqlite3_column_int64

sqlite3_column_name

sqlite3_column_name16

sqlite3_column_origin_name

sqlite3_column_origin_name16

sqlite3_column_table_name

sqlite3_column_table_name16

sqlite3_column_text

sqlite3_column_text16

sqlite3_column_type

sqlite3_column_value

sqlite3_commit_hook

sqlite3_compileoption_get

sqlite3_compileoption_used

sqlite3_complete

sqlite3_complete16

sqlite3_config

sqlite3_context_db_handle

sqlite3_create_collation

sqlite3_create_collation16

sqlite3_create_collation_v2

sqlite3_create_function

sqlite3_create_function16

sqlite3_create_function_v2

sqlite3_create_module

sqlite3_create_module_v2

sqlite3_data_count

sqlite3_data_directory

sqlite3_db_cacheflush

sqlite3_db_config

sqlite3_db_filename

sqlite3_db_handle

sqlite3_db_mutex

sqlite3_db_readonly

sqlite3_db_release_memory

sqlite3_db_status

sqlite3_declare_vtab

sqlite3_enable_load_extension

sqlite3_enable_shared_cache

sqlite3_errcode

sqlite3_errmsg

sqlite3_errmsg16

sqlite3_errstr

sqlite3_exec

sqlite3_expanded_sql

sqlite3_expired

sqlite3_extended_errcode

sqlite3_extended_result_codes

sqlite3_file_control

sqlite3_finalize

sqlite3_free

sqlite3_free_table

sqlite3_fts5_may_be_corrupt

sqlite3_get_autocommit

sqlite3_get_auxdata

sqlite3_get_table

sqlite3_global_recover

sqlite3_initialize

sqlite3_interrupt

sqlite3_last_insert_rowid

sqlite3_libversion

sqlite3_libversion_number

sqlite3_limit

sqlite3_load_extension

sqlite3_log

sqlite3_malloc

sqlite3_malloc64

sqlite3_memory_alarm

sqlite3_memory_highwater

sqlite3_memory_used

sqlite3_mprintf

sqlite3_msize

sqlite3_mutex_alloc

sqlite3_mutex_enter

sqlite3_mutex_free

sqlite3_mutex_leave

sqlite3_mutex_try

sqlite3_next_stmt

sqlite3_open

sqlite3_open16

sqlite3_open_v2

sqlite3_os_end

sqlite3_os_init

sqlite3_overload_function

sqlite3_prepare

sqlite3_prepare16

sqlite3_prepare16_v2

sqlite3_prepare_v2

sqlite3_profile

sqlite3_progress_handler

sqlite3_randomness

sqlite3_realloc

sqlite3_realloc64

sqlite3_release_memory

sqlite3_reset

sqlite3_reset_auto_extension

sqlite3_result_blob

sqlite3_result_blob64

sqlite3_result_double

sqlite3_result_error

sqlite3_result_error16

sqlite3_result_error_code

sqlite3_result_error_nomem

sqlite3_result_error_toobig

sqlite3_result_int

sqlite3_result_int64

sqlite3_result_null

sqlite3_result_subtype

sqlite3_result_text

sqlite3_result_text16

sqlite3_result_text16be

sqlite3_result_text16le

sqlite3_result_text64

sqlite3_result_value

sqlite3_result_zeroblob

sqlite3_result_zeroblob64

sqlite3_rollback_hook

sqlite3_rtree_geometry_callback

sqlite3_rtree_query_callback

sqlite3_set_authorizer

sqlite3_set_auxdata

sqlite3_shutdown

sqlite3_sleep

sqlite3_snprintf

sqlite3_soft_heap_limit

sqlite3_soft_heap_limit64

sqlite3_sourceid

sqlite3_sql

sqlite3_status

sqlite3_status64

sqlite3_step

sqlite3_stmt_busy

sqlite3_stmt_readonly

sqlite3_stmt_status

sqlite3_strglob

sqlite3_stricmp

sqlite3_strlike

sqlite3_strnicmp

sqlite3_system_errno

sqlite3_table_column_metadata

sqlite3_temp_directory

sqlite3_test_control

sqlite3_thread_cleanup

sqlite3_threadsafe

sqlite3_total_changes

sqlite3_trace

sqlite3_trace_v2

sqlite3_transfer_bindings

sqlite3_update_hook

sqlite3_uri_boolean

sqlite3_uri_int64

sqlite3_uri_parameter

sqlite3_user_data

sqlite3_value_blob

sqlite3_value_bytes

sqlite3_value_bytes16

sqlite3_value_double

sqlite3_value_dup

sqlite3_value_free

sqlite3_value_int

sqlite3_value_int64

sqlite3_value_numeric_type

sqlite3_value_subtype

sqlite3_value_text

sqlite3_value_text16

sqlite3_value_text16be

sqlite3_value_text16le

sqlite3_value_type

sqlite3_version

sqlite3_vfs_find

sqlite3_vfs_register

sqlite3_vfs_unregister

sqlite3_vmprintf

sqlite3_vsnprintf

sqlite3_vtab_config

sqlite3_vtab_on_conflict

sqlite3_wal_autocheckpoint

sqlite3_wal_checkpoint

sqlite3_wal_checkpoint_v2

sqlite3_wal_hook

sqlite3_win32_is_nt

sqlite3_win32_mbcs_to_utf8

sqlite3_win32_mbcs_to_utf8_v2

sqlite3_win32_set_directory

sqlite3_win32_sleep

sqlite3_win32_unicode_to_utf8

sqlite3_win32_utf8_to_mbcs

sqlite3_win32_utf8_to_mbcs_v2

sqlite3_win32_utf8_to_unicode

sqlite3_win32_write_debug

Sections

.text
Size: 549KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/19
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/31
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/45
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 617B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/81
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

/92
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

vccorlib140.dll

.dll windows:6 windows x86 arch:x86

e2c243eaa5d873a145fcef834080de02

Code Sign

33:00:00:00:f9:5c:c9:22:55:0a:c0:9d:c4:00:00:00:00:00:f9
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

60:d7:91:6d:9e:e5:4b:0a:5f:5c:4b:70:db:af:8d:82:89:55:de:0b:94:38:36:1e:6c:d6:9e:13:c3:dc:ca:be
Signer

Actual PE Digest

60:d7:91:6d:9e:e5:4b:0a:5f:5c:4b:70:db:af:8d:82:89:55:de:0b:94:38:36:1e:6c:d6:9e:13:c3:dc:ca:be

Digest Algorithm

sha256

PE Digest Matches

true

ca:31:8c:8f:6a:73:63:11:87:b3:3c:fd:0b:91:35:0e:04:ea:13:d7
Signer

Actual PE Digest

ca:31:8c:8f:6a:73:63:11:87:b3:3c:fd:0b:91:35:0e:04:ea:13:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d:\agent\_work\3\s\\binaries\x86ret\bin\i386\vccorlib140.i386.pdb

Imports

kernel32

RaiseException

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

ReleaseSRWLockShared

AcquireSRWLockShared

FormatMessageW

GetProcAddress

LoadLibraryExW

HeapFree

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSectionEx

GetLastError

OutputDebugStringW

HeapAlloc

DeleteCriticalSection

GetProcessHeap

CreateEventExW

WaitForMultipleObjectsEx

SetEvent

CloseHandle

DecodePointer

InitializeSRWLock

TryAcquireSRWLockShared

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

IsDebuggerPresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

DisableThreadLibraryCalls

InitializeSListHead

vcruntime140

__std_type_info_destroy_list

memcpy

_except_handler4_common

_CxxThrowException

__current_exception_context

__current_exception

memmove

memset

_SetWinRTOutOfMemoryExceptionCallback

__GetPlatformExceptionInfo

__std_exception_copy

__std_exception_destroy

__std_terminate

_purecall

__CxxFrameHandler3

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit

_invalid_parameter_noinfo_noreturn

_invoke_watson

__p___wargv

__p___argc

_configure_wide_argv

terminate

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_initterm_e

_initterm

_cexit

api-ms-win-crt-heap-l1-1-0

_aligned_offset_malloc

free

_callnewh

malloc

_aligned_free

api-ms-win-crt-string-l1-1-0

wcscpy_s

msvcp140

?_Xlength_error@std@@YAXPBD@Z

ole32

CoTaskMemAlloc

CoGetApartmentType

CoMarshalInterThreadInterfaceInStream

CoGetInterfaceAndReleaseStream

CoAddRefServerProcess

CoGetContextToken

CoGetObjectContext

CoCreateFreeThreadedMarshaler

CoTaskMemFree

CoReleaseServerProcess

oleaut32

SysAllocStringLen

SysFreeString

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString

WindowsGetStringRawBuffer

WindowsIsStringEmpty

WindowsCompareStringOrdinal

WindowsGetStringLen

WindowsCreateString

WindowsCreateStringReference

WindowsStringHasEmbeddedNull

WindowsDeleteString

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoOriginateError

GetRestrictedErrorInfo

RoTransformError

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

RoUninitialize

RoRegisterForApartmentShutdown

RoRegisterActivationFactories

RoUnregisterForApartmentShutdown

RoRevokeActivationFactories

RoGetApartmentIdentifier

RoInitialize

api-ms-win-crt-math-l1-1-0

ceil

Exports

?<Dispose>@Exception@Platform@@U$AAAXXZ

?<Dispose>@String@Platform@@U$AAAXXZ

?<Dispose>@Type@Platform@@U$AAAXXZ

??0AccessDeniedException@Platform@@Q$AAA@P$AAVString@1@@Z

??0AccessDeniedException@Platform@@Q$AAA@XZ

??0Attribute@Metadata@Platform@@Q$AAA@XZ

??0Boolean@Platform@@QAA@_N@Z

??0COMException@Platform@@Q$AAA@H@Z

??0COMException@Platform@@Q$AAA@HP$AAVString@1@@Z

??0ChangedStateException@Platform@@Q$AAA@P$AAVString@1@@Z

??0ChangedStateException@Platform@@Q$AAA@XZ

??0ClassNotRegisteredException@Platform@@Q$AAA@P$AAVString@1@@Z

??0ClassNotRegisteredException@Platform@@Q$AAA@XZ

??0Delegate@Platform@@Q$AAA@XZ

??0DisconnectedException@Platform@@Q$AAA@P$AAVString@1@@Z

??0DisconnectedException@Platform@@Q$AAA@XZ

??0Enum@Platform@@Q$AAA@XZ

??0Exception@Platform@@Q$AAA@H@Z

??0Exception@Platform@@Q$AAA@HP$AAVString@1@@Z

??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z

??0FailureException@Platform@@Q$AAA@XZ

??0GridLength@Xaml@UI@Windows@@QAA@NW4GridUnitType@123@@Z

??0IntPtr@Platform@@QAA@H@Z

??0IntPtr@Platform@@QAA@PAX@Z

??0InvalidArgumentException@Platform@@Q$AAA@P$AAVString@1@@Z

??0InvalidArgumentException@Platform@@Q$AAA@XZ

??0InvalidCastException@Platform@@Q$AAA@P$AAVString@1@@Z

??0InvalidCastException@Platform@@Q$AAA@XZ

??0MTAThreadAttribute@Platform@@Q$AAA@XZ

??0NotImplementedException@Platform@@Q$AAA@P$AAVString@1@@Z

??0NotImplementedException@Platform@@Q$AAA@XZ

??0NullReferenceException@Platform@@Q$AAA@P$AAVString@1@@Z

??0NullReferenceException@Platform@@Q$AAA@XZ

??0Object@Platform@@Q$AAA@XZ

??0ObjectDisposedException@Platform@@Q$AAA@P$AAVString@1@@Z

??0ObjectDisposedException@Platform@@Q$AAA@XZ

??0OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA@XZ

??0OperationCanceledException@Platform@@Q$AAA@P$AAVString@1@@Z

??0OperationCanceledException@Platform@@Q$AAA@XZ

??0OutOfBoundsException@Platform@@Q$AAA@P$AAVString@1@@Z

??0OutOfBoundsException@Platform@@Q$AAA@XZ

??0OutOfMemoryException@Platform@@Q$AAA@P$AAVString@1@@Z

??0OutOfMemoryException@Platform@@Q$AAA@XZ

??0Rect@Foundation@Windows@@QAA@VPoint@12@0@Z

??0Rect@Foundation@Windows@@QAA@VPoint@12@VSize@12@@Z

??0RepeatBehavior@Animation@Media@Xaml@UI@Windows@@QAA@N@Z

??0STAThreadAttribute@Platform@@Q$AAA@XZ

??0SizeT@Platform@@QAA@H@Z

??0SizeT@Platform@@QAA@PAX@Z

??0Type@Platform@@Q$AAA@P$AAVObject@1@@Z

??0Type@Platform@@Q$AAA@VIntPtr@1@@Z

??0Type@Platform@@Q$AAA@VTypeName@Interop@Xaml@UI@Windows@@@Z

??0ValueType@Platform@@Q$AAA@XZ

??0WrongThreadException@Platform@@Q$AAA@P$AAVString@1@@Z

??0WrongThreadException@Platform@@Q$AAA@XZ

??0char16@default@@QAA@_W@Z

??0float32@default@@QAA@M@Z

??0float64@default@@QAA@N@Z

??0int16@default@@QAA@F@Z

??0int32@default@@QAA@H@Z

??0int64@default@@QAA@_J@Z

??0int8@default@@QAA@C@Z

??0uint16@default@@QAA@G@Z

??0uint32@default@@QAA@I@Z

??0uint64@default@@QAA@_K@Z

??0uint8@default@@QAA@E@Z

??BIntPtr@Platform@@SA?AV01@H@Z

??BIntPtr@Platform@@SA?AV01@PAX@Z

??BIntPtr@Platform@@SAPAXV01@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@P$AAV01@@Z

??BType@Platform@@SAP$AAV01@VTypeName@Interop@Xaml@UI@Windows@@@Z

??DMatrix3D@Media3D@Media@Xaml@UI@Windows@@SA?AV012345@V012345@0@Z

??GDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z

??HDuration@Xaml@UI@Windows@@SA?AV0123@V0123@0@Z

??MDuration@Xaml@UI@Windows@@SA_NV0123@0@Z

??NDuration@Xaml@UI@Windows@@SA_NV0123@0@Z

??ODuration@Xaml@UI@Windows@@SA_NV0123@0@Z

??PDuration@Xaml@UI@Windows@@SA_NV0123@0@Z

?AlignedAllocate@Heap@Details@Platform@@SAPAXII@Z

?AlignedAllocate@Heap@Details@Platform@@SAPAXIII@Z

?AlignedAllocateException@Heap@Details@Platform@@SAPAXII@Z

?AlignedAllocateException@Heap@Details@Platform@@SAPAXIII@Z

?AlignedFree@Heap@Details@Platform@@SAXPAX@Z

?AlignedFreeException@Heap@Details@Platform@@SAXPAX@Z

?Allocate@Heap@Details@Platform@@SAPAXI@Z

?Allocate@Heap@Details@Platform@@SAPAXII@Z

?AllocateException@Heap@Details@Platform@@SAPAXI@Z

?AllocateException@Heap@Details@Platform@@SAPAXII@Z

?Compare@Duration@Xaml@UI@Windows@@SAHV1234@0@Z

?Contains@Rect@Foundation@Windows@@QAA_NVPoint@23@@Z

?CreateException@Exception@Platform@@SAP$AAV12@H@Z

?CreateException@Exception@Platform@@SAP$AAV12@HP$AAVString@2@@Z

?CreateValue@Details@Platform@@YGP$AAVObject@2@W4TypeCode@2@PBX@Z

?EnableFactoryCache@@YAXXZ

?EnumerateAllocatedObjects@Heap@Details@Platform@@SAXP$AAVHeapEntryHandler@23@@Z

?Equals@Attribute@Metadata@Platform@@Q$AAA_NP$AAVObject@3@@Z

?Equals@Boolean@Platform@@QAA_NP$AAVObject@2@@Z

?Equals@Delegate@Platform@@Q$AAA_NP$AAVObject@2@@Z

?Equals@Enum@Platform@@Q$AAA_NP$AAVObject@2@@Z

?Equals@Exception@Platform@@U$AAA_NP$AAVObject@2@@Z

?Equals@MTAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z

?Equals@Object@Platform@@Q$AAA_NP$AAV12@@Z

?Equals@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAA_NP$AAVObject@4@@Z

?Equals@STAThreadAttribute@Platform@@Q$AAA_NP$AAVObject@2@@Z

?Equals@Type@Platform@@U$AAA_NP$AAVObject@2@@Z

?Equals@ValueType@Platform@@Q$AAA_NP$AAVObject@2@@Z

?Equals@char16@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@float32@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@float64@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@int16@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@int32@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@int64@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@int8@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@uint16@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@uint32@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@uint64@default@@QAA_NP$AAVObject@Platform@@@Z

?Equals@uint8@default@@QAA_NP$AAVObject@Platform@@@Z

?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z

?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z

?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z

?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z

?FlushFactoryCache@@YGXXZ

?Free@Heap@Details@Platform@@SAXPAX@Z

?FreeException@Heap@Details@Platform@@SAXPAX@Z

?GetActivationFactory@Details@Platform@@YGJPAVModuleBase@1WRL@Microsoft@@PAUHSTRING__@@PAPAUIActivationFactory@@@Z

?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z

?GetCmdArguments@Details@Platform@@YAPAPA_WPAH@Z

?GetHashCode@Attribute@Metadata@Platform@@Q$AAAHXZ

?GetHashCode@Boolean@Platform@@QAAHXZ

?GetHashCode@Delegate@Platform@@Q$AAAHXZ

?GetHashCode@Enum@Platform@@Q$AAAHXZ

?GetHashCode@Exception@Platform@@U$AAAHXZ

?GetHashCode@Guid@Platform@@QAAHXZ

?GetHashCode@MTAThreadAttribute@Platform@@Q$AAAHXZ

?GetHashCode@Object@Platform@@Q$AAAHXZ

?GetHashCode@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAHXZ

?GetHashCode@STAThreadAttribute@Platform@@Q$AAAHXZ

?GetHashCode@Type@Platform@@U$AAAHXZ

?GetHashCode@ValueType@Platform@@Q$AAAHXZ

?GetHashCode@char16@default@@QAAHXZ

?GetHashCode@float32@default@@QAAHXZ

?GetHashCode@float64@default@@QAAHXZ

?GetHashCode@int16@default@@QAAHXZ

?GetHashCode@int32@default@@QAAHXZ

?GetHashCode@int64@default@@QAAHXZ

?GetHashCode@int8@default@@QAAHXZ

?GetHashCode@uint16@default@@QAAHXZ

?GetHashCode@uint32@default@@QAAHXZ

?GetHashCode@uint64@default@@QAAHXZ

?GetHashCode@uint8@default@@QAAHXZ

?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z

?GetIBoxVtable@Details@Platform@@YGPAXPAX@Z

?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z

?GetObjectContext@Details@Platform@@YGPAUIUnknown@@XZ

?GetProxyImpl@Details@Platform@@YGJPAUIUnknown@@ABU_GUID@@0PAPAU3@@Z

?GetType@Boolean@Platform@@QAAP$AAVType@2@XZ

?GetType@Guid@Platform@@QAAP$AAVType@2@XZ

?GetType@Object@Platform@@Q$AAAP$AAVType@2@XZ

?GetType@char16@default@@QAAP$AAVType@Platform@@XZ

?GetType@float32@default@@QAAP$AAVType@Platform@@XZ

?GetType@float64@default@@QAAP$AAVType@Platform@@XZ

?GetType@int16@default@@QAAP$AAVType@Platform@@XZ

?GetType@int32@default@@QAAP$AAVType@Platform@@XZ

?GetType@int64@default@@QAAP$AAVType@Platform@@XZ

?GetType@int8@default@@QAAP$AAVType@Platform@@XZ

?GetType@uint16@default@@QAAP$AAVType@Platform@@XZ

?GetType@uint32@default@@QAAP$AAVType@Platform@@XZ

?GetType@uint64@default@@QAAP$AAVType@Platform@@XZ

?GetType@uint8@default@@QAAP$AAVType@Platform@@XZ

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@P$AAV12@@Z

?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z

?InitControlBlock@ControlBlock@Details@Platform@@AAEXPAX_N11@Z

?InitializeData@Details@Platform@@YAJH@Z

?Intersect@Rect@Foundation@Windows@@QAAXV123@@Z

?IntersectsWith@Rect@Foundation@Windows@@QAA_NV123@@Z

?Invert@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAAXXZ

?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z

?ReferenceEquals@Object@Platform@@SA_NP$AAV12@0@Z

?ReferenceEquals@Object@Platform@@SA_NP$AAVString@2@0@Z

?RegisterFactories@Details@Platform@@YGP$AAVObject@2@PAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@P6GXXZ@Z

?ReleaseInContextImpl@Details@Platform@@YGJPAUIUnknown@@0@Z

?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ

?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z

?RunApplicationServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z

?RunServer@Details@Platform@@YGXPAPAVModuleBase@1WRL@Microsoft@@PAPAU__abi_Module@@PB_W@Z

?TerminateModule@Details@Platform@@YG_NPAVModuleBase@1WRL@Microsoft@@@Z

?ToInt32@IntPtr@Platform@@QAAHXZ

?ToString@Attribute@Metadata@Platform@@Q$AAAP$AAVString@3@XZ

?ToString@Boolean@Platform@@QAAP$AAVString@2@XZ

?ToString@Delegate@Platform@@Q$AAAP$AAVString@2@XZ

?ToString@Enum@Platform@@Q$AAAP$AAVString@2@XZ

?ToString@Exception@Platform@@U$AAAP$AAVString@2@XZ

?ToString@Guid@Platform@@QAAP$AAVString@2@XZ

?ToString@MTAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ

?ToString@OnePhaseConstructedAttribute@CompilerServices@Runtime@Platform@@Q$AAAP$AAVString@4@XZ

?ToString@STAThreadAttribute@Platform@@Q$AAAP$AAVString@2@XZ

?ToString@Type@Platform@@U$AAAP$AAVString@2@XZ

?ToString@ValueType@Platform@@Q$AAAP$AAVString@2@XZ

?ToString@char16@default@@QAAP$AAVString@Platform@@XZ

?ToString@float32@default@@QAAP$AAVString@Platform@@XZ

?ToString@float64@default@@QAAP$AAVString@Platform@@XZ

?ToString@int16@default@@QAAP$AAVString@Platform@@XZ

?ToString@int32@default@@QAAP$AAVString@Platform@@XZ

?ToString@int64@default@@QAAP$AAVString@Platform@@XZ

?ToString@int8@default@@QAAP$AAVString@Platform@@XZ

?ToString@uint16@default@@QAAP$AAVString@Platform@@XZ

?ToString@uint32@default@@QAAP$AAVString@Platform@@XZ

?ToString@uint64@default@@QAAP$AAVString@Platform@@XZ

?ToString@uint8@default@@QAAP$AAVString@Platform@@XZ

?UninitializeData@Details@Platform@@YAXH@Z

?Union@Rect@Foundation@Windows@@QAAXV123@@Z

?Union@Rect@Foundation@Windows@@QAAXVPoint@23@@Z

?WriteLine@Console@Details@Platform@@SAXP$AAVObject@3@@Z

?WriteLine@Console@Details@Platform@@SAXP$AAVString@3@@Z

?WriteLine@Console@Details@Platform@@SAXXZ

?__abi_FailFast@@YGXXZ

?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z

?__abi_Resolve@ControlBlock@Details@Platform@@UAGJAAVGuid@3@PAPAU__abi_IInspectable@@@Z

?__abi_WinRTraiseAccessDeniedException@@YGXXZ

?__abi_WinRTraiseCOMException@@YGXJ@Z

?__abi_WinRTraiseChangedStateException@@YGXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ

?__abi_WinRTraiseDisconnectedException@@YGXXZ

?__abi_WinRTraiseFailureException@@YGXXZ

?__abi_WinRTraiseInvalidArgumentException@@YGXXZ

?__abi_WinRTraiseInvalidCastException@@YGXXZ

?__abi_WinRTraiseNotImplementedException@@YGXXZ

?__abi_WinRTraiseNullReferenceException@@YGXXZ

?__abi_WinRTraiseObjectDisposedException@@YGXXZ

?__abi_WinRTraiseOperationCanceledException@@YGXXZ

?__abi_WinRTraiseOutOfBoundsException@@YGXXZ

?__abi_WinRTraiseOutOfMemoryException@@YGXXZ

?__abi_WinRTraiseWrongThreadException@@YGXXZ

?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z

?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z

?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z

?__abi_translateCurrentException@@YGJ_N@Z

?__getActivationFactoryByHSTRING@@YGJPAUHSTRING__@@AAVGuid@Platform@@PAPAX@Z

?get@Bottom@Rect@Foundation@Windows@@QAAMXZ

?get@BreakOnAllocationId@Heap@Details@Platform@@SAHXZ

?get@BreakOnFreeId@Heap@Details@Platform@@SAHXZ

?get@CurrentAllocationId@Heap@Details@Platform@@SAHXZ

?get@Empty@Rect@Foundation@Windows@@SA?AV234@XZ

?get@Empty@Size@Foundation@Windows@@SA?AV234@XZ

?get@FullName@Type@Platform@@Q$AAAP$AAVString@3@XZ

?get@HasInverse@Matrix3D@Media3D@Media@Xaml@UI@Windows@@QAA_NXZ

?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ

?get@ObjectCount@Heap@Details@Platform@@SAHXZ

?get@Right@Rect@Foundation@Windows@@QAAMXZ

?get@TrackingLevel@Heap@Details@Platform@@SA?AW4HeapAllocationTrackingLevel@34@XZ

?set@BreakOnAllocationId@Heap@Details@Platform@@SAXH@Z

?set@BreakOnFreeId@Heap@Details@Platform@@SAXH@Z

?set@TrackingLevel@Heap@Details@Platform@@SAXW4HeapAllocationTrackingLevel@34@@Z

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

vcruntime140.dll

.dll windows:6 windows x86 arch:x86

dbf59b100b5a77256457cf057352b441

Code Sign

33:00:00:00:fd:c7:f0:c9:6a:69:a1:c8:4c:00:00:00:00:00:fd
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2b:97:f1:f5:77:76:b0:ae:2c:26:f9:a3:b3:09:b3:53:c1:f6:ff:db:72:af:89:b4:e6:c1:eb:32:6a:f6:7a:c6
Signer

Actual PE Digest

2b:97:f1:f5:77:76:b0:ae:2c:26:f9:a3:b3:09:b3:53:c1:f6:ff:db:72:af:89:b4:e6:c1:eb:32:6a:f6:7a:c6

Digest Algorithm

sha256

PE Digest Matches

true

8a:b1:94:36:9b:87:8b:c1:63:b3:e8:04:f6:f0:c6:02:dc:ee:89:22
Signer

Actual PE Digest

8a:b1:94:36:9b:87:8b:c1:63:b3:e8:04:f6:f0:c6:02:dc:ee:89:22

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

d:\agent\_work\3\s\\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

terminate

abort

api-ms-win-crt-heap-l1-1-0

calloc

malloc

free

api-ms-win-crt-string-l1-1-0

strcpy_s

wcsncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

DeleteCriticalSection

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetSystemTimeAsFileTime

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsProcessorFeaturePresent

GetModuleHandleW

GetModuleFileNameW

LoadLibraryExW

GetProcAddress

FreeLibrary

RtlUnwind

VirtualQuery

EncodePointer

InterlockedPushEntrySList

InterlockedFlushSList

RaiseException

EnterCriticalSection

LeaveCriticalSection

TlsSetValue

GetLastError

SetLastError

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsFree

Exports

_CreateFrameInfo

_CxxThrowException

_EH_prolog

_FindAndUnlinkFrame

_IsExceptionObjectToBeDestroyed

_NLG_Dispatch2

_NLG_Return

_NLG_Return2

_SetWinRTOutOfMemoryExceptionCallback

__AdjustPointer

__BuildCatchObject

__BuildCatchObjectHelper

__CxxDetectRethrow

__CxxExceptionFilter

__CxxFrameHandler

__CxxFrameHandler2

__CxxFrameHandler3

__CxxLongjmpUnwind

__CxxQueryExceptionSize

__CxxRegisterExceptionObject

__CxxUnregisterExceptionObject

__DestructExceptionObject

__FrameUnwindFilter

__GetPlatformExceptionInfo

__RTCastToVoid

__RTDynamicCast

__RTtypeid

__TypeMatch

__current_exception

__current_exception_context

__intrinsic_setjmp

__processing_throw

__report_gsfailure

__std_exception_copy

__std_exception_destroy

__std_terminate

__std_type_info_compare

__std_type_info_destroy_list

__std_type_info_hash

__std_type_info_name

__telemetry_main_invoke_trigger

__telemetry_main_return_trigger

__unDName

__unDNameEx

__uncaught_exception

__uncaught_exceptions

__vcrt_GetModuleFileNameW

__vcrt_GetModuleHandleW

__vcrt_InitializeCriticalSectionEx

__vcrt_LoadLibraryExW

_chkesp

_except_handler2

_except_handler3

_except_handler4_common

_get_purecall_handler

_get_unexpected

_global_unwind2

_is_exception_typeof

_local_unwind2

_local_unwind4

_longjmpex

_purecall

_seh_longjmp_unwind

_seh_longjmp_unwind4

_set_purecall_handler

_set_se_translator

_setjmp3

longjmp

memchr

memcmp

memcpy

memmove

memset

set_unexpected

strchr

strrchr

strstr

unexpected

wcschr

wcsrchr

wcsstr

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4639a0b3116c2cfc71144b88a929cfd

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

1b:77:1c:18:f2:c5:39:98:c5:49:ce:c3Certificate

Extended Key Usages

Key Usages

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

bd:d3:31:82:47:6c:6e:11:2c:fa:1a:1d:71:8a:a3:2b:10:de:cc:81:bb:45:24:ed:7a:e2:09:9c:f8:95:fb:07Signer

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 126KB

.ndata Size: - Virtual size: 236KB

.rsrc Size: 105KB - Virtual size: 105KB

ae9e9813e9f2779a117476051e01fd2c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 296KB - Virtual size: 296KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

a9546246ff97b887a4072a24f9106617

Headers

File Characteristics

Imports

kernel32

version

user32

oleaut32

netapi32

advapi32

Exports

Exports

Sections

.text Size: 956KB - Virtual size: 956KB

.itext Size: 2KB - Virtual size: 2KB

.data Size: 15KB - Virtual size: 14KB

.bss Size: - Virtual size: 25KB

.idata Size: 4KB - Virtual size: 3KB

.didata Size: 512B - Virtual size: 490B

.edata Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 69B

.reloc Size: 90KB - Virtual size: 89KB

.rsrc Size: 12KB - Virtual size: 12KB

509a34b3a68a773e0afb4259e68f9f82

Headers

DLL Characteristics

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

1b:77:1c:18:f2:c5:39:98:c5:49:ce:c3
Certificate

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

bd:d3:31:82:47:6c:6e:11:2c:fa:1a:1d:71:8a:a3:2b:10:de:cc:81:bb:45:24:ed:7a:e2:09:9c:f8:95:fb:07
Signer

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 126KB

.ndata
Size: - Virtual size: 236KB

.rsrc
Size: 105KB - Virtual size: 105KB

.text
Size: 296KB - Virtual size: 296KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB

.text
Size: 956KB - Virtual size: 956KB

.itext
Size: 2KB - Virtual size: 2KB

.data
Size: 15KB - Virtual size: 14KB

.bss
Size: - Virtual size: 25KB

.idata
Size: 4KB - Virtual size: 3KB

.didata
Size: 512B - Virtual size: 490B

.edata
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 69B

.reloc
Size: 90KB - Virtual size: 89KB

.rsrc
Size: 12KB - Virtual size: 12KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 662B

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 100B

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 638B

UPX0
Size: - Virtual size: 44KB

UPX1
Size: 19KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 4KB

CODE
Size: 28KB - Virtual size: 28KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 73B

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB