nwt_setup_3[.]4[.]3055[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

nwt_setup_3.4.3055.exe
Size

41.4MB
MD5

10f1ae3ccc9a12ffe6292d83c0964d38
SHA1

9df0d05922f577bf63eaf6d25fb5999ed04e2873
SHA256

5e61fa1c736572f1fc0f27b1121629315e3dffa800e7a9599348038241ed986c
SHA512

97548c28d422d32c86dfcaa5bb0e83f0fe8fa16c666156bb021337e4079fc3f61ab807e04b90f9e31bce8b5ae9d385615949bb4cd8d74311ead1985a04832fd7
SSDEEP

786432:zyz82JH3XMLvF8tLCwx2zRf+ftgt7IknMDF9J5N0LawrOmLLrFoWCbfvlf:Oz82Xq+tLCwxDDDFWHtCJf

Score

3^/10

qr link

Malware Config

Signatures

One or more HTTP URLs in qr code identified
Detects presence of HTTP links in QR codes.
qr link

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/Rfshdktp.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/uninst.exe
unpack007/$PLUGINSDIR/Rfshdktp.dll
unpack007/$PLUGINSDIR/System.dll

Files

nwt_setup_3.4.3055.exe
.exe windows:5 windows x86 arch:x86

32f3282581436269b3a75b6675fe3e08

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/04/2021, 00:00

Not After

05/04/2024, 23:59

Subject

CN=Shanghai Qiyeyu Network Technology Co.\, Ltd.,O=Shanghai Qiyeyu Network Technology Co.\, Ltd.,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a7:83:20:89:4c:5f:d9:f1:c2:6b:ff:d8:4e:df:e5:38:a7:63:cb:be
Signer

Actual PE Digest

a7:83:20:89:4c:5f:d9:f1:c2:6b:ff:d8:4e:df:e5:38:a7:63:cb:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 532KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$EXEDIR/uninst.exe.nsis
$PLUGINSDIR/LanSetup.dll
.dll windows:5 windows x86 arch:x86

2026bd01f05ccba00b46532ee089b485

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/04/2021, 00:00

Not After

05/04/2024, 23:59

Subject

CN=Shanghai Qiyeyu Network Technology Co.\, Ltd.,O=Shanghai Qiyeyu Network Technology Co.\, Ltd.,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

57:21:38:60:47:28:29:74:9a:0c:04:9c:fa:78:db:f6:8f:9d:5c:52
Signer

Actual PE Digest

57:21:38:60:47:28:29:74:9a:0c:04:9c:fa:78:db:f6:8f:9d:5c:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\CI\workspace\workspace\lan\Lan\Bin\Release\LanSetup.pdb

Imports

gdiplus

GdipCreateFromHDC
GdipDeleteGraphics
GdipGraphicsClear
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipDrawLineI
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawPath
GdipSetSmoothingMode
GdipDeletePath
GdipCreatePath
GdipCreatePen2
GdipSetLinePresetBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCreateFont
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipDeleteFontFamily
GdipTranslateTextureTransform
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipImageSelectActiveFrame
GdipImageRotateFlip
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromStream
GdipCreateTexture
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromFile
GdipAddPathArcI
GdipAddPathLineI
GdipGetPathWorldBounds
GdipMeasureString
GdipSetLineWrapMode
GdipCreateLineBrushFromRectI
GdipFillRectangleI
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDrawImageI
GdipSetSolidFillColor
GdipDrawImageRectI
GdipSetInterpolationMode
GdipFillPath
GdipSetTextRenderingHint
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipAddPathString
GdipDrawString
GdipCreateSolidFill
GdipSetStringFormatLineAlign
GdiplusStartup

winmm

timeBeginPeriod

wldap32

ord143
ord26
ord211
ord22
ord50
ord60
ord46
ord41
ord27
ord301
ord33
ord200
ord79
ord35
ord32
ord30

kernel32

InterlockedCompareExchange
HeapAlloc
IsProcessorFeaturePresent
HeapFree
GetProcessHeap
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
ExitThread
CreateThread
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetFileInformationByHandle
SetFilePointer
GetDriveTypeA
FindFirstFileA
RtlUnwind
HeapCreate
ExitProcess
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
InitializeCriticalSection
SizeofResource
LeaveCriticalSection
GetModuleFileNameW
WriteFile
lstrlenW
RaiseException
GetLastError
GetProcAddress
EnterCriticalSection
lstrcmpiW
DeleteCriticalSection
CreateEventW
WaitForSingleObject
TerminateProcess
GetCurrentProcess
CopyFileW
MoveFileExW
DeleteFileW
WideCharToMultiByte
LoadLibraryW
GetCurrentThreadId
SetEvent
FlushInstructionCache
SetLastError
GlobalLock
GlobalSize
GlobalUnlock
lstrlenA
LockResource
GlobalAlloc
GetVersionExW
MulDiv
lstrcpynW
TerminateThread
Sleep
CloseHandle
GetTickCount
OpenProcess
FileTimeToSystemTime
GetTempPathW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
ReadFile
CreateFileW
FindClose
SleepEx
FormatMessageA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
LoadLibraryA
ExpandEnvironmentStringsA
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetModuleHandleA
SetStdHandle
FlushFileBuffers
GetFullPathNameA
CreateFileA
GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
MultiByteToWideChar

user32

GetClipboardData
CloseClipboard
RegisterClipboardFormatW
GetWindowPlacement
UnregisterClassA
DrawIconEx
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
DrawTextW
DefWindowProcW
CallWindowProcW
LoadIconW
IsClipboardFormatAvailable
EqualRect
GetKeyState
OpenClipboard
LoadImageW
GetClassInfoExW
RegisterClassExW
ValidateRect
IsWindowVisible
RedrawWindow
GetWindowTextLengthW
GetWindowTextW
IsRectEmpty
TrackMouseEvent
CharLowerW
LoadStringW
CreateDialogParamW
EnableWindow
UpdateWindow
ReleaseDC
GetDC
IsIconic
CreateWindowExW
FillRect
InvalidateRect
ReleaseCapture
SetCapture
SetWindowTextW
DestroyIcon
UpdateLayeredWindow
EndPaint
BeginPaint
SetWindowRgn
GetSystemMetrics
SystemParametersInfoW
PtInRect
IsZoomed
LoadCursorW
SetCursor
GetCursorPos
ScreenToClient
SetFocus
SetForegroundWindow
GetCapture
IsChild
GetClassNameW
IsWindowEnabled
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
MoveWindow
ClientToScreen
GetActiveWindow
IsWindow
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
GetDesktopWindow
SetWindowLongW
SetTimer
KillTimer
GetDlgItem
SendMessageW
PostMessageW
CharNextW
CopyRect

gdi32

SetBkMode
CreateFontIndirectW
DPtoLP
GetTextExtentPoint32W
SetTextColor
SetBkColor
GdiFlush
SetDIBColorTable
CreateDIBSection
GetDeviceCaps
SetViewportOrgEx
CreateSolidBrush
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
DeleteObject
BitBlt
DeleteDC
CreateRoundRectRgn

comdlg32

GetSaveFileNameW

advapi32

RegQueryInfoKeyW
GetLengthSid
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
RegCreateKeyExW
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW

shell32

ShellExecuteW
ShellExecuteExW
DragQueryFileW
SHGetFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarUI4FromStr
SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

ws2_32

ioctlsocket
select
__WSAFDIsSet
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
WSASetLastError
connect
getpeername
getsockopt
getsockname
setsockopt
send
recv
WSAGetLastError
gethostname
WSACleanup
WSAStartup
closesocket
socket
bind
ntohs
htons

Exports

Exports

AddFirewall
Create
FinishSetup
FinishUninst
KillProcess
RepFile
StartSetup
StartUninst
Terminate
UpdateSetupProgress
UpdateUninstProgress

Sections

.text
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Rfshdktp.dll
.dll windows:4 windows x86 arch:x86

042f3c184e7c0923b6325ab1dc09aed7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetSpecialFolderLocation
SHChangeNotify

Exports

Exports

refreshDesktop

Sections

.text
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CrashRpt.exe
.exe windows:5 windows x86 arch:x86

4b5c61b9c5f0bf1c30f7f2ccdc3621c1

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:64:1b:bc:4b:43:dd:b0:46:e5:be:ef:f7:24:d7:a9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

27/09/2013, 00:00

Not After

27/12/2015, 23:59

Subject

CN=IMO Network Technology Co.Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=IMO Network Technology Co.Ltd,O=IMO Network Technology Co.Ltd,L=shanghai,ST=shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f3:38:2a:db:a5:cc:cb:f2:4a:33:88:82:50:29:5d:a1:14:69:82:59
Signer

Actual PE Digest

f3:38:2a:db:a5:cc:cb:f2:4a:33:88:82:50:29:5d:a1:14:69:82:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
freeaddrinfo
closesocket
connect
socket
WSAStartup
getaddrinfo
recv
send

dnsapi

DnsQuery_W
DnsFree

kernel32

DeleteFileW
RaiseException
SetLastError
FlushInstructionCache
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetModuleFileNameW
lstrlenW
GetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
lstrcmpiW
CreateThread
GetTimeZoneInformation
WideCharToMultiByte
GetTempFileNameW
GetTempPathW
SystemTimeToTzSpecificLocalTime
GetProcAddress
LoadLibraryW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalFree
FormatMessageW
GetFileAttributesW
CreateDirectoryW
SystemTimeToFileTime
GetFileAttributesExW
ReadFile
CreateFileW
CloseHandle
FindFirstFileW
GetDriveTypeW
FindClose
GetTickCount
Sleep
FileTimeToSystemTime
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
SetHandleCount
GetEnvironmentVariableW
GetModuleHandleA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentDirectoryA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
HeapCreate
GetModuleFileNameA
GetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
GetStartupInfoW
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetDateFormatA
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
ResetEvent
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
GetTimeFormatA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
SetEnvironmentVariableW
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
GetDriveTypeA
CompareStringA
GetCommandLineW
HeapDestroy
HeapAlloc

user32

UnregisterClassA
SetWindowLongW
CreateDialogParamW
DrawTextExW
DestroyWindow
DefWindowProcW
IsDlgButtonChecked
GetWindowTextLengthW
GetWindowTextW
GetDlgItem
ScreenToClient
PostQuitMessage
EndPaint
BeginPaint
GetParent
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
SendMessageW
CheckDlgButton
GetSystemMetrics
LoadImageW
IsDialogMessageW
ShowWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CharNextW

gdi32

SetBkMode
SelectObject
CreatePen
MoveToEx
DeleteObject
CreateFontIndirectW
SetBkColor
ExtTextOutW
LineTo
DeleteDC

advapi32

RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW

shell32

SHFileOperationW
SHGetSpecialFolderPathW
ShellExecuteW

ole32

CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoUninitialize

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Emotion/101.gif
.gif
Emotion/101.png
.png
Emotion/102.gif
.gif
Emotion/102.png
.png
Emotion/103.gif
.gif
Emotion/103.png
.png
Emotion/104.gif
.gif
Emotion/104.png
.png
Emotion/105.gif
.gif
Emotion/105.png
.png
Emotion/106.gif
.gif
Emotion/106.png
.png
Emotion/107.gif
.gif
Emotion/107.png
.png
Emotion/108.gif
.gif
Emotion/108.png
.png
Emotion/109.gif
.gif
Emotion/109.png
.png
Emotion/110.gif
.gif
Emotion/110.png
.png
Emotion/111.gif
.gif
Emotion/111.png
.png
Emotion/112.gif
.gif
Emotion/112.png
.png
Emotion/113.gif
.gif
Emotion/113.png
.png
Emotion/114.gif
.gif
Emotion/114.png
.png
Emotion/115.gif
.gif
Emotion/115.png
.png
Emotion/116.gif
.gif
Emotion/116.png
.png
Emotion/117.gif
.gif
Emotion/117.png
.png
Emotion/118.gif
.gif
Emotion/118.png
.png
Emotion/119.gif
.gif
Emotion/119.png
.png
Emotion/120.gif
.gif
Emotion/120.png
.png
Emotion/121.gif
.gif
Emotion/121.png
.png
Emotion/122.gif
.gif
Emotion/122.png
.png
Emotion/123.gif
.gif
Emotion/123.png
.png
Emotion/124.gif
.gif
Emotion/124.png
.png
Emotion/125.gif
.gif
Emotion/125.png
.png
Emotion/126.gif
.gif
Emotion/126.png
.png
Emotion/127.gif
.gif
Emotion/127.png
.png
Emotion/128.gif
.gif
Emotion/128.png
.png
Emotion/129.gif
.gif
Emotion/129.png
.png
Emotion/130.gif
.gif
Emotion/130.png
.png
Emotion/131.gif
.gif
Emotion/131.png
.png
Emotion/132.gif
.gif
Emotion/132.png
.png
Emotion/133.gif
.gif
Emotion/133.png
.png
Emotion/2001.gif
Emotion/2001.png
.png
Emotion/2002.gif
Emotion/2002.png
.png
Emotion/2003.gif
Emotion/2003.png
.png
Emotion/2004.gif
Emotion/2004.png
.png
Emotion/2005.gif
Emotion/2005.png
.png
Emotion/2006.gif
Emotion/2006.png
.png
Emotion/2007.gif
Emotion/2007.png
.png
Emotion/2008.gif
Emotion/2008.png
.png
Emotion/2009.gif
Emotion/2009.png
.png
Emotion/201.gif
.gif
Emotion/201.png
.png
Emotion/2010.gif
Emotion/2010.png
.png
Emotion/2011.gif
Emotion/2011.png
.png
Emotion/2012.gif
Emotion/2012.png
.png
Emotion/2013.gif
Emotion/2013.png
.png
Emotion/2014.gif
Emotion/2014.png
.png
Emotion/2015.gif
Emotion/2015.png
.png
Emotion/2016.gif
Emotion/2016.png
.png
Emotion/2017.gif
Emotion/2017.png
.png
Emotion/202.gif
.gif
Emotion/202.png
.png
Emotion/203.gif
.gif
Emotion/203.png
.png
Emotion/204.gif
.gif
Emotion/204.png
.png
Emotion/205.gif
.gif
Emotion/205.png
.png
Emotion/206.gif
.gif
Emotion/206.png
.png
Emotion/207.gif
.gif
Emotion/207.png
.png
Emotion/208.gif
.gif
Emotion/208.png
.png
Emotion/209.gif
.gif
Emotion/209.png
.png
Emotion/210.gif
.gif
Emotion/210.png
.png
Emotion/211.gif
.gif
Emotion/211.png
.png
Emotion/212.gif
.gif
Emotion/212.png
.png
Emotion/213.gif
.gif
Emotion/213.png
.png
Emotion/214.gif
.gif
Emotion/214.png
.png
Emotion/215.gif
.gif
Emotion/215.png
.png
Emotion/216.gif
.gif
Emotion/216.png
.png
Emotion/217.gif
.gif
Emotion/217.png
.png
Emotion/218.gif
.gif
Emotion/218.png
.png
Emotion/219.gif
.gif
Emotion/219.png
.png
Emotion/220.gif
.gif
Emotion/220.png
.png
Emotion/221.gif
.gif
Emotion/221.png
.png
Emotion/222.gif
.gif
Emotion/222.png
.png
Emotion/223.gif
.gif
Emotion/223.png
.png
Emotion/224.gif
.gif
Emotion/224.png
.png
Emotion/225.gif
.gif
Emotion/225.png
.png
Emotion/226.gif
.gif
Emotion/226.png
.png
Emotion/228.gif
.gif
Emotion/228.png
.png
Emotion/229.gif
.gif
Emotion/229.png
.png
Emotion/230.gif
.gif
Emotion/230.png
.png
Emotion/231.gif
.gif
Emotion/231.png
.png
Emotion/232.gif
.gif
Emotion/232.png
.png
Emotion/233.gif
.gif
Emotion/233.png
.png
Emotion/234.gif
.gif
Emotion/234.png
.png
Emotion/235.gif
.gif
Emotion/235.png
.png
Emotion/236.gif
.gif
Emotion/236.png
.png
Emotion/237.gif
.gif
Emotion/237.png
.png
Emotion/238.gif
.gif
Emotion/238.png
.png
Emotion/239.gif
.gif
Emotion/239.png
.png
Emotion/240.gif
.gif
Emotion/240.png
.png
Emotion/241.gif
.gif
Emotion/241.png
.png
Emotion/242.gif
.gif
Emotion/242.png
.png
Emotion/243.gif
.gif
Emotion/243.png
.png
Emotion/244.gif
.gif
Emotion/244.png
.png
Emotion/245.gif
.gif
Emotion/245.png
.png
Emotion/246.gif
.gif
Emotion/246.png
.png
Emotion/247.gif
.gif
Emotion/247.png
.png
Emotion/248.gif
.gif
Emotion/248.png
.png
Emotion/249.gif
.gif
Emotion/249.png
.png
Emotion/250.gif
.gif
Emotion/250.png
.png
Emotion/251.gif
.gif
Emotion/251.png
.png
Emotion/261.gif
.gif
Emotion/261.png
.png
Emotion/Emotion.xml
Help/Help.htm
.html .js polyglot
Help/add1.png
.png
Help/add2.png
.png
Help/add3.png
.png
Help/autoclose1.png
.png
Help/autoclose2.png
.png
Help/autoclose3.png
.png
Help/back1.png
.png
Help/back2.png
.png
Help/back3.png
.png
Help/feedback1.png
.png
Help/feedback2.png
.png
Help/feedback3.png
.png
Help/firewall1.jpg
.jpg
Help/firewall2.jpg
.jpg
Help/firewall3.jpg
.jpg
Help/firewall71.jpg
.jpg
Help/firewall72.jpg
.jpg
Help/firewall73.jpg
.jpg
Help/firewall74.jpg
.jpg
Help/firewall75.jpg
.jpg
Help/network1.jpg
.jpg
Help/scan1.png
.png
Help/scan2.png
.png
Help/scan3.png
.png
Help/subnet1.jpg
.jpg
LiveUpdate.exe
.exe windows:5 windows x86 arch:x86

d12044ffc1b3cfee653d64d830f09c9b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/04/2021, 00:00

Not After

05/04/2024, 23:59

Subject

CN=Shanghai Qiyeyu Network Technology Co.\, Ltd.,O=Shanghai Qiyeyu Network Technology Co.\, Ltd.,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4d:ee:fc:7c:10:9e:13:4c:f3:21:52:03:8d:88:65:f4:9b:76:40:59
Signer

Actual PE Digest

4d:ee:fc:7c:10:9e:13:4c:f3:21:52:03:8d:88:65:f4:9b:76:40:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCreateFont
GdipCreateFontFamilyFromName
GdipDeleteFont
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipGraphicsClear
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipLoadImageFromFile
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDeleteFontFamily
GdipTranslateTextureTransform
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipImageSelectActiveFrame
GdipImageRotateFlip
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipAddPathArcI
GdipAddPathLineI
GdipGetPathWorldBounds
GdipMeasureString
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDrawImageI
GdipSetSolidFillColor
GdipSetTextRenderingHint
GdipAddPathString
GdipDrawString
GdipCreateSolidFill
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawPath
GdipSetSmoothingMode
GdipCreatePen2
GdipSetLinePresetBlend
GdipCreateLineBrushI
GdipDrawLineI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipSetInterpolationMode
GdipLoadImageFromStream
GdipFillPath
GdipCreateTexture
GdipDeletePath
GdipCreatePath
GdipDrawImageRectI
GdipFillRectangleI
GdipSetLineWrapMode
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRectI
GdipDrawImageRectRectI

kernel32

VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
IsDebuggerPresent
GetStartupInfoW
ExitThread
CreateThread
GetSystemTimeAsFileTime
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
GetCommandLineW
LoadLibraryW
DeleteCriticalSection
RaiseException
IsValidCodePage
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetModuleFileNameW
lstrlenW
GetLastError
InitializeCriticalSection
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
MoveFileExW
CopyFileW
WideCharToMultiByte
LockResource
FindResourceExW
WaitForSingleObject
TerminateThread
Sleep
CloseHandle
VirtualAlloc
GetTickCount
OpenProcess
GetVersionExW
TerminateProcess
GetProcAddress
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
ReadFile
CreateFileW
DeleteFileW
GetCurrentProcess
FlushInstructionCache
SetLastError
GlobalLock
GlobalSize
GlobalUnlock
GlobalAlloc
MulDiv
lstrcpynW
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
SetFilePointer
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
RtlUnwind
UnhandledExceptionFilter
lstrlenA
SetUnhandledExceptionFilter
WriteConsoleW
SetStdHandle
FlushFileBuffers
CreateFileA
SetEndOfFile
GetModuleHandleA
EnterCriticalSection

user32

CreateDialogParamW
TrackMouseEvent
LoadStringW
LoadImageW
OpenClipboard
GetClipboardData
CloseClipboard
RegisterClipboardFormatW
IsWindowVisible
IsRectEmpty
DrawIconEx
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
RedrawWindow
ValidateRect
RegisterClassExW
GetClassInfoExW
GetWindowTextW
GetWindowTextLengthW
IsClipboardFormatAvailable
EqualRect
CallWindowProcW
DrawTextW
GetKeyState
UnregisterClassA
UpdateWindow
ReleaseDC
GetDC
IsIconic
FillRect
InvalidateRect
ReleaseCapture
SetCapture
SetWindowTextW
DestroyIcon
UpdateLayeredWindow
EndPaint
BeginPaint
SetWindowRgn
GetSystemMetrics
SystemParametersInfoW
PtInRect
IsZoomed
LoadCursorW
SetCursor
GetCursorPos
ScreenToClient
SetFocus
SetForegroundWindow
GetCapture
IsChild
GetClassNameW
IsWindowEnabled
GetWindow
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
MoveWindow
ClientToScreen
GetActiveWindow
IsWindow
CharLowerW
GetWindowLongW
CreateWindowExW
RegisterClassW
DefWindowProcW
SetWindowLongW
GetDlgItem
SendMessageW
PostQuitMessage
KillTimer
PostMessageW
SetTimer
CharNextW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetDesktopWindow
ShowWindow
EnableWindow

gdi32

DPtoLP
CreateFontIndirectW
SetBkMode
GetTextExtentPoint32W
SetTextColor
SetBkColor
GetDeviceCaps
GdiFlush
SetDIBColorTable
CreateDIBSection
SetViewportOrgEx
CreateSolidBrush
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
DeleteObject
BitBlt
DeleteDC
CreateRoundRectRgn

comdlg32

GetSaveFileNameW

advapi32

RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW

shell32

DragQueryFileW
SHCreateDirectoryExW
ShellExecuteW
CommandLineToArgvW

ole32

StringFromGUID2
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoCreateGuid
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleInitialize

oleaut32

SysFreeString
SysAllocString
VarUI4FromStr

comctl32

InitCommonControlsEx

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Misc/Sound/Msg.wav
Py
Remote.dll
.dll windows:5 windows x86 arch:x86

0a5914a49d8be6e06e204ebb01b22359

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:64:1b:bc:4b:43:dd:b0:46:e5:be:ef:f7:24:d7:a9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

27/09/2013, 00:00

Not After

27/12/2015, 23:59

Subject

CN=IMO Network Technology Co.Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=IMO Network Technology Co.Ltd,O=IMO Network Technology Co.Ltd,L=shanghai,ST=shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

85:19:9b:a8:ea:36:31:e5:3a:4e:d0:c9:5d:3f:d2:88:84:f4:ed:2b
Signer

Actual PE Digest

85:19:9b:a8:ea:36:31:e5:3a:4e:d0:c9:5d:3f:d2:88:84:f4:ed:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Windows PC\Trunk\Lan\Bin\Release\Remote.pdb

Imports

imm32

ImmAssociateContext

kernel32

DeleteCriticalSection
InitializeCriticalSection
CloseHandle
GetCurrentThreadId
EnterCriticalSection
SetLastError
RaiseException
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
WaitForSingleObject
SetEvent
GetLastError
CreateEventW
Sleep
ResumeThread
CreateThread
FormatMessageW
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
GetLocalTime
ExitThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetModuleHandleW
GetProcAddress
FlushInstructionCache
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
LCMapStringW
SetFilePointer
GetConsoleCP
GetConsoleMode
RtlUnwind
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
InterlockedCompareExchange
GetProcessHeap
IsProcessorFeaturePresent
LeaveCriticalSection
GetFileSizeEx
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindClose
GetModuleHandleA
MoveFileW
CreateFileW
SetFileTime
CreateDirectoryW
GetLogicalDriveStringsW
SetErrorMode
FindFirstFileW
LoadLibraryW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetCurrentProcess
ExitProcess
DuplicateHandle
CreatePipe
SetHandleInformation
LocalAlloc
LocalFree
GetModuleFileNameW
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
GetOverlappedResult
GetComputerNameW
GetVersionExW

user32

UnregisterClassA
RegisterWindowMessageW
GetKeyState
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetPriorityClipboardFormat
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
GetSystemMetrics
SendInput
GetWindowRect
CreateWindowExW
DispatchMessageW
SendMessageW
ChangeClipboardChain
IsClipboardFormatAvailable
PostMessageW
GetMessageW
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
PeekMessageW
WaitMessage
CallNextHookEx
GetCursorPos
GetCursorInfo
GetDC
GetIconInfo
DrawIconEx
IsWindowVisible
EnumWindows
GetClassNameW
GetForegroundWindow
GetWindow
FindWindowExW
GetWindowInfo
EnumDisplayDevicesW
ReleaseDC
SystemParametersInfoW
RegisterClassW
EnumDisplayMonitors
GetWindowThreadProcessId
CloseClipboard
VkKeyScanExW
FindWindowW
GetUserObjectInformationW
SetThreadDesktop
CloseDesktop
OpenDesktopW
OpenInputDesktop
GetWindowTextW
EnumChildWindows
UnregisterClassW
SetClipboardViewer
SetWindowLongW
RegisterClassExW
GetClassInfoExW
LoadCursorW
DestroyWindow
DefWindowProcW
CallWindowProcW
GetWindowLongW
InvalidateRect
BeginPaint
ScreenToClient
EndPaint
ChangeDisplaySettingsExW
MapVirtualKeyW

gdi32

DeleteDC
ExtEscape
CreateDCW
BitBlt
GetBitmapBits
CreateDIBSection
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectW
GetCurrentObject
GetDIBits

ws2_32

accept
ntohl
htonl
htons
ntohs
gethostbyname
WSAStartup
WSACleanup
listen
send
closesocket
__WSAFDIsSet
socket
bind
recv
setsockopt
shutdown
getsockname
select
connect
WSAGetLastError
inet_addr

advapi32

OpenProcessToken
SetSecurityInfo
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
GetTokenInformation
CopySid
ConvertStringSidToSidW
InitializeSecurityDescriptor
RevertToSelf
ImpersonateLoggedOnUser
DuplicateToken
RegSetValueExW
RegCloseKey
RegOpenKeyW
RegCreateKeyExW
RegCreateKeyW
SetSecurityDescriptorDacl
SetEntriesInAclW

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

Exports

Exports

MoveViewer
StartServer
StartViewer
StopServer
StopViewer

Sections

.text
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ShellExt32.dll.rep
.dll regsvr32 windows:5 windows x86 arch:x86

950651df8141f069392afa71dd888d58

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:64:1b:bc:4b:43:dd:b0:46:e5:be:ef:f7:24:d7:a9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

27/09/2013, 00:00

Not After

27/12/2015, 23:59

Subject

CN=IMO Network Technology Co.Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=IMO Network Technology Co.Ltd,O=IMO Network Technology Co.Ltd,L=shanghai,ST=shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

af:16:88:6f:1d:c1:63:20:3c:fc:b4:11:c8:50:94:6d:a2:8e:d5:a1
Signer

Actual PE Digest

af:16:88:6f:1d:c1:63:20:3c:fc:b4:11:c8:50:94:6d:a2:8e:d5:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdiplus

GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromStream
GdipDeleteGraphics
GdipAlloc
GdipGetImageHeight
GdipFree
GdiplusShutdown
GdipCloneImage
GdiplusStartup
GdipDrawImageRectI
GdipGraphicsClear
GdipGetImageGraphicsContext
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0

kernel32

lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetProcAddress
GetModuleHandleW
lstrcmpiW
CloseHandle
UnmapViewOfFile
LocalFree
GetCurrentProcess
GetModuleFileNameW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
MapViewOfFile
CreateFileMappingW
GlobalUnlock
LoadLibraryA
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
GetVersion
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetVersionExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GlobalLock
GetCPInfo
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
Sleep
GetACP

user32

GetSysColor
InsertMenuW
AppendMenuW
SetMenuItemBitmaps
CreatePopupMenu
SendMessageW
CharNextW

gdi32

DeleteObject

advapi32

RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW

shell32

ShellExecuteW
DragQueryFileW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CreateStreamOnHGlobal
ReleaseStgMedium
CoTaskMemAlloc

oleaut32

LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ShellExt64.dll.rep
.dll regsvr32 windows:5 windows x64 arch:x64

71d8781c7b31482c6f40aee0d57fa219

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:64:1b:bc:4b:43:dd:b0:46:e5:be:ef:f7:24:d7:a9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

27/09/2013, 00:00

Not After

27/12/2015, 23:59

Subject

CN=IMO Network Technology Co.Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=IMO Network Technology Co.Ltd,O=IMO Network Technology Co.Ltd,L=shanghai,ST=shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a9:9c:f4:b4:dd:77:18:09:fc:d0:54:d7:90:c0:7c:80:ae:5e:1c:6e
Signer

Actual PE Digest

a9:9c:f4:b4:dd:77:18:09:fc:d0:54:d7:90:c0:7c:80:ae:5e:1c:6e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

gdiplus

GdiplusShutdown
GdipCloneImage
GdiplusStartup
GdipFree
GdipGraphicsClear
GdipGetImageGraphicsContext
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromStream
GdipDeleteGraphics
GdipAlloc
GdipDrawImageRectI

kernel32

WideCharToMultiByte
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetProcAddress
GetModuleHandleW
lstrcmpiW
CloseHandle
UnmapViewOfFile
LocalFree
GetCurrentProcess
GetModuleFileNameW
DisableThreadLibraryCalls
MapViewOfFile
CreateFileMappingW
GlobalUnlock
GlobalLock
GetEnvironmentStringsW
LockResource
LoadResource
SizeofResource
FindResourceW
GetVersion
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetVersionExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GlobalAlloc
GetACP
GetCPInfo
HeapSize
HeapReAlloc
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
EncodePointer
HeapAlloc
HeapFree
RtlPcToFileHeader
RtlUnwindEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
FlsSetValue
GetCommandLineA
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy

user32

SendMessageW
CreatePopupMenu
AppendMenuW
SetMenuItemBitmaps
InsertMenuW
GetSysColor
CharNextW

gdi32

DeleteObject

advapi32

RegQueryValueExW
RegEnumKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW

shell32

DragQueryFileW
ShellExecuteW

ole32

ReleaseStgMedium
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

LoadRegTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ShiYeLine.exe
.exe windows:5 windows x86 arch:x86

8aa35bfbfe2488cc8224d2f174a7d4a7

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/04/2021, 00:00

Not After

05/04/2024, 23:59

Subject

CN=Shanghai Qiyeyu Network Technology Co.\, Ltd.,O=Shanghai Qiyeyu Network Technology Co.\, Ltd.,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9f:17:a1:ff:2f:8a:e3:da:f0:48:43:1e:a7:d7:35:cf:18:eb:83:8f
Signer

Actual PE Digest

9f:17:a1:ff:2f:8a:e3:da:f0:48:43:1e:a7:d7:35:cf:18:eb:83:8f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\CI\workspace\workspace\lan\Lan\bin\release\ShiYeLine.pdb

Imports

gdiplus

GdipCreatePath
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipLoadImageFromFile
GdipDrawImageRectRectI
GdipSetInterpolationMode
GdipGraphicsClear
GdipBitmapGetPixel
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipFillRectangleI
GdipCloneBrush
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteGraphics
GdipAlloc
GdipReleaseDC
GdipGetDC
GdipImageRotateFlip
GdipBitmapSetPixel
GdipCreateBitmapFromHICON
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipCreateBitmapFromFile
GdipAddPathArcI
GdipAddPathLineI
GdipAddPathEllipseI
GdipSetPenDashStyle
GdipCreatePen2
GdipCreateLineBrushI
GdipSetLineWrapMode
GdipCreateLineBrushFromRectI
GdipDrawPath
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipLoadImageFromStream
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateTexture
GdiplusStartup
GdipDrawImageRectI
GdipDrawCurveI
GdipDrawLineI
GdipSetPenCustomEndCap
GdipDeleteCustomLineCap
GdipCreateAdjustableArrowCap
GdipDrawRectangleI
GdipDeletePen
GdipCreatePen1
GdipFillRegion
GdipCombineRegionRegion
GdipDeleteRegion
GdipCreateRegionPath
GdipAddPathRectangleI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetImageWidth
GdipGetImageHeight
GdipFillPath
GdipSetSmoothingMode
GdipTranslateTextureTransform
GdipCreateTextureIAI
GdipDeletePath
GdipCreateFromHDC

ws2_32

ioctlsocket
WSAIoctl
recvfrom
WSAGetLastError
setsockopt
sendto
gethostname
getsockname
inet_addr
bind
socket
closesocket
gethostbyname
htonl
ntohl
ntohs
htons
accept
getaddrinfo
freeaddrinfo
WSASetLastError
WSARecvFrom
WSASendTo
shutdown
getsockopt
WSAStartup
WSACleanup
getpeername
connect
select
recv
__WSAFDIsSet
send
inet_ntoa
listen

winmm

PlaySoundW
timeEndPeriod
timeBeginPeriod
timeGetTime

wldap32

ord26
ord30
ord32
ord35
ord79
ord50
ord33
ord301
ord27
ord41
ord46
ord60
ord22
ord200
ord143
ord211

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
SetNamedSecurityInfoW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
GetUserNameW
GetUserNameA
RegOpenKeyExA
RegCreateKeyExA
CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptSignHashA
CryptDestroyHash
CryptSetHashParam
CryptCreateHash
CryptEnumProvidersA
CryptGetProvParam
CryptExportKey
CryptDestroyKey
GetSecurityDescriptorSacl
CryptGetUserKey

remote

MoveViewer
StopServer
StopViewer
StartViewer
StartServer

msimg32

AlphaBlend

imm32

ImmSetCompositionFontW
ImmNotifyIME
ImmAssociateContext
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

kernel32

InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
InterlockedExchange
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetStartupInfoW
GetCPInfo
ExitThread
RtlUnwind
GetFileInformationByHandle
GetDriveTypeA
WideCharToMultiByte
GetCommandLineW
GetTickCount
MoveFileW
GlobalFindAtomW
GetCurrentThreadId
GetCurrentProcessId
MultiByteToWideChar
Sleep
CopyFileW
GetComputerNameW
GetModuleFileNameW
FormatMessageW
LocalFree
GetLastError
GlobalAddAtomW
GlobalDeleteAtom
lstrlenW
DeleteFileW
CreateFileW
WriteFile
CloseHandle
GetVersionExW
MoveFileExW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetTimeZoneInformation
LoadResource
FreeLibrary
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
lstrcmpiW
RaiseException
SizeofResource
LoadLibraryExW
InitializeCriticalSection
GetLocaleInfoA
LoadLibraryW
GlobalLock
GlobalUnlock
FindFirstFileW
FindClose
GetFileSizeEx
LockResource
GlobalAlloc
GetTempPathW
GetFileAttributesW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GlobalFree
ReadFile
ExpandEnvironmentStringsW
FlushInstructionCache
GetCurrentProcess
lstrcmpW
MulDiv
SetLastError
lstrlenA
SystemTimeToFileTime
WaitForSingleObject
OpenProcess
TerminateProcess
FileTimeToSystemTime
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetDriveTypeW
FindResourceExW
GetLogicalDrives
RemoveDirectoryW
FindNextFileW
SetEvent
ResetEvent
GetLocalTime
CreateEventW
TerminateThread
SetFilePointerEx
GlobalMemoryStatusEx
GetSystemInfo
SetUnhandledExceptionFilter
SetEnvironmentVariableW
FreeResource
SleepEx
FormatMessageA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
LoadLibraryA
ExpandEnvironmentStringsA
CompareFileTime
GetSystemTime
GetACP
GetOEMCP
GetModuleFileNameA
GetFullPathNameW
GetFullPathNameA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetTempPathA
DeleteFileA
SetFilePointer
SetFileAttributesW
SetFileAttributesA
GetFileAttributesA
CreateFileA
SetFileTime
SetEndOfFile
GetFileSize
GetVersionExA
HeapValidate
CreateThread
FindFirstFileA
FindNextFileA
LCMapStringA
LCMapStringW
GetStringTypeW
CompareStringA
CompareStringW
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
ExitProcess
GetConsoleCP
GetConsoleMode
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
QueryPerformanceCounter
GetStringTypeA
FlushFileBuffers
GetModuleHandleA
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetStringTypeExW
CreateMutexW
UnlockFile
LockFile
OutputDebugStringW
UnlockFileEx
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringA
AreFileApisANSI
FindResourceW

user32

CharUpperW
GetIconInfo
EnumDisplayDevicesW
EnumDisplaySettingsExW
MonitorFromPoint
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
ShowCaret
HideCaret
SetCaretPos
GetWindowTextLengthW
GetClientRect
InvalidateRgn
RedrawWindow
GetWindow
IsChild
GetClassNameW
GetSysColor
DestroyAcceleratorTable
GetFocus
FillRect
CreateAcceleratorTableW
GetClassInfoExW
CallWindowProcW
RegisterClassW
GetDesktopWindow
PostQuitMessage
EnumWindows
DestroyIcon
LoadCursorW
SetCursor
SetWindowPlacement
EqualRect
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetActiveWindow
ClipCursor
ReleaseCapture
PtInRect
GetCursorPos
GetLastInputInfo
CharLowerW
RegisterWindowMessageW
GetSystemMetrics
SystemParametersInfoW
ClientToScreen
DestroyWindow
SetWindowRgn
SetTimer
ScreenToClient
GetWindowRect
SetActiveWindow
IsIconic
PostMessageW
KillTimer
IsZoomed
DrawIconEx
DrawTextW
GetWindowTextW
GetParent
GetDlgItem
IsClipboardFormatAvailable
RegisterClipboardFormatW
LoadImageW
RegisterClassExW
LoadIconW
GetAsyncKeyState
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
EndPaint
BeginPaint
SetForegroundWindow
TrackMouseEvent
IsWindowEnabled
SetFocus
GetDC
FlashWindowEx
InvalidateRect
GetWindowLongW
ReleaseDC
SetWindowLongW
SetWindowPos
IsWindow
OpenClipboard
IsWindowVisible
UpdateWindow
EnableWindow
SetWindowTextW
MoveWindow
ShowWindow
SendMessageW
SetCapture
GetKeyState
CharNextW
UnregisterHotKey
RegisterHotKey
OffsetRect
CreateWindowExW
UpdateLayeredWindow
GetClipboardData
ChildWindowFromPointEx
CopyRect
DefWindowProcW
CloseClipboard
SetClipboardData
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
GetWindowPlacement
CreateCaret
UnregisterClassA
LoadStringW
EmptyClipboard
DestroyCursor
FindWindowW
IsRectEmpty

gdi32

SetDIBColorTable
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
SetStretchBltMode
StretchBlt
CreateCompatibleBitmap
SetViewportOrgEx
GetDeviceCaps
GetPixel
CreateSolidBrush
GetTextExtentPoint32W
CreateFontIndirectW
GetStockObject
SetBkMode
SetBkColor
SetTextColor
GdiFlush
BitBlt
GetObjectW
CreateDIBSection
CreateRoundRectRgn
OffsetViewportOrgEx
EnumFontFamiliesExW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseColorW

shell32

SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteExW
SHChangeNotify
ord74
ExtractIconExW
ExtractIconW
CommandLineToArgvW
DragQueryFileW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetFolderPathW
ShellExecuteW

ole32

CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
CoTaskMemRealloc
StringFromGUID2
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoGetClassObject
OleLockRunning
CoCreateInstance

oleaut32

OleCreateFontIndirect
VariantInit
VariantClear
LoadRegTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString

shlwapi

ord219

iphlpapi

GetIfEntry
GetAdaptersInfo

crypt32

CryptDecryptMessage
CryptMsgOpenToDecode
CryptMsgUpdate
CryptMsgClose
CryptMsgGetParam
CryptMsgControl
CryptEncodeObject
CertGetCertificateContextProperty
CryptDecodeObject
CertNameToStrW
CertGetSubjectCertificateFromStore
CryptVerifyMessageSignature
CryptVerifyDetachedMessageSignature
CryptEncryptMessage
CertCreateCertificateContext
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertCloseStore
CertSetCertificateContextProperty
CertFreeCertificateContext
CertOpenStore

Exports

Exports

??0CDataObject@@QAE@XZ
??0CDropSource@@QAE@ABV0@@Z
??0CDropSource@@QAE@PAVCSkinEditView@@ABVCPoint@@@Z
??0CDropSource@@QAE@PAVCSkinView@@ABVCPoint@@@Z
??0CDropTarget@@QAE@ABV0@@Z
??0CDropTarget@@QAE@XZ
??0CHideAnimationHost@@QAE@ABV0@@Z
??0CHideAnimationHost@@QAE@PAVCSkinView@@@Z
??0CSearchResultTextView@@QAE@ABV0@@Z
??0CSearchResultTextView@@QAE@PAVCSkinView@@@Z
??0CSkinAnimationGroup@@QAE@ABV0@@Z
??0CSkinAnimationGroup@@QAE@PAVCSkinView@@@Z
??0CSkinApp@@QAE@ABV0@@Z
??0CSkinApp@@QAE@XZ
??0CSkinButton@@QAE@ABV0@@Z
??0CSkinButton@@QAE@PAVCSkinView@@@Z
??0CSkinCefView@@QAE@ABV0@@Z
??0CSkinCefView@@QAE@PAVCSkinView@@@Z
??0CSkinCheckBox@@QAE@ABV0@@Z
??0CSkinCheckBox@@QAE@PAVCSkinView@@@Z
??0CSkinColorDialog@@QAE@ABVColor@Gdiplus@@K@Z
??0CSkinComboBox@@QAE@ABV0@@Z
??0CSkinComboBox@@QAE@PAVCSkinView@@@Z
??0CSkinComboBoxTextView@@QAE@ABV0@@Z
??0CSkinComboBoxTextView@@QAE@PAVCSkinView@@@Z
??0CSkinDialog@@QAE@ABV0@@Z
??0CSkinDialog@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinEditListView@@QAE@ABV0@@Z
??0CSkinEditListView@@QAE@PAVCSkinView@@@Z
??0CSkinEditTextView@@QAE@ABV0@@Z
??0CSkinEditTextView@@QAE@PAVCSkinView@@@Z
??0CSkinEditView@@QAE@ABV0@@Z
??0CSkinEditView@@QAE@PAVCSkinView@@@Z
??0CSkinEditViewEx@@QAE@ABV0@@Z
??0CSkinEditViewEx@@QAE@PAVCSkinView@@@Z
??0CSkinExtensionMsgMap@@QAE@ABV0@@Z
??0CSkinExtensionMsgMap@@QAE@XZ
??0CSkinFactory@@AAE@XZ
??0CSkinFactory@@QAE@ABV0@@Z
??0CSkinFileDialog@@QAE@ABV0@@Z
??0CSkinFileDialog@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_WIH@Z
??0CSkinFolderDialog@@QAE@ABV0@@Z
??0CSkinFolderDialog@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
??0CSkinFrameLayout@@QAE@ABV0@@Z
??0CSkinFrameLayout@@QAE@PAVCSkinView@@@Z
??0CSkinGridLayout@@QAE@ABV0@@Z
??0CSkinGridLayout@@QAE@PAVCSkinView@@@Z
??0CSkinGridView@@QAE@ABV0@@Z
??0CSkinGridView@@QAE@PAVCSkinView@@@Z
??0CSkinHorizontalLayout@@QAE@ABV0@@Z
??0CSkinHorizontalLayout@@QAE@PAVCSkinView@@@Z
??0CSkinHorzPercentLayout@@QAE@ABV0@@Z
??0CSkinHorzPercentLayout@@QAE@PAVCSkinView@@@Z
??0CSkinHotKeyView@@QAE@ABV0@@Z
??0CSkinHotKeyView@@QAE@PAVCSkinView@@@Z
??0CSkinHyperlink@@QAE@ABV0@@Z
??0CSkinHyperlink@@QAE@PAVCSkinView@@@Z
??0CSkinImage@@AAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVCSkinDialog@@ABVCSize@@@Z
??0CSkinImage@@AAE@PAVImage@Gdiplus@@PAVCSkinDialog@@ABVCSize@@@Z
??0CSkinImage@@QAE@ABV0@@Z
??0CSkinImageView@@QAE@ABV0@@Z
??0CSkinImageView@@QAE@PAVCSkinView@@@Z
??0CSkinImageViewEx@@QAE@ABV0@@Z
??0CSkinImageViewEx@@QAE@PAVCSkinView@@@Z
??0CSkinLayout@@QAE@ABV0@@Z
??0CSkinLayout@@QAE@PAVCSkinView@@@Z
??0CSkinLine@@QAE@ABV0@@Z
??0CSkinLine@@QAE@PAVCSkinView@@@Z
??0CSkinListEditView@@QAE@ABV0@@Z
??0CSkinListEditView@@QAE@PAVCSkinView@@@Z
??0CSkinListItem@@QAE@ABV0@@Z
??0CSkinListItem@@QAE@PAVCSkinView@@@Z
??0CSkinListView@@QAE@ABV0@@Z
??0CSkinListView@@QAE@PAVCSkinView@@@Z
??0CSkinMenuButton@@QAE@ABV0@@Z
??0CSkinMenuButton@@QAE@PAVCSkinView@@@Z
??0CSkinMsgMap@@QAE@ABV0@@Z
??0CSkinMsgMap@@QAE@XZ
??0CSkinMyWebView@@QAE@ABV0@@Z
??0CSkinMyWebView@@QAE@PAVCSkinView@@@Z
??0CSkinPicSaveAsDialog@@QAE@ABV0@@Z
??0CSkinPicSaveAsDialog@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinPopupDialog@@QAE@ABV0@@Z
??0CSkinPopupDialog@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinProgress@@QAE@ABV0@@Z
??0CSkinProgress@@QAE@PAVCSkinView@@@Z
??0CSkinRadioButton@@QAE@ABV0@@Z
??0CSkinRadioButton@@QAE@PAVCSkinView@@@Z
??0CSkinRadioGroup@@QAE@ABV0@@Z
??0CSkinRadioGroup@@QAE@PAVCSkinView@@@Z
??0CSkinRelativeLayout@@QAE@ABV0@@Z
??0CSkinRelativeLayout@@QAE@PAVCSkinView@@@Z
??0CSkinSaveAsDialog@@QAE@ABV0@@Z
??0CSkinSaveAsDialog@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_W@Z
??0CSkinScrollBar@@QAE@ABV0@@Z
??0CSkinScrollBar@@QAE@PAVCSkinView@@@Z
??0CSkinScrollView@@QAE@ABV0@@Z
??0CSkinScrollView@@QAE@PAVCSkinView@@@Z
??0CSkinSlider@@QAE@ABV0@@Z
??0CSkinSlider@@QAE@PAVCSkinView@@@Z
??0CSkinSplitter@@QAE@ABV0@@Z
??0CSkinSplitter@@QAE@PAVCSkinView@@@Z
??0CSkinTextView@@QAE@ABV0@@Z
??0CSkinTextView@@QAE@PAVCSkinView@@@Z
??0CSkinTextViewEx@@QAE@ABV0@@Z
??0CSkinTextViewEx@@QAE@PAVCSkinView@@@Z
??0CSkinTreeItem@@QAE@ABV0@@Z
??0CSkinTreeItem@@QAE@PAVCSkinView@@@Z
??0CSkinTreeView@@QAE@ABV0@@Z
??0CSkinTreeView@@QAE@PAVCSkinView@@@Z
??0CSkinVertPercentLayout@@QAE@ABV0@@Z
??0CSkinVertPercentLayout@@QAE@PAVCSkinView@@@Z
??0CSkinVerticalLayout@@QAE@ABV0@@Z
??0CSkinVerticalLayout@@QAE@PAVCSkinView@@@Z
??0CSkinView@@QAE@ABV0@@Z
??0CSkinView@@QAE@PAV0@@Z
??0CSkinWebView@@QAE@ABV0@@Z
??0CSkinWebView@@QAE@PAVCSkinView@@@Z
??0CSkinWndHost@@QAE@ABV0@@Z
??0CSkinWndHost@@QAE@PAVCSkinView@@@Z
??0CSkinWndView@@QAE@ABV0@@Z
??0CSkinWndView@@QAE@PAVCSkinView@@@Z
??0CSwitchAnimationHost@@QAE@ABV0@@Z
??0CSwitchAnimationHost@@QAE@PAVCSkinView@@@Z
??0CVipButton@@QAE@ABV0@@Z
??0CVipButton@@QAE@PAVCSkinView@@@Z
??1CDataObject@@AAE@XZ
??1CDropSource@@QAE@XZ
??1CDropTarget@@QAE@XZ
??1CHideAnimationHost@@UAE@XZ
??1CSearchResultTextView@@UAE@XZ
??1CSkinAnimationGroup@@UAE@XZ
??1CSkinButton@@UAE@XZ
??1CSkinCefView@@UAE@XZ
??1CSkinCheckBox@@UAE@XZ
??1CSkinComboBox@@UAE@XZ
??1CSkinComboBoxTextView@@UAE@XZ
??1CSkinDialog@@UAE@XZ
??1CSkinEditListView@@UAE@XZ
??1CSkinEditTextView@@UAE@XZ
??1CSkinEditView@@UAE@XZ
??1CSkinEditViewEx@@UAE@XZ
??1CSkinExtensionMsgMap@@QAE@XZ
??1CSkinFactory@@AAE@XZ
??1CSkinFileDialog@@QAE@XZ
??1CSkinFolderDialog@@QAE@XZ
??1CSkinFrameLayout@@UAE@XZ
??1CSkinGridLayout@@UAE@XZ
??1CSkinGridView@@UAE@XZ
??1CSkinHorizontalLayout@@UAE@XZ
??1CSkinHorzPercentLayout@@UAE@XZ
??1CSkinHotKeyView@@UAE@XZ
??1CSkinHyperlink@@UAE@XZ
??1CSkinImage@@AAE@XZ
??1CSkinImageView@@UAE@XZ
??1CSkinImageViewEx@@UAE@XZ
??1CSkinLayout@@UAE@XZ
??1CSkinLine@@UAE@XZ
??1CSkinListEditView@@UAE@XZ
??1CSkinListItem@@UAE@XZ
??1CSkinListView@@UAE@XZ
??1CSkinMenuButton@@UAE@XZ
??1CSkinMsgMap@@QAE@XZ
??1CSkinMyWebView@@UAE@XZ
??1CSkinPicSaveAsDialog@@QAE@XZ
??1CSkinPopupDialog@@UAE@XZ
??1CSkinProgress@@UAE@XZ
??1CSkinRadioButton@@UAE@XZ
??1CSkinRadioGroup@@UAE@XZ
??1CSkinRelativeLayout@@UAE@XZ
??1CSkinSaveAsDialog@@QAE@XZ
??1CSkinScrollBar@@UAE@XZ
??1CSkinScrollView@@UAE@XZ
??1CSkinSlider@@UAE@XZ
??1CSkinSplitter@@UAE@XZ
??1CSkinTextView@@UAE@XZ
??1CSkinTextViewEx@@UAE@XZ
??1CSkinTreeItem@@UAE@XZ
??1CSkinTreeView@@UAE@XZ
??1CSkinVertPercentLayout@@UAE@XZ
??1CSkinVerticalLayout@@UAE@XZ
??1CSkinView@@UAE@XZ
??1CSkinWebView@@UAE@XZ
??1CSkinWndHost@@UAE@XZ
??1CSkinWndView@@UAE@XZ
??1CSwitchAnimationHost@@UAE@XZ
??1CVipButton@@UAE@XZ
??4CDropSource@@QAEAAV0@ABV0@@Z
??4CDropTarget@@QAEAAV0@ABV0@@Z
??4CHideAnimationHost@@QAEAAV0@ABV0@@Z
??4CPaintHelper@@QAEAAV0@ABV0@@Z
??4CSearchResultTextView@@QAEAAV0@ABV0@@Z
??4CSkinAnimationGroup@@QAEAAV0@ABV0@@Z
??4CSkinApp@@QAEAAV0@ABV0@@Z
??4CSkinButton@@QAEAAV0@ABV0@@Z
??4CSkinCefView@@QAEAAV0@ABV0@@Z
??4CSkinCheckBox@@QAEAAV0@ABV0@@Z
??4CSkinColorDialog@@QAEAAV0@ABV0@@Z
??4CSkinComboBox@@QAEAAV0@ABV0@@Z
??4CSkinComboBoxTextView@@QAEAAV0@ABV0@@Z
??4CSkinDialog@@QAEAAV0@ABV0@@Z
??4CSkinEditListView@@QAEAAV0@ABV0@@Z
??4CSkinEditTextView@@QAEAAV0@ABV0@@Z
??4CSkinEditView@@QAEAAV0@ABV0@@Z
??4CSkinEditViewEx@@QAEAAV0@ABV0@@Z
??4CSkinExtensionMsgMap@@QAEAAV0@ABV0@@Z
??4CSkinFactory@@QAEAAV0@ABV0@@Z
??4CSkinFileDialog@@QAEAAV0@ABV0@@Z
??4CSkinFolderDialog@@QAEAAV0@ABV0@@Z
??4CSkinFrameLayout@@QAEAAV0@ABV0@@Z
??4CSkinGridLayout@@QAEAAV0@ABV0@@Z
??4CSkinGridView@@QAEAAV0@ABV0@@Z
??4CSkinHorizontalLayout@@QAEAAV0@ABV0@@Z
??4CSkinHorzPercentLayout@@QAEAAV0@ABV0@@Z
??4CSkinHotKeyView@@QAEAAV0@ABV0@@Z
??4CSkinHyperlink@@QAEAAV0@ABV0@@Z
??4CSkinImage@@QAEAAV0@ABV0@@Z
??4CSkinImageView@@QAEAAV0@ABV0@@Z
??4CSkinImageViewEx@@QAEAAV0@ABV0@@Z
??4CSkinLayout@@QAEAAV0@ABV0@@Z
??4CSkinLine@@QAEAAV0@ABV0@@Z
??4CSkinListEditView@@QAEAAV0@ABV0@@Z
??4CSkinListItem@@QAEAAV0@ABV0@@Z
??4CSkinListView@@QAEAAV0@ABV0@@Z
??4CSkinMenuButton@@QAEAAV0@ABV0@@Z
??4CSkinMsgMap@@QAEAAV0@ABV0@@Z
??4CSkinMyWebView@@QAEAAV0@ABV0@@Z
??4CSkinPicSaveAsDialog@@QAEAAV0@ABV0@@Z
??4CSkinPopupDialog@@QAEAAV0@ABV0@@Z
??4CSkinProgress@@QAEAAV0@ABV0@@Z
??4CSkinRadioButton@@QAEAAV0@ABV0@@Z
??4CSkinRadioGroup@@QAEAAV0@ABV0@@Z
??4CSkinRelativeLayout@@QAEAAV0@ABV0@@Z
??4CSkinSaveAsDialog@@QAEAAV0@ABV0@@Z
??4CSkinScrollBar@@QAEAAV0@ABV0@@Z
??4CSkinScrollView@@QAEAAV0@ABV0@@Z
??4CSkinSlider@@QAEAAV0@ABV0@@Z
??4CSkinSplitter@@QAEAAV0@ABV0@@Z
??4CSkinTextView@@QAEAAV0@ABV0@@Z
??4CSkinTextViewEx@@QAEAAV0@ABV0@@Z
??4CSkinTrayIcon@@QAEAAV0@ABV0@@Z
??4CSkinTreeItem@@QAEAAV0@ABV0@@Z
??4CSkinTreeView@@QAEAAV0@ABV0@@Z
??4CSkinVertPercentLayout@@QAEAAV0@ABV0@@Z
??4CSkinVerticalLayout@@QAEAAV0@ABV0@@Z
??4CSkinView@@QAEAAV0@ABV0@@Z
??4CSkinWebView@@QAEAAV0@ABV0@@Z
??4CSkinWndHost@@QAEAAV0@ABV0@@Z
??4CSkinWndView@@QAEAAV0@ABV0@@Z
??4CStringHelper@@QAEAAV0@ABV0@@Z
??4CSwitchAnimationHost@@QAEAAV0@ABV0@@Z
??4CVipButton@@QAEAAV0@ABV0@@Z
??4CXMLHelper@@QAEAAV0@ABV0@@Z
??4SkinUI@@QAEAAV0@ABV0@@Z
??_7CDataObject@@6B@
??_7CDropSource@@6B@
??_7CDropTarget@@6B@
??_7CHideAnimationHost@@6B@
??_7CSearchResultTextView@@6B@
??_7CSkinAnimationGroup@@6B@
??_7CSkinApp@@6B@
??_7CSkinButton@@6B@
??_7CSkinCefView@@6B@
??_7CSkinCheckBox@@6B@
??_7CSkinComboBox@@6B@
??_7CSkinComboBoxTextView@@6B@
??_7CSkinDialog@@6BCDropTarget@@@
??_7CSkinDialog@@6BCSkinWndHost@@@
??_7CSkinEditListView@@6B@
??_7CSkinEditTextView@@6B@
??_7CSkinEditView@@6B@
??_7CSkinEditViewEx@@6B@
??_7CSkinFrameLayout@@6B@
??_7CSkinGridLayout@@6B@
??_7CSkinGridView@@6B@
??_7CSkinHorizontalLayout@@6B@
??_7CSkinHorzPercentLayout@@6B@
??_7CSkinHotKeyView@@6B@
??_7CSkinHyperlink@@6B@
??_7CSkinImageView@@6BCImageObject@@@
??_7CSkinImageView@@6BCSkinView@@@
??_7CSkinImageViewEx@@6B@
??_7CSkinLayout@@6B@
??_7CSkinLine@@6B@
??_7CSkinListEditView@@6B@
??_7CSkinListItem@@6B@
??_7CSkinListView@@6B@
??_7CSkinMenuButton@@6B@
??_7CSkinMyWebView@@6B@
??_7CSkinPopupDialog@@6BCDropTarget@@@
??_7CSkinPopupDialog@@6BCSkinWndHost@@@
??_7CSkinProgress@@6B@
??_7CSkinRadioButton@@6B@
??_7CSkinRadioGroup@@6B@
??_7CSkinRelativeLayout@@6B@
??_7CSkinScrollBar@@6B@
??_7CSkinScrollView@@6B@
??_7CSkinSlider@@6B@
??_7CSkinSplitter@@6B@
??_7CSkinTextView@@6B@
??_7CSkinTextViewEx@@6B@
??_7CSkinTreeItem@@6B@
??_7CSkinTreeView@@6B@
??_7CSkinVertPercentLayout@@6B@
??_7CSkinVerticalLayout@@6B@
??_7CSkinView@@6B@
??_7CSkinWebView@@6B@
??_7CSkinWndHost@@6B@
??_7CSkinWndView@@6B@
??_7CSwitchAnimationHost@@6B@
??_7CVipButton@@6B@
??_FCSkinDialog@@QAEXXZ
??_FCSkinPopupDialog@@QAEXXZ
?AddChild@CSkinView@@UAEXPAV1@@Z
?AddCommandHandle@CSkinMsgMap@@QAEXIP8CSkinView@@AEXXZ@Z
?AddCommandRangeHandle@CSkinMsgMap@@QAEXIIP8CSkinView@@AEXXZ@Z
?AddFloatView@CSkinDialog@@QAEXPAVCSkinView@@@Z
?AddHandle@CSkinExtensionMsgMap@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@P8CSkinView@@AEXXZ@Z
?AddHandle@CSkinMsgMap@@QAEXIP8CSkinView@@AEXXZ@Z
?AddItem@CSkinTreeItem@@UAEXPAV1@@Z
?AddItem@CSkinTreeItem@@UAEXPAVCSkinListItem@@@Z
?AddObject@CSkinImage@@QAEXPAVCImageObject@@@Z
?AddRef@CDataObject@@UAGKXZ
?AddRef@CDropSource@@UAGKXZ
?AddRef@CDropTarget@@UAGKXZ
?AddString@CSkinComboBox@@QAEJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AddUpdateCommandUIHandle@CSkinMsgMap@@QAEXIP8CSkinView@@AEXXZ@Z
?AddUpdateUI@CSkinDialog@@QAEXPAVCSkinView@@@Z
?AddWndView@CSkinDialog@@QAEXPAVCSkinWndView@@@Z
?AnimationShowDialog@CSkinDialog@@QAEXXZ
?AppendHyperlink@CSkinEditView@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
?AppendImage@CSkinEditView@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AppendText@CSkinEditView@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AppendView@CSkinEditView@@QAEXPAVCSkinView@@@Z
?AppendXML@CSkinEditView@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?BoolToString@CStringHelper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?BoolToString@CStringHelper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?BoolToString@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?BoolToString@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?BuildChildDialog@SkinUI@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVCSkinView@@@Z
?BuildDialog@SkinUI@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVCSkinView@@@Z
?BuildTempPath@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?COLORREFToString@CStringHelper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?COLORREFToString@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?CanGoBack@CSkinCefView@@QAE_NXZ
?CanGoForward@CSkinCefView@@QAE_NXZ
?CefProgressRestart@CSkinCefView@@SAXXZ
?CefProgressTerminated@CSkinCefView@@SAXXZ
?CenterWindow@CSkinWndHost@@QAEHXZ
?ChangeSkin@CSkinDialog@@SAXXZ
?ChangeSkin@SkinUI@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CharFormatToString@CStringHelper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABUCharFormat@@@Z
?CharFormatToString@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABUCharFormat@@@Z
?CheckTerminatedError@CSkinCefView@@AAEHXZ
?Clear@CSkinEditView@@QAEXXZ
?ClientToScreen@CSkinWndHost@@QAEHAAVCPoint@@@Z
?ClientToScreen@CSkinWndHost@@QAEHAAVCRect@@@Z
?ColorToString@CStringHelper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVColor@Gdiplus@@@Z
?ColorToString@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVColor@Gdiplus@@@Z
?Compare@CStringHelper@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?CompareNoCase@CStringHelper@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?Copy@CSkinEditListView@@QAEXXZ
?Copy@CSkinEditView@@QAEXXZ
?CopyMedium@CDataObject@@AAEJPAUtagSTGMEDIUM@@0PAUtagFORMATETC@@@Z
?Create@CHideAnimationHost@@SAPAVCSkinView@@PAV2@@Z
?Create@CSearchResultTextView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinAnimationGroup@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinButton@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinCefView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinCheckBox@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinComboBox@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinComboBoxTextView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinDialog@@QAEHPAUHWND__@@@Z
?Create@CSkinEditListView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinEditTextView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinEditView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinEditViewEx@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinFactory@@QAEPAVCSkinView@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV2@@Z
?Create@CSkinFrameLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinGridLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinGridView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinHorizontalLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinHorzPercentLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinHotKeyView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinHyperlink@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinImageView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinImageViewEx@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinLine@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinListEditView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinListItem@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinListView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinMenuButton@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinMyWebView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinProgress@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinRadioButton@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinRadioGroup@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinRelativeLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinScrollBar@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinSlider@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinSplitter@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinTextView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinTextViewEx@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinTreeItem@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinTreeView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinVertPercentLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinVerticalLayout@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinView@@SAPAV1@PAV1@@Z
?Create@CSkinWebView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSkinWndView@@SAPAVCSkinView@@PAV2@@Z
?Create@CSwitchAnimationHost@@SAPAVCSkinView@@PAV2@@Z
?Create@CVipButton@@SAPAVCSkinView@@PAV2@@Z
?CreateAnimation@CHideAnimationHost@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CreateCompatibleBitmap@SkinUI@@SAPAUHBITMAP__@@PAUHDC__@@HHPAPAE@Z
?CreateHorzScrollBar@CSkinScrollView@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CreateHost@CSkinWebView@@AAEXXZ
?CreateVertScrollBar@CSkinScrollView@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CreateWindowHost@CSkinWndView@@QAEXXZ
?Cut@CSkinEditView@@QAEXXZ
?DAdvise@CDataObject@@UAGJPAUtagFORMATETC@@KPAUIAdviseSink@@PAK@Z
?DUnadvise@CDataObject@@UAGJK@Z
?Delete@CSkinEditView@@QAEXXZ
?DeleteAllChild@CSkinDialog@@UAEXXZ
?DeleteAllChild@CSkinView@@UAEXXZ
?DeleteAllItem@CSkinTreeItem@@UAEXXZ
?DeleteAllItem@CSkinTreeView@@QAEXXZ
?DeleteChild@CSkinView@@UAEXPAV1@@Z
?DeleteItem@CSkinTreeItem@@UAEXPAVCSkinListItem@@@Z
?DeleteItem@CSkinTreeView@@QAEXPAVCSkinTreeItem@@PAVCSkinListItem@@@Z
?DestroyActiveDialog@CSkinPopupDialog@@SAXXZ
?DestroyComboBar@CSkinComboBox@@SAXXZ
?DestroyWindow@CSkinWndHost@@QAEHXZ
?DoModal@CSkinColorDialog@@QAEHPAUHWND__@@@Z
?DoModal@CSkinDialog@@QAEHPAUHWND__@@@Z
?DoModal@CSkinFileDialog@@QAEHPAUHWND__@@@Z
?DoModal@CSkinFolderDialog@@QAEHPAUHWND__@@@Z
?DoModal@CSkinPicSaveAsDialog@@QAEHPAUHWND__@@@Z
?DoModal@CSkinSaveAsDialog@@QAEHPAUHWND__@@@Z
?DoubleToString@CStringHelper@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@N@Z
?DoubleToString@SkinUI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@N@Z
?DragEnter@CDropTarget@@UAGJPAUIDataObject@@KU_POINTL@@PAK@Z
?DragLeave@CDropTarget@@UAGJXZ
?DragOver@CDropTarget@@UAGJKU_POINTL@@PAK@Z
?Draw@CSkinImage@@QAEXPAUHDC__@@ABVCRect@@PAVImageAttributes@Gdiplus@@@Z
?DrawBackground@CSkinDialog@@UAEXPAUHDC__@@@Z
?DrawBackground@CSkinEditView@@UAEXPAUHDC__@@@Z
?DrawBackground@CSkinLayout@@UAEXPAUHDC__@@@Z
?DrawBackground@CSkinLine@@UAEXPAUHDC__@@@Z
?DrawBackground@CSkinListView@@UAEXPAUHDC__@@@Z
?DrawBackground@CSkinView@@UAEXPAUHDC__@@@Z
?DrawBkgBorder@CSkinDialog@@UAEXPAUHDC__@@@Z
?DrawBkgColor@CSkinDialog@@UAEXPAUHDC__@@@Z
?DrawBkgShadow@CSkinDialog@@UAEXPAUHDC__@@@Z
?DrawBkgTheme@CSkinDialog@@UAEXPAUHDC__@@@Z
?DrawDropSource@CSkinEditView@@UAEXPAUHDC__@@@Z
?DrawEditBkg@CSkinEditView@@UAEXPAUHDC__@@@Z
?DrawEditClient@CSkinEditView@@UAEXPAUHDC__@@@Z
?DrawForeground@CHideAnimationHost@@MAEXPAUHDC__@@@Z
?DrawForeground@CSearchResultTextView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinButton@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinCefView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinCheckBox@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinComboBox@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinComboBoxTextView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinEditView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinEditViewEx@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinHyperlink@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinImageView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinImageViewEx@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinLayout@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinLine@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinListItem@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinListView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinProgress@@MAEXPAUHDC__@@@Z
?DrawForeground@CSkinRadioButton@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinScrollView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinSlider@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinSplitter@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinTextView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinTextViewEx@@UAEXPAUHDC__@@@Z
?DrawForeground@CSkinView@@UAEXPAUHDC__@@@Z
?DrawForeground@CSwitchAnimationHost@@MAEXPAUHDC__@@@Z
?DrawForeground@CVipButton@@UAEXPAUHDC__@@@Z
?DrawImage@CPaintHelper@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IH@Z
?DrawImage@SkinUI@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IH@Z
?DrawLine@CPaintHelper@@SAXPAUHDC__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1JJJJW4DashStyle@Gdiplus@@@Z
?DrawLine@CPaintHelper@@SAXPAUHDC__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@JJJJW4DashStyle@Gdiplus@@@Z
?DrawLine@CPaintHelper@@SAXPAUHDC__@@ABVColor@Gdiplus@@1JJJJW4DashStyle@4@@Z
?DrawLine@CPaintHelper@@SAXPAUHDC__@@ABVColor@Gdiplus@@JJJJW4DashStyle@4@@Z
?DrawLine@SkinUI@@SAXPAUHDC__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HHHHW4DashStyle@Gdiplus@@@Z
?DrawLine@SkinUI@@SAXPAUHDC__@@ABVColor@Gdiplus@@HHHHW4DashStyle@4@@Z
?DrawRect@CPaintHelper@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@JJ@Z
?DrawRect@CPaintHelper@@SAXPAUHDC__@@ABVCRect@@ABVColor@Gdiplus@@JJ@Z
?DrawRect@SkinUI@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HH@Z
?DrawRect@SkinUI@@SAXPAUHDC__@@ABVCRect@@ABVColor@Gdiplus@@HH@Z
?DrawTextW@CPaintHelper@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@22I@Z
?DrawTextW@CPaintHelper@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2ABVColor@Gdiplus@@I@Z
?DrawTextW@SkinUI@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@22I@Z
?DrawTextW@SkinUI@@SAXPAUHDC__@@ABVCRect@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2ABVColor@Gdiplus@@I@Z
?Drop@CDropTarget@@UAGJPAUIDataObject@@KU_POINTL@@PAK@Z

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 395KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Uplst
cef/ShiYeLineExternal.exe
.exe windows:5 windows x86 arch:x86

de52f0f1448b40b1c76ce02f1f8fadc7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:6d:a0:51:33:38:e9:3f:a8:1a:b2:6a:97:16:40:46:a7:1d:8b:f1
Signer

Actual PE Digest

07:6d:a0:51:33:38:e9:3f:a8:1a:b2:6a:97:16:40:46:a7:1d:8b:f1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\wzl\Desktop\KOOK\ip_phone\Windows\pdb\release\SkinUIExternal.pdb

Imports

gdiplus

GdiplusStartup
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipGetImageWidth
GdipGetImageHeight
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipDisposeImage
GdipImageSelectActiveFrame
GdipLoadImageFromStream
GdipImageRotateFlip
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipBitmapGetPixel
GdipSetSmoothingMode
GdipFillPath
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateLineBrushFromRectI
GdipSetLineWrapMode
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipCreatePen1
GdipDeletePen
GdipDrawRectangleI
GdipDrawPath
GdipCreateLineBrushI
GdipCreatePen2
GdipSetPenDashStyle
GdipDrawLineI
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromHICON
GdipBitmapSetPixel
GdipCreateBitmapFromFile
GdipFillRegion
GdipCreateSolidFill
GdipCombineRegionRectI
GdipDeleteRegion
GdipCreateRegionRectI
GdipFillRectangleI
GdipTranslateTextureTransform
GdipCloneBrush
GdipDeleteBrush
GdipCreateTexture
GdipAlloc
GdipFree
GdipGraphicsClear
GdipDeleteGraphics
GdipCreateFromHDC
GdipAddPathArcI
GdipAddPathLineI
GdipAddPathEllipseI
GdipDeletePath
GdipCreatePath
GdipGetDC
GdipReleaseDC
GdipLoadImageFromFile

libcef

cef_process_message_create
cef_string_userfree_utf16_free
cef_string_utf16_to_utf8
cef_string_utf16_cmp
cef_string_utf8_clear
cef_browser_host_create_browser_sync
cef_string_list_free
cef_string_list_alloc
cef_string_utf16_set
cef_string_utf8_to_utf16
cef_string_utf16_clear
cef_string_map_free
cef_string_list_copy
cef_currently_on
cef_post_task
cef_execute_process
cef_initialize
cef_run_message_loop
cef_string_map_alloc
cef_v8value_create_function
cef_v8value_create_string
cef_v8value_create_int
cef_v8value_create_bool
cef_string_multimap_alloc
cef_string_multimap_free
cef_v8context_get_current_context
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_api_hash

msimg32

AlphaBlend

imm32

ImmGetContext
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetCompositionStringW
ImmAssociateContext
ImmNotifyIME

ws2_32

ntohl
htonl

kernel32

GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsDebuggerPresent
GetStringTypeW
EncodePointer
SetEnvironmentVariableA
SetEndOfFile
HeapReAlloc
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetTimeZoneInformation
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
SetStdHandle
WriteConsoleW
RaiseException
SetLastError
MulDiv
lstrcmpW
FlushInstructionCache
FindNextFileW
SetCurrentDirectoryW
MoveFileW
ReadFile
ExpandEnvironmentStringsW
DeleteFileW
MoveFileExW
GlobalFree
Sleep
WaitForSingleObject
OpenProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
LocalFree
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
GetVersionExW
GetFileAttributesW
GlobalAlloc
LockResource
CopyFileW
CloseHandle
GetFileSizeEx
CreateFileW
FindClose
FindFirstFileW
WideCharToMultiByte
GetCurrentProcessId
GlobalUnlock
GlobalLock
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
GetCurrentThreadId
OutputDebugStringW
GetCommandLineW
SetEnvironmentVariableW
GetModuleFileNameW
GetCurrentProcess
TerminateProcess
GetTempPathW
DeleteCriticalSection
DecodePointer
HeapSize
GetLastError

user32

TranslateMessage
DispatchMessageW
EnumWindows
GetCapture
GetSystemMetrics
GetParent
SetParent
CreateCaret
MonitorFromWindow
CallWindowProcW
GetClassInfoExW
CreateAcceleratorTableW
FillRect
GetFocus
DestroyAcceleratorTable
GetSysColor
GetClassNameW
IsChild
RedrawWindow
InvalidateRgn
GetClientRect
GetWindowTextLengthW
ShowCaret
OffsetRect
MonitorFromRect
GetMessageW
GetMonitorInfoW
MonitorFromPoint
EnumDisplaySettingsExW
EnumDisplayDevicesW
DrawIconEx
GetIconInfo
SystemParametersInfoW
DrawTextW
GetWindowTextW
GetDlgItem
UnregisterHotKey
RegisterHotKey
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
RegisterClipboardFormatW
CloseClipboard
GetClipboardData
LoadImageW
ReleaseCapture
SetCapture
GetWindowPlacement
RegisterClassExW
LoadIconW
GetAsyncKeyState
CharUpperW
CharLowerW
EndPaint
CopyRect
BeginPaint
DefWindowProcW
RegisterWindowMessageW
UpdateWindow
ShowWindow
GetKeyState
GetAncestor
GetWindowRect
ClientToScreen
IsWindow
SetClassLongW
MoveWindow
SetWindowTextW
EnableWindow
SendMessageW
IsWindowVisible
OpenClipboard
SetWindowPos
SetWindowLongW
ReleaseDC
GetWindowLongW
FlashWindowEx
GetDC
SetFocus
IsWindowEnabled
TrackMouseEvent
SetForegroundWindow
IsZoomed
KillTimer
PostMessageW
UnregisterClassW
IsIconic
SetActiveWindow
ScreenToClient
SetTimer
SetWindowRgn
DestroyWindow
GetWindow
CharNextW
GetActiveWindow
GetForegroundWindow
EqualRect
GetKeyboardState
IsRectEmpty
GetDesktopWindow
SetCaretPos
GetCursorPos
SetCursor
LoadCursorW
PtInRect
UpdateLayeredWindow
HideCaret
DestroyIcon
AttachThreadInput
GetWindowThreadProcessId
CreateWindowExW
PeekMessageW
InvalidateRect

gdi32

CreateDIBSection
GetObjectW
CreateDCW
DeleteDC
SetDIBColorTable
GdiFlush
DeleteObject
GetStockObject
SetBkColor
SetBkMode
CreateFontIndirectW
StretchBlt
CreateSolidBrush
GetPixel
GetDeviceCaps
CreateRoundRectRgn
BitBlt
SetTextColor
SetStretchBltMode
OffsetViewportOrgEx
SelectObject
CreateCompatibleDC
GetDIBits
CreateCompatibleBitmap

comdlg32

GetOpenFileNameW
ChooseColorW
GetSaveFileNameW

advapi32

RegQueryValueExW
SetNamedSecurityInfoW
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW

shell32

ShellExecuteW
Shell_NotifyIconW
SHCreateDirectoryExW
DragQueryFileW
SHGetFileInfoW
ExtractIconW
ExtractIconExW
ord74
CommandLineToArgvW

ole32

OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleDuplicateData
ReleaseStgMedium
CoCreateGuid
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
StringFromGUID2
DoDragDrop
OleUninitialize
OleInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

oleaut32

SysAllocStringLen
SysStringLen
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
VariantClear
VariantInit
OleCreateFontIndirect

shlwapi

ord219
PathRemoveFileSpecW

winmm

timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeKillEvent

Exports

Exports

??0CDataObject@UI@@QAE@XZ
??0CDialogTipsWindow@UI@@AAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVCSkinView@1@@Z
??0CDialogTipsWindow@UI@@QAE@ABV01@@Z
??0CDropSource@UI@@QAE@ABV01@@Z
??0CDropSource@UI@@QAE@PAVCSkinEditView@1@ABVCPoint@1@@Z
??0CDropSource@UI@@QAE@PAVCSkinView@1@ABVCPoint@1@@Z
??0CDropTarget@UI@@QAE@ABV01@@Z
??0CDropTarget@UI@@QAE@XZ
??0CHideAnimationHost@UI@@QAE@ABV01@@Z
??0CHideAnimationHost@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinAnimationGroup@UI@@QAE@ABV01@@Z
??0CSkinAnimationGroup@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinApplication@UI@@QAE@ABV01@@Z
??0CSkinApplication@UI@@QAE@XZ
??0CSkinButton@UI@@QAE@ABV01@@Z
??0CSkinButton@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinCefView@UI@@QAE@ABV01@@Z
??0CSkinCefView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinCheckBox@UI@@QAE@ABV01@@Z
??0CSkinCheckBox@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinComboBox@UI@@QAE@ABV01@@Z
??0CSkinComboBox@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinComboItem@UI@@QAE@ABV01@@Z
??0CSkinComboItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinDateDayItem@UI@@QAE@ABV01@@Z
??0CSkinDateDayItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinDateDialog@UI@@QAE@ABV01@@Z
??0CSkinDateDialog@UI@@QAE@PAVCSkinDateView@1@_K11ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinDateLayout@UI@@QAE@ABV01@@Z
??0CSkinDateLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinDateMonthItem@UI@@QAE@ABV01@@Z
??0CSkinDateMonthItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinDateView@UI@@QAE@ABV01@@Z
??0CSkinDateView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinDateYearItem@UI@@QAE@ABV01@@Z
??0CSkinDateYearItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinDialog@UI@@QAE@ABV01@@Z
??0CSkinDialog@UI@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinDoubleCoreWebView@UI@@QAE@ABV01@@Z
??0CSkinDoubleCoreWebView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinEditListView@UI@@QAE@ABV01@@Z
??0CSkinEditListView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinEditTextView@UI@@QAE@ABV01@@Z
??0CSkinEditTextView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinEditView@UI@@QAE@ABV01@@Z
??0CSkinEditView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinEditViewEx@UI@@QAE@ABV01@@Z
??0CSkinEditViewEx@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinExtensionMsgMap@UI@@QAE@ABV01@@Z
??0CSkinExtensionMsgMap@UI@@QAE@XZ
??0CSkinFactory@UI@@AAE@XZ
??0CSkinFactory@UI@@QAE@ABV01@@Z
??0CSkinFileDialog@UI@@QAE@ABV01@@Z
??0CSkinFileDialog@UI@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@3@IH@Z
??0CSkinFileDialog@UI@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_WIH@Z
??0CSkinFloatLayout@UI@@QAE@ABV01@@Z
??0CSkinFloatLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinFolderDialog@UI@@QAE@ABV01@@Z
??0CSkinFrameLayout@UI@@QAE@ABV01@@Z
??0CSkinFrameLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinGridLayout@UI@@QAE@ABV01@@Z
??0CSkinGridLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinGridView@UI@@QAE@ABV01@@Z
??0CSkinGridView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinHorizontalLayout@UI@@QAE@ABV01@@Z
??0CSkinHorizontalLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinHotKeyView@UI@@QAE@ABV01@@Z
??0CSkinHotKeyView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinHyperlink@UI@@QAE@ABV01@@Z
??0CSkinHyperlink@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinIEView@UI@@QAE@ABV01@@Z
??0CSkinIEView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinImage@UI@@AAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVCSkinDialog@1@ABVCSize@1@2@Z
??0CSkinImage@UI@@AAE@PAVImage@Gdiplus@@PAVCSkinDialog@1@ABVCSize@1@2@Z
??0CSkinImage@UI@@QAE@ABV01@@Z
??0CSkinImageView@UI@@QAE@ABV01@@Z
??0CSkinImageView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinImageViewEx@UI@@QAE@ABV01@@Z
??0CSkinImageViewEx@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinLayout@UI@@QAE@ABV01@@Z
??0CSkinLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinLine@UI@@QAE@ABV01@@Z
??0CSkinLine@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinListItem@UI@@QAE@ABV01@@Z
??0CSkinListItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinListView@UI@@QAE@ABV01@@Z
??0CSkinListView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinMsgMap@UI@@QAE@ABV01@@Z
??0CSkinMsgMap@UI@@QAE@XZ
??0CSkinPicSaveAsDialog@UI@@QAE@ABV01@@Z
??0CSkinPicSaveAsDialog@UI@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinPopupDialog@UI@@QAE@ABV01@@Z
??0CSkinPopupDialog@UI@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CSkinProgress@UI@@QAE@ABV01@@Z
??0CSkinProgress@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinRadioButton@UI@@QAE@ABV01@@Z
??0CSkinRadioButton@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinRadioGroup@UI@@QAE@ABV01@@Z
??0CSkinRadioGroup@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinRelativeLayout@UI@@QAE@ABV01@@Z
??0CSkinRelativeLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinSaveAsDialog@UI@@QAE@ABV01@@Z
??0CSkinSaveAsDialog@UI@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_W@Z
??0CSkinScrollBar@UI@@QAE@ABV01@@Z
??0CSkinScrollBar@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinScrollView@UI@@QAE@ABV01@@Z
??0CSkinScrollView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinSlideLayout@UI@@QAE@ABV01@@Z
??0CSkinSlideLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinSlider@UI@@QAE@ABV01@@Z
??0CSkinSlider@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinSplitter@UI@@QAE@ABV01@@Z
??0CSkinSplitter@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinSplitterLayout@UI@@QAE@ABV01@@Z
??0CSkinSplitterLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTextView@UI@@QAE@ABV01@@Z
??0CSkinTextView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTextViewEx@UI@@QAE@ABV01@@Z
??0CSkinTextViewEx@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTimeHourItem@UI@@QAE@ABV01@@Z
??0CSkinTimeHourItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTimeLayout@UI@@QAE@ABV01@@Z
??0CSkinTimeLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTimeMinuteItem@UI@@QAE@ABV01@@Z
??0CSkinTimeMinuteItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTimeSecondItem@UI@@QAE@ABV01@@Z
??0CSkinTimeSecondItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTrayIcon@UI@@AAE@PAVCSkinDialog@1@@Z
??0CSkinTrayIcon@UI@@QAE@ABV01@@Z
??0CSkinTreeItem@UI@@QAE@ABV01@@Z
??0CSkinTreeItem@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinTreeView@UI@@QAE@ABV01@@Z
??0CSkinTreeView@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinVerticalLayout@UI@@QAE@ABV01@@Z
??0CSkinVerticalLayout@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinView@UI@@QAE@ABV01@@Z
??0CSkinView@UI@@QAE@PAV01@@Z
??0CSkinWindow@UI@@QAE@ABV01@@Z
??0CSkinWindow@UI@@QAE@PAVCSkinView@1@@Z
??0CSkinWndHost@UI@@QAE@ABV01@@Z
??0CSkinWndHost@UI@@QAE@PAVCSkinWndView@1@@Z
??0CSkinWndView@UI@@QAE@ABV01@@Z
??0CSkinWndView@UI@@QAE@PAVCSkinView@1@@Z
??0CSlideAnimationHost@UI@@QAE@ABV01@@Z
??0CSlideAnimationHost@UI@@QAE@PAVCSkinView@1@@Z
??0CSwitchAnimationHost@UI@@QAE@ABV01@@Z
??0CSwitchAnimationHost@UI@@QAE@PAVCSkinView@1@@Z
??1CDataObject@UI@@AAE@XZ
??1CDialogTipsWindow@UI@@UAE@XZ
??1CDropSource@UI@@QAE@XZ
??1CDropTarget@UI@@QAE@XZ
??1CHideAnimationHost@UI@@UAE@XZ
??1CSkinAnimationGroup@UI@@UAE@XZ
??1CSkinButton@UI@@UAE@XZ
??1CSkinCefView@UI@@UAE@XZ
??1CSkinCheckBox@UI@@UAE@XZ
??1CSkinComboBox@UI@@UAE@XZ
??1CSkinComboItem@UI@@UAE@XZ
??1CSkinDateDayItem@UI@@UAE@XZ
??1CSkinDateDialog@UI@@UAE@XZ
??1CSkinDateLayout@UI@@UAE@XZ
??1CSkinDateMonthItem@UI@@UAE@XZ
??1CSkinDateView@UI@@UAE@XZ
??1CSkinDateYearItem@UI@@UAE@XZ
??1CSkinDialog@UI@@UAE@XZ
??1CSkinDoubleCoreWebView@UI@@UAE@XZ
??1CSkinEditListView@UI@@UAE@XZ
??1CSkinEditTextView@UI@@UAE@XZ
??1CSkinEditView@UI@@UAE@XZ
??1CSkinEditViewEx@UI@@UAE@XZ
??1CSkinExtensionMsgMap@UI@@QAE@XZ
??1CSkinFactory@UI@@AAE@XZ
??1CSkinFileDialog@UI@@QAE@XZ
??1CSkinFloatLayout@UI@@UAE@XZ
??1CSkinFolderDialog@UI@@QAE@XZ
??1CSkinFrameLayout@UI@@UAE@XZ
??1CSkinGridLayout@UI@@UAE@XZ
??1CSkinGridView@UI@@UAE@XZ
??1CSkinHorizontalLayout@UI@@UAE@XZ
??1CSkinHotKeyView@UI@@UAE@XZ
??1CSkinHyperlink@UI@@UAE@XZ
??1CSkinIEView@UI@@UAE@XZ
??1CSkinImage@UI@@AAE@XZ
??1CSkinImageView@UI@@UAE@XZ
??1CSkinImageViewEx@UI@@UAE@XZ
??1CSkinLayout@UI@@UAE@XZ
??1CSkinLine@UI@@UAE@XZ
??1CSkinListItem@UI@@UAE@XZ
??1CSkinListView@UI@@UAE@XZ
??1CSkinMsgMap@UI@@QAE@XZ
??1CSkinPicSaveAsDialog@UI@@QAE@XZ
??1CSkinPopupDialog@UI@@UAE@XZ
??1CSkinProgress@UI@@UAE@XZ
??1CSkinRadioButton@UI@@UAE@XZ
??1CSkinRadioGroup@UI@@UAE@XZ
??1CSkinRelativeLayout@UI@@UAE@XZ
??1CSkinSaveAsDialog@UI@@QAE@XZ
??1CSkinScrollBar@UI@@UAE@XZ
??1CSkinScrollView@UI@@UAE@XZ
??1CSkinSlideLayout@UI@@UAE@XZ
??1CSkinSlider@UI@@UAE@XZ
??1CSkinSplitter@UI@@UAE@XZ
??1CSkinSplitterLayout@UI@@UAE@XZ
??1CSkinTextView@UI@@UAE@XZ
??1CSkinTextViewEx@UI@@UAE@XZ
??1CSkinTimeHourItem@UI@@UAE@XZ
??1CSkinTimeLayout@UI@@UAE@XZ
??1CSkinTimeMinuteItem@UI@@UAE@XZ
??1CSkinTimeSecondItem@UI@@UAE@XZ
??1CSkinTrayIcon@UI@@EAE@XZ
??1CSkinTreeItem@UI@@UAE@XZ
??1CSkinTreeView@UI@@UAE@XZ
??1CSkinVerticalLayout@UI@@UAE@XZ
??1CSkinView@UI@@UAE@XZ
??1CSkinWindow@UI@@UAE@XZ
??1CSkinWndHost@UI@@UAE@XZ
??1CSkinWndView@UI@@UAE@XZ
??1CSlideAnimationHost@UI@@UAE@XZ
??1CSwitchAnimationHost@UI@@UAE@XZ
??4CDialogTipsWindow@UI@@QAEAAV01@ABV01@@Z
??4CDropSource@UI@@QAEAAV01@ABV01@@Z
??4CDropTarget@UI@@QAEAAV01@ABV01@@Z
??4CHideAnimationHost@UI@@QAEAAV01@ABV01@@Z
??4CPaintHelper@UI@@QAEAAV01@ABV01@@Z
??4CSkinAnimationGroup@UI@@QAEAAV01@ABV01@@Z
??4CSkinApplication@UI@@QAEAAV01@ABV01@@Z
??4CSkinButton@UI@@QAEAAV01@ABV01@@Z
??4CSkinCefView@UI@@QAEAAV01@ABV01@@Z
??4CSkinCheckBox@UI@@QAEAAV01@ABV01@@Z
??4CSkinColorDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinComboBox@UI@@QAEAAV01@ABV01@@Z
??4CSkinComboItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinDateDayItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinDateDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinDateLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinDateMonthItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinDateView@UI@@QAEAAV01@ABV01@@Z
??4CSkinDateYearItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinDoubleCoreWebView@UI@@QAEAAV01@ABV01@@Z
??4CSkinEditListView@UI@@QAEAAV01@ABV01@@Z
??4CSkinEditTextView@UI@@QAEAAV01@ABV01@@Z
??4CSkinEditView@UI@@QAEAAV01@ABV01@@Z
??4CSkinEditViewEx@UI@@QAEAAV01@ABV01@@Z
??4CSkinExtensionMsgMap@UI@@QAEAAV01@ABV01@@Z
??4CSkinFactory@UI@@QAEAAV01@ABV01@@Z
??4CSkinFileDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinFloatLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinFolderDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinFrameLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinGridLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinGridView@UI@@QAEAAV01@ABV01@@Z
??4CSkinHorizontalLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinHotKeyView@UI@@QAEAAV01@ABV01@@Z
??4CSkinHyperlink@UI@@QAEAAV01@ABV01@@Z
??4CSkinIEView@UI@@QAEAAV01@ABV01@@Z
??4CSkinImage@UI@@QAEAAV01@ABV01@@Z
??4CSkinImageView@UI@@QAEAAV01@ABV01@@Z
??4CSkinImageViewEx@UI@@QAEAAV01@ABV01@@Z
??4CSkinLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinLine@UI@@QAEAAV01@ABV01@@Z
??4CSkinListItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinListView@UI@@QAEAAV01@ABV01@@Z
??4CSkinMsgMap@UI@@QAEAAV01@ABV01@@Z
??4CSkinPicSaveAsDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinPopupDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinProgress@UI@@QAEAAV01@ABV01@@Z
??4CSkinRadioButton@UI@@QAEAAV01@ABV01@@Z
??4CSkinRadioGroup@UI@@QAEAAV01@ABV01@@Z
??4CSkinRelativeLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinSaveAsDialog@UI@@QAEAAV01@ABV01@@Z
??4CSkinScrollBar@UI@@QAEAAV01@ABV01@@Z
??4CSkinScrollView@UI@@QAEAAV01@ABV01@@Z
??4CSkinSlideLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinSlider@UI@@QAEAAV01@ABV01@@Z
??4CSkinSplitter@UI@@QAEAAV01@ABV01@@Z
??4CSkinSplitterLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinTextView@UI@@QAEAAV01@ABV01@@Z
??4CSkinTextViewEx@UI@@QAEAAV01@ABV01@@Z
??4CSkinTimeHourItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinTimeLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinTimeMinuteItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinTimeSecondItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinTrayIcon@UI@@QAEAAV01@ABV01@@Z
??4CSkinTreeItem@UI@@QAEAAV01@ABV01@@Z
??4CSkinTreeView@UI@@QAEAAV01@ABV01@@Z
??4CSkinVerticalLayout@UI@@QAEAAV01@ABV01@@Z
??4CSkinView@UI@@QAEAAV01@ABV01@@Z
??4CSkinWindow@UI@@QAEAAV01@ABV01@@Z
??4CSkinWndHost@UI@@QAEAAV01@ABV01@@Z
??4CSkinWndView@UI@@QAEAAV01@ABV01@@Z
??4CSlideAnimationHost@UI@@QAEAAV01@ABV01@@Z
??4CStringHelper@UI@@QAEAAV01@ABV01@@Z
??4CSwitchAnimationHost@UI@@QAEAAV01@ABV01@@Z
??4CXMLHelper@UI@@QAEAAV01@ABV01@@Z
??4SkinUI@UI@@QAEAAV01@ABV01@@Z
??_7CDataObject@UI@@6B@
??_7CDialogTipsWindow@UI@@6BCDropTarget@1@@
??_7CDialogTipsWindow@UI@@6BCSkinWindow@1@@
??_7CDropSource@UI@@6B@
??_7CDropTarget@UI@@6B@
??_7CHideAnimationHost@UI@@6B@
??_7CSkinAnimationGroup@UI@@6B@
??_7CSkinApplication@UI@@6B@
??_7CSkinButton@UI@@6B@
??_7CSkinCefView@UI@@6B@
??_7CSkinCheckBox@UI@@6B@
??_7CSkinComboBox@UI@@6B@
??_7CSkinComboItem@UI@@6B@
??_7CSkinDateDayItem@UI@@6B@
??_7CSkinDateDialog@UI@@6BCDropTarget@1@@
??_7CSkinDateDialog@UI@@6BCSkinWindow@1@@
??_7CSkinDateLayout@UI@@6B@
??_7CSkinDateMonthItem@UI@@6B@
??_7CSkinDateView@UI@@6B@
??_7CSkinDateYearItem@UI@@6B@
??_7CSkinDialog@UI@@6BCDropTarget@1@@
??_7CSkinDialog@UI@@6BCSkinWindow@1@@
??_7CSkinDoubleCoreWebView@UI@@6B@
??_7CSkinEditListView@UI@@6B@
??_7CSkinEditTextView@UI@@6B@
??_7CSkinEditView@UI@@6B@
??_7CSkinEditViewEx@UI@@6B@
??_7CSkinFloatLayout@UI@@6B@
??_7CSkinFrameLayout@UI@@6B@
??_7CSkinGridLayout@UI@@6B@
??_7CSkinGridView@UI@@6B@
??_7CSkinHorizontalLayout@UI@@6B@
??_7CSkinHotKeyView@UI@@6B@
??_7CSkinHyperlink@UI@@6B@
??_7CSkinIEView@UI@@6B@
??_7CSkinImageView@UI@@6BCImageObject@1@@
??_7CSkinImageView@UI@@6BCSkinView@1@@
??_7CSkinImageViewEx@UI@@6B@
??_7CSkinLayout@UI@@6B@
??_7CSkinLine@UI@@6B@
??_7CSkinListItem@UI@@6B@
??_7CSkinListView@UI@@6B@
??_7CSkinPopupDialog@UI@@6BCDropTarget@1@@
??_7CSkinPopupDialog@UI@@6BCSkinWindow@1@@
??_7CSkinProgress@UI@@6B@
??_7CSkinRadioButton@UI@@6B@
??_7CSkinRadioGroup@UI@@6B@
??_7CSkinRelativeLayout@UI@@6B@
??_7CSkinScrollBar@UI@@6B@
??_7CSkinScrollView@UI@@6B@
??_7CSkinSlideLayout@UI@@6B@
??_7CSkinSlider@UI@@6B@
??_7CSkinSplitter@UI@@6B@
??_7CSkinSplitterLayout@UI@@6B@
??_7CSkinTextView@UI@@6B@
??_7CSkinTextViewEx@UI@@6B@
??_7CSkinTimeHourItem@UI@@6B@
??_7CSkinTimeLayout@UI@@6B@
??_7CSkinTimeMinuteItem@UI@@6B@
??_7CSkinTimeSecondItem@UI@@6B@
??_7CSkinTrayIcon@UI@@6B@
??_7CSkinTreeItem@UI@@6B@
??_7CSkinTreeView@UI@@6B@
??_7CSkinVerticalLayout@UI@@6B@
??_7CSkinView@UI@@6B@
??_7CSkinWindow@UI@@6B@
??_7CSkinWndHost@UI@@6BCDropTarget@1@@
??_7CSkinWndHost@UI@@6BCSkinWindow@1@@
??_7CSkinWndView@UI@@6B@
??_7CSlideAnimationHost@UI@@6B@
??_7CSwitchAnimationHost@UI@@6B@
??_B?1??GetFontColor@CSkinEditView@UI@@QAEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ@51
??_FCSkinDialog@UI@@QAEXXZ
??_FCSkinPopupDialog@UI@@QAEXXZ
?ActionSheet@CSkinDialog@UI@@QAEHABV?$list@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@1@Z
?AddChild@CSkinView@UI@@UAEXPAV12@@Z
?AddCommandHandle@CSkinMsgMap@UI@@QAEXIP8CSkinView@2@AEXXZ@Z
?AddCommandRangeHandle@CSkinMsgMap@UI@@QAEXIIP8CSkinView@2@AEXXZ@Z
?AddContent@CSkinComboBox@UI@@QAEJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AddEditView@CSkinDialog@UI@@QAEXPAVCSkinEditView@2@@Z
?AddHandle@CSkinExtensionMsgMap@UI@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@P8CSkinView@2@AEXXZ@Z
?AddHandle@CSkinMsgMap@UI@@QAEXIP8CSkinView@2@AEXXZ@Z
?AddItem@CSkinTreeItem@UI@@UAEXPAV12@@Z
?AddItem@CSkinTreeItem@UI@@UAEXPAVCSkinListItem@2@@Z
?AddObject@CSkinImage@UI@@QAEXPAVCImageObject@2@@Z
?AddRef@CDataObject@UI@@UAGKXZ
?AddRef@CDropSource@UI@@UAGKXZ
?AddRef@CDropTarget@UI@@UAGKXZ
?AddUpdateCommandUIHandle@CSkinMsgMap@UI@@QAEXIP8CSkinView@2@AEXXZ@Z
?AddUpdateUI@CSkinDialog@UI@@QAEXPAVCSkinView@2@0@Z
?Alert@CSkinDialog@UI@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?AppendHyperlink@CSkinEditView@UI@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IH00@Z
?AppendImage@CSkinEditView@UI@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HABVCSize@2@11@Z
?AppendText@CSkinEditView@UI@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H00@Z
?AppendView@CSkinEditView@UI@@QAEXPAVCSkinView@2@@Z
?AppendXML@CSkinEditView@UI@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?BoolToString@CStringHelper@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?BoolToString@CStringHelper@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?BoolToString@SkinUI@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?BoolToString@SkinUI@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?BuildCache@CSlideAnimationHost@UI@@IAEXXZ
?COLORREFToString@CStringHelper@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?COLORREFToString@SkinUI@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?CanGoBack@CSkinCefView@UI@@QAE_NXZ
?CanGoBack@CSkinDoubleCoreWebView@UI@@QAE_NXZ
?CanGoBack@CSkinIEView@UI@@QAE_NXZ
?CanGoForward@CSkinCefView@UI@@QAE_NXZ
?CanGoForward@CSkinDoubleCoreWebView@UI@@QAE_NXZ
?CanGoForward@CSkinIEView@UI@@QAE_NXZ
?CefProgressRestart@CSkinCefView@UI@@SAXXZ
?CefProgressTerminated@CSkinCefView@UI@@SAXXZ
?CenterWindow@CSkinWindow@UI@@QAEHXZ
?ChangeAppName@SkinUI@UI@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ChangeDefaultCaption@SkinUI@UI@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ChangeFontSize@CSkinDialog@UI@@SAXXZ
?ChangeFontSize@SkinUI@UI@@SAXJ@Z
?ChangeMode@CSkinDateLayout@UI@@AAEXI@Z
?ChangeSkin@CSkinDialog@UI@@SAXXZ
?ChangeSkin@SkinUI@UI@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?CharFormatToString@CStringHelper@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABUCharFormat@2@@Z
?CharFormatToString@SkinUI@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABUCharFormat@2@@Z
?CheckTerminatedError@CSkinCefView@UI@@AAEHXZ
?Clear@CSkinEditView@UI@@UAEXXZ
?ClientToScreen@CSkinWindow@UI@@QAEHAAVCPoint@2@@Z
?ClientToScreen@CSkinWindow@UI@@QAEHAAVCRect@2@@Z
?CloseWindowHost@CSkinWndView@UI@@QAEXXZ
?ColorToString@CStringHelper@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVColor@Gdiplus@@@Z
?ColorToString@SkinUI@UI@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVColor@Gdiplus@@@Z
?Compare@CStringHelper@UI@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?CompareNoCase@CStringHelper@UI@@SAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?Confirm@CSkinDialog@UI@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@000@Z
?Copy@CSkinEditListView@UI@@QAEXXZ
?Copy@CSkinEditView@UI@@UAEXXZ
?CopyMedium@CDataObject@UI@@AAEJPAUtagSTGMEDIUM@@0PAUtagFORMATETC@@@Z
?Create@CHideAnimationHost@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinAnimationGroup@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinButton@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinCefView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinCheckBox@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinComboBox@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinComboItem@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinDateLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinDateView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinDialog@UI@@QAEHPAUHWND__@@K@Z
?Create@CSkinDoubleCoreWebView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinEditListView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinEditTextView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinEditView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinEditViewEx@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinFactory@UI@@QAEPAVCSkinView@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV32@@Z
?Create@CSkinFloatLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinFrameLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinGridLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinGridView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinHorizontalLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinHotKeyView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinHyperlink@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinIEView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinImageView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinImageViewEx@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinLine@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinListItem@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinListView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinProgress@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinRadioButton@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinRadioGroup@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinRelativeLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinScrollBar@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinSlideLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinSlider@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinSplitter@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinSplitterLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinTextView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinTextViewEx@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinTimeLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinTreeItem@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinTreeView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinVerticalLayout@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSkinView@UI@@SAPAV12@PAV12@@Z
?Create@CSkinWndView@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSlideAnimationHost@UI@@SAPAVCSkinView@2@PAV32@@Z
?Create@CSwitchAnimationHost@UI@@SAPAVCSkinView@2@PAV32@@Z
?CreateBitmapFromHBITMAP@SkinUI@UI@@SAPAVBitmap@Gdiplus@@PAUHBITMAP__@@@Z
?CreateCompatibleBitmap@SkinUI@UI@@SAPAUHBITMAP__@@PAUHDC__@@HHPAPAE@Z
?CreateDateDayItem@CSkinDateLayout@UI@@MAEPAVCSkinDateDayItem@2@XZ
?CreateDateMonthItem@CSkinDateLayout@UI@@MAEPAVCSkinDateMonthItem@2@XZ
?CreateDateYearItem@CSkinDateLayout@UI@@MAEPAVCSkinDateYearItem@2@XZ
?CreateTimeHourItem@CSkinTimeLayout@UI@@MAEPAVCSkinTimeHourItem@2@XZ
?CreateTimeMinuteItem@CSkinTimeLayout@UI@@MAEPAVCSkinTimeMinuteItem@2@XZ
?CreateTimeSecondItem@CSkinTimeLayout@UI@@MAEPAVCSkinTimeSecondItem@2@XZ
?CreateWindowHost@CSkinWndView@UI@@QAEXXZ
?Cut@CSkinEditView@UI@@UAEXXZ
?DAdvise@CDataObject@UI@@UAGJPAUtagFORMATETC@@KPAUIAdviseSink@@PAK@Z
?DUnadvise@CDataObject@UI@@UAGJK@Z
?Delete@CSkinEditView@UI@@UAEXXZ
?Delete@CSkinTrayIcon@UI@@IAEXXZ
?DeleteAllChild@CSkinView@UI@@UAEXXZ
?DeleteAllItem@CSkinTreeItem@UI@@UAEXXZ
?DeleteChild@CSkinView@UI@@UAEXPAV12@@Z
?DeleteItem@CSkinTreeItem@UI@@UAEXPAVCSkinListItem@2@@Z
?DeleteItem@CSkinTreeView@UI@@QAEXPAVCSkinListItem@2@PAVCSkinTreeItem@2@@Z
?DestroyComboBar@CSkinComboBox@UI@@SAXXZ
?DestroyWindow@CSkinWindow@UI@@QAEHXZ

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/cef.pak
.js
cef/cef_100_percent.pak
cef/cef_200_percent.pak
cef/cef_cmd.exe
.exe windows:5 windows x86 arch:x86

eca604a577513c5d220ca4330ffd9139

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

85:ef:93:9f:88:b9:3f:9f:52:78:71:fc:a5:59:ec:09:91:52:23:51
Signer

Actual PE Digest

85:ef:93:9f:88:b9:3f:9f:52:78:71:fc:a5:59:ec:09:91:52:23:51

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\wzl\Documents\Visual Studio 2008\Projects\cef_cmd\Release\cef_cmd.pdb

Imports

msvcr90

__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_amsg_exit
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_initterm

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/cef_extensions.pak
.js
cef/d3dcompiler_43.dll
.dll windows:6 windows x86 arch:x86

6ba7b0e4e74a8eea96dca4fffc88b859

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a0:dc:fd:f1:04:c6:f9:25:f4:de:ed:83:b3:1b:1c:9e:4a:d1:be:fb
Signer

Actual PE Digest

a0:dc:fd:f1:04:c6:f9:25:f4:de:ed:83:b3:1b:1c:9e:4a:d1:be:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_43.pdb

Imports

msvcrt

??1type_info@@UAE@XZ
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
_initterm
_XcptFilter
_CxxThrowException
memset
memcpy
isxdigit
atof
setlocale
_strdup
_mbstrlen
modf
isalnum
_isnan
ceil
_finite
strrchr
_clearfp
_controlfp
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
getenv
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
free
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_vsnprintf
_errno
__CxxFrameHandler
floor
_CIfmod
_CItanh
_CItan
_CIsinh
_CIsin
_CIlog
_CIpow
_CIexp
_CIsqrt
_CIcosh
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos

gdi32

DeleteObject

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
UnmapViewOfFile
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
GetLastError
SetUnhandledExceptionFilter
WideCharToMultiByte
GetFullPathNameA
HeapCreate
OutputDebugStringA
LoadLibraryA
GetModuleHandleA
lstrcmpiA
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
InterlockedExchange
TlsAlloc
Sleep
InterlockedCompareExchange
FreeLibrary
GetSystemInfo
GetProcAddress
VirtualAlloc
GetProcessHeap
HeapFree
HeapAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
GetVersion

Exports

Exports

D3DAssemble
D3DCompile
D3DCompressShaders
D3DCreateBlob
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DPreprocess
D3DReflect
D3DReturnFailure1
D3DStripShader
DebugSetMute

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/d3dcompiler_47.dll
.dll windows:10 windows x86 arch:x86

323b4a980be6850b6d140bd6363118e2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

29:f7:54:62:e0:86:50:d7:b3:7d:b3:8f:03:0f:e0:8a:ab:bb:b0:0c
Signer

Actual PE Digest

29:f7:54:62:e0:86:50:d7:b3:7d:b3:8f:03:0f:e0:8a:ab:bb:b0:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

msvcrt

__dllonexit
_unlock
_lock
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_callnewh
_isnan
__isascii
_clearfp
_controlfp
_strdup
_mbstrlen
_purecall
_vsnwprintf
strtoul
isxdigit
atof
strchr
setlocale
strnlen
modf
strrchr
tolower
_finite
_fpclass
memmove
strncmp
strncpy_s
isspace
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
bsearch
qsort
strcat_s
_onexit
_CxxThrowException
_snwprintf_s
__unDName
fread
fseek
_wfsopen
wcstoul
_fileno
sscanf_s
_filelengthi64
towlower
_wcsnicmp
_wsplitpath_s
wcscpy_s
wcsncat_s
wcsrchr
swprintf_s
_wmakepath_s
time
_wcsdup
_wgetenv
_wfullpath
_chsize_s
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
_mbscmp
_memicmp
toupper
_atoi64
strtod
_errno
_strtoui64
?terminate@@YAXXZ
_except_handler4_common
strstr
malloc
_strnicmp
atoi
isdigit
isalpha
strcpy_s
memcpy_s
isalnum
getenv
free
_stricmp
sprintf_s
_vsnprintf
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
ceil
floor

advapi32

RegOpenKeyExW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

MapViewOfFileEx
SetFilePointer
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsW
DeviceIoControl
SetFilePointerEx
SetEndOfFile
GetFileType
DeleteFileW
FlushViewOfFile
SetFileAttributesW
GetFileAttributesW
SetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
lstrcmpiA
HeapCreate
GetEnvironmentVariableA
GetModuleFileNameA
LCMapStringW
DisableThreadLibraryCalls
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
HeapAlloc
GetProcessHeap
HeapFree
FreeLibrary
WriteFile
VirtualFree
VirtualAlloc
GetSystemInfo
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
Sleep
TlsAlloc
TlsSetValue
HeapDestroy
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
CreateFileA

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/devtools_resources.pak
cef/icudtl.dat
cef/libEGL.dll
.dll windows:5 windows x86 arch:x86

1f1ea96193635656f86269a5cfe486d0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7d:e8:b3:37:20:30:b9:cb:72:17:9b:30:65:9d:8c:73:dd:6e:b7:e9
Signer

Actual PE Digest

7d:e8:b3:37:20:30:b9:cb:72:17:9b:30:65:9d:8c:73:dd:6e:b7:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Win-2623\download\chromium\src\out\Release\libEGL.dll.pdb

Imports

libglesv2

?ReleaseDeviceANGLE@egl@@YGIPAX@Z
?CreateDeviceANGLE@egl@@YGPAXHPAXPBH@Z
?DestroyImageKHR@egl@@YGIPAX0@Z
?CreateImageKHR@egl@@YGPAXPAX0I0PBH@Z
?QueryDeviceStringEXT@egl@@YGPBDPAXH@Z
?QueryDeviceAttribEXT@egl@@YGIPAXHPAH@Z
?QueryDisplayAttribEXT@egl@@YGIPAXHPAH@Z
?GetPlatformDisplayEXT@egl@@YGPAXIPAXPBH@Z
?PostSubBufferNV@egl@@YGIPAX0HHHH@Z
?QuerySurfacePointerANGLE@egl@@YGIPAX0HPAPAX@Z
?WaitSync@egl@@YGIPAX0H@Z
?CreatePlatformPixmapSurface@egl@@YGPAXPAX00PBH@Z
?CreatePlatformWindowSurface@egl@@YGPAXPAX00PBH@Z
?GetPlatformDisplay@egl@@YGPAXIPAXPBH@Z
?DestroyImage@egl@@YGIPAX0@Z
?CreateImage@egl@@YGPAXPAX0I0PBH@Z
?GetSyncAttrib@egl@@YGIPAX0HPAH@Z
?ClientWaitSync@egl@@YGHPAX0H_K@Z
?DestroySync@egl@@YGIPAX0@Z
?CreateSync@egl@@YGPAXPAXIPBH@Z
?GetCurrentContext@egl@@YGPAXXZ
?WaitClient@egl@@YGIXZ
?ReleaseThread@egl@@YGIXZ
?CreatePbufferFromClientBuffer@egl@@YGPAXPAXI00PBH@Z
?QueryAPI@egl@@YGIXZ
?BindAPI@egl@@YGII@Z
?SwapInterval@egl@@YGIPAXH@Z
?SurfaceAttrib@egl@@YGIPAX0HH@Z
?ReleaseTexImage@egl@@YGIPAX0H@Z
?BindTexImage@egl@@YGIPAX0H@Z
?WaitNative@egl@@YGIH@Z
?WaitGL@egl@@YGIXZ
?Terminate@egl@@YGIPAX@Z
?SwapBuffers@egl@@YGIPAX0@Z
?QuerySurface@egl@@YGIPAX0HPAH@Z
?QueryString@egl@@YGPBDPAXH@Z
?QueryContext@egl@@YGIPAX0HPAH@Z
?MakeCurrent@egl@@YGIPAX000@Z
?Initialize@egl@@YGIPAXPAH1@Z
?GetProcAddress@egl@@YGP6AXXZPBD@Z
?GetError@egl@@YGHXZ
?GetDisplay@egl@@YGPAXPAUHDC__@@@Z
?GetCurrentSurface@egl@@YGPAXH@Z
?GetCurrentDisplay@egl@@YGPAXXZ
?GetConfigs@egl@@YGIPAXPAPAXHPAH@Z
?GetConfigAttrib@egl@@YGIPAX0HPAH@Z
?DestroySurface@egl@@YGIPAX0@Z
?DestroyContext@egl@@YGIPAX0@Z
?CreateWindowSurface@egl@@YGPAXPAX0PAUHWND__@@PBH@Z
?CreatePixmapSurface@egl@@YGPAXPAX0PAUHBITMAP__@@PBH@Z
?CreatePbufferSurface@egl@@YGPAXPAX0PBH@Z
?CreateContext@egl@@YGPAXPAX00PBH@Z
?CopyBuffers@egl@@YGIPAX0PAUHBITMAP__@@@Z
?ChooseConfig@egl@@YGIPAXPBHPAPAXHPAH@Z

kernel32

CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
OutputDebugStringW
GetStringTypeW
HeapReAlloc
HeapAlloc
RtlUnwind
LoadLibraryExW
GetModuleFileNameW
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCommandLineA
GetCurrentThreadId
GetLastError
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglCopyBuffers
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformWindowSurface
eglCreateSync
eglCreateWindowSurface
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroySurface
eglDestroySync
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglInitialize
eglMakeCurrent
eglPostSubBufferNV
eglQueryAPI
eglQueryContext
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribEXT
eglQueryString
eglQuerySurface
eglQuerySurfacePointerANGLE
eglReleaseDeviceANGLE
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/libGLESv2.dll
.dll windows:5 windows x86 arch:x86

d965d87567563d5be903d8a8b1ea467c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:08:18:07:5e:7e:92:e1:ac:4a:6e:e6:a2:1d:af:74:30:d7:7d:8a
Signer

Actual PE Digest

0d:08:18:07:5e:7e:92:e1:ac:4a:6e:e6:a2:1d:af:74:30:d7:7d:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Win-2623\download\chromium\src\out\Release\libGLESv2.dll.pdb

Imports

kernel32

LoadLibraryW
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcessId
GetTempFileNameA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
Sleep
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetTempPathA
FreeLibrary
SetEndOfFile
CreateFileW
ReadConsoleW
OutputDebugStringW
WriteConsoleW
SetStdHandle
LoadLibraryExW
SetFilePointerEx
ReadFile
FlushFileBuffers
GetModuleFileNameW
GetConsoleMode
GetConsoleCP
WriteFile
CloseHandle
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapReAlloc
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
GetStartupInfoW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
GetSystemTimeAsFileTime

gdi32

SwapBuffers
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
GetPixelFormat

user32

WindowFromDC
DefWindowProcW
RegisterClassA
UnregisterClassA
CreateWindowExA
InvalidateRect
GetWindowThreadProcessId
CreateWindowExW
GetClientRect
IsIconic
LoadCursorA
ReleaseDC
GetDC
DestroyWindow
IsWindow

d3d9

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_SetMarker
D3DPERF_GetStatus
Direct3DCreate9

Exports

Exports

?ActiveTexture@gl@@YGXI@Z
?AttachShader@gl@@YGXII@Z
?BeginQuery@gl@@YGXII@Z
?BeginQueryEXT@gl@@YGXII@Z
?BeginTransformFeedback@gl@@YGXI@Z
?BindAPI@egl@@YGII@Z
?BindAttribLocation@gl@@YGXIIPBD@Z
?BindBuffer@gl@@YGXII@Z
?BindBufferBase@gl@@YGXIII@Z
?BindBufferRange@gl@@YGXIIIJJ@Z
?BindFramebuffer@gl@@YGXII@Z
?BindRenderbuffer@gl@@YGXII@Z
?BindSampler@gl@@YGXII@Z
?BindTexImage@egl@@YGIPAX0H@Z
?BindTexture@gl@@YGXII@Z
?BindTransformFeedback@gl@@YGXII@Z
?BindVertexArray@gl@@YGXI@Z
?BindVertexArrayOES@gl@@YGXI@Z
?BlendColor@gl@@YGXMMMM@Z
?BlendEquation@gl@@YGXI@Z
?BlendEquationSeparate@gl@@YGXII@Z
?BlendFunc@gl@@YGXII@Z
?BlendFuncSeparate@gl@@YGXIIII@Z
?BlitFramebuffer@gl@@YGXHHHHHHHHII@Z
?BlitFramebufferANGLE@gl@@YGXHHHHHHHHII@Z
?BufferData@gl@@YGXIJPBXI@Z
?BufferSubData@gl@@YGXIJJPBX@Z
?CheckFramebufferStatus@gl@@YGII@Z
?ChooseConfig@egl@@YGIPAXPBHPAPAXHPAH@Z
?Clear@gl@@YGXI@Z
?ClearBufferfi@gl@@YGXIHMH@Z
?ClearBufferfv@gl@@YGXIHPBM@Z
?ClearBufferiv@gl@@YGXIHPBH@Z
?ClearBufferuiv@gl@@YGXIHPBI@Z
?ClearColor@gl@@YGXMMMM@Z
?ClearDepthf@gl@@YGXM@Z
?ClearStencil@gl@@YGXH@Z
?ClientWaitSync@egl@@YGHPAX0H_K@Z
?ClientWaitSync@gl@@YGIPAU__GLsync@@I_K@Z
?ColorMask@gl@@YGXEEEE@Z
?CompileShader@gl@@YGXI@Z
?CompressedTexImage2D@gl@@YGXIHIHHHHPBX@Z
?CompressedTexImage3D@gl@@YGXIHIHHHHHPBX@Z
?CompressedTexSubImage2D@gl@@YGXIHHHHHIHPBX@Z
?CompressedTexSubImage3D@gl@@YGXIHHHHHHHIHPBX@Z
?CopyBufferSubData@gl@@YGXIIJJJ@Z
?CopyBuffers@egl@@YGIPAX0PAUHBITMAP__@@@Z
?CopyTexImage2D@gl@@YGXIHIHHHHH@Z
?CopyTexSubImage2D@gl@@YGXIHHHHHHH@Z
?CopyTexSubImage3D@gl@@YGXIHHHHHHHH@Z
?CreateContext@egl@@YGPAXPAX00PBH@Z
?CreateDeviceANGLE@egl@@YGPAXHPAXPBH@Z
?CreateImage@egl@@YGPAXPAX0I0PBH@Z
?CreateImageKHR@egl@@YGPAXPAX0I0PBH@Z
?CreatePbufferFromClientBuffer@egl@@YGPAXPAXI00PBH@Z
?CreatePbufferSurface@egl@@YGPAXPAX0PBH@Z
?CreatePixmapSurface@egl@@YGPAXPAX0PAUHBITMAP__@@PBH@Z
?CreatePlatformPixmapSurface@egl@@YGPAXPAX00PBH@Z
?CreatePlatformWindowSurface@egl@@YGPAXPAX00PBH@Z
?CreateProgram@gl@@YGIXZ
?CreateShader@gl@@YGII@Z
?CreateSync@egl@@YGPAXPAXIPBH@Z
?CreateWindowSurface@egl@@YGPAXPAX0PAUHWND__@@PBH@Z
?CullFace@gl@@YGXI@Z
?DebugMessageCallbackKHR@gl@@YGXP6GXIIIIHPBDPBX@Z1@Z
?DebugMessageControlKHR@gl@@YGXIIIHPBIE@Z
?DebugMessageInsertKHR@gl@@YGXIIIIHPBD@Z
?DeleteBuffers@gl@@YGXHPBI@Z
?DeleteFencesNV@gl@@YGXHPBI@Z
?DeleteFramebuffers@gl@@YGXHPBI@Z
?DeleteProgram@gl@@YGXI@Z
?DeleteQueries@gl@@YGXHPBI@Z
?DeleteQueriesEXT@gl@@YGXHPBI@Z
?DeleteRenderbuffers@gl@@YGXHPBI@Z
?DeleteSamplers@gl@@YGXHPBI@Z
?DeleteShader@gl@@YGXI@Z
?DeleteSync@gl@@YGXPAU__GLsync@@@Z
?DeleteTextures@gl@@YGXHPBI@Z
?DeleteTransformFeedbacks@gl@@YGXHPBI@Z
?DeleteVertexArrays@gl@@YGXHPBI@Z
?DeleteVertexArraysOES@gl@@YGXHPBI@Z
?DepthFunc@gl@@YGXI@Z
?DepthMask@gl@@YGXE@Z
?DepthRangef@gl@@YGXMM@Z
?DestroyContext@egl@@YGIPAX0@Z
?DestroyImage@egl@@YGIPAX0@Z
?DestroyImageKHR@egl@@YGIPAX0@Z
?DestroySurface@egl@@YGIPAX0@Z
?DestroySync@egl@@YGIPAX0@Z
?DetachShader@gl@@YGXII@Z
?Disable@gl@@YGXI@Z
?DisableVertexAttribArray@gl@@YGXI@Z
?DiscardFramebufferEXT@gl@@YGXIHPBI@Z
?DrawArrays@gl@@YGXIHH@Z
?DrawArraysInstanced@gl@@YGXIHHH@Z
?DrawArraysInstancedANGLE@gl@@YGXIHHH@Z
?DrawBuffers@gl@@YGXHPBI@Z
?DrawBuffersEXT@gl@@YGXHPBI@Z
?DrawElements@gl@@YGXIHIPBX@Z
?DrawElementsInstanced@gl@@YGXIHIPBXH@Z
?DrawElementsInstancedANGLE@gl@@YGXIHIPBXH@Z
?DrawRangeElements@gl@@YGXIIIHIPBX@Z
?EGLImageTargetRenderbufferStorageOES@gl@@YGXIPAX@Z
?EGLImageTargetTexture2DOES@gl@@YGXIPAX@Z
?Enable@gl@@YGXI@Z
?EnableVertexAttribArray@gl@@YGXI@Z
?EndQuery@gl@@YGXI@Z
?EndQueryEXT@gl@@YGXI@Z
?EndTransformFeedback@gl@@YGXXZ
?FenceSync_@gl@@YGPAU__GLsync@@II@Z
?Finish@gl@@YGXXZ
?FinishFenceNV@gl@@YGXI@Z
?Flush@gl@@YGXXZ
?FlushMappedBufferRange@gl@@YGXIJJ@Z
?FlushMappedBufferRangeEXT@gl@@YGXIJJ@Z
?FramebufferRenderbuffer@gl@@YGXIIII@Z
?FramebufferTexture2D@gl@@YGXIIIIH@Z
?FramebufferTextureLayer@gl@@YGXIIIHH@Z
?FrontFace@gl@@YGXI@Z
?GenBuffers@gl@@YGXHPAI@Z
?GenFencesNV@gl@@YGXHPAI@Z
?GenFramebuffers@gl@@YGXHPAI@Z
?GenQueries@gl@@YGXHPAI@Z
?GenQueriesEXT@gl@@YGXHPAI@Z
?GenRenderbuffers@gl@@YGXHPAI@Z
?GenSamplers@gl@@YGXHPAI@Z
?GenTextures@gl@@YGXHPAI@Z
?GenTransformFeedbacks@gl@@YGXHPAI@Z
?GenVertexArrays@gl@@YGXHPAI@Z
?GenVertexArraysOES@gl@@YGXHPAI@Z
?GenerateMipmap@gl@@YGXI@Z
?GetActiveAttrib@gl@@YGXIIHPAH0PAIPAD@Z
?GetActiveUniform@gl@@YGXIIHPAH0PAIPAD@Z
?GetActiveUniformBlockName@gl@@YGXIIHPAHPAD@Z
?GetActiveUniformBlockiv@gl@@YGXIIIPAH@Z
?GetActiveUniformsiv@gl@@YGXIHPBIIPAH@Z
?GetAttachedShaders@gl@@YGXIHPAHPAI@Z
?GetAttribLocation@gl@@YGHIPBD@Z
?GetBooleanv@gl@@YGXIPAE@Z
?GetBufferParameteri64v@gl@@YGXIIPA_J@Z
?GetBufferParameteriv@gl@@YGXIIPAH@Z
?GetBufferPointerv@gl@@YGXIIPAPAX@Z
?GetBufferPointervOES@gl@@YGXIIPAPAX@Z
?GetConfigAttrib@egl@@YGIPAX0HPAH@Z
?GetConfigs@egl@@YGIPAXPAPAXHPAH@Z
?GetCurrentContext@egl@@YGPAXXZ
?GetCurrentDisplay@egl@@YGPAXXZ
?GetCurrentSurface@egl@@YGPAXH@Z
?GetDebugMessageLogKHR@gl@@YGIIHPAI000PAHPAD@Z
?GetDisplay@egl@@YGPAXPAUHDC__@@@Z
?GetError@egl@@YGHXZ
?GetError@gl@@YGIXZ
?GetFenceivNV@gl@@YGXIIPAH@Z
?GetFloatv@gl@@YGXIPAM@Z
?GetFragDataLocation@gl@@YGHIPBD@Z
?GetFramebufferAttachmentParameteriv@gl@@YGXIIIPAH@Z
?GetGraphicsResetStatusEXT@gl@@YGIXZ
?GetInteger64i_v@gl@@YGXIIPA_J@Z
?GetInteger64v@gl@@YGXIPA_J@Z
?GetIntegeri_v@gl@@YGXIIPAH@Z
?GetIntegerv@gl@@YGXIPAH@Z
?GetInternalformativ@gl@@YGXIIIHPAH@Z
?GetObjectLabelKHR@gl@@YGXIIHPAHPAD@Z
?GetObjectPtrLabelKHR@gl@@YGXPBXHPAHPAD@Z
?GetPlatformDisplay@egl@@YGPAXIPAXPBH@Z
?GetPlatformDisplayEXT@egl@@YGPAXIPAXPBH@Z
?GetPointervKHR@gl@@YGXIPAPAX@Z
?GetProcAddress@egl@@YGP6AXXZPBD@Z
?GetProgramBinary@gl@@YGXIHPAHPAIPAX@Z
?GetProgramBinaryOES@gl@@YGXIHPAHPAIPAX@Z
?GetProgramInfoLog@gl@@YGXIHPAHPAD@Z
?GetProgramiv@gl@@YGXIIPAH@Z
?GetQueryObjectuiv@gl@@YGXIIPAI@Z
?GetQueryObjectuivEXT@gl@@YGXIIPAI@Z
?GetQueryiv@gl@@YGXIIPAH@Z
?GetQueryivEXT@gl@@YGXIIPAH@Z
?GetRenderbufferParameteriv@gl@@YGXIIPAH@Z
?GetSamplerParameterfv@gl@@YGXIIPAM@Z
?GetSamplerParameteriv@gl@@YGXIIPAH@Z
?GetShaderInfoLog@gl@@YGXIHPAHPAD@Z
?GetShaderPrecisionFormat@gl@@YGXIIPAH0@Z
?GetShaderSource@gl@@YGXIHPAHPAD@Z
?GetShaderiv@gl@@YGXIIPAH@Z
?GetString@gl@@YGPBEI@Z
?GetStringi@gl@@YGPBEII@Z
?GetSyncAttrib@egl@@YGIPAX0HPAH@Z
?GetSynciv@gl@@YGXPAU__GLsync@@IHPAH1@Z
?GetTexParameterfv@gl@@YGXIIPAM@Z
?GetTexParameteriv@gl@@YGXIIPAH@Z
?GetTransformFeedbackVarying@gl@@YGXIIHPAH0PAIPAD@Z
?GetTranslatedShaderSourceANGLE@gl@@YGXIHPAHPAD@Z
?GetUniformBlockIndex@gl@@YGIIPBD@Z
?GetUniformIndices@gl@@YGXIHPBQBDPAI@Z
?GetUniformLocation@gl@@YGHIPBD@Z
?GetUniformfv@gl@@YGXIHPAM@Z
?GetUniformiv@gl@@YGXIHPAH@Z
?GetUniformuiv@gl@@YGXIHPAI@Z
?GetVertexAttribIiv@gl@@YGXIIPAH@Z
?GetVertexAttribIuiv@gl@@YGXIIPAI@Z
?GetVertexAttribPointerv@gl@@YGXIIPAPAX@Z
?GetVertexAttribfv@gl@@YGXIIPAM@Z
?GetVertexAttribiv@gl@@YGXIIPAH@Z
?GetnUniformfvEXT@gl@@YGXIHHPAM@Z
?GetnUniformivEXT@gl@@YGXIHHPAH@Z
?Hint@gl@@YGXII@Z
?Initialize@egl@@YGIPAXPAH1@Z
?InsertEventMarkerEXT@gl@@YGXHPBD@Z
?InvalidateFramebuffer@gl@@YGXIHPBI@Z
?InvalidateSubFramebuffer@gl@@YGXIHPBIHHHH@Z
?IsBuffer@gl@@YGEI@Z
?IsEnabled@gl@@YGEI@Z
?IsFenceNV@gl@@YGEI@Z
?IsFramebuffer@gl@@YGEI@Z
?IsProgram@gl@@YGEI@Z
?IsQuery@gl@@YGEI@Z
?IsQueryEXT@gl@@YGEI@Z
?IsRenderbuffer@gl@@YGEI@Z
?IsSampler@gl@@YGEI@Z
?IsShader@gl@@YGEI@Z
?IsSync@gl@@YGEPAU__GLsync@@@Z
?IsTexture@gl@@YGEI@Z
?IsTransformFeedback@gl@@YGEI@Z
?IsVertexArray@gl@@YGEI@Z
?IsVertexArrayOES@gl@@YGEI@Z
?LineWidth@gl@@YGXM@Z
?LinkProgram@gl@@YGXI@Z
?MakeCurrent@egl@@YGIPAX000@Z
?MapBufferOES@gl@@YGPAXII@Z
?MapBufferRange@gl@@YGPAXIJJI@Z
?MapBufferRangeEXT@gl@@YGPAXIJJI@Z
?ObjectLabelKHR@gl@@YGXIIHPBD@Z
?ObjectPtrLabelKHR@gl@@YGXPBXHPBD@Z
?PauseTransformFeedback@gl@@YGXXZ
?PixelStorei@gl@@YGXIH@Z
?PolygonOffset@gl@@YGXMM@Z
?PopDebugGroupKHR@gl@@YGXXZ
?PopGroupMarkerEXT@gl@@YGXXZ
?PostSubBufferNV@egl@@YGIPAX0HHHH@Z
?ProgramBinary@gl@@YGXIIPBXH@Z
?ProgramBinaryOES@gl@@YGXIIPBXH@Z
?ProgramParameteri@gl@@YGXIIH@Z
?PushDebugGroupKHR@gl@@YGXIIHPBD@Z
?PushGroupMarkerEXT@gl@@YGXHPBD@Z
?QueryAPI@egl@@YGIXZ
?QueryContext@egl@@YGIPAX0HPAH@Z
?QueryDeviceAttribEXT@egl@@YGIPAXHPAH@Z
?QueryDeviceStringEXT@egl@@YGPBDPAXH@Z
?QueryDisplayAttribEXT@egl@@YGIPAXHPAH@Z
?QueryString@egl@@YGPBDPAXH@Z
?QuerySurface@egl@@YGIPAX0HPAH@Z
?QuerySurfacePointerANGLE@egl@@YGIPAX0HPAPAX@Z
?ReadBuffer@gl@@YGXI@Z
?ReadPixels@gl@@YGXHHHHIIPAX@Z
?ReadnPixelsEXT@gl@@YGXHHHHIIHPAX@Z
?ReleaseDeviceANGLE@egl@@YGIPAX@Z
?ReleaseShaderCompiler@gl@@YGXXZ
?ReleaseTexImage@egl@@YGIPAX0H@Z
?ReleaseThread@egl@@YGIXZ
?RenderbufferStorage@gl@@YGXIIHH@Z
?RenderbufferStorageMultisample@gl@@YGXIHIHH@Z
?RenderbufferStorageMultisampleANGLE@gl@@YGXIHIHH@Z
?ResumeTransformFeedback@gl@@YGXXZ
?SampleCoverage@gl@@YGXME@Z
?SamplerParameterf@gl@@YGXIIM@Z
?SamplerParameterfv@gl@@YGXIIPBM@Z
?SamplerParameteri@gl@@YGXIIH@Z
?SamplerParameteriv@gl@@YGXIIPBH@Z
?Scissor@gl@@YGXHHHH@Z
?SetFenceNV@gl@@YGXII@Z
?ShaderBinary@gl@@YGXHPBIIPBXH@Z
?ShaderSource@gl@@YGXIHPBQBDPBH@Z
?StencilFunc@gl@@YGXIHI@Z
?StencilFuncSeparate@gl@@YGXIIHI@Z
?StencilMask@gl@@YGXI@Z
?StencilMaskSeparate@gl@@YGXII@Z
?StencilOp@gl@@YGXIII@Z
?StencilOpSeparate@gl@@YGXIIII@Z
?SurfaceAttrib@egl@@YGIPAX0HH@Z
?SwapBuffers@egl@@YGIPAX0@Z
?SwapInterval@egl@@YGIPAXH@Z
?Terminate@egl@@YGIPAX@Z
?TestFenceNV@gl@@YGEI@Z
?TexImage2D@gl@@YGXIHHHHHIIPBX@Z
?TexImage3D@gl@@YGXIHHHHHHIIPBX@Z
?TexParameterf@gl@@YGXIIM@Z
?TexParameterfv@gl@@YGXIIPBM@Z
?TexParameteri@gl@@YGXIIH@Z
?TexParameteriv@gl@@YGXIIPBH@Z
?TexStorage2D@gl@@YGXIHIHH@Z
?TexStorage2DEXT@gl@@YGXIHIHH@Z
?TexStorage3D@gl@@YGXIHIHHH@Z
?TexSubImage2D@gl@@YGXIHHHHHIIPBX@Z
?TexSubImage3D@gl@@YGXIHHHHHHHIIPBX@Z
?TransformFeedbackVaryings@gl@@YGXIHPBQBDI@Z
?Uniform1f@gl@@YGXHM@Z
?Uniform1fv@gl@@YGXHHPBM@Z
?Uniform1i@gl@@YGXHH@Z
?Uniform1iv@gl@@YGXHHPBH@Z
?Uniform1ui@gl@@YGXHI@Z
?Uniform1uiv@gl@@YGXHHPBI@Z
?Uniform2f@gl@@YGXHMM@Z
?Uniform2fv@gl@@YGXHHPBM@Z
?Uniform2i@gl@@YGXHHH@Z
?Uniform2iv@gl@@YGXHHPBH@Z
?Uniform2ui@gl@@YGXHII@Z
?Uniform2uiv@gl@@YGXHHPBI@Z
?Uniform3f@gl@@YGXHMMM@Z
?Uniform3fv@gl@@YGXHHPBM@Z
?Uniform3i@gl@@YGXHHHH@Z
?Uniform3iv@gl@@YGXHHPBH@Z
?Uniform3ui@gl@@YGXHIII@Z
?Uniform3uiv@gl@@YGXHHPBI@Z
?Uniform4f@gl@@YGXHMMMM@Z
?Uniform4fv@gl@@YGXHHPBM@Z
?Uniform4i@gl@@YGXHHHHH@Z
?Uniform4iv@gl@@YGXHHPBH@Z
?Uniform4ui@gl@@YGXHIIII@Z
?Uniform4uiv@gl@@YGXHHPBI@Z
?UniformBlockBinding@gl@@YGXIII@Z
?UniformMatrix2fv@gl@@YGXHHEPBM@Z
?UniformMatrix2x3fv@gl@@YGXHHEPBM@Z
?UniformMatrix2x4fv@gl@@YGXHHEPBM@Z
?UniformMatrix3fv@gl@@YGXHHEPBM@Z
?UniformMatrix3x2fv@gl@@YGXHHEPBM@Z
?UniformMatrix3x4fv@gl@@YGXHHEPBM@Z
?UniformMatrix4fv@gl@@YGXHHEPBM@Z
?UniformMatrix4x2fv@gl@@YGXHHEPBM@Z
?UniformMatrix4x3fv@gl@@YGXHHEPBM@Z
?UnmapBuffer@gl@@YGEI@Z
?UnmapBufferOES@gl@@YGEI@Z
?UseProgram@gl@@YGXI@Z
?ValidateProgram@gl@@YGXI@Z
?VertexAttrib1f@gl@@YGXIM@Z
?VertexAttrib1fv@gl@@YGXIPBM@Z
?VertexAttrib2f@gl@@YGXIMM@Z
?VertexAttrib2fv@gl@@YGXIPBM@Z
?VertexAttrib3f@gl@@YGXIMMM@Z
?VertexAttrib3fv@gl@@YGXIPBM@Z
?VertexAttrib4f@gl@@YGXIMMMM@Z
?VertexAttrib4fv@gl@@YGXIPBM@Z
?VertexAttribDivisor@gl@@YGXII@Z
?VertexAttribDivisorANGLE@gl@@YGXII@Z
?VertexAttribI4i@gl@@YGXIHHHH@Z
?VertexAttribI4iv@gl@@YGXIPBH@Z
?VertexAttribI4ui@gl@@YGXIIIII@Z
?VertexAttribI4uiv@gl@@YGXIPBI@Z
?VertexAttribIPointer@gl@@YGXIHIHPBX@Z
?VertexAttribPointer@gl@@YGXIHIEHPBX@Z
?Viewport@gl@@YGXHHHH@Z
?WaitClient@egl@@YGIXZ
?WaitGL@egl@@YGIXZ
?WaitNative@egl@@YGIH@Z
?WaitSync@egl@@YGIPAX0H@Z
?WaitSync@gl@@YGXPAU__GLsync@@I_K@Z
ANGLEPlatformCurrent
ANGLEPlatformInitialize
ANGLEPlatformShutdown
glActiveTexture
glAttachShader
glBeginQuery
glBeginQueryEXT
glBeginTransformFeedback
glBindAttribLocation
glBindBuffer
glBindBufferBase
glBindBufferRange
glBindFramebuffer
glBindRenderbuffer
glBindSampler
glBindTexture
glBindTransformFeedback
glBindVertexArray
glBindVertexArrayOES
glBlendColor
glBlendEquation
glBlendEquationSeparate
glBlendFunc
glBlendFuncSeparate
glBlitFramebuffer
glBlitFramebufferANGLE
glBufferData
glBufferSubData
glCheckFramebufferStatus
glClear
glClearBufferfi
glClearBufferfv
glClearBufferiv
glClearBufferuiv
glClearColor
glClearDepthf
glClearStencil
glClientWaitSync
glColorMask
glCompileShader
glCompressedTexImage2D
glCompressedTexImage3D
glCompressedTexSubImage2D
glCompressedTexSubImage3D
glCopyBufferSubData
glCopyTexImage2D
glCopyTexSubImage2D
glCopyTexSubImage3D
glCreateProgram
glCreateShader
glCullFace
glDebugMessageCallbackKHR
glDebugMessageControlKHR
glDebugMessageInsertKHR
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteProgram
glDeleteQueries
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteSamplers
glDeleteShader
glDeleteSync
glDeleteTextures
glDeleteTransformFeedbacks
glDeleteVertexArrays
glDeleteVertexArraysOES
glDepthFunc
glDepthMask
glDepthRangef
glDetachShader
glDisable
glDisableVertexAttribArray
glDiscardFramebufferEXT
glDrawArrays
glDrawArraysInstanced
glDrawArraysInstancedANGLE
glDrawBuffers
glDrawBuffersEXT
glDrawElements
glDrawElementsInstanced
glDrawElementsInstancedANGLE
glDrawRangeElements
glEGLImageTargetRenderbufferStorageOES
glEGLImageTargetTexture2DOES
glEnable
glEnableVertexAttribArray
glEndQuery
glEndQueryEXT
glEndTransformFeedback
glFenceSync
glFinish
glFinishFenceNV
glFlush
glFlushMappedBufferRange
glFlushMappedBufferRangeEXT
glFramebufferRenderbuffer
glFramebufferTexture2D
glFramebufferTextureLayer
glFrontFace
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenQueries
glGenQueriesEXT
glGenRenderbuffers
glGenSamplers
glGenTextures
glGenTransformFeedbacks
glGenVertexArrays
glGenVertexArraysOES
glGenerateMipmap
glGetActiveAttrib
glGetActiveUniform
glGetActiveUniformBlockName
glGetActiveUniformBlockiv
glGetActiveUniformsiv
glGetAttachedShaders
glGetAttribLocation
glGetBooleanv
glGetBufferParameteri64v
glGetBufferParameteriv
glGetBufferPointerv
glGetBufferPointervOES
glGetDebugMessageLogKHR
glGetError
glGetFenceivNV
glGetFloatv
glGetFragDataLocation
glGetFramebufferAttachmentParameteriv
glGetGraphicsResetStatusEXT
glGetInteger64i_v
glGetInteger64v
glGetIntegeri_v
glGetIntegerv
glGetInternalformativ
glGetObjectLabelKHR
glGetObjectPtrLabelKHR
glGetPointervKHR
glGetProgramBinary
glGetProgramBinaryOES
glGetProgramInfoLog
glGetProgramiv
glGetQueryObjectuiv
glGetQueryObjectuivEXT

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/libcef.dll
.dll windows:5 windows x86 arch:x86

9d117b5efe02256e602fa880c1a29d0c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

81:b7:26:49:63:7c:ff:a9:e4:31:61:4a:fa:69:57:4c:b0:c2:e6:6d
Signer

Actual PE Digest

81:b7:26:49:63:7c:ff:a9:e4:31:61:4a:fa:69:57:4c:b0:c2:e6:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Win-2623\download\chromium\src\out\Release\libcef.dll.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

usp10

ScriptStringFree
ScriptFreeCache
ScriptShape
ScriptStringOut
ScriptItemize
ScriptStringAnalyse

psapi

EnumProcessModules
QueryWorkingSet
GetProcessMemoryInfo

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathGetCharTypeW

advapi32

CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptGetHashParam
CryptSetHashParam
CryptDestroyKey
CryptGenKey
StartTraceW
ControlTraceW
ConvertStringSidToSidW
GetAce
GetKernelObjectSecurity
GetLengthSid
GetSecurityDescriptorSacl
SetKernelObjectSecurity
SetTokenInformation
CreateProcessAsUserW
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegEnumKeyExW
RegCloseKey
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
InitializeAcl
SystemFunction036
RegOpenKeyExA
RegQueryValueExA
ImpersonateAnonymousToken
RevertToSelf
CryptAcquireContextW
OpenTraceW
ProcessTrace
CloseTrace
CryptReleaseContext
CryptGenRandom
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDisablePredefinedCache
SetThreadToken
GetSecurityInfo
CopySid
CreateWellKnownSid
CreateRestrictedToken
DuplicateToken
DuplicateTokenEx
EqualSid
LookupPrivilegeValueW
SetEntriesInAclW

gdi32

GetEnhMetaFileBits
GetEnhMetaFileHeader
PlayEnhMetaFile
PlayEnhMetaFileRecord
SetEnhMetaFileBits
CancelDC
CreateDCW
StartDocW
EndDoc
SetAbortProc
RestoreDC
SaveDC
StartPage
EndPage
GetRgnBox
GetDIBits
IntersectClipRect
EnumFontFamiliesExA
CreateFontIndirectA
GetCharWidthW
GetOutlineTextMetricsW
CreateFontA
CreatePen
GetClipBox
GetClipRgn
GetObjectType
LineTo
CloseFigure
FillPath
SelectClipPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
MoveToEx
PolyBezierTo
GetTextFaceA
GetRegionData
EqualRgn
ExtEscape
EnumFontFamiliesExW
GetFontData
CreateRectRgn
ExtTextOutW
GetWorldTransform
StretchBlt
CreateBitmap
EnumEnhMetaFile
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
GetTextMetricsW
SetMapMode
GetTextExtentPoint32W
GetStockObject
ModifyWorldTransform
StretchDIBits
SetRectRgn
GetDeviceCaps
CombineRgn
GetTextFaceW
CreateFontW
CreateFontIndirectW
SetDIBitsToDevice
CreateCompatibleBitmap
SetBrushOrgEx
SetArcDirection
SetStretchBltMode
SetROP2
SetGraphicsMode
SetBkMode
SetDCPenColor
SetDCBrushColor
PolyBezier
CreateCompatibleDC
GetCurrentObject
GetObjectW
CreateSolidBrush
DeleteObject
GetBkColor
SelectObject
SetBkColor
PathToRegion
EndPath
SetTextColor
BitBlt
DeleteDC
GdiAlphaBlend
CreateDIBSection
GetGlyphIndicesW
SetTextAlign
GetGlyphOutlineW
AddFontMemResourceEx
GetCharABCWidthsW
GetFontUnicodeRanges
GetTextExtentPointI
BeginPath
AbortPath
SetWorldTransform
SetPolyFillMode
SelectClipRgn
RemoveFontMemResourceEx
ChoosePixelFormat
SetPixelFormat
SwapBuffers
SetDIBits
GetICMProfileW
CreateRectRgnIndirect
ExtCreatePen
GdiFlush

kernel32

OpenFileMappingW
SetEndOfFile
SetFilePointerEx
UnlockFile
LockFile
SetFileTime
FlushFileBuffers
GetFileSizeEx
GetFileInformationByHandle
Process32FirstW
GetProcessId
Process32NextW
CreateToolhelp32Snapshot
FreeLibrary
LoadLibraryW
lstrcmpiA
VirtualProtect
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
QueueUserWorkItem
GetUserDefaultLangID
GetSystemDirectoryW
GetWindowsDirectoryW
RegisterWaitForSingleObject
UnregisterWaitEx
GetModuleHandleExA
GetProcessHeaps
HeapUnlock
GetEnvironmentVariableW
HeapWalk
SetEnvironmentVariableW
VirtualQueryEx
GetSystemInfo
SwitchToThread
InitializeCriticalSection
ReleaseSemaphore
ReleaseMutex
CreateMutexW
CreateSemaphoreW
GetTimeZoneInformation
VirtualAlloc
VirtualFree
GetSystemTime
IsWow64Process
GetLocaleInfoW
GetLocaleInfoA
GetNumberFormatW
GetCurrencyFormatW
GetDateFormatW
GetVolumeInformationW
LoadLibraryA
GetThreadLocale
GetGeoInfoW
GetUserGeoID
CreateFileA
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
GetPrivateProfileStringW
FormatMessageW
CancelIo
LoadLibraryExW
GetComputerNameExW
SetFilePointer
lstrcmpiW
MultiByteToWideChar
GetModuleFileNameA
ConnectNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetNamedPipeInfo
GetFileSize
WideCharToMultiByte
GetTempFileNameA
GetFileType
GetThreadTimes
GetTempPathA
DeleteFileA
CreateSemaphoreA
GetOverlappedResult
OpenThread
SuspendThread
GetThreadContext
GetLocalTime
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
DecodePointer
SetUnhandledExceptionFilter
CreateRemoteThread
VirtualAllocEx
VirtualFreeEx
RtlCaptureContext
SetNamedPipeHandleState
TransactNamedPipe
LoadResource
SizeofResource
FindResourceW
FlushInstructionCache
SetThreadExecutionState
DefineDosDeviceW
DeviceIoControl
GetUserDefaultLCID
EnumSystemLocalesW
GetDriveTypeW
ClearCommBreak
ClearCommError
EscapeCommFunction
GetCommModemStatus
GetCommState
PurgeComm
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
WaitCommEvent
GetACP
FindFirstFileExA
RtlUnwind
GetWindowsDirectoryA
GetSystemDirectoryA
GlobalDeleteAtom
GlobalAddAtomW
SetConsoleCtrlHandler
GetFullPathNameW
AreFileApisANSI
ExitProcess
VerifyVersionInfoW
VerSetConditionMask
VirtualQuery
GetFileAttributesExW
QueryDosDeviceW
RemoveDirectoryW
SetCurrentDirectoryW
CreateFileMappingW
MoveFileW
GetLongPathNameW
GetCurrentDirectoryW
GetTempPathW
ReplaceFileW
GetFileAttributesW
CopyFileW
GetVolumePathNameW
CreateDirectoryW
MoveFileExW
UnmapViewOfFile
SetStdHandle
GetConsoleMode
GetConsoleCP
MapViewOfFile
GetTempFileNameW
ResumeThread
GetCommandLineA
IsProcessorFeaturePresent
EncodePointer
LoadLibraryExA
AttachConsole
GetStdHandle
ReadFile
AssignProcessToJobObject
SetHandleInformation
CreateProcessW
AllocConsole
SetInformationJobObject
TerminateProcess
GetExitCodeProcess
OpenProcess
GetPriorityClass
SetPriorityClass
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
GetVersionExW
GetNativeSystemInfo
QueryPerformanceFrequency
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
SearchPathW
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
WaitForMultipleObjects
CreateEventW
DebugBreak
ReadProcessMemory
SignalObjectAndWait
GetProcessHandleCount
CreateJobObjectW
TerminateJobObject
WriteProcessMemory
VirtualProtectEx
ProcessIdToSessionId
QueueUserAPC
CreateWaitableTimerW
SleepEx
QueryInformationJobObject
IsProcessInJob
HeapCompact
WaitForSingleObjectEx
UnlockFileEx
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
CreateEventA
GetProcessAffinityMask
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetEnvironmentVariableA
GetSystemPowerStatus
FindCloseChangeNotification
FindFirstChangeNotificationW
RtlCaptureStackBackTrace
LockResource
GetUserDefaultUILanguage
SetEnvironmentVariableA
GetFullPathNameA
OutputDebugStringW
HeapQueryInformation
ResetEvent
SetEvent
CreateThread
DuplicateHandle
ExitThread
FileTimeToLocalFileTime
PeekNamedPipe
IsDebuggerPresent
GetThreadPriority
RaiseException
SetThreadPriority
Sleep
GetCurrentThread
WaitForSingleObject
GetCurrentProcess
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
LocalFree
GetCurrentProcessId
DeleteFileW
CloseHandle
OutputDebugStringA
SetLastError
GetLastError
CreateFileW
WriteFile
FormatMessageA
GetTickCount
HeapSetInformation
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
GetCurrentThreadId
GetModuleHandleW
GetModuleHandleExW
GetModuleFileNameW
SetErrorMode
GetProcAddress
GetModuleHandleA
FindNextFileW
FindClose
FindFirstFileExW
FindFirstFileW
ExpandEnvironmentStringsW
SetFileAttributesW
lstrlenW
GetCommandLineW
GetTimeFormatW
HeapSize
UnhandledExceptionFilter
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
WriteConsoleW
IsValidLocale
CompareStringW
HeapLock
FindNextFileA
LCMapStringW

winspool.drv

DeviceCapabilitiesW
GetPrinterDriverW
EnumPrintersW
OpenPrinterW
ClosePrinter
ord203
DocumentPropertiesW
GetPrinterW

comdlg32

GetSaveFileNameW
PrintDlgExW
GetOpenFileNameW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
ReleaseStgMedium
CoCreateGuid
StringFromGUID2
PropVariantClear
CLSIDFromString
CoTaskMemFree
OleInitialize
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
GetHGlobalFromStream
RevokeDragDrop
DoDragDrop
RegisterDragDrop
OleDuplicateData
OleUninitialize
CoInitializeEx

oleaut32

VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysAllocString
SysFreeString
VariantInit
VariantClear

winhttp

WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock
GetProfileType

urlmon

CoInternetCreateSecurityManager

dhcpcsvc

DhcpCApiInitialize
DhcpRequestParams

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

comctl32

InitCommonControlsEx

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

winmm

midiInUnprepareHeader
midiInPrepareHeader
midiInClose
midiInOpen
midiInGetDevCapsW
midiInGetNumDevs
midiOutGetID
midiOutReset
midiOutLongMsg
midiOutShortMsg
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutClose
midiOutOpen
midiOutGetDevCapsW
midiOutGetNumDevs
waveOutReset
waveOutRestart
midiInAddBuffer
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveInReset
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
timeKillEvent
waveOutGetDevCapsW
waveInMessage
waveInGetNumDevs
waveOutGetNumDevs
midiInStart
midiInReset
midiInGetID
timeSetEvent
waveOutPause
waveInGetDevCapsW

ws2_32

WSASocketW
ntohs
WSAWaitForMultipleEvents
WSASetEvent
send
WSCEnumProtocols
ioctlsocket
gethostname
accept
bind
closesocket
connect
getsockname
listen
recv
setsockopt
shutdown
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetOverlappedResult
WSAIoctl
WSAResetEvent
WSASend
WSAStartup
WSALookupServiceBeginW
WSALookupServiceNextW
WSALookupServiceEnd
getaddrinfo
freeaddrinfo
socket
getpeername
getsockopt
htonl
recvfrom
sendto
WSARecvFrom
WSASendTo
htons
ntohl
WSASetServiceW

secur32

InitializeSecurityContextA
CompleteAuthToken
QuerySecurityPackageInfoW
FreeContextBuffer
AcquireCredentialsHandleW
DeleteSecurityContext
InitializeSecurityContextW
FreeCredentialsHandle
AcquireCredentialsHandleA

crypt32

CryptSignAndEncodeCertificate
CryptExportPublicKeyInfoEx
CryptAcquireCertificatePrivateKey
CryptDecodeObjectEx
CryptFindOIDInfo
CertOpenStore
CertCloseStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertAddEncodedCertificateToStore
CertAddCertificateContextToStore
CertAddSerializedElementToStore
CertCompareCertificateName
CertGetPublicKeyLength
CryptHashCertificate
CertFindExtension
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertVerifyTimeValidity
CertGetIntendedKeyUsage
CertOpenSystemStoreW
CertFindChainInStore
CertRDNValueToStrW
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertCreateCertificateChainEngine
CryptEncodeObjectEx

iphlpapi

IpReleaseAddress
GetInterfaceInfo
CancelIPChangeNotify
NotifyAddrChange
GetAdaptersAddresses
IpRenewAddress

imm32

ImmGetConversionStatus
ImmGetCompositionStringW
ImmSetOpenStatus
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext
ImmDisableTextFrameService
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmSetConversionStatus

rpcrt4

UuidToStringW
UuidCreateSequential
RpcStringFreeW

Exports

Exports

ClearBreakpadPipeEnvironmentVariable
ClearCrashKeyValueImpl
CrashForException
DumpProcess
DumpProcessWithoutCrash
GetHandleVerifier
InjectDumpForHangDebugging
InjectDumpProcessWithoutCrash
IsSandboxedProcess
SetCrashKeyValueImpl
TerminateProcessWithoutDump
cef_add_cross_origin_whitelist_entry
cef_add_web_plugin_directory
cef_add_web_plugin_path
cef_api_hash
cef_base64decode
cef_base64encode
cef_begin_tracing
cef_binary_value_create
cef_browser_host_create_browser
cef_browser_host_create_browser_sync
cef_clear_cross_origin_whitelist
cef_clear_scheme_handler_factories
cef_command_line_create
cef_command_line_get_global
cef_cookie_manager_create_manager
cef_cookie_manager_get_global_manager
cef_create_url
cef_currently_on
cef_dictionary_value_create
cef_do_message_loop_work
cef_drag_data_create
cef_enable_highdpi_support
cef_end_tracing
cef_execute_process
cef_force_web_plugin_shutdown
cef_format_url_for_security_display
cef_get_current_platform_thread_handle
cef_get_current_platform_thread_id
cef_get_extensions_for_mime_type
cef_get_geolocation
cef_get_mime_type
cef_get_min_log_level
cef_get_path
cef_get_vlog_level
cef_initialize
cef_is_web_plugin_unstable
cef_launch_process
cef_list_value_create
cef_log
cef_now_from_system_trace_time
cef_parse_csscolor
cef_parse_json
cef_parse_jsonand_return_error
cef_parse_url
cef_post_data_create
cef_post_data_element_create
cef_post_delayed_task
cef_post_task
cef_print_settings_create
cef_process_message_create
cef_quit_message_loop
cef_refresh_web_plugins
cef_register_extension
cef_register_scheme_handler_factory
cef_register_web_plugin_crash
cef_remove_cross_origin_whitelist_entry
cef_remove_web_plugin_path
cef_request_context_create_context
cef_request_context_get_global_context
cef_request_create
cef_resource_bundle_get_global
cef_response_create
cef_run_message_loop
cef_set_osmodal_loop
cef_shutdown
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_stream_reader_create_for_handler
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_string_ascii_to_utf16
cef_string_ascii_to_wide
cef_string_list_alloc
cef_string_list_append
cef_string_list_clear
cef_string_list_copy
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_clear
cef_string_map_find
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_clear
cef_string_multimap_enumerate
cef_string_multimap_find_count
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_alloc
cef_string_userfree_utf16_free
cef_string_userfree_utf8_alloc
cef_string_userfree_utf8_free
cef_string_userfree_wide_alloc
cef_string_userfree_wide_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf16_to_wide
cef_string_utf8_clear
cef_string_utf8_cmp
cef_string_utf8_set
cef_string_utf8_to_utf16
cef_string_utf8_to_wide
cef_string_wide_clear
cef_string_wide_cmp
cef_string_wide_set
cef_string_wide_to_utf16
cef_string_wide_to_utf8
cef_task_runner_get_for_current_thread
cef_task_runner_get_for_thread
cef_time_delta
cef_time_from_doublet
cef_time_from_timet
cef_time_now
cef_time_to_doublet
cef_time_to_timet
cef_trace_counter
cef_trace_counter_id
cef_trace_event_async_begin
cef_trace_event_async_end
cef_trace_event_async_step_into
cef_trace_event_async_step_past
cef_trace_event_begin
cef_trace_event_end
cef_trace_event_instant
cef_translator_test_create
cef_translator_test_object_child_child_create
cef_translator_test_object_child_create
cef_translator_test_object_create
cef_unregister_internal_web_plugin
cef_uridecode
cef_uriencode
cef_urlrequest_create
cef_v8context_get_current_context
cef_v8context_get_entered_context
cef_v8context_in_context
cef_v8stack_trace_get_current
cef_v8value_create_array
cef_v8value_create_bool
cef_v8value_create_date
cef_v8value_create_double
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_uint
cef_v8value_create_undefined
cef_value_create
cef_version_info
cef_visit_web_plugin_info
cef_write_json
cef_xml_reader_create
cef_zip_reader_create
create_context_shared

Sections

.text
Size: 36.0MB - Virtual size: 36.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 185KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/locales/am.pak
cef/locales/ar.pak
cef/locales/bg.pak
cef/locales/bn.pak
cef/locales/ca.pak
cef/locales/cs.pak
cef/locales/da.pak
cef/locales/de.pak
cef/locales/el.pak
cef/locales/en-GB.pak
cef/locales/en-US.pak
cef/locales/es-419.pak
cef/locales/es.pak
cef/locales/et.pak
cef/locales/fa.pak
cef/locales/fi.pak
cef/locales/fil.pak
cef/locales/fr.pak
cef/locales/gu.pak
cef/locales/he.pak
cef/locales/hi.pak
cef/locales/hr.pak
cef/locales/hu.pak
cef/locales/id.pak
cef/locales/it.pak
cef/locales/ja.pak
cef/locales/kn.pak
cef/locales/ko.pak
cef/locales/lt.pak
cef/locales/lv.pak
cef/locales/ml.pak
cef/locales/mr.pak
cef/locales/ms.pak
cef/locales/nb.pak
cef/locales/nl.pak
cef/locales/pl.pak
cef/locales/pt-BR.pak
cef/locales/pt-PT.pak
cef/locales/ro.pak
cef/locales/ru.pak
cef/locales/sk.pak
cef/locales/sl.pak
cef/locales/sr.pak
cef/locales/sv.pak
cef/locales/sw.pak
cef/locales/ta.pak
cef/locales/te.pak
cef/locales/th.pak
cef/locales/tr.pak
cef/locales/uk.pak
cef/locales/vi.pak
cef/locales/zh-CN.pak
cef/locales/zh-TW.pak
cef/natives_blob.bin
.js
cef/pepflashplayer.dll
.dll windows:6 windows x86 arch:x86

96251bfa57eed4930e45e1c3a41c0cb2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1e:5a:6d:8e:20:3d:91:53:4b:c9:8b:94:8e:e7:8f:52:d8:17:52:82
Signer

Actual PE Digest

1e:5a:6d:8e:20:3d:91:53:4b:c9:8b:94:8e:e7:8f:52:d8:17:52:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\r\ws\St_Make\code\products\player\pepper\gypbuild\Release\pepflashplayer.pdb

Imports

crypt32

CertCloseStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CertFreeCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertCompareCertificate
CertFindCertificateInStore

shlwapi

UrlCanonicalizeW
ord12
AssocQueryStringW

gdiplus

GdipFree
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageRect
GdipSetInterpolationMode
GdipGetImageWidth
GdipDeleteGraphics

kernel32

DebugBreak
OutputDebugStringA
TlsAlloc
TlsFree
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
SleepEx
CreateEventW
QueueUserAPC
CreateThread
OpenThread
SetThreadPriority
ExitThread
VirtualQuery
GetFileSizeEx
ReadFile
SetFilePointerEx
WriteFile
GetCurrentProcess
GetVersionExW
GetModuleHandleW
GetProcAddress
CreateFileW
GetLastError
ConnectNamedPipe
DisconnectNamedPipe
GetCurrentProcessId
GetTickCount
MultiByteToWideChar
DeleteFileW
GetFileAttributesW
GetFileSize
SetLastError
ReleaseMutex
CreateMutexA
CreateProcessW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
WideCharToMultiByte
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesExW
RemoveDirectoryW
GetSystemTimeAsFileTime
HeapSize
QueryPerformanceCounter
QueryPerformanceFrequency
HeapAlloc
HeapFree
GetProcessHeap
GetSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsSetValue
CreateSemaphoreW
GetProcessAffinityMask
FreeLibrary
LoadLibraryA
VirtualAlloc
VirtualFree
CreateEventA
SetWaitableTimer
CancelWaitableTimer
GetCurrentThread
WaitForMultipleObjects
CreateWaitableTimerA
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
RtlCaptureStackBackTrace
GetCurrencyFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapCreate
HeapDestroy
HeapLock
HeapUnlock
HeapWalk
VirtualProtect
IsDebuggerPresent
GetProcessTimes
GlobalMemoryStatusEx
SetSystemTime
GetModuleFileNameA
FileTimeToSystemTime
GetACP
ResumeThread
CreateWaitableTimerW
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetStdHandle
GetFileType
GlobalMemoryStatus
LoadLibraryW
FlushConsoleInputBuffer
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempFileNameW
GetFullPathNameW
CopyFileW
MoveFileExW
FlushFileBuffers
SetEndOfFile
EncodePointer
GetStringTypeW
GetCPInfo
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
OutputDebugStringW
lstrlenW
lstrcpynW
LocalFree
LocalAlloc
GetNativeSystemInfo
TlsGetValue
GetCurrentThreadId
SwitchToThread
Sleep
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
DeviceIoControl
CreateFileA
WriteConsoleW
GetCommandLineW
GetCommandLineA
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VerSetConditionMask
VerifyVersionInfoW
FormatMessageA
ExpandEnvironmentStringsA
GetNumberFormatW
GetSystemInfo
ReleaseSemaphore
IsValidCodePage
GetConsoleCP
CreateProcessA
GetExitCodeProcess
HeapReAlloc
SetConsoleMode
ReadConsoleInputA
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
ReadConsoleW
GetConsoleMode
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
GetModuleFileNameW

user32

SetRectEmpty
GetCursorPos
EnumDisplayMonitors
GetMonitorInfoW
GetMonitorInfoA
GetDC
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
GetForegroundWindow
WaitForInputIdle
wsprintfW
MonitorFromRect
EnumDisplayDevicesA
GetWindowRect
GetClientRect
WindowFromDC

advapi32

GetTokenInformation
DeregisterEventSource
RegisterEventSourceW
ReportEventW
SystemFunction036
CryptAcquireContextW
CryptGenRandom
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext

ole32

CoTaskMemAlloc
CoSetProxyBlanket
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries

shell32

SHGetFolderPathW
ShellExecuteW
ShellExecuteExW
ord165
SHCreateDirectoryExW

oleaut32

SysFreeString
SysStringLen
VariantInit
VariantClear
SysAllocString

gdi32

SelectObject
EnumFontFamiliesExW
DeleteObject
DeleteDC
CreateFontIndirectW
CreateCompatibleDC
GetFontData
CreateDCW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

bind
getsockname
WSACleanup
ntohl
htons
ntohs
htonl
WSAGetLastError
WSASetLastError
shutdown
send
recv
closesocket
getsockopt
select
setsockopt
WSAIoctl
ioctlsocket
gethostname

psapi

GetProcessImageFileNameW
GetProcessMemoryInfo

winmm

timeKillEvent
timeSetEvent
timeGetTime

Exports

Exports

IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule
PPP_GetInterface
PPP_InitializeBroker
PPP_InitializeModule
PPP_ShutdownBroker
PPP_ShutdownModule
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape

Sections

.text
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 797KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 495KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cef/res/CCworkExternal/image/MainBkg.png
.png
cef/res/CCworkExternal/layout/DevToolsDialog.xml
cef/res/CCworkExternal/value/color.xml
cef/res/CCworkExternal/value/config.xml
cef/res/CCworkExternal/value/font.xml
cef/res/CCworkExternal/value/image.xml
cef/res/SkinUI/image/Close.png
.png
cef/res/SkinUI/image/Close2.png
.png
cef/res/SkinUI/image/Max.png
.png
cef/res/SkinUI/image/Max2.png
.png
cef/res/SkinUI/image/Min.png
.png
cef/res/SkinUI/image/Min2.png
.png
cef/res/SkinUI/image/Restore.png
.png
cef/res/SkinUI/image/Restore2.png
.png
cef/res/SkinUI/string/1028/string.xml
cef/res/SkinUI/string/1033/string.xml
cef/res/SkinUI/string/2052/string.xml
cef/res/SkinUI/value/color.xml
cef/res/SkinUI/value/font.xml
cef/res/SkinUI/value/image.xml
cef/snapshot_blob.bin
cef/widevinecdmadapter.dll
.dll windows:5 windows x86 arch:x86

e1657452eeece97e13fb59ec5f6e070a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

09:b0:55:91:df:1a:26:9e:80:d9:8d:36:de:0e:b5:9c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

19/05/2017, 00:00

Not After

19/05/2019, 23:59

Subject

CN=Shanghai Ccwork Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Ccwork Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:dc:f1:3e:e3:47:7b:5f:1d:9d:a7:c8:a6:4e:2d:9c:97:75:5a:02
Signer

Actual PE Digest

09:dc:f1:3e:e3:47:7b:5f:1d:9d:a7:c8:a6:4e:2d:9c:97:75:5a:02

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Win-2623\download\chromium\src\out\Release\widevinecdmadapter.dll.pdb

Imports

widevinecdm

CreateCdmInstance
DeinitializeCdmModule
InitializeCdmModule_4

kernel32

CreateFileW
ReadConsoleW
WriteConsoleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapFree
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
SetStdHandle

Exports

Exports

PPP_GetInterface
PPP_InitializeModule
PPP_ShutdownModule

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
res/ShiYeLine/image/AboutBkg.png
.png
res/ShiYeLine/image/Add.png
.png
res/ShiYeLine/image/AddApp.png
.png
res/ShiYeLine/image/AddApp2.png
.png
res/ShiYeLine/image/AddChat.png
.png
res/ShiYeLine/image/Advertisement.gif
.png
res/ShiYeLine/image/Advertisement2.gif
.png
res/ShiYeLine/image/AlphaSliderBkg.png
.png
res/ShiYeLine/image/AlphaSliderThumb.png
.png
res/ShiYeLine/image/App.png
.png
res/ShiYeLine/image/ArrowLeft.png
.png
res/ShiYeLine/image/ArrowRight.png
.png
res/ShiYeLine/image/AutoAddSubnet.png
.png
res/ShiYeLine/image/Away.png
.png
res/ShiYeLine/image/Back.png
.png
res/ShiYeLine/image/BadLuck.png
.png
res/ShiYeLine/image/BatchSend.png
.png
res/ShiYeLine/image/BatchSend32.png
.png
res/ShiYeLine/image/BatchSendBkg.png
.png
res/ShiYeLine/image/BatchSendFile.png
.png
res/ShiYeLine/image/Bold.png
.png
res/ShiYeLine/image/Busy.png
.png
res/ShiYeLine/image/Button.png
.png
res/ShiYeLine/image/Button2.png
.png
res/ShiYeLine/image/Button3.png
.png
res/ShiYeLine/image/Button4.png
.png
res/ShiYeLine/image/Button5.png
.png
res/ShiYeLine/image/Button6.png
.png
res/ShiYeLine/image/ButtonExpand.png
.png
res/ShiYeLine/image/Cancel.png
.png
res/ShiYeLine/image/CaptureImageArrow.png
.png
res/ShiYeLine/image/CaptureImageBig.png
.png
res/ShiYeLine/image/CaptureImageButton.png
.png
res/ShiYeLine/image/CaptureImageCancel.png
.png
res/ShiYeLine/image/CaptureImageFinish.png
.png
res/ShiYeLine/image/CaptureImageMid.png
.png
res/ShiYeLine/image/CaptureImagePen.png
.png
res/ShiYeLine/image/CaptureImageRect.png
.png
res/ShiYeLine/image/CaptureImageSave.png
.png
res/ShiYeLine/image/CaptureImageSeparator.png
.png
res/ShiYeLine/image/CaptureImageSmall.png
.png
res/ShiYeLine/image/CaptureImageToolbar.png
.png
res/ShiYeLine/image/CaptureImageToolbar2.png
.png
res/ShiYeLine/image/CaptureImageUndo.png
.png
res/ShiYeLine/image/ChatImageBkg.png
.png
res/ShiYeLine/image/ChatListItem.png
.png
res/ShiYeLine/image/ChatListItem2.png
.png
res/ShiYeLine/image/ChatMiscTab.png
.png
res/ShiYeLine/image/ChatMiscTabClose.png
.png
res/ShiYeLine/image/ChatRecord.png
.png
res/ShiYeLine/image/ChatRecordBkg.png
.png
res/ShiYeLine/image/ChatSearch.png
.png
res/ShiYeLine/image/CheckBox.png
.png
res/ShiYeLine/image/Close.png
.png
res/ShiYeLine/image/Close2.png
.png
res/ShiYeLine/image/Close3.png
.png
res/ShiYeLine/image/Color.png
.png
res/ShiYeLine/image/Color2.png
.png
res/ShiYeLine/image/ComboArrow.png
.png
res/ShiYeLine/image/ComboBkg.png
.png
res/ShiYeLine/image/ComboSearch.png
.png
res/ShiYeLine/image/ComboSearch2.png
.png
res/ShiYeLine/image/ComboSearch3.png
.png
res/ShiYeLine/image/Config.png
.png
res/ShiYeLine/image/Continue.png
.png
res/ShiYeLine/image/CrownCu.png
.png
res/ShiYeLine/image/CrownGold.png
.png
res/ShiYeLine/image/CrownIconCu.png
.png
res/ShiYeLine/image/CrownIconGold.png
.png
res/ShiYeLine/image/CrownIconSilver.png
.png
res/ShiYeLine/image/CrownName.png
.png
res/ShiYeLine/image/CrownSilver.png
.png
res/ShiYeLine/image/Delete.png
.png
res/ShiYeLine/image/DeleteAll.png
.png
res/ShiYeLine/image/DeletePage.png
.png
res/ShiYeLine/image/DialogRightBkg.png
.png
res/ShiYeLine/image/EPS.png
.png
res/ShiYeLine/image/Edit.png
.png
res/ShiYeLine/image/Edit2.png
.png
res/ShiYeLine/image/Edit3.png
.png
res/ShiYeLine/image/EditChatTips.png
.png
res/ShiYeLine/image/EditRecvMsg.png
.png
res/ShiYeLine/image/EditSendMsg.png
.png
res/ShiYeLine/image/Emotion.png
.png
res/ShiYeLine/image/EmotionBkg.png
.png
res/ShiYeLine/image/EmotionGifBkg.png
.png
res/ShiYeLine/image/EmotionItemBkg.png
.png
res/ShiYeLine/image/EmotionMoveLeft.png
.png
res/ShiYeLine/image/EmotionMoveRight.png
.png
res/ShiYeLine/image/EmotionTabButton.png
.png
res/ShiYeLine/image/EmotionThumb.png
.png
res/ShiYeLine/image/EmotionThumb2.png
.png
res/ShiYeLine/image/Error.png
.png
res/ShiYeLine/image/Export.png
.png
res/ShiYeLine/image/Feedback.png
.png
res/ShiYeLine/image/FeedbackTips.png
.png
res/ShiYeLine/image/Female.png
.png
res/ShiYeLine/image/FileIcon0.png
.png
res/ShiYeLine/image/FileIcon1.png
.png
res/ShiYeLine/image/FileIcon2.png
.png
res/ShiYeLine/image/FileIcon3.png
.png
res/ShiYeLine/image/FileIcon4.png
.png
res/ShiYeLine/image/FileRecord.png
.png
res/ShiYeLine/image/FileRecord24.png
.png
res/ShiYeLine/image/FileShare.png
.png
res/ShiYeLine/image/FileShare32.png
.png
res/ShiYeLine/image/FileShareBkg.png
.png
res/ShiYeLine/image/FileTrans.png
.png
res/ShiYeLine/image/FileTransFaild.png
.png
res/ShiYeLine/image/FileTransSuccess.png
.png
res/ShiYeLine/image/Find.png
.png
res/ShiYeLine/image/Finish.png
.png
res/ShiYeLine/image/FirstPage.png
.png
res/ShiYeLine/image/FocusShadow.png
.png
res/ShiYeLine/image/FolderIcon24.png
.png
res/ShiYeLine/image/FolderIcon42.png
.png
res/ShiYeLine/image/FolderTrans.png
.png
res/ShiYeLine/image/Font.png
.png
res/ShiYeLine/image/ForumCenter.png
.png
res/ShiYeLine/image/FullScreen.png
.png
res/ShiYeLine/image/GoodLuck.png
.png
res/ShiYeLine/image/Gray.png
.png
res/ShiYeLine/image/Group24.png
.png
res/ShiYeLine/image/GuideTips1.png
.jpg
res/ShiYeLine/image/GuideTips2.png
.jpg
res/ShiYeLine/image/GuideTips3.png
.jpg
res/ShiYeLine/image/HScrollSlider.png
.png
res/ShiYeLine/image/HScrollThumb.png
.png
res/ShiYeLine/image/HandAddSubnet.png
.png
res/ShiYeLine/image/HeadFrame.png
.png
res/ShiYeLine/image/HeadFrame2.png
.png
res/ShiYeLine/image/Help.png
.png
res/ShiYeLine/image/Helper.png
.png
res/ShiYeLine/image/HideRecord32.png
.png
res/ShiYeLine/image/IconButton.png
.png
res/ShiYeLine/image/ImageClose.png
.png
res/ShiYeLine/image/ImageClose2.png
.png
res/ShiYeLine/image/ImageDate.png
.png
res/ShiYeLine/image/ImageDefaultSize.png
.png
res/ShiYeLine/image/ImageFullScreen.png
.png
res/ShiYeLine/image/ImageQuitFullScreen.png
.png
res/ShiYeLine/image/ImageRecord.png
.png
res/ShiYeLine/image/ImageRecord24.png
.png
res/ShiYeLine/image/ImageRotate.png
.png
res/ShiYeLine/image/ImageRotate2.png
.png
res/ShiYeLine/image/ImageSave.png
.png
res/ShiYeLine/image/ImageScaleRateBkg.png
.png
res/ShiYeLine/image/ImageShadow.png
.png
res/ShiYeLine/image/ImageToolbar.png
.png
res/ShiYeLine/image/IpMsg24.png
.png
res/ShiYeLine/image/IpMsg32.png
.png
res/ShiYeLine/image/IpMsg42.png
.png
res/ShiYeLine/image/IpMsgOffline24.png
.png
res/ShiYeLine/image/IpMsgOffline32.png
.png
res/ShiYeLine/image/IpMsgOffline42.png
.png
res/ShiYeLine/image/Italic.png
.png
res/ShiYeLine/image/LastPage.png
.png
res/ShiYeLine/image/ListItem.png
.png
res/ShiYeLine/image/ListItem2.png
.png
res/ShiYeLine/image/ListItem3.png
.png
res/ShiYeLine/image/ListItem4.png
.png
res/ShiYeLine/image/ListItem5.png
.png
res/ShiYeLine/image/Loading.gif
.gif
res/ShiYeLine/image/Loading.png
.png
res/ShiYeLine/image/Loading2.gif
.gif
res/ShiYeLine/image/Lock.png
.png
res/ShiYeLine/image/LogoBkg.png
.png
res/ShiYeLine/image/Mail.png
.png
res/ShiYeLine/image/MainMenu.png
.png
res/ShiYeLine/image/MainTabContactor.png
.png
res/ShiYeLine/image/MainTabQGroup.png
.png
res/ShiYeLine/image/MainTabRecent.png
.png
res/ShiYeLine/image/MakeSkin.png
.png
res/ShiYeLine/image/Male.png
.png
res/ShiYeLine/image/Mall1.jpg
.jpg
- http://www.51nwt.com/api/store.php
res/ShiYeLine/image/Mall2.jpg
.jpg
- http://www.51nwt.com/api/store.php
res/ShiYeLine/image/Max.png
.png
res/ShiYeLine/image/Max2.png
.png
res/ShiYeLine/image/Menu.png
.png
res/ShiYeLine/image/MenuArrow.png
.png
res/ShiYeLine/image/MenuBkg.png
.png
res/ShiYeLine/image/MenuCheck.png
.png
res/ShiYeLine/image/Message.png
.png
res/ShiYeLine/image/MessageRecord.png
.png
res/ShiYeLine/image/Min.png
.png
res/ShiYeLine/image/Min2.png
.png
res/ShiYeLine/image/MoreApp.png
.png
res/ShiYeLine/image/MyScore.png
.png
res/ShiYeLine/image/MyScore2.png
.png
res/ShiYeLine/image/News.png
.png
res/ShiYeLine/image/NextPage.png
.png
res/ShiYeLine/image/NoFullScreen.png
.png
res/ShiYeLine/image/NoTopMost.png
.png
res/ShiYeLine/image/Online.png
.png
res/ShiYeLine/image/OpenFile.png
.png
res/ShiYeLine/image/OpenFolder.png
.png
res/ShiYeLine/image/Option.png
.png
res/ShiYeLine/image/OptionHotKey.png
.png
res/ShiYeLine/image/OptionLock.png
.png
res/ShiYeLine/image/OptionMail.png
.png
res/ShiYeLine/image/OptionNetwork.png
.png
res/ShiYeLine/image/OptionNormal.png
.png
res/ShiYeLine/image/OptionNotify.png
.png
res/ShiYeLine/image/OptionPersonal.png
.png
res/ShiYeLine/image/PathArrow.png
.png
res/ShiYeLine/image/PathButton.png
.png
res/ShiYeLine/image/PathButton2.png
.png
res/ShiYeLine/image/Picture.png
.png
res/ShiYeLine/image/PopupArrow.png
.png
res/ShiYeLine/image/PrintScreenArrow.png
.png
res/ShiYeLine/image/PrintScreenBar.png
.png
res/ShiYeLine/image/PrintScreenBar2.png
.png
res/ShiYeLine/image/PrintScreenBig.png
.png
res/ShiYeLine/image/PrintScreenButton.png
.png
res/ShiYeLine/image/PrintScreenCancel.png
.png
res/ShiYeLine/image/PrintScreenFinish.png
.png
res/ShiYeLine/image/PrintScreenLeft.png
.png
res/ShiYeLine/image/PrintScreenMid.png
.png
res/ShiYeLine/image/PrintScreenPen.png
.png
res/ShiYeLine/image/PrintScreenRect.png
.png
res/ShiYeLine/image/PrintScreenRight.png
.png
res/ShiYeLine/image/PrintScreenSave.png
.png
res/ShiYeLine/image/PrintScreenSeparator.png
.png
res/ShiYeLine/image/PrintScreenSmall.png
.png
res/ShiYeLine/image/PrintScreenUndo.png
.png
res/ShiYeLine/image/Progress.png
.png
res/ShiYeLine/image/Progress2.png
.png
res/ShiYeLine/image/Progress3.png
.png
res/ShiYeLine/image/QGroup.png
.png
res/ShiYeLine/image/QGroupConfig32.png
.png
res/ShiYeLine/image/QGroupCreate32.png
.png
res/ShiYeLine/image/QGroupInvite32.png
.png
res/ShiYeLine/image/QGroupMaster.png
.png
res/ShiYeLine/image/QGroupMember32.png
.png
res/ShiYeLine/image/QGroupQuit32.png
.png
res/ShiYeLine/image/QQFeedback.png
.png
- http://qm.qq.com/cgi-bin/qm/qr?k=KOk-2h1JYyNUY_Z4MYqg6O6lu_d62G94
res/ShiYeLine/image/Question.png
.png
res/ShiYeLine/image/RadioButton.png
.png
res/ShiYeLine/image/RecvFileSuccess.png
.png
res/ShiYeLine/image/RedName.png
.png
res/ShiYeLine/image/RedPoint.png
.png
res/ShiYeLine/image/Refresh.png
.png
res/ShiYeLine/image/RemoteFinish.png
.png
res/ShiYeLine/image/RemoteHelp.gif
.gif
res/ShiYeLine/image/RemoteHelp32.png
.png
res/ShiYeLine/image/RemoteNoTopMost.png
.png
res/ShiYeLine/image/RemoteSuccess.png
.png
res/ShiYeLine/image/RemoteToolbar.png
.png
res/ShiYeLine/image/RemoteTopMost.png
.png
res/ShiYeLine/image/Restore.png
.png
res/ShiYeLine/image/Restore2.png
.png
res/ShiYeLine/image/RightBack.png
.png
res/ShiYeLine/image/ScanFail.png
.png
res/ShiYeLine/image/ScanSuccess.png
.png
res/ShiYeLine/image/Scanning.png
.png
res/ShiYeLine/image/Search.png
.png
res/ShiYeLine/image/SearchBack.png
.png
res/ShiYeLine/image/SendFileSuccess.png
.png
res/ShiYeLine/image/SendMsgArrow.png
.png
res/ShiYeLine/image/Shadow.png
.png
res/ShiYeLine/image/ShakeScreen.png
.png
res/ShiYeLine/image/ShareHistory.png
.png
res/ShiYeLine/image/ShareHistoryBkg.png
.png
res/ShiYeLine/image/Skin.png
.png
res/ShiYeLine/image/SkinTips.png
.png
res/ShiYeLine/image/SoundOff.png
.png
res/ShiYeLine/image/SoundOn.png
.png
res/ShiYeLine/image/StatusAway.png
.png
res/ShiYeLine/image/StatusBusy.png
.png
res/ShiYeLine/image/StatusOffline.png
.png
res/ShiYeLine/image/StatusOnline.png
.png
res/ShiYeLine/image/StatusRefuse.png
.png
res/ShiYeLine/image/Suspend.png
.png
res/ShiYeLine/image/TabButton.png
.png
res/ShiYeLine/image/TipFaild.png
.png
res/ShiYeLine/image/TipInfo.png
.png
res/ShiYeLine/image/TipSuccess.png
.png
res/ShiYeLine/image/Tips.png
.png
res/ShiYeLine/image/TopMost.png
.png
res/ShiYeLine/image/TopMostItem.png
.png
res/ShiYeLine/image/TreeExpand.png
.png
res/ShiYeLine/image/UnReadBkg.png
.png
res/ShiYeLine/image/Underline.png
.png
res/ShiYeLine/image/UpName.png
.png
res/ShiYeLine/image/UpPage.png
.png
res/ShiYeLine/image/UserInfo.png
.png
res/ShiYeLine/image/VScrollSlider.png
.png
res/ShiYeLine/image/VScrollThumb.png
.png
res/ShiYeLine/image/VSplitter.png
.png
res/ShiYeLine/image/VipButton.png
.png
res/ShiYeLine/image/VipOpen.png
.png
res/ShiYeLine/image/WebShare.png
.png
res/ShiYeLine/image/WebShareQQ.png
.png
res/ShiYeLine/image/WebShareQZone.png
.png
res/ShiYeLine/image/WebShareTengXun.png
.png
res/ShiYeLine/image/WebShareWeiBo.png
.png
res/ShiYeLine/image/WebShareWeiXin.png
.png
res/ShiYeLine/image/WebSite.png
.png
res/ShiYeLine/image/gm0.jpg
.jpg
- https://u.wechat.com/EHIr5BDdCgoqcopSkxMrSSw
res/ShiYeLine/image/gm1.jpg
.jpg
- https://u.wechat.com/MOdvkJg7PQkVx-P2g9eXPLM
res/ShiYeLine/image/jz0.png
.png
res/ShiYeLine/image/jz1.png
.png
res/ShiYeLine/image/offline.png
.png
res/ShiYeLine/layout/AboutDialog.xml
res/ShiYeLine/layout/AcceptFileButton.xml
res/ShiYeLine/layout/AcceptFileConfirmDialog.xml
res/ShiYeLine/layout/AddAppDialog.xml
res/ShiYeLine/layout/AddScoreDialog.xml
res/ShiYeLine/layout/AddSubnetTips.xml
res/ShiYeLine/layout/AppListItem.xml
res/ShiYeLine/layout/AppManagerDialog.xml
res/ShiYeLine/layout/AppNameTips.xml
res/ShiYeLine/layout/AppValueTips.xml
res/ShiYeLine/layout/BackButton.xml
res/ShiYeLine/layout/BatchSendDialog.xml
res/ShiYeLine/layout/BuyCodeDialog.xml
res/ShiYeLine/layout/BuyRemoveAdvCodeDialog.xml
res/ShiYeLine/layout/ChatDateItem.xml
res/ShiYeLine/layout/ChatDialog.xml
res/ShiYeLine/layout/ChatFileLayout.xml
res/ShiYeLine/layout/ChatImageDateItem.xml
res/ShiYeLine/layout/ChatImageLayout.xml
res/ShiYeLine/layout/ChatMessageLayout.xml
res/ShiYeLine/layout/ChatMiscTabButton.xml
res/ShiYeLine/layout/ChatRecordDialog.xml
res/ShiYeLine/layout/ChatRecordLayout.xml
res/ShiYeLine/layout/ChatRecordTabButton.xml
res/ShiYeLine/layout/ChatTimeItem.xml
res/ShiYeLine/layout/ChatTipsItem.xml
res/ShiYeLine/layout/ComboBoxTextView.xml
res/ShiYeLine/layout/CompanyDialog.xml
res/ShiYeLine/layout/CorpNumberTips.xml
res/ShiYeLine/layout/CrownNameDialog.xml
res/ShiYeLine/layout/DepartmentTips.xml
res/ShiYeLine/layout/DonationDialog.xml
res/ShiYeLine/layout/EmotionDialog.xml
res/ShiYeLine/layout/EmotionExportDialog.xml
res/ShiYeLine/layout/EmotionGroupSelectDialog.xml
res/ShiYeLine/layout/EmotionGroupUpdateDialog.xml
res/ShiYeLine/layout/EmotionImportDialog.xml
res/ShiYeLine/layout/FeedbackDialog.xml
res/ShiYeLine/layout/FileFolderView.xml
res/ShiYeLine/layout/FileRecordDialog.xml
res/ShiYeLine/layout/FileRecordItem.xml
res/ShiYeLine/layout/FileShareDialog.xml
res/ShiYeLine/layout/FileTransItem.xml
res/ShiYeLine/layout/FileTransLayout.xml
res/ShiYeLine/layout/FirewallDialog.xml
res/ShiYeLine/layout/GroupItem.xml
res/ShiYeLine/layout/GuideDialog.xml
res/ShiYeLine/layout/HelperDialog.xml
res/ShiYeLine/layout/IDRepeatDialog.xml
res/ShiYeLine/layout/ImageRecordDialog.xml
res/ShiYeLine/layout/InputDialog.xml
res/ShiYeLine/layout/InviteUserDialog.xml
res/ShiYeLine/layout/IpMsgUserItem.xml
res/ShiYeLine/layout/LockScreenLayout.xml
res/ShiYeLine/layout/MailDialog.xml
res/ShiYeLine/layout/MainDialog.xml
res/ShiYeLine/layout/MallDialog.xml
res/ShiYeLine/layout/MasterItem.xml
res/ShiYeLine/layout/MemberItem.xml
res/ShiYeLine/layout/NetworkDialog.xml
res/ShiYeLine/layout/NewAdvDialog.xml
res/ShiYeLine/layout/NotifyDialog.xml
res/ShiYeLine/layout/OptionButton.xml
res/ShiYeLine/layout/OptionDialog.xml
res/ShiYeLine/layout/PasswordDialog.xml
res/ShiYeLine/layout/PersonalInfoDialog.xml
res/ShiYeLine/layout/PersonalInfoLayout.xml
res/ShiYeLine/layout/PingDialog.xml
res/ShiYeLine/layout/PopAdvDialog.xml
res/ShiYeLine/layout/PrintScreenButton.xml
res/ShiYeLine/layout/PrintScreenInfo.xml
res/ShiYeLine/layout/PrintScreenPreview.xml
res/ShiYeLine/layout/PrintScreenToolbar.xml
res/ShiYeLine/layout/QGroupChatLayout.xml
res/ShiYeLine/layout/QGroupChatListItem.xml
res/ShiYeLine/layout/QGroupDefaultHeadItem.xml
res/ShiYeLine/layout/QGroupHeadButton.xml
res/ShiYeLine/layout/QGroupHeadDialog.xml
res/ShiYeLine/layout/QGroupInfoDialog.xml
res/ShiYeLine/layout/QGroupItem.xml
res/ShiYeLine/layout/QGroupItem2.xml
res/ShiYeLine/layout/QGroupMemberLayout.xml
res/ShiYeLine/layout/QGroupMessageItem.xml
res/ShiYeLine/layout/RecvFileItem.xml
res/ShiYeLine/layout/RecvMsgItem.xml
res/ShiYeLine/layout/RecvQGroupFileItem.xml
res/ShiYeLine/layout/RecvQGroupMsgItem.xml
res/ShiYeLine/layout/RedNameDialog.xml
res/ShiYeLine/layout/RemoteHelpDialog.xml
res/ShiYeLine/layout/RemoteHelpLayout.xml
res/ShiYeLine/layout/RemoteToolbarDialog.xml
res/ShiYeLine/layout/ScanCodeDialog.xml
res/ShiYeLine/layout/ScanDialog.xml
res/ShiYeLine/layout/ScoreCodeDialog.xml
res/ShiYeLine/layout/ScoreDialog.xml
res/ShiYeLine/layout/SearchResultCaptionItem.xml
res/ShiYeLine/layout/SearchResultGroupItem.xml
res/ShiYeLine/layout/SearchResultItem.xml
res/ShiYeLine/layout/SearchResultPopupBar.xml
res/ShiYeLine/layout/SearchResultQGroupItem.xml
res/ShiYeLine/layout/SearchResultUserItem.xml
res/ShiYeLine/layout/SelectGroupItem.xml
res/ShiYeLine/layout/SelectUserDialog.xml
res/ShiYeLine/layout/SelectUserItem.xml
res/ShiYeLine/layout/SendFileItem.xml
res/ShiYeLine/layout/SendMsgButton.xml
res/ShiYeLine/layout/SendMsgItem.xml
res/ShiYeLine/layout/ShareDownloadDialog.xml
res/ShiYeLine/layout/ShareDownloadItem.xml
res/ShiYeLine/layout/ShareFileListItem.xml
res/ShiYeLine/layout/SingleChatListItem.xml
res/ShiYeLine/layout/StatusButton.xml
res/ShiYeLine/layout/SubnetBlackNameDialog.xml
res/ShiYeLine/layout/SubnetDialog.xml
res/ShiYeLine/layout/SyncSubnetTips.xml
res/ShiYeLine/layout/TipsRefreshing.xml
res/ShiYeLine/layout/UpNameDialog.xml
res/ShiYeLine/layout/UpdateDialog.xml
res/ShiYeLine/layout/UpgradeRecordDialog.xml
res/ShiYeLine/layout/UserChatLayout.xml
res/ShiYeLine/layout/UserDefaultHeadItem.xml
res/ShiYeLine/layout/UserHeadButton.xml
res/ShiYeLine/layout/UserHeadButton2.xml
res/ShiYeLine/layout/UserHeadDialog.xml
res/ShiYeLine/layout/UserHeadItem.xml
res/ShiYeLine/layout/UserItem.xml
res/ShiYeLine/layout/UserItem2.xml
res/ShiYeLine/layout/UserItem3.xml
res/ShiYeLine/layout/UserMessageItem.xml
res/ShiYeLine/layout/UserNameCardDialog.xml
res/ShiYeLine/layout/VerifyPasswordDialog.xml
res/ShiYeLine/layout/VipButton.xml
res/ShiYeLine/layout/system/AnimationButton.xml
res/ShiYeLine/layout/system/BigButton.xml
res/ShiYeLine/layout/system/Button.xml
res/ShiYeLine/layout/system/CheckBox.xml
res/ShiYeLine/layout/system/CheckBoxWidthIcon.xml
res/ShiYeLine/layout/system/ComboBox.xml
res/ShiYeLine/layout/system/ComboBoxBar.xml
res/ShiYeLine/layout/system/ComboBoxItem.xml
res/ShiYeLine/layout/system/HScrollBar.xml
res/ShiYeLine/layout/system/IconButton.xml
res/ShiYeLine/layout/system/ImageDialog.xml
res/ShiYeLine/layout/system/ListItem.xml
res/ShiYeLine/layout/system/Menu.xml
res/ShiYeLine/layout/system/MenuItem.xml
res/ShiYeLine/layout/system/MenuSeparator.xml
res/ShiYeLine/layout/system/MessageBox.xml
res/ShiYeLine/layout/system/RadioButton.xml
res/ShiYeLine/layout/system/RadioButtonWidthIcon.xml
res/ShiYeLine/layout/system/SeparatorLine.xml
res/ShiYeLine/layout/system/SkinMakeToolbar.xml
res/ShiYeLine/layout/system/SkinManagerDialog.xml
res/ShiYeLine/layout/system/TabButton.xml
res/ShiYeLine/layout/system/TipsWindow.xml
res/ShiYeLine/layout/system/TreeItem.xml
res/ShiYeLine/layout/system/VScrollBar.xml
res/ShiYeLine/menu/EditMenu.xml
res/ShiYeLine/menu/EditMenu2.xml
res/ShiYeLine/menu/EditMenu3.xml
res/ShiYeLine/menu/EmotionGroupMenu.xml
res/ShiYeLine/menu/EmotionImportExportMenu.xml
res/ShiYeLine/menu/EmotionItemMenu.xml
res/ShiYeLine/menu/GroupItemMenu.xml
res/ShiYeLine/menu/ImageMenu.xml
res/ShiYeLine/menu/MainMenu.xml
res/ShiYeLine/menu/MainMenuLocked.xml
res/ShiYeLine/menu/MsgItemMenu.xml
res/ShiYeLine/menu/OutputMenu.xml
res/ShiYeLine/menu/OutputMenu2.xml
res/ShiYeLine/menu/QGroupItemMenu.xml
res/ShiYeLine/menu/QGroupListMenu.xml
res/ShiYeLine/menu/QGroupMessageItemMenu.xml
res/ShiYeLine/menu/QGroupUserMenu.xml
res/ShiYeLine/menu/RemoteHelpMenu.xml
res/ShiYeLine/menu/SendMsgMenu.xml
res/ShiYeLine/menu/ShareMenu.xml
res/ShiYeLine/menu/SkinMenu.xml
res/ShiYeLine/menu/StatusMenu.xml
res/ShiYeLine/menu/UserItemMenu.xml
res/ShiYeLine/menu/UserMessageItemMenu.xml
res/ShiYeLine/value/color.xml
res/ShiYeLine/value/config.xml
res/ShiYeLine/value/font.xml
res/ShiYeLine/value/image.xml
res/ShiYeLine/value/string.xml
res/ShiYeLine/value/system/color.xml
res/ShiYeLine/value/system/string.xml
skin/ShiYeLine/1/theme.png
.png
skin/ShiYeLine/1/thumb.png
.png
skin/ShiYeLine/10/theme.png
.png
skin/ShiYeLine/10/thumb.png
.png
skin/ShiYeLine/11/theme.png
.png
skin/ShiYeLine/11/thumb.png
.png
skin/ShiYeLine/2/theme.png
.png
skin/ShiYeLine/2/thumb.png
.png
skin/ShiYeLine/3/theme.png
.png
skin/ShiYeLine/3/thumb.png
.png
skin/ShiYeLine/4/theme.png
.png
skin/ShiYeLine/4/thumb.png
.png
skin/ShiYeLine/5/theme.png
.png
skin/ShiYeLine/5/thumb.png
.png
skin/ShiYeLine/6/theme.png
.png
skin/ShiYeLine/6/thumb.png
.png
skin/ShiYeLine/7/theme.png
.png
skin/ShiYeLine/7/thumb.png
.png
skin/ShiYeLine/8/theme.png
.png
skin/ShiYeLine/8/thumb.png
.png
skin/ShiYeLine/9/theme.png
.png
skin/ShiYeLine/9/thumb.png
.png
skin/ShiYeLine/default/theme.png
.png
skin/ShiYeLine/default/thumb.png
.png
skin/ShiYeLine/skin.xml
uninst.exe
.exe windows:5 windows x86 arch:x86

32f3282581436269b3a75b6675fe3e08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 532KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LanSetup.dll
.dll windows:5 windows x86 arch:x86

2026bd01f05ccba00b46532ee089b485

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/04/2021, 00:00

Not After

05/04/2024, 23:59

Subject

CN=Shanghai Qiyeyu Network Technology Co.\, Ltd.,O=Shanghai Qiyeyu Network Technology Co.\, Ltd.,ST=上海市,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

57:21:38:60:47:28:29:74:9a:0c:04:9c:fa:78:db:f6:8f:9d:5c:52
Signer

Actual PE Digest

57:21:38:60:47:28:29:74:9a:0c:04:9c:fa:78:db:f6:8f:9d:5c:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\CI\workspace\workspace\lan\Lan\Bin\Release\LanSetup.pdb

Imports

gdiplus

GdipCreateFromHDC
GdipDeleteGraphics
GdipGraphicsClear
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipDrawLineI
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawPath
GdipSetSmoothingMode
GdipDeletePath
GdipCreatePath
GdipCreatePen2
GdipSetLinePresetBlend
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCreateFont
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipDeleteFontFamily
GdipTranslateTextureTransform
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipImageSelectActiveFrame
GdipImageRotateFlip
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromStream
GdipCreateTexture
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromFile
GdipAddPathArcI
GdipAddPathLineI
GdipGetPathWorldBounds
GdipMeasureString
GdipSetLineWrapMode
GdipCreateLineBrushFromRectI
GdipFillRectangleI
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDrawImageI
GdipSetSolidFillColor
GdipDrawImageRectI
GdipSetInterpolationMode
GdipFillPath
GdipSetTextRenderingHint
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipAddPathString
GdipDrawString
GdipCreateSolidFill
GdipSetStringFormatLineAlign
GdiplusStartup

winmm

timeBeginPeriod

wldap32

ord143
ord26
ord211
ord22
ord50
ord60
ord46
ord41
ord27
ord301
ord33
ord200
ord79
ord35
ord32
ord30

kernel32

InterlockedCompareExchange
HeapAlloc
IsProcessorFeaturePresent
HeapFree
GetProcessHeap
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
ExitThread
CreateThread
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetFileInformationByHandle
SetFilePointer
GetDriveTypeA
FindFirstFileA
RtlUnwind
HeapCreate
ExitProcess
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
InitializeCriticalSection
SizeofResource
LeaveCriticalSection
GetModuleFileNameW
WriteFile
lstrlenW
RaiseException
GetLastError
GetProcAddress
EnterCriticalSection
lstrcmpiW
DeleteCriticalSection
CreateEventW
WaitForSingleObject
TerminateProcess
GetCurrentProcess
CopyFileW
MoveFileExW
DeleteFileW
WideCharToMultiByte
LoadLibraryW
GetCurrentThreadId
SetEvent
FlushInstructionCache
SetLastError
GlobalLock
GlobalSize
GlobalUnlock
lstrlenA
LockResource
GlobalAlloc
GetVersionExW
MulDiv
lstrcpynW
TerminateThread
Sleep
CloseHandle
GetTickCount
OpenProcess
FileTimeToSystemTime
GetTempPathW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
ReadFile
CreateFileW
FindClose
SleepEx
FormatMessageA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
LoadLibraryA
ExpandEnvironmentStringsA
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetModuleHandleA
SetStdHandle
FlushFileBuffers
GetFullPathNameA
CreateFileA
GetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
MultiByteToWideChar

user32

GetClipboardData
CloseClipboard
RegisterClipboardFormatW
GetWindowPlacement
UnregisterClassA
DrawIconEx
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
DrawTextW
DefWindowProcW
CallWindowProcW
LoadIconW
IsClipboardFormatAvailable
EqualRect
GetKeyState
OpenClipboard
LoadImageW
GetClassInfoExW
RegisterClassExW
ValidateRect
IsWindowVisible
RedrawWindow
GetWindowTextLengthW
GetWindowTextW
IsRectEmpty
TrackMouseEvent
CharLowerW
LoadStringW
CreateDialogParamW
EnableWindow
UpdateWindow
ReleaseDC
GetDC
IsIconic
CreateWindowExW
FillRect
InvalidateRect
ReleaseCapture
SetCapture
SetWindowTextW
DestroyIcon
UpdateLayeredWindow
EndPaint
BeginPaint
SetWindowRgn
GetSystemMetrics
SystemParametersInfoW
PtInRect
IsZoomed
LoadCursorW
SetCursor
GetCursorPos
ScreenToClient
SetFocus
SetForegroundWindow
GetCapture
IsChild
GetClassNameW
IsWindowEnabled
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
MoveWindow
ClientToScreen
GetActiveWindow
IsWindow
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
GetDesktopWindow
SetWindowLongW
SetTimer
KillTimer
GetDlgItem
SendMessageW
PostMessageW
CharNextW
CopyRect

gdi32

SetBkMode
CreateFontIndirectW
DPtoLP
GetTextExtentPoint32W
SetTextColor
SetBkColor
GdiFlush
SetDIBColorTable
CreateDIBSection
GetDeviceCaps
SetViewportOrgEx
CreateSolidBrush
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
DeleteObject
BitBlt
DeleteDC
CreateRoundRectRgn

comdlg32

GetSaveFileNameW

advapi32

RegQueryInfoKeyW
GetLengthSid
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
RegCreateKeyExW
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW

shell32

ShellExecuteW
ShellExecuteExW
DragQueryFileW
SHGetFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CoCreateGuid
StringFromGUID2
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarUI4FromStr
SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

ws2_32

ioctlsocket
select
__WSAFDIsSet
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
WSASetLastError
connect
getpeername
getsockopt
getsockname
setsockopt
send
recv
WSAGetLastError
gethostname
WSACleanup
WSAStartup
closesocket
socket
bind
ntohs
htons

Exports

Exports

AddFirewall
Create
FinishSetup
FinishUninst
KillProcess
RepFile
StartSetup
StartUninst
Terminate
UpdateSetupProgress
UpdateUninstProgress

Sections

.text
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Rfshdktp.dll
.dll windows:4 windows x86 arch:x86

042f3c184e7c0923b6325ab1dc09aed7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHGetSpecialFolderLocation
SHChangeNotify

Exports

Exports

refreshDesktop

Sections

.text
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32f3282581436269b3a75b6675fe3e08

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83Certificate

Extended Key Usages

Key Usages

a7:83:20:89:4c:5f:d9:f1:c2:6b:ff:d8:4e:df:e5:38:a7:63:cb:beSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 415KB

.ndata Size: - Virtual size: 532KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 3KB

2026bd01f05ccba00b46532ee089b485

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83Certificate

Extended Key Usages

Key Usages

57:21:38:60:47:28:29:74:9a:0c:04:9c:fa:78:db:f6:8f:9d:5c:52Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

winmm

wldap32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

Exports

Exports

Sections

.text Size: 574KB - Virtual size: 573KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 11KB - Virtual size: 19KB

.rsrc Size: 210KB - Virtual size: 210KB

.reloc Size: 47KB - Virtual size: 47KB

042f3c184e7c0923b6325ab1dc09aed7

Headers

File Characteristics

Imports

shell32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 84B

.rdata Size: 512B - Virtual size: 206B

.data Size: - Virtual size: 20B

.reloc Size: 512B - Virtual size: 48B

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

a7:83:20:89:4c:5f:d9:f1:c2:6b:ff:d8:4e:df:e5:38:a7:63:cb:be
Signer

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 415KB

.ndata
Size: - Virtual size: 532KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 3KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

57:21:38:60:47:28:29:74:9a:0c:04:9c:fa:78:db:f6:8f:9d:5c:52
Signer

.text
Size: 574KB - Virtual size: 573KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 11KB - Virtual size: 19KB

.rsrc
Size: 210KB - Virtual size: 210KB

.reloc
Size: 47KB - Virtual size: 47KB

.text
Size: 512B - Virtual size: 84B

.rdata
Size: 512B - Virtual size: 206B

.data
Size: - Virtual size: 20B

.reloc
Size: 512B - Virtual size: 48B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 1024B - Virtual size: 588B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

25:64:1b:bc:4b:43:dd:b0:46:e5:be:ef:f7:24:d7:a9
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

f3:38:2a:db:a5:cc:cb:f2:4a:33:88:82:50:29:5d:a1:14:69:82:59
Signer

.text
Size: 206KB - Virtual size: 205KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 11KB - Virtual size: 11KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

07:d6:05:93:de:cb:e3:02:96:16:73:22:7b:70:55:83
Certificate

4d:ee:fc:7c:10:9e:13:4c:f3:21:52:03:8d:88:65:f4:9b:76:40:59
Signer