Labelife_Setup_v3[.]0[.]1[.]719[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Labelife_Setup_v3.0.1.719.exe
Size

240.6MB
MD5

b2d210654456634afd9b783b5ea6903e
SHA1

316406e4ba535303e9b2995ce3b90f2eb19ab4ea
SHA256

1510f1be82d5f246f29129024b98a93c98b7724038fc4aba66e57309be9c692b
SHA512

f2222341d53f5671ea3986312df778f3c55a4d696d8bec5047002fd2c93188c0725ab36d92cbcc0220149c44683120303de8509872162a56a75ed3efe9faefd1
SSDEEP

6291456:7GFvAP/7W6oW1Z8SzgbY++zzmEoKV1qVgWO6tGdl61:L1Z8SzO+FR1K5O6tGdl61

Score

3^/10

Malware Config

Signatures

Unsigned PE 55 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/BgWorker.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$PLUGINSDIR/nsis7zU.dll
unpack003/Driver-label/QYRES.dll
unpack003/Driver-label/amd64/QYUI.dll
unpack003/Driver-label/amd64/QYUNI.dll
unpack003/Driver-label/amd64/devcon.exe
unpack003/Driver-label/i386/QYUI.dll
unpack003/Driver-label/i386/QYUNI.dll
unpack003/Driver-label/i386/devcon.exe
unpack003/Driver-qy/M08FRES.dll
unpack003/Driver-qy/QFXXXB.dll
unpack003/Driver-qy/QYPORRES.dll
unpack003/Driver-qy/amd64/D480UI.dll
unpack003/Driver-qy/amd64/D480UNI.dll
unpack003/Driver-qy/amd64/D480mon.dll
unpack003/Driver-qy/amd64/E8000UI.dll
unpack003/Driver-qy/amd64/E8000UNI.dll
unpack003/Driver-qy/amd64/M04SUI.dll
unpack003/Driver-qy/amd64/M04SUNI.dll
unpack003/Driver-qy/amd64/M08FUI.dll
unpack003/Driver-qy/amd64/M08FUNI.dll
unpack003/Driver-qy/amd64/M08Fmon.dll
unpack003/Driver-qy/amd64/P831mon.dll
unpack003/Driver-qy/amd64/QFXXXBUI.dll
unpack003/Driver-qy/amd64/QFXXXBUNI.dll
unpack003/Driver-qy/amd64/QYPORUI.dll
unpack003/Driver-qy/amd64/QYPORUNI.dll
unpack003/Driver-qy/amd64/S801UI.dll
unpack003/Driver-qy/amd64/S801UNI.dll
unpack003/Driver-qy/amd64/S821mon.dll
unpack003/Driver-qy/amd64/devcon.exe
unpack003/Driver-qy/i386/D480UI.dll
unpack003/Driver-qy/i386/D480UNI.dll
unpack003/Driver-qy/i386/D480mon.dll
unpack003/Driver-qy/i386/E8000UI.dll
unpack003/Driver-qy/i386/E8000UNI.dll
unpack003/Driver-qy/i386/M04SUI.dll
unpack003/Driver-qy/i386/M04SUNI.dll
unpack003/Driver-qy/i386/M08FUI.dll
unpack003/Driver-qy/i386/M08FUNI.dll
unpack003/Driver-qy/i386/M08Fmon.dll
unpack003/Driver-qy/i386/P831mon.dll
unpack003/Driver-qy/i386/QFXXXBUI.dll
unpack003/Driver-qy/i386/QFXXXBUNI.dll
unpack003/Driver-qy/i386/QYPORUI.dll
unpack003/Driver-qy/i386/QYPORUNI.dll
unpack003/Driver-qy/i386/S801UI.dll
unpack003/Driver-qy/i386/S801UNI.dll
unpack003/Driver-qy/i386/S821mon.dll
unpack003/Driver-qy/i386/devcon.exe
unpack003/Driver-tool/amd64/devcon.exe
unpack003/Driver-tool/i386/devcon.exe

Files

Labelife_Setup_v3.0.1.719.exe
.exe windows:5 windows x86 arch:x86

be41bf7b8cc010b614bd36bbca606973

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:9b:83:a7:52:09:fa:cd:de:c2:a3:ee
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

14/05/2024, 05:26

Not After

14/06/2027, 05:26

Subject

SERIALNUMBER=91440400MA4X9FQXXC,CN=Zhuhai Quin Technology Co.\, Ltd.,O=Zhuhai Quin Technology Co.\, Ltd.,L=Zhuhai,ST=Guangdong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13065a6875686169,1.3.6.1.4.1.311.60.2.1.2=#13094775616e67646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:19:65:7a:3b:9c:32:a6:a0:2f:a3:b0:6f:ab:d3:76:81:55:3a:10:9f:43:e2:d3:17:df:dc:c4:5b:0a:6c:e9
Signer

Actual PE Digest

53:19:65:7a:3b:9c:32:a6:a0:2f:a3:b0:6f:ab:d3:76:81:55:3a:10:9f:43:e2:d3:17:df:dc:c4:5b:0a:6c:e9

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/BgWorker.dll
.dll windows:4 windows x86 arch:x86

db2755f409b81c4dbfc04f648cfb80b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GetModuleHandleA
CloseHandle
SetThreadPriority
CreateThread

user32

IsWindowUnicode
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects

Exports

Exports

CallAndWait

Sections

.text
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LabelifeLogo.ico
$PLUGINSDIR/LabelifeUninst.ico
$PLUGINSDIR/Language.nsh
$PLUGINSDIR/Print MasterLogo.ico
$PLUGINSDIR/Print MasterUninst.ico
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/labelife_setup.nsi
$PLUGINSDIR/labelife_setup_package.nsi
$PLUGINSDIR/logo.ico
$PLUGINSDIR/nsExec.dll
.dll windows:5 windows x86 arch:x86

8700d0ebbb41c81ea52718af1ab70a93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
MultiByteToWideChar
lstrlenA
lstrcmpiW
lstrlenW
ExitProcess
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcpynW
GetCommandLineW
Sleep
TerminateProcess
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
GetModuleHandleW
GetTickCount
GetStartupInfoW
CreatePipe
GetVersionExW
GlobalLock
DeleteFileW
lstrcatW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
GetProcAddress
PeekNamedPipe
GetCurrentProcess

user32

CharPrevW
CharNextW
SendMessageW
FindWindowExW
wsprintfW

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsNiuniuSkin.dll
.dll windows:5 windows x86 arch:x86

cec8af3cb668835ffba303f4e1a08fe3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

10:5b:56:60:0c:56:b9:bb:a1:f5:14:1e:28:10:6e:28
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

04/12/2019, 00:00

Not After

03/12/2022, 23:59

Subject

CN=SHENZHEN LEEQIA TECHNOLOGY CO. LTD,O=SHENZHEN LEEQIA TECHNOLOGY CO. LTD,L=SHENZHEN,ST=GUANGDONG,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:18:54:55:1d:b1:d0:ea:96:7f:28:4b:65:ec:26:43:33:f9:09:47
Signer

Actual PE Digest

0c:18:54:55:1d:b1:d0:ea:96:7f:28:4b:65:ec:26:43:33:f9:09:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\NiuniuCapture\niuniu_src\nsNiuniuSkin\plugin\nsNiuniuDUI.pdb

Imports

kernel32

GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
HeapAlloc
RaiseException
RtlUnwind
LCMapStringW
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
InterlockedExchange
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
ReadFile
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetModuleFileNameW
GetLocaleInfoW
CloseHandle
GetModuleFileNameA
FreeEnvironmentStringsW
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
CreateFileW
LoadLibraryW
SetStdHandle
WriteConsoleW
SetEndOfFile
GetProcessHeap
MulDiv
GetCurrentDirectoryW
lstrlenW
GetFileSize
GlobalUnlock
GlobalLock
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
LocalFree
FormatMessageW
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryW
GetFileAttributesW
SetFileTime
lstrcmpiW
GetLocalTime
Sleep
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
DeleteCriticalSection
GetEnvironmentStringsW
InitializeCriticalSection
lstrcpyW
GlobalFree
lstrcpynW
GlobalAlloc
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringW
GetProcAddress
lstrlenA

user32

GetSysColor
PtInRect
GetCaretBlinkTime
GetKeyState
GetFocus
CharNextW
DestroyMenu
TrackPopupMenu
EnableMenuItem
AppendMenuW
CreatePopupMenu
IsIconic
IsZoomed
SetWindowRgn
MessageBoxW
DestroyWindow
ReleaseCapture
MapWindowPoints
IsWindowVisible
IsRectEmpty
GetUpdateRect
EndPaint
BeginPaint
GetActiveWindow
SetCapture
FillRect
DrawTextW
CharPrevW
SetRect
UpdateLayeredWindow
MoveWindow
GetWindowRgn
IsWindowEnabled
GetKeyNameTextW
MapVirtualKeyExW
ClientToScreen
SetForegroundWindow
InvalidateRgn
CreateAcceleratorTableW
GetGUIThreadInfo
GetWindowTextLengthW
GetWindowTextW
HideCaret
CreateCaret
SetCursor
InflateRect
OffsetRect
SetPropW
GetPropW
GetWindowLongW
CallWindowProcW
GetClassInfoExW
RegisterClassExW
LoadCursorW
RegisterClassW
GetSystemMetrics
LoadImageW
SendMessageW
GetParent
MonitorFromWindow
GetMonitorInfoW
GetWindow
EnableWindow
SetFocus
PostQuitMessage
ShowWindow
SetWindowLongW
CreateWindowExW
DefWindowProcW
UpdateWindow
GetCursorPos
GetCaretPos
SetCaretPos
GetKeyboardLayout
wsprintfW
SetTimer
GetMessageW
PostMessageW
KillTimer
TranslateMessage
ShowCaret
SetWindowPos
InvalidateRect
GetDC
GetClientRect
GetWindowRect
ScreenToClient
EqualRect
ReleaseDC
UnionRect
IntersectRect
IsWindow
SetWindowTextW
DispatchMessageW

gdi32

BitBlt
SaveDC
CreateCompatibleDC
GetTextMetricsW
AddFontMemResourceEx
PlayEnhMetaFile
RestoreDC
GetObjectW
DeleteObject
CreateFontIndirectW
GetEnhMetaFileHeader
CreateDIBitmap
SelectClipRgn
ExtSelectClipRgn
SetWindowOrgEx
CreateCompatibleBitmap
GetDeviceCaps
GetStockObject
CreateRoundRectRgn
DeleteDC
RemoveFontMemResourceEx
CloseEnhMetaFile
CreatePatternBrush
SetBitmapBits
GetBitmapBits
CreateRectRgn
PtInRegion
GetObjectA
GdiFlush
CreateSolidBrush
TextOutW
CreatePen
Rectangle
SelectObject
SetBkMode
SetTextColor
LineTo
MoveToEx
SetBkColor
GetCharABCWidthsW
GetTextExtentPoint32W
CreatePenIndirect
SetStretchBltMode
CreateRectRgnIndirect
GetClipBox
CombineRgn
CreateDIBSection
StretchBlt
CreateEnhMetaFileW

shell32

DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CreateStreamOnHGlobal
ReleaseStgMedium
CLSIDFromString
OleLockRunning
OleDuplicateData
CoCreateInstance
DoDragDrop
CoInitialize
CLSIDFromProgID

oleaut32

SysAllocString
VariantInit
SysFreeString
VariantClear

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics
GdipDeleteBrush
GdipFillRectangleI
GdipCreateFromHDC
GdipAlloc
GdipCloneBrush
GdipFree
GdipCreateSolidFill
GdipDeletePen
GdipDrawRectangleI
GdipSetPenMode
GdipCreatePen1
GdipDeletePath
GdipFillPath
GdipDrawPath
ord1
GdipAddPathLine
GdipCreatePath
GdipSetSmoothingMode
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipMeasureString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipDrawImageRectI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipGetImageHeight
GdipGetImageWidth
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

Exports

Exports

BindCallBack
BindCallBackEx
EnableDpi
ExitDUISetup
GetControlAttribute
GetControlProperties
GetCosValue
GetWindowSize
InitSkinPage
InitSkinSubPage
KillInnerTimer
KillTimerCallBack
ResetLicenseFile
SelOrHoverControl
SelectInstallDir
SelectInstallDirEx
SetControlAttribute
SetControlAttributeInner
SetDebugMode
SetInnerTimer
SetTimerCallBack
SetTimerControlAttribute
SetWindowSize
SetWindowTile
ShowPage
ShowPageItem
ShowSkinSubPage
StringHelper

Sections

.text
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsProcess.dll
.dll windows:4 windows x86 arch:x86

d6b0243dd90845123f35b66da1032c84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
CloseHandle
TerminateProcess
OpenProcess
lstrcmpiW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
lstrcpynW
GlobalAlloc

user32

wsprintfW

Exports

Exports

_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 1024B - Virtual size: 993B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis7zU.dll
.dll windows:6 windows x86 arch:x86

b6854db8fde386e6ef367d623b9e75d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
DeleteCriticalSection
CloseHandle
GetLastError
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetStdHandle
ReadFile
WriteFile
WaitForMultipleObjects
AreFileApisANSI
SetFileApisToOEM
SetFileApisToANSI
GlobalAlloc
GlobalFree
lstrcpynW
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
CreateDirectoryW
CreateFileW
DeleteFileW
GetFullPathNameW
EnterCriticalSection
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
lstrlenW
MoveFileW
FindClose
FindFirstFileW
GetFileSize
SetEndOfFile
SetFilePointer
GetCurrentProcess
GetSystemInfo
GetModuleHandleW
GetProcAddress
GetStringTypeW
WriteConsoleW
SetFilePointerEx
SetStdHandle
LCMapStringW
GetVersionExW
VirtualFree
GetTempFileNameW
VirtualAlloc
OutputDebugStringW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
HeapAlloc
EncodePointer
DecodePointer
CreateThread
GetCurrentThreadId
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
HeapReAlloc
GetCommandLineA
GetProcessHeap
InterlockedDecrement
ExitProcess
GetModuleHandleExW
SetLastError
InterlockedIncrement
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
HeapSize
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

FindWindowExW
SetWindowTextW
GetDlgItem
SendMessageW
wsprintfW
CharLowerW
CharUpperW

oleaut32

VariantCopy
VariantClear
SysAllocStringByteLen
SysAllocString
SysFreeString

Exports

Exports

Extract
ExtractWithCallback
ExtractWithDetails

Sections

.text
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/skin.zip
.zip
Labelife.png
.png
Print Master.png
.png
back_hot.png
.png
back_hot_ar.png
.png
back_hot_cs.png
.png
back_hot_de.png
.png
back_hot_en.png
.png
back_hot_es.png
.png
back_hot_fr.png
.png
back_hot_hk.png
.png
back_hot_id.png
.png
back_hot_it.png
.png
back_hot_jp.png
.png
back_hot_nl.png
.png
back_hot_pl.png
.png
back_hot_pt.png
.png
back_hot_ro.png
.png
back_hot_ru.png
.png
back_hot_tr.png
.png
back_nor.png
.png
back_nor_ar.png
.png
back_nor_cs.png
.png
back_nor_de.png
.png
back_nor_en.png
.png
back_nor_es.png
.png
back_nor_fr.png
.png
back_nor_hk.png
.png
back_nor_id.png
.png
back_nor_it.png
.png
back_nor_jp.png
.png
back_nor_nl.png
.png
back_nor_pl.png
.png
back_nor_pt.png
.png
back_nor_ro.png
.png
back_nor_ru.png
.png
back_nor_tr.png
.png
back_push.png
.png
back_push_ar.png
.png
back_push_cs.png
.png
back_push_de.png
.png
back_push_en.png
.png
back_push_es.png
.png
back_push_fr.png
.png
back_push_hk.png
.png
back_push_id.png
.png
back_push_it.png
.png
back_push_jp.png
.png
back_push_nl.png
.png
back_push_pl.png
.png
back_push_pt.png
.png
back_push_ro.png
.png
back_push_ru.png
.png
back_push_tr.png
.png
bk_shadow.png
.png
cancel_hot.png
.png
cancel_hot_ar.png
.png
cancel_hot_cs.png
.png
cancel_hot_de.png
.png
cancel_hot_en.png
.png
cancel_hot_es.png
.png
cancel_hot_fr.png
.png
cancel_hot_hk.png
.png
cancel_hot_id.png
.png
cancel_hot_it.png
.png
cancel_hot_jp.png
.png
cancel_hot_nl.png
.png
cancel_hot_pl.png
.png
cancel_hot_pt.png
.png
cancel_hot_ro.png
.png
cancel_hot_ru.png
.png
cancel_hot_tr.png
.png
cancel_nor.png
.png
cancel_nor_ar.png
.png
cancel_nor_cs.png
.png
cancel_nor_de.png
.png
cancel_nor_en.png
.png
cancel_nor_es.png
.png
cancel_nor_fr.png
.png
cancel_nor_hk.png
.png
cancel_nor_id.png
.png
cancel_nor_it.png
.png
cancel_nor_jp.png
.png
cancel_nor_nl.png
.png
cancel_nor_pl.png
.png
cancel_nor_pt.png
.png
cancel_nor_ro.png
.png
cancel_nor_ru.png
.png
cancel_nor_tr.png
.png
cancel_push.png
.png
cancel_push_ar.png
.png
cancel_push_cs.png
.png
cancel_push_de.png
.png
cancel_push_en.png
.png
cancel_push_es.png
.png
cancel_push_fr.png
.png
cancel_push_hk.png
.png
cancel_push_id.png
.png
cancel_push_it.png
.png
cancel_push_jp.png
.png
cancel_push_nl.png
.png
cancel_push_pl.png
.png
cancel_push_pt.png
.png
cancel_push_ro.png
.png
cancel_push_ru.png
.png
cancel_push_tr.png
.png
check.png
.png
closehover.png
.png
closenormal.png
.png
configpage.xml
configpage_ar.xml
configpage_cs.xml
configpage_de.xml
configpage_en.xml
configpage_es.xml
configpage_fr.xml
configpage_hk.xml
configpage_id.xml
configpage_it.xml
configpage_jp.xml
configpage_nl.xml
configpage_pl.xml
configpage_pt.xml
configpage_ro.xml
configpage_ru.xml
configpage_tr.xml
cry.png
.png
default.xml
.xml
dir_hot.png
.png
dir_hot_ar.png
.png
dir_hot_cs.png
.png
dir_hot_de.png
.png
dir_hot_en.png
.png
dir_hot_es.png
.png
dir_hot_fr.png
.png
dir_hot_hk.png
.png
dir_hot_id.png
.png
dir_hot_it.png
.png
dir_hot_jp.png
.png
dir_hot_nl.png
.png
dir_hot_pl.png
.png
dir_hot_pt.png
.png
dir_hot_ro.png
.png
dir_hot_ru.png
.png
dir_hot_tr.png
.png
dir_nor.png
.png
dir_nor_ar.png
.png
dir_nor_cs.png
.png
dir_nor_de.png
.png
dir_nor_en.png
.png
dir_nor_es.png
.png
dir_nor_fr.png
.png
dir_nor_hk.png
.png
dir_nor_id.png
.png
dir_nor_it.png
.png
dir_nor_jp.png
.png
dir_nor_nl.png
.png
dir_nor_pl.png
.png
dir_nor_pt.png
.png
dir_nor_ro.png
.png
dir_nor_ru.png
.png
dir_nor_tr.png
.png
dir_push.png
.png
dir_push_ar.png
.png
dir_push_cs.png
.png
dir_push_de.png
.png
dir_push_en.png
.png
dir_push_es.png
.png
dir_push_fr.png
.png
dir_push_hk.png
.png
dir_push_id.png
.png
dir_push_it.png
.png
dir_push_jp.png
.png
dir_push_nl.png
.png
dir_push_pl.png
.png
dir_push_pt.png
.png
dir_push_ro.png
.png
dir_push_ru.png
.png
dir_push_tr.png
.png
finish_hot.png
.png
finish_hot_ar.png
.png
finish_hot_cs.png
.png
finish_hot_de.png
.png
finish_hot_en.png
.png
finish_hot_es.png
.png
finish_hot_fr.png
.png
finish_hot_hk.png
.png
finish_hot_id.png
.png
finish_hot_it.png
.png
finish_hot_jp.png
.png
finish_hot_nl.png
.png
finish_hot_pl.png
.png
finish_hot_pt.png
.png
finish_hot_ro.png
.png
finish_hot_ru.png
.png
finish_hot_tr.png
.png
finish_nor.png
.png
finish_nor_ar.png
.png
finish_nor_cs.png
.png
finish_nor_de.png
.png
finish_nor_en.png
.png
finish_nor_es.png
.png
finish_nor_fr.png
.png
finish_nor_hk.png
.png
finish_nor_id.png
.png
finish_nor_it.png
.png
finish_nor_jp.png
.png
finish_nor_nl.png
.png
finish_nor_pl.png
.png
finish_nor_pt.png
.png
finish_nor_ro.png
.png
finish_nor_ru.png
.png
finish_nor_tr.png
.png
finish_push.png
.png
finish_push_ar.png
.png
finish_push_cs.png
.png
finish_push_de.png
.png
finish_push_en.png
.png
finish_push_es.png
.png
finish_push_fr.png
.png
finish_push_hk.png
.png
finish_push_id.png
.png
finish_push_it.png
.png
finish_push_jp.png
.png
finish_push_nl.png
.png
finish_push_pl.png
.png
finish_push_pt.png
.png
finish_push_ro.png
.png
finish_push_ru.png
.png
finish_push_tr.png
.png
finishpage.xml
finishpage_ar.xml
finishpage_cs.xml
finishpage_de.xml
finishpage_en.xml
finishpage_es.xml
finishpage_fr.xml
finishpage_hk.xml
finishpage_id.xml
finishpage_it.xml
finishpage_jp.xml
finishpage_nl.xml
finishpage_pl.xml
finishpage_pt.xml
finishpage_ro.xml
finishpage_ru.xml
finishpage_tr.xml
install copy.xml
.xml
install.xml
install1_hot.png
.png
install1_hot_ar.png
.png
install1_hot_cs.png
.png
install1_hot_de.png
.png
install1_hot_en.png
.png
install1_hot_es.png
.png
install1_hot_fr.png
.png
install1_hot_hk.png
.png
install1_hot_id.png
.png
install1_hot_it.png
.png
install1_hot_jp.png
.png
install1_hot_nl.png
.png
install1_hot_pl.png
.png
install1_hot_pt.png
.png
install1_hot_ro.png
.png
install1_hot_ru.png
.png
install1_hot_tr.png
.png
install1_nor.png
.png
install1_nor_ar.png
.png
install1_nor_cs.png
.png
install1_nor_de.png
.png
install1_nor_en.png
.png
install1_nor_es.png
.png
install1_nor_fr.png
.png
install1_nor_hk.png
.png
install1_nor_id.png
.png
install1_nor_it.png
.png
install1_nor_jp.png
.png
install1_nor_nl.png
.png
install1_nor_pl.png
.png
install1_nor_pt.png
.png
install1_nor_ro.png
.png
install1_nor_ru.png
.png
install1_nor_tr.png
.png
install1_push.png
.png
install1_push_ar.png
.png
install1_push_cs.png
.png
install1_push_de.png
.png
install1_push_en.png
.png
install1_push_es.png
.png
install1_push_fr.png
.png
install1_push_hk.png
.png
install1_push_id.png
.png
install1_push_jp.png
.png
install1_push_nl.png
.png
install1_push_pl.png
.png
install1_push_pt.png
.png
install1_push_ro.png
.png
install1_push_ru.png
.png
install1_push_tr.png
.png
install1_pust_it.png
.png
install_disable.png
.png
install_disable_ar.png
.png
install_disable_cs.png
.png
install_disable_de.png
.png
install_disable_en.png
.png
install_disable_es.png
.png
install_disable_fr.png
.png
install_disable_hk.png
.png
install_disable_id.png
.png
install_disable_it.png
.png
install_disable_jp.png
.png
install_disable_nl.png
.png
install_disable_pl.png
.png
install_disable_pt.png
.png
install_disable_ro.png
.png
install_disable_ru.png
.png
install_disable_tr.png
.png
install_hot.png
.png
install_hot_ar.png
.png
install_hot_cs.png
.png
install_hot_de.png
.png
install_hot_en.png
.png
install_hot_es.png
.png
install_hot_fr.png
.png
install_hot_hk.png
.png
install_hot_id.png
.png
install_hot_it.png
.png
install_hot_jp.png
.png
install_hot_nl.png
.png
install_hot_pl.png
.png
install_hot_pt.png
.png
install_hot_ro.png
.png
install_hot_ru.png
.png
install_hot_tr.png
.png
install_nor.png
.png
install_nor_ar.png
.png
install_nor_cs.png
.png
install_nor_de.png
.png
install_nor_en.png
.png
install_nor_es.png
.png
install_nor_fr.png
.png
install_nor_hk.png
.png
install_nor_id.png
.png
install_nor_it.png
.png
install_nor_jp.png
.png
install_nor_nl.png
.png
install_nor_pl.png
.png
install_nor_pt.png
.png
install_nor_ro.png
.png
install_nor_ru.png
.png
install_nor_tr.png
.png
install_push.png
.png
install_push_ar.png
.png
install_push_cs.png
.png
install_push_de.png
.png
install_push_en.png
.png
install_push_es.png
.png
install_push_fr.png
.png
install_push_hk.png
.png
install_push_id.png
.png
install_push_it.png
.png
install_push_jp.png
.png
install_push_nl.png
.png
install_push_pl.png
.png
install_push_pt.png
.png
install_push_ro.png
.png
install_push_ru.png
.png
install_push_tr.png
.png
installingPage.png
.png
installingpage.xml
installingpage_ar.xml
installingpage_cs.xml
installingpage_de.xml
installingpage_en.xml
installingpage_es.xml
installingpage_fr.xml
installingpage_hk.xml
installingpage_id.xml
installingpage_it.xml
installingpage_jp.xml
installingpage_nl.xml
installingpage_pl.xml
installingpage_pt.xml
installingpage_ro.xml
installingpage_ru.xml
installingpage_tr.xml
licensepage.xml
msgBox.xml
.xml
msgBox_ar.xml
.xml
msgBox_cs.xml
.xml
msgBox_de.xml
.xml
msgBox_en.xml
.xml
msgBox_es.xml
.xml
msgBox_fr.xml
.xml
msgBox_hk.xml
.xml
msgBox_id.xml
.xml
msgBox_it.xml
.xml
msgBox_jp.xml
msgBox_nl.xml
.xml
msgBox_pl.xml
.xml
msgBox_pt.xml
.xml
msgBox_ro.xml
.xml
msgBox_ru.xml
.xml
msgBox_tr.xml
.xml
msgWarning.png
.png
ok_hot.png
.png
ok_hot_ar.png
.png
ok_hot_cs.png
.png
ok_hot_de.png
.png
ok_hot_en.png
.png
ok_hot_es.png
.png
ok_hot_fr.png
.png
ok_hot_hk.png
.png
ok_hot_id.png
.png
ok_hot_it.png
.png
ok_hot_jp.png
.png
ok_hot_nl.png
.png
ok_hot_pl.png
.png
ok_hot_pt.png
.png
ok_hot_ro.png
.png
ok_hot_ru.png
.png
ok_hot_tr.png
.png
ok_nor.png
.png
ok_nor_ar.png
.png
ok_nor_cs.png
.png
ok_nor_de.png
.png
ok_nor_en.png
.png
ok_nor_es.png
.png
ok_nor_fr.png
.png
ok_nor_hk.png
.png
ok_nor_id.png
.png
ok_nor_it.png
.png
ok_nor_jp.png
.png
ok_nor_nl.png
.png
ok_nor_pl.png
.png
ok_nor_pt.png
.png
ok_nor_ro.png
.png
ok_nor_ru.png
.png
ok_nor_tr.png
.png
ok_push.png
.png
ok_push_ar.png
.png
ok_push_cs.png
.png
ok_push_de.png
.png
ok_push_en.png
.png
ok_push_es.png
.png
ok_push_fr.png
.png
ok_push_hk.png
.png
ok_push_id.png
.png
ok_push_it.png
.png
ok_push_jp.png
.png
ok_push_nl.png
.png
ok_push_pl.png
.png
ok_push_pt.png
.png
ok_push_ro.png
.png
ok_push_ru.png
.png
ok_push_tr.png
.png
open_hot.png
.png
open_hot_ar.png
.png
open_hot_cs.png
.png
open_hot_de.png
.png
open_hot_en.png
.png
open_hot_es.png
.png
open_hot_fr.png
.png
open_hot_hk.png
.png
open_hot_id.png
.png
open_hot_it.png
.png
open_hot_jp.png
.png
open_hot_nl.png
.png
open_hot_pl.png
.png
open_hot_pt.png
.png
open_hot_ro.png
.png
open_hot_ru.png
.png
open_hot_tr.png
.png
open_nor.png
.png
open_nor_ar.png
.png
open_nor_cs.png
.png
open_nor_de.png
.png
open_nor_en.png
.png
open_nor_es.png
.png
open_nor_fr.png
.png
open_nor_hk.png
.png
open_nor_id.png
.png
open_nor_it.png
.png
open_nor_jp.png
.png
open_nor_nl.png
.png
open_nor_pl.png
.png
open_nor_pt.png
.png
open_nor_ro.png
.png
open_nor_ru.png
.png
open_nor_tr.png
.png
open_push.png
.png
open_push_ar.png
.png
open_push_cs.png
.png
open_push_de.png
.png
open_push_en.png
.png
open_push_es.png
.png
open_push_fr.png
.png
open_push_hk.png
.png
open_push_id.png
.png
open_push_it.png
.png
open_push_jp.png
.png
open_push_nl.png
.png
open_push_pl.png
.png
open_push_pt.png
.png
open_push_ro.png
.png
open_push_ru.png
.png
open_push_tr.png
.png
plane.png
.png
progress.png
.png
progressed.png
.png
success.png
.png
uncheck.png
.png
uninstall.png
.png
uninstallfinishpage.xml
uninstallfinishpage_ar.xml
uninstallfinishpage_cs.xml
uninstallfinishpage_de.xml
uninstallfinishpage_en.xml
uninstallfinishpage_es.xml
uninstallfinishpage_fr.xml
uninstallfinishpage_hk.xml
uninstallfinishpage_id.xml
uninstallfinishpage_it.xml
uninstallfinishpage_jp.xml
uninstallfinishpage_nl.xml
uninstallfinishpage_pl.xml
uninstallfinishpage_pt.xml
uninstallfinishpage_ro.xml
uninstallfinishpage_ru.xml
uninstallfinishpage_tr.xml
uninstallingpage copy.xml
.xml
uninstallingpage.xml
uninstallingpage_ar copy.xml
uninstallingpage_ar.xml
uninstallingpage_cs copy.xml
uninstallingpage_cs.xml
uninstallingpage_de copy.xml
uninstallingpage_de.xml
uninstallingpage_en copy.xml
uninstallingpage_en.xml
uninstallingpage_es copy.xml
uninstallingpage_es.xml
uninstallingpage_fr copy.xml
uninstallingpage_fr.xml
uninstallingpage_hk copy.xml
uninstallingpage_hk.xml
uninstallingpage_id copy.xml
uninstallingpage_id.xml
uninstallingpage_it copy.xml
uninstallingpage_it.xml
uninstallingpage_jp copy.xml
uninstallingpage_jp.xml
uninstallingpage_nl copy.xml
uninstallingpage_nl.xml
uninstallingpage_pl copy.xml
uninstallingpage_pl.xml
uninstallingpage_pt copy.xml
uninstallingpage_pt.xml
uninstallingpage_ro copy.xml
uninstallingpage_ro.xml
uninstallingpage_ru copy.xml
uninstallingpage_ru.xml
uninstallingpage_tr copy.xml
uninstallingpage_tr.xml
uninstallpage copy.xml
.xml
uninstallpage.xml
uninstallpage_ar copy.xml
uninstallpage_ar.xml
uninstallpage_cs copy.xml
uninstallpage_cs.xml
uninstallpage_de copy.xml
uninstallpage_de.xml
uninstallpage_en copy.xml
uninstallpage_en.xml
uninstallpage_es copy.xml
uninstallpage_es.xml
uninstallpage_fr copy.xml
uninstallpage_fr.xml
uninstallpage_hk copy.xml
uninstallpage_hk.xml
uninstallpage_id copy.xml
uninstallpage_id.xml
uninstallpage_it copy.xml
uninstallpage_it.xml
uninstallpage_jp copy.xml
uninstallpage_jp.xml
uninstallpage_nl copy.xml
uninstallpage_nl.xml
uninstallpage_pl copy.xml
uninstallpage_pl.xml
uninstallpage_pt copy.xml
uninstallpage_pt.xml
uninstallpage_ro copy.xml
uninstallpage_ro.xml
uninstallpage_ru copy.xml
uninstallpage_ru.xml
uninstallpage_tr copy.xml
uninstallpage_tr.xml
$PLUGINSDIR/ui_labelife_setup.nsh
$TEMP/AimoDriver/Driver.7z
.7z
DeviceRescan.bat
Driver-label/650.gpd
Driver-label/650Pro.gpd
Driver-label/660.gpd
Driver-label/6XL.gpd
Driver-label/6XLPro.gpd
Driver-label/D450.gpd
Driver-label/D520.gpd
Driver-label/D530.gpd
Driver-label/QY.gpd
Driver-label/QY.inf
Driver-label/QY.ini
Driver-label/QY300.gpd
Driver-label/QYRES.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Printer\Driver\Printuni\WindowsUI\Release\PRTRes.pdb

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Driver-label/T200.gpd
Driver-label/T200Pro.gpd
Driver-label/T300.gpd
Driver-label/T600.gpd
Driver-label/amd64/QYUI.dll
.dll windows:6 windows x64 arch:x64

28e7c8434712519f821c7a0bd8483f1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\0-driver-combine\labelprinter\qydriver\amd64\QYUI.pdb

Imports

msvcrt

_vsnwprintf
wcschr
_XcptFilter
_initterm
_amsg_exit
_wtoi
calloc
_wtof
swprintf
__C_specific_handler
sprintf_s
_mkdir
sscanf
sprintf
strchr
strstr
swprintf_s
vswprintf_s
_vsnprintf_s
??2@YAPEAX_K@Z
free
malloc
_wcsupr
wcsstr
??3@YAXPEAX@Z
_assert
memcmp

kernel32

HeapFree
GlobalAlloc
GlobalFree
HeapAlloc
OutputDebugStringA
lstrcpynW
CloseHandle
GetLastError
OutputDebugStringW
GetModuleFileNameW
SetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
CreateThread
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
HeapReAlloc

user32

ShowWindow
GetDlgItemTextA
SetDlgItemTextA
SetWindowPos
CheckDlgButton
CheckRadioButton
SendDlgItemMessageA
SetRect
InvalidateRect
UpdateWindow
EndDialog
IsDlgButtonChecked
MessageBoxA
GetWindowRect
LoadStringW
SetWindowLongPtrW
GetWindowLongPtrW
GetDlgItemTextW
SendDlgItemMessageW
MessageBoxW
SetDlgItemTextW
SendMessageW
GetParent
LoadImageW
GetDlgItem
EnableWindow
DialogBoxParamW

winspool.drv

XcvDataW
AddPrinterW
EndDocPrinter
WritePrinter
StartDocPrinterW
AddFormW
SetFormW
GetFormW
DeleteFormW
ClosePrinter
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterDataW
SetPrinterW
OpenPrinterW
GetPrinterW

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen

gdi32

DeleteObject

wlanapi

WlanGetAvailableNetworkList
WlanEnumInterfaces
WlanFreeMemory
WlanCloseHandle
WlanOpenHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/amd64/QYUNI.dll
.dll windows:6 windows x64 arch:x64

4281a8de9569b9448e8f1219e96c3e42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\0-driver-combine\labelprinter\qydriver\amd64\QYUNI.pdb

Imports

msvcrt

_XcptFilter
_wcsupr
_vsnwprintf
fopen
_initterm
_mkdir
swprintf
wcsstr
free
malloc
fclose
_amsg_exit
__C_specific_handler
sprintf
fwrite
memcmp
_assert
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
sqrt

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleFileNameW
OutputDebugStringW
Sleep
LocalFree
GlobalFree
LocalAlloc
GlobalAlloc
OutputDebugStringA
SetLastError
GetLastError

winspool.drv

GetFormW
DeviceCapabilitiesW
ClosePrinter
OpenPrinterW
GetJobW
GetPrinterW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/amd64/devcon.exe
.exe windows:6 windows x64 arch:x64

ce4a5cfcfb0452b87e013f07f4d59f9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

devcon.pdb

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
Sleep
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter

msvcrt

wcschr
_wcsicmp
towlower
_wcsnicmp
fputs
__iob_func
wcsrchr
fputws
?terminate@@YAXXZ
memset
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
wprintf
??2@YAPEAX_K@Z
towupper
??3@YAXPEAX@Z
iswalpha

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

ole32

CLSIDFromString

setupapi

SetupScanFileQueueW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
CM_Get_Device_ID_ExW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
SetupDiOpenClassRegKeyExW
SetupCloseInfFile
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupDiDestroyDriverInfoList
SetupOpenInfFileW
CM_Free_Res_Des_Handle
CM_Get_First_Log_Conf_Ex
SetupDiSetDeviceInstallParamsW
SetupFindFirstLineW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDescriptionExW
SetupDiClassGuidsFromNameExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

user32

CharNextW
CharPrevW
LoadStringW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/amd64/qymon.dll
.dll windows:6 windows x64 arch:x64

e89a80bc71bcec58c9df297a8c04bb5c

Code Sign

33:00:00:00:f5:e8:77:3b:20:6b:1c:cd:61:00:00:00:00:00:f5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/01/2023, 19:14

Not After

15/12/2023, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:f5:e8:77:3b:20:6b:1c:cd:61:00:00:00:00:00:f5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/01/2023, 19:14

Not After

15/12/2023, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:66:fe:e8:56:aa:a3:ca:50:3b:c2:e5:36:e0:37:5d:90:af:d1:5d:6b:68:0b:21:4e:da:07:eb:49:75:44:a3
Signer

Actual PE Digest

3d:66:fe:e8:56:aa:a3:ca:50:3b:c2:e5:36:e0:37:5d:90:af:d1:5d:6b:68:0b:21:4e:da:07:eb:49:75:44:a3

Digest Algorithm

sha256

PE Digest Matches

true

3d:66:fe:e8:56:aa:a3:ca:50:3b:c2:e5:36:e0:37:5d:90:af:d1:5d:6b:68:0b:21:4e:da:07:eb:49:75:44:a3
Signer

Actual PE Digest

3d:66:fe:e8:56:aa:a3:ca:50:3b:c2:e5:36:e0:37:5d:90:af:d1:5d:6b:68:0b:21:4e:da:07:eb:49:75:44:a3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\0-driver-combine\labelprinter\qydriver\amd64\qymon.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
wcsstr
memmove
malloc
free
_vsnprintf_s

kernel32

UnhandledExceptionFilter
GetCurrentProcess
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
OutputDebugStringW
GlobalAlloc
LeaveCriticalSection
GetLastError
EnterCriticalSection
GlobalFree
CreateEventW
lstrcmpiW
GetCurrentThreadId
OutputDebugStringA
CloseHandle
WaitForSingleObject
SetEvent
GetTickCount
InitializeCriticalSection
Sleep
lstrlenW
QueryPerformanceCounter
SetLastError
DisableThreadLibraryCalls
DeleteCriticalSection

spoolss

GetJobW
ClosePrinter
SetJobW
OpenPrinterW
RouterAllocBidiResponseContainer
RouterAllocBidiMem
GetPrinterDataW

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/i386/QYUI.dll
.dll windows:6 windows x86 arch:x86

b84a7cdc3cb4d801c304bcf47591e2ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\0-driver-combine\labelprinter\qydriver\i386\QYUI.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
_vsnwprintf
wcschr
_wtoi
memset
??3@YAXPAX@Z
free
malloc
wcsstr
_wcsupr
??2@YAPAXI@Z
swprintf
calloc
_wtof
sprintf_s
_mkdir
sscanf
_ftol2_sse
sprintf
strchr
strstr
swprintf_s
memcpy
vswprintf_s
_vsnprintf_s
_assert

kernel32

GetTickCount
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GlobalAlloc
Sleep
CreateThread
WideCharToMultiByte
MultiByteToWideChar
GetUserDefaultLCID
HeapReAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringA
lstrcpynW
GetModuleFileNameW
OutputDebugStringW
GetLastError
CloseHandle
SetLastError
InterlockedDecrement
InterlockedIncrement

user32

SetRect
InvalidateRect
SendMessageW
UpdateWindow
LoadStringW
EndDialog
GetWindowRect
SetWindowPos
CheckDlgButton
CheckRadioButton
SendDlgItemMessageA
SetDlgItemTextA
ShowWindow
SetWindowLongW
IsDlgButtonChecked
MessageBoxA
GetDlgItemTextA
SetDlgItemTextW
EnableWindow
GetDlgItem
LoadImageW
GetWindowLongW
GetParent
DialogBoxParamW
MessageBoxW
SendDlgItemMessageW
GetDlgItemTextW

winspool.drv

WritePrinter
GetPrinterW
GetPrinterDataW
SetPrinterDataW
DeviceCapabilitiesW
ClosePrinter
DeleteFormW
AddFormW
SetFormW
GetFormW
EndDocPrinter
OpenPrinterW
StartDocPrinterW
AddPrinterW
XcvDataW
SetPrinterW

ole32

CoInitializeEx
CoCreateInstance
CoTaskMemFree
CoUninitialize
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysFreeString

gdi32

DeleteObject

wlanapi

WlanGetAvailableNetworkList
WlanEnumInterfaces
WlanOpenHandle
WlanCloseHandle
WlanFreeMemory

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/i386/QYUNI.dll
.dll windows:6 windows x86 arch:x86

f061788289d05bfe4095c46457339cb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\0-driver-combine\labelprinter\qydriver\i386\QYUNI.pdb

Imports

msvcrt

_XcptFilter
_wcsupr
_vsnwprintf
_CIsqrt
_mkdir
sprintf
_initterm
swprintf
wcsstr
_ftol2_sse
malloc
free
fwrite
_amsg_exit
_except_handler4_common
fopen
fclose
_assert
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameW
OutputDebugStringW
Sleep
GetLastError
LocalFree
GlobalAlloc
LocalAlloc
GlobalFree
OutputDebugStringA
SetLastError
InterlockedDecrement
InterlockedIncrement

winspool.drv

DeviceCapabilitiesW
OpenPrinterW
ClosePrinter
GetJobW
GetPrinterW
GetPrinterDataW
GetFormW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/i386/devcon.exe
.exe windows:6 windows x86 arch:x86

06694565e94cd10f48e1e4b90bc04bc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

devcon.pdb

Imports

advapi32

InitiateSystemShutdownExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW

kernel32

LocalFree
FormatMessageW
CloseHandle
GetCurrentProcess
GetLastError
lstrlenW
GetDateFormatW
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetFullPathNameW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

fputws
fputs
__iob_func
??3@YAXPAX@Z
memset
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
wprintf
wcsrchr
_wcsicmp
_wcsnicmp
iswalpha
towupper
towlower
wcschr
??2@YAPAXI@Z

ntdll

RtlUnwind

ole32

CLSIDFromString

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiBuildClassInfoListExW
SetupDiClassNameFromGuidExW
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Disconnect_Machine
SetupDiSetClassInstallParamsW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetStringFieldW
SetupDiGetClassDescriptionExW
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
SetupDiGetDriverInstallParamsW
SetupDiSetSelectedDriverW
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupScanFileQueueW
SetupCloseFileQueue
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupDiDestroyDriverInfoList
CM_Get_First_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Get_Next_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Ex
CM_Get_DevNode_Status_Ex
SetupDiClassGuidsFromNameExW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW

user32

LoadStringW
CharNextW
CharPrevW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/i386/qymon.dll
.dll windows:6 windows x86 arch:x86

df9c66646ed8f67b85a6bb2aba3a9c7b

Code Sign

33:00:00:00:f5:e8:77:3b:20:6b:1c:cd:61:00:00:00:00:00:f5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/01/2023, 19:14

Not After

15/12/2023, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:f5:e8:77:3b:20:6b:1c:cd:61:00:00:00:00:00:f5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/01/2023, 19:14

Not After

15/12/2023, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:40:93:cc:a3:1c:a3:b0:ac:0c:8b:20:40:d2:22:7e:54:6e:80:34:96:77:5f:af:f7:df:06:66:f7:6f:4f:a0
Signer

Actual PE Digest

99:40:93:cc:a3:1c:a3:b0:ac:0c:8b:20:40:d2:22:7e:54:6e:80:34:96:77:5f:af:f7:df:06:66:f7:6f:4f:a0

Digest Algorithm

sha256

PE Digest Matches

true

99:40:93:cc:a3:1c:a3:b0:ac:0c:8b:20:40:d2:22:7e:54:6e:80:34:96:77:5f:af:f7:df:06:66:f7:6f:4f:a0
Signer

Actual PE Digest

99:40:93:cc:a3:1c:a3:b0:ac:0c:8b:20:40:d2:22:7e:54:6e:80:34:96:77:5f:af:f7:df:06:66:f7:6f:4f:a0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\0-driver-combine\labelprinter\qydriver\i386\qymon.pdb

Imports

msvcrt

_amsg_exit
_except_handler4_common
_initterm
_XcptFilter
memmove
wcsstr
wcscpy_s
free
malloc
_vsnprintf_s
memset
memcpy

kernel32

QueryPerformanceCounter
InterlockedCompareExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
InterlockedExchange
SetLastError
SetUnhandledExceptionFilter
OutputDebugStringA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcmpiW
GlobalFree
CloseHandle
CreateEventW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
SetEvent
WaitForSingleObject
lstrlenW
Sleep
GetTickCount
UnhandledExceptionFilter

spoolss

ClosePrinter
SetJobW
OpenPrinterW
GetJobW
GetPrinterDataW
RouterAllocBidiMem
RouterAllocBidiResponseContainer

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-label/ia64/QYUI.dll
Driver-label/ia64/QYUNI.dll
Driver-label/ia64/devcon.exe
Driver-label/ia64/qymon.dll
Driver-label/qy.cat
Driver-qy/A30.GPD
Driver-qy/D480.GPD
Driver-qy/D480.ini
Driver-qy/D50.GPD
Driver-qy/D680BT.GPD
Driver-qy/E6000.GPD
Driver-qy/E8000.GPD
Driver-qy/E8000.ini
Driver-qy/G831.GPD
Driver-qy/M04S.GPD
Driver-qy/M04S.ini
Driver-qy/M08F.GPD
Driver-qy/M08F.ini
Driver-qy/M08FRES.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Printer\Driver\Printuni\WindowsUI\Release\PRTRes.pdb

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Driver-qy/M08pro.gpd
Driver-qy/M100.GPD
Driver-qy/M1xx.GPD
Driver-qy/M832.gpd
Driver-qy/Mxxx.GPD
Driver-qy/P780.GPD
Driver-qy/P831.GPD
Driver-qy/P83X.GPD
Driver-qy/Q300.GPD
Driver-qy/QF368B.gpd
Driver-qy/QF368B.ini
Driver-qy/QFXXXB.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Printer\Driver\Printuni\WindowsUI\Release\PRTRes.pdb

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Driver-qy/QYPOR.inf
Driver-qy/QYPOR.ini
Driver-qy/QYPORRES.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Printer\Driver\Printuni\WindowsUI\Release\PRTRes.pdb

Sections

.rdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Driver-qy/R831.gpd
Driver-qy/S801.ini
Driver-qy/S822.gpd
Driver-qy/SP20.gpd
Driver-qy/T08FS.gpd
Driver-qy/T831.GPD
Driver-qy/TP82.GPD
Driver-qy/amd64/D480UI.dll
.dll windows:6 windows x64 arch:x64

40cd492e83e0fb52a4a489510ccac887

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\D480UI.pdb

Imports

msvcrt

_wtof
calloc
sprintf
_vsnwprintf
wcschr
_XcptFilter
_initterm
_amsg_exit
__C_specific_handler
sprintf_s
_wtoi
wcsncpy
strncmp
swprintf
vswprintf
_vsnprintf
??2@YAPEAX_K@Z
free
malloc
??3@YAXPEAX@Z
_assert
memcmp

kernel32

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MultiByteToWideChar
HeapReAlloc
GlobalFree
GlobalAlloc
HeapFree
HeapAlloc
OutputDebugStringA
SetLastError
OutputDebugStringW
GetLastError
Sleep
lstrcpynW

user32

SetRect
InvalidateRect
UpdateWindow
SetDlgItemTextW
MessageBoxA
EndDialog
IsDlgButtonChecked
DialogBoxParamW
MessageBoxW
CreateDialogParamW
LoadStringA
SendMessageW
GetParent
SetWindowLongPtrW
LoadStringW
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
GetDlgItemTextW
CheckDlgButton
GetWindowRect
ShowWindow
SetWindowPos
GetWindowLongPtrW
LoadImageW

winspool.drv

AddFormW
SetFormW
GetPrinterDriverW
EndDocPrinter
WritePrinter
StartDocPrinterW
GetFormW
DeleteFormW
SetPrinterW
OpenPrinterW
DeviceCapabilitiesW
GetPrinterW
ClosePrinter
GetPrinterDataW
SetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

VariantClear
SysFreeString
SysAllocString
VariantInit
SysAllocStringLen

gdi32

GetObjectW
DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/D480UNI.dll
.dll windows:6 windows x64 arch:x64

5c6aae67dad4b741bff291bd8a4fa59b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\D480UNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
__C_specific_handler
swprintf
free
malloc
fclose
??2@YAPEAX_K@Z
_vsnwprintf
fwrite
fputc
fopen_s
_assert
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
Sleep
GetLastError
GlobalAlloc
SetLastError
OutputDebugStringA
LocalAlloc
LocalFree
OutputDebugStringW
GetTickCount

winspool.drv

GetJobW
GetPrinterW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/D480mon.dll
.dll windows:6 windows x64 arch:x64

778ff0865431bb85dcd7d82ff3aed390

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\D480mon.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
malloc
free
_vsnprintf_s

kernel32

RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
GlobalAlloc
LeaveCriticalSection
GetLastError
EnterCriticalSection
GlobalFree
CreateEventW
lstrcmpiW
GetCurrentThreadId
OutputDebugStringA
CloseHandle
WaitForSingleObject
SetEvent
GetTickCount
InitializeCriticalSection
Sleep
lstrlenW
SetThreadPriority
SetLastError
GetSystemTimeAsFileTime
ResetEvent
DeleteCriticalSection
CreateThread
QueryPerformanceCounter
GetCurrentProcessId
DisableThreadLibraryCalls

user32

LoadStringW

spoolss

GetJobW
ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
RouterAllocBidiResponseContainer
RouterAllocBidiMem

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/E8000UI.dll
.dll windows:6 windows x64 arch:x64

c8585ad6b5d3da6f892b36fc79cff8bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\e8000\amd64\E8000UI.pdb

Imports

msvcrt

_XcptFilter
wcschr
_vsnwprintf
calloc
_wtof
sprintf
_assert
_wtoi
wcsncpy
free
malloc
strncmp
_initterm
swprintf
vswprintf
_amsg_exit
__C_specific_handler
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
MultiByteToWideChar
GetLastError
HeapReAlloc
GlobalFree
GlobalAlloc
SetLastError
lstrcpynW
OutputDebugStringA
OutputDebugStringW
HeapAlloc
HeapFree

user32

CheckDlgButton
IsDlgButtonChecked
EndDialog
UpdateWindow
InvalidateRect
SetRect
SetDlgItemTextW
LoadStringW
DialogBoxParamW
ShowWindow
MessageBoxW
CreateDialogParamW
SetWindowLongPtrW
GetParent
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
LoadImageW
GetWindowLongPtrW
GetDlgItemTextW
SendMessageW

winspool.drv

SetPrinterW
AddFormW
SetFormW
GetFormW
GetPrinterDriverW
DeleteFormW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
VariantInit

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/E8000UNI.dll
.dll windows:6 windows x64 arch:x64

2f98c0f47a4aa6fb04a680cf1230568d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\code\work\driver\qyprinter\e8000\amd64\E8000UNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
__C_specific_handler
swprintf
free
malloc
_vsnwprintf
_assert
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
Sleep
GetLastError
GlobalAlloc
OutputDebugStringW
SetLastError
LocalAlloc
LocalFree
QueryPerformanceCounter

winspool.drv

GetJobW
GetPrinterW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/M04SUI.dll
.dll windows:6 windows x64 arch:x64

e90523c2284c5944459f881cd5ab4c96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\M04SUI.pdb

Imports

msvcrt

_XcptFilter
wcschr
_vsnwprintf
calloc
_wtof
sprintf
_assert
_wtoi
wcsncpy
free
malloc
_initterm
strncmp
swprintf
_amsg_exit
__C_specific_handler
vswprintf
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
MultiByteToWideChar
GetLastError
HeapReAlloc
GlobalFree
SetLastError
lstrcpynW
OutputDebugStringA
OutputDebugStringW
HeapAlloc
HeapFree
GlobalAlloc

user32

SetRect
IsDlgButtonChecked
EndDialog
UpdateWindow
InvalidateRect
SetWindowLongPtrW
EnableWindow
GetDlgItem
SetDlgItemTextW
DialogBoxParamW
MessageBoxW
GetParent
SendDlgItemMessageW
LoadStringW
CheckRadioButton
LoadImageW
GetWindowLongPtrW
GetDlgItemTextW
SendMessageW

winspool.drv

DeleteFormW
AddFormW
SetFormW
GetFormW
GetPrinterDriverW
SetPrinterW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
VariantInit

advapi32

RegDeleteTreeW

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/M04SUNI.dll
.dll windows:6 windows x64 arch:x64

75fdc4513dc97ee40299d56e00b6877c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

e:\code\work\driver\qyprinter\amd64\M04SUNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
__C_specific_handler
swprintf
free
malloc
_vsnwprintf
_assert
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
LocalFree
SetLastError
OutputDebugStringA
LocalAlloc
GlobalAlloc
OutputDebugStringW
GetLastError

winspool.drv

GetFormW
GetPrinterW
GetJobW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/M08FUI.dll
.dll windows:6 windows x64 arch:x64

ee34be0c074592960859c1a0e2a790f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\M08FUI.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
_initterm
_assert
_XcptFilter
wcscpy_s
swprintf
_wtoi
wcsncpy_s
strncmp
swprintf_s
sqrt
vswprintf_s
??2@YAPEAX_K@Z
free
malloc
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
HeapReAlloc
GlobalFree
GlobalAlloc
HeapFree
SetLastError
GetLastError
lstrcpynW
OutputDebugStringA
OutputDebugStringW
HeapAlloc

user32

IsDlgButtonChecked
SendDlgItemMessageW
CheckDlgButton
GetDlgItem
ShowWindow
GetParent
SendMessageW
SetDlgItemTextW
GetDlgItemTextW
GetWindowLongPtrW
LoadImageW
SetWindowLongPtrW
CheckRadioButton
LoadStringW

winspool.drv

SetPrinterW
DeletePrinterKeyW
DeletePrinterConnectionW
GetPrinterDriverW
ClosePrinter
DeviceCapabilitiesW
SetPrinterDataW
OpenPrinterW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2

gdi32

GetObjectW
DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/M08FUNI.dll
.dll windows:6 windows x64 arch:x64

1b4b61ebfbda21b1d6f851c5a195dd58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\M08FUNI.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
??2@YAPEAX_K@Z
_initterm
_XcptFilter
_vsnwprintf
wcsstr
swprintf_s
free
malloc
fclose
fwrite
fputc
fopen_s
_assert
??3@YAXPEAX@Z
sqrt
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
OutputDebugStringW
GetLastError
LocalFree
LocalAlloc
OutputDebugStringA
SetLastError
GlobalAlloc

winspool.drv

GetJobW
GetPrinterW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoUninitialize
StringFromGUID2
CoCreateInstance
CoInitializeEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/M08Fmon.dll
.dll windows:6 windows x64 arch:x64

26b3e03fa7718e24fbde129988c80801

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\M08Fmon.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
malloc
free
_vsnprintf_s

kernel32

RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
GlobalAlloc
LeaveCriticalSection
GetLastError
EnterCriticalSection
GlobalFree
CreateEventW
lstrcmpiW
GetCurrentThreadId
OutputDebugStringA
CloseHandle
WaitForSingleObject
SetEvent
GetTickCount
InitializeCriticalSection
Sleep
lstrlenW
SetThreadPriority
SetLastError
GetSystemTimeAsFileTime
ResetEvent
DeleteCriticalSection
CreateThread
QueryPerformanceCounter
GetCurrentProcessId
DisableThreadLibraryCalls

user32

LoadStringW

spoolss

GetJobW
ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
SetPrinterDataW
RouterAllocBidiResponseContainer
SetPrinterW
GetPrinterW
RouterAllocBidiMem

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/P831mon.dll
.dll windows:6 windows x64 arch:x64

73dc293306e195fdff8b693813e5f474

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\P831mon.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
strstr
malloc
free
_vsnprintf_s

kernel32

SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentProcess
UnhandledExceptionFilter
SetThreadPriority
OutputDebugStringW
GlobalAlloc
LeaveCriticalSection
GetLastError
EnterCriticalSection
GlobalFree
CreateEventW
lstrcmpiW
GetCurrentThreadId
OutputDebugStringA
CloseHandle
WaitForSingleObject
SetEvent
GetTickCount
InitializeCriticalSection
Sleep
lstrlenW
GetCurrentProcessId
SetLastError
DisableThreadLibraryCalls
DeleteCriticalSection
CreateThread
QueryPerformanceCounter

user32

LoadStringW

spoolss

GetJobW
ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
RouterAllocBidiResponseContainer
RouterAllocBidiMem

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/QFXXXBUI.dll
.dll windows:6 windows x64 arch:x64

a227997dc930d94cd28dc33bc052da48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\QFXXXBUI.pdb

Imports

msvcrt

_XcptFilter
wcschr
_vsnwprintf
calloc
_wtof
sprintf
_assert
_wtoi
wcsncpy
free
malloc
_initterm
strncmp
swprintf
_amsg_exit
__C_specific_handler
vswprintf
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
MultiByteToWideChar
GetLastError
HeapReAlloc
GlobalFree
SetLastError
lstrcpynW
OutputDebugStringA
OutputDebugStringW
HeapAlloc
HeapFree
GlobalAlloc

user32

SetDlgItemTextW
IsDlgButtonChecked
EndDialog
UpdateWindow
InvalidateRect
SetRect
LoadStringW
DialogBoxParamW
ShowWindow
MessageBoxW
CreateDialogParamW
SetWindowLongPtrW
GetParent
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
LoadImageW
GetWindowLongPtrW
GetDlgItemTextW
SendMessageW

winspool.drv

DeleteFormW
AddFormW
SetFormW
GetFormW
GetPrinterDriverW
SetPrinterW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
VariantInit

advapi32

RegDeleteTreeW

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/QFXXXBUNI.dll
.dll windows:6 windows x64 arch:x64

f90ab5b697f8abc87c72f4f5bf2b3a53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\QFXXXBUNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
__C_specific_handler
swprintf
free
malloc
fclose
fwrite
_vsnwprintf
fopen_s
_assert
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
Sleep
GetLastError
GlobalAlloc
OutputDebugStringW
SetLastError
LocalAlloc
LocalFree
QueryPerformanceCounter

winspool.drv

GetJobW
GetPrinterW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/QYPORUI.dll
.dll windows:6 windows x64 arch:x64

c8585ad6b5d3da6f892b36fc79cff8bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\QYPORUI.pdb

Imports

msvcrt

_XcptFilter
wcschr
_vsnwprintf
calloc
_wtof
sprintf
_assert
_wtoi
wcsncpy
free
malloc
strncmp
_initterm
swprintf
vswprintf
_amsg_exit
__C_specific_handler
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
MultiByteToWideChar
GetLastError
HeapReAlloc
GlobalFree
GlobalAlloc
SetLastError
lstrcpynW
OutputDebugStringA
OutputDebugStringW
HeapAlloc
HeapFree

user32

CheckDlgButton
IsDlgButtonChecked
EndDialog
UpdateWindow
InvalidateRect
SetRect
SetDlgItemTextW
LoadStringW
DialogBoxParamW
ShowWindow
MessageBoxW
CreateDialogParamW
SetWindowLongPtrW
GetParent
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
LoadImageW
GetWindowLongPtrW
GetDlgItemTextW
SendMessageW

winspool.drv

SetPrinterW
AddFormW
SetFormW
GetFormW
GetPrinterDriverW
DeleteFormW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
VariantInit

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/QYPORUNI.dll
.dll windows:6 windows x64 arch:x64

fdd6d7cb0b6dd145ebedb17f40e36a8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\QYPORUNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
__C_specific_handler
swprintf
free
malloc
??2@YAPEAX_K@Z
_vsnwprintf
_assert
??3@YAXPEAX@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
Sleep
GetLastError
GlobalAlloc
SetLastError
LocalAlloc
LocalFree
OutputDebugStringW
GetTickCount

winspool.drv

GetJobW
GetPrinterW
GetPrinterDataW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/S801UI.dll
.dll windows:6 windows x64 arch:x64

3a7e45fdb4133216b5f60b195fdb899c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\S801UI.pdb

Imports

msvcrt

strstr
strchr
wcscpy_s
_XcptFilter
calloc
_amsg_exit
__C_specific_handler
sscanf
sprintf
wcsstr
sprintf_s
_initterm
_wtof
swprintf
_wtoi
wcsncpy_s
strncmp
swprintf_s
vswprintf_s
??2@YAPEAX_K@Z
free
malloc
??3@YAXPEAX@Z
_assert
memcmp

kernel32

RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
RtlCaptureContext
RtlLookupFunctionEntry
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
WideCharToMultiByte
HeapReAlloc
CreateThread
MultiByteToWideChar
GlobalFree
GlobalAlloc
HeapFree
HeapAlloc
OutputDebugStringW
OutputDebugStringA
lstrcpynW
GetLastError
SetLastError

user32

GetDlgItemTextA
SendDlgItemMessageA
EndDialog
GetWindowRect
ShowWindow
SetWindowPos
InvalidateRect
SetDlgItemTextA
SetRect
UpdateWindow
IsDlgButtonChecked
MessageBoxA
DialogBoxParamW
MessageBoxW
GetDlgItem
GetParent
CheckDlgButton
SendMessageW
EnableWindow
SetWindowLongPtrW
SendDlgItemMessageW
LoadStringW
CheckRadioButton
LoadImageW
SetDlgItemTextW
GetDlgItemTextW
GetWindowLongPtrW

winspool.drv

AddPrinterW
XcvDataW
AddFormW
SetFormW
GetPrinterDriverW
GetFormW
DeleteFormW
DeviceCapabilitiesW
ClosePrinter
SetPrinterDataW
SetPrinterW
OpenPrinterW
GetPrinterW
GetPrinterDataW

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2

gdi32

DeleteObject

wlanapi

WlanOpenHandle
WlanGetAvailableNetworkList
WlanFreeMemory
WlanCloseHandle
WlanEnumInterfaces

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/S801UNI.dll
.dll windows:6 windows x64 arch:x64

864268aad401e52ab94cb63b50b7288d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\S801UNI.pdb

Imports

msvcrt

_initterm
_XcptFilter
_vsnwprintf
swprintf_s
wcsstr
free
malloc
fclose
fwrite
fputc
fopen_s
_assert
_amsg_exit
__C_specific_handler
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memcmp

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GlobalAlloc
GetLastError
Sleep
LocalFree
LocalAlloc
SetLastError
OutputDebugStringW
GlobalFree

winspool.drv

SetJobW
GetJobW
GetPrinterDataW
GetFormW
DeviceCapabilitiesW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/S821mon.dll
.dll windows:6 windows x64 arch:x64

73fd8d212fc8e444f15db8bbb81d2765

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\amd64\S821mon.pdb

Imports

msvcrt

__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
strstr
memmove
malloc
free
_vsnprintf_s

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
OutputDebugStringW
GlobalAlloc
LeaveCriticalSection
GetLastError
EnterCriticalSection
GlobalFree
CreateEventW
lstrcmpiW
GetCurrentThreadId
OutputDebugStringA
CloseHandle
WaitForSingleObject
SetEvent
GetTickCount
InitializeCriticalSection
Sleep
lstrlenW
SetThreadPriority
SetLastError
DisableThreadLibraryCalls
ResetEvent
DeleteCriticalSection
CreateThread
GetCurrentProcessId

user32

LoadStringW

spoolss

ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
RouterAllocBidiResponseContainer
RouterAllocBidiMem
RouterFreeBidiResponseContainer
GetJobW

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/amd64/devcon.exe
.exe windows:6 windows x64 arch:x64

ce4a5cfcfb0452b87e013f07f4d59f9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

devcon.pdb

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
Sleep
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter

msvcrt

wcschr
_wcsicmp
towlower
_wcsnicmp
fputs
__iob_func
wcsrchr
fputws
?terminate@@YAXXZ
memset
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
wprintf
??2@YAPEAX_K@Z
towupper
??3@YAXPEAX@Z
iswalpha

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

ole32

CLSIDFromString

setupapi

SetupScanFileQueueW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
CM_Get_Device_ID_ExW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
SetupDiOpenClassRegKeyExW
SetupCloseInfFile
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupDiDestroyDriverInfoList
SetupOpenInfFileW
CM_Free_Res_Des_Handle
CM_Get_First_Log_Conf_Ex
SetupDiSetDeviceInstallParamsW
SetupFindFirstLineW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDescriptionExW
SetupDiClassGuidsFromNameExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

user32

CharNextW
CharPrevW
LoadStringW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/D480UI.dll
.dll windows:6 windows x86 arch:x86

b3b96c41f73d96d057e94df07f06f42f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\D480UI.pdb

Imports

msvcrt

sprintf_s
_wtof
sprintf
calloc
_ftol2_sse
wcschr
_vsnwprintf
_XcptFilter
_initterm
_amsg_exit
_except_handler4_common
_wtoi
memset
??3@YAXPAX@Z
free
malloc
??2@YAPAXI@Z
_vsnprintf
wcsncpy
strncmp
swprintf
memcpy
vswprintf
_assert

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
HeapReAlloc
GlobalAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringA
lstrcpynW
Sleep
OutputDebugStringW
GetLastError
InterlockedIncrement
InterlockedDecrement
SetLastError

user32

LoadStringW
SetWindowLongW
SetDlgItemTextW
EndDialog
SendDlgItemMessageW
LoadStringA
UpdateWindow
InvalidateRect
SetRect
GetDlgItem
EnableWindow
CheckRadioButton
CheckDlgButton
MessageBoxA
GetWindowRect
LoadImageW
IsDlgButtonChecked
DialogBoxParamW
MessageBoxW
CreateDialogParamW
SendMessageW
GetParent
GetDlgItemTextW
GetWindowLongW
SetWindowPos
ShowWindow

winspool.drv

EndDocPrinter
SetFormW
AddFormW
GetPrinterDriverW
StartDocPrinterW
WritePrinter
GetFormW
DeleteFormW
SetPrinterW
OpenPrinterW
DeviceCapabilitiesW
GetPrinterW
SetPrinterDataW
ClosePrinter
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

VariantInit
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen

gdi32

DeleteObject
GetObjectW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/D480UNI.dll
.dll windows:6 windows x86 arch:x86

86a846caab424f9e5b1c00c5ac4659aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\D480UNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
_vsnwprintf
swprintf
memset
memcpy
malloc
free
_except_handler4_common
_ftol2_sse
fopen_s
fputc
fwrite
??3@YAXPAX@Z
_assert
fclose
??2@YAPAXI@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
GetLastError
GlobalAlloc
OutputDebugStringW
LocalFree
InterlockedIncrement
InterlockedDecrement
SetLastError
OutputDebugStringA
LocalAlloc

winspool.drv

GetPrinterDataW
GetJobW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoUninitialize
StringFromGUID2
CoInitializeEx
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/D480mon.dll
.dll windows:6 windows x86 arch:x86

047cdd1c6467052dbbfa94e53410e29d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\D480mon.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
free
malloc
_vsnprintf_s
memset
memcpy

kernel32

GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
OutputDebugStringA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcmpiW
GlobalFree
CloseHandle
CreateEventW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
SetEvent
WaitForSingleObject
SetLastError
ResetEvent
CreateThread
GetTickCount
Sleep
SetThreadPriority
lstrlenW

user32

LoadStringW

spoolss

ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
GetJobW
RouterAllocBidiMem
RouterAllocBidiResponseContainer

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/E8000UI.dll
.dll windows:6 windows x86 arch:x86

1ec4b591b512f864afd83f88025bec32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\e8000\i386\E8000UI.pdb

Imports

msvcrt

_XcptFilter
_initterm
_amsg_exit
_vsnwprintf
wcschr
_ftol2_sse
calloc
_wtof
sprintf
_wtoi
wcsncpy
malloc
free
strncmp
swprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler4_common
memcpy
vswprintf
_assert

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
HeapReAlloc
GetLastError
GlobalAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringW
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetLastError
lstrcpynW

user32

IsDlgButtonChecked
SetRect
InvalidateRect
UpdateWindow
EndDialog
SetDlgItemTextW
SetWindowLongW
LoadStringW
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
LoadImageW
GetWindowLongW
GetDlgItemTextW
DialogBoxParamW
ShowWindow
MessageBoxW
CreateDialogParamW
SendMessageW
GetParent
CheckDlgButton

winspool.drv

GetFormW
SetFormW
AddFormW
GetPrinterDriverW
DeleteFormW
SetPrinterW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
VariantClear

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 618KB - Virtual size: 617KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/E8000UNI.dll
.dll windows:6 windows x86 arch:x86

d6743d4693d563fee96312c5299ad09b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\code\work\driver\qyprinter\e8000\i386\E8000UNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
_vsnwprintf
_ftol2_sse
malloc
free
_except_handler4_common
swprintf
_assert
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
GetLastError
GlobalAlloc
OutputDebugStringW
LocalFree
LocalAlloc
InterlockedIncrement
InterlockedDecrement
SetLastError

winspool.drv

GetPrinterDataW
GetJobW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/M04SUI.dll
.dll windows:6 windows x86 arch:x86

a084e521a7882485d7195c9a3d7dbe19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\M04SUI.pdb

Imports

msvcrt

_initterm
_amsg_exit
_XcptFilter
_vsnwprintf
wcschr
_ftol2_sse
calloc
_wtof
sprintf
_wtoi
wcsncpy
malloc
free
strncmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler4_common
swprintf
memcpy
vswprintf
_assert

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
HeapReAlloc
GetLastError
GlobalAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
SetLastError
lstrcpynW
OutputDebugStringA

user32

IsDlgButtonChecked
GetDlgItem
EnableWindow
SetRect
UpdateWindow
EndDialog
SetDlgItemTextW
SetWindowLongW
SendDlgItemMessageW
LoadStringW
CheckRadioButton
LoadImageW
GetWindowLongW
GetDlgItemTextW
DialogBoxParamW
MessageBoxW
SendMessageW
GetParent
InvalidateRect

winspool.drv

GetFormW
SetFormW
AddFormW
GetPrinterDriverW
DeleteFormW
SetPrinterW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
VariantClear

advapi32

RegDeleteTreeW

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/M04SUNI.dll
.dll windows:6 windows x86 arch:x86

f16623328d13b534d8881a5e3b6c535d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\code\work\driver\qyprinter\i386\M04SUNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
_vsnwprintf
swprintf
malloc
free
_except_handler4_common
_ftol2_sse
_assert
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
GetLastError
LocalFree
LocalAlloc
GlobalAlloc
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
SetLastError
OutputDebugStringA

winspool.drv

GetFormW
GetJobW
GetPrinterDataW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/M08FUI.dll
.dll windows:6 windows x86 arch:x86

bf7747a2248461b67e72da04d07b530e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\M08FUI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_except_handler4_common
_XcptFilter
wcscpy_s
_CIsqrt
_ftol2_sse
swprintf
_wtoi
wcsncpy_s
strncmp
swprintf_s
memcpy
memset
??3@YAXPAX@Z
free
malloc
??2@YAPAXI@Z
vswprintf_s
_assert

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapReAlloc
GlobalAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringW
OutputDebugStringA
lstrcpynW
GetLastError
InterlockedIncrement
InterlockedDecrement
SetLastError

user32

GetDlgItem
ShowWindow
CheckDlgButton
IsDlgButtonChecked
SetWindowLongW
SendDlgItemMessageW
LoadStringW
CheckRadioButton
LoadImageW
GetWindowLongW
GetDlgItemTextW
SetDlgItemTextW
GetParent
SendMessageW

winspool.drv

DeletePrinterKeyW
GetPrinterDriverW
ClosePrinter
DeviceCapabilitiesW
GetPrinterDataW
GetPrinterW
OpenPrinterW
SetPrinterW
SetPrinterDataW
DeletePrinterConnectionW

ole32

StringFromGUID2

gdi32

DeleteObject
GetObjectW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/M08FUNI.dll
.dll windows:6 windows x86 arch:x86

8fc023299a50154ff2ad82697a218806

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\M08FUNI.pdb

Imports

msvcrt

_amsg_exit
??2@YAPAXI@Z
_initterm
_XcptFilter
_vsnwprintf
wcsstr
_CIsqrt
swprintf_s
memset
memcpy
malloc
free
fopen_s
fputc
fwrite
fclose
_except_handler4_common
_ftol2_sse
_assert
??3@YAXPAX@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
GlobalAlloc
OutputDebugStringW
GetLastError
LocalFree
LocalAlloc
SetLastError
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA

winspool.drv

GetJobW
GetPrinterDataW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/M08Fmon.dll
.dll windows:6 windows x86 arch:x86

0b5277c42b6cfd2a9c60fce05c3c3a7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\M08Fmon.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
free
malloc
_vsnprintf_s
memset
memcpy

kernel32

GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
OutputDebugStringA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcmpiW
GlobalFree
CloseHandle
CreateEventW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
SetEvent
WaitForSingleObject
SetLastError
lstrlenW
SetThreadPriority
ResetEvent
Sleep
CreateThread
GetTickCount

user32

LoadStringW

spoolss

ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
GetJobW
SetPrinterW
GetPrinterW
SetPrinterDataW
RouterAllocBidiMem
RouterAllocBidiResponseContainer

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/P831mon.dll
.dll windows:6 windows x86 arch:x86

67d9c1201e5ff3c33073931241b9fd1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\P831mon.pdb

Imports

msvcrt

_amsg_exit
_except_handler4_common
_initterm
_XcptFilter
strstr
free
malloc
_vsnprintf_s
memset
memcpy

kernel32

GetCurrentProcessId
InterlockedExchange
CreateThread
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
InterlockedCompareExchange
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
OutputDebugStringA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcmpiW
GlobalFree
CloseHandle
CreateEventW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
SetEvent
WaitForSingleObject
SetThreadPriority
Sleep
lstrlenW
GetTickCount
UnhandledExceptionFilter

user32

LoadStringW

spoolss

ClosePrinter
SetJobW
SplPromptUIInUsersSession
OpenPrinterW
GetJobW
RouterAllocBidiMem
RouterAllocBidiResponseContainer

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/QFXXXBUI.dll
.dll windows:6 windows x86 arch:x86

4743ca3c8f405fe95a2777c6ae02270a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\QFXXXBUI.pdb

Imports

msvcrt

_initterm
_amsg_exit
_XcptFilter
_vsnwprintf
wcschr
_ftol2_sse
calloc
_wtof
sprintf
_wtoi
wcsncpy
malloc
free
strncmp
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler4_common
swprintf
memcpy
vswprintf
_assert

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
HeapReAlloc
GetLastError
GlobalAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
SetLastError
lstrcpynW
OutputDebugStringA

user32

IsDlgButtonChecked
SetRect
InvalidateRect
UpdateWindow
EndDialog
SetWindowLongW
LoadStringW
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
LoadImageW
GetWindowLongW
GetDlgItemTextW
DialogBoxParamW
ShowWindow
MessageBoxW
CreateDialogParamW
SendMessageW
GetParent
SetDlgItemTextW

winspool.drv

GetFormW
SetFormW
AddFormW
GetPrinterDriverW
DeleteFormW
SetPrinterW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
VariantClear

advapi32

RegDeleteTreeW

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 606KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/QFXXXBUNI.dll
.dll windows:6 windows x86 arch:x86

832af38b5bcdf6768745a250b7f49d97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\QFXXXBUNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
_vsnwprintf
swprintf
malloc
free
_except_handler4_common
_ftol2_sse
_assert
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
GetLastError
LocalFree
LocalAlloc
GlobalAlloc
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
SetLastError
OutputDebugStringA

winspool.drv

GetPrinterDataW
GetJobW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoUninitialize
StringFromGUID2
CoInitializeEx
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/QYPORUI.dll
.dll windows:6 windows x86 arch:x86

1ec4b591b512f864afd83f88025bec32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\QYPORUI.pdb

Imports

msvcrt

_XcptFilter
_initterm
_amsg_exit
_vsnwprintf
wcschr
_ftol2_sse
calloc
_wtof
sprintf
_wtoi
wcsncpy
malloc
free
strncmp
swprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler4_common
memcpy
vswprintf
_assert

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
HeapReAlloc
GetLastError
GlobalAlloc
GlobalFree
HeapFree
HeapAlloc
OutputDebugStringW
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetLastError
lstrcpynW

user32

IsDlgButtonChecked
SetRect
InvalidateRect
UpdateWindow
EndDialog
SetDlgItemTextW
SetWindowLongW
LoadStringW
SendDlgItemMessageW
GetDlgItem
EnableWindow
CheckRadioButton
LoadImageW
GetWindowLongW
GetDlgItemTextW
DialogBoxParamW
ShowWindow
MessageBoxW
CreateDialogParamW
SendMessageW
GetParent
CheckDlgButton

winspool.drv

GetFormW
SetFormW
AddFormW
GetPrinterDriverW
DeleteFormW
SetPrinterW
ClosePrinter
OpenPrinterW
DeviceCapabilitiesW
SetPrinterDataW
GetPrinterW
GetPrinterDataW

ole32

StringFromGUID2
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
VariantClear

gdi32

DeleteObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/QYPORUNI.dll
.dll windows:6 windows x86 arch:x86

c873d8cfa38438407502e58db69cca93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\QYPORUNI.pdb

Imports

msvcrt

_amsg_exit
_initterm
_XcptFilter
_vsnwprintf
_ftol2_sse
memset
memcpy
malloc
free
_except_handler4_common
swprintf
??3@YAXPAX@Z
_assert
??2@YAPAXI@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
GetLastError
GlobalAlloc
OutputDebugStringW
LocalFree
InterlockedIncrement
InterlockedDecrement
SetLastError
LocalAlloc

winspool.drv

GetPrinterDataW
GetJobW
GetPrinterW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoTaskMemFree
CoUninitialize
StringFromGUID2
CoInitializeEx
CoCreateInstance

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/S801UI.dll
.dll windows:6 windows x86 arch:x86

05dc66ffc91e4d188c693390119f0609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\S801UI.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
wcscpy_s
strstr
strchr
_ftol2_sse
calloc
_wtof
memset
??3@YAXPAX@Z
free
malloc
_assert
??2@YAPAXI@Z
sprintf_s
wcsstr
sprintf
sscanf
swprintf
_wtoi
wcsncpy_s
strncmp
swprintf_s
memcpy
vswprintf_s

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GlobalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
Sleep
WideCharToMultiByte
HeapReAlloc
CreateThread
MultiByteToWideChar
GlobalAlloc
HeapFree
HeapAlloc
OutputDebugStringW
OutputDebugStringA
lstrcpynW
GetLastError
SetLastError
InterlockedDecrement
InterlockedIncrement

user32

DialogBoxParamW
MessageBoxW
EnableWindow
GetDlgItem
SetDlgItemTextW
SetWindowLongW
SendDlgItemMessageA
GetDlgItemTextA
InvalidateRect
SetDlgItemTextA
CheckDlgButton
SendDlgItemMessageW
LoadStringW
LoadImageW
EndDialog
MessageBoxA
SetWindowPos
ShowWindow
GetWindowRect
UpdateWindow
SetRect
CheckRadioButton
SendMessageW
GetParent
GetWindowLongW
GetDlgItemTextW
IsDlgButtonChecked

winspool.drv

SetPrinterDataW
SetPrinterW
OpenPrinterW
GetPrinterW
GetPrinterDataW
ClosePrinter
DeviceCapabilitiesW
DeleteFormW
GetFormW
GetPrinterDriverW
AddFormW
SetFormW
XcvDataW
AddPrinterW

ole32

CoCreateInstance
CoTaskMemFree
CoUninitialize
StringFromGUID2
CoInitializeEx

gdi32

DeleteObject

wlanapi

WlanFreeMemory
WlanGetAvailableNetworkList
WlanEnumInterfaces
WlanOpenHandle
WlanCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/S801UNI.dll
.dll windows:6 windows x86 arch:x86

94d6d158578efa6e1f05fb737cf3b4a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\S801UNI.pdb

Imports

msvcrt

memcpy
_XcptFilter
_vsnwprintf
swprintf_s
_ftol2_sse
wcsstr
_initterm
free
fopen_s
fputc
fwrite
fclose
_assert
??3@YAXPAX@Z
??2@YAPAXI@Z
_amsg_exit
malloc
memset
_except_handler4_common

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GlobalFree
GlobalAlloc
GetLastError
Sleep
LocalAlloc
SetLastError
OutputDebugStringW
InterlockedDecrement
InterlockedIncrement
LocalFree

winspool.drv

SetJobW
GetJobW
GetPrinterDataW
GetPrinterW
DeviceCapabilitiesW
GetFormW

gdi32

GetPaletteEntries
EngCreatePalette

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/S821mon.dll
.dll windows:6 windows x86 arch:x86

76127ecb558ed5e169f97e55251d6d8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\work\driver\qyprinter\i386\S821mon.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
strstr
memmove
wcscpy_s
free
malloc
_vsnprintf_s
memset
memcpy

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
InterlockedCompareExchange
InterlockedExchange
SetThreadPriority
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
OutputDebugStringA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcmpiW
GlobalFree
CloseHandle
CreateEventW
GlobalAlloc
OutputDebugStringW
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
SetEvent
WaitForSingleObject
SetLastError
Sleep
lstrlenW
GetTickCount
CreateThread

user32

LoadStringW

spoolss

SetJobW
SplPromptUIInUsersSession
OpenPrinterW
GetJobW
RouterFreeBidiResponseContainer
RouterAllocBidiMem
RouterAllocBidiResponseContainer
ClosePrinter

Exports

Exports

InitializePrintMonitor2

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/i386/devcon.exe
.exe windows:6 windows x86 arch:x86

06694565e94cd10f48e1e4b90bc04bc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

devcon.pdb

Imports

advapi32

InitiateSystemShutdownExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW

kernel32

LocalFree
FormatMessageW
CloseHandle
GetCurrentProcess
GetLastError
lstrlenW
GetDateFormatW
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetFullPathNameW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

fputws
fputs
__iob_func
??3@YAXPAX@Z
memset
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
wprintf
wcsrchr
_wcsicmp
_wcsnicmp
iswalpha
towupper
towlower
wcschr
??2@YAPAXI@Z

ntdll

RtlUnwind

ole32

CLSIDFromString

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiBuildClassInfoListExW
SetupDiClassNameFromGuidExW
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Disconnect_Machine
SetupDiSetClassInstallParamsW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetStringFieldW
SetupDiGetClassDescriptionExW
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
SetupDiGetDriverInstallParamsW
SetupDiSetSelectedDriverW
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupScanFileQueueW
SetupCloseFileQueue
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupDiDestroyDriverInfoList
CM_Get_First_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Get_Next_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Ex
CM_Get_DevNode_Status_Ex
SetupDiClassGuidsFromNameExW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW

user32

LoadStringW
CharNextW
CharPrevW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-qy/ia64/D480UI.dll
Driver-qy/ia64/D480UNI.dll
Driver-qy/ia64/D480mon.dll
Driver-qy/ia64/E8000UI.dll
Driver-qy/ia64/E8000UNI.dll
Driver-qy/ia64/M04SUI.dll
Driver-qy/ia64/M04SUNI.dll
Driver-qy/ia64/M08FUI.dll
Driver-qy/ia64/M08FUNI.dll
Driver-qy/ia64/M08Fmon.dll
Driver-qy/ia64/P831mon.dll
Driver-qy/ia64/QFXXXBUI.dll
Driver-qy/ia64/QFXXXBUNI.dll
Driver-qy/ia64/QYPORUI.dll
Driver-qy/ia64/QYPORUNI.dll
Driver-qy/ia64/S801UI.dll
Driver-qy/ia64/S801UNI.dll
Driver-qy/ia64/S821mon.dll
Driver-qy/ia64/devcon.exe
Driver-qy/quyin.cat
Driver-qy/s801.gpd
Driver-tool/amd64/devcon.exe
.exe windows:6 windows x64 arch:x64

ce4a5cfcfb0452b87e013f07f4d59f9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

devcon.pdb

Imports

advapi32

OpenProcessToken
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegSetValueExW

kernel32

GetCurrentProcess
FormatMessageW
lstrlenW
GetLastError
CloseHandle
LocalFree
GetDateFormatW
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetFullPathNameW
FindFirstFileW
GetFileAttributesW
FindClose
FindNextFileW
GetWindowsDirectoryW
Sleep
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter

msvcrt

wcschr
_wcsicmp
towlower
_wcsnicmp
fputs
__iob_func
wcsrchr
fputws
?terminate@@YAXXZ
memset
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
wprintf
??2@YAPEAX_K@Z
towupper
??3@YAXPEAX@Z
iswalpha

ntdll

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

ole32

CLSIDFromString

setupapi

SetupScanFileQueueW
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidExW
CM_Reenumerate_DevNode_Ex
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetINFClassW
CM_Disconnect_Machine
SetupDiBuildClassInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Get_DevNode_Status_Ex
SetupDiBuildDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverW
SetupGetStringFieldW
CM_Get_Res_Des_Data_Size_Ex
SetupDiEnumDriverInfoW
CM_Free_Log_Conf_Handle
CM_Get_Device_ID_ExW
CM_Get_Next_Res_Des_Ex
SetupCloseFileQueue
SetupDiGetDriverInstallParamsW
CM_Get_Res_Des_Data_Ex
SetupDiOpenClassRegKeyExW
SetupCloseInfFile
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupDiDestroyDriverInfoList
SetupOpenInfFileW
CM_Free_Res_Des_Handle
CM_Get_First_Log_Conf_Ex
SetupDiSetDeviceInstallParamsW
SetupFindFirstLineW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDescriptionExW
SetupDiClassGuidsFromNameExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

user32

CharNextW
CharPrevW
LoadStringW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-tool/i386/devcon.exe
.exe windows:6 windows x86 arch:x86

06694565e94cd10f48e1e4b90bc04bc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

devcon.pdb

Imports

advapi32

InitiateSystemShutdownExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW

kernel32

LocalFree
FormatMessageW
CloseHandle
GetCurrentProcess
GetLastError
lstrlenW
GetDateFormatW
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetFullPathNameW
FindClose
FindNextFileW
FindFirstFileW
GetWindowsDirectoryW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

fputws
fputs
__iob_func
??3@YAXPAX@Z
memset
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
wprintf
wcsrchr
_wcsicmp
_wcsnicmp
iswalpha
towupper
towlower
wcschr
??2@YAPAXI@Z

ntdll

RtlUnwind

ole32

CLSIDFromString

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiBuildClassInfoListExW
SetupDiClassNameFromGuidExW
SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyW
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Disconnect_Machine
SetupDiSetClassInstallParamsW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetStringFieldW
SetupDiGetClassDescriptionExW
SetupCloseInfFile
SetupDiOpenClassRegKeyExW
SetupDiGetDriverInstallParamsW
SetupDiSetSelectedDriverW
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupScanFileQueueW
SetupCloseFileQueue
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupDiDestroyDriverInfoList
CM_Get_First_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Get_Next_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Ex
CM_Get_DevNode_Status_Ex
SetupDiClassGuidsFromNameExW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW

user32

LoadStringW
CharNextW
CharPrevW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Driver-tool/ia64/devcon.exe
DriverInstall.bat
DriverUninstall.bat
DriverUninstall.data
$TEMP/Windows6.1-KB2999226-x64.msu
.cab
WSUSSCAN.cab
.cab
package.cab
.cab
core/1
core/10
core/105
core/1068
core/1069
core/1070
core/1071
core/1076
core/1077
core/1078
core/1079
core/1080
core/1081
core/1082
core/1083
core/1085
core/1086
core/1088
core/1093
core/1094
core/1095
core/1096
core/1098
core/1099
core/11
core/1100
core/1101
core/1102
core/1103
core/1104
core/1105
core/1106
core/1107
core/1108
core/1109
core/111
core/1110
core/1111
core/1112
core/1113
core/1117
core/1122
core/1124
core/1131
core/1136
core/1142
core/1143
core/1144
core/1146
core/1147
core/1149
core/115
core/1150
core/1152
core/1153
core/1154
core/1155
core/1156
core/1157
core/1158
core/1159
core/116
core/1160
core/1161
core/1162
core/1163
core/1164
core/1165
core/1166
core/117
core/1174
core/1175
core/118
core/119
core/12
core/120
core/1203
core/121
core/122
core/1227
core/123
core/1231
core/1233
core/1236
core/124
core/1240
core/1246
core/125
core/126
core/1270
core/1271
core/1272
core/1274
core/1276
core/1279
core/13
core/1307
core/1308
core/1337
core/1338
core/1346
core/14
core/15
core/16
core/1653
core/1654
core/1655
core/1656
core/1657
core/1658
core/1659
core/1660
core/1661
core/1662
core/1663
core/1664
core/1665
core/1666
core/1668
core/1669
core/1670
core/1671
core/1672
core/1678
core/1679
core/1682
core/1683
core/1684
core/1685
core/1686
core/1687
core/1688
core/1689
core/1690
core/1691
core/1692
core/1693
core/1694
core/1695
core/1696
core/1697
core/1698
core/1699
core/17
core/1700
core/1701
core/1703
core/1711
core/1717
core/1718
core/1723
core/1724
core/1725
core/1726
core/1727
core/1728
core/1730
core/1731
core/1732
core/1733
core/1734
core/1735
core/1736
core/1737
core/1738
core/1739
core/1740
core/1741
core/1742
core/1743
core/1744
core/1745
core/1746
core/1747
core/1748
core/1749
core/1750
core/1751
core/1753
core/1759
core/1771
core/1774
core/1781
core/1790
core/18
core/1805
core/1817
core/1822
core/1823
core/1824
core/1825
core/1829
core/1831
core/1843
core/1859
core/1860
core/1861
core/1864
core/1866
core/1869
core/1884
core/1885
core/1890
core/1891
core/19
core/1910
core/1911
core/1913
core/1928
core/1935
core/1952
core/1953
core/1956
core/1957
core/1958
core/1982
core/2
core/20
core/2008
core/21
core/22
core/2222
core/2223
core/2224
core/2225
core/2226
core/2227
core/2228
core/2229
core/2230
core/2231
core/2232
core/2233
core/2234
core/2235
core/2236
core/2237
core/2238
core/2239
core/2240
core/2241
core/2242
core/2243
core/2244
core/2245
core/2246
core/2247
core/2248
core/2249
core/2250
core/2251
core/2252
core/2253
core/2254
core/2255
core/2256
core/2257
core/2258
core/2259
core/2260
core/2261
core/2262
core/2263
core/2264
core/2265
core/2266
core/2267
core/2268
core/2269
core/2272
core/2273
core/2274
core/2275
core/2284
core/2285
core/2287
core/2288
core/2289
core/2290
core/2291
core/2292
core/2293
core/2294
core/2295
core/2296
core/2297
core/2298
core/2299
core/23
core/2300
core/2301
core/2302
core/2303
core/2304
core/2305
core/2306
core/2307
core/2308
core/2309
core/2310
core/2311
core/2312
core/2313
core/2314
core/2315
core/2316
core/2317
core/2318
core/2320
core/2321
core/2324
core/2325
core/2340
core/2341
core/2342
core/2345
core/2346
core/2347
core/2348
core/2349
core/2350
core/2360
core/2361
core/2364
core/2365
core/2366
core/2367
core/2369
core/2371
core/2373
core/2382
core/2383
core/2384
core/2386
core/2389
core/2390
core/2392
core/2393
core/2394
core/2396
core/2397
core/2398
core/24
core/2404
core/2406
core/2407
core/2408
core/2409
core/2410
core/2411
core/2413
core/2414
core/2415
core/2416
core/2417
core/2418
core/2419
core/2420
core/2425
core/2426
core/2427
core/2428
core/2429
core/2430
core/2431
core/2432
core/2441
core/2442
core/2443
core/2444
core/2445
core/2446
core/2447
core/2448
core/2449
core/2457
core/2470
core/2477
core/2481
core/2482
core/25
core/254
core/255
core/256
core/257
core/258
core/2597
core/2598
core/2599
core/26
core/2600
core/2601
core/2602
core/2603
core/2604
core/2605
core/2606
core/2607
core/2608
core/2609
core/2610
core/2611
core/2612
core/2613
core/2614
core/2615
core/2616
core/2617
core/2618
core/2619
core/262
core/2620
core/2621
core/2622
core/2623
core/2624
core/2625
core/2626
core/2627
core/2628
core/2629
core/263
core/2630
core/2631
core/2632
core/2633
core/2634
core/2635
core/2636
core/2637
core/2638
core/2639
core/264
core/2640
core/2641
core/2642
core/2643
core/2644
core/2645
core/2648
core/2649
core/265
core/2650
core/2651
core/2652
core/2653
core/2654
core/2655
core/2656
core/2657
core/2658
core/2659
core/266
core/2660
core/2661
core/2662
core/2663
core/2664
core/2665
core/2667
core/2669
core/267
core/2670
core/2671
core/2672
core/2673
core/2674
core/2675
core/2676
core/2677
core/2678
core/2679
core/268
core/2680
core/2681
core/2682
core/2683
core/2684
core/2685
core/2686
core/2687
core/2689
core/269
core/2690
core/2691
core/2692
core/2693
core/2694
core/2695
core/2696
core/2697
core/2698
core/2699
core/27
core/2700
core/2705
core/2706
core/2707
core/2708
core/2709
core/2710
core/2714
core/2715
core/2716
core/2718
core/2721
core/2723
core/2724
core/2725
core/2727
core/2728
core/2729
core/2730
core/2735
core/2736
core/2737
core/274
core/2740
core/2741
core/2743
core/2747
core/2748
core/275
core/2755
core/2756
core/2758
core/2759
core/2762
core/2763
core/2766
core/28
core/2805
core/2806
core/2807
core/2808
core/2809
core/2810
core/2811
core/2812
core/2813
core/2814
core/2815
core/2816
core/2817
core/2818
core/2819
core/2820
core/2821
core/2822
core/2823
core/2824
core/2825
core/2826
core/2827
core/2828
core/2829
core/2830
core/2831
core/2832
core/2833
core/2834
core/2835
core/2837
core/2838
core/2839
core/2840
core/2841
core/2842
core/2843
core/2844
core/2845
core/2846
core/2847
core/2848
core/2849
core/2850
core/2851
core/2852
core/2853
core/2854
core/2855
core/2856
core/2857
core/2858
core/2859
core/286
core/287
core/288
core/289
core/290
core/291
core/292
core/293
core/294
core/295
core/296
core/297
core/298
core/299
core/3
core/300
core/301
core/302
core/303
core/304
core/305
core/306
core/309
core/310
core/324
core/327
core/330
core/331
core/333
core/334
core/335
core/336
core/337
core/338
core/339
core/34
core/340
core/341
core/342
core/343
core/344
core/345
core/346
core/347
core/349
core/35
core/350
core/351
core/352
core/358
core/36
core/361
core/37
core/384
core/385
core/386
core/387
core/4
core/406
core/408
core/41
core/43
core/44
core/46
core/47
core/5
core/6
core/644
core/645
core/646
core/647
core/649
core/65
core/651
core/652
core/653
core/66
core/660
core/661
core/662
core/663
core/664
core/665
core/666
core/669
core/67
core/673
core/674
core/675
core/676
core/677
core/678
core/679
core/68
core/680
core/681
core/682
core/683
core/684
core/685
core/686
core/687
core/688
core/69
core/690
core/692
core/693
core/696
core/697
core/7
core/70
core/701
core/702
core/704
core/705
core/71
core/716
core/717
core/718
core/719
core/72
core/720
core/721
core/724
core/725
core/726
core/727
core/728
core/729
core/73
core/730
core/731
core/732
core/733
core/734
core/735
core/737
core/739
core/740
core/741
core/743
core/754
core/755
core/756
core/757
core/758
core/759
core/760
core/761
core/762
core/763
core/764
core/765
core/766
core/767
core/768
core/771
core/781
core/782
core/790
core/797
core/798
core/799
core/8
core/800
core/812
core/813
core/814
core/815
core/816
core/82
core/829
core/830
core/831
core/832
core/833
core/89
core/9
core/90
core/92
extended/1
extended/10
extended/105
extended/1068
extended/1069
extended/1070
extended/1071
extended/1076
extended/1077
extended/1078
extended/1079
extended/1080
extended/1081
extended/1082
extended/1083
extended/1085
extended/1086
extended/1088
extended/1093
extended/1094
extended/1095
extended/1096
extended/1098
extended/1099
extended/11
extended/1100
extended/1101
extended/1102
extended/1103
extended/1104
extended/1105
extended/1106
extended/1107
extended/1108
extended/1109
extended/111
extended/1110
extended/1111
extended/1112
extended/1113
extended/1117
extended/1122
extended/1124
extended/1131
extended/1136
extended/1142
extended/1143
extended/1144
extended/1146
extended/1147
extended/1149
extended/115
extended/1150
extended/1152
extended/1153
extended/1154
extended/1155
extended/1156
extended/1157
extended/1158
extended/1159
extended/116
extended/1160
extended/1161
extended/1162
extended/1163
extended/1164
extended/1165
extended/1166
extended/117
extended/1174
extended/1175
extended/118
extended/119
extended/12
extended/120
extended/1203
extended/121
extended/122
extended/1227
extended/123
extended/1231
extended/1233
extended/1236
extended/124
extended/1240
extended/1246
extended/125
extended/126
extended/1270
extended/1271
extended/1272
extended/1274
extended/1276
extended/1279
extended/13
extended/1307
extended/1308
extended/1337
extended/1338
extended/1346
extended/14
extended/15
extended/16
extended/1653
extended/1654
extended/1655
extended/1656
extended/1657
extended/1658
extended/1659
extended/1660
extended/1661
extended/1662
extended/1663
extended/1664
extended/1665
extended/1666
extended/1668
extended/1669
extended/1670
extended/1671
extended/1672
extended/1678
extended/1679
extended/1682
extended/1683
extended/1684
extended/1685
extended/1686
extended/1687
extended/1688
extended/1689
extended/1690
extended/1691
extended/1692
extended/1693
extended/1694
extended/1695
extended/1696
extended/1697
extended/1698
extended/1699
extended/17
extended/1700
extended/1701
extended/1703
extended/1711
extended/1717
extended/1718
extended/1723
extended/1724
extended/1725
extended/1726
extended/1727
extended/1728
extended/1730
extended/1731
extended/1732
extended/1733
extended/1734
extended/1735
extended/1736
extended/1737
extended/1738
extended/1739
extended/1740
extended/1741
extended/1742
extended/1743
extended/1744
extended/1745
extended/1746
extended/1747
extended/1748
extended/1749
extended/1750
extended/1751
extended/1753
extended/1759
extended/1771
extended/1774
extended/1781
extended/1790
extended/18
extended/1805
extended/1817
extended/1822
extended/1823
extended/1824
extended/1825
extended/1829
extended/1831
extended/1843
extended/1859
extended/1860
extended/1861
extended/1864
extended/1866
extended/1869
extended/1884
extended/1885
extended/1890
extended/1891
extended/19
extended/1910
extended/1911
extended/1913
extended/1928
extended/1935
extended/1952
extended/1953
extended/1956
extended/1957
extended/1958
extended/1982
extended/2
extended/20
extended/2008
extended/21
extended/22
extended/2222
extended/2223
extended/2224
extended/2225
extended/2226
extended/2227
extended/2228
extended/2229
extended/2230
extended/2231
extended/2232
extended/2233
extended/2234
extended/2235
extended/2236
extended/2237
extended/2238
extended/2239
extended/2240
extended/2241
extended/2242
extended/2243
extended/2244
extended/2245
extended/2246
extended/2247
extended/2248
extended/2249
extended/2250
extended/2251
extended/2252
extended/2253
extended/2254
extended/2255
extended/2256
extended/2257
extended/2258
extended/2259
extended/2260
extended/2261
extended/2262
extended/2263
extended/2264
extended/2265
extended/2266
extended/2267
extended/2268
extended/2269
extended/2272
extended/2273
extended/2274
extended/2275
extended/2284
extended/2285
extended/2287
extended/2288
extended/2289
extended/2290
extended/2291
extended/2292
extended/2293
extended/2294
extended/2295
extended/2296
extended/2297
extended/2298
extended/2299
extended/23
extended/2300
extended/2301
extended/2302
extended/2303
extended/2304
extended/2305
extended/2306
extended/2307
extended/2308
extended/2309
extended/2310
extended/2311
extended/2312
extended/2313
extended/2314
extended/2315
extended/2316
extended/2317
extended/2318
extended/2320
extended/2321
extended/2324
extended/2325
extended/2340
extended/2341
extended/2342
extended/2345
extended/2346
extended/2347
extended/2348
extended/2349
extended/2350
extended/2360
extended/2361
extended/2364
extended/2365
extended/2366
extended/2367
extended/2369
extended/2371
extended/2373
extended/2382
extended/2383
extended/2384
extended/2386
extended/2389
extended/2390
extended/2392
extended/2393
extended/2394
extended/2396
extended/2397
extended/2398
extended/24
extended/2404
extended/2406
extended/2407
extended/2408
extended/2409
extended/2410
extended/2411
extended/2413
extended/2414
extended/2415
extended/2416
extended/2417
extended/2418
extended/2419
extended/2420
extended/2425
extended/2426
extended/2427
extended/2428
extended/2429
extended/2430
extended/2431
extended/2432
extended/2441
extended/2442
extended/2443
extended/2444
extended/2445
extended/2446
extended/2447
extended/2448
extended/2449
extended/2457
extended/2470
extended/2477
extended/2481
extended/2482
extended/25
extended/254
extended/255
extended/256
extended/257
extended/258
extended/2597
extended/2598
extended/2599
extended/26
extended/2600
extended/2601
extended/2602
extended/2603
extended/2604
extended/2605
extended/2606
extended/2607
extended/2608
extended/2609
extended/2610
extended/2611
extended/2612
extended/2613
extended/2614
extended/2615
extended/2616
extended/2617
extended/2618
extended/2619
extended/262
extended/2620
extended/2621
extended/2622
extended/2623
extended/2624
extended/2625
extended/2626
extended/2627
extended/2628
extended/2629
extended/263
extended/2630
extended/2631
extended/2632
extended/2633
extended/2634
extended/2635
extended/2636
extended/2637
extended/2638
extended/2639
extended/264
extended/2640
extended/2641
extended/2642
extended/2643
extended/2644
extended/2645
extended/2648
extended/2649
extended/265
extended/2650
extended/2651
extended/2652
extended/2653
extended/2654
extended/2655
extended/2656
extended/2657
extended/2658
extended/2659
extended/266
extended/2660
extended/2661
extended/2662
extended/2663
extended/2664
extended/2665
extended/2667
extended/2669
extended/267
extended/2670
extended/2671
extended/2672
extended/2673
extended/2674
extended/2675
extended/2676
extended/2677
extended/2678
extended/2679
extended/268
extended/2680
extended/2681
extended/2682
extended/2683
extended/2684
extended/2685
extended/2686
extended/2687
extended/2689
extended/269
extended/2690
extended/2691
extended/2692
extended/2693
extended/2694
extended/2695
extended/2696
extended/2697
extended/2698
extended/2699
extended/27
extended/2700
extended/2705
extended/2706
extended/2707
extended/2708
extended/2709
extended/2710
extended/2714
extended/2715
extended/2716
extended/2718
extended/2721
extended/2723
extended/2724
extended/2725
extended/2727
extended/2728
extended/2729
extended/2730
extended/2735
extended/2736
extended/2737
extended/274
extended/2740
extended/2741
extended/2743
extended/2747
extended/2748
extended/275
extended/2755
extended/2756
extended/2758
extended/2759
extended/2762
extended/2763
extended/2766
extended/28
extended/2805
extended/2806
extended/2807
extended/2808
extended/2809
extended/2810
extended/2811
extended/2812
extended/2813
extended/2814
extended/2815
extended/2816
extended/2817
extended/2818
extended/2819
extended/2820
extended/2821
extended/2822
extended/2823
extended/2824
extended/2825
extended/2826
extended/2827
extended/2828
extended/2829
extended/2830
extended/2831
extended/2832
extended/2833
extended/2834
extended/2835
extended/2837
extended/2838
extended/2839
extended/2840
extended/2841
extended/2842
extended/2843
extended/2844
extended/2845
extended/2846
extended/2847
extended/2848
extended/2849
extended/2850
extended/2851
extended/2852
extended/2853
extended/2854
extended/2855
extended/2856
extended/2857
extended/2858
extended/2859
extended/286
extended/287
extended/288
extended/289
extended/290
extended/291
extended/292
extended/293
extended/294
extended/295
extended/296
extended/297
extended/298
extended/299
extended/3
extended/300
extended/301
extended/302
extended/303
extended/304
extended/305
extended/306
extended/309
extended/310
extended/324
extended/327
extended/330
extended/331
extended/333
extended/334
extended/335
extended/336
extended/337
extended/338
extended/339
extended/34
extended/340
extended/341
extended/342
extended/343
extended/344
extended/345
extended/346
extended/347
extended/349
extended/35
extended/350
extended/351
extended/352
extended/358
extended/36
extended/361
extended/37
extended/384
extended/385
extended/386
extended/387
extended/4
extended/406
extended/408
extended/41
extended/43
extended/44
extended/46
extended/47
extended/5
extended/6
extended/644
extended/645
extended/646
extended/647
extended/649
extended/65
extended/651
extended/652
extended/653
extended/66
extended/660
extended/661
extended/662
extended/663
extended/664
extended/665
extended/666
extended/669
extended/67
extended/673
extended/674
extended/675
extended/676
extended/677
extended/678
extended/679
extended/68
extended/680
extended/681
extended/682
extended/683
extended/684
extended/685
extended/686
extended/687
extended/688
extended/69
extended/690
extended/692
extended/693
extended/696
extended/697
extended/7
extended/70
extended/701
extended/702
extended/704
extended/705
extended/71
extended/716
extended/717
extended/718
extended/719
extended/72
extended/720
extended/721
extended/724
extended/725
extended/726
extended/727
extended/728
extended/729
extended/73
extended/730
extended/731
extended/732
extended/733
extended/734
extended/735
extended/737
extended/739
extended/740
extended/741
extended/743
extended/754
extended/755
extended/756
extended/757
extended/758
extended/759
extended/760
extended/761
extended/762
extended/763
extended/764
extended/765
extended/766
extended/767
extended/768
extended/771
extended/781
extended/782
extended/790
extended/797
extended/798
extended/799
extended/8
extended/800
extended/812
extended/813
extended/814
extended/815
extended/816
extended/82
extended/829
extended/830
extended/831
extended/832
extended/833
extended/89
extended/9
extended/90
extended/92
localized/ar/1
localized/ar/10
localized/ar/1068
localized/ar/1069
localized/ar/1070
localized/ar/1071
localized/ar/1076
localized/ar/1077
localized/ar/1078
localized/ar/1080
localized/ar/1093
localized/ar/11
localized/ar/12
localized/ar/13
localized/ar/14
localized/ar/1653
localized/ar/1654
localized/ar/1655
localized/ar/1656
localized/ar/1657
localized/ar/1658
localized/ar/1659
localized/ar/1669
localized/ar/1728
localized/ar/1753
localized/ar/1805
localized/ar/19
localized/ar/2
localized/ar/2222
localized/ar/2223
localized/ar/2224
localized/ar/2225
localized/ar/2226
localized/ar/2227
localized/ar/2228
localized/ar/2229
localized/ar/2230
localized/ar/2231
localized/ar/2232
localized/ar/2266
localized/ar/2291
localized/ar/2292
localized/ar/23
localized/ar/2324
localized/ar/2382
localized/ar/2383
localized/ar/2384
localized/ar/24
localized/ar/254
localized/ar/255
localized/ar/256
localized/ar/257
localized/ar/258
localized/ar/2597
localized/ar/2598
localized/ar/2599
localized/ar/26
localized/ar/2600
localized/ar/2601
localized/ar/2602
localized/ar/2603
localized/ar/2604
localized/ar/2605
localized/ar/2606
localized/ar/2607
localized/ar/2608
localized/ar/2609
localized/ar/2610
localized/ar/2611
localized/ar/2619
localized/ar/262
localized/ar/2620
localized/ar/264
localized/ar/2673
localized/ar/2697
localized/ar/2698
localized/ar/27
localized/ar/2705
localized/ar/2715
localized/ar/2724
localized/ar/28
localized/ar/2805
localized/ar/2806
localized/ar/2807
localized/ar/2808
localized/ar/2810
localized/ar/2812
localized/ar/2859
localized/ar/3
localized/ar/330
localized/ar/34
localized/ar/35
localized/ar/358
localized/ar/36
localized/ar/361
localized/ar/4
localized/ar/408
localized/ar/5
localized/ar/6
localized/ar/644
localized/ar/645
localized/ar/646
localized/ar/647
localized/ar/649
localized/ar/663
localized/ar/664
localized/ar/665
localized/ar/7
localized/ar/720
localized/ar/739
localized/ar/799
localized/ar/8
localized/ar/800
localized/ar/9
localized/bg/2859
localized/bg/739
localized/cs/1
localized/cs/10
localized/cs/1068
localized/cs/1069
localized/cs/1070
localized/cs/1071
localized/cs/1076
localized/cs/1077
localized/cs/1078
localized/cs/1080
localized/cs/1093
localized/cs/11
localized/cs/12
localized/cs/13
localized/cs/14
localized/cs/1653
localized/cs/1654
localized/cs/1655
localized/cs/1656
localized/cs/1657
localized/cs/1658
localized/cs/1659
localized/cs/1669
localized/cs/1728
localized/cs/1753
localized/cs/1805
localized/cs/19
localized/cs/2
localized/cs/2222
localized/cs/2223
localized/cs/2224
localized/cs/2225
localized/cs/2226
localized/cs/2227
localized/cs/2228
localized/cs/2229
localized/cs/2230
localized/cs/2231
localized/cs/2232
localized/cs/2266
localized/cs/2291
localized/cs/2292
localized/cs/23
localized/cs/2324
localized/cs/2382
localized/cs/2383
localized/cs/2384
localized/cs/24
localized/cs/254
localized/cs/255
localized/cs/256
localized/cs/257
localized/cs/258
localized/cs/2597
localized/cs/2598
localized/cs/2599
localized/cs/26
localized/cs/2600
localized/cs/2601
localized/cs/2602
localized/cs/2603
localized/cs/2604
localized/cs/2605
localized/cs/2606
localized/cs/2607
localized/cs/2608
localized/cs/2609
localized/cs/2610
localized/cs/2611
localized/cs/2619
localized/cs/262
localized/cs/2620
localized/cs/264
localized/cs/2673
localized/cs/2697
localized/cs/2698
localized/cs/27
localized/cs/2705
localized/cs/2715
localized/cs/2724
localized/cs/28
localized/cs/2805
localized/cs/2806
localized/cs/2807
localized/cs/2808
localized/cs/2810
localized/cs/2812
localized/cs/2859
localized/cs/3
localized/cs/330
localized/cs/34
localized/cs/35
localized/cs/358
localized/cs/36
localized/cs/361
localized/cs/4
localized/cs/408
localized/cs/5
localized/cs/6
localized/cs/644
localized/cs/645
localized/cs/646
localized/cs/647
localized/cs/649
localized/cs/663
localized/cs/664
localized/cs/665
localized/cs/7
localized/cs/720
localized/cs/739
localized/cs/799
localized/cs/8
localized/cs/800
localized/cs/9
localized/da/1
localized/da/10
localized/da/1068
localized/da/1069
localized/da/1070
localized/da/1071
localized/da/1076
localized/da/1077
localized/da/1078
localized/da/1080
localized/da/1093
localized/da/11
localized/da/12
localized/da/13
localized/da/14
localized/da/1653
localized/da/1654
localized/da/1655
localized/da/1656
localized/da/1657
localized/da/1658
localized/da/1659
localized/da/1669
localized/da/1728
localized/da/1753
localized/da/1805
localized/da/19
localized/da/2
localized/da/2222
localized/da/2223
localized/da/2224
localized/da/2225
localized/da/2226
localized/da/2227
localized/da/2228
localized/da/2229
localized/da/2230
localized/da/2231
localized/da/2232
localized/da/2266
localized/da/2291
localized/da/2292
localized/da/23
localized/da/2324
localized/da/2382
localized/da/2383
localized/da/2384
localized/da/24
localized/da/254
localized/da/255
localized/da/256
localized/da/257
localized/da/258
localized/da/2597
localized/da/2598
localized/da/2599
localized/da/26
localized/da/2600
localized/da/2601
localized/da/2602
localized/da/2603
localized/da/2604
localized/da/2605
localized/da/2606
localized/da/2607
localized/da/2608
localized/da/2609
localized/da/2610
localized/da/2611
localized/da/2619
localized/da/262
localized/da/2620
localized/da/264
localized/da/2673
localized/da/2697
localized/da/2698
localized/da/27
localized/da/2705
localized/da/2715
localized/da/2724
localized/da/28
localized/da/2805
localized/da/2806
localized/da/2807
localized/da/2808
localized/da/2810
localized/da/2812
localized/da/2859
localized/da/3
localized/da/330
localized/da/34
localized/da/35
localized/da/358
localized/da/36
localized/da/361
localized/da/4
localized/da/408
localized/da/5
localized/da/6
localized/da/644
localized/da/645
localized/da/646
localized/da/647
localized/da/649
localized/da/663
localized/da/664
localized/da/665
localized/da/7
localized/da/720
localized/da/739
localized/da/799
localized/da/8
localized/da/800
localized/da/9
localized/de/1
localized/de/10
localized/de/1068
localized/de/1069
localized/de/1070
localized/de/1071
localized/de/1076
localized/de/1077
localized/de/1078
localized/de/1080
localized/de/1093
localized/de/11
localized/de/12
localized/de/13
localized/de/14
localized/de/1653
localized/de/1654
localized/de/1655
localized/de/1656
localized/de/1657
localized/de/1658
localized/de/1659
localized/de/1669
localized/de/1728
localized/de/1753
localized/de/1805
localized/de/19
localized/de/2
localized/de/2222
localized/de/2223
localized/de/2224
localized/de/2225
localized/de/2226
localized/de/2227
localized/de/2228
localized/de/2229
localized/de/2230
localized/de/2231
localized/de/2232
localized/de/2266
localized/de/2273
localized/de/2291
localized/de/2292
localized/de/23
localized/de/2324
localized/de/2382
localized/de/2383
localized/de/2384
localized/de/24
localized/de/254
localized/de/255
localized/de/256
localized/de/257
localized/de/258
localized/de/2597
localized/de/2598
localized/de/2599
localized/de/26
localized/de/2600
localized/de/2601
localized/de/2602
localized/de/2603
localized/de/2604
localized/de/2605
localized/de/2606
localized/de/2607
localized/de/2608
localized/de/2609
localized/de/2610
localized/de/2611
localized/de/2619
localized/de/262
localized/de/2620
localized/de/264
localized/de/2673
localized/de/2697
localized/de/2698
localized/de/27
localized/de/2705
localized/de/2715
localized/de/2724
localized/de/28
localized/de/2805
localized/de/2806
localized/de/2807
localized/de/2808
localized/de/2810
localized/de/2812
localized/de/2859
localized/de/3
localized/de/330
localized/de/34
localized/de/35
localized/de/358
localized/de/36
localized/de/361
localized/de/4
localized/de/408
localized/de/5
localized/de/6
localized/de/644
localized/de/645
localized/de/646
localized/de/647
localized/de/649
localized/de/663
localized/de/664
localized/de/665
localized/de/7
localized/de/720
localized/de/739
localized/de/799
localized/de/8
localized/de/800
localized/de/9
localized/el/1
localized/el/10
localized/el/1068
localized/el/1069
localized/el/1070
localized/el/1071
localized/el/1076
localized/el/1077
localized/el/1078
localized/el/1080
localized/el/1093
localized/el/11
localized/el/12
localized/el/13
localized/el/14
localized/el/1653
localized/el/1654
localized/el/1655
localized/el/1656
localized/el/1657
localized/el/1658
localized/el/1659
localized/el/1669
localized/el/1728
localized/el/1753
localized/el/1805
localized/el/19
localized/el/2
localized/el/2222
localized/el/2223
localized/el/2224
localized/el/2225
localized/el/2226
localized/el/2227
localized/el/2228
localized/el/2229
localized/el/2230
localized/el/2231
localized/el/2232
localized/el/2266
localized/el/2291
localized/el/2292
localized/el/23
localized/el/2324
localized/el/2382
localized/el/2383
localized/el/2384
localized/el/24
localized/el/254
localized/el/255
localized/el/256
localized/el/257
localized/el/258
localized/el/2597
localized/el/2598
localized/el/2599
localized/el/26
localized/el/2600
localized/el/2601
localized/el/2602
localized/el/2603
localized/el/2604
localized/el/2605
localized/el/2606
localized/el/2607
localized/el/2608
localized/el/2609
localized/el/2610
localized/el/2611
localized/el/2619
localized/el/262
localized/el/2620
localized/el/264
localized/el/2673
localized/el/2697
localized/el/2698
localized/el/27
localized/el/2705
localized/el/2715
localized/el/2724
localized/el/28
localized/el/2805
localized/el/2806
localized/el/2807
localized/el/2808
localized/el/2810
localized/el/2812
localized/el/2859
localized/el/3
localized/el/330
localized/el/34
localized/el/35
localized/el/358
localized/el/36
localized/el/361
localized/el/4
localized/el/408
localized/el/5
localized/el/6
localized/el/644
localized/el/645
localized/el/646
localized/el/647
localized/el/649
localized/el/663
localized/el/664
localized/el/665
localized/el/7
localized/el/720
localized/el/739
localized/el/799
localized/el/8
localized/el/800
localized/el/9
localized/en/1
localized/en/10
localized/en/105
localized/en/1068
localized/en/1069
localized/en/1070
localized/en/1071
localized/en/1076
localized/en/1077
localized/en/1078
localized/en/1079
localized/en/1080
localized/en/1081
localized/en/1082
localized/en/1083
localized/en/1085
localized/en/1086
localized/en/1088
localized/en/1093
localized/en/1094
localized/en/1095
localized/en/1096
localized/en/1098
localized/en/1099
localized/en/11
localized/en/1100
localized/en/1101
localized/en/1102
localized/en/1103
localized/en/1104
localized/en/1105
localized/en/1106
localized/en/1107
localized/en/1108
localized/en/1109
localized/en/111
localized/en/1110
localized/en/1111
localized/en/1112
localized/en/1113
localized/en/1117
localized/en/1122
localized/en/1124
localized/en/1131
localized/en/1136
localized/en/1142
localized/en/1143
localized/en/1144
localized/en/1146
localized/en/1147
localized/en/1149
localized/en/115
localized/en/1150
localized/en/1152
localized/en/1153
localized/en/1154
localized/en/1155
localized/en/1156
localized/en/1157
localized/en/1158
localized/en/1159
localized/en/116
localized/en/1160
localized/en/1161
localized/en/1162
localized/en/1163
localized/en/1164
localized/en/1165
localized/en/1166
localized/en/117
localized/en/1174
localized/en/1175
localized/en/118
localized/en/119
localized/en/12
localized/en/120
localized/en/1203
localized/en/121
localized/en/122
localized/en/1227
localized/en/123
localized/en/1231
localized/en/1233
localized/en/1236
localized/en/124
localized/en/1240
localized/en/1246
localized/en/125
localized/en/126
localized/en/1270
localized/en/1271
localized/en/1272
localized/en/1274
localized/en/1276
localized/en/1279
localized/en/13
localized/en/1307
localized/en/1308
localized/en/1337
localized/en/1338
localized/en/1346
localized/en/14
localized/en/15
localized/en/16
localized/en/1653
localized/en/1654
localized/en/1655
localized/en/1656
localized/en/1657
localized/en/1658
localized/en/1659
localized/en/1660
localized/en/1661
localized/en/1662
localized/en/1663
localized/en/1664
localized/en/1665
localized/en/1666
localized/en/1668
localized/en/1669
localized/en/1670
localized/en/1671
localized/en/1672
localized/en/1678
localized/en/1679
localized/en/1682
localized/en/1683
localized/en/1684
localized/en/1685
localized/en/1686
localized/en/1687
localized/en/1688
localized/en/1689
localized/en/1690
localized/en/1691
localized/en/1692
localized/en/1693
localized/en/1694
localized/en/1695
localized/en/1696
localized/en/1697
localized/en/1698
localized/en/1699
localized/en/17
localized/en/1700
localized/en/1701
localized/en/1703
localized/en/1711
localized/en/1717
localized/en/1718
localized/en/1723
localized/en/1724
localized/en/1725
localized/en/1726
localized/en/1727
localized/en/1728
localized/en/1730
localized/en/1731
localized/en/1732
localized/en/1733
localized/en/1734
localized/en/1735
localized/en/1736
localized/en/1737
localized/en/1738
localized/en/1739
localized/en/1740
localized/en/1741
localized/en/1742
localized/en/1743
localized/en/1744
localized/en/1745
localized/en/1746
localized/en/1747
localized/en/1748
localized/en/1749
localized/en/1750
localized/en/1751
localized/en/1753
localized/en/1759
localized/en/1771
localized/en/1774
localized/en/1781
localized/en/1790
localized/en/18
localized/en/1805
localized/en/1817
localized/en/1822
localized/en/1823
localized/en/1824
localized/en/1825
localized/en/1829
localized/en/1831
localized/en/1843
localized/en/1859
localized/en/1860
localized/en/1861
localized/en/1864
localized/en/1866
localized/en/1869
localized/en/1884
localized/en/1885
localized/en/1890
localized/en/1891
localized/en/19
localized/en/1910
localized/en/1911
localized/en/1913
localized/en/1928
localized/en/1935
localized/en/1952
localized/en/1953
localized/en/1956
localized/en/1957
localized/en/1958
localized/en/1982
localized/en/2
localized/en/20
localized/en/2008
localized/en/21
localized/en/22
localized/en/2222
localized/en/2223
localized/en/2224
localized/en/2225
localized/en/2226
localized/en/2227
localized/en/2228
localized/en/2229
localized/en/2230
localized/en/2231
localized/en/2232
localized/en/2233
localized/en/2234
localized/en/2235
localized/en/2236
localized/en/2237
localized/en/2238
localized/en/2239
localized/en/2240
localized/en/2241
localized/en/2242
localized/en/2243
localized/en/2244
localized/en/2245
localized/en/2246
localized/en/2247
localized/en/2248
localized/en/2249
localized/en/2250
localized/en/2251
localized/en/2252
localized/en/2253
localized/en/2254
localized/en/2255
localized/en/2256
localized/en/2257
localized/en/2258
localized/en/2259
localized/en/2260
localized/en/2261
localized/en/2262
localized/en/2263
localized/en/2264
localized/en/2265
localized/en/2266
localized/en/2267
localized/en/2268
localized/en/2269
localized/en/2272
localized/en/2273
localized/en/2274
localized/en/2275
localized/en/2284
localized/en/2285
localized/en/2287
localized/en/2288
localized/en/2289
localized/en/2290
localized/en/2291
localized/en/2292
localized/en/2293
localized/en/2294
localized/en/2295
localized/en/2296
localized/en/2297
localized/en/2298
localized/en/2299
localized/en/23
localized/en/2300
localized/en/2301
localized/en/2302
localized/en/2303
localized/en/2304
localized/en/2305
localized/en/2306
localized/en/2307
localized/en/2308
localized/en/2309
localized/en/2310
localized/en/2311
localized/en/2312
localized/en/2313
localized/en/2314
localized/en/2315
localized/en/2316
localized/en/2317
localized/en/2318
localized/en/2320
localized/en/2321
localized/en/2324
localized/en/2325
localized/en/2340
localized/en/2341
localized/en/2342
localized/en/2345
localized/en/2346
localized/en/2347
localized/en/2348
localized/en/2349
localized/en/2350
localized/en/2360
localized/en/2361
localized/en/2364
localized/en/2365
localized/en/2366
localized/en/2367
localized/en/2369
localized/en/2371
localized/en/2373
localized/en/2382
localized/en/2383
localized/en/2384
localized/en/2386
localized/en/2389
localized/en/2390
localized/en/2392
localized/en/2393
localized/en/2394
localized/en/2396
localized/en/2397
localized/en/2398
localized/en/24
localized/en/2404
localized/en/2406
localized/en/2407
localized/en/2408
localized/en/2409
localized/en/2410
localized/en/2411
localized/en/2413
localized/en/2414
localized/en/2415
localized/en/2416
localized/en/2417
localized/en/2418
localized/en/2419
localized/en/2420
localized/en/2425
localized/en/2426
localized/en/2427
localized/en/2428
localized/en/2429
localized/en/2430
localized/en/2431
localized/en/2432
localized/en/2441
localized/en/2442
localized/en/2443
localized/en/2444
localized/en/2445
localized/en/2446
localized/en/2447
localized/en/2448
localized/en/2449
localized/en/2457
localized/en/2470
localized/en/2477
localized/en/2481
localized/en/2482
localized/en/25
localized/en/254
localized/en/255
localized/en/256
localized/en/257
localized/en/258
localized/en/2597
localized/en/2598
localized/en/2599
localized/en/26
localized/en/2600
localized/en/2601
localized/en/2602
localized/en/2603
localized/en/2604
localized/en/2605
localized/en/2606
localized/en/2607
localized/en/2608
localized/en/2609
localized/en/2610
localized/en/2611
localized/en/2612
localized/en/2613
localized/en/2614
localized/en/2615
localized/en/2616
localized/en/2617
localized/en/2618
localized/en/2619
localized/en/262
localized/en/2620
localized/en/2621
localized/en/2622
localized/en/2623
localized/en/2624
localized/en/2625
localized/en/2626
localized/en/2627
localized/en/2628
localized/en/2629
localized/en/263
localized/en/2630
localized/en/2631
localized/en/2632
localized/en/2633
localized/en/2634
localized/en/2635
localized/en/2636
localized/en/2637
localized/en/2638
localized/en/2639
localized/en/264
localized/en/2640
localized/en/2641
localized/en/2642
localized/en/2643
localized/en/2644
localized/en/2645
localized/en/2648
localized/en/2649
localized/en/265
localized/en/2650
localized/en/2651
localized/en/2652
localized/en/2653
localized/en/2654
localized/en/2655
localized/en/2656
localized/en/2657
localized/en/2658
localized/en/2659
localized/en/266
localized/en/2660
localized/en/2661
localized/en/2662
localized/en/2663
localized/en/2664
localized/en/2665
localized/en/2667
localized/en/2669
localized/en/267
localized/en/2670
localized/en/2671
localized/en/2672
localized/en/2673
localized/en/2674
localized/en/2675
localized/en/2676
localized/en/2677
localized/en/2678
localized/en/2679
localized/en/268
localized/en/2680
localized/en/2681
localized/en/2682
localized/en/2683
localized/en/2684
localized/en/2685
localized/en/2686
localized/en/2687
localized/en/2689
localized/en/269
localized/en/2690
localized/en/2691
localized/en/2692
localized/en/2693
localized/en/2694
localized/en/2695
localized/en/2696
localized/en/2697
localized/en/2698
localized/en/2699
localized/en/27
localized/en/2700
localized/en/2705
localized/en/2706
localized/en/2707
localized/en/2708
localized/en/2709
localized/en/2710
localized/en/2714
localized/en/2715
localized/en/2716
localized/en/2718
localized/en/2721
localized/en/2723
localized/en/2724
localized/en/2725
localized/en/2727
localized/en/2728
localized/en/2729
localized/en/2730
localized/en/2735
localized/en/2736
localized/en/2737
localized/en/274
localized/en/2740
localized/en/2741
localized/en/2743
localized/en/2747
localized/en/2748
localized/en/275
localized/en/2755
localized/en/2756
localized/en/2758
localized/en/2759
localized/en/2762
localized/en/2763
localized/en/2766
localized/en/28
localized/en/2805
localized/en/2806
localized/en/2807
localized/en/2808
localized/en/2809
localized/en/2810
localized/en/2811
localized/en/2812
localized/en/2813
localized/en/2814
localized/en/2815
localized/en/2816
localized/en/2817
localized/en/2818
localized/en/2819
localized/en/2820
localized/en/2821
localized/en/2822
localized/en/2823
localized/en/2824
localized/en/2825
localized/en/2826
localized/en/2827
localized/en/2828
localized/en/2829
localized/en/2830
localized/en/2831
localized/en/2832
localized/en/2833
localized/en/2834
localized/en/2835
localized/en/2837
localized/en/2838
localized/en/2839
localized/en/2840
localized/en/2841
localized/en/2842
localized/en/2843
localized/en/2844
localized/en/2845
localized/en/2846
localized/en/2847
localized/en/2848
localized/en/2849
localized/en/2850
localized/en/2851
localized/en/2852
localized/en/2853
localized/en/2854
localized/en/2855
localized/en/2856
localized/en/2857
localized/en/2858
localized/en/2859
localized/en/286
localized/en/287
localized/en/288
localized/en/289
localized/en/290
localized/en/291
localized/en/292
localized/en/293
localized/en/294
localized/en/295
localized/en/296
localized/en/297
localized/en/298
localized/en/299
localized/en/3
localized/en/300
localized/en/301
localized/en/302
localized/en/303
localized/en/304
localized/en/305
localized/en/306
localized/en/309
localized/en/310
localized/en/324
localized/en/327
localized/en/330
localized/en/331
localized/en/333
localized/en/334
localized/en/335
localized/en/336
localized/en/337
localized/en/338
localized/en/339
localized/en/34
localized/en/340
localized/en/341
localized/en/342
localized/en/343
localized/en/344
localized/en/345
localized/en/346
localized/en/347
localized/en/349
localized/en/35
localized/en/350
localized/en/351
localized/en/352
localized/en/358
localized/en/36
localized/en/361
localized/en/37
localized/en/384
localized/en/385
localized/en/386
localized/en/387
localized/en/4
localized/en/406
localized/en/408
localized/en/41
localized/en/43
localized/en/44
localized/en/46
localized/en/47
localized/en/5
localized/en/6
localized/en/644
localized/en/645
localized/en/646
localized/en/647
localized/en/649
localized/en/65
localized/en/651
localized/en/652
localized/en/653
localized/en/66
localized/en/660
localized/en/661
localized/en/662
localized/en/663
localized/en/664
localized/en/665
localized/en/666
localized/en/669
localized/en/67
localized/en/673
localized/en/674
localized/en/675
localized/en/676
localized/en/677
localized/en/678
localized/en/679
localized/en/68
localized/en/680
localized/en/681
localized/en/682
localized/en/683
localized/en/684
localized/en/685
localized/en/686
localized/en/687
localized/en/688
localized/en/69
localized/en/690
localized/en/692
localized/en/693
localized/en/696
localized/en/697
localized/en/7
localized/en/70
localized/en/701
localized/en/702
localized/en/704
localized/en/705
localized/en/71
localized/en/716
localized/en/717
localized/en/718
localized/en/719
localized/en/72
localized/en/720
localized/en/721
localized/en/724
localized/en/725
localized/en/726
localized/en/727
localized/en/728
localized/en/729
localized/en/73
localized/en/730
localized/en/731
localized/en/732
localized/en/733
localized/en/734
localized/en/735
localized/en/737
localized/en/739
localized/en/740
localized/en/741
localized/en/743
localized/en/754
localized/en/755
localized/en/756
localized/en/757
localized/en/758
localized/en/759
localized/en/760
localized/en/761
localized/en/762
localized/en/763
localized/en/764
localized/en/765
localized/en/766
localized/en/767
localized/en/768
localized/en/771
localized/en/781
localized/en/782
localized/en/790
localized/en/797
localized/en/798
localized/en/799
localized/en/8
localized/en/800
localized/en/812
localized/en/813
localized/en/814
localized/en/815
localized/en/816
localized/en/82
localized/en/829
localized/en/830
localized/en/831
localized/en/832
localized/en/833
localized/en/89
localized/en/9
localized/en/90
localized/en/92
localized/es/1
localized/es/10
localized/es/1068
localized/es/1069
localized/es/1070
localized/es/1071
localized/es/1076
localized/es/1077
localized/es/1078
localized/es/1080
localized/es/1093
localized/es/11
localized/es/12
localized/es/13
localized/es/14
localized/es/1653
localized/es/1654
localized/es/1655
localized/es/1656
localized/es/1657
localized/es/1658
localized/es/1659
localized/es/1669
localized/es/1728
localized/es/1753
localized/es/1805
localized/es/19
localized/es/2
localized/es/2222
localized/es/2223
localized/es/2224
localized/es/2225
localized/es/2226
localized/es/2227
localized/es/2228
localized/es/2229
localized/es/2230
localized/es/2231
localized/es/2232
localized/es/2266
localized/es/2273
localized/es/2291
localized/es/2292
localized/es/23
localized/es/2324
localized/es/2382
localized/es/2383
localized/es/2384
localized/es/24
localized/es/254
localized/es/255
localized/es/256
localized/es/257
localized/es/258
localized/es/2597
localized/es/2598
localized/es/2599
localized/es/26
localized/es/2600
localized/es/2601
localized/es/2602
localized/es/2603
localized/es/2604
localized/es/2605
localized/es/2606
localized/es/2607
localized/es/2608
localized/es/2609
localized/es/2610
localized/es/2611
localized/es/2619
localized/es/262
localized/es/2620
localized/es/264
localized/es/2673
localized/es/2697
localized/es/2698
localized/es/27
localized/es/2705
localized/es/2715
localized/es/2724
localized/es/28
localized/es/2805
localized/es/2806
localized/es/2807
localized/es/2808
localized/es/2810
localized/es/2812
localized/es/2859
localized/es/3
localized/es/330
localized/es/34
localized/es/35
localized/es/358
localized/es/36
localized/es/361
localized/es/4
localized/es/408
localized/es/5
localized/es/6
localized/es/644
localized/es/645
localized/es/646
localized/es/647
localized/es/649
localized/es/663
localized/es/664
localized/es/665
localized/es/7
localized/es/720
localized/es/739
localized/es/799
localized/es/8
localized/es/800
localized/es/9
localized/et/2859
localized/et/739
localized/fi/1
localized/fi/10
localized/fi/1068
localized/fi/1069
localized/fi/1070
localized/fi/1071
localized/fi/1076
localized/fi/1077
localized/fi/1078
localized/fi/1080
localized/fi/1093
localized/fi/11
localized/fi/12
localized/fi/13
localized/fi/14
localized/fi/1653
localized/fi/1654
localized/fi/1655
localized/fi/1656
localized/fi/1657
localized/fi/1658
localized/fi/1659
localized/fi/1669
localized/fi/1728
localized/fi/1753
localized/fi/1805
localized/fi/19
localized/fi/2
localized/fi/2222
localized/fi/2223
localized/fi/2224
localized/fi/2225
localized/fi/2226
localized/fi/2227
localized/fi/2228
localized/fi/2229
localized/fi/2230
localized/fi/2231
localized/fi/2232
localized/fi/2266
localized/fi/2291
localized/fi/2292
localized/fi/23
localized/fi/2324
localized/fi/2382
localized/fi/2383
localized/fi/2384
localized/fi/24
localized/fi/254
localized/fi/255
localized/fi/256
localized/fi/257
localized/fi/258
localized/fi/2597
localized/fi/2598
localized/fi/2599
localized/fi/26
localized/fi/2600
localized/fi/2601
localized/fi/2602
localized/fi/2603
localized/fi/2604
localized/fi/2605
localized/fi/2606
localized/fi/2607
localized/fi/2608
localized/fi/2609
localized/fi/2610
localized/fi/2611
localized/fi/2619
localized/fi/262
localized/fi/2620
localized/fi/264
localized/fi/2673
localized/fi/2697
localized/fi/2698
localized/fi/27
localized/fi/2705
localized/fi/2715
localized/fi/2724
localized/fi/28
localized/fi/2805
localized/fi/2806
localized/fi/2807
localized/fi/2808
localized/fi/2810
localized/fi/2812
localized/fi/2859
localized/fi/3
localized/fi/330
localized/fi/34
localized/fi/35
localized/fi/358
localized/fi/36
localized/fi/361
localized/fi/4
localized/fi/408
localized/fi/5
localized/fi/6
localized/fi/644
localized/fi/645
localized/fi/646
localized/fi/647
localized/fi/649
localized/fi/663
localized/fi/664
localized/fi/665
localized/fi/7
localized/fi/720
localized/fi/739
localized/fi/799
localized/fi/8
localized/fi/800
localized/fi/9
localized/fr/1
localized/fr/10
localized/fr/1068
localized/fr/1069
localized/fr/1070
localized/fr/1071
localized/fr/1076
localized/fr/1077
localized/fr/1078
localized/fr/1080
localized/fr/1093
localized/fr/11
localized/fr/12
localized/fr/13
localized/fr/14
localized/fr/1653
localized/fr/1654
localized/fr/1655
localized/fr/1656
localized/fr/1657
localized/fr/1658
localized/fr/1659
localized/fr/1669
localized/fr/1728
localized/fr/1753
localized/fr/1805
localized/fr/19
localized/fr/2
localized/fr/2222
localized/fr/2223
localized/fr/2224
localized/fr/2225
localized/fr/2226
localized/fr/2227
localized/fr/2228
localized/fr/2229
localized/fr/2230
localized/fr/2231
localized/fr/2232
localized/fr/2266
localized/fr/2273
localized/fr/2291
localized/fr/2292
localized/fr/23
localized/fr/2324
localized/fr/2382
localized/fr/2383
localized/fr/2384
localized/fr/24
localized/fr/254
localized/fr/255
localized/fr/256
localized/fr/257
localized/fr/258
localized/fr/2597
localized/fr/2598
localized/fr/2599
localized/fr/26
localized/fr/2600
localized/fr/2601
localized/fr/2602
localized/fr/2603
localized/fr/2604
localized/fr/2605
localized/fr/2606
localized/fr/2607
localized/fr/2608
localized/fr/2609
localized/fr/2610
localized/fr/2611
localized/fr/2619
localized/fr/262
localized/fr/2620
localized/fr/264
localized/fr/2673
localized/fr/2697
localized/fr/2698
localized/fr/27
localized/fr/2705
localized/fr/2715
localized/fr/2724
localized/fr/28
localized/fr/2805
localized/fr/2806
localized/fr/2807
localized/fr/2808
localized/fr/2810
localized/fr/2812
localized/fr/2859
localized/fr/3
localized/fr/330
localized/fr/34
localized/fr/35
localized/fr/358
localized/fr/36
localized/fr/361
localized/fr/4
localized/fr/408
localized/fr/5
localized/fr/6
localized/fr/644
localized/fr/645
localized/fr/646
localized/fr/647
localized/fr/649
localized/fr/663
localized/fr/664
localized/fr/665
localized/fr/7
localized/fr/720
localized/fr/739
localized/fr/799
localized/fr/8
localized/fr/800
localized/fr/9
localized/he/1
localized/he/10
localized/he/1068
localized/he/1069
localized/he/1070
localized/he/1071
localized/he/1076
localized/he/1077
localized/he/1078
localized/he/1080
localized/he/1093
localized/he/11
localized/he/12
localized/he/13
localized/he/14
localized/he/1653
localized/he/1654
localized/he/1655
localized/he/1656
localized/he/1657
localized/he/1658
localized/he/1659
localized/he/1669
localized/he/1728
localized/he/1753
localized/he/1805
localized/he/19
localized/he/2
localized/he/2222
localized/he/2223
localized/he/2224
localized/he/2225
localized/he/2226
localized/he/2227
localized/he/2228
localized/he/2229
localized/he/2230
localized/he/2231
localized/he/2232
localized/he/2266
localized/he/2291
localized/he/2292
localized/he/23
localized/he/2324
localized/he/2382
localized/he/2383
localized/he/2384
localized/he/24
localized/he/254
localized/he/255
localized/he/256
localized/he/257
localized/he/258
localized/he/2597
localized/he/2598
localized/he/2599
localized/he/26
localized/he/2600
localized/he/2601
localized/he/2602
localized/he/2603
localized/he/2604
localized/he/2605
localized/he/2606
localized/he/2607
localized/he/2608
localized/he/2609
localized/he/2610
localized/he/2611
localized/he/2619
localized/he/262
localized/he/2620
localized/he/264
localized/he/2673
localized/he/2697
localized/he/2698
localized/he/27
localized/he/2705
localized/he/2715
localized/he/2724
localized/he/28
localized/he/2805
localized/he/2806
localized/he/2807
localized/he/2808
localized/he/2810
localized/he/2812
localized/he/2859
localized/he/3
localized/he/330
localized/he/34
localized/he/35
localized/he/358
localized/he/36
localized/he/361
localized/he/4
localized/he/408
localized/he/5
localized/he/6
localized/he/644
localized/he/645
localized/he/646
localized/he/647
localized/he/649
localized/he/663
localized/he/664
localized/he/665
localized/he/7
localized/he/720
localized/he/739
localized/he/799
localized/he/8
localized/he/800
localized/he/9
localized/hr/2859
localized/hr/739
localized/hu/1
localized/hu/10
localized/hu/1068
localized/hu/1069
localized/hu/1070
localized/hu/1071
localized/hu/1076
localized/hu/1077
localized/hu/1078
localized/hu/1080
localized/hu/1093
localized/hu/11
localized/hu/12
localized/hu/13
localized/hu/14
localized/hu/1653
localized/hu/1654
localized/hu/1655
localized/hu/1656
localized/hu/1657
localized/hu/1658
localized/hu/1659
localized/hu/1669
localized/hu/1728
localized/hu/1753
localized/hu/1805
localized/hu/19
localized/hu/2
localized/hu/2222
localized/hu/2223
localized/hu/2224
localized/hu/2225
localized/hu/2226
localized/hu/2227
localized/hu/2228
localized/hu/2229
localized/hu/2230
localized/hu/2231
localized/hu/2232
localized/hu/2266
localized/hu/2291
localized/hu/2292
localized/hu/23
localized/hu/2324
localized/hu/2382
localized/hu/2383
localized/hu/2384
localized/hu/24
localized/hu/254
localized/hu/255
localized/hu/256
localized/hu/257
localized/hu/258
localized/hu/2597
localized/hu/2598
localized/hu/2599
localized/hu/26
localized/hu/2600
localized/hu/2601
localized/hu/2602
localized/hu/2603
localized/hu/2604
localized/hu/2605
localized/hu/2606
localized/hu/2607
localized/hu/2608
localized/hu/2609
localized/hu/2610
localized/hu/2611
localized/hu/2619
localized/hu/262
localized/hu/2620
localized/hu/264
localized/hu/2673
localized/hu/2697
localized/hu/2698
localized/hu/27
localized/hu/2705
localized/hu/2715
localized/hu/2724
localized/hu/28
localized/hu/2805
localized/hu/2806
localized/hu/2807
localized/hu/2808
localized/hu/2810
localized/hu/2812
localized/hu/2859
localized/hu/3
localized/hu/330
localized/hu/34
localized/hu/35
localized/hu/358
localized/hu/36
localized/hu/361
localized/hu/4
localized/hu/408
localized/hu/5
localized/hu/6
localized/hu/644
localized/hu/645
localized/hu/646
localized/hu/647
localized/hu/649
localized/hu/663
localized/hu/664
localized/hu/665
localized/hu/7
localized/hu/720
localized/hu/739
localized/hu/799
localized/hu/8
localized/hu/800
localized/hu/9
localized/it/1
localized/it/10
localized/it/1068
localized/it/1069
localized/it/1070
localized/it/1071
localized/it/1076
localized/it/1077
localized/it/1078
localized/it/1080
localized/it/1093
localized/it/11
localized/it/12
localized/it/13
localized/it/14
localized/it/1653
localized/it/1654
localized/it/1655
localized/it/1656
localized/it/1657
localized/it/1658
localized/it/1659
localized/it/1669
localized/it/1728
localized/it/1753
localized/it/1805
localized/it/19
localized/it/2
localized/it/2222
localized/it/2223
localized/it/2224
localized/it/2225
localized/it/2226
localized/it/2227
localized/it/2228
localized/it/2229
localized/it/2230
localized/it/2231
localized/it/2232
localized/it/2266
localized/it/2273
localized/it/2291
localized/it/2292
localized/it/23
localized/it/2324
localized/it/2382
localized/it/2383
localized/it/2384
localized/it/24
localized/it/254
localized/it/255
localized/it/256
localized/it/257
localized/it/258
localized/it/2597
localized/it/2598
localized/it/2599
localized/it/26
localized/it/2600
localized/it/2601
localized/it/2602
localized/it/2603
localized/it/2604
localized/it/2605
localized/it/2606
localized/it/2607
localized/it/2608
localized/it/2609
localized/it/2610
localized/it/2611
localized/it/2619
localized/it/262
localized/it/2620
localized/it/264
localized/it/2673
localized/it/2697
localized/it/2698
localized/it/27
localized/it/2705
localized/it/2715
localized/it/2724
localized/it/28
localized/it/2805
localized/it/2806
localized/it/2807
localized/it/2808
localized/it/2810
localized/it/2812
localized/it/2859
localized/it/3
localized/it/330
localized/it/34
localized/it/35
localized/it/358
localized/it/36
localized/it/361
localized/it/4
localized/it/408
localized/it/5
localized/it/6
localized/it/644
localized/it/645
localized/it/646
localized/it/647
localized/it/649
localized/it/663
localized/it/664
localized/it/665
localized/it/7
localized/it/720
localized/it/739
localized/it/799
localized/it/8
localized/it/800
localized/it/9
localized/ja/1
localized/ja/10
localized/ja/1068
localized/ja/1069
localized/ja/1070
localized/ja/1071
localized/ja/1076
localized/ja/1077
localized/ja/1078
localized/ja/1080
localized/ja/1093
localized/ja/11
localized/ja/12
localized/ja/13
localized/ja/14
localized/ja/1653
localized/ja/1654
localized/ja/1655
localized/ja/1656
localized/ja/1657
localized/ja/1658
localized/ja/1659
localized/ja/1669
localized/ja/1728
localized/ja/1753
localized/ja/1805
localized/ja/19
localized/ja/2
localized/ja/2222
localized/ja/2223
localized/ja/2224
localized/ja/2225
localized/ja/2226
localized/ja/2227
localized/ja/2228
localized/ja/2229
localized/ja/2230
localized/ja/2231
localized/ja/2232
localized/ja/2266
localized/ja/2273
localized/ja/2291
localized/ja/2292
localized/ja/23
localized/ja/2324
localized/ja/2382
localized/ja/2383
localized/ja/2384
localized/ja/24
localized/ja/254
localized/ja/255
localized/ja/256
localized/ja/257
localized/ja/258
localized/ja/2597
localized/ja/2598
localized/ja/2599
localized/ja/26
localized/ja/2600
localized/ja/2601
localized/ja/2602
localized/ja/2603
localized/ja/2604
localized/ja/2605
localized/ja/2606
localized/ja/2607
localized/ja/2608
localized/ja/2609
localized/ja/2610
localized/ja/2611
localized/ja/2619
localized/ja/262
localized/ja/2620
localized/ja/264
localized/ja/2673
localized/ja/2697
localized/ja/2698
localized/ja/27
localized/ja/2705
localized/ja/2715
localized/ja/2724
localized/ja/28
localized/ja/2805
localized/ja/2806
localized/ja/2807
localized/ja/2808
localized/ja/2810
localized/ja/2812
localized/ja/2859
localized/ja/3
localized/ja/330
localized/ja/34
localized/ja/35
localized/ja/358
localized/ja/36
localized/ja/361
localized/ja/4
localized/ja/408
localized/ja/5
localized/ja/6
localized/ja/644
localized/ja/645
localized/ja/646
localized/ja/647
localized/ja/649
localized/ja/663
localized/ja/664
localized/ja/665
localized/ja/7
localized/ja/720
localized/ja/739
localized/ja/799
localized/ja/8
localized/ja/800
localized/ja/9
localized/ko/1
localized/ko/10
localized/ko/1068
localized/ko/1069
localized/ko/1070
localized/ko/1071
localized/ko/1076
localized/ko/1077
localized/ko/1078
localized/ko/1080
localized/ko/1093
localized/ko/11
localized/ko/12
localized/ko/13
localized/ko/14
localized/ko/1653
localized/ko/1654
localized/ko/1655
localized/ko/1656
localized/ko/1657
localized/ko/1658
localized/ko/1659
localized/ko/1669
localized/ko/1728
localized/ko/1753
localized/ko/1805
localized/ko/19
localized/ko/2
localized/ko/2222
localized/ko/2223
localized/ko/2224
localized/ko/2225
localized/ko/2226
localized/ko/2227
localized/ko/2228
localized/ko/2229
localized/ko/2230
localized/ko/2231
localized/ko/2232
localized/ko/2266
localized/ko/2273
localized/ko/2291
localized/ko/2292
localized/ko/23
localized/ko/2324
localized/ko/2382
localized/ko/2383
localized/ko/2384
localized/ko/24
localized/ko/254
localized/ko/255
localized/ko/256
localized/ko/257
localized/ko/258
localized/ko/2597
localized/ko/2598
localized/ko/2599
localized/ko/26
localized/ko/2600
localized/ko/2601
localized/ko/2602
localized/ko/2603
localized/ko/2604
localized/ko/2605
localized/ko/2606
localized/ko/2607
localized/ko/2608
localized/ko/2609
localized/ko/2610
localized/ko/2611
localized/ko/2619
localized/ko/262
localized/ko/2620
localized/ko/264
localized/ko/2673
localized/ko/2697
localized/ko/2698
localized/ko/27
localized/ko/2705
localized/ko/2715
localized/ko/2724
localized/ko/28
localized/ko/2805
localized/ko/2806
localized/ko/2807
localized/ko/2808
localized/ko/2810
localized/ko/2812
localized/ko/2859
localized/ko/3
localized/ko/330
localized/ko/34
localized/ko/35
localized/ko/358
localized/ko/36
localized/ko/361
localized/ko/4
localized/ko/408
localized/ko/5
localized/ko/6
localized/ko/644
localized/ko/645
localized/ko/646
localized/ko/647
localized/ko/649
localized/ko/663
localized/ko/664
localized/ko/665
localized/ko/7
localized/ko/720
localized/ko/739
localized/ko/799
localized/ko/8
localized/ko/800
localized/ko/9
localized/lt/2859
localized/lt/739
localized/lv/2859
localized/lv/739
localized/neu/2859
localized/nl/1
localized/nl/10
localized/nl/1068
localized/nl/1069
localized/nl/1070
localized/nl/1071
localized/nl/1076
localized/nl/1077
localized/nl/1078
localized/nl/1080
localized/nl/1093
localized/nl/11
localized/nl/12
localized/nl/13
localized/nl/14
localized/nl/1653
localized/nl/1654
localized/nl/1655
localized/nl/1656
localized/nl/1657
localized/nl/1658
localized/nl/1659
localized/nl/1669
localized/nl/1728
localized/nl/1753
localized/nl/1805
localized/nl/19
localized/nl/2
localized/nl/2222
localized/nl/2223
localized/nl/2224
localized/nl/2225
localized/nl/2226
localized/nl/2227
localized/nl/2228
localized/nl/2229
localized/nl/2230
localized/nl/2231
localized/nl/2232
localized/nl/2266
localized/nl/2291
localized/nl/2292
localized/nl/23
localized/nl/2324
localized/nl/2382
localized/nl/2383
localized/nl/2384
localized/nl/24
localized/nl/254
localized/nl/255
localized/nl/256
localized/nl/257
localized/nl/258
localized/nl/2597
localized/nl/2598
localized/nl/2599
localized/nl/26
localized/nl/2600
localized/nl/2601
localized/nl/2602
localized/nl/2603
localized/nl/2604
localized/nl/2605
localized/nl/2606
localized/nl/2607
localized/nl/2608
localized/nl/2609
localized/nl/2610
localized/nl/2611
localized/nl/2619
localized/nl/262
localized/nl/2620
localized/nl/264
localized/nl/2673
localized/nl/2697
localized/nl/2698
localized/nl/27
localized/nl/2705
localized/nl/2715
localized/nl/2724
localized/nl/28
localized/nl/2805
localized/nl/2806
localized/nl/2807
localized/nl/2808
localized/nl/2810
localized/nl/2812
localized/nl/2859
localized/nl/3
localized/nl/330
localized/nl/34
localized/nl/35
localized/nl/358
localized/nl/36
localized/nl/361
localized/nl/4
localized/nl/408
localized/nl/5
localized/nl/6
localized/nl/644
localized/nl/645
localized/nl/646
localized/nl/647
localized/nl/649
localized/nl/663
localized/nl/664
localized/nl/665
localized/nl/7
localized/nl/720
localized/nl/739
localized/nl/799
localized/nl/8
localized/nl/800
localized/nl/9
localized/no/1
localized/no/10
localized/no/1068
localized/no/1069
localized/no/1070
localized/no/1071
localized/no/1076
localized/no/1077
localized/no/1078
localized/no/1080
localized/no/1093
localized/no/11
localized/no/12
localized/no/13
localized/no/14
localized/no/1653
localized/no/1654
localized/no/1655
localized/no/1656
localized/no/1657
localized/no/1658
localized/no/1659
localized/no/1669
localized/no/1728
localized/no/1753
localized/no/1805
localized/no/19
localized/no/2
localized/no/2222
localized/no/2223
localized/no/2224
localized/no/2225
localized/no/2226
localized/no/2227
localized/no/2228
localized/no/2229
localized/no/2230
localized/no/2231
localized/no/2232
localized/no/2266
localized/no/2291
localized/no/2292
localized/no/23
localized/no/2324
localized/no/2382
localized/no/2383
localized/no/2384
localized/no/24
localized/no/254
localized/no/255
localized/no/256
localized/no/257
localized/no/258
localized/no/2597
localized/no/2598
localized/no/2599
localized/no/26
localized/no/2600
localized/no/2601
localized/no/2602
localized/no/2603
localized/no/2604
localized/no/2605
localized/no/2606
localized/no/2607
localized/no/2608
localized/no/2609
localized/no/2610
localized/no/2611
localized/no/2619
localized/no/262
localized/no/2620
localized/no/264
localized/no/2673
localized/no/2697
localized/no/2698
localized/no/27
localized/no/2705
localized/no/2715
localized/no/2724
localized/no/28
localized/no/2805
localized/no/2806
localized/no/2807
localized/no/2808
localized/no/2810
localized/no/2812
localized/no/2859
localized/no/3
localized/no/330
localized/no/34
localized/no/35
localized/no/358
localized/no/36
localized/no/361
localized/no/4
localized/no/408
localized/no/5
localized/no/6
localized/no/644
localized/no/645
localized/no/646
localized/no/647
localized/no/649
localized/no/663
localized/no/664
localized/no/665
localized/no/7
localized/no/720
localized/no/739
localized/no/799
localized/no/8
localized/no/800
localized/no/9
localized/pl/1
localized/pl/10
localized/pl/1068
localized/pl/1069
localized/pl/1070
localized/pl/1071
localized/pl/1076
localized/pl/1077
localized/pl/1078
localized/pl/1080
localized/pl/1093
localized/pl/11
localized/pl/12
localized/pl/13
localized/pl/14
localized/pl/1653
localized/pl/1654
localized/pl/1655
localized/pl/1656
localized/pl/1657
localized/pl/1658
localized/pl/1659
localized/pl/1669
localized/pl/1728
localized/pl/1753
localized/pl/1805
localized/pl/19
localized/pl/2
localized/pl/2222
localized/pl/2223
localized/pl/2224
localized/pl/2225
localized/pl/2226
localized/pl/2227
localized/pl/2228
localized/pl/2229
localized/pl/2230
localized/pl/2231
localized/pl/2232
localized/pl/2266
localized/pl/2291
localized/pl/2292
localized/pl/23
localized/pl/2324
localized/pl/2382
localized/pl/2383
localized/pl/2384
localized/pl/24
localized/pl/254
localized/pl/255
localized/pl/256
localized/pl/257
localized/pl/258
localized/pl/2597
localized/pl/2598
localized/pl/2599
localized/pl/26
localized/pl/2600
localized/pl/2601
localized/pl/2602
localized/pl/2603
localized/pl/2604
localized/pl/2605
localized/pl/2606
localized/pl/2607
localized/pl/2608
localized/pl/2609
localized/pl/2610
localized/pl/2611
localized/pl/2619
localized/pl/262
localized/pl/2620
localized/pl/264
localized/pl/2673
localized/pl/2697
localized/pl/2698
localized/pl/27
localized/pl/2705
localized/pl/2715
localized/pl/2724
localized/pl/28
localized/pl/2805
localized/pl/2806
localized/pl/2807
localized/pl/2808
localized/pl/2810
localized/pl/2812
localized/pl/2859
localized/pl/3
localized/pl/330
localized/pl/34
localized/pl/35
localized/pl/358
localized/pl/36
localized/pl/361
localized/pl/4
localized/pl/408
localized/pl/5
localized/pl/6
localized/pl/644
localized/pl/645
localized/pl/646
localized/pl/647
localized/pl/649
localized/pl/663
localized/pl/664
localized/pl/665
localized/pl/7
localized/pl/720
localized/pl/739
localized/pl/799
localized/pl/8
localized/pl/800
localized/pl/9
localized/pt-br/1
localized/pt-br/10
localized/pt-br/1068
localized/pt-br/1069
localized/pt-br/1070
localized/pt-br/1071
localized/pt-br/1076
localized/pt-br/1077
localized/pt-br/1078
localized/pt-br/1080
localized/pt-br/1093
localized/pt-br/11
localized/pt-br/12
localized/pt-br/13
localized/pt-br/14
localized/pt-br/1653
localized/pt-br/1654
localized/pt-br/1655
localized/pt-br/1656
localized/pt-br/1657
localized/pt-br/1658
localized/pt-br/1659
localized/pt-br/1669
localized/pt-br/1728
localized/pt-br/1753
localized/pt-br/1805
localized/pt-br/19
localized/pt-br/2
localized/pt-br/2222
localized/pt-br/2223
localized/pt-br/2224
localized/pt-br/2225
localized/pt-br/2226
localized/pt-br/2227
localized/pt-br/2228
localized/pt-br/2229
localized/pt-br/2230
localized/pt-br/2231
localized/pt-br/2232
localized/pt-br/2266
localized/pt-br/2291
localized/pt-br/2292
localized/pt-br/23
localized/pt-br/2324
localized/pt-br/2382
localized/pt-br/2383
localized/pt-br/2384
localized/pt-br/24
localized/pt-br/254
localized/pt-br/255
localized/pt-br/256
localized/pt-br/257
localized/pt-br/258
localized/pt-br/2597
localized/pt-br/2598
localized/pt-br/2599
localized/pt-br/26
localized/pt-br/2600
localized/pt-br/2601
localized/pt-br/2602
localized/pt-br/2603
localized/pt-br/2604
localized/pt-br/2605
localized/pt-br/2606
localized/pt-br/2607
localized/pt-br/2608
localized/pt-br/2609
localized/pt-br/2610
localized/pt-br/2611
localized/pt-br/2619
localized/pt-br/262
localized/pt-br/2620
localized/pt-br/264
localized/pt-br/2673
localized/pt-br/2697
localized/pt-br/2698
localized/pt-br/27
localized/pt-br/2705
localized/pt-br/2715
localized/pt-br/2724
localized/pt-br/28
localized/pt-br/2805
localized/pt-br/2806
localized/pt-br/2807
localized/pt-br/2808
localized/pt-br/2810
localized/pt-br/2812
localized/pt-br/2859
localized/pt-br/3
localized/pt-br/330
localized/pt-br/34
localized/pt-br/35
localized/pt-br/358
localized/pt-br/36
localized/pt-br/361
localized/pt-br/4
localized/pt-br/408
localized/pt-br/5
localized/pt-br/6
localized/pt-br/644
localized/pt-br/645
localized/pt-br/646
localized/pt-br/647
localized/pt-br/649
localized/pt-br/663
localized/pt-br/664
localized/pt-br/665
localized/pt-br/7
localized/pt-br/720
localized/pt-br/739
localized/pt-br/799
localized/pt-br/8
localized/pt-br/800
localized/pt-br/9
localized/pt/1
localized/pt/10
localized/pt/1068
localized/pt/1069
localized/pt/1070
localized/pt/1071
localized/pt/1076
localized/pt/1077
localized/pt/1078
localized/pt/1080
localized/pt/1093
localized/pt/11
localized/pt/12
localized/pt/13
localized/pt/14
localized/pt/1653
localized/pt/1654
localized/pt/1655
localized/pt/1656
localized/pt/1657
localized/pt/1658
localized/pt/1659
localized/pt/1669
localized/pt/1728
localized/pt/1753
localized/pt/1805
localized/pt/19
localized/pt/2
localized/pt/2222
localized/pt/2223
localized/pt/2224
localized/pt/2225
localized/pt/2226
localized/pt/2227
localized/pt/2228
localized/pt/2229
localized/pt/2230
localized/pt/2231
localized/pt/2232
localized/pt/2266
localized/pt/2291
localized/pt/2292
localized/pt/23
localized/pt/2324
localized/pt/2382
localized/pt/2383
localized/pt/2384
localized/pt/24
localized/pt/254
localized/pt/255
localized/pt/256
localized/pt/257
localized/pt/258
localized/pt/2597
localized/pt/2598
localized/pt/2599
localized/pt/26
localized/pt/2600
localized/pt/2601
localized/pt/2602
localized/pt/2603
localized/pt/2604
localized/pt/2605
localized/pt/2606
localized/pt/2607
localized/pt/2608
localized/pt/2609
localized/pt/2610
localized/pt/2611
localized/pt/2619
localized/pt/262
localized/pt/2620
localized/pt/264
localized/pt/2673
localized/pt/2697
localized/pt/2698
localized/pt/27
localized/pt/2705
localized/pt/2715
localized/pt/2724
localized/pt/28
localized/pt/2805
localized/pt/2806
localized/pt/2807
localized/pt/2808
localized/pt/2810
localized/pt/2812
localized/pt/2859
localized/pt/3
localized/pt/330
localized/pt/34
localized/pt/35
localized/pt/358
localized/pt/36
localized/pt/361
localized/pt/4
localized/pt/408
localized/pt/5
localized/pt/6
localized/pt/644
localized/pt/645
localized/pt/646
localized/pt/647
localized/pt/649
localized/pt/663
localized/pt/664
localized/pt/665
localized/pt/7
localized/pt/720
localized/pt/739
localized/pt/799
localized/pt/8
localized/pt/800
localized/pt/9
localized/ro/2859
localized/ro/739
localized/ru/1
localized/ru/10
localized/ru/1068
localized/ru/1069
localized/ru/1070
localized/ru/1071
localized/ru/1076
localized/ru/1077
localized/ru/1078
localized/ru/1080
localized/ru/1093
localized/ru/11
localized/ru/12
localized/ru/13
localized/ru/14
localized/ru/1653
localized/ru/1654
localized/ru/1655
localized/ru/1656
localized/ru/1657
localized/ru/1658
localized/ru/1659
localized/ru/1669
localized/ru/1728
localized/ru/1753
localized/ru/1805
localized/ru/19
localized/ru/2
localized/ru/2222
localized/ru/2223
localized/ru/2224
localized/ru/2225
localized/ru/2226
localized/ru/2227
localized/ru/2228
localized/ru/2229
localized/ru/2230
localized/ru/2231
localized/ru/2232
localized/ru/2266
localized/ru/2291
localized/ru/2292
localized/ru/23
localized/ru/2324
localized/ru/2382
localized/ru/2383
localized/ru/2384
localized/ru/24
localized/ru/254
localized/ru/255
localized/ru/256
localized/ru/257
localized/ru/258
localized/ru/2597
localized/ru/2598
localized/ru/2599
localized/ru/26
localized/ru/2600
localized/ru/2601
localized/ru/2602
localized/ru/2603
localized/ru/2604
localized/ru/2605
localized/ru/2606
localized/ru/2607
localized/ru/2608
localized/ru/2609
localized/ru/2610
localized/ru/2611
localized/ru/2619
localized/ru/262
localized/ru/2620
localized/ru/264
localized/ru/2673
localized/ru/2697
localized/ru/2698
localized/ru/27
localized/ru/2705
localized/ru/2715
localized/ru/2724
localized/ru/28
localized/ru/2805
localized/ru/2806
localized/ru/2807
localized/ru/2808
localized/ru/2810
localized/ru/2812
localized/ru/2859
localized/ru/3
localized/ru/330
localized/ru/34
localized/ru/35
localized/ru/358
localized/ru/36
localized/ru/361
localized/ru/4
localized/ru/408
localized/ru/5
localized/ru/6
localized/ru/644
localized/ru/645
localized/ru/646
localized/ru/647
localized/ru/649
localized/ru/663
localized/ru/664
localized/ru/665
localized/ru/7
localized/ru/720
localized/ru/739
localized/ru/799
localized/ru/8
localized/ru/800
localized/ru/9
localized/sk/2859
localized/sk/739
localized/sl/2859
localized/sl/739
localized/sr/2859
localized/sr/739
localized/sv/1
localized/sv/10
localized/sv/1068
localized/sv/1069
localized/sv/1070
localized/sv/1071
localized/sv/1076
localized/sv/1077
localized/sv/1078
localized/sv/1080
localized/sv/1093
localized/sv/11
localized/sv/12
localized/sv/13
localized/sv/14
localized/sv/1653
localized/sv/1654
localized/sv/1655
localized/sv/1656
localized/sv/1657
localized/sv/1658
localized/sv/1659
localized/sv/1669
localized/sv/1728
localized/sv/1753
localized/sv/1805
localized/sv/19
localized/sv/2
localized/sv/2222
localized/sv/2223
localized/sv/2224
localized/sv/2225
localized/sv/2226
localized/sv/2227
localized/sv/2228
localized/sv/2229
localized/sv/2230
localized/sv/2231
localized/sv/2232
localized/sv/2266
localized/sv/2291
localized/sv/2292
localized/sv/23
localized/sv/2324
localized/sv/2382
localized/sv/2383
localized/sv/2384
localized/sv/24
localized/sv/254
localized/sv/255
localized/sv/256
localized/sv/257
localized/sv/258
localized/sv/2597
localized/sv/2598
localized/sv/2599
localized/sv/26
localized/sv/2600
localized/sv/2601
localized/sv/2602
localized/sv/2603
localized/sv/2604
localized/sv/2605
localized/sv/2606
localized/sv/2607
localized/sv/2608
localized/sv/2609
localized/sv/2610
localized/sv/2611
localized/sv/2619
localized/sv/262
localized/sv/2620
localized/sv/264
localized/sv/2673
localized/sv/2697
localized/sv/2698
localized/sv/27
localized/sv/2705
localized/sv/2715
localized/sv/2724
localized/sv/28
localized/sv/2805
localized/sv/2806
localized/sv/2807
localized/sv/2808
localized/sv/2810
localized/sv/2812
localized/sv/2859
localized/sv/3
localized/sv/330
localized/sv/34
localized/sv/35
localized/sv/358
localized/sv/36
localized/sv/361
localized/sv/4
localized/sv/408
localized/sv/5
localized/sv/6
localized/sv/644
localized/sv/645
localized/sv/646
localized/sv/647
localized/sv/649
localized/sv/663
localized/sv/664
localized/sv/665
localized/sv/7
localized/sv/720
localized/sv/739
localized/sv/799
localized/sv/8
localized/sv/800
localized/sv/9
localized/th/2859
localized/th/739
localized/tr/1
localized/tr/10
localized/tr/1068
localized/tr/1069
localized/tr/1070
localized/tr/1071
localized/tr/1076
localized/tr/1077
localized/tr/1078
localized/tr/1080
localized/tr/1093
localized/tr/11
localized/tr/12
localized/tr/13
localized/tr/14
localized/tr/1653
localized/tr/1654
localized/tr/1655
localized/tr/1656
localized/tr/1657
localized/tr/1658
localized/tr/1659
localized/tr/1669
localized/tr/1728
localized/tr/1753
localized/tr/1805
localized/tr/19
localized/tr/2
localized/tr/2222
localized/tr/2223
localized/tr/2224
localized/tr/2225
localized/tr/2226
localized/tr/2227
localized/tr/2228
localized/tr/2229
localized/tr/2230
localized/tr/2231
localized/tr/2232
localized/tr/2266
localized/tr/2291
localized/tr/2292
localized/tr/23
localized/tr/2324
localized/tr/2382
localized/tr/2383
localized/tr/2384
localized/tr/24
localized/tr/254
localized/tr/255
localized/tr/256
localized/tr/257
localized/tr/258
localized/tr/2597
localized/tr/2598
localized/tr/2599
localized/tr/26
localized/tr/2600
localized/tr/2601
localized/tr/2602
localized/tr/2603
localized/tr/2604
localized/tr/2605
localized/tr/2606
localized/tr/2607
localized/tr/2608
localized/tr/2609
localized/tr/2610
localized/tr/2611
localized/tr/2619
localized/tr/262
localized/tr/2620
localized/tr/264
localized/tr/2673
localized/tr/2697
localized/tr/2698
localized/tr/27
localized/tr/2705
localized/tr/2715
localized/tr/2724
localized/tr/28
localized/tr/2805
localized/tr/2806
localized/tr/2807
localized/tr/2808
localized/tr/2810
localized/tr/2812
localized/tr/2859
localized/tr/3
localized/tr/330
localized/tr/34
localized/tr/35
localized/tr/358
localized/tr/36
localized/tr/361
localized/tr/4
localized/tr/408
localized/tr/5
localized/tr/6
localized/tr/644
localized/tr/645
localized/tr/646
localized/tr/647
localized/tr/649
localized/tr/663
localized/tr/664
localized/tr/665
localized/tr/7
localized/tr/720
localized/tr/739
localized/tr/799
localized/tr/8
localized/tr/800
localized/tr/9
localized/uk/2859
localized/uk/739
localized/zh-HK/2859
localized/zh-HK/739
localized/zh-cn/1
localized/zh-cn/10
localized/zh-cn/1068
localized/zh-cn/1069
localized/zh-cn/1070
localized/zh-cn/1071
localized/zh-cn/1076
localized/zh-cn/1077
localized/zh-cn/1078
localized/zh-cn/1080
localized/zh-cn/1093
localized/zh-cn/11
localized/zh-cn/12
localized/zh-cn/13
localized/zh-cn/14
localized/zh-cn/1653
localized/zh-cn/1654
localized/zh-cn/1655
localized/zh-cn/1656
localized/zh-cn/1657
localized/zh-cn/1658
localized/zh-cn/1659
localized/zh-cn/1669
localized/zh-cn/1728
localized/zh-cn/1753
localized/zh-cn/1805
localized/zh-cn/19
localized/zh-cn/2
localized/zh-cn/2222
localized/zh-cn/2223
localized/zh-cn/2224
localized/zh-cn/2225
localized/zh-cn/2226
localized/zh-cn/2227
localized/zh-cn/2228
localized/zh-cn/2229
localized/zh-cn/2230
localized/zh-cn/2231
localized/zh-cn/2232
localized/zh-cn/2266
localized/zh-cn/2273
localized/zh-cn/2291
localized/zh-cn/2292
localized/zh-cn/23
localized/zh-cn/2324
localized/zh-cn/2382
localized/zh-cn/2383
localized/zh-cn/2384
localized/zh-cn/24
localized/zh-cn/254
localized/zh-cn/255
localized/zh-cn/256
localized/zh-cn/257
localized/zh-cn/258
localized/zh-cn/2597
localized/zh-cn/2598
localized/zh-cn/2599
localized/zh-cn/26
localized/zh-cn/2600
localized/zh-cn/2601
localized/zh-cn/2602
localized/zh-cn/2603
localized/zh-cn/2604
localized/zh-cn/2605
localized/zh-cn/2606
localized/zh-cn/2607
localized/zh-cn/2608
localized/zh-cn/2609
localized/zh-cn/2610
localized/zh-cn/2611
localized/zh-cn/2619
localized/zh-cn/262
localized/zh-cn/2620
localized/zh-cn/264
localized/zh-cn/2673
localized/zh-cn/2697
localized/zh-cn/2698
localized/zh-cn/27
localized/zh-cn/2705
localized/zh-cn/2715
localized/zh-cn/2724
localized/zh-cn/28
localized/zh-cn/2805
localized/zh-cn/2806
localized/zh-cn/2807
localized/zh-cn/2808
localized/zh-cn/2810
localized/zh-cn/2812
localized/zh-cn/2859
localized/zh-cn/3
localized/zh-cn/330
localized/zh-cn/34
localized/zh-cn/35
localized/zh-cn/358
localized/zh-cn/36
localized/zh-cn/361
localized/zh-cn/4
localized/zh-cn/408
localized/zh-cn/5
localized/zh-cn/6
localized/zh-cn/644
localized/zh-cn/645
localized/zh-cn/646
localized/zh-cn/647
localized/zh-cn/649
localized/zh-cn/663
localized/zh-cn/664
localized/zh-cn/665
localized/zh-cn/7
localized/zh-cn/720
localized/zh-cn/739
localized/zh-cn/799
localized/zh-cn/8
localized/zh-cn/800
localized/zh-cn/9
localized/zh-tw/1
localized/zh-tw/10
localized/zh-tw/1068
localized/zh-tw/1069
localized/zh-tw/1070
localized/zh-tw/1071
localized/zh-tw/1076
localized/zh-tw/1077
localized/zh-tw/1078
localized/zh-tw/1080
localized/zh-tw/1093
localized/zh-tw/11
localized/zh-tw/12
localized/zh-tw/13
localized/zh-tw/14
localized/zh-tw/1653
localized/zh-tw/1654
localized/zh-tw/1655
localized/zh-tw/1656
localized/zh-tw/1657
localized/zh-tw/1658
localized/zh-tw/1659
localized/zh-tw/1669
localized/zh-tw/1728
localized/zh-tw/1753
localized/zh-tw/1805
localized/zh-tw/19
localized/zh-tw/2
localized/zh-tw/2222
localized/zh-tw/2223
localized/zh-tw/2224
localized/zh-tw/2225
localized/zh-tw/2226
localized/zh-tw/2227
localized/zh-tw/2228
localized/zh-tw/2229
localized/zh-tw/2230
localized/zh-tw/2231
localized/zh-tw/2232
localized/zh-tw/2266
localized/zh-tw/2273
localized/zh-tw/2291
localized/zh-tw/2292
localized/zh-tw/23
localized/zh-tw/2324
localized/zh-tw/2382
localized/zh-tw/2383
localized/zh-tw/2384
localized/zh-tw/24
localized/zh-tw/254
localized/zh-tw/255
localized/zh-tw/256
localized/zh-tw/257
localized/zh-tw/258
localized/zh-tw/2597
localized/zh-tw/2598
localized/zh-tw/2599
localized/zh-tw/26
localized/zh-tw/2600
localized/zh-tw/2601
localized/zh-tw/2602
localized/zh-tw/2603
localized/zh-tw/2604
localized/zh-tw/2605
localized/zh-tw/2606
localized/zh-tw/2607
localized/zh-tw/2608
localized/zh-tw/2609
localized/zh-tw/2610
localized/zh-tw/2611
localized/zh-tw/2619
localized/zh-tw/262
localized/zh-tw/2620
localized/zh-tw/264
localized/zh-tw/2673
localized/zh-tw/2697
localized/zh-tw/2698
localized/zh-tw/27
localized/zh-tw/2705
localized/zh-tw/2715
localized/zh-tw/2724
localized/zh-tw/28
localized/zh-tw/2805
localized/zh-tw/2806
localized/zh-tw/2807
localized/zh-tw/2808
localized/zh-tw/2810
localized/zh-tw/2812
localized/zh-tw/2859
localized/zh-tw/3
localized/zh-tw/330
localized/zh-tw/34
localized/zh-tw/35
localized/zh-tw/358
localized/zh-tw/36
localized/zh-tw/361
localized/zh-tw/4
localized/zh-tw/408
localized/zh-tw/5
localized/zh-tw/6
localized/zh-tw/644
localized/zh-tw/645
localized/zh-tw/646
localized/zh-tw/647
localized/zh-tw/649
localized/zh-tw/663
localized/zh-tw/664
localized/zh-tw/665
localized/zh-tw/7
localized/zh-tw/720
localized/zh-tw/739
localized/zh-tw/799
localized/zh-tw/8
localized/zh-tw/800
localized/zh-tw/9
package.xml
Windows6.1-KB2999226-x64-pkgProperties.txt
Windows6.1-KB2999226-x64.cab
.cab
0
1
10
11
12
13
14
15
16
17
18
19
2
20
21
22
23
24
25
26
27
28
29
3
30
31
32
33
34
35
36
37
38
39
4
40
41
42
43
44
45
46
47
5
6
7
8
9
_manifest_.cix.xml
.xml
amd64_db464a62d198e4a5fee596fc8a86001a_31bf3856ad364e35_6.1.7601.23175_none_67e7f47989b48fd6.manifest
.xml
amd64_e2be56ad6825e0cd2e1d8735cc4db509_31bf3856ad364e35_6.1.7601.18972_none_9ae1ebc3ffdf0fa3.manifest
.xml
amd64_microsoft-windows-u..rsalcrt-apifwd-win7_31bf3856ad364e35_6.1.7601.18972_none_a9a51144251fb166.manifest
.xml
amd64_microsoft-windows-u..rsalcrt-apifwd-win7_31bf3856ad364e35_6.1.7601.23175_none_aa31870f3e3ad077.manifest
.xml
amd64_microsoft-windows-ucrt_31bf3856ad364e35_6.1.7601.18972_none_09a44b6a3051f6fe.manifest
.xml
amd64_microsoft-windows-ucrt_31bf3856ad364e35_6.1.7601.23175_none_0a30c135496d160f.manifest
.xml
package_1_for_kb2999226_bf~31bf3856ad364e35~amd64~~6.1.1.7.cat
package_1_for_kb2999226_bf~31bf3856ad364e35~amd64~~6.1.1.7.mum
.xml
package_1_for_kb2999226~31bf3856ad364e35~amd64~~6.1.1.7.cat
package_1_for_kb2999226~31bf3856ad364e35~amd64~~6.1.1.7.mum
.xml
package_2_for_kb2999226_bf~31bf3856ad364e35~amd64~~6.1.1.7.cat
package_2_for_kb2999226_bf~31bf3856ad364e35~amd64~~6.1.1.7.mum
.xml
package_2_for_kb2999226~31bf3856ad364e35~amd64~~6.1.1.7.cat
package_2_for_kb2999226~31bf3856ad364e35~amd64~~6.1.1.7.mum
.xml
package_for_kb2999226_sp1_bf~31bf3856ad364e35~amd64~~6.1.1.7.cat
package_for_kb2999226_sp1_bf~31bf3856ad364e35~amd64~~6.1.1.7.mum
.xml
package_for_kb2999226_sp1~31bf3856ad364e35~amd64~~6.1.1.7.cat
package_for_kb2999226_sp1~31bf3856ad364e35~amd64~~6.1.1.7.mum
.xml
update-bf.cat
update-bf.mum
.xml
update.cat
update.mum
x86_microsoft-windows-u..rsalcrt-apifwd-win7_31bf3856ad364e35_6.1.7601.18972_none_4d8675c06cc24030.manifest
.xml
x86_microsoft-windows-u..rsalcrt-apifwd-win7_31bf3856ad364e35_6.1.7601.23175_none_4e12eb8b85dd5f41.manifest
.xml
x86_microsoft-windows-ucrt_31bf3856ad364e35_6.1.7601.18972_none_ad85afe677f485c8.manifest
.xml
x86_microsoft-windows-ucrt_31bf3856ad364e35_6.1.7601.23175_none_ae1225b1910fa4d9.manifest
.xml
Windows6.1-KB2999226-x64.xml
.xml
$TEMP/Windows6.1-KB3063858-x64.msu
.cab
WSUSSCAN.cab
.cab
package.cab
.cab
Windows6.1-KB3063858-x64-pkgProperties.txt
Windows6.1-KB3063858-x64.cab
.cab
Windows6.1-KB3063858-x64.xml
.xml
$TEMP/vc_redist.x64.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:99:aa:c5:81:9f:8c:a2:7d:8a:00:00:00:00:00:99
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/03/2016, 19:21

Not After

30/06/2017, 19:21

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:e4:58:89:7d:c3:8c:b1:ae:3a:85:2b:9c:01:09:87:69:78:cd:b0:a2:c0:16:f4:3b:f9:40:f8:a6:ec:c8:b4
Signer

Actual PE Digest

82:e4:58:89:7d:c3:8c:b1:ae:3a:85:2b:9c:01:09:87:69:78:cd:b0:a2:c0:16:f4:3b:f9:40:f8:a6:ec:c8:b4

Digest Algorithm

sha256

PE Digest Matches

true

3c:b9:24:16:b8:fe:13:b9:fc:bf:be:fb:41:75:c4:33:9a:a6:0b:24
Signer

Actual PE Digest

3c:b9:24:16:b8:fe:13:b9:fc:bf:be:fb:41:75:c4:33:9a:a6:0b:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/windowsdesktop-runtime-3.1.10-win-x64.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d9:be:43:c3:9e:be:5e:55:9f:42:65:34:56:9f:c4:d0:bf:da:8c:17:51:cf:de:bd:62:36:f6:01:a9:bc:02:8b
Signer

Actual PE Digest

d9:be:43:c3:9e:be:5e:55:9f:42:65:34:56:9f:c4:d0:bf:da:8c:17:51:cf:de:bd:62:36:f6:01:a9:bc:02:8b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/windowsdesktop-runtime-3.1.10-win-x86.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:87:72:17:72:15:59:40:c7:09:00:00:00:00:01:87
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/03/2020, 18:39

Not After

03/03/2021, 18:39

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:24:db:a1:0d:35:aa:fd:e7:d5:02:7c:b8:a6:14:a9:cc:f3:84:80:16:95:98:3c:69:db:74:e2:a8:2f:62:71
Signer

Actual PE Digest

3b:24:db:a1:0d:35:aa:fd:e7:d5:02:7c:b8:a6:14:a9:cc:f3:84:80:16:95:98:3c:69:db:74:e2:a8:2f:62:71

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
app.7z
.7z

Sharing

General

Malware Config

Signatures

Files

be41bf7b8cc010b614bd36bbca606973

Code Sign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

77:9b:83:a7:52:09:fa:cd:de:c2:a3:eeCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

53:19:65:7a:3b:9c:32:a6:a0:2f:a3:b0:6f:ab:d3:76:81:55:3a:10:9f:43:e2:d3:17:df:dc:c4:5b:0a:6c:e9Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 458KB

.ndata Size: - Virtual size: 1.1MB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 4KB - Virtual size: 3KB

db2755f409b81c4dbfc04f648cfb80b9

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 987B

.reloc Size: 512B - Virtual size: 66B

039bcbc605477e8e87ec550c2e60e748

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 963B

.data Size: 512B - Virtual size: 64B

.reloc Size: 1024B - Virtual size: 588B

8700d0ebbb41c81ea52718af1ab70a93

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

77:9b:83:a7:52:09:fa:cd:de:c2:a3:ee
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

53:19:65:7a:3b:9c:32:a6:a0:2f:a3:b0:6f:ab:d3:76:81:55:3a:10:9f:43:e2:d3:17:df:dc:c4:5b:0a:6c:e9
Signer

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 458KB

.ndata
Size: - Virtual size: 1.1MB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 1024B - Virtual size: 987B

.reloc
Size: 512B - Virtual size: 66B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 1024B - Virtual size: 588B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 454B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

10:5b:56:60:0c:56:b9:bb:a1:f5:14:1e:28:10:6e:28
Certificate

0c:18:54:55:1d:b1:d0:ea:96:7f:28:4b:65:ec:26:43:33:f9:09:47
Signer

.text
Size: 790KB - Virtual size: 789KB

.rdata
Size: 127KB - Virtual size: 126KB

.data
Size: 11KB - Virtual size: 22KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 45KB - Virtual size: 45KB

.text
Size: 1024B - Virtual size: 993B

.rdata
Size: 1024B - Virtual size: 566B

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 218B

.text
Size: 218KB - Virtual size: 218KB

.rdata
Size: 58KB - Virtual size: 58KB