c1099bc2140b5fe04240ea6423b894a3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

c1099bc2140b5fe04240ea6423b894a3_JaffaCakes118
Size

6.5MB
MD5

c1099bc2140b5fe04240ea6423b894a3
SHA1

e347160a8a536bd6913e13b87a599109080ec7f1
SHA256

cd8dbe3ba03d6ea5661f07c1e173d4ea37a5b2e04385527355f03e304a7203d6
SHA512

de80346909cf5b677eb8e647430c1a7d775f99ea8afcaf331d8381966129933a3101e41ba0e20cdfd3629944732d09b5d5cef6a532a2e26e491b885e15d9f7b9
SSDEEP

196608:3nWcp+2vQLo70EY9QtN7eb602n+RSyyp2y+oB7tE9NfA:3H+2Y/VbEncSyZ0E9ZA

Score

1^/10

Malware Config

Signatures

Files

c1099bc2140b5fe04240ea6423b894a3_JaffaCakes118
.zip
AdbCmdServer.dll
.dll windows:5 windows x86 arch:x86

d020c4546d113bebaafe27d8278d1cbd

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:03:ad:e7:1e:90:01:0f:a4:5d:36:a4:8c:1c:fd:37:ba:5f:f9:2f:e2:10:d1:ab:60:28:5a:97:b3:39:3e:fa
Signer

Actual PE Digest

30:03:ad:e7:1e:90:01:0f:a4:5d:36:a4:8c:1c:fd:37:ba:5f:f9:2f:e2:10:d1:ab:60:28:5a:97:b3:39:3e:fa

Digest Algorithm

sha256

PE Digest Matches

true

35:47:ab:55:c3:fe:f0:8f:5b:9b:53:42:b4:d8:1b:0f:eb:e4:91:a8
Signer

Actual PE Digest

35:47:ab:55:c3:fe:f0:8f:5b:9b:53:42:b4:d8:1b:0f:eb:e4:91:a8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AdbCmdServer.pdb

Imports

ws2_32

connect
htons
closesocket
WSACleanup
WSAStartup
recv
send
select
inet_addr
WSAGetLastError
ioctlsocket
setsockopt
socket

log4cplus

?macro_forced_log@detail@log4cplus@@YAXABVLogger@2@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH2@Z
?get_macro_body_oss@detail@log4cplus@@YAAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??1Logger@log4cplus@@UAE@XZ
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

kernel32

InterlockedExchange
DecodePointer
EncodePointer
GetVolumeInformationW
OutputDebugStringW
GetLocalTime
GetProcessHeap
HeapSize
HeapReAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetCurrentProcessId
CloseHandle
GetLastError
OpenMutexW
SetEvent
WaitForSingleObject
WideCharToMultiByte
CreateEventW
CreatePipe
SetHandleInformation
CreateProcessW
WaitForMultipleObjects
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MultiByteToWideChar
lstrlenA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
InterlockedCompareExchange
GetProcAddress
GetModuleHandleW
TerminateProcess
InterlockedIncrement
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetPrivateProfileIntW
lstrlenW
CreateFileW
ReadFile
GetFileSize
GetTickCount
GetTempPathW
GetModuleFileNameW
QueryPerformanceFrequency
QueryPerformanceCounter
GetExitCodeProcess
CopyFileW
GetFileAttributesExW
WriteFile
GetFileAttributesW
CreateDirectoryW
Sleep
GetCurrentThreadId
GetExitCodeThread
ResetEvent
ResumeThread
GetPrivateProfileStringW
RaiseException
HeapFree
HeapAlloc
HeapDestroy
LeaveCriticalSection
IsProcessorFeaturePresent

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW

ole32

CoTaskMemFree
CoCreateGuid
CreateStreamOnHGlobal
StringFromGUID2

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shlwapi

PathFindExtensionW
PathAppendW
PathFileExistsW
PathFindFileNameW

msvcp100

??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

msvcr100

wcsncpy_s
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
__RTDynamicCast
_CxxThrowException
_onexit
_lock
__dllonexit
_unlock
toupper
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
wcslen
memcpy
strlen
memcpy_s
memset
??2@YAPAXI@Z
sprintf_s
??_V@YAXPAX@Z
strcmp
strstr
wcsstr
_wcslwr_s
wcsnlen
memmove_s
free
_recalloc
calloc
_vscwprintf
vswprintf_s
??0exception@std@@QAE@ABV01@@Z
_purecall
??0exception@std@@QAE@ABQBD@Z
wmemcpy_s
memmove
wcsrchr
_wtoi64
_wcsicmp
wcscmp
?what@exception@std@@UBEPBDXZ
wcscpy_s
_time64
srand
rand
fopen_s
fseek
ftell
fread
fclose
fwrite
_wtoi
_wtol
wcsspn
wcscspn
wcschr
_wcsupr_s
iswspace
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
_vsnwprintf_s
vsprintf_s
__CxxFrameHandler3
malloc
_waccess
_beginthreadex
wcscat_s

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreateSequential

winhttp

WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpSendRequest

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
AdbCloseHandle
AdbCreateConnectDevice
AdbCreateServer
AdbExeAdbShell
AdbExeScreenshot
AdbExecAdbCommand
AdbExecAdbCommandRaw
AdbGetAdbVersion
AdbGetBattery
AdbGetDeviceList
AdbGetMemoryInfoByPath
AdbGetPicInfoByPath
AdbInstallApk
AdbInstallDevApk
AdbIsApkInstall
AdbKillAdbServer
AdbPullFile
AdbPushFile
AdbStartAdbServer
AdbUninstallApk
InitAdbCmdServer
UnInitAdbCmdServer

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AdbWinApi.dll
.dll windows:5 windows x86 arch:x86

3af03421daeb123c4d8f4d7e4c77c3b5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:3b:99:52:87:e7:75:a5:62:2a:0a:43:4c:fb:31:d3:a0:cf:7d:8b:11:59:0d:df:85:b1:16:0c:d1:39:57:d2
Signer

Actual PE Digest

68:3b:99:52:87:e7:75:a5:62:2a:0a:43:4c:fb:31:d3:a0:cf:7d:8b:11:59:0d:df:85:b1:16:0c:d1:39:57:d2

Digest Algorithm

sha256

PE Digest Matches

true

92:35:94:a1:62:39:ae:78:eb:b4:f3:84:37:fd:09:25:9a:1b:ba:3a
Signer

Actual PE Digest

92:35:94:a1:62:39:ae:78:eb:b4:f3:84:37:fd:09:25:9a:1b:ba:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AdbWinApi.pdb

Imports

kernel32

FreeLibrary
GetSystemDirectoryW
GetFileAttributesW
GetModuleFileNameW
LoadLibraryW
GetProcAddress
DeleteCriticalSection
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
SetLastError
EnterCriticalSection
LeaveCriticalSection
CreateFileW
DeviceIoControl
CloseHandle
WideCharToMultiByte
ReadFile
WriteFile
GetOverlappedResult
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedCompareExchange

ole32

CoCreateInstance

shlwapi

PathAppendW
PathRemoveFileSpecW
PathFileExistsW

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
memmove
_snwprintf
wcslen
_wcsnicmp
_purecall
malloc
free
wcscpy
_unlock
__dllonexit
_lock
??1exception@std@@UAE@XZ
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
wcscat
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
memset
_onexit
memcpy
__CxxFrameHandler3
??_V@YAXPAX@Z
_CxxThrowException

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces

Exports

Exports

??0AdbEndpointObject@@QAE@ABV0@@Z
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??0AdbIOCompletion@@QAE@ABV0@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??0AdbInterfaceObject@@QAE@ABV0@@Z
??0AdbInterfaceObject@@QAE@PB_W@Z
??0AdbObjectHandle@@QAE@ABV0@@Z
??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z
??1AdbEndpointObject@@MAE@XZ
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
??1AdbObjectHandle@@MAE@XZ
??4AdbEndpointObject@@QAEAAV0@ABV0@@Z
??4AdbIOCompletion@@QAEAAV0@ABV0@@Z
??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z
??4AdbObjectHandle@@QAEAAV0@ABV0@@Z
??_7AdbEndpointObject@@6B@
??_7AdbIOCompletion@@6B@
??_7AdbInterfaceObject@@6B@
??_7AdbObjectHandle@@6B@
?AddRef@AdbObjectHandle@@UAEJXZ
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ
?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?IsOpened@AdbObjectHandle@@QBE_NXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?Lookup@AdbObjectHandle@@SAPAV1@PAX@Z
?Release@AdbObjectHandle@@UAEJXZ
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?Type@AdbEndpointObject@@SA?AW4AdbObjectType@@XZ
?Type@AdbIOCompletion@@SA?AW4AdbObjectType@@XZ
?Type@AdbInterfaceObject@@SA?AW4AdbObjectType@@XZ
?adb_handle@AdbObjectHandle@@QBEPAXXZ
?endpoint_id@AdbEndpointObject@@QBEEXZ
?endpoint_index@AdbEndpointObject@@QBEEXZ
?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ
?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ
?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ
?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ
?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ
?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ
?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ
AdbCloseHandle
AdbCreateInterface
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetDefaultBulkReadEndpointInformation
AdbGetDefaultBulkWriteEndpointInformation
AdbGetEndpointInformation
AdbGetEndpointInterface
AdbGetInterfaceName
AdbGetOvelappedIoResult
AdbGetSerialNumber
AdbGetUsbConfigurationDescriptor
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbHasOvelappedIoComplated
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbOpenEndpoint
AdbQueryInformationEndpoint
AdbReadEndpointAsync
AdbReadEndpointSync
AdbResetInterfaceEnum
AdbWriteEndpointAsync
AdbWriteEndpointSync

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AdbWinUsbApi.dll
.dll windows:5 windows x86 arch:x86

dd109ddd7d10eeb5ce2dc0d89569abd0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

91:34:95:9d:d7:a1:c3:bf:8d:57:17:ab:d9:aa:29:dc:cd:6e:30:12:1a:e4:83:fa:bf:19:d4:42:c9:84:27:88
Signer

Actual PE Digest

91:34:95:9d:d7:a1:c3:bf:8d:57:17:ab:d9:aa:29:dc:cd:6e:30:12:1a:e4:83:fa:bf:19:d4:42:c9:84:27:88

Digest Algorithm

sha256

PE Digest Matches

true

94:08:b4:21:b8:50:c0:66:6c:d3:97:a4:3b:8d:0d:e2:bc:02:52:83
Signer

Actual PE Digest

94:08:b4:21:b8:50:c0:66:6c:d3:97:a4:3b:8d:0d:e2:bc:02:52:83

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AdbWinUsbApi.pdb

Imports

kernel32

DecodePointer
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
CreateFileW
SetLastError
CloseHandle
CreateEventW
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DeleteCriticalSection
EncodePointer

ole32

CoCreateInstance

msvcr100

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
memcpy
??_V@YAXPAX@Z
_unlock
__dllonexit
_lock
__CxxFrameHandler3
_onexit
_malloc_crt
_encoded_null
free

adbwinapi

?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
??1AdbInterfaceObject@@MAE@XZ
??0AdbInterfaceObject@@QAE@PB_W@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?AddRef@AdbObjectHandle@@UAEJXZ
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
??1AdbEndpointObject@@MAE@XZ
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??1AdbIOCompletion@@MAE@XZ
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z

winusb

WinUsb_Free
WinUsb_QueryInterfaceSettings
WinUsb_GetDescriptor
WinUsb_GetCurrentAlternateSetting
WinUsb_Initialize
WinUsb_SetPipePolicy
WinUsb_GetOverlappedResult
WinUsb_WritePipe
WinUsb_ReadPipe
WinUsb_QueryPipe

Exports

Exports

InstantiateWinUsbInterface

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AndroidDaemon.exe
.exe windows:5 windows x86 arch:x86

9934f3a7ef2cb34d59826e7f8fdde920

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:8c:1d:90:40:7e:2d:46:00:9b:d8:af:e0:44:52:b3:42:ba:93:33:d7:09:1f:61:c6:02:35:cb:58:4b:b2:3c
Signer

Actual PE Digest

e7:8c:1d:90:40:7e:2d:46:00:9b:d8:af:e0:44:52:b3:42:ba:93:33:d7:09:1f:61:c6:02:35:cb:58:4b:b2:3c

Digest Algorithm

sha256

PE Digest Matches

true

a3:97:c5:48:f7:78:77:e5:37:63:e7:fc:ff:69:57:7b:2b:50:17:aa
Signer

Actual PE Digest

a3:97:c5:48:f7:78:77:e5:37:63:e7:fc:ff:69:57:7b:2b:50:17:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AndroidDaemon.pdb

Imports

kernel32

GetCurrentProcessId
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
DeleteCriticalSection
GetLastError
CloseHandle
Sleep
SetEvent
WaitForSingleObject
HeapSetInformation
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount

user32

DispatchMessageW
LoadStringW
TranslateMessage
PostMessageW
SendMessageW
GetMessageW

advapi32

ControlService
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__set_app_type
_fmode
_commode
__setusermatherr
_invoke_watson
?terminate@@YAXXZ
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_crt_debugger_hook
__CxxFrameHandler3
_controlfp_s
_except_handler4_common
_CxxThrowException
memcpy
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_wtoi
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
swprintf_s
_wcsicmp
memset
free
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ

shlwapi

PathRemoveFileSpecW
PathAppendW

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AndroidDevice.dll
.dll windows:5 windows x86 arch:x86

e1a12de4bd6f4ede3c42c3207581cd7a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

da:5a:9b:07:ec:56:df:20:0e:5d:c7:fa:38:8b:36:5d:1b:77:d6:43:06:2c:14:b4:ed:cf:75:8a:e7:64:86:0a
Signer

Actual PE Digest

da:5a:9b:07:ec:56:df:20:0e:5d:c7:fa:38:8b:36:5d:1b:77:d6:43:06:2c:14:b4:ed:cf:75:8a:e7:64:86:0a

Digest Algorithm

sha256

PE Digest Matches

true

2d:92:8f:33:62:11:05:d6:ac:6e:fa:f9:e7:5e:7b:62:9b:64:47:48
Signer

Actual PE Digest

2d:92:8f:33:62:11:05:d6:ac:6e:fa:f9:e7:5e:7b:62:9b:64:47:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AndroidDevice.pdb

Imports

kernel32

GetFileSize
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
MultiByteToWideChar
FindResourceExW
GetLocalTime
GetCurrentProcess
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WideCharToMultiByte
lstrlenW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
DeleteFileW
InitializeCriticalSection
TlsGetValue
GetCurrentThreadId
GetTickCount
TlsSetValue
GetModuleFileNameW
GetCurrentProcessId
TlsAlloc
TlsFree
GetVersionExW
GetSystemInfo
CreateEventW
GetModuleHandleW
WaitForSingleObject
InterlockedIncrement
SetFilePointer
CreateMutexW
OpenMutexW
CopyFileW
CreateDirectoryW
GetFileAttributesExW
Sleep
GetVolumeInformationW
ResumeThread
GetExitCodeThread
WaitForMultipleObjects
GetFileAttributesW
GetModuleHandleExW
RaiseException
GlobalSize
GlobalLock
GlobalUnlock
LoadLibraryW
FreeLibrary
GetProcAddress
CreateFileW
CloseHandle
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
WriteFile
ReadFile
InterlockedDecrement
GetLastError
SetEvent

user32

PeekMessageW
PostQuitMessage
TranslateMessage
DispatchMessageW
PostThreadMessageW
RegisterClassExW
CreateWindowExW
SetWindowLongW
SetTimer
KillTimer
GetMessageW
DestroyWindow
UnregisterClassW
GetWindowLongW
CallWindowProcW
PostMessageW
IsWindow
UnregisterDeviceNotification
RegisterDeviceNotificationW
DefWindowProcW

shell32

SHGetPathFromIDListW
SHGetFolderPathW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateGuid
CLSIDFromString
GetHGlobalFromStream
StringFromGUID2

msvcr100

memset
free
malloc
strlen
??3@YAXPAX@Z
_purecall
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
memcpy_s
??_V@YAXPAX@Z
_mktime64
_CxxThrowException
wcslen
memmove_s
_recalloc
calloc
wcsncpy
wcscmp
_localtime64_s
_time64
wcscpy_s
_snprintf_s
memmove
_vsnprintf_s
_vsnwprintf_s
memcmp
_wtoi
strtol
wcsstr
_vscwprintf
vswprintf_s
wcsncpy_s
wcschr
_waccess
_wcsicmp
wcspbrk
iswspace
wcsnlen
wcsrchr
_wcsupr_s
_wcslwr_s
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
strchr
realloc
iswalpha
iswlower
towupper
_beginthreadex
toupper
wcscat_s
strncmp
isspace
isalpha
isdigit
vfprintf
_vscprintf
atoi
_unlock
__dllonexit
_lock
_onexit
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
memcpy
wmemcpy_s

shlwapi

PathFindFileNameW
PathFileExistsW

msvcp100

??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1facet@locale@std@@UAE@XZ
??0facet@locale@std@@IAE@I@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xmem@tr1@std@@YAXXZ
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
_Wcsxfrm
_Wcscoll

setupapi

CM_Get_Sibling
CM_Locate_DevNodeW
CM_Get_Child
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInfo
CM_Get_Device_IDW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW

ws2_32

htons
ntohs
ntohl
htonl

rpcrt4

UuidToStringW
UuidCreateSequential
RpcStringFreeW

Exports

Exports

CreateAndroidDevice
DestroyAndroidDevice

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AndroidServer.exe
.exe windows:5 windows x86 arch:x86

8fc0a77757dc78f801edeffced0627d6

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d7:73:15:cc:37:fe:bc:1e:9b:b4:4c:ce:c3:d9:ec:4c:11:c9:1c:cd:2f:a5:57:ca:91:b8:e9:75:ae:7c:08:fa
Signer

Actual PE Digest

d7:73:15:cc:37:fe:bc:1e:9b:b4:4c:ce:c3:d9:ec:4c:11:c9:1c:cd:2f:a5:57:ca:91:b8:e9:75:ae:7c:08:fa

Digest Algorithm

sha256

PE Digest Matches

true

fa:7d:23:13:be:38:86:de:36:2e:30:bb:7d:d5:be:75:0d:c9:ce:75
Signer

Actual PE Digest

fa:7d:23:13:be:38:86:de:36:2e:30:bb:7d:d5:be:75:0d:c9:ce:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AndroidServer.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

connectmanager

ord7
ord4
ord3
_GetDeviceInfo@16
ord2
ord5
_GetAndroidPhoneCount@0
ord8
ord14
ord6
_RegisterDeviceChange@8
ord1
ord13
ord11
ord9
ord12
ord10
_UnRegisterDeviceChange@4

log4cplus

??1Logger@log4cplus@@UAE@XZ
?get_macro_body_oss@detail@log4cplus@@YAAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?macro_forced_log@detail@log4cplus@@YAXABVLogger@2@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH2@Z
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?print@snprintf_buf@helpers@log4cplus@@QAAPB_WPB_WZZ
?get_macro_body_snprintf_buf@detail@log4cplus@@YAAAVsnprintf_buf@helpers@2@XZ
??0Logger@log4cplus@@QAE@$$QAV01@@Z
?getRoot@Logger@log4cplus@@SA?AV12@XZ
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?getDefaultHierarchy@Logger@log4cplus@@SAAAVHierarchy@2@XZ
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z

imm32

ImmDisableIME

gdiplus

GdipSaveImageToStream
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDisposeImage

kernel32

Sleep
GetCommandLineW
CreateMutexW
SearchPathW
MapViewOfFile
UnmapViewOfFile
SetErrorMode
HeapAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
HeapFree
GetProcessHeap
WriteFile
InitializeCriticalSection
OpenProcess
lstrcpynW
ReadFile
CreateFileW
VirtualAllocEx
GetLocalTime
Process32FirstW
HeapSetInformation
CreateFileMappingW
CreateEventW
WaitForMultipleObjects
Process32NextW
CreateToolhelp32Snapshot
GetCurrentThreadId
GetCurrentProcessId
WriteProcessMemory
GetFileSize
FlushInstructionCache
RaiseException
SetLastError
GetTempPathW
GetLongPathNameW
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
ReleaseMutex
LocalAlloc
LocalFree
CloseHandle
SetEvent
GetExitCodeThread
OpenMutexW
ResumeThread
FindFirstFileW
FindNextFileW
FindClose
DeviceIoControl
MultiByteToWideChar
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
HeapReAlloc
GetTickCount
GetStdHandle
CreatePipe
DuplicateHandle
GetSystemDirectoryW
GetWindowsDirectoryW
lstrlenA
OutputDebugStringW
GetVolumeInformationW
GetModuleFileNameW
TerminateProcess
LoadLibraryW
GetModuleHandleW
WaitForSingleObject
CreateProcessW
FreeLibrary
lstrlenW
WideCharToMultiByte
InterlockedIncrement
DeleteCriticalSection
LockResource
EnterCriticalSection
ProcessIdToSessionId
GetProcAddress
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetExitCodeProcess
LoadResource
FindResourceW
FindResourceExW
GetLastError
LeaveCriticalSection
HeapDestroy
HeapSize
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
EncodePointer
DecodePointer
ResetEvent
SizeofResource
GetModuleHandleExW
InterlockedExchange
GetVersion
OpenThread

user32

PostQuitMessage
UnregisterClassA
PostThreadMessageW
CreateWindowExW
DestroyWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
CallWindowProcW
DefWindowProcW
ShowWindow
SetWindowLongW
GetWindowLongW
RegisterClassExW
LoadCursorW
GetClassInfoExW
GetMessageW

advapi32

RegCloseKey
OpenProcessToken
GetTokenInformation
RegQueryValueExW
AllocateAndInitializeSid
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
RegOpenKeyExW

shell32

ShellExecuteExW
ShellExecuteW
SHGetFolderPathW
SHFileOperationW
CommandLineToArgvW

ole32

CreateStreamOnHGlobal
StringFromGUID2
CoCreateGuid

oleaut32

SysAllocString
SysFreeString

shlwapi

PathAppendW
PathFileExistsW
PathRemoveFileSpecW

msvcp100

??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1facet@locale@std@@UAE@XZ
??0facet@locale@std@@IAE@I@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_Xmem@tr1@std@@YAXXZ
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
_Wcsxfrm
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xfunc@tr1@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
_Wcscoll
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

adbcmdserver

AdbGetDeviceList
AdbCloseHandle
AdbInstallDevApk
AdbExeAdbShell
AdbCreateConnectDevice
AdbExeScreenshot
AdbInstallApk
AdbUninstallApk
AdbExecAdbCommand
AdbKillAdbServer
AdbPullFile
AdbGetPicInfoByPath
AdbGetMemoryInfoByPath
AdbIsApkInstall
AdbGetBattery
AdbPushFile
AdbStartAdbServer
AdbCreateServer
AdbExecAdbCommandRaw

msvcr100

_CxxThrowException
_mbslwr_s
toupper
__CxxFrameHandler3
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
??3@YAXPAX@Z
memmove_s
_vscwprintf
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
wmemcpy_s
vswprintf_s
wcslen
memset
??_V@YAXPAX@Z
memcpy_s
??2@YAPAXI@Z
memcpy
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
memmove
free
calloc
strlen
_recalloc
_purecall
wcscmp
_vsnwprintf_s
wcsnlen
_wcsicmp
wcschr
_snwprintf
_beginthread
_wcslwr_s
rand
_waccess
srand
wcscat_s
_wtol
wcscpy
_time64
swprintf_s
memcmp
_wtoi
wcsrchr
_beginthreadex
strchr
realloc
wcspbrk
iswspace
isalnum
strnlen
_itoa_s
_wcsupr_s
wcscpy_s
strncpy
strtoul
_mbsstr
_mbschr

rpcrt4

RpcStringFreeW
UuidCreateSequential
UuidToStringW

netapi32

Netbios

winhttp

WinHttpSetOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpCrackUrl

daemonproxy

ord11
ord12
ord7

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AndroidServerUp.exe
.exe windows:5 windows x86 arch:x86

03be61ba8789e10089d6bab93f5a00f8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8e:21:73:b1:f1:2c:46:c7:9a:85:35:c2:31:56:c9:7f:06:24:73:01:8b:de:67:07:17:ad:04:6c:81:12:24:a4
Signer

Actual PE Digest

8e:21:73:b1:f1:2c:46:c7:9a:85:35:c2:31:56:c9:7f:06:24:73:01:8b:de:67:07:17:ad:04:6c:81:12:24:a4

Digest Algorithm

sha256

PE Digest Matches

true

8c:ce:c4:0e:fb:bf:9e:5d:eb:a5:9d:9f:7a:cf:8e:f2:b2:0e:a3:81
Signer

Actual PE Digest

8c:ce:c4:0e:fb:bf:9e:5d:eb:a5:9d:9f:7a:cf:8e:f2:b2:0e:a3:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\AndroidServerUp.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

LeaveCriticalSection
TlsGetValue
GetCurrentThreadId
GetTickCount
WideCharToMultiByte
TlsSetValue
GetModuleFileNameW
GetCurrentProcessId
GetLocalTime
InitializeCriticalSection
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
SetErrorMode
HeapFree
SearchPathW
OpenProcess
CreateProcessW
WaitForMultipleObjects
TerminateProcess
SetUnhandledExceptionFilter
WriteProcessMemory
VirtualAllocEx
lstrcpynW
GetCommandLineW
GetExitCodeProcess
Sleep
lstrlenW
LoadLibraryW
FreeLibrary
LocalFree
GetLastError
lstrlenA
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
WaitForSingleObject
CreateMutexW
EnterCriticalSection
GetLongPathNameW
ReadFile
RaiseException
InitializeCriticalSectionAndSpinCount
GetVolumeInformationW
OpenMutexW
GetPrivateProfileStringW
SystemTimeToFileTime
WritePrivateProfileStringW
SleepEx
ExpandEnvironmentStringsA
FormatMessageA
SetLastError
HeapReAlloc
OutputDebugStringW
InterlockedExchange
GetCurrentProcess
DeleteFileW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
DecodePointer
EncodePointer
HeapSize
HeapDestroy
DeleteCriticalSection
SetEvent
GetTempPathW
CreateEventW
GetFileSize
FlushFileBuffers
SetFilePointer
WriteFile
GetModuleHandleW
GetProcAddress
CreateFileW
CloseHandle
FindResourceExW
IsProcessorFeaturePresent

advapi32

CryptHashData
CryptDestroyHash
RegOpenKeyExW
RegCloseKey
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
RegQueryValueExW

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
SHGetFolderPathW
SHGetPathFromIDListW

ole32

StringFromGUID2
CoCreateGuid
CoTaskMemFree

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathAppendW

msvcp100

??1_Container_base12@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

_strdup
_stricmp
__CxxFrameHandler3
_CxxThrowException
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
_itoa
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
exit
??3@YAXPAX@Z
free
wcslen
memcpy_s
memset
wcscpy_s
_snprintf_s
wcschr
wcscat_s
??2@YAPAXI@Z
??_V@YAXPAX@Z
wcscpy
_snwprintf
_wtol
_wcsicmp
wcsnlen
memmove_s
_vsnprintf_s
_vsnwprintf_s
_recalloc
calloc
_vscwprintf
vswprintf_s
_purecall
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy
wmemcpy_s
memmove
strlen
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
wcscmp
malloc
wcstok
_wtoi
memcmp
toupper
atoi
_wtoi64
_snprintf
fputc
_gmtime64
sscanf
strncmp
isspace
qsort
_stat64
strerror
_strtoi64
fputs
strstr
__iob_func
strcpy
strchr
memchr
fflush
_errno
strtol
isalnum
tolower
_beginthreadex
strncpy
fgets
fopen
isalpha
fread
strcmp
isdigit
__sys_nerr
fwrite
strrchr
realloc
strtoul
fseek
getenv
fclose
isxdigit
_time64
strcat
_wcsupr_s

ws2_32

setsockopt
getsockname
WSAGetLastError
getaddrinfo
WSAStartup
connect
ioctlsocket
getpeername
WSACleanup
recv
bind
socket
freeaddrinfo
__WSAFDIsSet
WSASetLastError
closesocket
send
getsockopt
htons
ntohs
ntohl
htonl
select

rpcrt4

RpcStringFreeW
UuidCreateSequential
UuidToStringW

winhttp

WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AsyncTask.dll
.dll windows:5 windows x86 arch:x86

4f174ac050e68d72b17d856c57190ff0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

92:77:7f:c3:cd:48:1f:23:35:5d:d2:d3:83:de:19:93:d2:42:a2:ae:7b:f3:b9:9d:ae:bd:9b:69:10:f5:b0:18
Signer

Actual PE Digest

92:77:7f:c3:cd:48:1f:23:35:5d:d2:d3:83:de:19:93:d2:42:a2:ae:7b:f3:b9:9d:ae:bd:9b:69:10:f5:b0:18

Digest Algorithm

sha256

PE Digest Matches

true

50:e6:cb:ac:d2:cb:71:02:08:a4:2a:db:92:ca:45:15:9c:00:b8:7f
Signer

Actual PE Digest

50:e6:cb:ac:d2:cb:71:02:08:a4:2a:db:92:ca:45:15:9c:00:b8:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\AsyncTask.pdb

Imports

kernel32

TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
TlsGetValue
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
TlsSetValue
InterlockedExchange
TlsAlloc
TlsFree
GetCurrentProcess
FlushInstructionCache
RaiseException
SetLastError
GetCurrentThreadId
WaitForSingleObject
TerminateThread
IsDebuggerPresent
CloseHandle
CreateThread
GetSystemTimeAsFileTime
SetEvent
ResetEvent
CreateEventW
WaitForMultipleObjects
GetVersionExW
GetLastError
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedPushEntrySList
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
DecodePointer
EncodePointer

user32

IsWindow
DestroyWindow
SetTimer
PostQuitMessage
GetDesktopWindow
UnregisterClassA
KillTimer
GetParent
LoadCursorW
GetClassInfoExW
WaitMessage
GetQueueStatus
TranslateMessage
RegisterClassExW
GetWindowLongW
CallMsgFilterW
PeekMessageW
GetDlgItem
SetWindowLongW
MsgWaitForMultipleObjectsEx
CreateWindowExW
SendMessageW
CallWindowProcW
DefWindowProcW
DispatchMessageW
PostMessageW

oleaut32

VarCmp
SafeArrayGetVartype
SysAllocStringLen
VariantCopy
VariantClear
SysAllocString
SysFreeString

msvcp100

?max@?$numeric_limits@I@std@@SAIXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?_Xout_of_range@std@@YAXPBD@Z
??0_Container_base12@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ

msvcr100

_initterm
_CxxThrowException
memset
memmove_s
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
__CxxFrameHandler3
_encoded_null
free
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
??_V@YAXPAX@Z
_purecall
swprintf_s
ceil
_recalloc
strlen
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod

Exports

Exports

??0?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@QAE@ABV01@@Z
??0?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@QAE@XZ
??0?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAE@ABV01@@Z
??0?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAE@XZ
??0?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QAE@ABV01@@Z
??0?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QAE@XZ
??0?$RefCountedThreadSafe@VMessageLoopProxy@AsyncTask@@UMessageLoopProxyTraits@2@@AsyncTask@@QAE@XZ
??0?$RefCountedThreadSafe@VMessagePump@AsyncTask@@U?$RefCountedThreadPtrDestruct@VMessagePump@AsyncTask@@@destruct@2@@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
??0AutoRunState@MessageLoop@AsyncTask@@QAE@PAV12@@Z
??0CThreadSwitch@AsyncTask@@QAE@ABV01@@Z
??0CThreadSwitch@AsyncTask@@QAE@XZ
??0Lock@AsyncTask@@QAE@XZ
??0LockImpl@AsyncTask@@QAE@XZ
??0MessageLoop@AsyncTask@@QAE@W4Type@01@@Z
??0MessageLoopForUI@AsyncTask@@QAE@XZ
??0MessageLoopProxy@AsyncTask@@IAE@XZ
??0MessageLoopProxyImpl@AsyncTask@@AAE@XZ
??0MessagePump@AsyncTask@@QAE@XZ
??0MessagePumpForUI@AsyncTask@@QAE@XZ
??0MessagePumpWin@AsyncTask@@QAE@XZ
??0PendingTask@MessageLoop@AsyncTask@@QAE@PAVTask@2@_N@Z
??0ScopedVariant@AsyncTask@@QAE@ABUtagVARIANT@@@Z
??0ScopedVariant@AsyncTask@@QAE@HG@Z
??0ScopedVariant@AsyncTask@@QAE@NG@Z
??0ScopedVariant@AsyncTask@@QAE@PAUIDispatch@@@Z
??0ScopedVariant@AsyncTask@@QAE@PAUIUnknown@@@Z
??0ScopedVariant@AsyncTask@@QAE@PAUtagSAFEARRAY@@@Z
??0ScopedVariant@AsyncTask@@QAE@PB_W@Z
??0ScopedVariant@AsyncTask@@QAE@PB_WI@Z
??0ScopedVariant@AsyncTask@@QAE@XZ
??0TaskQueue@AsyncTask@@QAE@ABV01@@Z
??0TaskQueue@AsyncTask@@QAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
??0Time@AsyncTask@@AAE@_J@Z
??0Time@AsyncTask@@QAE@XZ
??0TimeDelta@AsyncTask@@AAE@_J@Z
??0TimeDelta@AsyncTask@@QAE@XZ
??0TimeTicks@AsyncTask@@IAE@_J@Z
??0TimeTicks@AsyncTask@@QAE@XZ
??0WaitableEvent@AsyncTask@@QAE@PAX@Z
??0WaitableEvent@AsyncTask@@QAE@_N0@Z
??1?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@UAE@XZ
??1?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@UAE@XZ
??1?$CWindowImplRoot@VCWindow@ATL@@@ATL@@UAE@XZ
??1?$RefCountedThreadSafe@VMessageLoopProxy@AsyncTask@@UMessageLoopProxyTraits@2@@AsyncTask@@QAE@XZ
??1?$RefCountedThreadSafe@VMessagePump@AsyncTask@@U?$RefCountedThreadPtrDestruct@VMessagePump@AsyncTask@@@destruct@2@@AsyncTask@@QAE@XZ
??1AtExitManager@AsyncTask@@QAE@XZ
??1AutoRunState@MessageLoop@AsyncTask@@QAE@XZ
??1CThreadSwitch@AsyncTask@@UAE@XZ
??1Lock@AsyncTask@@QAE@XZ
??1LockImpl@AsyncTask@@QAE@XZ
??1MessageLoop@AsyncTask@@UAE@XZ
??1MessageLoopForUI@AsyncTask@@UAE@XZ
??1MessageLoopProxy@AsyncTask@@MAE@XZ
??1MessageLoopProxyImpl@AsyncTask@@UAE@XZ
??1MessagePump@AsyncTask@@UAE@XZ
??1MessagePumpForUI@AsyncTask@@UAE@XZ
??1MessagePumpWin@AsyncTask@@UAE@XZ
??1ScopedVariant@AsyncTask@@QAE@XZ
??1TaskQueue@AsyncTask@@UAE@XZ
??1Thread@AsyncTask@@UAE@XZ
??1WaitableEvent@AsyncTask@@QAE@XZ
??4?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@QAEAAV01@ABV01@@Z
??4?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEAAV01@ABV01@@Z
??4?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QAEAAV01@ABV01@@Z
??4AutoRunState@MessageLoop@AsyncTask@@QAEAAV012@ABV012@@Z
??4CThreadSwitch@AsyncTask@@QAEAAV01@ABV01@@Z
??4PendingTask@MessageLoop@AsyncTask@@QAEAAU012@ABU012@@Z
??4ScopedVariant@AsyncTask@@QAEAAV01@ABUtagVARIANT@@@Z
??4TaskQueue@AsyncTask@@QAEAAV01@ABV01@@Z
??4Time@AsyncTask@@QAEAAV01@V01@@Z
??4TimeDelta@AsyncTask@@QAEAAV01@ABV01@@Z
??4TimeTicks@AsyncTask@@QAEAAV01@V01@@Z
??BScopedVariant@AsyncTask@@QBEABUtagVARIANT@@XZ
??GTime@AsyncTask@@QBE?AVTimeDelta@1@V01@@Z
??GTimeTicks@AsyncTask@@QBE?AV01@VTimeDelta@1@@Z
??GTimeTicks@AsyncTask@@QBE?AVTimeDelta@1@V01@@Z
??HTime@AsyncTask@@QBE?AV01@VTimeDelta@1@@Z
??HTimeDelta@AsyncTask@@QBE?AVTime@1@V21@@Z
??HTimeDelta@AsyncTask@@QBE?AVTimeTicks@1@V21@@Z
??HTimeTicks@AsyncTask@@QBE?AV01@VTimeDelta@1@@Z
??IScopedVariant@AsyncTask@@QBEPBUtagVARIANT@@XZ
??MPendingTask@MessageLoop@AsyncTask@@QBE_NABU012@@Z
??MTime@AsyncTask@@QBE_NV01@@Z
??NTime@AsyncTask@@QBE_NV01@@Z
??OTime@AsyncTask@@QBE_NV01@@Z
??OTimeDelta@AsyncTask@@QBE_NV01@@Z
??OTimeTicks@AsyncTask@@QBE_NV01@@Z
??PTime@AsyncTask@@QBE_NV01@@Z
??YTime@AsyncTask@@QAEAAV01@VTimeDelta@1@@Z
??ZTime@AsyncTask@@QAEAAV01@VTimeDelta@1@@Z
??_7CThreadSwitch@AsyncTask@@6B@
??_7MessageLoop@AsyncTask@@6B@
??_7MessageLoopForUI@AsyncTask@@6B@
??_7MessageLoopProxy@AsyncTask@@6B@
??_7MessageLoopProxyImpl@AsyncTask@@6BDestructionObserver@MessageLoop@1@@
??_7MessageLoopProxyImpl@AsyncTask@@6BMessageLoopProxy@1@@
??_7MessagePump@AsyncTask@@6B@
??_7MessagePumpForUI@AsyncTask@@6B@
??_7MessagePumpWin@AsyncTask@@6B@
??_7TaskQueue@AsyncTask@@6B@
??_7Thread@AsyncTask@@6B@
??_FMessageLoop@AsyncTask@@QAEXXZ
?Acquire@Lock@AsyncTask@@QAEXXZ
?ActivateHighResolutionTimer@Time@AsyncTask@@SA_N_N@Z
?AddDestructionObserver@MessageLoop@AsyncTask@@QAEXPAVDestructionObserver@12@@Z
?AddObserver@MessageLoopForUI@AsyncTask@@QAEXPAVObserver@MessagePumpWin@2@@Z
?AddObserver@MessagePumpWin@AsyncTask@@QAEXPAVObserver@12@@Z
?AddRef@?$RefCountedThreadSafe@VMessageLoopProxy@AsyncTask@@UMessageLoopProxyTraits@2@@AsyncTask@@QAEXXZ
?AddRef@?$RefCountedThreadSafe@VMessagePump@AsyncTask@@U?$RefCountedThreadPtrDestruct@VMessagePump@AsyncTask@@@destruct@2@@AsyncTask@@QAEXXZ
?AddTaskObserver@MessageLoop@AsyncTask@@QAEXPAVTaskObserver@12@@Z
?AddToDelayedWorkQueue@MessageLoop@AsyncTask@@IAEXABUPendingTask@12@@Z
?AsInput@ScopedVariant@AsyncTask@@QBEPAUtagVARIANT@@XZ
?AssertAcquired@Lock@AsyncTask@@QBEXXZ
?BelongsToCurrentThread@MessageLoopProxyImpl@AsyncTask@@UAE_NXZ
?CleanUp@Thread@AsyncTask@@MAEXXZ
?CleanUpAfterMessageLoopDestruction@Thread@AsyncTask@@MAEXXZ
?Clear@TaskQueue@AsyncTask@@QAEXXZ
?Compare@ScopedVariant@AsyncTask@@QBEHABUtagVARIANT@@_N@Z
?Copy@ScopedVariant@AsyncTask@@QBE?AUtagVARIANT@@XZ
?Create@?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@QAEPAUHWND__@@PAU3@V_U_RECT@2@PB_WKKV_U_MENUorID@2@PAX@Z
?Create@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEPAUHWND__@@PAU3@V_U_RECT@2@PB_WKKV_U_MENUorID@2@GPAX@Z
?Create@Thread@AsyncTask@@SA_NIPAVThreadDelegate@2@PAPAX@Z
?CreateForCurrentThread@MessageLoopProxy@AsyncTask@@SA?AV?$scoped_refptr@VMessageLoopProxy@AsyncTask@@@2@XZ
?DefWindowProcW@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEJIIJ@Z
?DefWindowProcW@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEJXZ
?DefaultReflectionHandler@?$CWindowImplRoot@VCWindow@ATL@@@ATL@@SAHPAUHWND__@@IIJAAJ@Z
?DeferOrRunPendingTask@MessageLoop@AsyncTask@@IAE_NABUPendingTask@12@@Z
?DeletePendingTasks@MessageLoop@AsyncTask@@IAE_NXZ
?DestroyWindow@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEHXZ
?DidProcessMessage@MessageLoopForUI@AsyncTask@@QAEXABUtagMSG@@@Z
?DidProcessMessage@MessagePumpWin@AsyncTask@@QAEXABUtagMSG@@@Z
?DoDelayedWork@MessageLoop@AsyncTask@@MAE_NPAVTime@2@@Z
?DoIdleWork@MessageLoop@AsyncTask@@MAE_NXZ
?DoRunLoop@MessagePumpForUI@AsyncTask@@EAEXXZ
?DoWork@MessageLoop@AsyncTask@@MAE_NXZ
?EnableHighResolutionTimer@Time@AsyncTask@@SAX_N@Z
?ForwardNotifications@?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QAEJIIJAAH@Z
?FromMicroseconds@TimeDelta@AsyncTask@@SA?AV12@_J@Z
?FromMilliseconds@TimeDelta@AsyncTask@@SA?AV12@_J@Z
?GetCurrentDelay@MessagePumpWin@AsyncTask@@IBEHXZ
?GetCurrentMessage@?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QBEPBU_ATL_MSG@2@XZ
?GetHwnd@CThreadSwitch@AsyncTask@@QAEPAUHWND__@@XZ
?GetWindowProc@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ
?GetWndCaption@?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@SAPB_WXZ
?GetWndClassInfo@?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@SAAAU_ATL_WNDCLASSINFOW@2@XZ
?GetWndClassInfo@CThreadSwitch@AsyncTask@@SAAAU_ATL_WNDCLASSINFOW@ATL@@XZ
?GetWndExStyle@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@SAKK@Z
?GetWndStyle@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@SAKK@Z
?HandleTimerMessage@MessagePumpForUI@AsyncTask@@AAEXXZ
?HandleWorkMessage@MessagePumpForUI@AsyncTask@@AAEXXZ
?InMicroseconds@TimeDelta@AsyncTask@@QBE_JXZ
?InMilliseconds@TimeDelta@AsyncTask@@QBE_JXZ
?InMillisecondsF@TimeDelta@AsyncTask@@QBENXZ
?InMillisecondsRoundedUp@TimeDelta@AsyncTask@@QBE_JXZ
?Init@Thread@AsyncTask@@MAEXXZ
?InitMessageWnd@MessagePumpForUI@AsyncTask@@AAEXXZ
?IsEmpty@TaskQueue@AsyncTask@@QBE_NXZ
?IsEqual@?$RefCountedThreadSafe@VMessageLoopProxy@AsyncTask@@UMessageLoopProxyTraits@2@@AsyncTask@@QAE_NJ@Z
?IsEqual@?$RefCountedThreadSafe@VMessagePump@AsyncTask@@U?$RefCountedThreadPtrDestruct@VMessagePump@AsyncTask@@@destruct@2@@AsyncTask@@QAE_NJ@Z
?IsLeakableVarType@ScopedVariant@AsyncTask@@SA_NG@Z
?IsMsgHandled@?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QBEHXZ
?IsNested@MessageLoop@AsyncTask@@QAE_NXZ
?IsRunning@Thread@AsyncTask@@QBE_NXZ
?IsSignaled@WaitableEvent@AsyncTask@@QAE_NXZ
?IsValid@CThreadSwitch@AsyncTask@@AAEHXZ
?Join@Thread@AsyncTask@@SAXPAX@Z
?Lock@LockImpl@AsyncTask@@QAEXXZ
?NestableTasksAllowed@MessageLoop@AsyncTask@@QBE_NXZ
?Now@Time@AsyncTask@@SA?AV12@XZ
?Now@TimeTicks@AsyncTask@@SA?AV12@XZ
?OnDestruct@MessageLoopProxy@AsyncTask@@MAEXXZ
?OnDestruct@MessageLoopProxyImpl@AsyncTask@@MAEXXZ
?OnFinalMessage@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@UAEXPAUHWND__@@@Z
?OnMessage@MessagePumpForUI@AsyncTask@@QAEJIIJ@Z
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostDelayedTask@MessageLoopProxyImpl@AsyncTask@@UAE_NPAVTask@2@_J@Z
?PostNonNestableDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostNonNestableDelayedTask@MessageLoopProxyImpl@AsyncTask@@UAE_NPAVTask@2@_J@Z
?PostNonNestableTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?PostNonNestableTask@MessageLoopProxyImpl@AsyncTask@@UAE_NPAVTask@2@@Z
?PostPriorityTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?PostTask@MessageLoopProxyImpl@AsyncTask@@UAE_NPAVTask@2@@Z
?PostTaskHelper@MessageLoopProxyImpl@AsyncTask@@AAE_NPAVTask@2@_J_N@Z
?PostTask_Helper@MessageLoop@AsyncTask@@IAEXPAVTask@2@_J_N2@Z
?PostToHandler@CThreadSwitch@AsyncTask@@QAEXPAVMessagePumpForUI@2@PAX@Z
?ProcessCallbacksNow@AtExitManager@AsyncTask@@SAXXZ
?ProcessMessageHelper@MessagePumpForUI@AsyncTask@@AAE_NABUtagMSG@@@Z
?ProcessNextDelayedNonNestableTask@MessageLoop@AsyncTask@@IAE_NXZ
?ProcessNextWindowsMessage@MessagePumpForUI@AsyncTask@@AAE_NXZ
?ProcessPumpReplacementMessage@MessagePumpForUI@AsyncTask@@AAE_NXZ
?ProcessWindowMessage@CThreadSwitch@AsyncTask@@UAEHPAUHWND__@@IIJAAJK@Z
?PumpOutPendingPaintMessages@MessagePumpForUI@AsyncTask@@QAEXXZ
?Push@TaskQueue@AsyncTask@@QAEXPAVTask@2@@Z
?QueryTaskCount@MessageLoop@AsyncTask@@QAEIXZ
?Quit@MessageLoop@AsyncTask@@QAEXXZ
?Quit@MessagePumpWin@AsyncTask@@UAEXXZ
?QuitNow@MessageLoop@AsyncTask@@QAEXXZ
?Receive@ScopedVariant@AsyncTask@@QAEPAUtagVARIANT@@XZ
?ReflectNotifications@?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QAEJIIJAAH@Z
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
?Release@?$RefCountedThreadSafe@VMessageLoopProxy@AsyncTask@@UMessageLoopProxyTraits@2@@AsyncTask@@QAEXXZ
?Release@?$RefCountedThreadSafe@VMessagePump@AsyncTask@@U?$RefCountedThreadPtrDestruct@VMessagePump@AsyncTask@@@destruct@2@@AsyncTask@@QAEXXZ
?Release@Lock@AsyncTask@@QAEXXZ
?Release@ScopedVariant@AsyncTask@@QAE?AUtagVARIANT@@XZ
?Release@WaitableEvent@AsyncTask@@QAEPAXXZ
?ReloadWorkQueue@MessageLoop@AsyncTask@@IAEXXZ
?RemoveDestructionObserver@MessageLoop@AsyncTask@@QAEXPAVDestructionObserver@12@@Z
?RemoveObserver@MessageLoopForUI@AsyncTask@@QAEXPAVObserver@MessagePumpWin@2@@Z
?RemoveObserver@MessagePumpWin@AsyncTask@@QAEXPAVObserver@12@@Z
?RemoveTaskObserver@MessageLoop@AsyncTask@@QAEXPAVTaskObserver@12@@Z
?Reset@ScopedVariant@AsyncTask@@QAEXABUtagVARIANT@@@Z
?Reset@WaitableEvent@AsyncTask@@QAEXXZ
?Run@MessageLoop@AsyncTask@@QAEXXZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?Run@MessagePumpWin@AsyncTask@@UAEXPAVDelegate@MessagePump@2@@Z
?Run@TaskQueue@AsyncTask@@UAEXXZ
?Run@Thread@AsyncTask@@MAEXPAVMessageLoop@2@@Z
?RunAllPending@MessageLoop@AsyncTask@@QAEXXZ
?RunHandler@MessageLoop@AsyncTask@@IAEXXZ
?RunInternal@MessageLoop@AsyncTask@@IAEXXZ
?RunInternalInSEHFrame@MessageLoop@AsyncTask@@IAEXXZ
?RunTask@MessageLoop@AsyncTask@@IAEXPAVTask@2@@Z
?RunWithDispatcher@MessagePumpWin@AsyncTask@@QAEXPAVDelegate@MessagePump@2@@Z
?ScheduleDelayedWork@MessagePumpForUI@AsyncTask@@UAEXABVTime@2@@Z
?ScheduleWork@MessagePumpForUI@AsyncTask@@UAEXXZ
?Set@ScopedVariant@AsyncTask@@QAEXABUtagVARIANT@@@Z
?Set@ScopedVariant@AsyncTask@@QAEXC@Z
?Set@ScopedVariant@AsyncTask@@QAEXE@Z
?Set@ScopedVariant@AsyncTask@@QAEXF@Z
?Set@ScopedVariant@AsyncTask@@QAEXG@Z
?Set@ScopedVariant@AsyncTask@@QAEXH@Z
?Set@ScopedVariant@AsyncTask@@QAEXI@Z
?Set@ScopedVariant@AsyncTask@@QAEXM@Z
?Set@ScopedVariant@AsyncTask@@QAEXN@Z
?Set@ScopedVariant@AsyncTask@@QAEXPAUIDispatch@@@Z
?Set@ScopedVariant@AsyncTask@@QAEXPAUIUnknown@@@Z
?Set@ScopedVariant@AsyncTask@@QAEXPAUtagSAFEARRAY@@@Z
?Set@ScopedVariant@AsyncTask@@QAEXPB_W@Z
?Set@ScopedVariant@AsyncTask@@QAEX_J@Z
?Set@ScopedVariant@AsyncTask@@QAEX_K@Z
?Set@ScopedVariant@AsyncTask@@QAEX_N@Z
?SetDate@ScopedVariant@AsyncTask@@QAEXN@Z
?SetMsgHandled@?$CWindowImplRoot@VCWindow@ATL@@@ATL@@QAEXH@Z
?SetName@Thread@AsyncTask@@SAXPBD@Z
?SetNestableTasksAllowed@MessageLoop@AsyncTask@@QAEX_N@Z
?Signal@WaitableEvent@AsyncTask@@QAEXXZ
?Start@Thread@AsyncTask@@QAE_NXZ
?StartWindowProc@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@SGJPAUHWND__@@IIJ@Z
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
?Stop@Thread@AsyncTask@@QAEXXZ
?StopSoon@Thread@AsyncTask@@QAEXXZ
?SubclassWindow@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEHPAUHWND__@@@Z
?Swap@ScopedVariant@AsyncTask@@QAEXAAV12@@Z
?ThreadMain@Thread@AsyncTask@@EAEXXZ
?ThreadWindowProc@CThreadSwitch@AsyncTask@@CGJPAUHWND__@@IIJ@Z
?TimedWait@WaitableEvent@AsyncTask@@QAE_NABVTimeDelta@2@@Z
?ToInternalValue@TimeDelta@AsyncTask@@QBE_JXZ
?ToInternalValue@TimeTicks@AsyncTask@@QBE_JXZ
?Try@Lock@AsyncTask@@QAE_NXZ
?Try@LockImpl@AsyncTask@@QAE_NXZ
?Unlock@LockImpl@AsyncTask@@QAEXXZ
?UnsubclassWindow@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@QAEPAUHWND__@@H@Z
?Wait@WaitableEvent@AsyncTask@@QAE_NXZ
?WaitForWork@MessagePumpForUI@AsyncTask@@AAEXXZ
?WaitMany@WaitableEvent@AsyncTask@@SAIPAPAV12@I@Z
?WillDestroyCurrentMessageLoop@MessageLoopProxyImpl@AsyncTask@@UAEXXZ
?WillProcessMessage@MessagePumpWin@AsyncTask@@QAEXABUtagMSG@@@Z
?WindowProc@?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@SGJPAUHWND__@@IIJ@Z
?WndProcThunk@MessagePumpForUI@AsyncTask@@CGJPAUHWND__@@IIJ@Z
?current@MessageLoop@AsyncTask@@SAPAV12@XZ
?current@MessageLoopForUI@AsyncTask@@SAPAV12@XZ
?handle@WaitableEvent@AsyncTask@@QBEPAXXZ
?high_resolution_timer_enabled_@Time@AsyncTask@@0_NA
?high_resolution_timers_enabled@MessageLoop@AsyncTask@@QAE_NXZ
?is_null@Time@AsyncTask@@QBE_NXZ
?is_null@TimeTicks@AsyncTask@@QBE_NXZ
?kEmptyVariant@ScopedVariant@AsyncTask@@2UtagVARIANT@@B
?kHighResolutionTimerModeLeaseTimeMs@MessageLoop@AsyncTask@@2HB
?kMessageFilterCode@MessagePumpForUI@AsyncTask@@2HB
?kMicrosecondsPerDay@Time@AsyncTask@@2_JB
?kMicrosecondsPerHour@Time@AsyncTask@@2_JB
?kMicrosecondsPerMillisecond@Time@AsyncTask@@2_JB
?kMicrosecondsPerMinute@Time@AsyncTask@@2_JB
?kMicrosecondsPerSecond@Time@AsyncTask@@2_JB
?kMicrosecondsPerWeek@Time@AsyncTask@@2_JB
?kMillisecondsPerSecond@Time@AsyncTask@@2_JB
?kMinLowResolutionThresholdMs@Time@AsyncTask@@2HB
?kNanosecondsPerMicrosecond@Time@AsyncTask@@2_JB
?kNanosecondsPerSecond@Time@AsyncTask@@2_JB
?kTimeTToMicrosecondsOffset@Time@AsyncTask@@0_JB
?last_seen_now@TimeTicks@AsyncTask@@1KA
?message_loop@Thread@AsyncTask@@QBEPAVMessageLoop@2@XZ
?message_loop_proxy@Thread@AsyncTask@@QAE?AV?$scoped_refptr@VMessageLoopProxy@AsyncTask@@@2@XZ
?pump_ui@MessageLoopForUI@AsyncTask@@IAEPAVMessagePumpForUI@2@XZ
?pump_win@MessageLoop@AsyncTask@@IAEPAVMessagePumpWin@2@XZ
?rollover_lock@TimeTicks@AsyncTask@@1VLock@2@A
?rollover_ms@TimeTicks@AsyncTask@@1_JA
?set_exception_restoration@MessageLoop@AsyncTask@@QAEX_N@Z
?set_thread_name@MessageLoop@AsyncTask@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?thread_handle@Thread@AsyncTask@@QAEPAXXZ
?thread_id@Thread@AsyncTask@@QBEKXZ
?thread_is_stopping@Thread@AsyncTask@@QBE_NXZ
?thread_name@MessageLoop@AsyncTask@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?thread_name@Thread@AsyncTask@@QAEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?thread_was_started@Thread@AsyncTask@@QBE_NXZ
?type@MessageLoop@AsyncTask@@QBE?AW4Type@12@XZ
?type@ScopedVariant@AsyncTask@@QBEGXZ
?wc@?1??GetWndClassInfo@?$CWindowImpl@VCThreadSwitch@AsyncTask@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@4@@ATL@@SAAAU_ATL_WNDCLASSINFOW@3@XZ@4U43@A
?wc@?1??GetWndClassInfo@CThreadSwitch@AsyncTask@@SAAAU_ATL_WNDCLASSINFOW@ATL@@XZ@4U45@A

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bin/box.tools
.elf linux arm
Bin/box2.tools
.elf linux arm
Bin/mtools.tools
.elf linux arm
Bin/mtools2.tools
.elf linux arm
Common.dll
.dll regsvr32 windows:5 windows x86 arch:x86

00058ee6c7b423a0a302a479e28825e7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ac:54:d5:71:0d:40:75:f9:cf:e4:af:d4:71:48:2f:69:96:de:c9:7c:b8:65:5d:0d:80:b3:34:c0:99:c6:fa:a2
Signer

Actual PE Digest

ac:54:d5:71:0d:40:75:f9:cf:e4:af:d4:71:48:2f:69:96:de:c9:7c:b8:65:5d:0d:80:b3:34:c0:99:c6:fa:a2

Digest Algorithm

sha256

PE Digest Matches

true

3b:a7:af:d7:c2:04:10:2f:93:20:63:5d:9c:71:b0:54:00:b6:a6:89
Signer

Actual PE Digest

3b:a7:af:d7:c2:04:10:2f:93:20:63:5d:9c:71:b0:54:00:b6:a6:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\Common.pdb

Imports

libtcmalloc

tc_malloc
tc_free
tc_realloc

zlib

inflateReset
deflateReset
inflateInit2_
deflateInit2_
crc32
inflateInit_
inflate
inflateEnd
deflateInit_
deflate
deflateEnd
compress
compress2
uncompress

libexpatw

ord65
ord64
ord63
ord21
ord17
ord7
ord20
ord52
ord48
ord35
ord25
ord50
ord53

ws2_32

recv
select
__WSAFDIsSet
closesocket
WSAStartup
WSACleanup
ioctlsocket
send
WSAGetLastError
bind
inet_addr
accept
setsockopt
getpeername
getsockname
getsockopt
listen
connect
recvfrom
sendto
WSASetLastError
freeaddrinfo
inet_ntoa
getaddrinfo
WSAAsyncSelect
WSACreateEvent
WSACloseEvent
WSAAsyncGetHostByName
WSACancelAsyncRequest
gethostname
socket

wininet

HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
HttpOpenRequestW
InternetErrorDlg
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetSetCookieW
InternetQueryOptionW
InternetGetCookieW
InternetCloseHandle

winmm

timeGetTime

avicap32

capGetDriverDescriptionW

setupapi

SetupIterateCabinetW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

iphlpapi

NotifyAddrChange
CancelIPChangeNotify
GetIpForwardTable
GetIpAddrTable

tinyxml

??1TiXmlElement@@UAE@XZ
??0TiXmlElement@@QAE@PBD@Z
?FirstChildElement@TiXmlNode@@QBEPBVTiXmlElement@@XZ
?SaveFile@TiXmlDocument@@QBE_NPB_W@Z
?SetAttribute@TiXmlElement@@QAEXPBD0@Z
?InsertEndChild@TiXmlNode@@QAEPAV1@ABV1@@Z
?LoadFile@TiXmlDocument@@QAE_NPB_WW4TiXmlEncoding@@@Z
??1TiXmlDocument@@UAE@XZ
?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z
?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
?ToDocument@TiXmlDocument@@UBEPBV1@XZ
?ToDocument@TiXmlDocument@@UAEPAV1@XZ
?Parse@TiXmlDocument@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Print@TiXmlDocument@@UBEXPAU_iobuf@@H@Z
??0TiXmlDocument@@QAE@XZ
?condenseWhiteSpace@TiXmlBase@@0_NA
?LoadXML@TiXmlDocument@@QAE_NPADHW4TiXmlEncoding@@@Z
?ErrorDesc@TiXmlDocument@@QBEPBDXZ

asynctask

??0Lock@AsyncTask@@QAE@XZ
?AssertAcquired@Lock@AsyncTask@@QBEXXZ
?Release@Lock@AsyncTask@@QAEXXZ
?Acquire@Lock@AsyncTask@@QAEXXZ
??1Lock@AsyncTask@@QAE@XZ
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z

arkfs

arkfsCloseFile
arkfsGetFullName
arkfsCloseDir
arkfsCommitTrans
arkfsBeginTrans
arkfsIsFileExist
arkfsMoveFile
arkfsCopyFile
arkfsRenameFile
arkfsDeleteFile
arkfsIsDirectoryExist
arkfsDeleteDirectory
arkfsOpenDir
arkfsWrite
arkfsRead
arkfsResize
arkfsSeek
arkfsMoveNext
arkfsReset
arkfsGetName
arkfsIsDirectory
arkfsCloseEnum
arkfsCreateEnumIndir
arkfsTell
arkfsCreateFileIndir

kernel32

SetProcessWorkingSetSize
lstrcpynW
OpenProcess
LoadLibraryExW
LoadLibraryExA
GetSystemDirectoryW
GetWindowsDirectoryW
GetSystemDirectoryA
GetWindowsDirectoryA
LoadLibraryA
GetVersion
GetACP
CreateFileMappingW
MapViewOfFile
HeapReAlloc
SetThreadAffinityMask
SetErrorMode
VirtualAllocEx
SetUnhandledExceptionFilter
WriteProcessMemory
SearchPathW
TerminateProcess
CreateToolhelp32Snapshot
Thread32First
HeapSize
EncodePointer
Thread32Next
HeapAlloc
GetCurrentThread
GetThreadTimes
SuspendThread
GetThreadContext
IsDBCSLeadByte
GetModuleHandleExW
SetProcessAffinityMask
GetProcessAffinityMask
QueueUserWorkItem
HeapDestroy
FormatMessageW
ResumeThread
OpenThread
GetThreadSelectorEntry
LoadLibraryW
VirtualQueryEx
ReadProcessMemory
WaitForMultipleObjects
SetThreadPriority
GetCPInfoExW
lstrcmpiW
lstrcmpiA
TlsSetValue
TlsFree
TlsAlloc
TlsGetValue
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
SetNamedPipeHandleState
FileTimeToLocalFileTime
GetNumberFormatW
GetCurrencyFormatW
GetCalendarInfoW
GetTimeFormatW
GetDateFormatW
SetLocaleInfoW
GetUserDefaultLangID
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
IsValidLocale
GetSystemDefaultLCID
GetUserDefaultLCID
DecodePointer
InterlockedCompareExchange
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
FlushInstructionCache
VirtualProtect
UnmapViewOfFile
GetLocaleInfoW
HeapFree
GetProcessHeap
LocalFree
SetLastError
SetEvent
CreateEventW
CreateThread
ResetEvent
TerminateThread
GetVersionExW
GlobalFree
InterlockedExchangeAdd
QueryPerformanceFrequency
VirtualQuery
GetCurrentProcessId
GetModuleFileNameA
GetPrivateProfileStringA
GetModuleHandleA
GetProcessTimes
GetSystemTimeAsFileTime
MoveFileW
CompareFileTime
GetFileAttributesExA
SystemTimeToTzSpecificLocalTime
GetFileAttributesA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetModuleFileNameW
GetProcAddress
FreeLibrary
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetLastError
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
OpenMutexW
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
DeviceIoControl
CreateFileW
GetVolumeInformationW
GetDriveTypeW
IsBadReadPtr
ReadFile
CreateProcessW
CreatePipe
DuplicateHandle
GetCurrentProcess
GetStdHandle
lstrlenW
GetFileSizeEx
GetFileAttributesW
WriteFile
CreateDirectoryW
GetFileType
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
SetFileAttributesW
FindFirstFileW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
SetFilePointer
GetLocalTime
GetTempPathW
GetCommandLineW
GetFileSize
SetFilePointerEx
FlushFileBuffers
SetEndOfFile
GetDiskFreeSpaceW
GetFullPathNameW
InterlockedExchange
Sleep
lstrcmpW
CopyFileW
MoveFileExW
DeleteFileA
FileTimeToSystemTime
SystemTimeToFileTime
CreateFileA
GetTimeZoneInformation
GetSystemTime
MoveFileA
SetFileAttributesA
DisconnectNamedPipe

user32

DispatchMessageW
TranslateMessage
PeekMessageW
CharNextA
SendMessageTimeoutW
KillTimer
SetTimer
PostMessageW
CreateWindowExW
ShowWindow
DefWindowProcW
DestroyWindow
GetFocus
EnableWindow
IsWindowEnabled
IsWindow
SetFocus
SetPropW
RemovePropW
SendMessageW
GetPropW
GetWindowLongW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetDesktopWindow
RegisterClassExW
GetClassInfoExW
CharNextW
CharUpperA
CharLowerA
CharUpperW
CharLowerW
GetWindowThreadProcessId
FindWindowW
SetWindowLongW

gdi32

GetStockObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

advapi32

DuplicateTokenEx
OpenProcessToken
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegSetValueExW
RegDeleteValueW
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ShellExecuteExW
SHGetFolderLocation
SHGetMalloc

ole32

CoFreeUnusedLibraries
CoGetMalloc
CoLoadLibrary
StringFromGUID2
StgOpenStorage
StgCreateDocfile
StgOpenStorageOnILockBytes
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
CoCreateInstance
CoFreeLibrary
CLSIDFromString

oleaut32

BstrFromVector
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VarDateFromStr
SysStringLen
SysFreeString
UnRegisterTypeLi
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
SysAllocString
VariantClear
VarBstrCmp
VariantTimeToSystemTime
VectorFromBstr
SysStringByteLen
SysAllocStringByteLen
VariantInit
SysReAllocStringLen
VariantChangeType

atl100

ord31
ord64
ord23
ord61
ord68
ord56
ord49
ord30
ord32
ord58
ord15

shlwapi

StrCmpW
StrCmpIW
PathFindFileNameW
PathFileExistsA
PathFileExistsW

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??0_Container_base12@std@@QAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_BADOFF@std@@3_JB
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
_Inf
_Nan
_FNan
_FInf
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

memcpy_s
_byteswap_ushort
_byteswap_ulong
toupper
printf
malloc
fprintf
__iob_func
_vswprintf
fwrite
feof
ferror
fread
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
memmove
??_V@YAXPAX@Z
??0bad_cast@std@@QAE@ABV01@@Z
fgetc
fputc
ungetc
_lock_file
_unlock_file
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
fclose
iswspace
wcstombs_s
fseek
fopen
_close
?_open@@YAHPBDHH@Z
strchr
strrchr
wcsncpy
iswdigit
_vsnwprintf
_vscwprintf
rand
srand
_endthread
_beginthread
strstr
_strdup
sscanf
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_time64
__CxxFrameHandler3
memset
??3@YAXPAX@Z
isspace
strlen
wcslen
memcpy
__clean_type_info_names_internal
wcscat_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
strpbrk
strcpy
strtod
wcschr
sprintf
wcsrchr
labs
_wcsicmp
_wtof
wcsncmp
wcscmp
realloc
wcsstr
_wtoi
_purecall
strtoul
_snwprintf
_snprintf
isalnum
_recalloc
free
_gmtime64
_localtime64
wcsftime
_mktime64
sprintf_s
setlocale
wcsncpy_s
memcmp
mbstowcs_s
_ftelli64
_wfopen
wprintf
calloc
_beginthreadex
atoi
iswalpha
iswalnum
wcstoul
_wtol
_byteswap_uint64
wcscpy
_heapmin
wcstok
exit
memmove_s
_vscprintf
vsprintf
strcmp
_mbspbrk
_mbsinc
_strrev
_ismbcspace
wcscoll
_wcsicoll
wmemcpy_s
wcspbrk
_wcsrev
wcscspn
wcsspn
_read
_write
wcsnlen
_gmtime32
wcscpy_s
strncpy
_wcsnicmp
wcstol
_wcslwr_s
atof
_endthreadex
ldiv
??0exception@std@@QAE@XZ
memchr
strerror
_errno
strtol
_strtoui64
_strtoi64
isxdigit

netapi32

Netbios

rasapi32

RasEnumConnectionsW
RasGetProjectionInfoW

wintrust

CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATCatalogInfoFromContext
WTHelperGetProvCertFromChain
CryptCATAdminReleaseCatalogContext
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CertGetNameStringW

Exports

Exports

??0?$RefCountedThreadSafe@VCShortStreamContainer@@U?$RefCountedThreadPtrDestruct@VCShortStreamContainer@@@destruct@AsyncTask@@@AsyncTask@@QAE@XZ
??0?$RefCountedThreadSafe@VCStorageIterator@@U?$RefCountedThreadPtrDestruct@VCStorageIterator@@@destruct@AsyncTask@@@AsyncTask@@QAE@XZ
??0?$SupportsWeakPtr@VCShortStreamContainer@@@AsyncTask@@QAE@XZ
??0?$SupportsWeakPtr@VCStorageIterator@@@AsyncTask@@QAE@XZ
??0AutoBenchTimerLog@Bench@Util@@QAE@ABV012@@Z
??0AutoBenchTimerLog@Bench@Util@@QAE@PB_W0@Z
??0AutoBenchTimerLog@Bench@Util@@QAE@PB_W@Z
??0BenchTimerLog@Bench@Util@@QAE@ABV012@@Z
??0BenchTimerLog@Bench@Util@@QAE@PB_W0@Z
??0BenchTimerLog@Bench@Util@@QAE@PB_W@Z
??0Big@@QAE@AAPAI@Z
??0Big@@QAE@ABV0@@Z
??0Big@@QAE@H@Z
??0Big@@QAE@J@Z
??0Big@@QAE@PAD@Z
??0Big@@QAE@XZ
??0CCmdCodecBase@@QAE@XZ
??0CDataSenderBase@@QAE@ABV0@@Z
??0CDataSenderBase@@QAE@W4DataSenderType@@@Z
??0CEcdsa@@QAE@W4ECCBIT@eccparam@@@Z
??0CExpatDataCompat@@QAE@XZ
??0CExpatFileReader@@QAE@XZ
??0CExpatMemReader@@QAE@XZ
??0CFmtString@@QAE@XZ
??0CGUnzipBuffer@@QAE@XZ
??0CGZipBuffer@@QAE@HH@Z
??0CMACReader@@QAE@XZ
??0CMultiHttpDownloader@@AAE@XZ
??0CMultiHttpDownloader@@QAE@ABV0@@Z
??0CP2PDownload@@QAE@AAV0@@Z
??0CP2PDownload@@QAE@XZ
??0CP2PDownloadParam@@QAE@AAV0@@Z
??0CP2PDownloadParam@@QAE@XZ
??0CP2PDownloadUIInterface@@QAE@ABV0@@Z
??0CP2PDownloadUIInterface@@QAE@XZ
??0CRootStorage@@QAE@AAV?$WeakPtr@VCCompoundDocument@@@AsyncTask@@@Z
??0CScopeToggler@@QAE@PA_N_N@Z
??0CShortStreamContainer@@QAE@XZ
??0CStorage@@QAE@AAV?$WeakPtr@VCCompoundDocument@@@AsyncTask@@H@Z
??0CStorageIterator@@QAE@XZ
??0CStream@@QAE@AAV?$WeakPtr@VCCompoundDocument@@@AsyncTask@@H@Z
??0CTXArray@@QAE@ABV0@@Z
??0CTXArray@@QAE@PAUITXArray@@@Z
??0CTXArray@@QAE@XZ
??0CTXArrayField@@QAE@ABV0@@Z
??0CTXArrayField@@QAE@XZ
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXBSTR@@QAE@H@Z
??0CTXBSTR@@QAE@HPB_W@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
??0CTXCommPack@@QAE@ABV0@@Z
??0CTXCommPack@@QAE@XZ
??0CTXCriticalSection@@QAE@ABV0@@Z
??0CTXCriticalSection@@QAE@XZ
??0CTXData@@QAE@ABV0@@Z
??0CTXData@@QAE@PAUITXData@@@Z
??0CTXData@@QAE@XZ
??0CTXDataField@@QAE@ABV0@@Z
??0CTXDataField@@QAE@XZ
??0CTXFileDialog@@IAE@XZ
??0CTXFileDialog@@QAE@ABV0@@Z
??0CTXFileDialog@@QAE@HPB_W00K0PAUHWND__@@HPAVVFileDialgCallback@@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownloadSink@@QAE@ABV0@@Z
??0CTXHttpUpload@@QAE@XZ
??0CTXHttpUploadBuffer@@QAE@XZ
??0CTXHttpUploadStandard@@QAE@XZ
??0CTXStringA@@QAE@ABV0@@Z
??0CTXStringA@@QAE@DH@Z
??0CTXStringA@@QAE@PBD@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??0CTXStringA@@QAE@XZ
??0CTXStringW@@QAE@ABU_GUID@@@Z
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXStringW@@QAE@H@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@PB_WH@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??0CTXStringW@@QAE@UtagGBK@@PBDH@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@_WH@Z
??0CTXTCPDataSender@@QAE@ABV0@@Z
??0CTXTCPDataSender@@QAE@XZ
??0CTXTCPThread@@QAE@XZ
??0CTXTLVCodecBase@@QAE@XZ
??0CTXThreadModel@@IAE@XZ
??0CTXTime@@QAE@ABU_FILETIME@@H@Z
??0CTXTime@@QAE@ABU_SYSTEMTIME@@H@Z
??0CTXTime@@QAE@ABUtagDBTIMESTAMP@@H@Z
??0CTXTime@@QAE@ABV0@@Z
??0CTXTime@@QAE@GGH@Z
??0CTXTime@@QAE@HHHHHHH@Z
??0CTXTime@@QAE@XZ
??0CTXTime@@QAE@_J@Z
??0CTXTimeSpan@@QAE@ABV0@@Z
??0CTXTimeSpan@@QAE@JHHH@Z
??0CTXTimeSpan@@QAE@XZ
??0CTXTimeSpan@@QAE@_J@Z
??0CTXUDPDataSender@@QAE@ABV0@@Z
??0CTXUDPDataSender@@QAE@XZ
??0CTXVariant@@QAE@ABVCTXBuffer@@@Z
??0CUnZipFile@@QAE@ABV0@@Z
??0CUnZipFile@@QAE@XZ
??0CUnzipBuffers@@QAE@ABV0@@Z
??0CUnzipBuffers@@QAE@XZ
??0CZipBuffers@@QAE@ABV0@@Z
??0CZipBuffers@@QAE@XZ
??0CZipFiles@@QAE@ABV0@@Z
??0CZipFiles@@QAE@XZ
??0VMultiHttpSink@@QAE@ABV0@@Z
??0VMultiHttpSink@@QAE@XZ
??0VTXDataSenderTimeOutCallback@@QAE@ABV0@@Z
??0VTXDataSenderTimeOutCallback@@QAE@XZ
??1?$RefCountedThreadSafe@VCShortStreamContainer@@U?$RefCountedThreadPtrDestruct@VCShortStreamContainer@@@destruct@AsyncTask@@@AsyncTask@@QAE@XZ
??1?$RefCountedThreadSafe@VCStorageIterator@@U?$RefCountedThreadPtrDestruct@VCStorageIterator@@@destruct@AsyncTask@@@AsyncTask@@QAE@XZ
??1?$SupportsWeakPtr@VCShortStreamContainer@@@AsyncTask@@QAE@XZ
??1?$SupportsWeakPtr@VCStorageIterator@@@AsyncTask@@QAE@XZ
??1AutoBenchTimerLog@Bench@Util@@UAE@XZ
??1BenchTimerLog@Bench@Util@@UAE@XZ
??1Big@@QAE@XZ
??1CCmdCodecBase@@UAE@XZ
??1CDataSenderBase@@UAE@XZ
??1CEcdsa@@QAE@XZ
??1CExpatDataCompat@@QAE@XZ
??1CExpatFileReader@@UAE@XZ
??1CExpatMemReader@@UAE@XZ
??1CFmtString@@QAE@XZ
??1CGUnzipBuffer@@QAE@XZ
??1CGZipBuffer@@QAE@XZ
??1CMACReader@@QAE@XZ
??1CMultiHttpDownloader@@EAE@XZ
??1CP2PDownload@@UAE@XZ
??1CP2PDownloadParam@@UAE@XZ
??1CP2PDownloadUIInterface@@UAE@XZ
??1CRootStorage@@UAE@XZ
??1CScopeToggler@@QAE@XZ
??1CShortStreamContainer@@QAE@XZ
??1CStorage@@UAE@XZ
??1CStorageIterator@@QAE@XZ
??1CStream@@UAE@XZ
??1CTXArray@@QAE@XZ
??1CTXArrayField@@QAE@XZ
??1CTXBSTR@@QAE@XZ
??1CTXCommPack@@UAE@XZ
??1CTXCriticalSection@@UAE@XZ
??1CTXData@@QAE@XZ
??1CTXDataField@@QAE@XZ
??1CTXFileDialog@@QAE@XZ
??1CTXHttpDownload@@UAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpUpload@@UAE@XZ
??1CTXHttpUploadBuffer@@UAE@XZ
??1CTXHttpUploadStandard@@UAE@XZ
??1CTXStringA@@QAE@XZ
??1CTXStringW@@QAE@XZ
??1CTXTCPDataSender@@UAE@XZ
??1CTXTCPThread@@UAE@XZ
??1CTXTLVCodecBase@@UAE@XZ
??1CTXThreadModel@@MAE@XZ
??1CTXUDPDataSender@@UAE@XZ
??1CUnZipFile@@QAE@XZ
??1CUnzipBuffers@@QAE@XZ
??1CWriteBuffer@@QAE@XZ
??1CZipBuffers@@QAE@XZ
??1CZipFiles@@QAE@XZ
??4AutoBenchTimerLog@Bench@Util@@QAEAAV012@ABV012@@Z
??4BenchTimerLog@Bench@Util@@QAEAAV012@ABV012@@Z
??4Big@@QAEAAV0@ABV0@@Z
??4Big@@QAEAAV0@H@Z
??4Big@@QAEAAV0@J@Z
??4Big@@QAEAAV0@PAD@Z
??4CGUnzipBuffer@@QAEAAV0@ABV0@@Z
??4CGZipBuffer@@QAEAAV0@ABV0@@Z
??4CMultiHttpDownloader@@QAEAAV0@ABV0@@Z
??4CP2PDownload@@QAEAAV0@ABV0@@Z
??4CP2PDownloadParam@@QAEAAV0@ABV0@@Z
??4CP2PDownloadUIInterface@@QAEAAV0@ABV0@@Z
??4CScopeToggler@@QAEAAV0@ABV0@@Z
??4CTXArray@@QAEAAV0@ABV0@@Z
??4CTXArray@@QAEAAV0@PAUITXArray@@@Z
??4CTXArrayField@@QAEAAV0@ABV0@@Z
??4CTXArrayField@@QAEAAV0@D@Z
??4CTXArrayField@@QAEAAV0@E@Z
??4CTXArrayField@@QAEAAV0@F@Z
??4CTXArrayField@@QAEAAV0@G@Z
??4CTXArrayField@@QAEAAV0@H@Z
??4CTXArrayField@@QAEAAV0@K@Z
??4CTXArrayField@@QAEAAV0@N@Z
??4CTXArrayField@@QAEAAV0@PAUITXArray@@@Z
??4CTXArrayField@@QAEAAV0@PAUITXData@@@Z
??4CTXArrayField@@QAEAAV0@PAUIUnknown@@@Z
??4CTXArrayField@@QAEAAV0@PB_W@Z
??4CTXArrayField@@QAEAAV0@U_GUID@@@Z
??4CTXArrayField@@QAEAAV0@VCTXBSTR@@@Z
??4CTXArrayField@@QAEAAV0@_J@Z
??4CTXArrayField@@QAEAAV0@_K@Z
??4CTXArrayField@@QAEAAV0@_N@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXCriticalSection@@QAEAAV0@ABV0@@Z
??4CTXData@@QAEAAV0@ABV0@@Z
??4CTXData@@QAEAAV0@PAUITXData@@@Z
??4CTXDataField@@QAEAAV0@ABV0@@Z
??4CTXDataField@@QAEAAV0@D@Z
??4CTXDataField@@QAEAAV0@E@Z
??4CTXDataField@@QAEAAV0@F@Z
??4CTXDataField@@QAEAAV0@G@Z
??4CTXDataField@@QAEAAV0@H@Z
??4CTXDataField@@QAEAAV0@K@Z
??4CTXDataField@@QAEAAV0@N@Z
??4CTXDataField@@QAEAAV0@PAUITXArray@@@Z
??4CTXDataField@@QAEAAV0@PAUITXData@@@Z
??4CTXDataField@@QAEAAV0@PAUIUnknown@@@Z
??4CTXDataField@@QAEAAV0@PB_W@Z
??4CTXDataField@@QAEAAV0@U_GUID@@@Z
??4CTXDataField@@QAEAAV0@VCTXBSTR@@@Z
??4CTXDataField@@QAEAAV0@_J@Z
??4CTXDataField@@QAEAAV0@_K@Z
??4CTXDataField@@QAEAAV0@_N@Z
??4CTXFileDialog@@QAEAAV0@ABV0@@Z
??4CTXHttpDownloadSink@@QAEAAV0@ABV0@@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
??4CTXStringA@@QAEAAV0@D@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??4CTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@_W@Z
??4CTXTime@@QAEAAV0@V0@@Z
??4CTXTime@@QAEAAV0@_J@Z
??4CTXTimeSpan@@QAEAAV0@V0@@Z
??4CUnZipFile@@QAEAAV0@ABV0@@Z
??4CUnzipBuffers@@QAEAAV0@ABV0@@Z
??4CZipBuffers@@QAEAAV0@ABV0@@Z
??4CZipFiles@@QAEAAV0@ABV0@@Z
??4VMultiHttpSink@@QAEAAV0@ABV0@@Z
??4VTXDataSenderTimeOutCallback@@QAEAAV0@ABV0@@Z
??7CTXStringA@@QBE_NXZ
??7CTXStringW@@QBE_NXZ
??8@YA_NABVCTXStringA@@0@Z
??8@YA_NABVCTXStringA@@D@Z
??8@YA_NABVCTXStringA@@PBD@Z
??8@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@_W@Z
??8@YA_NDABVCTXStringA@@@Z
??8@YA_NPA_WABVCTXBSTR@@@Z
??8@YA_NPA_WABVCTXStringW@@@Z
??8@YA_NPBDABVCTXStringA@@@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
??8@YA_NPB_WABVCTXStringW@@@Z
??8@YA_N_WABVCTXStringW@@@Z
??8CP2PDownloadParam@@QAEHABV0@@Z
??8CTXBSTR@@QBE_NABV0@@Z
??8CTXBSTR@@QBE_NPA_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
??8CTXTime@@QBE_NV0@@Z
??8CTXTimeSpan@@QBE_NV0@@Z
??9@YA_NABVCTXStringA@@0@Z
??9@YA_NABVCTXStringA@@D@Z
??9@YA_NABVCTXStringA@@PBD@Z
??9@YA_NABVCTXStringW@@0@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??9@YA_NABVCTXStringW@@_W@Z
??9@YA_NDABVCTXStringA@@@Z
??9@YA_NPA_WABVCTXBSTR@@@Z
??9@YA_NPBDABVCTXStringA@@@Z
??9@YA_NPB_WABVCTXBSTR@@@Z
??9@YA_NPB_WABVCTXStringW@@@Z
??9@YA_N_WABVCTXStringW@@@Z
??9CP2PDownloadParam@@QAEHABV0@@Z
??9CTXBSTR@@QBE_NABV0@@Z
??9CTXBSTR@@QBE_NPA_W@Z
??9CTXBSTR@@QBE_NPB_W@Z
??9CTXTime@@QBE_NV0@@Z
??9CTXTimeSpan@@QBE_NV0@@Z
??ABig@@QAEAAIH@Z
??ACTXArray@@QAEAAVCTXArrayField@@H@Z
??ACTXArray@@QAEAAVCTXArrayField@@I@Z
??ACTXData@@QAEAAVCTXDataField@@PBD@Z
??ACTXData@@QAEAAVCTXDataField@@PB_W@Z
??ACTXStringA@@QBEDH@Z
??ACTXStringW@@QBE_WH@Z
??BCTXArray@@QBEPAUITXArray@@XZ
??BCTXArrayField@@QBE?AU_GUID@@XZ
??BCTXArrayField@@QBE?AV?$CComPtr@UITXArray@@@ATL@@XZ
??BCTXArrayField@@QBE?AV?$CComPtr@UITXData@@@ATL@@XZ
??BCTXArrayField@@QBE?AVCTXBSTR@@XZ
??BCTXArrayField@@QBE?AVCTXStringW@@XZ
??BCTXArrayField@@QBEDXZ
??BCTXArrayField@@QBEEXZ
??BCTXArrayField@@QBEFXZ
??BCTXArrayField@@QBEGXZ
??BCTXArrayField@@QBEHXZ
??BCTXArrayField@@QBEJXZ
??BCTXArrayField@@QBEKXZ
??BCTXArrayField@@QBENXZ
??BCTXArrayField@@QBEPAUITXArray@@XZ
??BCTXArrayField@@QBEPAUITXData@@XZ
??BCTXArrayField@@QBEPAUIUnknown@@XZ
??BCTXArrayField@@QBE_JXZ
??BCTXArrayField@@QBE_KXZ
??BCTXArrayField@@QBE_NXZ
??BCTXBSTR@@QBEPA_WXZ
??BCTXCriticalSection@@QAEPAU_RTL_CRITICAL_SECTION@@XZ
??BCTXData@@QBEPAUITXData@@XZ
??BCTXDataField@@QBE?AU_GUID@@XZ
??BCTXDataField@@QBE?AV?$CComPtr@UITXArray@@@ATL@@XZ
??BCTXDataField@@QBE?AV?$CComPtr@UITXData@@@ATL@@XZ
??BCTXDataField@@QBE?AVCTXBSTR@@XZ
??BCTXDataField@@QBE?AVCTXStringW@@XZ
??BCTXDataField@@QBEDXZ
??BCTXDataField@@QBEEXZ
??BCTXDataField@@QBEFXZ
??BCTXDataField@@QBEGXZ
??BCTXDataField@@QBEHXZ
??BCTXDataField@@QBEJXZ
??BCTXDataField@@QBEKXZ
??BCTXDataField@@QBENXZ
??BCTXDataField@@QBEPAUITXArray@@XZ
??BCTXDataField@@QBEPAUITXData@@XZ
??BCTXDataField@@QBEPAUIUnknown@@XZ
??BCTXDataField@@QBE_JXZ
??BCTXDataField@@QBE_KXZ
??BCTXDataField@@QBE_NXZ
??BCTXStringA@@QBEPBDXZ
??BCTXStringW@@QBEPB_WXZ
??CCTXArray@@QBEPAUITXArray@@XZ
??CCTXData@@QBEPAUITXData@@XZ
??EBig@@QAEAAV0@XZ
??FBig@@QAEAAV0@XZ
??GCTXTime@@QBE?AV0@VCTXTimeSpan@@@Z
??GCTXTime@@QBE?AVCTXTimeSpan@@V0@@Z
??GCTXTimeSpan@@QBE?AV0@V0@@Z
??H@YA?AVCTXStringA@@ABV0@0@Z
??H@YA?AVCTXStringA@@ABV0@D@Z
??H@YA?AVCTXStringA@@ABV0@PBD@Z
??H@YA?AVCTXStringA@@DABV0@@Z
??H@YA?AVCTXStringA@@PBDABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@_WABV0@@Z
??HCTXTime@@QBE?AV0@VCTXTimeSpan@@@Z
??HCTXTimeSpan@@QBE?AV0@V0@@Z
??ICTXArray@@QAEPAPAUITXArray@@XZ
??ICTXBSTR@@QAEPAPA_WXZ
??ICTXData@@QAEPAPAUITXData@@XZ
??M@YA_NABVCTXStringA@@0@Z
??M@YA_NABVCTXStringA@@PBD@Z
??M@YA_NABVCTXStringW@@0@Z
??M@YA_NABVCTXStringW@@PB_W@Z
??M@YA_NPBDABVCTXStringA@@@Z
??M@YA_NPB_WABVCTXStringW@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
??MCTXBSTR@@QBE_NPA_W@Z
??MCTXBSTR@@QBE_NPB_W@Z
??MCTXTime@@QBE_NV0@@Z
??MCTXTimeSpan@@QBE_NV0@@Z
??N@YA_NABVCTXStringA@@0@Z
??N@YA_NABVCTXStringA@@PBD@Z
??N@YA_NABVCTXStringW@@0@Z
??N@YA_NABVCTXStringW@@PB_W@Z
??N@YA_NPBDABVCTXStringA@@@Z
??N@YA_NPB_WABVCTXStringW@@@Z
??NCTXTime@@QBE_NV0@@Z
??NCTXTimeSpan@@QBE_NV0@@Z
??O@YA_NABVCTXStringA@@0@Z
??O@YA_NABVCTXStringA@@PBD@Z
??O@YA_NABVCTXStringW@@0@Z
??O@YA_NABVCTXStringW@@PB_W@Z
??O@YA_NPBDABVCTXStringA@@@Z
??O@YA_NPB_WABVCTXStringW@@@Z
??OCTXBSTR@@QBE_NABV0@@Z
??OCTXBSTR@@QBE_NPA_W@Z
??OCTXBSTR@@QBE_NPB_W@Z
??OCTXTime@@QBE_NV0@@Z
??OCTXTimeSpan@@QBE_NV0@@Z
??P@YA_NABVCTXStringA@@0@Z
??P@YA_NABVCTXStringA@@PBD@Z
??P@YA_NABVCTXStringW@@0@Z
??P@YA_NABVCTXStringW@@PB_W@Z
??P@YA_NPBDABVCTXStringA@@@Z
??P@YA_NPB_WABVCTXStringW@@@Z
??PCTXTime@@QBE_NV0@@Z
??PCTXTimeSpan@@QBE_NV0@@Z
??XBig@@QAEAAV0@ABV0@@Z
??XBig@@QAEAAV0@H@Z
??YBig@@QAEAAV0@ABV0@@Z
??YBig@@QAEAAV0@H@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringA@@QAEAAV0@ABV0@@Z
??YCTXStringA@@QAEAAV0@D@Z
??YCTXStringA@@QAEAAV0@PBD@Z
??YCTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@_W@Z
??YCTXTime@@QAEAAV0@VCTXTimeSpan@@@Z
??YCTXTimeSpan@@QAEAAV0@V0@@Z
??ZBig@@QAEAAV0@ABV0@@Z
??ZBig@@QAEAAV0@H@Z
??ZCTXTime@@QAEAAV0@VCTXTimeSpan@@@Z
??ZCTXTimeSpan@@QAEAAV0@V0@@Z
??_0Big@@QAEAAV0@ABV0@@Z
??_0Big@@QAEAAV0@H@Z
??_1Big@@QAEAAV0@ABV0@@Z
??_1Big@@QAEAAV0@H@Z
??_2Big@@QAEAAV0@H@Z
??_3Big@@QAEAAV0@H@Z
??_7AutoBenchTimerLog@Bench@Util@@6B@
??_7BenchTimerLog@Bench@Util@@6B@
??_7CDataSenderBase@@6B@
??_7CMultiHttpDownloader@@6B@
??_7CP2PDownload@@6B@
??_7CP2PDownloadParam@@6B@
??_7CP2PDownloadUIInterface@@6B@
??_7CRootStorage@@6B@
??_7CStorage@@6B@
??_7CStream@@6B@
??_7CTXCommPack@@6B@
??_7CTXCriticalSection@@6B@
??_7CTXHttpDownload@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpDownload@@6BCTXThreadModel@@@
??_7CTXHttpDownloadSink@@6B@
??_7CTXHttpUpload@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpUpload@@6BCTXThreadModel@@@
??_7CTXHttpUploadBuffer@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpUploadBuffer@@6BCTXThreadModel@@@
??_7CTXHttpUploadStandard@@6BCHttpTCPConnectorSink@@@
??_7CTXHttpUploadStandard@@6BCTXThreadModel@@@
??_7CTXTCPDataSender@@6B@
??_7CTXTCPThread@@6B@
??_7CTXUDPDataSender@@6B@
??_7VMultiHttpSink@@6B@
??_7VTXDataSenderTimeOutCallback@@6B@
??_FCEcdsa@@QAEXXZ
??_FCGZipBuffer@@QAEXXZ
?AbortDownload@CP2PDownload@@QAEXXZ
?Activate@TXBugMonitor@@YAXXZ
?ActiveMode@RegistryCenter@Util@@YAJW4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?AddBufLenByte@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddBufLenDWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddBuffer@CZipBuffers@@QAE_NPBXIPBD@Z
?AddBundleFile@TXStringBundle@@YAXPB_W0@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddCacheTask@CP2PDownload@@IAEXAAVCTXStringA@@@Z
?AddConfigData@ModuleConfig@@YAJPB_W0@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?AddErrorSink@FS@@YAHPAUITXFileSystemErrorSink@@@Z
?AddEvent@CTXThreadModel@@IAEXPAX@Z
?AddFile@CZipFiles@@QAE_NABVCTXStringW@@0@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
?AddFormData@CTXHttpDownload@@QAEXABVCTXStringW@@0@Z
?AddHttpExtInfo@CP2PDownload@@QAEHABVCTXStringA@@0@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@0@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@K@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@PBEK@Z
?AddObjectFactory@UtilOPCall@@YAHPAUITXOPObjectFactory@@@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?AddPlugin@CoreCenter@Util@@YAHPA_WPAUITXData@@@Z
?AddPluginEx@CoreCenter@Util@@YAHPAUITXData@@PA_W0@Z
?AddRef@?$RefCountedThreadSafe@VCShortStreamContainer@@U?$RefCountedThreadPtrDestruct@VCShortStreamContainer@@@destruct@AsyncTask@@@AsyncTask@@QAEXXZ
?AddRef@?$RefCountedThreadSafe@VCStorageIterator@@U?$RefCountedThreadPtrDestruct@VCStorageIterator@@@destruct@AsyncTask@@@AsyncTask@@QAEXXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?AddRelativeFileSystem@FS@@YAJPB_W00HH@Z
?AddResumeUrl@Http@Util@@YAHVCTXStringW@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@00@Z
?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddStrAEndChar@CTXCommPack@@QAEHABVCTXStringA@@E@Z
?AddStrALenByte@CTXCommPack@@QAEHABVCTXStringA@@@Z
?AddStrALenDWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?AddStrW@CTXCommPack@@QAEHABVCTXStringW@@@Z
?AddStrWEndChar@CTXCommPack@@QAEHABVCTXStringW@@E@Z
?AddStrWLenByte@CTXCommPack@@QAEHABVCTXStringW@@@Z
?AddStrWLenDWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConnectManager.dll
.dll windows:5 windows x86 arch:x86

dd5c29cc98cf2058d54f7efd11f498a9

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:07:17:b9:e9:cb:ac:0f:32:58:2e:d8:6a:ea:33:1e:d9:29:b9:cb:6c:12:5e:b4:ce:6a:47:26:b2:98:4d:ec
Signer

Actual PE Digest

65:07:17:b9:e9:cb:ac:0f:32:58:2e:d8:6a:ea:33:1e:d9:29:b9:cb:6c:12:5e:b4:ce:6a:47:26:b2:98:4d:ec

Digest Algorithm

sha256

PE Digest Matches

true

1c:04:b1:47:41:f0:09:2d:17:91:52:3c:91:d2:00:4f:03:e8:86:9f
Signer

Actual PE Digest

1c:04:b1:47:41:f0:09:2d:17:91:52:3c:91:d2:00:4f:03:e8:86:9f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\ConnectManager.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

log4cplus

?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?macro_forced_log@detail@log4cplus@@YAXABVLogger@2@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH2@Z
??1Logger@log4cplus@@UAE@XZ
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get_macro_body_oss@detail@log4cplus@@YAAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ

setupapi

CM_Get_Sibling
CM_Locate_DevNodeW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
CM_Get_Child
CM_Get_Device_IDW
SetupDiGetDeviceInstanceIdW

adbcmdserver

AdbExeAdbShell
AdbExecAdbCommand
AdbCreateConnectDevice
InitAdbCmdServer
AdbCreateServer
AdbCloseHandle
UnInitAdbCmdServer

tadinstaller

ord6
ord7
ord3
ord5
ord2
ord9
ord10
ord1

zlib

inflate
inflateInit2_
inflateEnd
deflateEnd
deflate
crc32
deflateInit2_

kernel32

HeapSize
EncodePointer
HeapDestroy
CloseHandle
WideCharToMultiByte
GetCurrentThreadId
GetTickCount
OpenMutexW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
GetProcAddress
GetModuleHandleW
GetLastError
ReadFile
GetFileSize
DeleteFileW
lstrlenW
FindFirstFileW
GetFullPathNameW
SetLastError
FindNextFileW
FindClose
GetFileTime
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenA
FindResourceExW
GetVersionExW
GetSystemInfo
GetSystemDefaultLCID
GetLocaleInfoW
Sleep
DecodePointer
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedExchange
InterlockedCompareExchange
GetCurrentProcessId
OpenProcess
LoadLibraryW
FreeLibrary
SetErrorMode
GetVolumeInformationW
GetUserDefaultUILanguage
CreateEventW
SetEvent
WaitForMultipleObjects
CopyFileW
CreateMutexW
WaitForSingleObject
WritePrivateProfileStringW
GetPrivateProfileStringW
WriteFile
IsBadReadPtr
GetFileAttributesW
SetFileAttributesW
LocalFree
RemoveDirectoryW
CreateDirectoryW
GetModuleFileNameW
GetTempPathW
GetLongPathNameW
GetLogicalDriveStringsW
QueryDosDeviceW
GetModuleHandleExW
CreateProcessW
TerminateProcess
ReleaseMutex
CreateToolhelp32Snapshot
Process32FirstW
ReadProcessMemory
Process32NextW
RaiseException
TlsGetValue
SetFilePointer
FlushFileBuffers
TlsSetValue
GetLocalTime
InitializeCriticalSection
TlsAlloc
TlsFree
GetExitCodeThread
ResetEvent
ResumeThread
SystemTimeToFileTime
SleepEx
ExpandEnvironmentStringsA
FormatMessageA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
OutputDebugStringW
GetExitCodeProcess
GetVersion
GetCurrentProcess
MoveFileExW
LoadLibraryExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
EnterCriticalSection

user32

GetSystemMetrics
MsgWaitForMultipleObjects
GetMessageW
TranslateMessage
DispatchMessageW
IsWindow
PostMessageW
SendMessageW

advapi32

OpenProcessToken
GetTokenInformation
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
SetEntriesInAclW
SetNamedSecurityInfoW
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
BuildExplicitAccessWithNameW

shell32

SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetFolderPathW

ole32

CreateStreamOnHGlobal
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CLSIDFromString

oleaut32

SysFreeString
SysAllocString

shlwapi

PathAppendW
wnsprintfW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW

msvcr100

??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy
memmove
memcpy_s
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_time64
_wcsicmp
_wcsupr_s
memmove_s
wcscmp
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
vswprintf_s
_vsnwprintf_s
_vscwprintf
?what@exception@std@@UBEPBDXZ
wcslen
wmemcpy_s
free
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_mktime64
wcscpy_s
wcsnlen
wcsrchr
calloc
_recalloc
_vsnwprintf
_itow_s
_purecall
_waccess
wcsstr
wcsspn
wcscspn
wcschr
strchr
realloc
memcmp
_wcslwr_s
strtol
_wtoi64
_vsnprintf_s
wcsncpy_s
wcsncpy
wcsncat
malloc
_wcsnicmp
strstr
strcmp
strncmp
isspace
__iob_func
isalpha
fread
isdigit
fseek
fclose
atoi
_snprintf_s
_beginthreadex
_snwprintf
_snprintf
wcstombs_s
atof
fputc
_gmtime64
sscanf
qsort
_stat64
strerror
_strtoi64
fputs
strcpy
memchr
fflush
_errno
isalnum
tolower
strncpy
fgets
fopen
__sys_nerr
fwrite
strrchr
strtoul
getenv
isxdigit
strcat
toupper
_localtime64_s
wcsncat_s
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
sprintf_s
strlen
memset
??3@YAXPAX@Z
__RTDynamicCast
_CxxThrowException
_stricmp
_strdup
_wtoi

msvcp100

?_Xmem@tr1@std@@YAXXZ
?id@?$collate@_W@std@@2V0locale@2@A
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??1_Locinfo@std@@QAE@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
_Wcsxfrm
_Wcscoll
?_Xfunc@tr1@std@@YAXXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z

psapi

GetProcessImageFileNameW

rpcrt4

RpcStringFreeW
UuidCreateSequential
UuidToStringW

winhttp

WinHttpAddRequestHeaders
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetOption
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpCrackUrl

ws2_32

WSASetLastError
__WSAFDIsSet
freeaddrinfo
bind
getsockname
getaddrinfo
ntohl
getpeername
htonl
ntohs
setsockopt
select
closesocket
getsockopt
WSAGetLastError
recv
send
connect
ioctlsocket
socket
htons
inet_addr
WSACleanup
WSAStartup

daemonproxy

ord7
ord10
ord5
ord2
ord1

iphlpapi

GetExtendedTcpTable

Exports

Exports

CMFreeMemory
CancelADBConnect
GetAdbConnectType
GetAdbName
GetConnectUIContext
InitConnectManager
IsDeviceStrictModeMatch
IsMDBSupport
OnConnectUIAction
StartADBConnect
StartMDBForQQSDK
UnInitConnectManager
UpdateChannelID
UpdateMDBSwitchFile
_GetAndroidPhoneCount@0
_GetDeviceInfo@16
_RegisterDeviceChange@8
_UnRegisterDeviceChange@4

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ConnectUI.dll
.dll windows:5 windows x86 arch:x86

71150d42a632997a23a5ffdfde48cbb4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

26:05:09:d4:0e:47:7f:87:87:5f:4b:75:a7:8d:5c:89:d2:9a:95:5c:c3:be:19:2c:c6:17:c4:29:cd:8f:49:a0
Signer

Actual PE Digest

26:05:09:d4:0e:47:7f:87:87:5f:4b:75:a7:8d:5c:89:d2:9a:95:5c:c3:be:19:2c:c6:17:c4:29:cd:8f:49:a0

Digest Algorithm

sha256

PE Digest Matches

true

62:58:40:f3:e4:5e:d1:63:e5:db:18:21:3a:04:bc:60:9a:4d:45:04
Signer

Actual PE Digest

62:58:40:f3:e4:5e:d1:63:e5:db:18:21:3a:04:bc:60:9a:4d:45:04

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\ConnectUI.pdb

Imports

common

?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?ClearDeadQueue@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z
??1CTXHttpDownload@@UAE@XZ
??0CTXHttpDownload@@QAE@XZ
?OnConnect@CTXHttpDownload@@EAEXHI@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?Trim@CTXStringW@@QAEAAV1@XZ
?SetAt@CTXStringW@@QAEXH_W@Z
?FindOneOf@CTXStringW@@QBEHPB_W@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
?SetUseIEProxy@CTXHttpDownload@@QAEXH@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?Find@CTXStringW@@QBEH_WH@Z
??1CTXHttpDownloadSink@@UAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
??0CTXHttpDownloadSink@@IAE@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??8@YA_NABVCTXStringW@@0@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Replace@CTXStringW@@QAEH_W0@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?InitNetwork@Network@Util@@YAHXZ
?GetMainAndLogicThreadId@Misc@Util@@YAXAAK0@Z
??M@YA_NABVCTXStringW@@0@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetString@CTXStringW@@QBEPB_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
??M@YA_NABVCTXStringA@@0@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXBSTR@@QAE@XZ
?IsEmpty@CTXBSTR@@QAEHXZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??BCTXStringW@@QBEPB_WXZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??0CTXBSTR@@QAE@PB_W@Z
??1CTXStringA@@QAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??1CTXStringW@@QAE@XZ
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ
?Run@CTXHttpDownload@@EAEIXZ

asynctask

??1MessageLoopForUI@AsyncTask@@UAE@XZ
??1Lock@AsyncTask@@QAE@XZ
??0Lock@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
??0MessageLoopForUI@AsyncTask@@QAE@XZ
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
?message_loop@Thread@AsyncTask@@QBEPAVMessageLoop@2@XZ
?thread_id@Thread@AsyncTask@@QBEKXZ
?Acquire@Lock@AsyncTask@@QAEXXZ
??1Thread@AsyncTask@@UAE@XZ
??1AtExitManager@AsyncTask@@QAE@XZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
?AssertAcquired@Lock@AsyncTask@@QBEXXZ
?Release@Lock@AsyncTask@@QAEXXZ

comctl32

InitCommonControlsEx

nethub

NH_DeleteTaskByID
NH_DownloadFileSync

zlib

crc32
inflateInit2_
inflateEnd
inflate

kernel32

CreateMutexW
InterlockedIncrement
LeaveCriticalSection
FlushFileBuffers
WriteFile
SetFilePointer
GetCurrentThreadId
TlsGetValue
EnterCriticalSection
WideCharToMultiByte
GetCurrentProcessId
GetModuleFileNameW
DeleteCriticalSection
InterlockedDecrement
TlsSetValue
TlsFree
lstrlenW
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
GetFileAttributesW
CopyFileW
MoveFileExW
MoveFileW
GetFileAttributesExW
IsBadReadPtr
FindClose
FindFirstFileW
LocalFree
RemoveDirectoryW
FindNextFileW
CreateDirectoryW
SetEnvironmentVariableW
GetEnvironmentVariableW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FlushInstructionCache
GetCurrentProcess
SetLastError
Sleep
OpenMutexW
QueryPerformanceCounter
GetProcAddress
LoadLibraryW
RaiseException
GetModuleHandleW
MultiByteToWideChar
lstrlenA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
GetPrivateProfileStringW
ResumeThread
WaitForSingleObject
ReleaseMutex
LocalAlloc
ReadFile
ProcessIdToSessionId
GetModuleHandleExW
FreeLibrary
GetVolumeInformationW
OutputDebugStringW
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetLastError
GetLocalTime
InitializeCriticalSection
TlsAlloc
GetTickCount
GetFileSize
CloseHandle
InterlockedExchange
LoadLibraryA
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
DeleteFileW
CreateFileW
VirtualAlloc
InterlockedPopEntrySList
HeapDestroy
HeapSize
EncodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
DecodePointer

user32

LoadCursorW
DestroyWindow
CreateWindowExW
DefWindowProcW
RegisterClassExW
PostQuitMessage
GetClassInfoExW
KillTimer
SetTimer
ShowWindow
SetWindowLongW
IsWindow
PostMessageW
GetWindowLongW
CallWindowProcW
UnregisterClassA

advapi32

InitializeSecurityDescriptor
GetUserNameW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
FreeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid

shell32

ShellExecuteW
SHGetFolderLocation
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW

ole32

StgOpenStorage
OleInitialize
OleUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateGuid
StringFromGUID2

oleaut32

LoadRegTypeLi
SysStringLen
SysFreeString
LoadTypeLi

atl100

ord31
ord32
ord30
ord43
ord44
ord58

shlwapi

wnsprintfW
PathAppendW
PathFileExistsW

msvcp100

?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
wcschr
toupper
_wcsupr_s
_mktime64
__clean_type_info_names_internal
__CppXcptFilter
wcstombs_s
isdigit
isalpha
strchr
isspace
strncmp
realloc
wcsnlen
vswprintf_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
atof
wcslen
??3@YAXPAX@Z
memset
_snprintf_s
??2@YAPAXI@Z
_vsnprintf_s
_vsnwprintf_s
_purecall
wcscpy_s
__CxxFrameHandler3
memcpy
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
free
memcmp
memmove
wcsncat
_except_handler4_common
wcsncpy
wcscmp
_waccess
malloc
fclose
fread
_wfopen_s
_wtoi
wmemcpy_s
swprintf_s
memcpy_s
memmove_s
_recalloc
_time64
wcsncpy_s
atoi
strlen
calloc
_wtoi64
_beginthreadex
wcsrchr
_vscwprintf

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreateSequential

winhttp

WinHttpSetStatusCallback
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest

Exports

Exports

MainEntry

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Daemon.dll
.dll windows:5 windows x86 arch:x86

a9b2ecca2a383f4030ba2a30bbe30951

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1e:ee:2a:8c:76:d5:bc:ec:29:0a:74:4b:dc:1c:25:a0:50:1c:4e:2d:05:35:a0:3b:2f:ad:c2:61:98:5f:63:70
Signer

Actual PE Digest

1e:ee:2a:8c:76:d5:bc:ec:29:0a:74:4b:dc:1c:25:a0:50:1c:4e:2d:05:35:a0:3b:2f:ad:c2:61:98:5f:63:70

Digest Algorithm

sha256

PE Digest Matches

true

47:4e:3f:ac:46:44:eb:b2:63:df:38:4f:b8:d1:db:e9:c8:be:2c:dd
Signer

Actual PE Digest

47:4e:3f:ac:46:44:eb:b2:63:df:38:4f:b8:d1:db:e9:c8:be:2c:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\Daemon.pdb

Imports

wtsapi32

WTSQueryUserToken

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

kernel32

GetModuleFileNameW
QueryDosDeviceW
GetLogicalDriveStringsW
ReleaseMutex
GetCurrentProcess
GetLocalTime
GetCurrentProcessId
WideCharToMultiByte
SetDllDirectoryW
HeapSetInformation
GetVersion
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetExitCodeProcess
CreateMutexW
LocalAlloc
WTSGetActiveConsoleSessionId
ProcessIdToSessionId
LeaveCriticalSection
RaiseException
EnterCriticalSection
DeleteCriticalSection
GetVolumeInformationW
MultiByteToWideChar
lstrlenA
lstrlenW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLastError
WaitForSingleObject
GetModuleHandleExW
LocalFree
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThreadId
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
OutputDebugStringW
GetPrivateProfileStringW
CreateProcessW

user32

ShowWindow
PostThreadMessageW
FindWindowW
RegisterWindowMessageW
PostMessageW
SendMessageW

advapi32

RegOpenKeyExW
CheckTokenMembership
DuplicateToken
CreateWellKnownSid
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegCloseKey

shell32

SHGetFolderPathW

ole32

StringFromGUID2
CoCreateGuid

msvcp100

?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?_Xfunc@tr1@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
??1_Lockit@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
?flags@ios_base@std@@QBEHXZ
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAE_J_J@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?width@ios_base@std@@QBE_JXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

shlwapi

PathFileExistsW
PathAppendW
PathRemoveFileSpecW

msvcr100

wcschr
toupper
_wcsupr_s
calloc
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??3@YAXPAX@Z
free
wcslen
memset
memcpy_s
memmove_s
_CxxThrowException
wmemcpy_s
__CxxFrameHandler3
wcsrchr
memcpy
memmove
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
wcsnlen
vswprintf_s
wcscmp
_vscwprintf
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_wcsnicmp
??_V@YAXPAX@Z
wcscpy_s
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
strlen
_vsnwprintf_s
_wcsicmp
_purecall
memcmp
wcsstr
_recalloc
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter

ws2_32

ntohs

iphlpapi

GetExtendedTcpTable

log4cplus

?getDefaultHierarchy@Logger@log4cplus@@SAAAVHierarchy@2@XZ
?macro_forced_log@detail@log4cplus@@YAXABVLogger@2@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH2@Z
?get_macro_body_oss@detail@log4cplus@@YAAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?print@snprintf_buf@helpers@log4cplus@@QAAPB_WPB_WZZ
?get_macro_body_snprintf_buf@detail@log4cplus@@YAAAVsnprintf_buf@helpers@2@XZ
??1Logger@log4cplus@@UAE@XZ
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0Logger@log4cplus@@QAE@$$QAV01@@Z
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z
?getRoot@Logger@log4cplus@@SA?AV12@XZ

rpcrt4

UuidCreateSequential
UuidToStringW
RpcStringFreeW

winhttp

WinHttpSetOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback

Exports

Exports

Initialize
Uninitialize

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DaemonProxy.dll
.dll windows:5 windows x86 arch:x86

f33ab8f936e352101641aab396590d26

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c0:8d:66:7b:8d:ea:d0:3a:88:58:f7:44:87:42:d0:d5:27:3d:09:98:fd:84:2a:7e:fb:9e:24:aa:87:e3:93:17
Signer

Actual PE Digest

c0:8d:66:7b:8d:ea:d0:3a:88:58:f7:44:87:42:d0:d5:27:3d:09:98:fd:84:2a:7e:fb:9e:24:aa:87:e3:93:17

Digest Algorithm

sha256

PE Digest Matches

true

10:23:e0:89:76:c3:ff:98:cf:df:eb:87:3f:45:5a:f0:29:ad:2e:46
Signer

Actual PE Digest

10:23:e0:89:76:c3:ff:98:cf:df:eb:87:3f:45:5a:f0:29:ad:2e:46

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\DaemonProxy.pdb

Imports

kernel32

GetCurrentProcess
GetVersion
TerminateProcess
LoadLibraryW
GetProcAddress
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
ReleaseMutex
FreeLibrary
LocalAlloc
LocalFree
RaiseException
GetModuleHandleExW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
ProcessIdToSessionId
DeleteCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateEventW
SetEvent
WaitForSingleObject
Sleep
GetModuleFileNameW
OpenMutexW
CloseHandle
GetCurrentProcessId
GetProcessHeap
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
CreateMutexW

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid

shell32

ShellExecuteExW

shlwapi

PathRemoveFileSpecW
PathAppendW

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_lock
__dllonexit
_unlock
??3@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
wcslen
memcpy
memmove
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
??_V@YAXPAX@Z
memcpy_s
_waccess
memset
_itow_s
wmemcpy_s
memmove_s
free
wcsnlen
wcsrchr
?terminate@@YAXXZ

Exports

Exports

ElevateCreateProcess
ElevateEnumProcessByPath
ElevateEnumProcessByPort
ElevateFreeBuffer
ElevateInitialize
ElevatePostMessage
ElevateSendMessage
ElevateSetProcessAction
ElevateShowWindow
ElevateTerminateProcessByID
ElevateTerminateProcessByPath
ElevateUnInitialize
IsElevateDaemonExist
StartDaemon

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DebugModeBrand.brand
DebugModeConfigV2.xml
DeviceDesc.xml
DownloadMgr.dll
.dll windows:5 windows x86 arch:x86

46e61f63a4fdc25a81c2ee90a27cba94

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:07:2b:0b:3c:ae:d2:5a:a7:24:aa:50:24:13:6c:56:cb:b7:c8:e8:06:28:6f:cf:e2:92:51:71:02:4f:fd:85
Signer

Actual PE Digest

27:07:2b:0b:3c:ae:d2:5a:a7:24:aa:50:24:13:6c:56:cb:b7:c8:e8:06:28:6f:cf:e2:92:51:71:02:4f:fd:85

Digest Algorithm

sha256

PE Digest Matches

true

9b:16:3f:8c:68:52:78:4f:1f:fd:2d:75:50:9b:48:1a:60:d0:2d:fd
Signer

Actual PE Digest

9b:16:3f:8c:68:52:78:4f:1f:fd:2d:75:50:9b:48:1a:60:d0:2d:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\DownloadMgr.pdb

Imports

kernel32

GetCurrentThreadId
HeapSize
HeapDestroy
GetProcessHeap
GetTickCount
HeapAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
CloseHandle
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapFree
DisableThreadLibraryCalls
IsProcessorFeaturePresent
SetLastError
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
LockResource
GetProcAddress
RaiseException
SizeofResource
GetModuleHandleW
LoadResource
FindResourceW
FindResourceExW
ResetEvent
SetEvent
WaitForMultipleObjects
CreateEventW
TlsFree
TlsAlloc
GetLocalTime
GetModuleFileNameW
TlsSetValue
WideCharToMultiByte
CreateFileW
DeleteFileW
GetFileSize
FlushFileBuffers
WriteFile
SetFilePointer
TlsGetValue
InitializeCriticalSection
WaitForSingleObject
GetExitCodeThread
ResumeThread
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

SetTimer
KillTimer
CallWindowProcW
GetWindowLongW
DestroyWindow
GetMessageW
SetWindowLongW
CreateWindowExW
IsWindow
DispatchMessageW
TranslateMessage
PostQuitMessage
PeekMessageW
PostMessageW

msvcr100

_strdup
strrchr
fwrite
__sys_nerr
isdigit
??3@YAXPAX@Z
_purecall
??0exception@std@@QAE@ABQBD@Z
memmove
strcat
_time64
isxdigit
fclose
getenv
fseek
strtoul
realloc
_stricmp
_CxxThrowException
??1exception@std@@UAE@XZ
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
strcmp
_encoded_null
fread
isalpha
fopen
fgets
strncpy
tolower
isalnum
strtol
_errno
fflush
memchr
strchr
strcpy
__iob_func
strstr
fputs
_strtoi64
free
_malloc_crt
__CxxFrameHandler3
_onexit
_lock
__dllonexit
_unlock
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
strerror
_stat64
qsort
calloc
isspace
_beginthreadex
memset
wcscpy_s
_snprintf_s
_vsnprintf_s
_vsnwprintf_s
strncmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
wcschr
memmove_s
memcmp
_wtoi
malloc
strlen
wcsnlen
memcpy_s
wcscmp
memcpy
fputc
_gmtime64
sscanf

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

ws2_32

getsockopt
send
closesocket
WSASetLastError
__WSAFDIsSet
freeaddrinfo
socket
bind
recv
WSACleanup
setsockopt
getsockname
ntohs
htons
WSAGetLastError
select
getaddrinfo
WSAStartup
connect
ioctlsocket
getpeername

advapi32

RegQueryValueExW
RegCloseKey
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
RegOpenKeyExW

Exports

Exports

CreateDownloadMgr
DestroyDownloadMgr

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DriverTools.exe
.exe windows:5 windows x86 arch:x86

0cbfd1d1f4870d6ba6f0f756b42d6c95

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:56:b2:ec:e1:72:4b:8d:36:dc:f8:72:4b:d6:b7:f4:de:03:e3:78:24:f7:d8:df:10:a6:c1:e9:25:85:92:3d
Signer

Actual PE Digest

09:56:b2:ec:e1:72:4b:8d:36:dc:f8:72:4b:d6:b7:f4:de:03:e3:78:24:f7:d8:df:10:a6:c1:e9:25:85:92:3d

Digest Algorithm

sha256

PE Digest Matches

true

fe:3f:7a:a6:7b:0e:df:07:55:0a:6a:a0:af:4a:70:1b:5a:76:ad:54
Signer

Actual PE Digest

fe:3f:7a:a6:7b:0e:df:07:55:0a:6a:a0:af:4a:70:1b:5a:76:ad:54

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\DriverTools.pdb

Imports

kernel32

Sleep
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FormatMessageW
LocalFree
GetSystemInfo
HeapSetInformation
SetDllDirectoryW
CreateMutexW
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
ReadFile
GetFullPathNameW
GetFileAttributesW
GetCurrentProcess
GetModuleHandleW
LoadLibraryW
GetProcAddress
lstrcmpiW
GetVersionExW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
GetTickCount
TerminateThread
GetExitCodeThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
WriteConsoleW
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
DeviceIoControl
GetLastError
GetUserDefaultUILanguage
CreateFileW
GetStringTypeW
GetStartupInfoW
GetFileType
SetHandleCount
HeapCreate
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
SetStdHandle
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EncodePointer
DecodePointer
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineW
TerminateProcess

user32

CharNextW
IsWindow
DispatchMessageW
TranslateMessage
GetMessageW
MsgWaitForMultipleObjects
wsprintfW
FindWindowExW
CharPrevW
LoadStringW
EnumChildWindows
SendMessageW
GetWindowTextW
GetDlgItem
FindWindowW
PostMessageW
IsWindowEnabled

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
InitiateSystemShutdownExW

shell32

CommandLineToArgvW

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiClassGuidsFromNameExW
InstallHinfSectionW
SetupUninstallOEMInfW
CM_Locate_DevNode_ExW
SetupDiGetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceRegistryPropertyW
CM_Reenumerate_DevNode_Ex

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DriverToolsX64.exe
.exe windows:5 windows x64 arch:x64

38612c8a1083cda976788fb5621e082a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:1c:f9:ef:e9:fe:f0:29:6f:68:8a:15:96:c9:b6:9b:05:39:b8:b4:14:44:ea:c2:a4:76:e5:9d:8c:cc:34:f0
Signer

Actual PE Digest

1c:1c:f9:ef:e9:fe:f0:29:6f:68:8a:15:96:c9:b6:9b:05:39:b8:b4:14:44:ea:c2:a4:76:e5:9d:8c:cc:34:f0

Digest Algorithm

sha256

PE Digest Matches

true

02:78:3b:a1:f6:9f:49:f9:a3:15:9d:05:23:70:05:90:2f:da:1a:42
Signer

Actual PE Digest

02:78:3b:a1:f6:9f:49:f9:a3:15:9d:05:23:70:05:90:2f:da:1a:42

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\DriverToolsX64.pdb

Imports

kernel32

Sleep
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FormatMessageW
LocalFree
GetSystemInfo
HeapSetInformation
SetDllDirectoryW
CreateMutexW
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
ReadFile
GetFullPathNameW
GetFileAttributesW
GetCurrentProcess
GetModuleHandleW
LoadLibraryW
GetProcAddress
lstrcmpiW
GetVersionExW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateEventW
GetTickCount
TerminateThread
GetExitCodeThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
WriteConsoleW
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
CloseHandle
DeviceIoControl
GetLastError
GetUserDefaultUILanguage
CreateFileW
GetStartupInfoW
GetFileType
SetHandleCount
HeapCreate
GetVersion
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
FlsAlloc
SetStdHandle
SetLastError
FlsFree
FlsSetValue
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EncodePointer
DecodePointer
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineW
RtlPcToFileHeader
TerminateProcess

user32

CharNextW
IsWindow
DispatchMessageW
TranslateMessage
GetMessageW
MsgWaitForMultipleObjects
wsprintfW
FindWindowExW
CharPrevW
LoadStringW
EnumChildWindows
SendMessageW
GetWindowTextW
GetDlgItem
FindWindowW
PostMessageW
IsWindowEnabled

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
InitiateSystemShutdownExW

shell32

CommandLineToArgvW

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiClassGuidsFromNameExW
InstallHinfSectionW
SetupUninstallOEMInfW
CM_Locate_DevNode_ExW
SetupDiGetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceRegistryPropertyW
CM_Reenumerate_DevNode_Ex

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GF.dll
.dll regsvr32 windows:5 windows x86 arch:x86

62226dfc0eea4a4bf712f88d8dacc574

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

cc:6e:08:3d:0a:63:a9:1e:5d:33:5e:6c:a0:df:7c:5b:4f:73:12:92:71:b9:71:7a:f3:f8:29:af:33:8c:a7:45
Signer

Actual PE Digest

cc:6e:08:3d:0a:63:a9:1e:5d:33:5e:6c:a0:df:7c:5b:4f:73:12:92:71:b9:71:7a:f3:f8:29:af:33:8c:a7:45

Digest Algorithm

sha256

PE Digest Matches

true

61:36:0e:a7:ba:54:b7:0e:47:13:a8:3f:ae:01:f1:d3:72:7f:79:6e
Signer

Actual PE Digest

61:36:0e:a7:ba:54:b7:0e:47:13:a8:3f:ae:01:f1:d3:72:7f:79:6e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\GF.pdb

Imports

xgraphic32

GetViewportOrg
DrawBitmapEx
SetCanvasBkColor
SetWindowOrg
RotateTexture
GetTexture
ReleaseTexture
GetCanvasSize
CanvasScroll
FillSolidRect
GeoRectangleEx
GetBitmap
InvertBitmap
ReleaseBitmap
FillSolidRectEx
GeoRectFocusEx
DrawBitmap
SetViewportOrg
SetCanvasWindow
CanvasToTexture
ResizeTexture
CopyTexture
GdiTransCanvas
GetTextureCurSlice
CreateTextureRgn
GetTextureMode
DrawTextureEx
TransformTexture
ColorizeTexture
GeoRectangle
GeoRoundRect
Save
GradientCreateLinear
GradientAddColorStop
SetDrawStyle
SetGradient
DrawRectangle
GradientDestroy
Restore
GetTextureSize
DrawTexture
GrayTexture
GetTextureFilter
NormalizeTexture
CreateTexture
ARGBColorize
LockTextureBits
UnlockTextureBits
SetTextureMode
SetTextureFilter
TranslateTexture
SetTextureSlice
DeleteTexture
SetTextureCurSlice
GetCanvasBkColor
GetCanvasFilter
GetCanvasHandle
DrawModulation
CreateMemBitmap
CopyBitmap
LightBitmap
DeleteBitmap
CreateSystemBitmap
LockBitmapBits
UnlockBitmapBits
GetBitmapHandle
ShuffleBitmapEx
SetBitmapFilter
GetWindowOrg
GetCanvasWindow
FillPreMulColorRectEx
CreateCanvas
SetCanvasFilter
MixCanvasWithColor
BlendCanvas
DeleteCanvas
MixCanvas

arkgraphic

arkCanvasSetStrokeJoin
arkCanvasSetStrokeCap
arkCanvasClear
arkPathCreate
arkBitmapDestroy
arkCanvasCreateFromBitmap
arkBitmapCreateFromData
arkCanvasSetColor
arkCanvasSetGradient
arkCanvasSetStrokeWidth
arkCanvasSetDrawStyle
arkCanvasSetBlendValue
arkCanvasSetBlendMode
arkCanvasSave
arkCanvasRestore
arkCanvasRotate
arkCanvasScale
arkCanvasTranslate
arkPathBegin
arkPathClose
arkPathMoveTo
arkPathLineTo
arkPathArcTo
arkPathBezierCurveTo
arkPathQuadraticCurveTo
arkPathAddArc
arkPathAddRectangle
arkPathAddCircle
arkCanvasClipRect
arkCanvasSetMapPolygon
arkCanvasDrawBitmap
arkBitmapCreate
arkGradientAddColorStop
arkGradientCreateRadial
arkGradientCreateLinear
arkGradientDestroy
arkCanvasDestroy
arkPathDestroy
arkCanvasDrawEllipse
arkCanvasDrawCircle
arkCanvasDrawRectangle
arkCanvasDrawLine
arkCanvasGetStrokeWidth
arkCanvasDrawPath
arkPathGetBounds
arkCanvasGetMapRect
arkCanvasClipPath
arkPathAddEllipse

common

ord27
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetBufferSetLength@CTXStringA@@QAEPADH@Z
?Empty@CTXStringA@@QAEXXZ
?SetGetServiceFactory@CoreCenter@Util@@YAXP6AJABU_GUID@@PA_WPAPAX@Z@Z
?SetCreateObjectFactory@CoreCenter@Util@@YAXP6AJABU_GUID@@0PAPAX@Z@Z
?Append@CTXBSTR@@QAEJPB_WH@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?GetCore@CoreCenter@Util@@YAHPA_WPAPAUITXCore@@@Z
?CreateExtensionSort@Extension@Util@@YAXABU_GUID@@PAPAUITXExtensionSort@@@Z
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?CreateExtensionLogic@Extension@Util@@YAXABU_GUID@@PAPAUITXExtensionLogic@@@Z
??0CTXBSTR@@QAE@ABU_GUID@@@Z
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
?GetCurrentCallStack@Sys@Util@@YA?AVCTXStringW@@V3@HH@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?StartThread@CTXThreadModel@@QAEHXZ
??0CTXThreadModel@@IAE@XZ
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
??1CTXThreadModel@@MAE@XZ
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?StopThread@CTXThreadModel@@QAEHK@Z
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?NotifyIdle@Window@Util@@YAJXZ
??OCTXBSTR@@QBE_NABV0@@Z
ord25
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?GetBufferSetLength@CTXStringW@@QAEPA_WH@Z
?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z
??0CTXStringA@@QAE@PBD@Z
?CompareNoCase@CTXStringA@@QBEHPBD@Z
??0CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??1CFmtString@@QAE@XZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
??4CTXData@@QAEAAV0@PAUITXData@@@Z
?Create@CTXData@@QAEXXZ
??8CTXBSTR@@QBE_NABV0@@Z
?OpenUrlWithDefBrowser@UrlBase@Util@@YAXABVCTXStringW@@@Z
??BCTXDataField@@QBEHXZ
??9CTXBSTR@@QBE_NPA_W@Z
??8CTXBSTR@@QBE_NPA_W@Z
??4CTXDataField@@QAEAAV0@K@Z
??4CTXDataField@@QAEAAV0@PAUIUnknown@@@Z
??BCTXDataField@@QBE_NXZ
??0CTXData@@QAE@PAUITXData@@@Z
??BCTXDataField@@QBEJXZ
??H@YA?AVCTXStringW@@ABV0@_W@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
?Empty@CTXStringW@@QAEXXZ
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?RaiseSelfFatalException@TXBugReport@@YAXW4SelfException@1@@Z
?SBCToDBC@Convert@Util@@YA_NAAVCTXStringW@@@Z
??M@YA_NABVCTXStringA@@0@Z
??0CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
?GetString@CTXStringA@@QBEPBDXZ
??4CTXDataField@@QAEAAV0@_N@Z
??0CTXData@@QAE@XZ
??ACTXData@@QAEAAVCTXDataField@@PBD@Z
??4CTXDataField@@QAEAAV0@VCTXBSTR@@@Z
??BCTXData@@QBEPAUITXData@@XZ
??1CTXData@@QAE@XZ
??4CTXDataField@@QAEAAV0@H@Z
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?Append@CTXStringW@@QAEXABV1@@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
?Right@CTXStringW@@QBE?AV1@H@Z
??9@YA_NPB_WABVCTXStringW@@@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@0@Z
??8CTXBSTR@@QBE_NPB_W@Z
?Remove@CTXStringW@@QAEH_W@Z
?Empty@CTXBSTR@@QAEXXZ
??9CTXBSTR@@QBE_NABV0@@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringW@@QAE@_WH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
ord33
ord34
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??MCTXBSTR@@QBE_NABV0@@Z
?IsStopped@CoreCenter@Util@@YAHXZ
??9CTXBSTR@@QBE_NPB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??1CTXBSTR@@QAE@XZ
?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??ICTXBSTR@@QAEPAPA_WXZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??1CTXStringW@@QAE@XZ
?IsFileExist@FS@@YAHPB_W@Z
??8@YA_NPB_WABVCTXStringW@@@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXBSTR@@QAE@ABV0@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?Length@CTXBSTR@@QBEIXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?GetLength@CTXStringW@@QBEHXZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??0CTXStringW@@QAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?GetFileSystemType@FS@@YA?AW4FILESYSTEM_TYPE@@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?IsFileSystemFile@FS@@YAHPB_W@Z
?Copy@CTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?IsEmpty@CTXStringW@@QBE_NXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
??M@YA_NABVCTXStringW@@0@Z
??1CTXStringA@@QAE@XZ
??BCTXStringA@@QBEPBDXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??0CTXStringW@@QAE@PA_W@Z
??ACTXStringW@@QBE_WH@Z
?Delete@CTXStringW@@QAEHHH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?FindOneOf@CTXStringW@@QBEHPB_W@Z
??9@YA_NABVCTXStringW@@0@Z
wcslcpy
??0CTXStringW@@QAE@PB_WH@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?GetLCID@TXI18N@@YAKXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?FreeComLibrary@Com@Util@@YGJPB_WK@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?MakeLower@CTXStringW@@QAEAAV1@XZ
?Find@CTXStringW@@QBEH_WH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?LoadTinyXmlByContent@FS@Util@@YAHPA_WPAPAVTiXmlDocument@@H@Z
?ConvertXMLSpecialLabel@Convert@Util@@YAHPA_W0PAPA_W@Z
?LoadTinyXmlByName@FS@Util@@YAHPB_WPAPAVTiXmlDocument@@H@Z
?SplitCmdString@Misc@Util@@YAXABVCTXStringW@@AAV?$vector@VCTXStringW@@V?$allocator@VCTXStringW@@@std@@@std@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?GetAt@CTXStringW@@QBE_WH@Z
??H@YA?AVCTXStringW@@ABV0@0@Z

riched20

ord4

imm32

ImmReleaseContext
ImmAssociateContext
ImmGetContext

rpcrt4

UuidToStringW
RpcStringFreeW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

arkimage

arkReadImageFrame
arkReadImageInfo
arkCreateDecoder
arkSetActiveFrame
arkDestroyDecoder

arkiostub

arkDeleteStub
arkRegisterFS
arkCreateStub
cfileStubCreate
cfileStubDelete

tinyxml

?Type@TiXmlNode@@QBEHXZ
?Parent@TiXmlNode@@QAEPAV1@XZ
??1TiXmlText@@UAE@XZ
??1TiXmlElement@@UAE@XZ
?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z
?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ
?ToText@TiXmlText@@UBEPBV1@XZ
?ToText@TiXmlText@@UAEPAV1@XZ
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
?Parse@TiXmlText@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Print@TiXmlText@@UBEXPAU_iobuf@@H@Z
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToElement@TiXmlElement@@UBEPBV1@XZ
?ToElement@TiXmlElement@@UAEPAV1@XZ
?ToDocument@TiXmlNode@@UBEPBVTiXmlDocument@@XZ
?ToDocument@TiXmlNode@@UAEPAVTiXmlDocument@@XZ
?Parse@TiXmlElement@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Print@TiXmlElement@@UBEXPAU_iobuf@@H@Z
??0TiXmlElement@@QAE@PBD@Z
??0TiXmlText@@QAE@PBD@Z
?LinkEndChild@TiXmlNode@@QAEPAV1@PAV1@@Z
?GetText@TiXmlElement@@QBEPBDXZ
?FirstAttribute@TiXmlElement@@QAEPAVTiXmlAttribute@@XZ
?Name@TiXmlAttribute@@QBEPBDXZ
?Value@TiXmlAttribute@@QBEPBDXZ
?Next@TiXmlAttribute@@QAEPAV1@XZ
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
?Attribute@TiXmlElement@@QBEPBDPBD@Z
??0TiXmlPrinter@@QAE@XZ
?SetStreamPrinting@TiXmlPrinter@@QAEXXZ
?CStr@TiXmlPrinter@@QAEPBDXZ
??1TiXmlPrinter@@UAE@XZ
?FirstChild@TiXmlNode@@QAEPAV1@XZ
?Value@TiXmlNode@@QBEPBDXZ
?NextSibling@TiXmlNode@@QAEPAV1@XZ

lua

?lua_pushnil@@YAXPAUlua_State@@@Z
?lua_tonumberx@@YANPAUlua_State@@HPAH@Z
?lua_pushboolean@@YAXPAUlua_State@@H@Z
?lua_toboolean@@YAHPAUlua_State@@H@Z
?lua_pushinteger@@YAXPAUlua_State@@H@Z
?lua_tointegerx@@YAHPAUlua_State@@HPAH@Z
?lua_pushlstring@@YAPBDPAUlua_State@@PBDI@Z
?luaL_loadbufferx@@YAHPAUlua_State@@PBDI11@Z
?lua_pcallk@@YAHPAUlua_State@@HHHHP6AH0@Z@Z
?lua_getglobal@@YAXPAUlua_State@@PBD@Z
?lua_tolstring@@YAPBDPAUlua_State@@HPAI@Z
?lua_settop@@YAXPAUlua_State@@H@Z
?lua_type@@YAHPAUlua_State@@H@Z
?lua_rawlen@@YAIPAUlua_State@@H@Z
?lua_gettop@@YAHPAUlua_State@@@Z
?luaopen_os@@YAHPAUlua_State@@@Z
?luaopen_math@@YAHPAUlua_State@@@Z
?luaopen_debug@@YAHPAUlua_State@@@Z
?lua_pushnumber@@YAXPAUlua_State@@N@Z
?lua_setglobal@@YAXPAUlua_State@@PBD@Z
?lua_insert@@YAXPAUlua_State@@H@Z
?lua_settable@@YAXPAUlua_State@@H@Z
?lua_pushcclosure@@YAXPAUlua_State@@P6AH0@ZH@Z
?luaopen_string@@YAHPAUlua_State@@@Z
?luaopen_table@@YAHPAUlua_State@@@Z
?luaopen_base@@YAHPAUlua_State@@@Z
?luaL_openlibs@@YAXPAUlua_State@@@Z
?luaL_newstate@@YAPAUlua_State@@XZ
?lua_pushstring@@YAPBDPAUlua_State@@PBD@Z
?lua_close@@YAXPAUlua_State@@@Z
?lua_setfield@@YAXPAUlua_State@@HPBD@Z
?lua_pushvalue@@YAXPAUlua_State@@H@Z
?luaL_setfuncs@@YAXPAUlua_State@@PBUluaL_Reg@@H@Z
?luaL_newmetatable@@YAHPAUlua_State@@PBD@Z
?lua_setupvalue@@YAPBDPAUlua_State@@HH@Z
?luaL_checkudata@@YAPAXPAUlua_State@@HPBD@Z
?lua_touserdata@@YAPAXPAUlua_State@@H@Z
?lua_remove@@YAXPAUlua_State@@H@Z
?lua_newuserdata@@YAPAXPAUlua_State@@I@Z
?lua_pushlightuserdata@@YAXPAUlua_State@@PAX@Z
?lua_gettable@@YAXPAUlua_State@@H@Z
?lua_replace@@YAXPAUlua_State@@H@Z
?lua_getuservalue@@YAXPAUlua_State@@H@Z
?lua_setuservalue@@YAXPAUlua_State@@H@Z
?lua_createtable@@YAXPAUlua_State@@HH@Z
?lua_getfield@@YAXPAUlua_State@@HPBD@Z
?lua_setmetatable@@YAHPAUlua_State@@H@Z

oleacc

LresultFromObject
AccessibleObjectFromWindow

wininet

InternetErrorDlg

asynctask

?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
??0Lock@AsyncTask@@QAE@XZ
??1Lock@AsyncTask@@QAE@XZ
?AssertAcquired@Lock@AsyncTask@@QBEXXZ
?Release@Lock@AsyncTask@@QAEXXZ
?Acquire@Lock@AsyncTask@@QAEXXZ

kernel32

RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetProcAddress
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
lstrlenW
lstrcmpiW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetTickCount
CloseHandle
UnmapViewOfFile
QueryPerformanceCounter
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
GetFileSizeEx
CreateFileW
IsBadReadPtr
GetVersionExW
HeapDestroy
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
LocalFree
GetThreadLocale
SetThreadLocale
OutputDebugStringA
FreeLibrary
ResumeThread
ResetEvent
CreateSemaphoreW
CreateEventW
SetThreadPriority
WaitForMultipleObjects
SetEvent
ReleaseSemaphore
WaitForSingleObject
SetLastError
GetSystemTime
Sleep
GetCurrentProcess
FlushInstructionCache
GetVersion
MulDiv
HeapAlloc
GetProcessHeap
HeapFree
ExpandEnvironmentStringsW
lstrcpynW
GetCommandLineW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
DecodePointer
EncodePointer
InterlockedPopEntrySList
WideCharToMultiByte
MultiByteToWideChar

user32

IsZoomed
MapWindowPoints
SetWindowRgn
SetWindowTextW
SetActiveWindow
MonitorFromWindow
GetWindowThreadProcessId
AttachThreadInput
GetWindowTextW
TrackMouseEvent
GetCapture
GetWindowTextLengthW
IsWindowEnabled
UpdateLayeredWindow
UnregisterClassW
WindowFromPoint
PeekMessageW
GetMessageW
AllowSetForegroundWindow
TranslateMessage
DispatchMessageW
PostQuitMessage
RegisterClassExW
EndPaint
GetClassInfoExW
GetClientRect
SetLayeredWindowAttributes
BeginPaint
ValidateRgn
ValidateRect
GetUpdateRect
GetWindow
GetDoubleClickTime
MessageBoxW
SubtractRect
RedrawWindow
UnregisterClassA
ActivateKeyboardLayout
GetFocus
InvalidateRect
GetParent
GetWindowLongW
FindWindowExW
GetActiveWindow
CharNextW
CopyRect
OffsetRect
GetDC
GetDesktopWindow
ReleaseDC
DefWindowProcW
InvalidateRgn
IsWindow
SetWindowPos
IsRectEmpty
InflateRect
GetSystemMetrics
DestroyIcon
LoadImageW
DrawIconEx
SetRectEmpty
DrawTextExW
DrawTextW
GetWindowDC
DestroyCursor
LoadCursorFromFileW
LoadCursorW
CreateIconFromResource
CreateIconFromResourceEx
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
PtInRect
SetForegroundWindow
BringWindowToTop
CreateIconIndirect
ScreenToClient
FillRect
GetWindowRgn
GetClassLongW
IsWindowVisible
SendMessageW
GetClassNameW
EnumThreadWindows
SetFocus
SetParent
SystemParametersInfoW
IsChild
GetForegroundWindow
EqualRect
CreateWindowExW
DestroyWindow
IntersectRect
UnionRect
ClientToScreen
NotifyWinEvent
ShowWindow
EnableWindow
GetCursorPos
SetCursor
RegisterClipboardFormatW
UpdateWindow
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetKeyState
MonitorFromPoint
SetCapture
GetSysColor
SetRect
GetCaretBlinkTime
IsIconic
PostMessageW
SetWindowLongW
GetWindowRect
GetCursor
ReleaseCapture
CallWindowProcW
GetAsyncKeyState
GetKeyNameTextW
MapVirtualKeyW
GetMonitorInfoW

gdi32

GetDeviceCaps
DeleteDC
SelectObject
SetBkMode
SetTextColor
SetViewportOrgEx
CreateCompatibleDC
RestoreDC
DeleteObject
ExtSelectClipRgn
GetWindowOrgEx
OffsetRgn
GetViewportOrgEx
SaveDC
CreateRoundRectRgn
ExtCreateRegion
GetRegionData
CreateRectRgnIndirect
CombineRgn
GetTextMetricsW
CreateFontIndirectW
DPtoLP
EnumFontFamiliesExW
GetObjectW
CreatePen
CreateDIBSection
CreateDIBitmap
GetStockObject
SetWindowOrgEx
GetClipBox
GetTextExtentExPointW
CreateFontW
SetDIBits
BitBlt
CreateCompatibleBitmap
GetDIBits
SelectClipRgn
ExtTextOutW
SetBkColor
PatBlt
SetRectRgn
CreatePatternBrush
CreateBitmap
GetTextExtentPoint32W
GetPixel
SetPixel
IntersectClipRect
CreatePolygonRgn
CreateRectRgn
GetRgnBox

advapi32

RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueW
RegDeleteKeyW

shell32

SHGetFileInfoW
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW

ole32

RegisterDragDrop
RevokeDragDrop
DoDragDrop
CoFileTimeNow
CoFreeUnusedLibraries
CLSIDFromProgID
CoCreateInstance
StringFromCLSID
CoTaskMemFree

oleaut32

DispCallFunc
VariantClear
VariantInit
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
SysFreeString
VarBstrCmp
UnRegisterTypeLi
RegisterTypeLi
SysAllocString

atl100

ord31
ord58
ord43
ord44
ord15
ord64
ord68
ord56
ord49
ord32
ord30
ord11
ord10

shlwapi

wnsprintfW

msvcp100

?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xout_of_range@std@@YAXPBD@Z
??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z

msvcr100

malloc
??3@YAXPAX@Z
_CxxThrowException
wmemcpy_s
wcscpy_s
wcsncpy_s
memset
wcslen
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
__CxxFrameHandler3
??_V@YAXPAX@Z
memcpy_s
memmove_s
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_purecall
_recalloc
memcmp
memmove
memcpy
_time64
realloc
wcschr
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
strncpy
_beginthreadex
floor
ceil
swprintf_s
srand
fabs
strlen
abs
_wtoi
_wtof
swscanf
wcsncmp
wcsrchr
wcscmp
_wcsicmp
wcsncpy
labs
wcsnlen
free

usp10

ScriptGetLogicalWidths
ScriptLayout
ScriptTextOut
ScriptPlace
ScriptGetFontProperties
ScriptShape
ScriptItemize
ScriptGetProperties
ScriptBreak
ScriptFreeCache

urlmon

CoInternetGetSession

Exports

Exports

??0CGFAnchor@@QAE@XZ
??0CGFFrameAnchorHelper@@QAE@XZ
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4CGFAnchor@@QAEAAV0@ABV0@@Z
??4CGFFrameAnchorHelper@@QAEAAV0@ABV0@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
?AddAnchor@CGFAnchor@@QAEXEEVCRect@@VCPoint@@@Z
?AddColorizeListener@GF@Util@@YAJPAUIGFColorizeListener@@@Z
?AdviseWebBrowser@IEEvent@Util@@YAHPAUIWebBrowser2@@PAUITXWebBrowserEvents@@PAPAUIUnknown@@AAK@Z
?AlphaMode2BlendFilter@GF@Util@@YAHH@Z
?CheckImagePlayerHandle@GF@Util@@YA_NPAXVCTXStringW@@@Z
?CheckPermitActiveX@IEActiveX@Util@@YAHABU_GUID@@@Z
?CheckValidVersion@Flash@Util@@YAHKK@Z
?ClearMousePointer@GF@Util@@YAJPAUIGFFrame@@@Z
?CloseAllPopupMenu@GF@Util@@YAJXZ
?ClosePopupWindows@GF@Util@@YAXXZ
?Colorize@GF@Util@@YA?ATtagARGB@@T3@@Z
?Colorize@GF@Util@@YA?ATtagARGB@@T3@NNN@Z
?ConvertConfigMd@Metadata@Util@@YAJPA_W@Z
?CreateDropSource@GF@Util@@YA_NPAPAUIDropSource@@PAPAUIDataObject@@IPAE@Z
?CreateImagePlayer@GF@Util@@YAPAXVCTXStringW@@P6AXHPAX@Z1@Z
?CreateImagePlayerWithContainerSize@GF@Util@@YAPAXVCTXStringW@@P6AXHPAX@Z1PAUtagSIZE@@@Z
?CreateMinimumTextureFromPath@GF@Util@@YAPAUHGTEXTURE__@@ABVCTXStringW@@ABVCSize@@@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?CreateTextureFromPath@GF@Util@@YAPAUHGTEXTURE__@@ABVCTXStringW@@@Z
?CreateTxFile@GF@Util@@YAXPAPAVCxTXFile2@@VCTXStringW@@K@Z
?DelColorizeListener@GF@Util@@YAJPAUIGFColorizeListener@@@Z
?DeleteImagePlayer@GF@Util@@YAXPAX@Z
?DispatchFrameMsg@GF@Util@@YAJPAUIGFFrame@@PAUtagBaseArg@@PAHPAJH@Z
?DispatchMsg_LocationChange@MsgEvt@Util@@YAJPAUIGFFrame@@UtagPOINT@@1@Z
?DispatchMsg_Lock@MsgEvt@Util@@YAJPAUIGFFrame@@H@Z
?DispatchMsg_PaddingChange@MsgEvt@Util@@YAJPAUIGFFrame@@UtagRECT@@1@Z
?DispatchMsg_SizeChange@MsgEvt@Util@@YAJPAUIGFFrame@@UtagSIZE@@1@Z
?DwmEnableBlurBehindWindow@GF@Util@@YAHPAUHWND__@@HPAUHRGN__@@@Z
?DwmIsCompositionEnabled@GF@Util@@YAHXZ
?EmptyResource@GF@Util@@YAXPAX@Z
?ExtractOleDDData@GF@Util@@YA_NPAUIDataObject@@AAIAAPAE@Z
?FindDomodalChildren@GF@Util@@YAXPAUHWND__@@AAV?$vector@PAUHWND__@@V?$allocator@PAUHWND__@@@std@@@std@@@Z
?FlashFrameBorder@GF@Util@@YAJPAUIGFFrame@@EEKDKHKKPAUIGFAnimationEvent@@@Z
?FramePoint2WindowPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?FreeData@Metadata@Util@@YAJAAPA_W@Z
?FreeFlashLibrary@Flash@Util@@YAHHABVCTXStringW@@@Z
?FreeOleDDData@GF@Util@@YAXAAPAE@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAD@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAE@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAG@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAH@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAI@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAK@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAN@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPATtagARGB@@@Z
?GetAnchor@CGFFrameAnchorHelper@@QAEJPAK@Z
?GetAnchor@CGFFrameAnchorHelper@@QAEJPAPA_W@Z
?GetAnchorResult@CGFAnchor@@QAE?AVCRect@@PAVVCalcSizeSupporter@@PAUtagSIZE@@@Z
?GetAnchorResult@CGFFrameAnchorHelper@@QAE?AVCRect@@V2@0PAVVCalcSizeSupporter@@@Z
?GetBOOL@Metadata@Util@@YAJPAUITXData@@PA_WPAH@Z
?GetColorizeInfo@GF@Util@@YAXAAN00@Z
?GetCurrentModeId@GF@Util@@YAHXZ
?GetCurrentTexture@GF@Util@@YAPAUHGTEXTURE__@@PAX@Z
?GetCurrentTextureInfo@GF@Util@@YAHPAXPAUtagTextureInfo@12@@Z
?GetCustomFlashCLSID@Flash@Util@@YAHAAU_GUID@@@Z
?GetElementExtControl@GF@Util@@YAJPAUITXExtensionAgent@@PA_WPAUITXDataRead@@PAUIGFElement@@PAPAUIGFControl@@@Z
?GetElementExtProperties@GF@Util@@YAJPAUITXExtensionAgent@@HPA_WPAUITXDataRead@@PAPAUITXData@@@Z
?GetFlashPath@Flash@Util@@YAHAAVCTXStringW@@@Z
?GetFlashVersion@Flash@Util@@YAHAAK0@Z
?GetFrameByIndex@GFSpyFuncHelper@@YAJPAUIGFFrame@@HPAPAU2@@Z
?GetFrameCount@GFSpyFuncHelper@@YAJPAUIGFFrame@@PAI@Z
?GetFrameInfo@GFSpyFuncHelper@@YAJPAUIGFFrame@@PAUtagFrameInfo@@@Z
?GetGFFrameCount@@YAMXZ
?GetIEAcxContainer@IEEvent@Util@@YAXPAPAUIActiveXContainer@@@Z
?GetImageInfo@GF@Util@@YAHPAXPAUtagImageInfo@12@@Z
?GetImageSize@GF@Util@@YAHABVCTXStringW@@AAVCSize@@@Z
?GetImageType@GF@Util@@YAKABVCTXStringW@@@Z
?GetInterface@Metadata@Util@@YAJPAUITXData@@PA_WPAPAU3@@Z
?GetInterface@Metadata@Util@@YAJPAUITXData@@PA_WPAPAUITXArray@@@Z
?GetLightColor@Text@GF@Util@@YA?ATtagARGB@@T4@@Z
?GetLoadedFlashPath@Flash@Util@@YAHAAVCTXStringW@@@Z
?GetService@GF@Util@@YAJABU_GUID@@PA_WPAPAX@Z
?GetTextColor@Text@GF@Util@@YA?ATtagARGB@@T4@@Z
?GetTexture@GF@Util@@YAPAUHGTEXTURE__@@PAXI@Z
?GetTotalGFFrameCount@@YAMXZ
?GetVersionByPath@Flash@Util@@YAHPB_WAAK1@Z
?GetWindowByHWnd@GFSpyFuncHelper@@YAJPAUHWND__@@PAPAUIGFPopupWin@@@Z
?InitGFElementByTemplate@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?IsAccessibilityEnabled@GF@Util@@YAHXZ
?IsFrameReachable@GF@Util@@YAHPAUIGFFrame@@@Z
?IsPopupMenuTracked@GF@Util@@YAHXZ
?IsSetDPIAware@GF@Util@@YAHXZ
?IsValidGFElement@GF@Util@@YAHPAUIGFElement@@@Z
?LightInLightOut@GF@Util@@YAJPAUIGFFrame@@EEKDKHKKPAUIGFAnimationEvent@@@Z
?LoadIconEx@GF@Util@@YAJPA_WHAAPAUHICON__@@@Z
?LoadIconW@GF@Util@@YAJPA_WAAPAUHICON__@@@Z
?LoadImageW@GF@Util@@YAPAXPB_WIHHI@Z
?MessageBoxW@GF@Util@@YAJPAUIGFFrame@@PAPAUIGFSysMessageBox@@VCTXStringW@@2H@Z
?MinimizeResource@GF@Util@@YAXPAX@Z
?OnColorizeChanged@GF@Util@@YAJXZ
?OnElementExtEvent@GF@Util@@YAJPAUITXExtensionAgent@@HPAUITXDataRead@@1@Z
?PopupMenu@GF@Util@@YAXPAUIGFMenu@@PAUIGFFrame@@@Z
?PrintFrame@GF@Util@@YAPAUHGTEXTURE__@@PAUIGFFrame@@KH@Z
?PrintFrameEx@GF@Util@@YAPAUHGTEXTURE__@@PAUIGFFrame@@KH@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_W1@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WD@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WE@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WG@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WH@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WI@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WK@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WN@Z
?Put@Metadata@Util@@YAJPAUITXData@@PA_WTtagARGB@@@Z
?PutBOOL@Metadata@Util@@YAJPAUITXData@@PA_WH@Z
?PutInterface@Metadata@Util@@YAJPAUITXData@@PA_W0@Z
?PutInterface@Metadata@Util@@YAJPAUITXData@@PA_WPAUITXArray@@@Z
?RawCreateGFElementByMetadata@GF@Util@@YAJPAUITXData@@PAPAUIGFElement@@PAU4@PAUITXCore@@@Z
?RawCreateGFElementByMetadata@GF@Util@@YAJPAUITXData@@PAPAUIGFElement@@PAU4@PA_W@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?RawCreateGFObjectByName@GF@Util@@YAJPA_WPAPAUIGFElement@@@Z
?RawCreateGFObjectByName@GF@Util@@YAJPA_WPAPAUIGFElement@@PAUITXCore@@@Z
?RectExToRect@CGFAnchor@@IAE?AVCRect@@AAVCRectEx@@PAVVCalcSizeSupporter@@PAUtagSIZE@@@Z
?ReloadResource@GF@Util@@YAXPAX@Z
?RestoreResource@GF@Util@@YAXPAX@Z
?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?SetAnchor@CGFAnchor@@QAEXEVCRect@@@Z
?SetAnchor@CGFFrameAnchorHelper@@QAEJK@Z
?SetAnchor@CGFFrameAnchorHelper@@QAEJPA_W@Z
?SetColorizeInfo@GF@Util@@YAXNNN@Z
?SetCurrentMode@GF@Util@@YAJH@Z
?SetCustomCheckValidVersion@Flash@Util@@YAP6AHKK@ZP6AHKK@Z@Z
?SetCustomFlashCLSID@Flash@Util@@YAHABU_GUID@@@Z
?SetCustomFlashOcxState@Flash@Util@@YAXW4FlashOcxState@12@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?SetDPIAware@GF@Util@@YAXXZ
?SetForegroundWindow@GF@Util@@YAXPAUIGFWin@@@Z
?SetFrameAttribute@GFSpyFuncHelper@@YAJPAUIGFFrame@@PB_W1@Z
?SetImageCacheCount@@YAXK@Z
?SetLoadCustomFlashLibraryFlag@Flash@Util@@YAHH@Z
?SetModeAttr@GF@Util@@YAJHPAUITXData@@@Z
?SetPermitActiveFileList@IEActiveX@Util@@YAHPAUITXArrayRead@@@Z
?SetPermitActiveXClsidList@IEActiveX@Util@@YAHPAUITXArrayRead@@@Z
?SetPermitEnable@IEActiveX@Util@@YAHH@Z
?SetStopCreateCompoent@GF@Util@@YAXXZ
?SetUseGFFontGDIMode@GF@Util@@YAXH@Z
?SlideFrame@GF@Util@@YAJPAUIGFFrame@@VCRect@@1KDKHKKPAUIGFAnimationEvent@@@Z
?StopFlashFrameBorder@GF@Util@@YAJPAUIGFFrame@@@Z
?StopLightInLightOut@GF@Util@@YAJPAUIGFFrame@@@Z
?StopSlideFrame@GF@Util@@YAJPAUIGFFrame@@@Z
?TopFrameFromPoint@GF@Util@@YAJPAUIGFFrame@@PBUtagPOINT@@PAPAU3@@Z
?TopFrameInfoFromPoint@GFSpyFuncHelper@@YAJPAUIGFFrame@@PBUtagPOINT@@PAUtagFrameInfo@@@Z
?TransMd2GFElement@Metadata@Util@@YAJPAUITXData@@PAPAUIGFElement@@PA_W@Z
?TransStringValue@Metadata@Util@@YA?AVCTXBSTR@@V3@@Z
?TryRegisterClassFromMetadata@Script@@YA_NPA_WPAUITXData@@@Z
?UnadviseWebBrowser@IEEvent@Util@@YAHPAUIWebBrowser2@@K@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Log4cplus.dll
.dll windows:5 windows x86 arch:x86

95b337689b75713a85ec6127e83e38db

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

84:e1:00:80:cb:66:22:f0:97:d5:71:c7:94:f5:c6:47:e9:03:0a:5c:83:49:24:a2:1c:18:8f:c9:41:20:8c:ab
Signer

Actual PE Digest

84:e1:00:80:cb:66:22:f0:97:d5:71:c7:94:f5:c6:47:e9:03:0a:5c:83:49:24:a2:1c:18:8f:c9:41:20:8c:ab

Digest Algorithm

sha256

PE Digest Matches

true

a0:63:d7:86:d2:b8:41:4d:c5:36:e5:05:3a:63:cc:36:7c:b0:43:c0
Signer

Actual PE Digest

a0:63:d7:86:d2:b8:41:4d:c5:36:e5:05:3a:63:cc:36:7c:b0:43:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\Log4cplus.pdb

Imports

ws2_32

ntohl
ntohs
WSACloseEvent
WSASetEvent
ioctlsocket
gethostname
connect
WSAStartup
htonl
WSASocketW
WSAGetLastError
htons
WSAEventSelect
setsockopt
WSACleanup
recv
bind
WSACreateEvent
closesocket
WSAResetEvent
gethostbyname
send
listen
WSAStringToAddressW
WSAWaitForMultipleEvents
accept

kernel32

DecodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
EncodePointer
OutputDebugStringW
GetFileType
GetConsoleScreenBufferInfo
GetStdHandle
WriteConsoleW
GetConsoleMode
WriteFile
CreateMutexW
TlsGetValue
WaitForSingleObject
SetEvent
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
EnterCriticalSection
ResetEvent
CreateSemaphoreW
CreateEventW
DeleteCriticalSection
ReleaseMutex
CloseHandle
GetCurrentThread
TlsSetValue
QueueUserAPC
TlsAlloc
TlsFree
UnlockFile
GetLastError
LockFileEx
GetCurrentProcess
GetCurrentProcessId
Sleep
InterlockedCompareExchange
InterlockedExchange
GetCurrentThreadId
SwitchToThread
GetSystemTimeAsFileTime
AllocConsole
SetConsoleTextAttribute

advapi32

OpenProcessToken
GetTokenInformation
CopySid
RegCreateKeyExW
DeregisterEventSource
ReportEventW
GetLengthSid
RegCloseKey
RegSetValueExW
RegisterEventSourceW

msvcp100

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??1_Container_base12@std@@QAE@XZ
?_BADOFF@std@@3_JB
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Xruntime_error@std@@YAXPBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?classic@locale@std@@SAABV12@XZ
??0_Locimp@locale@std@@AAE@_N@Z
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubsetbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PA_W_J@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??1?$codecvt@_WDH@std@@MAE@XZ
??0?$codecvt@_WDH@std@@QAE@I@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
??0_Locimp@locale@std@@AAE@ABV012@@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

msvcr100

_localtime64
__CxxFrameHandler3
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_CxxThrowException
memcpy
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
wcslen
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
strlen
_wgetenv
strcmp
fputwc
_unlock_file
ungetwc
ungetc
fgetpos
_fseeki64
fflush
atoi
_errno
fgetc
_wremove
fsetpos
memset
setvbuf
_lock_file
fgetwc
memcpy_s
fwrite
_wrename
wcscpy_s
fclose
_wstat64i32
_wsopen_s
_get_osfhandle
_close
iswcntrl
memcmp
free
calloc
iswspace
_vswprintf_p
towlower
towupper
_beginthreadex
_mktime64
_gmtime64_s
wcsftime

Exports

Exports

??0?$FactoryRegistry@VAppenderFactory@spi@log4cplus@@@spi@log4cplus@@QAE@XZ
??0?$FactoryRegistry@VFilterFactory@spi@log4cplus@@@spi@log4cplus@@QAE@XZ
??0?$FactoryRegistry@VLayoutFactory@spi@log4cplus@@@spi@log4cplus@@QAE@XZ
??0?$FactoryRegistry@VLocaleFactory@spi@log4cplus@@@spi@log4cplus@@QAE@XZ
??0AbstractSocket@helpers@log4cplus@@QAE@ABV012@@Z
??0AbstractSocket@helpers@log4cplus@@QAE@HW4SocketState@12@H@Z
??0AbstractSocket@helpers@log4cplus@@QAE@XZ
??0AbstractThread@thread@log4cplus@@QAE@XZ
??0Appender@log4cplus@@QAE@AAV01@@Z
??0Appender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0Appender@log4cplus@@QAE@XZ
??0AppenderAttachable@spi@log4cplus@@QAE@ABV012@@Z
??0AppenderAttachable@spi@log4cplus@@QAE@XZ
??0AppenderAttachableImpl@helpers@log4cplus@@QAE@XZ
??0AppenderFactory@spi@log4cplus@@QAE@ABV012@@Z
??0AppenderFactory@spi@log4cplus@@QAE@XZ
??0AsyncAppender@log4cplus@@QAE@ABV?$SharedObjectPtr@VAppender@log4cplus@@@helpers@1@I@Z
??0AsyncAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0BaseFactory@spi@log4cplus@@QAE@ABV012@@Z
??0BaseFactory@spi@log4cplus@@QAE@XZ
??0BasicConfigurator@log4cplus@@QAE@AAVHierarchy@1@_N@Z
??0ConfigureAndWatchThread@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
??0ConnectorThread@SocketAppender@log4cplus@@QAE@AAV12@@Z
??0ConsoleAppender@log4cplus@@QAE@AAV01@@Z
??0ConsoleAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0ConsoleAppender@log4cplus@@QAE@_N0@Z
??0DailyRollingFileAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4DailyRollingFileSchedule@1@_NH@Z
??0DailyRollingFileAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0DefaultLoggerFactory@log4cplus@@QAE@ABV01@@Z
??0DefaultLoggerFactory@log4cplus@@QAE@XZ
??0DenyAllFilter@spi@log4cplus@@QAE@ABV012@@Z
??0DenyAllFilter@spi@log4cplus@@QAE@ABVProperties@helpers@2@@Z
??0DenyAllFilter@spi@log4cplus@@QAE@XZ
??0DiagnosticContext@log4cplus@@QAE@$$QAU01@@Z
??0DiagnosticContext@log4cplus@@QAE@ABU01@@Z
??0DiagnosticContext@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0DiagnosticContext@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBU01@@Z
??0DiagnosticContext@log4cplus@@QAE@PB_W@Z
??0DiagnosticContext@log4cplus@@QAE@PB_WPBU01@@Z
??0ErrorHandler@log4cplus@@QAE@ABV01@@Z
??0ErrorHandler@log4cplus@@QAE@XZ
??0FairMutex@thread@log4cplus@@QAE@XZ
??0FileAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H_N@Z
??0FileAppender@log4cplus@@QAE@ABVProperties@helpers@1@H@Z
??0FileInfo@helpers@log4cplus@@QAE@XZ
??0Filter@spi@log4cplus@@QAE@ABV012@@Z
??0Filter@spi@log4cplus@@QAE@XZ
??0FilterFactory@spi@log4cplus@@QAE@ABV012@@Z
??0FilterFactory@spi@log4cplus@@QAE@XZ
??0Hierarchy@log4cplus@@QAE@XZ
??0HierarchyLocker@log4cplus@@QAE@AAVHierarchy@1@@Z
??0InternalLoggingEvent@spi@log4cplus@@QAE@ABV012@@Z
??0InternalLoggingEvent@spi@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H0ABV?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@00VTime@helpers@2@0H@Z
??0InternalLoggingEvent@spi@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H0PBDH@Z
??0InternalLoggingEvent@spi@log4cplus@@QAE@XZ
??0Layout@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0Layout@log4cplus@@QAE@XZ
??0LayoutFactory@spi@log4cplus@@QAE@ABV012@@Z
??0LayoutFactory@spi@log4cplus@@QAE@XZ
??0LocaleFactory@spi@log4cplus@@QAE@ABV012@@Z
??0LocaleFactory@spi@log4cplus@@QAE@XZ
??0LockFile@helpers@log4cplus@@QAE@ABV012@@Z
??0LockFile@helpers@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0Log4jUdpAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
??0Log4jUdpAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0LogLevelManager@log4cplus@@QAE@XZ
??0LogLevelMatchFilter@spi@log4cplus@@QAE@ABV012@@Z
??0LogLevelMatchFilter@spi@log4cplus@@QAE@ABVProperties@helpers@2@@Z
??0LogLevelMatchFilter@spi@log4cplus@@QAE@XZ
??0LogLevelRangeFilter@spi@log4cplus@@QAE@ABV012@@Z
??0LogLevelRangeFilter@spi@log4cplus@@QAE@ABVProperties@helpers@2@@Z
??0LogLevelRangeFilter@spi@log4cplus@@QAE@XZ
??0LogLog@helpers@log4cplus@@QAE@XZ
??0LogLogUser@helpers@log4cplus@@QAE@ABV012@@Z
??0LogLogUser@helpers@log4cplus@@QAE@XZ
??0Logger@log4cplus@@AAE@PAVLoggerImpl@spi@1@@Z
??0Logger@log4cplus@@QAE@$$QAV01@@Z
??0Logger@log4cplus@@QAE@ABV01@@Z
??0Logger@log4cplus@@QAE@XZ
??0LoggerFactory@spi@log4cplus@@QAE@ABV012@@Z
??0LoggerFactory@spi@log4cplus@@QAE@XZ
??0LoggerImpl@spi@log4cplus@@IAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@@Z
??0MDC@log4cplus@@QAE@ABV01@@Z
??0MDC@log4cplus@@QAE@XZ
??0ManualResetEvent@thread@log4cplus@@QAE@_N@Z
??0Mutex@thread@log4cplus@@QAE@W4Type@012@@Z
??0NDC@log4cplus@@QAE@XZ
??0NDCContextCreator@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0NDCContextCreator@log4cplus@@QAE@PB_W@Z
??0NTEventLogAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
??0NTEventLogAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0NullAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0NullAppender@log4cplus@@QAE@XZ
??0ObjectRegistryBase@spi@log4cplus@@IAE@XZ
??0OnlyOnceErrorHandler@log4cplus@@QAE@ABV01@@Z
??0OnlyOnceErrorHandler@log4cplus@@QAE@XZ
??0PatternLayout@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0PatternLayout@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0Properties@helpers@log4cplus@@QAE@AAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@@Z
??0Properties@helpers@log4cplus@@QAE@ABV012@@Z
??0Properties@helpers@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
??0Properties@helpers@log4cplus@@QAE@XZ
??0PropertyConfigurator@log4cplus@@QAE@AAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@AAVHierarchy@1@I@Z
??0PropertyConfigurator@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@1@I@Z
??0PropertyConfigurator@log4cplus@@QAE@ABVProperties@helpers@1@AAVHierarchy@1@I@Z
??0Queue@thread@log4cplus@@QAE@I@Z
??0RollingFileAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@JH_N@Z
??0RollingFileAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0RootLogger@spi@log4cplus@@QAE@AAVHierarchy@2@H@Z
??0Semaphore@thread@log4cplus@@QAE@II@Z
??0ServerSocket@helpers@log4cplus@@QAE@ABV012@@Z
??0ServerSocket@helpers@log4cplus@@QAE@G@Z
??0SharedMutex@thread@log4cplus@@QAE@XZ
??0SharedObject@helpers@log4cplus@@IAE@ABV012@@Z
??0SharedObject@helpers@log4cplus@@IAE@XZ
??0SimpleLayout@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0SimpleLayout@log4cplus@@QAE@XZ
??0Socket@helpers@log4cplus@@QAE@ABV012@@Z
??0Socket@helpers@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@G_N@Z
??0Socket@helpers@log4cplus@@QAE@HW4SocketState@12@H@Z
??0Socket@helpers@log4cplus@@QAE@XZ
??0SocketAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@G0@Z
??0SocketAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0SocketBuffer@helpers@log4cplus@@QAE@I@Z
??0StringMatchFilter@spi@log4cplus@@QAE@ABV012@@Z
??0StringMatchFilter@spi@log4cplus@@QAE@ABVProperties@helpers@2@@Z
??0StringMatchFilter@spi@log4cplus@@QAE@XZ
??0SysLogAppender@log4cplus@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0H0@Z
??0SysLogAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0TTCCLayout@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0TTCCLayout@log4cplus@@QAE@_N@Z
??0Time@helpers@log4cplus@@QAE@XZ
??0Time@helpers@log4cplus@@QAE@_J@Z
??0Time@helpers@log4cplus@@QAE@_JJ@Z
??0Win32ConsoleAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0Win32ConsoleAppender@log4cplus@@QAE@_N0I@Z
??0Win32DebugAppender@log4cplus@@QAE@ABVProperties@helpers@1@@Z
??0Win32DebugAppender@log4cplus@@QAE@XZ
??0snprintf_buf@helpers@log4cplus@@QAE@ABV012@@Z
??0snprintf_buf@helpers@log4cplus@@QAE@XZ
??1?$FactoryRegistry@VAppenderFactory@spi@log4cplus@@@spi@log4cplus@@UAE@XZ
??1?$FactoryRegistry@VFilterFactory@spi@log4cplus@@@spi@log4cplus@@UAE@XZ
??1?$FactoryRegistry@VLayoutFactory@spi@log4cplus@@@spi@log4cplus@@UAE@XZ
??1?$FactoryRegistry@VLocaleFactory@spi@log4cplus@@@spi@log4cplus@@UAE@XZ
??1AbstractSocket@helpers@log4cplus@@UAE@XZ
??1AbstractThread@thread@log4cplus@@MAE@XZ
??1Appender@log4cplus@@UAE@XZ
??1AppenderAttachable@spi@log4cplus@@UAE@XZ
??1AppenderAttachableImpl@helpers@log4cplus@@UAE@XZ
??1AppenderFactory@spi@log4cplus@@UAE@XZ
??1AsyncAppender@log4cplus@@UAE@XZ
??1BaseFactory@spi@log4cplus@@UAE@XZ
??1BasicConfigurator@log4cplus@@UAE@XZ
??1ConfigureAndWatchThread@log4cplus@@UAE@XZ
??1ConnectorThread@SocketAppender@log4cplus@@UAE@XZ
??1ConsoleAppender@log4cplus@@UAE@XZ
??1DailyRollingFileAppender@log4cplus@@UAE@XZ
??1DefaultLoggerFactory@log4cplus@@UAE@XZ
??1DenyAllFilter@spi@log4cplus@@UAE@XZ
??1DiagnosticContext@log4cplus@@QAE@XZ
??1ErrorHandler@log4cplus@@UAE@XZ
??1FairMutex@thread@log4cplus@@QAE@XZ
??1FileAppender@log4cplus@@UAE@XZ
??1Filter@spi@log4cplus@@UAE@XZ
??1FilterFactory@spi@log4cplus@@UAE@XZ
??1Hierarchy@log4cplus@@UAE@XZ
??1HierarchyLocker@log4cplus@@QAE@XZ
??1InternalLoggingEvent@spi@log4cplus@@UAE@XZ
??1Layout@log4cplus@@UAE@XZ
??1LayoutFactory@spi@log4cplus@@UAE@XZ
??1LocaleFactory@spi@log4cplus@@UAE@XZ
??1LockFile@helpers@log4cplus@@QAE@XZ
??1Log4jUdpAppender@log4cplus@@UAE@XZ
??1LogLevelManager@log4cplus@@QAE@XZ
??1LogLevelMatchFilter@spi@log4cplus@@UAE@XZ
??1LogLevelRangeFilter@spi@log4cplus@@UAE@XZ
??1LogLog@helpers@log4cplus@@UAE@XZ
??1LogLogUser@helpers@log4cplus@@UAE@XZ
??1Logger@log4cplus@@UAE@XZ
??1LoggerFactory@spi@log4cplus@@UAE@XZ
??1LoggerImpl@spi@log4cplus@@UAE@XZ
??1MDC@log4cplus@@UAE@XZ
??1ManualResetEvent@thread@log4cplus@@QAE@XZ
??1Mutex@thread@log4cplus@@QAE@XZ
??1NDC@log4cplus@@UAE@XZ
??1NDCContextCreator@log4cplus@@QAE@XZ
??1NTEventLogAppender@log4cplus@@UAE@XZ
??1NullAppender@log4cplus@@UAE@XZ
??1ObjectRegistryBase@spi@log4cplus@@MAE@XZ
??1OnlyOnceErrorHandler@log4cplus@@UAE@XZ
??1PatternLayout@log4cplus@@UAE@XZ
??1Properties@helpers@log4cplus@@UAE@XZ
??1PropertyConfigurator@log4cplus@@UAE@XZ
??1Queue@thread@log4cplus@@UAE@XZ
??1RollingFileAppender@log4cplus@@UAE@XZ
??1RootLogger@spi@log4cplus@@UAE@XZ
??1Semaphore@thread@log4cplus@@QAE@XZ
??1ServerSocket@helpers@log4cplus@@UAE@XZ
??1SharedMutex@thread@log4cplus@@QAE@XZ
??1SharedObject@helpers@log4cplus@@MAE@XZ
??1SimpleLayout@log4cplus@@UAE@XZ
??1Socket@helpers@log4cplus@@UAE@XZ
??1SocketAppender@log4cplus@@UAE@XZ
??1SocketBuffer@helpers@log4cplus@@UAE@XZ
??1StringMatchFilter@spi@log4cplus@@UAE@XZ
??1SysLogAppender@log4cplus@@UAE@XZ
??1TTCCLayout@log4cplus@@UAE@XZ
??1Win32ConsoleAppender@log4cplus@@UAE@XZ
??1Win32DebugAppender@log4cplus@@UAE@XZ
??1snprintf_buf@helpers@log4cplus@@QAE@XZ
??4AbstractSocket@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4Appender@log4cplus@@QAEAAV01@AAV01@@Z
??4AppenderAttachable@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4AppenderFactory@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4BaseFactory@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4ConsoleAppender@log4cplus@@QAEAAV01@AAV01@@Z
??4DefaultLoggerFactory@log4cplus@@QAEAAV01@ABV01@@Z
??4DenyAllFilter@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4DiagnosticContext@log4cplus@@QAEAAU01@$$QAU01@@Z
??4DiagnosticContext@log4cplus@@QAEAAU01@ABU01@@Z
??4ErrorHandler@log4cplus@@QAEAAV01@ABV01@@Z
??4FileInfo@helpers@log4cplus@@QAEAAU012@ABU012@@Z
??4Filter@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4FilterFactory@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4InternalLoggingEvent@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4LayoutFactory@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4LocaleFactory@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4LockFile@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4LogLevelMatchFilter@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4LogLevelRangeFilter@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4LogLogUser@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4Logger@log4cplus@@QAEAAV01@$$QAV01@@Z
??4Logger@log4cplus@@QAEAAV01@ABV01@@Z
??4LoggerFactory@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4MDC@log4cplus@@QAEAAV01@ABV01@@Z
??4NDCContextCreator@log4cplus@@QAEAAV01@ABV01@@Z
??4OnlyOnceErrorHandler@log4cplus@@QAEAAV01@ABV01@@Z
??4Properties@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4ServerSocket@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4SharedObject@helpers@log4cplus@@IAEAAV012@ABV012@@Z
??4Socket@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4StringMatchFilter@spi@log4cplus@@QAEAAV012@ABV012@@Z
??4Time@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??4snprintf_buf@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??8helpers@log4cplus@@YA_NABVTime@01@0@Z
??9helpers@log4cplus@@YA_NABVTime@01@0@Z
??Dhelpers@log4cplus@@YA?BVTime@01@ABV201@J@Z
??Ghelpers@log4cplus@@YA?BVTime@01@ABV201@0@Z
??Hhelpers@log4cplus@@YA?BVTime@01@ABV201@0@Z
??Khelpers@log4cplus@@YA?BVTime@01@ABV201@J@Z
??Mhelpers@log4cplus@@YA_NABVTime@01@0@Z
??Nhelpers@log4cplus@@YA_NABVTime@01@0@Z
??Ohelpers@log4cplus@@YA_NABVTime@01@0@Z
??Phelpers@log4cplus@@YA_NABVTime@01@0@Z
??XTime@helpers@log4cplus@@QAEAAV012@J@Z
??YTime@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??ZTime@helpers@log4cplus@@QAEAAV012@ABV012@@Z
??_0Time@helpers@log4cplus@@QAEAAV012@J@Z
??_7?$FactoryRegistry@VAppenderFactory@spi@log4cplus@@@spi@log4cplus@@6B@
??_7?$FactoryRegistry@VFilterFactory@spi@log4cplus@@@spi@log4cplus@@6B@
??_7?$FactoryRegistry@VLayoutFactory@spi@log4cplus@@@spi@log4cplus@@6B@
??_7?$FactoryRegistry@VLocaleFactory@spi@log4cplus@@@spi@log4cplus@@6B@
??_7AbstractSocket@helpers@log4cplus@@6B@
??_7AbstractThread@thread@log4cplus@@6B012@@
??_7AbstractThread@thread@log4cplus@@6BSharedObject@helpers@2@@
??_7Appender@log4cplus@@6B01@@
??_7Appender@log4cplus@@6BSharedObject@helpers@1@@
??_7AppenderAttachable@spi@log4cplus@@6B@
??_7AppenderAttachableImpl@helpers@log4cplus@@6B@
??_7AppenderFactory@spi@log4cplus@@6B@
??_7AsyncAppender@log4cplus@@6B@
??_7AsyncAppender@log4cplus@@6BAppender@1@@
??_7AsyncAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7BaseFactory@spi@log4cplus@@6B@
??_7BasicConfigurator@log4cplus@@6B@
??_7ConfigureAndWatchThread@log4cplus@@6B@
??_7ConnectorThread@SocketAppender@log4cplus@@6BAbstractThread@thread@2@@
??_7ConnectorThread@SocketAppender@log4cplus@@6BSharedObject@helpers@2@@
??_7ConsoleAppender@log4cplus@@6BAppender@1@@
??_7ConsoleAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7DailyRollingFileAppender@log4cplus@@6BAppender@1@@
??_7DailyRollingFileAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7DefaultLoggerFactory@log4cplus@@6B@
??_7DenyAllFilter@spi@log4cplus@@6BFilter@12@@
??_7DenyAllFilter@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7ErrorHandler@log4cplus@@6B@
??_7FileAppender@log4cplus@@6BAppender@1@@
??_7FileAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7Filter@spi@log4cplus@@6B012@@
??_7Filter@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7FilterFactory@spi@log4cplus@@6B@
??_7Hierarchy@log4cplus@@6B@
??_7InternalLoggingEvent@spi@log4cplus@@6B@
??_7Layout@log4cplus@@6B@
??_7LayoutFactory@spi@log4cplus@@6B@
??_7LocaleFactory@spi@log4cplus@@6B@
??_7Log4jUdpAppender@log4cplus@@6BAppender@1@@
??_7Log4jUdpAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7LogLevelMatchFilter@spi@log4cplus@@6BFilter@12@@
??_7LogLevelMatchFilter@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7LogLevelRangeFilter@spi@log4cplus@@6BFilter@12@@
??_7LogLevelRangeFilter@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7LogLog@helpers@log4cplus@@6B@
??_7LogLogUser@helpers@log4cplus@@6B@
??_7Logger@log4cplus@@6B@
??_7LoggerFactory@spi@log4cplus@@6B@
??_7LoggerImpl@spi@log4cplus@@6BAppenderAttachableImpl@helpers@2@@
??_7LoggerImpl@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7MDC@log4cplus@@6B@
??_7NDC@log4cplus@@6B@
??_7NTEventLogAppender@log4cplus@@6BAppender@1@@
??_7NTEventLogAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7NullAppender@log4cplus@@6BAppender@1@@
??_7NullAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7ObjectRegistryBase@spi@log4cplus@@6B@
??_7OnlyOnceErrorHandler@log4cplus@@6B@
??_7PatternLayout@log4cplus@@6B@
??_7Properties@helpers@log4cplus@@6B@
??_7PropertyConfigurator@log4cplus@@6B@
??_7Queue@thread@log4cplus@@6B@
??_7RollingFileAppender@log4cplus@@6BAppender@1@@
??_7RollingFileAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7RootLogger@spi@log4cplus@@6BAppenderAttachableImpl@helpers@2@@
??_7RootLogger@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7ServerSocket@helpers@log4cplus@@6B@
??_7SharedObject@helpers@log4cplus@@6B@
??_7SimpleLayout@log4cplus@@6B@
??_7Socket@helpers@log4cplus@@6B@
??_7SocketAppender@log4cplus@@6BAppender@1@@
??_7SocketAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7SocketBuffer@helpers@log4cplus@@6B@
??_7StringMatchFilter@spi@log4cplus@@6BFilter@12@@
??_7StringMatchFilter@spi@log4cplus@@6BSharedObject@helpers@2@@
??_7SysLogAppender@log4cplus@@6BAppender@1@@
??_7SysLogAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7TTCCLayout@log4cplus@@6B@
??_7Win32ConsoleAppender@log4cplus@@6BAppender@1@@
??_7Win32ConsoleAppender@log4cplus@@6BSharedObject@helpers@1@@
??_7Win32DebugAppender@log4cplus@@6BAppender@1@@
??_7Win32DebugAppender@log4cplus@@6BSharedObject@helpers@1@@
??_8AbstractThread@thread@log4cplus@@7B@
??_8Appender@log4cplus@@7B@
??_8AsyncAppender@log4cplus@@7B@
??_8ConnectorThread@SocketAppender@log4cplus@@7B@
??_8ConsoleAppender@log4cplus@@7B@
??_8DailyRollingFileAppender@log4cplus@@7B@
??_8DenyAllFilter@spi@log4cplus@@7B@
??_8FileAppender@log4cplus@@7B@
??_8Filter@spi@log4cplus@@7B@
??_8Log4jUdpAppender@log4cplus@@7B@
??_8LogLevelMatchFilter@spi@log4cplus@@7B@
??_8LogLevelRangeFilter@spi@log4cplus@@7B@
??_8LoggerImpl@spi@log4cplus@@7B@
??_8NTEventLogAppender@log4cplus@@7B@
??_8NullAppender@log4cplus@@7B@
??_8Queue@thread@log4cplus@@7B@
??_8RollingFileAppender@log4cplus@@7B@
??_8RootLogger@spi@log4cplus@@7B@
??_8SocketAppender@log4cplus@@7B@
??_8StringMatchFilter@spi@log4cplus@@7B@
??_8SysLogAppender@log4cplus@@7B@
??_8Win32ConsoleAppender@log4cplus@@7B@
??_8Win32DebugAppender@log4cplus@@7B@
??_DAbstractThread@thread@log4cplus@@IAEXXZ
??_DAppender@log4cplus@@QAEXXZ
??_DAsyncAppender@log4cplus@@QAEXXZ
??_DConnectorThread@SocketAppender@log4cplus@@QAEXXZ
??_DConsoleAppender@log4cplus@@QAEXXZ
??_DDailyRollingFileAppender@log4cplus@@QAEXXZ
??_DDenyAllFilter@spi@log4cplus@@QAEXXZ
??_DFileAppender@log4cplus@@QAEXXZ
??_DFilter@spi@log4cplus@@QAEXXZ
??_DLog4jUdpAppender@log4cplus@@QAEXXZ
??_DLogLevelMatchFilter@spi@log4cplus@@QAEXXZ
??_DLogLevelRangeFilter@spi@log4cplus@@QAEXXZ
??_DLoggerImpl@spi@log4cplus@@QAEXXZ
??_DNTEventLogAppender@log4cplus@@QAEXXZ
??_DNullAppender@log4cplus@@QAEXXZ
??_DQueue@thread@log4cplus@@QAEXXZ
??_DRollingFileAppender@log4cplus@@QAEXXZ
??_DRootLogger@spi@log4cplus@@QAEXXZ
??_DSocketAppender@log4cplus@@QAEXXZ
??_DStringMatchFilter@spi@log4cplus@@QAEXXZ
??_DSysLogAppender@log4cplus@@QAEXXZ
??_DWin32ConsoleAppender@log4cplus@@QAEXXZ
??_DWin32DebugAppender@log4cplus@@QAEXXZ
??_FBasicConfigurator@log4cplus@@QAEXXZ
??_FConsoleAppender@log4cplus@@QAEXXZ
??_FManualResetEvent@thread@log4cplus@@QAEXXZ
??_FMutex@thread@log4cplus@@QAEXXZ
??_FQueue@thread@log4cplus@@QAEXXZ
??_FTTCCLayout@log4cplus@@QAEXXZ
??_FWin32ConsoleAppender@log4cplus@@QAEXXZ
?DISABLE_OFF@Hierarchy@log4cplus@@2HB
?DISABLE_OVERRIDE@Hierarchy@log4cplus@@2HB
?INVALID_SOCKET_VALUE@helpers@log4cplus@@3HB
?PROPERTIES_COMMENT_CHAR@Properties@helpers@log4cplus@@2_WB
?accept@ServerSocket@helpers@log4cplus@@QAE?AVSocket@23@XZ
?acceptSocket@helpers@log4cplus@@YAHHAAW4SocketState@12@@Z
?addAppender@AppenderAttachableImpl@helpers@log4cplus@@UAEXV?$SharedObjectPtr@VAppender@log4cplus@@@23@@Z
?addAppender@HierarchyLocker@log4cplus@@QAEXAAVLogger@2@AAV?$SharedObjectPtr@VAppender@log4cplus@@@helpers@2@@Z
?addAppender@Logger@log4cplus@@UAEXV?$SharedObjectPtr@VAppender@log4cplus@@@helpers@2@@Z
?addAppender@PropertyConfigurator@log4cplus@@MAEXAAVLogger@2@AAV?$SharedObjectPtr@VAppender@log4cplus@@@helpers@2@@Z
?addReference@SharedObject@helpers@log4cplus@@QBEXXZ
?addRegistryInfo@NTEventLogAppender@log4cplus@@IAEXXZ
?append@AsyncAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@ConsoleAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@DailyRollingFileAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@FileAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@Log4jUdpAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@NTEventLogAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@NullAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@RollingFileAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@SocketAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@SysLogAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@Win32ConsoleAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?append@Win32DebugAppender@log4cplus@@MAEXABVInternalLoggingEvent@spi@2@@Z
?appendBuffer@SocketBuffer@helpers@log4cplus@@QAEXABV123@@Z
?appendByte@SocketBuffer@helpers@log4cplus@@QAEXE@Z
?appendFilter@Filter@spi@log4cplus@@QAEXV?$SharedObjectPtr@VFilter@spi@log4cplus@@@helpers@3@@Z
?appendInt@SocketBuffer@helpers@log4cplus@@QAEXI@Z
?appendLoopOnAppenders@AppenderAttachableImpl@helpers@log4cplus@@QBEHABVInternalLoggingEvent@spi@3@@Z
?appendRemote@SysLogAppender@log4cplus@@IAEXABVInternalLoggingEvent@spi@2@@Z
?appendShort@SocketBuffer@helpers@log4cplus@@QAEXG@Z
?appendString@SocketBuffer@helpers@log4cplus@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?assertion@Logger@log4cplus@@QBEX_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?blockAllSignals@thread@log4cplus@@YAXXZ
?calculateNextRolloverTime@DailyRollingFileAppender@log4cplus@@IBE?AVTime@helpers@2@ABV342@@Z
?callAppenders@Logger@log4cplus@@QBEXABVInternalLoggingEvent@spi@2@@Z
?callAppenders@LoggerImpl@spi@log4cplus@@UAEXABVInternalLoggingEvent@23@@Z
?checkFilter@spi@log4cplus@@YA?AW4FilterResult@12@PBVFilter@12@ABVInternalLoggingEvent@12@@Z
?clear@Hierarchy@log4cplus@@UAEXXZ
?clear@MDC@log4cplus@@QAEXXZ
?clear@NDC@log4cplus@@QAEXXZ
?clear@ObjectRegistryBase@spi@log4cplus@@MAEXXZ
?clear_tostringstream@detail@log4cplus@@YAXAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?clone@InternalLoggingEvent@spi@log4cplus@@UBE?AV?$auto_ptr@VInternalLoggingEvent@spi@log4cplus@@@std@@XZ
?cloneStack@NDC@log4cplus@@QBE?AV?$deque@UDiagnosticContext@log4cplus@@V?$allocator@UDiagnosticContext@log4cplus@@@std@@@std@@XZ
?close@AbstractSocket@helpers@log4cplus@@UAEXXZ
?close@AsyncAppender@log4cplus@@UAEXXZ
?close@ConsoleAppender@log4cplus@@UAEXXZ
?close@DailyRollingFileAppender@log4cplus@@UAEXXZ
?close@FileAppender@log4cplus@@UAEXXZ
?close@LockFile@helpers@log4cplus@@ABEXXZ
?close@Log4jUdpAppender@log4cplus@@UAEXXZ
?close@NTEventLogAppender@log4cplus@@UAEXXZ
?close@NullAppender@log4cplus@@UAEXXZ
?close@SocketAppender@log4cplus@@UAEXXZ
?close@SysLogAppender@log4cplus@@UAEXXZ
?close@Win32ConsoleAppender@log4cplus@@UAEXXZ
?close@Win32DebugAppender@log4cplus@@UAEXXZ
?closeNestedAppenders@Logger@log4cplus@@QBEXXZ
?closeNestedAppenders@LoggerImpl@spi@log4cplus@@UAEXXZ
?closeSocket@helpers@log4cplus@@YAHH@Z
?configure@PropertyConfigurator@log4cplus@@UAEXXZ
?configureAdditivity@PropertyConfigurator@log4cplus@@IAEXXZ
?configureAppenders@PropertyConfigurator@log4cplus@@IAEXXZ
?configureLogger@PropertyConfigurator@log4cplus@@IAEXVLogger@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?configureLoggers@PropertyConfigurator@log4cplus@@IAEXXZ
?connectSocket@helpers@log4cplus@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@G_NAAW4SocketState@12@@Z
?convertToBuffer@helpers@log4cplus@@YAXAAVSocketBuffer@12@ABVInternalLoggingEvent@spi@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?copy@AbstractSocket@helpers@log4cplus@@MAEXABV123@@Z
?debug@LogLog@helpers@log4cplus@@QBEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?debug@LogLog@helpers@log4cplus@@QBEXPB_W@Z
?decide@DenyAllFilter@spi@log4cplus@@UBE?AW4FilterResult@23@ABVInternalLoggingEvent@23@@Z
?decide@LogLevelMatchFilter@spi@log4cplus@@UBE?AW4FilterResult@23@ABVInternalLoggingEvent@23@@Z
?decide@LogLevelRangeFilter@spi@log4cplus@@UBE?AW4FilterResult@23@ABVInternalLoggingEvent@23@@Z
?decide@StringMatchFilter@spi@log4cplus@@UBE?AW4FilterResult@23@ABVInternalLoggingEvent@23@@Z
?deleteObject@?$FactoryRegistry@VAppenderFactory@spi@log4cplus@@@spi@log4cplus@@MBEXPAX@Z
?deleteObject@?$FactoryRegistry@VFilterFactory@spi@log4cplus@@@spi@log4cplus@@MBEXPAX@Z
?deleteObject@?$FactoryRegistry@VLayoutFactory@spi@log4cplus@@@spi@log4cplus@@MBEXPAX@Z
?deleteObject@?$FactoryRegistry@VLocaleFactory@spi@log4cplus@@@spi@log4cplus@@MBEXPAX@Z
?destructorImpl@Appender@log4cplus@@QAEXXZ
?disable@Hierarchy@log4cplus@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?disable@Hierarchy@log4cplus@@UAEXH@Z
?disableAll@Hierarchy@log4cplus@@UAEXXZ
?disableDebug@Hierarchy@log4cplus@@UAEXXZ
?disableInfo@Hierarchy@log4cplus@@UAEXXZ
?doAppend@Appender@log4cplus@@QAEXABVInternalLoggingEvent@spi@2@@Z
?doConfigure@BasicConfigurator@log4cplus@@SAXAAVHierarchy@2@_N@Z
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z
?enableAll@Hierarchy@log4cplus@@UAEXXZ
?error@LogLog@helpers@log4cplus@@QBEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?error@LogLog@helpers@log4cplus@@QBEXPB_W_N@Z
?error@OnlyOnceErrorHandler@log4cplus@@UAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?exists@Hierarchy@log4cplus@@UAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?exists@Logger@log4cplus@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?exists@ObjectRegistryBase@spi@log4cplus@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?exists@Properties@helpers@log4cplus@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?exists@Properties@helpers@log4cplus@@QBE_NPB_W@Z
?forcedLog@Logger@log4cplus@@QBEXABVInternalLoggingEvent@spi@2@@Z
?forcedLog@Logger@log4cplus@@QBEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
?forcedLog@LoggerImpl@spi@log4cplus@@MAEXABVInternalLoggingEvent@23@@Z
?forcedLog@LoggerImpl@spi@log4cplus@@MAEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
?formatAndAppend@PatternLayout@log4cplus@@UAEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ABVInternalLoggingEvent@spi@2@@Z
?formatAndAppend@SimpleLayout@log4cplus@@UAEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ABVInternalLoggingEvent@spi@2@@Z
?formatAndAppend@TTCCLayout@log4cplus@@UAEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@ABVInternalLoggingEvent@spi@2@@Z
?formatEvent@Appender@log4cplus@@IBEAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVInternalLoggingEvent@spi@2@@Z
?fromString@LogLevelManager@log4cplus@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?gatherThreadSpecificData@InternalLoggingEvent@spi@log4cplus@@QBEXXZ

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NetHub.dll
.dll windows:5 windows x86 arch:x86

1f6666dc06c3aad4e7a9957c238dc3ed

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f2:da:48:6f:ee:de:9f:94:6b:8c:a2:79:28:ff:b6:34:cd:a7:86:d1:e6:2f:48:ac:46:f7:24:88:17:9f:7a:53
Signer

Actual PE Digest

f2:da:48:6f:ee:de:9f:94:6b:8c:a2:79:28:ff:b6:34:cd:a7:86:d1:e6:2f:48:ac:46:f7:24:88:17:9f:7a:53

Digest Algorithm

sha256

PE Digest Matches

true

62:35:48:d8:97:90:7c:35:6d:19:14:66:19:15:d8:e5:b2:fa:e5:db
Signer

Actual PE Digest

62:35:48:d8:97:90:7c:35:6d:19:14:66:19:15:d8:e5:b2:fa:e5:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\NetHub.pdb

Imports

winhttp

WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetStatusCallback
WinHttpSetOption
WinHttpOpen
WinHttpReadData
WinHttpQueryAuthSchemes
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpCloseHandle
WinHttpSetCredentials
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpQueryDataAvailable

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetFileSize
DeleteFileW
IsBadReadPtr
GetFileAttributesW
SetFileAttributesW
LocalFree
CreateDirectoryW
CopyFileW
lstrlenW
WideCharToMultiByte
SetFilePointer
GetPrivateProfileStringW
WritePrivateProfileStringW
MoveFileExW
lstrlenA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
ResetEvent
SetEvent
WaitForSingleObject
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedExchange
GetExitCodeThread
Sleep
GetPrivateProfileIntW
GlobalFree
WriteFile
CreateThread
RaiseException
SetLastError
GetCurrentProcess
FlushInstructionCache
WaitForMultipleObjects
ResumeThread
FlushFileBuffers
SetEndOfFile
CreateSemaphoreW
ReleaseSemaphore
lstrcpynW
GetLocalTime
InitializeCriticalSection
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
GetExitCodeProcess
GetVersion
GetCurrentProcessId
TerminateProcess
GetVolumeInformationW
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetLastError
GetModuleHandleW
GetProcAddress
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
ReadFile
CreateFileW
HeapSize
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
EncodePointer
GetCurrentThreadId
DecodePointer
GetSystemTimeAsFileTime
GetTickCount

user32

CreateWindowExW
MsgWaitForMultipleObjects
GetMessageW
TranslateMessage
DispatchMessageW
IsWindow
PostMessageW
UnregisterClassA
SendMessageW
DefWindowProcW
RegisterClassExW
GetClassInfoExW
LoadCursorW
SetWindowLongW
PostQuitMessage
GetWindowLongW
CallWindowProcW
KillTimer
SendMessageTimeoutW
ShowWindow
IsIconic
FindWindowA
SetTimer

advapi32

RegOpenKeyExW
OpenProcessToken
GetTokenInformation
RegCloseKey
RegOpenKeyW
RegQueryValueExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathW

ole32

CoTaskMemFree
CLSIDFromProgID
CoFreeLibrary
CoCreateInstance
CoInitializeEx
CoUninitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateGuid
StringFromGUID2

oleaut32

SysAllocStringByteLen
SysFreeString

shlwapi

PathFindFileNameW
wnsprintfW
PathAppendW
PathFileExistsW
PathAddBackslashW
PathFindExtensionW

msvcr100

__RTDynamicCast
_CxxThrowException
__CxxFrameHandler3
_lock
_unlock
?terminate@@YAXXZ
_wcsupr_s
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
wcscspn
wcsspn
towlower
_getpid
memcmp
strncpy_s
_vsnwprintf_s
_snprintf_s
??3@YAXPAX@Z
memset
memcpy
memmove
strlen
toupper
isdigit
malloc
free
strchr
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
wcslen
wmemcpy_s
memcpy_s
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
wcscpy_s
memmove_s
?what@exception@std@@UBEPBDXZ
strncmp
isspace
isalpha
_purecall
_time64
wcsncpy
wcscmp
_waccess
wcsrchr
_vscwprintf
vswprintf_s
_snprintf
memchr
_recalloc
calloc
wcsnlen
_wtoi64
_wcsicmp
atoi
_beginthreadex
wcschr
wcsstr
_wcslwr_s
_snwprintf
_wtoi
_vsnprintf_s
swprintf_s
_wtol
strtol
wcspbrk
_mktime64
__CppXcptFilter

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
??1_Container_base12@std@@QAE@XZ
?_Xfunc@tr1@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

ws2_32

ntohs
ntohl
htonl

daemonproxy

ord7
ord15
ord12
ord11

rpcrt4

UuidCreateSequential
UuidToStringW
RpcStringFreeW

Exports

Exports

NH_DeleteTaskByID
NH_DownloadFileAsync
NH_DownloadFileSync
NH_GetAllDownTaskIDByCallBack
NH_GetNetFileRealNameSync
NH_GetNetFileSizeSync
NH_HttpRequestAsync
NH_HttpRequestJCESync
NH_HttpRequestSync
NH_Init
NH_SetProxy
NH_Uninit
NH_WaitForAll

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NetworkMgr.dll
.dll windows:5 windows x86 arch:x86

0639203750511336052d83697eb8c3ab

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

34:05:82:f1:dd:fd:7b:6b:43:28:82:f5:47:06:65:9c:15:1c:b8:12:f3:24:27:c2:54:52:0e:b4:48:c5:5b:95
Signer

Actual PE Digest

34:05:82:f1:dd:fd:7b:6b:43:28:82:f5:47:06:65:9c:15:1c:b8:12:f3:24:27:c2:54:52:0e:b4:48:c5:5b:95

Digest Algorithm

sha256

PE Digest Matches

true

3a:6f:3d:7b:e0:06:9d:b0:26:97:de:5d:42:78:4c:22:b6:22:74:06
Signer

Actual PE Digest

3a:6f:3d:7b:e0:06:9d:b0:26:97:de:5d:42:78:4c:22:b6:22:74:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\NetworkMgr.pdb

Imports

ws2_32

setsockopt
getsockname
htons
WSAGetLastError
select
getaddrinfo
WSAStartup
connect
ioctlsocket
getpeername
WSACleanup
recv
bind
socket
freeaddrinfo
__WSAFDIsSet
WSASetLastError
closesocket
send
getsockopt
ntohs
ntohl
htonl

kernel32

TerminateProcess
SetUnhandledExceptionFilter
HeapDestroy
HeapSize
EncodePointer
DecodePointer
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange
IsDebuggerPresent
QueryPerformanceCounter
DisableThreadLibraryCalls
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
lstrlenA
MultiByteToWideChar
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
ResumeThread
GetExitCodeThread
GetFileSize
WriteFile
GetSystemTimeAsFileTime
CreateFileW
RaiseException
CloseHandle
DeleteFileW
InitializeCriticalSection
TlsGetValue
SetFilePointer
FlushFileBuffers
GetTickCount
TlsSetValue
GetModuleFileNameW
GetCurrentProcessId
GetLocalTime
TlsAlloc
TlsFree
CreateEventW
WaitForMultipleObjects
SetEvent
ResetEvent
Sleep
InterlockedExchange
OpenMutexW
CreateMutexW
GetPrivateProfileStringW
SystemTimeToFileTime
WritePrivateProfileStringW
lstrlenW
SleepEx
ExpandEnvironmentStringsA
FormatMessageA
SetLastError
OutputDebugStringW
GetVolumeInformationW
GetPrivateProfileIntW
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
WideCharToMultiByte
IsProcessorFeaturePresent

user32

TranslateMessage
PostQuitMessage
DispatchMessageW
SetTimer
KillTimer
CallWindowProcW
GetWindowLongW
DestroyWindow
GetMessageW
SetWindowLongW
CreateWindowExW
PostMessageW
IsWindow
PeekMessageW

advapi32

CryptHashData
CryptDestroyHash
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW

ole32

StringFromGUID2
CoTaskMemFree
CoCreateGuid

shlwapi

PathFileExistsW
PathAppendW

msvcr100

?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
__CxxFrameHandler3
_onexit
_lock
__dllonexit
_unlock
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
realloc
strtoul
fseek
_strdup
_stricmp
_CxxThrowException
strrchr
fwrite
__sys_nerr
toupper
strcat
isxdigit
fclose
isdigit
strcmp
fread
isalpha
fopen
fgets
strncpy
tolower
??3@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memmove
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
_purecall
wmemcpy_s
memcpy_s
free
??_U@YAPAXI@Z
??_V@YAXPAX@Z
malloc
_vscwprintf
vswprintf_s
_time64
memmove_s
_recalloc
calloc
??8type_info@@QBE_NABV0@@Z
_beginthreadex
wcschr
memcmp
_wtoi
strlen
wcsnlen
memset
wcscmp
wcscpy_s
_snprintf_s
_vsnprintf_s
_vsnwprintf_s
_wcsupr_s
wcslen
memcpy
atoi
_snwprintf
_wtoi64
_snprintf
fputc
_gmtime64
sscanf
strncmp
isspace
qsort
_stat64
strerror
_strtoi64
fputs
strstr
__iob_func
strcpy
strchr
memchr
fflush
_errno
strtol
isalnum
getenv

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

iphlpapi

GetAdaptersInfo

rpcrt4

RpcStringFreeW
UuidCreateSequential
UuidToStringW

winhttp

WinHttpSetOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback

Exports

Exports

CreateNetworkMgr
DestroyNetworkMgr

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
QQPMIpc.dll
.dll windows:5 windows x86 arch:x86

3aa34d6fa284acfded2576a50cbbb260

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:40:71:5b:98:91:0d:02:98:14:d8:f2:2c:9f:6c:3b:a7:98:06:c2:ea:58:82:27:3e:da:2b:a8:13:60:4c:b6
Signer

Actual PE Digest

2d:40:71:5b:98:91:0d:02:98:14:d8:f2:2c:9f:6c:3b:a7:98:06:c2:ea:58:82:27:3e:da:2b:a8:13:60:4c:b6

Digest Algorithm

sha256

PE Digest Matches

true

b8:66:4e:90:ef:58:a6:c5:12:3c:e7:05:f4:1c:79:7c:c6:63:bf:65
Signer

Actual PE Digest

b8:66:4e:90:ef:58:a6:c5:12:3c:e7:05:f4:1c:79:7c:c6:63:bf:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\QQPMIpc.pdb

Imports

kernel32

ResetEvent
SetEvent
CreateEventW
InterlockedIncrement
InterlockedDecrement
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
LocalFree
ReleaseMutex
CreateMutexW
CreateFileW
ReadFile
GetSystemInfo
GetTickCount
WaitNamedPipeW
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
WaitForMultipleObjects
GetOverlappedResult
WriteFile
DisableThreadLibraryCalls
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
Sleep
GetLastError
GetModuleFileNameW
InterlockedExchangeAdd
UnhandledExceptionFilter
LocalAlloc
GetVersionExW
FormatMessageW
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSectionAndSpinCount
RaiseException
WaitForSingleObject
CloseHandle
InterlockedExchange
GetCurrentThreadId
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
GetLocalTime
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedCompareExchange

user32

DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
PostMessageW
DestroyWindow
DefWindowProcW
GetWindowLongW
SetWindowLongW
CreateWindowExW
RegisterWindowMessageW
RegisterClassExW
SendMessageTimeoutW
ShowWindow
IsIconic
FindWindowA

advapi32

GetLengthSid
AddAccessAllowedAce
InitializeAcl
IsValidSid
ConvertStringSidToSidW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathA
SHFileOperationA

oleaut32

SysAllocStringLen

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
wcsnlen
??3@YAXPAX@Z
strcpy_s
strcat_s
strcmp
strlen
strrchr
fopen_s
fclose
fwrite
fflush
??2@YAPAXI@Z
_vsnprintf_s
wcslen
_purecall
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy
memmove
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??_V@YAXPAX@Z
memset
memcpy_s
wmemcpy_s
memmove_s
memcmp
wcscmp
_wcslwr_s
_CxxThrowException
wcsstr
wcsrchr
_vscwprintf
vswprintf_s
_beginthreadex
free
_unlock
__dllonexit
_lock
_onexit
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
GetQMApcDispatcher
GetQMIpcManager

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RubikEngine.dll
.dll regsvr32 windows:5 windows x86 arch:x86

6541d4ff08eb87a7c660124b851b98e9

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c9:7e:38:4d:2a:ea:55:5a:d1:fa:37:37:50:1e:1f:65:34:b8:af:83:df:eb:68:69:2c:6c:63:10:6f:1d:9b:67
Signer

Actual PE Digest

c9:7e:38:4d:2a:ea:55:5a:d1:fa:37:37:50:1e:1f:65:34:b8:af:83:df:eb:68:69:2c:6c:63:10:6f:1d:9b:67

Digest Algorithm

sha256

PE Digest Matches

true

9e:a4:43:85:98:d2:42:8c:22:16:39:76:70:b8:69:d3:03:ac:54:d6
Signer

Actual PE Digest

9e:a4:43:85:98:d2:42:8c:22:16:39:76:70:b8:69:d3:03:ac:54:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\RubikEngine.pdb

Imports

ws2_32

connect
ioctlsocket
getpeername
ntohl
ntohs
htons
htonl
WSAStartup
getsockopt
send
closesocket
WSASetLastError
__WSAFDIsSet
freeaddrinfo
socket
bind
recv
WSACleanup
setsockopt
getsockname
WSAGetLastError
select
getaddrinfo

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

zlib

deflate
deflateInit2_
inflateEnd
crc32
inflateInit2_
inflate
deflateEnd

log4cplus

??0Logger@log4cplus@@QAE@$$QAV01@@Z
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?get_macro_body_oss@detail@log4cplus@@YAAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?macro_forced_log@detail@log4cplus@@YAXABVLogger@2@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH2@Z
?get_macro_body_snprintf_buf@detail@log4cplus@@YAAAVsnprintf_buf@helpers@2@XZ
?getRoot@Logger@log4cplus@@SA?AV12@XZ
?doConfigure@PropertyConfigurator@log4cplus@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVHierarchy@2@I@Z
?getDefaultHierarchy@Logger@log4cplus@@SAAAVHierarchy@2@XZ
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?print@snprintf_buf@helpers@log4cplus@@QAAPB_WPB_WZZ
??1Logger@log4cplus@@UAE@XZ

kernel32

LoadLibraryW
FreeLibrary
CloseHandle
GetCurrentProcess
OpenProcess
QueryDosDeviceW
GetLogicalDriveStringsW
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
SetEvent
CreateEventW
WaitForSingleObject
InterlockedExchange
GetVolumeInformationW
CreateFileW
GetFileSize
UnmapViewOfFile
DeleteFileW
MapViewOfFile
CreateFileMappingW
CopyFileW
CreateMutexW
Sleep
OpenMutexW
RaiseException
GetFileAttributesW
CreateDirectoryW
GetLongPathNameW
GetProcAddress
ReadFile
WriteFile
SetFileAttributesW
FindClose
FindFirstFileW
RemoveDirectoryW
FindNextFileW
SetFilePointer
FileTimeToDosDateTime
GetPrivateProfileStringW
GetFileInformationByHandle
GetFileType
DuplicateHandle
CreateProcessW
MoveFileExW
lstrcmpW
SetLastError
GetFullPathNameW
GetFileTime
SetThreadLocale
GetThreadLocale
ReleaseMutex
GetTickCount
ResetEvent
WaitForMultipleObjects
TerminateThread
OpenEventW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
SleepEx
ExpandEnvironmentStringsA
FormatMessageA
InitializeCriticalSection
OutputDebugStringW
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetCurrentThreadId
GetModuleHandleA
GetVersion
GetStdHandle
QueryPerformanceCounter
GlobalMemoryStatus
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapDestroy
HeapSize
EncodePointer
DecodePointer
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringW
GetPrivateProfileIntW
GetSystemTime
SystemTimeToFileTime
lstrlenW
SetFilePointerEx
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTempPathW

user32

GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
CharNextW

advapi32

RegSetValueExW
CryptCreateHash
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
CryptReleaseContext
CryptAcquireContextW
CryptGetHashParam
CryptHashData
CryptDestroyHash
DeregisterEventSource
ReportEventA
RegisterEventSourceA

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetSpecialFolderPathW

ole32

CoCreateInstance
StringFromGUID2
CoCreateGuid
CoTaskMemFree

oleaut32

LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysFreeString
SysStringLen

atl100

ord31
ord68
ord56
ord49
ord15
ord61
ord67
ord64
ord32
ord58
ord23

shlwapi

PathRemoveBackslashW
PathAddBackslashW
PathFindFileNameW
PathIsDirectoryW
PathFileExistsW
PathStripPathW
PathRemoveFileSpecW
PathAppendW

msvcr100

_onexit
_lock
__dllonexit
_unlock
_getch
signal
sprintf
_stricmp
fprintf
_strnicmp
_wfopen
feof
_fileno
_setmode
raise
_exit
_except_handler4_common
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_amsg_exit
_initterm_e
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_tzset
_strdup
_vsnprintf
getenv
strtoul
realloc
strrchr
fwrite
isupper
__sys_nerr
strcmp
??3@YAXPAX@Z
wcslen
memmove_s
_CxxThrowException
wmemcpy_s
memcpy_s
__CxxFrameHandler3
memset
_vscwprintf
vswprintf_s
_ui64tow_s
wcschr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
memmove
wcscmp
wcsstr
_wcsnicmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
strlen
memcpy
_purecall
free
calloc
_recalloc
_vsnprintf_s
_wcsupr_s
wcsnlen
_wtoi
_snprintf
_snwprintf
_wtoi64
atoi
memcmp
wcsncpy_s
isalpha
isdigit
strchr
isspace
strncmp
fread
ftell
ferror
fseek
fclose
_vscprintf
vfprintf
__iob_func
wcsrchr
wcscat_s
_waccess
malloc
_time64
_wtol
wcscpy_s
_mktime64
_mktime32
strncpy
strcat
_localtime64_s
_mbslwr_s
_mbscmp
_wcsicmp
_wcslwr_s
rand
srand
_beginthreadex
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
isxdigit
toupper
fputc
_gmtime64
sscanf
qsort
_stat64
strerror
_strtoi64
fputs
strstr
strcpy
memchr
fflush
_errno
strtol
isalnum
tolower
fgets
fopen
__clean_type_info_names_internal

msvcp100

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreateSequential
UuidToStringA
RpcStringFreeA

winhttp

WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SdkClient.dll
.dll regsvr32 windows:5 windows x86 arch:x86

6616bd595d7a3f0bc5c133dc321bcbeb

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:4f:60:54:e3:8e:99:f6:b4:f6:49:b8:3f:ab:94:a2:25:08:00:3d:a4:0b:58:4a:db:45:f1:c3:b4:0e:30:a0
Signer

Actual PE Digest

6d:4f:60:54:e3:8e:99:f6:b4:f6:49:b8:3f:ab:94:a2:25:08:00:3d:a4:0b:58:4a:db:45:f1:c3:b4:0e:30:a0

Digest Algorithm

sha256

PE Digest Matches

true

29:4f:4f:9d:23:9d:03:69:8c:13:cb:82:6d:a5:fd:44:ec:a9:67:ec
Signer

Actual PE Digest

29:4f:4f:9d:23:9d:03:69:8c:13:cb:82:6d:a5:fd:44:ec:a9:67:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\SdkClient.pdb

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
CreateMutexW
CopyFileW
InitializeCriticalSectionAndSpinCount
CreateFileW
DeleteFileW
GetFileSize
GetTickCount
TlsAlloc
GetLocalTime
InterlockedIncrement
FlushFileBuffers
WriteFile
SetFilePointer
TlsGetValue
WideCharToMultiByte
OpenMutexW
TlsSetValue
TlsFree
GlobalAlloc
MultiByteToWideChar
SetEvent
DuplicateHandle
ReleaseMutex
RaiseException
InterlockedDecrement
lstrcmpiW
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
LoadLibraryExW
WaitForSingleObject
Sleep
GetVersion
LoadLibraryW
LocalFree
lstrcpyW
GetCommandLineW
ResetEvent
lstrlenA
ReadFile
SetThreadLocale
GetThreadLocale
GetModuleHandleExW
ProcessIdToSessionId
GetTempPathW
GetLongPathNameW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
ResumeThread
GetExitCodeThread
LocalAlloc
GetSystemDirectoryW
GetPrivateProfileStringW
HeapReAlloc
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalSize
GlobalLock
GlobalUnlock
GetVolumeInformationW
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
SetLastError
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
SystemTimeToFileTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
DecodePointer
EncodePointer
HeapSize
HeapDestroy
HeapAlloc
SetErrorMode
GetProcAddress
InitializeCriticalSection
OutputDebugStringW
VirtualAllocEx
GetCurrentThreadId
CreateEventW
GetModuleHandleW
GetModuleFileNameW
SearchPathW
GetCurrentProcessId
OpenProcess
CreateProcessW
WaitForMultipleObjects
CloseHandle
lstrlenW
DeleteCriticalSection
lstrcpynW
SetUnhandledExceptionFilter
GetCurrentProcess
WriteProcessMemory
GetProcessHeap
HeapFree
IsProcessorFeaturePresent

user32

IsWindow
PostMessageW
CreateWindowExW
SetWindowLongW
CharNextW
PostQuitMessage
DispatchMessageW
TranslateMessage
SetTimer
KillTimer
SendMessageW
MsgWaitForMultipleObjects
CallWindowProcW
GetWindowLongW
DestroyWindow
GetMessageW
PeekMessageW

advapi32

CryptHashData
CryptDestroyHash
CryptCreateHash
SetEntriesInAclW
OpenProcessToken
GetTokenInformation
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
AllocateAndInitializeSid

shell32

SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW

ole32

StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateGuid
CoCreateInstance

oleaut32

LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
SysAllocString
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
SysStringByteLen
SysFreeString
SysAllocStringByteLen

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathAppendW
wnsprintfW
PathFindFileNameW

msvcp100

??1_Container_base12@std@@QAE@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?id@?$collate@_W@std@@2V0locale@2@A
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
??1facet@locale@std@@UAE@XZ
_Wcsxfrm
_Wcscoll
??0facet@locale@std@@IAE@I@Z
?_Xmem@tr1@std@@YAXXZ
_Getcoll
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Xfunc@tr1@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

atoi
_snprintf
fputc
_gmtime64
sscanf
qsort
_stat64
strerror
_strtoi64
fputs
strcpy
memchr
fflush
_errno
isalnum
_stricmp
_strdup
strcat
getenv
strtoul
strrchr
fwrite
tolower
strncpy
fgets
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__sys_nerr
fopen
??3@YAXPAX@Z
wcschr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
memcpy
memmove
_CxxThrowException
memcpy_s
??_V@YAXPAX@Z
_snwprintf
memset
__CxxFrameHandler3
_wtol
wcscat_s
free
calloc
_recalloc
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
wcscpy
wcslen
wmemcpy_s
memmove_s
strlen
_wcsicmp
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
strchr
realloc
_purecall
wcscmp
_snprintf_s
wcsstr
_vscwprintf
vswprintf_s
_vsnprintf_s
_vsnwprintf_s
wcsnlen
wcscpy_s
strtol
sprintf_s
malloc
wcsncpy_s
_time64
memcmp
_waccess
rand
srand
wcsrchr
_wtoi
??8type_info@@QBE_NABV0@@Z
__RTDynamicCast
strstr
strcmp
strtod
_wtoi64
_beginthreadex
wcsncat_s
_wcsupr_s
strncmp
isspace
__iob_func
isalpha
fread
isdigit
fseek
fclose
wcstombs_s
atof
toupper
isxdigit
_mktime64
_localtime64_s
_atoi64
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter

ws2_32

ntohl
htonl
ntohs
WSACleanup
socket
closesocket
ioctlsocket
inet_addr
htons
connect
select
setsockopt
freeaddrinfo
recv
WSAGetLastError
send
WSASetLastError
WSAStartup
getsockopt
getpeername
getaddrinfo
getsockname
bind
__WSAFDIsSet

imagehlp

UnMapAndLoad
MapAndLoad

winhttp

WinHttpCloseHandle
WinHttpSetOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpSetStatusCallback

rpcrt4

UuidToStringW
UuidCreateSequential
RpcStringFreeW

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 418KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TADInstaller.dll
.dll windows:5 windows x86 arch:x86

fb4d6088b686ba3afa98cfc164528e1b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ef:30:c5:e9:a7:5c:7e:6c:b0:6a:1c:7e:ff:ec:d8:7f:37:ec:73:af:27:ac:f8:b5:ca:a2:39:1a:73:0e:19:c9
Signer

Actual PE Digest

ef:30:c5:e9:a7:5c:7e:6c:b0:6a:1c:7e:ff:ec:d8:7f:37:ec:73:af:27:ac:f8:b5:ca:a2:39:1a:73:0e:19:c9

Digest Algorithm

sha256

PE Digest Matches

true

b2:2b:3d:94:fd:c8:18:08:07:e5:c0:f9:19:fe:81:f0:a3:26:1a:f5
Signer

Actual PE Digest

b2:2b:3d:94:fd:c8:18:08:07:e5:c0:f9:19:fe:81:f0:a3:26:1a:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\TADInstaller.pdb

Imports

log4cplus

??1Logger@log4cplus@@UAE@XZ
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
?get_macro_body_oss@detail@log4cplus@@YAAAV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?macro_forced_log@detail@log4cplus@@YAXABVLogger@2@HABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH2@Z

zlib

inflate
crc32
inflateInit2_
inflateEnd

kernel32

LoadResource
FindResourceW
FindResourceExW
GetPrivateProfileStringW
DeleteFileW
WritePrivateProfileStringW
lstrlenW
GetProcAddress
GetModuleHandleW
CopyFileW
GetFileAttributesW
SetFileAttributesW
MoveFileExW
Sleep
CloseHandle
OpenEventW
SetEvent
CreateFileW
DeviceIoControl
GetTempPathW
GetFileAttributesExW
GetTickCount
CreateMutexW
GetModuleFileNameW
GetCurrentThread
lstrcpyW
GetWindowsDirectoryW
WaitForSingleObject
OpenMutexW
GetPrivateProfileIntW
GetFileSize
SetFilePointer
ReadFile
GetTempFileNameW
MultiByteToWideChar
LoadLibraryW
FreeLibrary
GetExitCodeProcess
GetVersion
GetLastError
LockResource
GetCurrentProcessId
TerminateProcess
lstrlenA
GetSystemInfo
GetVersionExW
GetUserDefaultUILanguage
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
FreeResource
CreateDirectoryW
WriteFile
LoadLibraryExW
SetErrorMode
RaiseException
GetModuleHandleExW
TlsGetValue
GetCurrentThreadId
FlushFileBuffers
TlsSetValue
GetLocalTime
InitializeCriticalSection
TlsAlloc
TlsFree
CreateEventW
GetExitCodeThread
OutputDebugStringW
EncodePointer
HeapSize
HeapDestroy
SizeofResource
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
lstrcmpiW
GetCurrentProcess
IsProcessorFeaturePresent

user32

PostMessageW
SendMessageW
EnumChildWindows
GetWindowTextW
GetDlgItem
FindWindowW
IsWindowEnabled
FindWindowExW
DispatchMessageW
IsWindow
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects

advapi32

AllocateAndInitializeSid
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
OpenThreadToken
GetTokenInformation
OpenProcessToken
RegQueryValueExW
CheckTokenMembership
FreeSid

shell32

ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHFileOperationW

ole32

StringFromCLSID
CoUninitialize
CreateStreamOnHGlobal
CLSIDFromString
StringFromGUID2
CoTaskMemFree
CoInitializeEx

oleaut32

VariantClear
SysAllocStringLen

shlwapi

PathFileExistsW
PathAppendW
PathFindFileNameW
PathFindExtensionW

msvcp100

?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Container_base12@std@@QAE@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
?id@?$collate@_W@std@@2V0locale@2@A
?_Xmem@tr1@std@@YAXXZ
_Wcsxfrm
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Incref@facet@locale@std@@QAEXXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1facet@locale@std@@UAE@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z

msvcr100

isalpha
isdigit
atoi
wcscat_s
_snprintf_s
_beginthreadex
_vsnprintf_s
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException
??3@YAXPAX@Z
memset
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
wcslen
??_V@YAXPAX@Z
wcsncpy
memcpy
memmove
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
free
strlen
_vsnwprintf_s
memcpy_s
_wcsupr_s
wcscmp
wmemcpy_s
memmove_s
wcsncpy_s
strchr
realloc
wcsstr
wcsnlen
_time64
_wtoi64
_recalloc
calloc
_vscwprintf
vswprintf_s
_wcsicmp
_wcslwr_s
iswspace
wcscpy_s
_purecall
memcmp
wcschr
wcsrchr
_wtoi
malloc
_waccess
_mktime64
strncmp
isspace

setupapi

SetupDiGetDriverInfoDetailW
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetINFClassW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
CM_Get_Parent
CM_Get_Sibling
CM_Get_Device_IDW
CM_Get_Child
CM_Locate_DevNodeW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
CMP_WaitNoPendingInstallEvents

nethub

NH_WaitForAll
NH_DeleteTaskByID
NH_DownloadFileSync
NH_GetNetFileSizeSync
NH_Uninit
NH_Init

winhttp

WinHttpSetOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetStatusCallback
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders

Exports

Exports

TADInitDriverEngine
TADInstallDriver
TADIsAdbDebugOpened
TADIsBaseDriverLoaded
TADIsDeviceNeedInstallDriver
TADIsDeviceNeedInstallMDBDriver
TADIsMdbDebugOpened
TADResumeInstallDriver
TADStopInstallDriver
TADUnInitDriverEngine
_TADCollectDeviceInfo@4
_TADReleaseDeviceInfo@4

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UnReDevice.xml
am5tools.tools
.elf linux arm
am5tools2.tools
.elf linux arm
arkFS.dll
.dll windows:5 windows x86 arch:x86

eada50f5d6ea8b30a70297af82d0f279

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:84:83:83:c1:87:49:b4:94:b3:a4:73:ea:31:12:25:a0:c3:08:3d:1a:12:57:26:b4:0a:2a:22:a9:a8:e5:1e
Signer

Actual PE Digest

66:84:83:83:c1:87:49:b4:94:b3:a4:73:ea:31:12:25:a0:c3:08:3d:1a:12:57:26:b4:0a:2a:22:a9:a8:e5:1e

Digest Algorithm

sha256

PE Digest Matches

true

b5:9a:68:bb:41:1b:21:b6:6b:27:ac:ef:11:eb:cd:99:42:58:d0:1e
Signer

Actual PE Digest

b5:9a:68:bb:41:1b:21:b6:6b:27:ac:ef:11:eb:cd:99:42:58:d0:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\arkFS.pdb

Imports

arkiostub

arkRegisterFS

sqlite

sqlite3_open
sqlite3_exec
sqlite3_close
sqlite3_free
sqlite3_vmprintf
sqlite3_column_text
sqlite3_finalize
sqlite3_step
sqlite3_prepare_v2
sqlite3_bind_text
sqlite3_blob_open
sqlite3_blob_bytes
sqlite3_column_bytes
sqlite3_column_blob
sqlite3_bind_zeroblob
sqlite3_column_int64
sqlite3_bind_blob
sqlite3_blob_write
sqlite3_blob_close
sqlite3_blob_read
sqlite3_last_insert_rowid

kernel32

InterlockedExchange
CreateFileW
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
MultiByteToWideChar
DecodePointer
EncodePointer
UnmapViewOfFile
GetFileAttributesW
CloseHandle
CreateFileMappingW
GetFileSizeEx
lstrcmpA
CreateDirectoryW
MapViewOfFile

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ

msvcr100

?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_strdup
_close
_except_handler4_common
_crt_debugger_hook
ftell
memcpy
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
memcmp
strlen
??3@YAXPAX@Z
??2@YAPAXI@Z
strcpy
memchr
memset
_purecall
??_V@YAXPAX@Z
_findnext64i32
_findclose
_findfirst64i32
feof
_wfopen
fread
fwrite
_open
fseek
fclose
?_wopen@@YAHPB_WHH@Z
wcslen
strchr
strncpy
tolower
_CxxThrowException
__CxxFrameHandler3
free
calloc
_errno
_stat64i32
_stricmp
_fstat64i32
strcmp
strrchr
malloc
_read
_lseek
_write
strerror
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter

zlib

inflateEnd
inflate
inflateReset
inflateInit2_
zError

Exports

Exports

arkFSArkToSyspath
arkFSCreateDirectory
arkFSCreateStub
arkFSDeleteStub
arkFSInitFileSystem
arkFSMountPath
arkFSUnmountPath
arkfsBeginTrans
arkfsCloseDir
arkfsCloseEnum
arkfsCloseFile
arkfsCommitTrans
arkfsCopyFile
arkfsCreateEnum
arkfsCreateEnumIndir
arkfsCreateFile
arkfsCreateFileIndir
arkfsDeleteDirectory
arkfsDeleteFile
arkfsError
arkfsGetFullName
arkfsGetName
arkfsIsDirectory
arkfsIsDirectoryExist
arkfsIsFileExist
arkfsMoveFile
arkfsMoveNext
arkfsOpenDir
arkfsRead
arkfsRenameFile
arkfsReset
arkfsResize
arkfsSeek
arkfsTell
arkfsWrite

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arkGraphic.dll
.dll windows:5 windows x86 arch:x86

3e184cee5e6fcb8ed658c3c8aa9e0eec

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:33:5e:be:11:09:71:57:7f:8d:ad:fe:c6:ad:de:22:b9:05:6f:73:b1:25:0e:98:d4:db:81:71:08:f3:21:ac
Signer

Actual PE Digest

59:33:5e:be:11:09:71:57:7f:8d:ad:fe:c6:ad:de:22:b9:05:6f:73:b1:25:0e:98:d4:db:81:71:08:f3:21:ac

Digest Algorithm

sha256

PE Digest Matches

true

95:11:f7:e6:62:70:ae:d1:33:4b:91:87:db:a0:e3:04:b3:1a:2b:65
Signer

Actual PE Digest

95:11:f7:e6:62:70:ae:d1:33:4b:91:87:db:a0:e3:04:b3:1a:2b:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\arkGraphic.pdb

Imports

usp10

ScriptItemize
ScriptFreeCache
ScriptShape

kernel32

MultiByteToWideChar
OutputDebugStringA
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
IsProcessorFeaturePresent
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentProcessId

gdi32

SetGraphicsMode
SetTextColor
DeleteDC
CreateDIBSection
CreateFontIndirectW
GdiFlush
SetBkMode
GetGlyphIndicesW
GetFontData
SetTextAlign
GetGlyphOutlineW
SetWorldTransform
GetOutlineTextMetricsW
ExtTextOutW
CreateCompatibleDC
SelectObject
DeleteObject

msvcr100

abort
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm_e
_amsg_exit
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
_vsnprintf
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_except_handler4_common
_vsnprintf_s
wcsncpy
printf
realloc
malloc
_initterm
free
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
??_V@YAXPAX@Z
strlen
??_U@YAPAXI@Z
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memset
memcpy
_CxxThrowException
qsort

msvcp100

??1_Container_base12@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ

Exports

Exports

arkBitmapCreate
arkBitmapCreateFromData
arkBitmapDestroy
arkBitmapGetSize
arkBitmapLockBits
arkBitmapPreMultiply
arkBitmapUnlockBits
arkCanvasCalcTextSize
arkCanvasClear
arkCanvasClipPath
arkCanvasClipRect
arkCanvasCreate
arkCanvasCreateFromBitmap
arkCanvasDestroy
arkCanvasDrawBitmap
arkCanvasDrawCircle
arkCanvasDrawColor
arkCanvasDrawEllipse
arkCanvasDrawLine
arkCanvasDrawPath
arkCanvasDrawPoint
arkCanvasDrawPoints
arkCanvasDrawRectangle
arkCanvasDrawRoundRect
arkCanvasDrawText
arkCanvasDrawTextRect
arkCanvasGetBlendMode
arkCanvasGetBlendValue
arkCanvasGetMapRect
arkCanvasGetStrokeWidth
arkCanvasGetTextSize
arkCanvasLockBits
arkCanvasRestore
arkCanvasRotate
arkCanvasSave
arkCanvasSaveClip
arkCanvasSaveMatrix
arkCanvasScale
arkCanvasSetBitmap
arkCanvasSetBlendMode
arkCanvasSetBlendValue
arkCanvasSetColor
arkCanvasSetDashPattern
arkCanvasSetDashStyle
arkCanvasSetDrawStyle
arkCanvasSetFontFaceName
arkCanvasSetFontStyle
arkCanvasSetGradient
arkCanvasSetMapPolygon
arkCanvasSetSmooth
arkCanvasSetStrokeCap
arkCanvasSetStrokeJoin
arkCanvasSetStrokeWidth
arkCanvasSetTextSize
arkCanvasTranslate
arkCanvasUnlockBits
arkGradientAddColorStop
arkGradientCreateLinear
arkGradientCreateRadial
arkGradientDestroy
arkPathAddArc
arkPathAddCircle
arkPathAddEllipse
arkPathAddRectangle
arkPathArcTo
arkPathBegin
arkPathBezierCurveTo
arkPathClose
arkPathCreate
arkPathDestroy
arkPathGetBounds
arkPathLineTo
arkPathMoveTo
arkPathQuadraticCurveTo

Sections

.text
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arkIOStub.dll
.dll windows:5 windows x86 arch:x86

4da9e602aed4a9c73087e8a13d09ef89

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:60:66:36:54:af:4e:0e:28:04:e1:82:9b:9e:8d:13:71:c2:36:54:26:56:b6:23:be:45:3e:7a:f2:15:d2:ec
Signer

Actual PE Digest

7f:60:66:36:54:af:4e:0e:28:04:e1:82:9b:9e:8d:13:71:c2:36:54:26:56:b6:23:be:45:3e:7a:f2:15:d2:ec

Digest Algorithm

sha256

PE Digest Matches

true

ed:2c:ef:94:10:4b:ae:b4:23:ac:43:6a:ba:00:cc:35:cd:77:37:da
Signer

Actual PE Digest

ed:2c:ef:94:10:4b:ae:b4:23:ac:43:6a:ba:00:cc:35:cd:77:37:da

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\arkIOStub.pdb

Imports

kernel32

MultiByteToWideChar
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcr100

_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_initterm
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
free
_malloc_crt
??2@YAPAXI@Z
fclose
fseek
ftell
fwrite
??3@YAXPAX@Z
fread
memset
_wfopen
strlen
feof

Exports

Exports

arkCreateStub
arkDeleteStub
arkRegisterFS
cfileStubCreate
cfileStubDelete

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
arkImage.dll
.dll windows:5 windows x86 arch:x86

3a6b1dc8f56173e744983605c40adffe

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

56:f4:67:77:23:56:04:2a:9c:e1:58:c2:63:e8:14:f6:18:cb:43:44:a1:c0:6f:24:eb:43:47:37:a0:e9:36:6e
Signer

Actual PE Digest

56:f4:67:77:23:56:04:2a:9c:e1:58:c2:63:e8:14:f6:18:cb:43:44:a1:c0:6f:24:eb:43:47:37:a0:e9:36:6e

Digest Algorithm

sha256

PE Digest Matches

true

f2:0e:ab:71:15:dd:e1:4e:48:87:c0:29:f0:85:8a:6c:3c:0c:9c:40
Signer

Actual PE Digest

f2:0e:ab:71:15:dd:e1:4e:48:87:c0:29:f0:85:8a:6c:3c:0c:9c:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\arkImage.pdb

Imports

libpng

png_write_row
png_set_compression_strategy
png_get_color_type
png_destroy_read_struct
png_set_tRNS_to_alpha
png_set_interlace_handling
png_get_image_height
png_get_next_frame_fcTL
png_get_bit_depth
png_set_filler
png_get_gAMA
png_read_row
png_get_image_width
png_get_valid
png_set_gray_to_rgb
png_read_end
png_set_sig_bytes
png_read_update_info
png_set_read_fn
png_get_io_ptr
png_get_acTL
png_create_read_struct
png_sig_cmp
png_set_strip_16
png_read_info
png_read_frame_head
png_set_expand
png_set_PLTE
png_set_compression_level
png_set_IHDR
png_error
png_set_filter
png_set_bgr
png_create_write_struct
png_set_sRGB
png_set_tRNS
png_set_longjmp_fn
png_create_info_struct
png_write_end
png_set_gAMA
png_set_packing
png_set_write_fn
png_destroy_write_struct
png_write_image
png_write_info

libjpegturbo

ord86
ord91
ord52
ord103
ord46
ord30
ord94
ord82
ord53
ord80
ord83
ord47
ord31
ord92
ord39
ord84

libimagequant

liq_get_palette
liq_set_speed
liq_set_max_colors
liq_write_remapped_image_rows
liq_get_output_gamma
liq_image_get_height
liq_result_destroy
liq_set_output_gamma
liq_get_quantization_quality
liq_image_create_rgba
liq_set_dithering_level
liq_set_quality
liq_image_get_width
liq_quantize_image
liq_attr_create_with_allocator
liq_attr_destroy
liq_image_destroy

msvcr100

_open
_fdopen
_setmode
memcpy
_setjmp3
__CxxFrameHandler3
memset
_close
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
calloc
fclose
realloc
fread
setvbuf
memcpy_s
strncmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
longjmp
??3@YAXPAX@Z
_purecall
malloc
free

kernel32

GetTickCount
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
EncodePointer
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter

Exports

Exports

arkCreateDecoder
arkCreateEncoder
arkDestroyDecoder
arkDestroyEncoder
arkGetImageType
arkHasAlphaChannel
arkQuantizeImage
arkReadAnimatedImageInfo
arkReadImageFrame
arkReadImageInfo
arkSetActiveFrame
arkWriteImageFrame

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
atl100.dll
.dll windows:5 windows x86 arch:x86

0bbf1228f837ecb83ec693b705100bde

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f0:68:21:7e:93:65:dc:16:8d:63:38:8c:a0:0b:aa:99:e9:15:5f:8b
Signer

Actual PE Digest

f0:68:21:7e:93:65:dc:16:8d:63:38:8c:a0:0b:aa:99:e9:15:5f:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

atl100.i386.pdb

Imports

kernel32

lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleW
lstrcmpiW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetModuleFileNameW
WideCharToMultiByte
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
lstrcmpW
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
LockResource
LocalAlloc
InterlockedExchange
LoadLibraryA
HeapFree
DecodePointer
EncodePointer
HeapAlloc
GetCommandLineA
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
WriteFile
GetStdHandle
ExitProcess
HeapReAlloc
HeapSize
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
InterlockedCompareExchange
InterlockedPushEntrySList
GetProcessHeap
VirtualFree
VirtualAlloc
InterlockedPopEntrySList

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetPerUserRegistration
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlSetErrorInfo
AtlSetPerUserRegistration
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bugreport.exe
.exe windows:5 windows x86 arch:x86

d1bb0dd73867539ecc59e42340c305c4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c7:4f:f1:0d:5e:7b:0b:35:98:d8:ef:63:f9:a8:d9:a8:96:c9:8e:c3:e0:0e:bb:a8:05:51:e5:65:91:fd:f5:c0
Signer

Actual PE Digest

c7:4f:f1:0d:5e:7b:0b:35:98:d8:ef:63:f9:a8:d9:a8:96:c9:8e:c3:e0:0e:bb:a8:05:51:e5:65:91:fd:f5:c0

Digest Algorithm

sha256

PE Digest Matches

true

41:fc:24:2e:4f:53:03:f6:6e:bf:ca:49:15:9b:8a:cb:53:dd:39:35
Signer

Actual PE Digest

41:fc:24:2e:4f:53:03:f6:6e:bf:ca:49:15:9b:8a:cb:53:dd:39:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\bugreport.pdb

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

dbghelp

SymFunctionTableAccess
SymGetModuleInfo
SymGetModuleInfoW
SymCleanup
StackWalk
SymInitialize
SymSetOptions
SymLoadModule

winhttp

WinHttpSetOption
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpOpen
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse

psapi

GetModuleFileNameExA
EnumProcessModules
GetModuleFileNameExW

comctl32

ImageList_ReplaceIcon
ImageList_Create
InitCommonControlsEx

rpcrt4

UuidToStringW
UuidCreateSequential
RpcStringFreeW

shlwapi

PathAppendW
PathIsDirectoryW
PathFileExistsW
StrStrIA
StrStrIW
wnsprintfW
PathRemoveFileSpecW

kernel32

InterlockedPopEntrySList
EncodePointer
DecodePointer
InterlockedExchange
Sleep
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapDestroy
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedPushEntrySList
CopyFileW
GetSystemDirectoryW
DeviceIoControl
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WritePrivateProfileStringW
GetLocalTime
GetModuleFileNameW
GetPrivateProfileStringW
GetProcAddress
GetModuleHandleW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GetLastError
WideCharToMultiByte
lstrlenW
GetVolumeInformationW
MultiByteToWideChar
CloseHandle
SetFilePointer
ReadFile
CreateFileW
DeleteFileW
GetTickCount
FindNextFileW
FindFirstFileW
SetLastError
ReadProcessMemory
WriteProcessMemory
CreateFileA
VirtualQueryEx
lstrcpynW
GetCurrentProcess
lstrlenA
GetVersionExW
OpenThread
TlsAlloc
InitializeCriticalSection
VirtualProtect
HeapAlloc
GetProcessHeap
HeapFree
GlobalFree
SetFileAttributesW
IsBadReadPtr
FindClose
LocalFree
RemoveDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
WaitForSingleObject
CreateProcessW
GetCurrentProcessId
CreateEventW
LeaveCriticalSection
FlushFileBuffers
WriteFile
GetCurrentThreadId
TlsGetValue
EnterCriticalSection
GetFileSize
DeleteCriticalSection
TlsSetValue
TlsFree
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetEvent
OpenProcess
SetCurrentDirectoryW
SetUnhandledExceptionFilter
SetDllDirectoryW
HeapSetInformation
CreateThread
InterlockedIncrement
InterlockedDecrement
GetPrivateProfileSectionW
OutputDebugStringW
RaiseException
FlushInstructionCache
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryW
GetThreadSelectorEntry

user32

GetWindow
SetWindowTextW
DefWindowProcW
GetClientRect
InvalidateRect
SetWindowLongW
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
SendMessageW
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
SetClipboardData
LoadImageW
GetKeyState
MapWindowPoints
GetWindowRect
MapDialogRect
SetWindowPos
ShowWindow
CallWindowProcW
DrawIconEx
GetDlgItem
EnableWindow
SendDlgItemMessageW
DialogBoxParamW
EndDialog
LoadIconW
PostMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
CreateWindowExW
DispatchMessageW
TranslateMessage
CloseClipboard
GetMessageW
PostQuitMessage
KillTimer
IsWindow
SetTimer
GetWindowLongW
DestroyMenu
TrackPopupMenu
GetWindowThreadProcessId
GetMenuItemCount
CreatePopupMenu
UnregisterClassA
SetDlgItemTextW

gdi32

SetTextColor
GetStockObject
DeleteObject

advapi32

AdjustTokenPrivileges
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
LookupPrivilegeValueW
OpenProcessToken
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetUserNameW
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHBindToParent
ord155

ole32

CoCreateInstance
DoDragDrop
OleInitialize
OleUninitialize
CoTaskMemFree
CoUninitialize
CoFreeUnusedLibrariesEx
CoInitialize
CoCreateGuid

oleaut32

VariantClear
VariantInit
SysStringByteLen
SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen

msvcp100

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

msvcr100

fgets
strstr
_mbsstr
_mbscmp
_mbsupr_s
_itoa_s
strcpy_s
strncmp
atoi
memchr
memcmp
iswspace
srand
__argc
__wargv
wcsncmp
swscanf
strchr
_vsnwprintf
_vsnprintf
wcscpy_s
swprintf_s
malloc
wcsncat
_purecall
wcstoul
_unlock
__dllonexit
_lock
_configthreadlocale
_onexit
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_byteswap_ulong
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_wcsupr_s
_wcsicmp
rand
_snprintf
_wfopen
fread
fclose
strnlen
vsprintf_s
_vscprintf
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_mbsicmp
wcsncpy
_wtol
_wcslwr_s
_mbslwr_s
strrchr
_wfullpath
_snwprintf
_gmtime32
wcsstr
_wmakepath_s
_wsplitpath_s
strlen
toupper
isprint
isspace
tolower
_vsnwprintf_s
isalnum
swscanf_s
_vsnprintf_s
_wstat64
_wmkdir
iswalpha
iswdigit
iswalnum
_cexit
??3@YAXPAX@Z
_CxxThrowException
wmemcpy_s
memset
_vscwprintf
vswprintf_s
wcslen
memcpy_s
memmove_s
__CxxFrameHandler3
wcschr
wcsrchr
memcpy
memmove
wcscmp
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
wcsnlen
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_waccess
_wcsnicmp
??_V@YAXPAX@Z
free
calloc
_recalloc

netapi32

NetWkstaTransportEnum
NetApiBufferFree
Netbios

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jwlxtzqn.xml
jwlxtzqnui.xml
libexpatw.dll
.dll windows:5 windows x86 arch:x86

c157bbcecc45f4fa15658ac334ca8356

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:7c:fb:9a:b5:26:37:15:f8:e0:6e:cb:bc:b6:08:a8:83:05:55:d8:fc:2b:7c:ff:aa:6a:4b:08:e5:bc:77:09
Signer

Actual PE Digest

62:7c:fb:9a:b5:26:37:15:f8:e0:6e:cb:bc:b6:08:a8:83:05:55:d8:fc:2b:7c:ff:aa:6a:4b:08:e5:bc:77:09

Digest Algorithm

sha256

PE Digest Matches

true

03:6c:47:98:98:ae:37:65:45:5a:c5:2e:64:af:e3:a4:c3:d3:bc:25
Signer

Actual PE Digest

03:6c:47:98:98:ae:37:65:45:5a:c5:2e:64:af:e3:a4:c3:d3:bc:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\libexpatw.pdb

Imports

msvcr100

_lock
__dllonexit
_except_handler4_common
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
malloc
realloc
free
memset
memcpy
_onexit
memmove

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libimagequant.dll
.dll windows:5 windows x86 arch:x86

0797f6db47a26edb8ef2905918be3991

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ca:32:10:56:9b:19:60:c6:33:70:ec:0c:2e:1c:e6:3d:a3:cf:77:0b:36:a8:00:20:9e:24:d0:3f:ae:e4:80:98
Signer

Actual PE Digest

ca:32:10:56:9b:19:60:c6:33:70:ec:0c:2e:1c:e6:3d:a3:cf:77:0b:36:a8:00:20:9e:24:d0:3f:ae:e4:80:98

Digest Algorithm

sha256

PE Digest Matches

true

1d:b8:36:ee:f6:9b:66:c6:2e:57:6c:41:ba:81:14:df:c1:62:ae:2c
Signer

Actual PE Digest

1d:b8:36:ee:f6:9b:66:c6:2e:57:6c:41:ba:81:14:df:c1:62:ae:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\libimagequant.pdb

Imports

msvcr100

_crt_debugger_hook
__clean_type_info_names_internal
__CppXcptFilter
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_vsnprintf
calloc
ceil
vfprintf
srand
rand
fprintf
__iob_func
malloc
qsort
free
_unlock
memset
_CIpow
_CIsqrt
memcpy
abort

kernel32

IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer

Exports

Exports

liq_attr_copy
liq_attr_create
liq_attr_create_with_allocator
liq_attr_destroy
liq_crash_if_invalid_handle_pointer_given
liq_crash_if_invalid_pointer_given
liq_executing_user_callback
liq_get_max_colors
liq_get_max_quality
liq_get_min_opacity
liq_get_min_posterization
liq_get_min_quality
liq_get_output_gamma
liq_get_palette
liq_get_quantization_error
liq_get_quantization_quality
liq_get_speed
liq_image_create_custom
liq_image_create_rgba
liq_image_create_rgba_rows
liq_image_destroy
liq_image_get_height
liq_image_get_width
liq_image_set_memory_ownership
liq_quantize_image
liq_result_destroy
liq_set_dithering_level
liq_set_last_index_transparent
liq_set_log_callback
liq_set_log_flush_callback
liq_set_max_colors
liq_set_min_opacity
liq_set_min_posterization
liq_set_output_gamma
liq_set_quality
liq_set_speed
liq_write_remapped_image
liq_write_remapped_image_rows

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libjpegturbo.dll
.dll windows:5 windows x86 arch:x86

82f316d14124bd92a4422c869479738a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:54:26:5e:b9:1a:ba:24:04:4b:ca:7f:3a:a3:e5:cb:91:81:5a:5d:fa:09:7e:b8:3e:51:a6:84:20:ad:4c:cd
Signer

Actual PE Digest

35:54:26:5e:b9:1a:ba:24:04:4b:ca:7f:3a:a3:e5:cb:91:81:5a:5d:fa:09:7e:b8:3e:51:a6:84:20:ad:4c:cd

Digest Algorithm

sha256

PE Digest Matches

true

9e:fa:94:f4:ba:db:02:44:b4:2d:fd:a2:27:e8:d4:1d:92:23:e0:cf
Signer

Actual PE Digest

9e:fa:94:f4:ba:db:02:44:b4:2d:fd:a2:27:e8:d4:1d:92:23:e0:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\libjpegturbo.pdb

Imports

msvcr100

_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm
_encoded_null
_malloc_crt
sscanf
sprintf
__iob_func
fprintf
exit
fread
fflush
ferror
fwrite
malloc
free
memcpy
memset
__clean_type_info_names_internal
getenv

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

Exports

Exports

jcopy_block_row
jcopy_sample_rows
jdiv_round_up
jinit_1pass_quantizer
jinit_2pass_quantizer
jinit_c_coef_controller
jinit_c_main_controller
jinit_c_master_control
jinit_c_prep_controller
jinit_color_converter
jinit_color_deconverter
jinit_compress_master
jinit_d_coef_controller
jinit_d_main_controller
jinit_d_post_controller
jinit_downsampler
jinit_forward_dct
jinit_huff_decoder
jinit_huff_encoder
jinit_input_controller
jinit_inverse_dct
jinit_marker_reader
jinit_marker_writer
jinit_master_decompress
jinit_memory_mgr
jinit_merged_upsampler
jinit_phuff_decoder
jinit_phuff_encoder
jinit_upsampler
jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_abort
jpeg_abort_compress
jpeg_abort_decompress
jpeg_add_quant_table
jpeg_alloc_huff_table
jpeg_alloc_quant_table
jpeg_calc_jpeg_dimensions
jpeg_calc_output_dimensions
jpeg_consume_input
jpeg_copy_critical_parameters
jpeg_core_output_dimensions
jpeg_default_colorspace
jpeg_default_qtables
jpeg_destroy
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_fdct_float
jpeg_fdct_ifast
jpeg_fdct_islow
jpeg_fill_bit_buffer
jpeg_finish_compress
jpeg_finish_decompress
jpeg_finish_output
jpeg_free_large
jpeg_free_small
jpeg_gen_optimal_table
jpeg_get_large
jpeg_get_small
jpeg_has_multiple_scans
jpeg_huff_decode
jpeg_idct_1x1
jpeg_idct_2x2
jpeg_idct_4x4
jpeg_idct_float
jpeg_idct_ifast
jpeg_idct_islow
jpeg_input_complete
jpeg_make_c_derived_tbl
jpeg_make_d_derived_tbl
jpeg_mem_available
jpeg_mem_dest
jpeg_mem_init
jpeg_mem_src
jpeg_mem_term
jpeg_new_colormap
jpeg_open_backing_store
jpeg_quality_scaling
jpeg_read_coefficients
jpeg_read_header
jpeg_read_raw_data
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_save_markers
jpeg_set_colorspace
jpeg_set_defaults
jpeg_set_linear_quality
jpeg_set_marker_processor
jpeg_set_quality
jpeg_simple_progression
jpeg_start_compress
jpeg_start_decompress
jpeg_start_output
jpeg_std_error
jpeg_stdio_dest
jpeg_stdio_src
jpeg_suppress_tables
jpeg_write_coefficients
jpeg_write_m_byte
jpeg_write_m_header
jpeg_write_marker
jpeg_write_raw_data
jpeg_write_scanlines
jpeg_write_tables
jround_up
jzero_far

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libpng.dll
.dll windows:5 windows x86 arch:x86

6ffede990a404fff11a23a1590b3256b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

af:bf:11:f0:2d:1c:ee:fc:bf:85:50:3a:9b:2e:4d:4f:1b:d2:2b:37:f9:e1:8b:2d:3a:2c:2a:95:c8:03:4b:18
Signer

Actual PE Digest

af:bf:11:f0:2d:1c:ee:fc:bf:85:50:3a:9b:2e:4d:4f:1b:d2:2b:37:f9:e1:8b:2d:3a:2c:2a:95:c8:03:4b:18

Digest Algorithm

sha256

PE Digest Matches

true

32:46:87:84:84:db:ee:29:26:50:1e:21:a6:e2:59:a1:d9:35:11:58
Signer

Actual PE Digest

32:46:87:84:84:db:ee:29:26:50:1e:21:a6:e2:59:a1:d9:35:11:58

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\libpng.pdb

Imports

zlib

deflateInit2_
deflateReset
deflateEnd
deflate
inflateEnd
inflateInit_
inflate
inflateReset
crc32

msvcr100

fread
_CIpow
strtod
fwrite
fflush
_setjmp3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
longjmp
memcpy
free
malloc
abort
_snprintf
memset
_gmtime64

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
UnhandledExceptionFilter

Exports

Exports

png_access_version_number
png_build_grayscale_palette
png_calloc
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_acTL
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_error_ptr
png_get_filter_type
png_get_first_frame_is_hidden
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_interlace_type
png_get_io_chunk_name
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_next_frame_blend_op
png_get_next_frame_delay_den
png_get_next_frame_delay_num
png_get_next_frame_dispose_op
png_get_next_frame_fcTL
png_get_next_frame_height
png_get_next_frame_width
png_get_next_frame_x_offset
png_get_next_frame_y_offset
png_get_num_frames
png_get_num_plays
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pixel_aspect_ratio
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_31
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_meter
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_progressive_combine_row
png_read_end
png_read_frame_head
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_acTL
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_first_frame_is_hidden
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_next_frame_fcTL
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_frame_fn
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_frame_head
png_write_frame_tail
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libtcmalloc.dll
.dll windows:5 windows x86 arch:x86

56d75bc71a65d986da391e7bfdaecf98

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:6d:04:38:df:20:63:bc:b5:14:7c:cf:4b:af:2c:05:a3:d2:bc:db:c3:58:83:07:77:d5:24:a9:0f:e0:a0:31
Signer

Actual PE Digest

58:6d:04:38:df:20:63:bc:b5:14:7c:cf:4b:af:2c:05:a3:d2:bc:db:c3:58:83:07:77:d5:24:a9:0f:e0:a0:31

Digest Algorithm

sha256

PE Digest Matches

true

1c:db:40:09:98:39:fc:e6:70:10:a8:78:67:8f:bc:62:16:c3:0e:aa
Signer

Actual PE Digest

1c:db:40:09:98:39:fc:e6:70:10:a8:78:67:8f:bc:62:16:c3:0e:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\libtcmalloc.pdb

Imports

kernel32

GetEnvironmentVariableA
GetLastError
CloseHandle
VirtualAlloc
VirtualFree
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedExchange
InterlockedCompareExchange
SwitchToThread
GetSystemInfo
FlushInstructionCache
GetCurrentProcess
VirtualProtect
VirtualQuery
Sleep
GetProcAddress
GetModuleHandleA
GetVersionExA
CreateToolhelp32Snapshot
GetCurrentProcessId
Module32Next
Module32First
SetLastError
QueryPerformanceCounter
DisableThreadLibraryCalls
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetTickCount

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

??1exception@std@@UAE@XZ
memmove
abort
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memchr
sprintf
strtod
_strtoi64
_CIlog
_sleep
??0exception@std@@QAE@ABQBDH@Z
atoi
_errno
?terminate@@YAXXZ
_vsnprintf_s
_unlock
getenv
_lock
_onexit
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
_write
strtol
__CxxFrameHandler3
memcpy
??_V@YAXPAX@Z
??3@YAXPAX@Z
_purecall
??0exception@std@@QAE@ABQBD@Z
__dllonexit
memset
?what@exception@std@@UBEPBDXZ

shlwapi

SHGetValueA

Exports

Exports

??0MallocExtension@@QAE@ABV0@@Z
??0MallocExtension@@QAE@XZ
??0MiniDisassembler@sidestep@@QAE@XZ
??0MiniDisassembler@sidestep@@QAE@_N0@Z
??0PageHeap@tcmalloc@@QAE@XZ
??0StackTraceTable@tcmalloc@@QAE@XZ
??0SysAllocator@@QAE@ABV0@@Z
??0SysAllocator@@QAE@XZ
??1MallocExtension@@UAE@XZ
??1StackTraceTable@tcmalloc@@QAE@XZ
??1SysAllocator@@UAE@XZ
??4?$HookList@P6AHPBXIHHHJPAPAX@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AHPBXIPAH@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXH@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXPBX0IHHHJ@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXPBX0IIH0@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXPBX@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXPBXH@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXPBXI@Z@internal@base@@QAEAAU012@ABU012@@Z
??4?$HookList@P6AXPBXIHHHJ@Z@internal@base@@QAEAAU012@ABU012@@Z
??4MallocExtension@@QAEAAV0@ABV0@@Z
??4MallocHook@@QAEAAV0@ABV0@@Z
??4MiniDisassembler@sidestep@@QAEAAV01@ABV01@@Z
??4PageHeap@tcmalloc@@QAEAAV01@ABV01@@Z
??4PreamblePatcher@sidestep@@QAEAAV01@ABV01@@Z
??4Sampler@tcmalloc@@QAEAAV01@ABV01@@Z
??4StackTraceTable@tcmalloc@@QAEAAV01@ABV01@@Z
??4SysAllocator@@QAEAAV0@ABV0@@Z
??_7MallocExtension@@6B@
??_7SysAllocator@@6B@
?Add@?$HookList@P6AHPBXIHHHJPAPAX@Z@internal@base@@QAE_NP6AHPBXIHHHJPAPAX@Z@Z
?Add@?$HookList@P6AHPBXIPAH@Z@internal@base@@QAE_NP6AHPBXIPAH@Z@Z
?Add@?$HookList@P6AXH@Z@internal@base@@QAE_NP6AXH@Z@Z
?Add@?$HookList@P6AXPBX0IHHHJ@Z@internal@base@@QAE_NP6AXPBX0IHHHJ@Z@Z
?Add@?$HookList@P6AXPBX0IIH0@Z@internal@base@@QAE_NP6AXPBX0IIH0@Z@Z
?Add@?$HookList@P6AXPBX@Z@internal@base@@QAE_NP6AXPBX@Z@Z
?Add@?$HookList@P6AXPBXH@Z@internal@base@@QAE_NP6AXPBXH@Z@Z
?Add@?$HookList@P6AXPBXI@Z@internal@base@@QAE_NP6AXPBXI@Z@Z
?Add@?$HookList@P6AXPBXIHHHJ@Z@internal@base@@QAE_NP6AXPBXIHHHJ@Z@Z
?AddDeleteHook@MallocHook@@SA_NP6AXPBX@Z@Z
?AddMmapHook@MallocHook@@SA_NP6AXPBX0IHHHJ@Z@Z
?AddMremapHook@MallocHook@@SA_NP6AXPBX0IIH0@Z@Z
?AddMunmapHook@MallocHook@@SA_NP6AXPBXI@Z@Z
?AddNewHook@MallocHook@@SA_NP6AXPBXI@Z@Z
?AddPreMmapHook@MallocHook@@SA_NP6AXPBXIHHHJ@Z@Z
?AddPreSbrkHook@MallocHook@@SA_NP6AXH@Z@Z
?AddSbrkHook@MallocHook@@SA_NP6AXPBXH@Z@Z
?AddTrace@StackTraceTable@tcmalloc@@QAEXABUStackTrace@2@@Z
?AllocLarge@PageHeap@tcmalloc@@AAEPAUSpan@2@I@Z
?AllocPageNear@PreamblePatcher@sidestep@@CAPAXPAX@Z
?AllocPreambleBlockNear@PreamblePatcher@sidestep@@SAPAEPAX@Z
?CacheSizeClass@PageHeap@tcmalloc@@QBEXII@Z
?Carve@PageHeap@tcmalloc@@AAEPAUSpan@2@PAU32@I@Z
?Check@PageHeap@tcmalloc@@QAE_NXZ
?CheckExpensive@PageHeap@tcmalloc@@QAE_NXZ
?CheckList@PageHeap@tcmalloc@@QAE_NPAUSpan@2@IIH@Z
?CommitSpan@PageHeap@tcmalloc@@AAEXPAUSpan@2@@Z
?DecommitSpan@PageHeap@tcmalloc@@AAE_NPAUSpan@2@@Z
?Delete@PageHeap@tcmalloc@@QAEXPAUSpan@2@@Z
?Disassemble@MiniDisassembler@sidestep@@QAE?AW4InstructionType@2@PAEAAI@Z
?EnsureLimit@PageHeap@tcmalloc@@AAE_NI_N@Z
?FLAGS_cleanup_old_heap_profiles@FLAG__namespace_do_not_use_directly_use_DECLARE_bool_instead@@3_NA
?FLAGS_heap_check_max_leaks@FLAG__namespace_do_not_use_directly_use_DECLARE_int32_instead@@3HA
?FLAGS_tcmalloc_heap_limit_mb@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_tcmalloc_large_alloc_report_threshold@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_tcmalloc_release_rate@FLAG__namespace_do_not_use_directly_use_DECLARE_double_instead@@3NA
?FLAGS_tcmalloc_sample_parameter@FLAG__namespace_do_not_use_directly_use_DECLARE_int64_instead@@3_JA
?FLAGS_verbose@FLAG__namespace_do_not_use_directly_use_DECLARE_int32_instead@@3HA
?FastLog2@Sampler@tcmalloc@@SANABN@Z
?FreePreambleBlock@PreamblePatcher@sidestep@@SAXPAE@Z
?GetAggressiveDecommit@PageHeap@tcmalloc@@QAE_NXZ
?GetAllocatedSize@MallocExtension@@UAEIPBX@Z
?GetCallerStackTrace@MallocHook@@SAHPAPAXHH@Z
?GetDeleteHook@MallocHook@@SAP6AXPBX@ZXZ
?GetDescriptor@PageHeap@tcmalloc@@QBEPAUSpan@2@I@Z
?GetEstimatedAllocatedSize@MallocExtension@@UAEII@Z
?GetFreeListSizes@MallocExtension@@UAEXPAV?$vector@UFreeListInfo@MallocExtension@@V?$allocator@UFreeListInfo@MallocExtension@@@std@@@std@@@Z
?GetHeapGrowthStacks@MallocExtension@@UAEXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetHeapSample@MallocExtension@@UAEXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetLargeSpanStats@PageHeap@tcmalloc@@QAEXPAULargeSpanStats@12@@Z
?GetMemoryReleaseRate@MallocExtension@@UAENXZ
?GetMmapHook@MallocHook@@SAP6AXPBX0IHHHJ@ZXZ
?GetMremapHook@MallocHook@@SAP6AXPBX0IIH0@ZXZ
?GetMunmapHook@MallocHook@@SAP6AXPBXI@ZXZ
?GetNewHook@MallocHook@@SAP6AXPBXI@ZXZ
?GetNextRange@PageHeap@tcmalloc@@QAE_NIPAUMallocRange@base@@@Z
?GetNumericProperty@MallocExtension@@UAE_NPBDPAI@Z
?GetOwnership@MallocExtension@@UAE?AW4Ownership@1@PBX@Z
?GetPreMmapHook@MallocHook@@SAP6AXPBXIHHHJ@ZXZ
?GetPreSbrkHook@MallocHook@@SAP6AXH@ZXZ
?GetSamplePeriod@Sampler@tcmalloc@@QAEHXZ
?GetSbrkHook@MallocHook@@SAP6AXPBXH@ZXZ
?GetSizeClassIfCached@PageHeap@tcmalloc@@QBEII@Z
?GetSmallSpanStats@PageHeap@tcmalloc@@QAEXPAUSmallSpanStats@12@@Z
?GetStackFrames@@YAHPAPAXPAHHH@Z
?GetStackTrace@@YAHPAPAXHH@Z
?GetStats@MallocExtension@@UAEXPADH@Z
?GetSystemAllocator@MallocExtension@@UAEPAVSysAllocator@@XZ
?GrowHeap@PageHeap@tcmalloc@@AAE_NI@Z
?IncrementalScavenge@PageHeap@tcmalloc@@AAEXI@Z
?Init@Sampler@tcmalloc@@QAEXI@Z
?InitStatics@Sampler@tcmalloc@@SAXXZ
?Initialize@MallocExtension@@SAXXZ
?Initialize@MiniDisassembler@sidestep@@AAEXXZ
?Initialize@PreamblePatcher@sidestep@@CAXXZ
?InvokeDeleteHook@MallocHook@@SAXPBX@Z
?InvokeDeleteHookSlow@MallocHook@@CAXPBX@Z
?InvokeMmapHook@MallocHook@@SAXPBX0IHHHJ@Z
?InvokeMmapHookSlow@MallocHook@@CAXPBX0IHHHJ@Z
?InvokeMmapReplacement@MallocHook@@SA_NPBXIHHHJPAPAX@Z
?InvokeMmapReplacementSlow@MallocHook@@CA_NPBXIHHHJPAPAX@Z
?InvokeMremapHook@MallocHook@@SAXPBX0IIH0@Z
?InvokeMremapHookSlow@MallocHook@@CAXPBX0IIH0@Z
?InvokeMunmapHook@MallocHook@@SAXPBXI@Z
?InvokeMunmapHookSlow@MallocHook@@CAXPBXI@Z
?InvokeMunmapReplacement@MallocHook@@SA_NPBXIPAH@Z
?InvokeMunmapReplacementSlow@MallocHook@@CA_NPBXIPAH@Z
?InvokeNewHook@MallocHook@@SAXPBXI@Z
?InvokeNewHookSlow@MallocHook@@CAXPBXI@Z
?InvokePreMmapHook@MallocHook@@SAXPBXIHHHJ@Z
?InvokePreMmapHookSlow@MallocHook@@CAXPBXIHHHJ@Z
?InvokePreSbrkHook@MallocHook@@SAXH@Z
?InvokePreSbrkHookSlow@MallocHook@@CAXH@Z
?InvokeSbrkHook@MallocHook@@SAXPBXH@Z
?InvokeSbrkHookSlow@MallocHook@@CAXPBXH@Z
?IsMovWithDisplacement@PreamblePatcher@sidestep@@CA_NPAEI@Z
?IsNearAbsoluteCall@PreamblePatcher@sidestep@@CA_NPAEI@Z
?IsNearConditionalJump@PreamblePatcher@sidestep@@CA_NPAEI@Z
?IsNearRelativeCall@PreamblePatcher@sidestep@@CA_NPAEI@Z
?IsNearRelativeJump@PreamblePatcher@sidestep@@CA_NPAEI@Z
?IsShortConditionalJump@PreamblePatcher@sidestep@@CA_NPAEI@Z
?IsShortJump@PreamblePatcher@sidestep@@CA_NPAEI@Z
?Log@tcmalloc@@YAXW4LogMode@1@PBDHVLogItem@1@222@Z
?MallocMemoryStats@MallocExtension@@UAE_NPAHPAIQAH@Z
?MarkThreadBusy@MallocExtension@@UAEXXZ
?MarkThreadIdle@MallocExtension@@UAEXXZ
?MayMergeSpans@PageHeap@tcmalloc@@AAE_NPAUSpan@2@0@Z
?MergeIntoFreeList@PageHeap@tcmalloc@@AAEXPAUSpan@2@@Z
?New@PageHeap@tcmalloc@@QAEPAUSpan@2@I@Z
?NextRandom@Sampler@tcmalloc@@SA_K_K@Z
?PatchMovWithDisplacement@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PAEI0PAII@Z
?PatchNearJumpOrCall@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PAEI0PAII@Z
?PatchShortConditionalJump@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PAEI0PAII@Z
?PatchShortJump@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PAEI0PAII@Z
?PickNextSamplingPoint@Sampler@tcmalloc@@QAEIXZ
?PopulateFastLog2Table@Sampler@tcmalloc@@SAXXZ
?PrependToFreeList@PageHeap@tcmalloc@@AAEXPAUSpan@2@@Z
?ProcessModrm@MiniDisassembler@sidestep@@AAE_NPAEAAI@Z
?ProcessOpcode@MiniDisassembler@sidestep@@AAE?AW4InstructionType@2@PAEIAAI@Z
?ProcessOperand@MiniDisassembler@sidestep@@AAE_NH@Z
?ProcessPrefixes@MiniDisassembler@sidestep@@AAE?AW4InstructionType@2@PAEAAI@Z
?ProcessSib@MiniDisassembler@sidestep@@AAE_NPAEEAAI@Z
?Ranges@MallocExtension@@UAEXPAXP6AX0PBUMallocRange@base@@@Z@Z
?RawPatch@PreamblePatcher@sidestep@@SA?AW4SideStepError@2@PAX0PAPAX@Z
?RawPatchWithStub@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PAX0PAEKPAK@Z
?RawPatchWithStubAndProtections@PreamblePatcher@sidestep@@CA?AW4SideStepError@2@PAX0PAEKPAK@Z
?ReadHeapGrowthStackTraces@MallocExtension@@UAEPAPAXXZ
?ReadStackTraces@MallocExtension@@UAEPAPAXPAH@Z
?ReadStackTracesAndClear@StackTraceTable@tcmalloc@@QAEPAPAXXZ
?RecordSpan@PageHeap@tcmalloc@@AAEXPAUSpan@2@@Z
?Register@MallocExtension@@SAXPAV1@@Z
?RegisterSizeClass@PageHeap@tcmalloc@@QAEXPAUSpan@2@I@Z
?ReleaseAtLeastNPages@PageHeap@tcmalloc@@QAEII@Z
?ReleaseFreeMemory@MallocExtension@@UAEXXZ
?ReleaseLastNormalSpan@PageHeap@tcmalloc@@AAEIPAUSpanList@12@@Z
?ReleaseToSystem@MallocExtension@@UAEXI@Z
?Remove@?$HookList@P6AHPBXIHHHJPAPAX@Z@internal@base@@QAE_NP6AHPBXIHHHJPAPAX@Z@Z
?Remove@?$HookList@P6AHPBXIPAH@Z@internal@base@@QAE_NP6AHPBXIPAH@Z@Z
?Remove@?$HookList@P6AXH@Z@internal@base@@QAE_NP6AXH@Z@Z
?Remove@?$HookList@P6AXPBX0IHHHJ@Z@internal@base@@QAE_NP6AXPBX0IHHHJ@Z@Z
?Remove@?$HookList@P6AXPBX0IIH0@Z@internal@base@@QAE_NP6AXPBX0IIH0@Z@Z
?Remove@?$HookList@P6AXPBX@Z@internal@base@@QAE_NP6AXPBX@Z@Z
?Remove@?$HookList@P6AXPBXH@Z@internal@base@@QAE_NP6AXPBXH@Z@Z
?Remove@?$HookList@P6AXPBXI@Z@internal@base@@QAE_NP6AXPBXI@Z@Z
?Remove@?$HookList@P6AXPBXIHHHJ@Z@internal@base@@QAE_NP6AXPBXIHHHJ@Z@Z
?RemoveDeleteHook@MallocHook@@SA_NP6AXPBX@Z@Z
?RemoveFromFreeList@PageHeap@tcmalloc@@AAEXPAUSpan@2@@Z
?RemoveMmapHook@MallocHook@@SA_NP6AXPBX0IHHHJ@Z@Z
?RemoveMmapReplacement@MallocHook@@SA_NP6AHPBXIHHHJPAPAX@Z@Z
?RemoveMremapHook@MallocHook@@SA_NP6AXPBX0IIH0@Z@Z
?RemoveMunmapHook@MallocHook@@SA_NP6AXPBXI@Z@Z
?RemoveMunmapReplacement@MallocHook@@SA_NP6AHPBXIPAH@Z@Z
?RemoveNewHook@MallocHook@@SA_NP6AXPBXI@Z@Z
?RemovePreMmapHook@MallocHook@@SA_NP6AXPBXIHHHJ@Z@Z
?RemovePreSbrkHook@MallocHook@@SA_NP6AXH@Z@Z
?RemoveSbrkHook@MallocHook@@SA_NP6AXPBXH@Z@Z
?ResolveTargetImpl@PreamblePatcher@sidestep@@CAPAXPAE0_N@Z
?SampleAllocation@Sampler@tcmalloc@@QAE_NI@Z
?SearchFreeAndLargeLists@PageHeap@tcmalloc@@AAEPAUSpan@2@I@Z
?SetAggressiveDecommit@PageHeap@tcmalloc@@QAEX_N@Z
?SetDeleteHook@MallocHook@@SAP6AXPBX@ZP6AX0@Z@Z
?SetMemoryReleaseRate@MallocExtension@@UAEXN@Z
?SetMmapHook@MallocHook@@SAP6AXPBX0IHHHJ@ZP6AX00IHHHJ@Z@Z
?SetMmapReplacement@MallocHook@@SA_NP6AHPBXIHHHJPAPAX@Z@Z
?SetMremapHook@MallocHook@@SAP6AXPBX0IIH0@ZP6AX00IIH0@Z@Z
?SetMunmapHook@MallocHook@@SAP6AXPBXI@ZP6AX0I@Z@Z
?SetMunmapReplacement@MallocHook@@SA_NP6AHPBXIPAH@Z@Z
?SetNewHook@MallocHook@@SAP6AXPBXI@ZP6AX0I@Z@Z
?SetNumericProperty@MallocExtension@@UAE_NPBDI@Z
?SetPreMmapHook@MallocHook@@SAP6AXPBXIHHHJ@ZP6AX0IHHHJ@Z@Z
?SetPreSbrkHook@MallocHook@@SAP6AXH@ZP6AXH@Z@Z
?SetSbrkHook@MallocHook@@SAP6AXPBXH@ZP6AX0H@Z@Z
?SetSystemAllocator@MallocExtension@@UAEXPAVSysAllocator@@@Z
?Split@PageHeap@tcmalloc@@QAEPAUSpan@2@PAU32@I@Z
?TCMalloc_SystemAlloc@@YAPAXIPAII@Z
?TCMalloc_SystemCommit@@YAXPAXI@Z
?TCMalloc_SystemRelease@@YA_NPAXI@Z
?TCMalloc_SystemTaken@@3IA
?Traverse@?$HookList@P6AHPBXIHHHJPAPAX@Z@internal@base@@QBEHPAP6AHPBXIHHHJPAPAX@ZH@Z
?Traverse@?$HookList@P6AHPBXIPAH@Z@internal@base@@QBEHPAP6AHPBXIPAH@ZH@Z
?Traverse@?$HookList@P6AXH@Z@internal@base@@QBEHPAP6AXH@ZH@Z
?Traverse@?$HookList@P6AXPBX0IHHHJ@Z@internal@base@@QBEHPAP6AXPBX0IHHHJ@ZH@Z
?Traverse@?$HookList@P6AXPBX0IIH0@Z@internal@base@@QBEHPAP6AXPBX0IIH0@ZH@Z
?Traverse@?$HookList@P6AXPBX@Z@internal@base@@QBEHPAP6AXPBX@ZH@Z
?Traverse@?$HookList@P6AXPBXH@Z@internal@base@@QBEHPAP6AXPBXH@ZH@Z
?Traverse@?$HookList@P6AXPBXI@Z@internal@base@@QBEHPAP6AXPBXI@ZH@Z
?Traverse@?$HookList@P6AXPBXIHHHJ@Z@internal@base@@QBEHPAP6AXPBXIHHHJ@ZH@Z
?UnhookedMMap@MallocHook@@SAPAXPAXIHHHJ@Z
?UnhookedMUnmap@MallocHook@@SAHPAXI@Z
?Unpatch@PreamblePatcher@sidestep@@SA?AW4SideStepError@2@PAX00@Z
?VerifyAllMemory@MallocExtension@@UAE_NXZ
?VerifyArrayNewMemory@MallocExtension@@UAE_NPBX@Z
?VerifyMallocMemory@MallocExtension@@UAE_NPBX@Z
?VerifyNewMemory@MallocExtension@@UAE_NPBX@Z
?bucket_total@StackTraceTable@tcmalloc@@QBEHXZ
?depth_total@StackTraceTable@tcmalloc@@QBEHXZ
?empty@?$HookList@P6AHPBXIHHHJPAPAX@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AHPBXIPAH@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXH@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXPBX0IHHHJ@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXPBX0IIH0@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXPBX@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXPBXH@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXPBXI@Z@internal@base@@QBE_NXZ
?empty@?$HookList@P6AXPBXIHHHJ@Z@internal@base@@QBE_NXZ
?granularity_@PreamblePatcher@sidestep@@0JA
?initialized_@PreamblePatcher@sidestep@@0_NA
?instance@MallocExtension@@SAPAV1@XZ
?kDefaultReleaseDelay@PageHeap@tcmalloc@@0HB
?kFastlogMask@Sampler@tcmalloc@@0HB
?kFastlogNumBits@Sampler@tcmalloc@@0HB
?kHashTableSize@StackTraceTable@tcmalloc@@0HB
?kMaxReleaseDelay@PageHeap@tcmalloc@@0HB
?kMinSystemAlloc@PageHeap@tcmalloc@@0HB
?kPageMapBigAllocationThreshold@PageHeap@tcmalloc@@0IB
?log_message_writer@tcmalloc@@3P6AXPBDH@ZA
?log_table_@Sampler@tcmalloc@@0PANA
?pagesize_@PreamblePatcher@sidestep@@0JA
?preamble_pages_@PreamblePatcher@sidestep@@0PAUPreamblePage@12@A
?s_ia16_modrm_map_@MiniDisassembler@sidestep@@0QBUModrmEntry@2@B
?s_ia32_modrm_map_@MiniDisassembler@sidestep@@0QBUModrmEntry@2@B
?s_ia32_opcode_map_@MiniDisassembler@sidestep@@0QBUOpcodeTable@2@B
?stats@PageHeap@tcmalloc@@QBE?AUStats@12@XZ
?sys_alloc@@3PAVSysAllocator@@A
MallocExtension_GetAllocatedSize
MallocExtension_GetEstimatedAllocatedSize
MallocExtension_GetNumericProperty
MallocExtension_GetOwnership
MallocExtension_GetStats
MallocExtension_MallocMemoryStats
MallocExtension_MarkThreadBusy
MallocExtension_MarkThreadIdle
MallocExtension_ReleaseFreeMemory
MallocExtension_ReleaseToSystem
MallocExtension_SetNumericProperty
MallocExtension_VerifyAllMemory
MallocExtension_VerifyArrayNewMemory
MallocExtension_VerifyMallocMemory
MallocExtension_VerifyNewMemory
MallocHook_AddDeleteHook
MallocHook_AddMmapHook
MallocHook_AddMremapHook
MallocHook_AddMunmapHook
MallocHook_AddNewHook
MallocHook_AddPreMmapHook
MallocHook_AddPreSbrkHook
MallocHook_AddSbrkHook
MallocHook_GetCallerStackTrace
MallocHook_RemoveDeleteHook
MallocHook_RemoveMmapHook
MallocHook_RemoveMremapHook
MallocHook_RemoveMunmapHook
MallocHook_RemoveNewHook
MallocHook_RemovePreMmapHook
MallocHook_RemovePreSbrkHook
MallocHook_RemoveSbrkHook
MallocHook_SetDeleteHook
MallocHook_SetMmapHook
MallocHook_SetMremapHook
MallocHook_SetMunmapHook
MallocHook_SetNewHook
MallocHook_SetPreMmapHook
MallocHook_SetPreSbrkHook
MallocHook_SetSbrkHook
WriteToStderr
__sbrk
getpagesize
tc_calloc
tc_cfree
tc_delete
tc_delete_nothrow
tc_deletearray
tc_deletearray_nothrow
tc_free
tc_malloc
tc_malloc_size
tc_malloc_stats
tc_mallopt
tc_memalign
tc_new
tc_new_nothrow
tc_newarray
tc_newarray_nothrow
tc_posix_memalign
tc_pvalloc
tc_realloc
tc_set_new_mode
tc_valloc
tc_version

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lua.dll
.dll windows:5 windows x86 arch:x86

f17081070ed9344c9e7e8bec598ec8fd

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:23:0c:64:a9:06:6d:24:d3:35:a0:6a:0c:f1:10:df:10:56:5e:89:e4:b6:b6:9e:61:f9:88:ee:56:63:d9:58
Signer

Actual PE Digest

15:23:0c:64:a9:06:6d:24:d3:35:a0:6a:0c:f1:10:df:10:56:5e:89:e4:b6:b6:9e:61:f9:88:ee:56:63:d9:58

Digest Algorithm

sha256

PE Digest Matches

true

96:12:40:61:06:01:37:41:1a:b0:29:b1:be:cf:8e:ce:21:90:d3:ef
Signer

Actual PE Digest

96:12:40:61:06:01:37:41:1a:b0:29:b1:be:cf:8e:ce:21:90:d3:ef

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\lua.pdb

Imports

kernel32

GetModuleFileNameA
FormatMessageA
GetLastError
FreeLibrary
LoadLibraryExA
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcr100

toupper
isdigit
isalnum
strspn
strchr
fgets
abort
_CxxThrowException
__CxxFrameHandler3
_pclose
_popen
tmpfile
fscanf
ungetc
clearerr
_ftelli64
_fseeki64
setvbuf
localeconv
_CIsin
_CIsinh
_CIcos
_CIcosh
_CItan
_CItanh
_CIasin
_CIacos
_CIatan
_CIatan2
ceil
floor
_CIfmod
modf
_CIsqrt
_CIpow
_CIlog10
_CIlog
_CIexp
frexp
ldexp
rand
fwrite
_HUGE
strrchr
getenv
strtod
strpbrk
sprintf
_difftime64
_gmtime64
_localtime64
_mktime64
_time64
system
remove
rename
tmpnam
clock
strftime
setlocale
exit
tolower
isxdigit
isupper
isspace
ispunct
isgraph
iscntrl
isalpha
islower
memchr
strcoll
??3@YAXPAX@Z
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
fprintf
fflush
free
realloc
strstr
__iob_func
freopen
fopen
ferror
fclose
getc
feof
fread
memcpy
_errno
strerror
srand

Exports

Exports

?luaL_addlstring@@YAXPAUluaL_Buffer@@PBDI@Z
?luaL_addstring@@YAXPAUluaL_Buffer@@PBD@Z
?luaL_addvalue@@YAXPAUluaL_Buffer@@@Z
?luaL_argerror@@YAHPAUlua_State@@HPBD@Z
?luaL_buffinit@@YAXPAUlua_State@@PAUluaL_Buffer@@@Z
?luaL_buffinitsize@@YAPADPAUlua_State@@PAUluaL_Buffer@@I@Z
?luaL_callmeta@@YAHPAUlua_State@@HPBD@Z
?luaL_checkany@@YAXPAUlua_State@@H@Z
?luaL_checkinteger@@YAHPAUlua_State@@H@Z
?luaL_checklstring@@YAPBDPAUlua_State@@HPAI@Z
?luaL_checknumber@@YANPAUlua_State@@H@Z
?luaL_checkoption@@YAHPAUlua_State@@HPBDQBQBD@Z
?luaL_checkstack@@YAXPAUlua_State@@HPBD@Z
?luaL_checktype@@YAXPAUlua_State@@HH@Z
?luaL_checkudata@@YAPAXPAUlua_State@@HPBD@Z
?luaL_checkunsigned@@YAIPAUlua_State@@H@Z
?luaL_checkversion_@@YAXPAUlua_State@@N@Z
?luaL_error@@YAHPAUlua_State@@PBDZZ
?luaL_execresult@@YAHPAUlua_State@@H@Z
?luaL_fileresult@@YAHPAUlua_State@@HPBD@Z
?luaL_getmetafield@@YAHPAUlua_State@@HPBD@Z
?luaL_getsubtable@@YAHPAUlua_State@@HPBD@Z
?luaL_gsub@@YAPBDPAUlua_State@@PBD11@Z
?luaL_len@@YAHPAUlua_State@@H@Z
?luaL_loadbufferx@@YAHPAUlua_State@@PBDI11@Z
?luaL_loadfilex@@YAHPAUlua_State@@PBD1@Z
?luaL_loadstring@@YAHPAUlua_State@@PBD@Z
?luaL_newmetatable@@YAHPAUlua_State@@PBD@Z
?luaL_newstate@@YAPAUlua_State@@XZ
?luaL_openlibs@@YAXPAUlua_State@@@Z
?luaL_optinteger@@YAHPAUlua_State@@HH@Z
?luaL_optlstring@@YAPBDPAUlua_State@@HPBDPAI@Z
?luaL_optnumber@@YANPAUlua_State@@HN@Z
?luaL_optunsigned@@YAIPAUlua_State@@HI@Z
?luaL_prepbuffsize@@YAPADPAUluaL_Buffer@@I@Z
?luaL_pushresult@@YAXPAUluaL_Buffer@@@Z
?luaL_pushresultsize@@YAXPAUluaL_Buffer@@I@Z
?luaL_ref@@YAHPAUlua_State@@H@Z
?luaL_requiref@@YAXPAUlua_State@@PBDP6AH0@ZH@Z
?luaL_setfuncs@@YAXPAUlua_State@@PBUluaL_Reg@@H@Z
?luaL_setmetatable@@YAXPAUlua_State@@PBD@Z
?luaL_testudata@@YAPAXPAUlua_State@@HPBD@Z
?luaL_tolstring@@YAPBDPAUlua_State@@HPAI@Z
?luaL_traceback@@YAXPAUlua_State@@0PBDH@Z
?luaL_unref@@YAXPAUlua_State@@HH@Z
?luaL_where@@YAXPAUlua_State@@H@Z
?lua_absindex@@YAHPAUlua_State@@H@Z
?lua_arith@@YAXPAUlua_State@@H@Z
?lua_atpanic@@YAP6AHPAUlua_State@@@Z0P6AH0@Z@Z
?lua_callk@@YAXPAUlua_State@@HHHP6AH0@Z@Z
?lua_checkstack@@YAHPAUlua_State@@H@Z
?lua_close@@YAXPAUlua_State@@@Z
?lua_compare@@YAHPAUlua_State@@HHH@Z
?lua_concat@@YAXPAUlua_State@@H@Z
?lua_copy@@YAXPAUlua_State@@HH@Z
?lua_createtable@@YAXPAUlua_State@@HH@Z
?lua_dump@@YAHPAUlua_State@@P6AH0PBXIPAX@Z2@Z
?lua_error@@YAHPAUlua_State@@@Z
?lua_gc@@YAHPAUlua_State@@HH@Z
?lua_getallocf@@YAP6APAXPAX0II@ZPAUlua_State@@PAPAX@Z
?lua_getctx@@YAHPAUlua_State@@PAH@Z
?lua_getfield@@YAXPAUlua_State@@HPBD@Z
?lua_getglobal@@YAXPAUlua_State@@PBD@Z
?lua_gethook@@YAP6AXPAUlua_State@@PAUlua_Debug@@@Z0@Z
?lua_gethookcount@@YAHPAUlua_State@@@Z
?lua_gethookmask@@YAHPAUlua_State@@@Z
?lua_getinfo@@YAHPAUlua_State@@PBDPAUlua_Debug@@@Z
?lua_getlocal@@YAPBDPAUlua_State@@PBUlua_Debug@@H@Z
?lua_getmetatable@@YAHPAUlua_State@@H@Z
?lua_getstack@@YAHPAUlua_State@@HPAUlua_Debug@@@Z
?lua_gettable@@YAXPAUlua_State@@H@Z
?lua_gettop@@YAHPAUlua_State@@@Z
?lua_getupvalue@@YAPBDPAUlua_State@@HH@Z
?lua_getuservalue@@YAXPAUlua_State@@H@Z
?lua_insert@@YAXPAUlua_State@@H@Z
?lua_iscfunction@@YAHPAUlua_State@@H@Z
?lua_isnumber@@YAHPAUlua_State@@H@Z
?lua_isstring@@YAHPAUlua_State@@H@Z
?lua_isuserdata@@YAHPAUlua_State@@H@Z
?lua_len@@YAXPAUlua_State@@H@Z
?lua_load@@YAHPAUlua_State@@P6APBD0PAXPAI@Z1PBD4@Z
?lua_newstate@@YAPAUlua_State@@P6APAXPAX0II@Z0@Z
?lua_newthread@@YAPAUlua_State@@PAU1@@Z
?lua_newuserdata@@YAPAXPAUlua_State@@I@Z
?lua_next@@YAHPAUlua_State@@H@Z
?lua_pcallk@@YAHPAUlua_State@@HHHHP6AH0@Z@Z
?lua_pushboolean@@YAXPAUlua_State@@H@Z
?lua_pushcclosure@@YAXPAUlua_State@@P6AH0@ZH@Z
?lua_pushfstring@@YAPBDPAUlua_State@@PBDZZ
?lua_pushinteger@@YAXPAUlua_State@@H@Z
?lua_pushlightuserdata@@YAXPAUlua_State@@PAX@Z
?lua_pushlstring@@YAPBDPAUlua_State@@PBDI@Z
?lua_pushnil@@YAXPAUlua_State@@@Z
?lua_pushnumber@@YAXPAUlua_State@@N@Z
?lua_pushstring@@YAPBDPAUlua_State@@PBD@Z
?lua_pushthread@@YAHPAUlua_State@@@Z
?lua_pushunsigned@@YAXPAUlua_State@@I@Z
?lua_pushvalue@@YAXPAUlua_State@@H@Z
?lua_pushvfstring@@YAPBDPAUlua_State@@PBDPAD@Z
?lua_rawequal@@YAHPAUlua_State@@HH@Z
?lua_rawget@@YAXPAUlua_State@@H@Z
?lua_rawgeti@@YAXPAUlua_State@@HH@Z
?lua_rawgetp@@YAXPAUlua_State@@HPBX@Z
?lua_rawlen@@YAIPAUlua_State@@H@Z
?lua_rawset@@YAXPAUlua_State@@H@Z
?lua_rawseti@@YAXPAUlua_State@@HH@Z
?lua_rawsetp@@YAXPAUlua_State@@HPBX@Z
?lua_remove@@YAXPAUlua_State@@H@Z
?lua_replace@@YAXPAUlua_State@@H@Z
?lua_resume@@YAHPAUlua_State@@0H@Z
?lua_setallocf@@YAXPAUlua_State@@P6APAXPAX1II@Z1@Z
?lua_setfield@@YAXPAUlua_State@@HPBD@Z
?lua_setglobal@@YAXPAUlua_State@@PBD@Z
?lua_sethook@@YAHPAUlua_State@@P6AX0PAUlua_Debug@@@ZHH@Z
?lua_setlocal@@YAPBDPAUlua_State@@PBUlua_Debug@@H@Z
?lua_setmetatable@@YAHPAUlua_State@@H@Z
?lua_settable@@YAXPAUlua_State@@H@Z
?lua_settop@@YAXPAUlua_State@@H@Z
?lua_setupvalue@@YAPBDPAUlua_State@@HH@Z
?lua_setuservalue@@YAXPAUlua_State@@H@Z
?lua_status@@YAHPAUlua_State@@@Z
?lua_toboolean@@YAHPAUlua_State@@H@Z
?lua_tocfunction@@YAP6AHPAUlua_State@@@Z0H@Z
?lua_tointegerx@@YAHPAUlua_State@@HPAH@Z
?lua_tolstring@@YAPBDPAUlua_State@@HPAI@Z
?lua_tonumberx@@YANPAUlua_State@@HPAH@Z
?lua_topointer@@YAPBXPAUlua_State@@H@Z
?lua_tothread@@YAPAUlua_State@@PAU1@H@Z
?lua_tounsignedx@@YAIPAUlua_State@@HPAH@Z
?lua_touserdata@@YAPAXPAUlua_State@@H@Z
?lua_type@@YAHPAUlua_State@@H@Z
?lua_typename@@YAPBDPAUlua_State@@H@Z
?lua_upvalueid@@YAPAXPAUlua_State@@HH@Z
?lua_upvaluejoin@@YAXPAUlua_State@@HHHH@Z
?lua_version@@YAPBNPAUlua_State@@@Z
?lua_xmove@@YAXPAUlua_State@@0H@Z
?lua_yieldk@@YAHPAUlua_State@@HHP6AH0@Z@Z
?luaopen_base@@YAHPAUlua_State@@@Z
?luaopen_bit32@@YAHPAUlua_State@@@Z
?luaopen_coroutine@@YAHPAUlua_State@@@Z
?luaopen_debug@@YAHPAUlua_State@@@Z
?luaopen_io@@YAHPAUlua_State@@@Z
?luaopen_math@@YAHPAUlua_State@@@Z
?luaopen_os@@YAHPAUlua_State@@@Z
?luaopen_package@@YAHPAUlua_State@@@Z
?luaopen_string@@YAHPAUlua_State@@@Z
?luaopen_table@@YAHPAUlua_State@@@Z

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
maMainFrame.rdb
maMainFrame.tpc
main.properties
mdb.exe
.exe windows:5 windows x86 arch:x86

13102c52da07ba8c1c8e88270f3e967e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:da:cd:dd:3c:8e:96:41:2f:d2:8e:10:62:42:0f:3b:eb:a1:a0:50:01:0c:98:7d:93:a1:c8:90:0f:28:00:2e
Signer

Actual PE Digest

7f:da:cd:dd:3c:8e:96:41:2f:d2:8e:10:62:42:0f:3b:eb:a1:a0:50:01:0c:98:7d:93:a1:c8:90:0f:28:00:2e

Digest Algorithm

sha256

PE Digest Matches

true

53:fc:88:7e:51:97:a0:88:1e:5d:40:bc:63:30:ba:f0:32:9b:35:5b
Signer

Actual PE Digest

53:fc:88:7e:51:97:a0:88:1e:5d:40:bc:63:30:ba:f0:32:9b:35:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\mdb.pdb

Imports

kernel32

LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
CloseHandle
WaitForSingleObject
GetModuleFileNameW
GetStdHandle
CreateProcessW
TerminateProcess
GetExitCodeProcess
GetCommandLineW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
DecodePointer
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
GetTickCount
LeaveCriticalSection
EnterCriticalSection
RaiseException

shlwapi

PathFileExistsW
PathRemoveFileSpecW
PathGetArgsW

msvcr100

__dllonexit
_lock
_onexit
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_unlock
__set_app_type
_fmode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
memset
free
wcsnlen
memmove_s
wmemcpy_s
memcpy_s
??3@YAXPAX@Z
_CxxThrowException
_commode
__CxxFrameHandler3

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcp100.dll
.dll windows:5 windows x86 arch:x86

7a0d9f66efd1839f136ca6896fa52dfa

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bf:b0:fa:8d:3c:66:79:75:e3:a2:ca:10:72:d2:b3:8d:c5:59:ee:76
Signer

Actual PE Digest

bf:b0:fa:8d:3c:66:79:75:e3:a2:ca:10:72:d2:b3:8d:c5:59:ee:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcp100.i386.pdb

Imports

msvcr100

rand_s
memset
memmove
fgetc
ungetc
_lock_file
_unlock_file
fflush
setvbuf
memcpy_s
fwrite
fgetpos
_fseeki64
fsetpos
fclose
_fsopen
_wfsopen
fseek
ldexp
wcslen
memchr
memmove_s
sprintf_s
_Strftime
strcspn
setlocale
_realloc_crt
strcmp
_malloc_crt
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_purecall
strerror
fgetwc
fputwc
ungetwc
__uncaught_exception
towlower
towupper
_create_locale
_ui64toa_s
_free_locale
__pctype_func
_errno
___mb_cur_max_l_func
___lc_codepage_func
___lc_handle_func
__crtCompareStringA
memcmp
___lc_collate_cp_func
__crtLCMapStringA
__iob_func
?Alloc@Concurrency@@YAPAXI@Z
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?Yield@Context@Concurrency@@SAXXZ
??1critical_section@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0bad_target@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
?set@event@Concurrency@@QAEXXZ
?wait@event@Concurrency@@QAEII@Z
??1event@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
?Free@Concurrency@@YAXPAX@Z
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
?Log2@details@Concurrency@@YAKI@Z
isupper
_calloc_crt
islower
__crtLCMapStringW
isspace
tolower
strtod
__crtCompareStringW
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
fputs
fputc
abort
log
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_Getmonths
_Getdays
malloc
__CxxFrameHandler3
??2@YAPAXI@Z
___mb_cur_max_func
memcpy
strlen
??_V@YAXPAX@Z
_Gettnames
localeconv
free
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??1exception@std@@UAE@XZ
??0operation_timed_out@Concurrency@@QAE@XZ
??0exception@std@@QAE@XZ

kernel32

GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
Sleep
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoW
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
InterlockedCompareExchange
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime

Exports

Exports

??0?$_Yarn@D@std@@QAE@ABV01@@Z
??0?$_Yarn@D@std@@QAE@PBD@Z
??0?$_Yarn@D@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z
??0_Container_base12@std@@QAE@ABU01@@Z
??0_Container_base12@std@@QAE@XZ
??0_Init_locks@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locimp@locale@std@@AAE@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??0_Mutex@std@@QAE@XZ
??0_Runtime_object@details@Concurrency@@QAE@H@Z
??0_Runtime_object@details@Concurrency@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z
??0agent@Concurrency@@QAE@AAVScheduler@1@@Z
??0agent@Concurrency@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0time_base@std@@QAE@I@Z
??1?$_Yarn@D@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$codecvt@DDH@std@@MAE@XZ
??1?$codecvt@GDH@std@@MAE@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ
??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ
??1_Container_base12@std@@QAE@XZ
??1_Init_locks@std@@QAE@XZ
??1_Locimp@locale@std@@MAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Mutex@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1agent@Concurrency@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_W@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Container_base0@std@@QAEAAU01@ABU01@@Z
??4_Container_base12@std@@QAEAAU01@ABU01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBEPAXXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDH@std@@6B@
??_7?$codecvt@GDH@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$codecvt@DDH@std@@QAEXXZ
??_F?$codecvt@GDH@std@@QAEXXZ
??_F?$codecvt@_WDH@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locimp@locale@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z
?NFS_Free@details@Concurrency@@YAXPAX@Z
?NFS_GetLineSize@details@Concurrency@@YAIXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addstd@ios_base@std@@SAXPAV12@@Z
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ
?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Empty@?$_Yarn@D@std@@QBE_NXZ
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDIIII@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDIIII@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDIIII@Z
?_GetCombinableSize@details@Concurrency@@YAIXZ
?_GetCurrentThreadId@details@Concurrency@@YAKXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@GDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAH@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAH@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAH@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Hexdig@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHDDDD@Z
?_Hexdig@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHGGGG@Z
?_Hexdig@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAH_W000@Z
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@QAEXXZ

Sections

.text
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcr100.dll
.dll windows:5 windows x86 arch:x86

5271d5ce8b44dd47bc92563e27585466

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21/02/2011, 20:53

Not After

21/05/2012, 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8d:91:f0:a3:ff:41:70:8c:67:d0:ba:79:6d:52:da:88:0c:59:23:cc
Signer

Actual PE Digest

8d:91:f0:a3:ff:41:70:8c:67:d0:ba:79:6d:52:da:88:0c:59:23:cc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr100.i386.pdb

Imports

kernel32

EncodePointer
DecodePointer
RaiseException
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsGetValue
GetCommandLineW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileExA
FindClose
FindNextFileW
FindFirstFileExW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Sleep
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetDriveTypeW
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
GetDriveTypeA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
InterlockedPopEntrySList
InterlockedFlushSList
QueryDepthSList
InterlockedPushEntrySList
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueTimer
SetEvent
CreateEventW
SwitchToThread
SignalObjectAndWait
TryEnterCriticalSection
GetTickCount
VirtualFree
GetVersionExW
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
InitializeSListHead
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
GetThreadPriority
LoadLibraryW
SleepEx
OutputDebugStringW
FreeLibraryAndExitThread
GetModuleHandleA
GetThreadTimes
DebugBreak
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeFormatW
GetDateFormatW
RtlUnwind
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
HeapWalk
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoW
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleW
ReadConsoleW
SetEndOfFile
GetProcessHeap
InterlockedExchange
LockFile
UnlockFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetConsoleCtrlHandler
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
CompareStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsProcessorFeaturePresent

Exports

Exports

$I10_OUTPUT
??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QAA@IZZ
??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z
??0SchedulerPolicy@Concurrency@@QAE@XZ
??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_ReaderWriterLock@details@Concurrency@@QAE@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_ReentrantLock@details@Concurrency@@QAE@XZ
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
??0_TaskCollection@details@Concurrency@@QAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_cast@std@@AAE@PBQBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@XZ
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@XZ
??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z
??0context_unblock_unbalanced@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??0default_scheduler_exists@Concurrency@@QAE@PBD@Z
??0default_scheduler_exists@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??0improper_lock@Concurrency@@QAE@PBD@Z
??0improper_lock@Concurrency@@QAE@XZ
??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_attach@Concurrency@@QAE@XZ
??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_detach@Concurrency@@QAE@XZ
??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z
??0improper_scheduler_reference@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0invalid_link_target@Concurrency@@QAE@XZ
??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z
??0invalid_multiple_scheduling@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
??0invalid_operation@Concurrency@@QAE@XZ
??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ
??0message_not_found@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0missing_wait@Concurrency@@QAE@PBD@Z
??0missing_wait@Concurrency@@QAE@XZ
??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ
??0operation_timed_out@Concurrency@@QAE@PBD@Z
??0operation_timed_out@Concurrency@@QAE@XZ
??0reader_writer_lock@Concurrency@@QAE@XZ
??0scheduler_not_attached@Concurrency@@QAE@PBD@Z
??0scheduler_not_attached@Concurrency@@QAE@XZ
??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0task_canceled@details@Concurrency@@QAE@PBD@Z
??0task_canceled@details@Concurrency@@QAE@XZ
??0unsupported_os@Concurrency@@QAE@PBD@Z
??0unsupported_os@Concurrency@@QAE@XZ
??1SchedulerPolicy@Concurrency@@QAE@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??1_TaskCollection@details@Concurrency@@QAE@XZ
??1_Timer@details@Concurrency@@IAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??1exception@std@@UAE@XZ
??1reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z
??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
?Block@Context@Concurrency@@SAXXZ
?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPAX@Z
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?Log2@details@Concurrency@@YAKI@Z
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_ConcRT_Assert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_DumpMessage@details@Concurrency@@YAXPB_WZZ
?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ
?_Copy_str@exception@std@@AAEXPBD@Z
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Tidy@exception@std@@AAEXXZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ
?lock@critical_section@Concurrency@@QAEXXZ
?lock@reader_writer_lock@Concurrency@@QAEXXZ
?lock_read@reader_writer_lock@Concurrency@@QAEXXZ
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?native_handle@critical_section@Concurrency@@QAEAAV12@XZ
?raw_name@type_info@@QBEPBDXZ
?reset@event@Concurrency@@QAEXXZ
?set@event@Concurrency@@QAEXXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ
?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ
?unexpected@@YAXXZ
?unlock@critical_section@Concurrency@@QAEXXZ
?unlock@reader_writer_lock@Concurrency@@QAEXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?wait@Concurrency@@YAXI@Z
?wait@event@Concurrency@@QAEII@Z
?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p

Sections

.text
Size: 709KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sqlite.dll
.dll windows:5 windows x86 arch:x86

dc0e46da29f15da72805c64057f154ec

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:ed:51:09:3a:9a:19:c2:0e:41:9a:8e:2f:01:1f:03:2e:ed:96:53:d4:cf:4b:15:10:14:c3:a7:90:d9:a6:37
Signer

Actual PE Digest

7f:ed:51:09:3a:9a:19:c2:0e:41:9a:8e:2f:01:1f:03:2e:ed:96:53:d4:cf:4b:15:10:14:c3:a7:90:d9:a6:37

Digest Algorithm

sha256

PE Digest Matches

true

eb:29:58:e6:8d:6d:ec:bf:5c:be:4d:77:4b:50:9e:e6:0d:fd:7c:7a
Signer

Actual PE Digest

eb:29:58:e6:8d:6d:ec:bf:5c:be:4d:77:4b:50:9e:e6:0d:fd:7c:7a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\sqlite.pdb

Imports

kernel32

InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
OutputDebugStringW
OutputDebugStringA
WaitForSingleObject
WriteFile
WideCharToMultiByte
UnmapViewOfFile
UnlockFileEx
UnlockFile
SystemTimeToFileTime
Sleep
SetFilePointer
SetEndOfFile
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MapViewOfFile
LockFileEx
LockFile
LocalFree
LoadLibraryW
LoadLibraryA
HeapValidate
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExA
GetTickCount
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetProcAddress
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentProcessId
FreeLibrary
FormatMessageW
FormatMessageA
FlushFileBuffers
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
CloseHandle
AreFileApisANSI
DisableThreadLibraryCalls
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentThreadId

msvcr100

_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memmove
srand
rand
realloc
free
malloc
strncmp
_localtime64_s
memset
memcpy
_time32

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_db_config
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_init_extheader
sqlite3_initialize
sqlite3_interrupt
sqlite3_key
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_read_extheader
sqlite3_realloc
sqlite3_rekey
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_step
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_strnicmp
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_mbcs_to_utf8
sqlite3_write_extheader

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tadb.exe
.exe windows:5 windows x86 arch:x86

44a6357fa6dd88fdd807dabbf801bb2c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:57:42:ee:82:dd:67:df:fe:a9:1d:0c:f8:a7:ed:28:bc:cf:f8:85:6b:0b:2b:a2:6e:5f:74:dc:5d:23:1d:7a
Signer

Actual PE Digest

1f:57:42:ee:82:dd:67:df:fe:a9:1d:0c:f8:a7:ed:28:bc:cf:f8:85:6b:0b:2b:a2:6e:5f:74:dc:5d:23:1d:7a

Digest Algorithm

sha256

PE Digest Matches

true

3f:8a:e6:a8:06:fc:3e:27:64:d9:a5:5d:7d:e7:b8:8e:75:9e:ce:a6
Signer

Actual PE Digest

3f:8a:e6:a8:06:fc:3e:27:64:d9:a5:5d:7d:e7:b8:8e:75:9e:ce:a6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\Projects\5070\ConnectServiceSrc\Output\Pdb\tadb.pdb

Imports

kernel32

CreateMutexW
SetHandleInformation
WriteFile
Sleep
ReadFile
GetStdHandle
SetConsoleCtrlHandler
CreatePipe
CreateMutexA
GetTempPathA
GetFullPathNameW
FindFirstFileW
FindClose
GetLocalTime
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
WaitForSingleObject
InterlockedCompareExchange
GetCurrentProcessId
ResetEvent
SetLastError
lstrcpyW
CloseHandle
GetCurrentThreadId
DeleteCriticalSection
GetModuleHandleA
GetModuleFileNameA
WaitForMultipleObjects
VirtualAllocEx
SearchPathA
EnterCriticalSection
FlushConsoleInputBuffer
GetVersionExA
LoadLibraryA
FreeLibrary
GlobalMemoryStatus
GetFileType
GetVersion
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
HeapSetInformation
InterlockedExchange
DecodePointer
EncodePointer
IsProcessorFeaturePresent
WriteProcessMemory
GetProcAddress
GetLastError
MultiByteToWideChar
GetModuleFileNameW
TerminateProcess
CreateProcessA
LeaveCriticalSection
CreateEventA
OpenProcess
InitializeCriticalSection
GetCommandLineA
GetProcessHeap
GetCurrentProcess
SetUnhandledExceptionFilter
HeapAlloc
SetErrorMode
lstrcpynA
SetEvent
lstrlenA

shell32

SHGetFolderPathA

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Xmem@tr1@std@@YAXXZ
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
_Strcoll
_Strxfrm
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?is@?$ctype@D@std@@QBE_NFD@Z
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?max@?$numeric_limits@D@std@@SADXZ
?_Xlength_error@std@@YAXPBD@Z

msvcr100

sprintf
sscanf
strncat
perror
_beginthread
isalpha
isdigit
fwrite
strrchr
abort
_mktime64
wcstombs_s
_set_errno
mbstowcs_s
feof
?_open@@YAHPBDHH@Z
fgets
_read
fread
_fileno
ferror
_setmode
ftell
_lseek
_write
fseek
clearerr
_close
_endthreadex
_beginthreadex
realloc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
rand
srand
_time64
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
_vsnprintf
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_stat64i32
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_getch
signal
fputs
isupper
_gmtime64
tolower
isxdigit
qsort
isspace
_strnicmp
raise
wcsstr
_wfopen
_stricmp
_getcwd
_unlink
_chmod
_umask
_access
_getpid
_strdup
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memcpy
wcscpy
strcat_s
atol
??_V@YAXPAX@Z
memset
_recalloc
_mbschr
_snprintf
strlen
calloc
free
??3@YAXPAX@Z
fclose
_mkdir
strcpy
??2@YAPAXI@Z
exit
strcat
strpbrk
getenv
vfprintf
strcmp
fprintf
setvbuf
fopen
printf
strncpy
_vswprintf
strtol
_errno
atoi
fflush
strchr
__iob_func
strerror
malloc
memcmp
strncmp
_configthreadlocale
memmove
strstr
strtoul
_CxxThrowException

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

WSAEventSelect
shutdown
WSACleanup
recv
bind
socket
WSAStartup
htons
send
listen
accept
gethostbyname
setsockopt
connect
WSAEnumNetworkEvents
WSAGetLastError
closesocket
htonl
WSACreateEvent

adbwinapi

AdbCloseHandle
AdbGetEndpointInformation
AdbWriteEndpointSync
AdbOpenDefaultBulkWriteEndpoint
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbCreateInterfaceByName
AdbNextInterface
AdbReadEndpointSync
AdbOpenDefaultBulkReadEndpoint
AdbEnumInterfaces

imm32

ImmDisableIME

user32

GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxA

advapi32

RegisterEventSourceA
ReportEventA
DeregisterEventSource

Exports

Exports

OPENSSL_Applink

Sections

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinyxml.dll
.dll windows:5 windows x86 arch:x86

723fbb90baa978b9291d5774f03a06ab

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

db:69:f6:dd:63:d8:65:a8:a0:fc:ad:ca:dd:32:e3:9a:b3:6b:ba:85:50:d1:f2:f8:e7:9c:f7:9c:f8:d7:b7:4d
Signer

Actual PE Digest

db:69:f6:dd:63:d8:65:a8:a0:fc:ad:ca:dd:32:e3:9a:b3:6b:ba:85:50:d1:f2:f8:e7:9c:f7:9c:f8:d7:b7:4d

Digest Algorithm

sha256

PE Digest Matches

true

82:36:ed:44:d3:d9:24:11:98:f9:13:3c:e6:1e:b5:f4:cf:ab:13:a8
Signer

Actual PE Digest

82:36:ed:44:d3:d9:24:11:98:f9:13:3c:e6:1e:b5:f4:cf:ab:13:a8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\tinyxml.pdb

Imports

kernel32

MultiByteToWideChar
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcr100

_wfopen
fopen
ferror
fputc
fprintf
sscanf_s
atoi
atof
_vsnprintf_s
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
fclose
fread
ftell
fseek
isalpha
isalnum
strncmp
__iob_func
wcslen
memset
?terminate@@YAXXZ
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
tolower
_purecall
isspace
strcmp
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_wassert
memchr
memcmp
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strlen
memmove
__CxxFrameHandler3
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
strchr

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

Exports

Exports

??0TiXmlAttribute@@QAE@PBD0@Z
??0TiXmlAttribute@@QAE@XZ
??0TiXmlAttributeSet@@QAE@XZ
??0TiXmlBase@@QAE@XZ
??0TiXmlComment@@QAE@ABV0@@Z
??0TiXmlComment@@QAE@PBD@Z
??0TiXmlComment@@QAE@XZ
??0TiXmlDeclaration@@QAE@ABV0@@Z
??0TiXmlDeclaration@@QAE@PBD00@Z
??0TiXmlDeclaration@@QAE@XZ
??0TiXmlDocument@@IAE@PBD@Z
??0TiXmlDocument@@QAE@ABV0@@Z
??0TiXmlDocument@@QAE@XZ
??0TiXmlElement@@QAE@ABV0@@Z
??0TiXmlElement@@QAE@PBD@Z
??0TiXmlNode@@IAE@W4NodeType@0@@Z
??0TiXmlPrinter@@QAE@ABV0@@Z
??0TiXmlPrinter@@QAE@XZ
??0TiXmlText@@QAE@ABV0@@Z
??0TiXmlText@@QAE@PBD@Z
??0TiXmlUnknown@@QAE@ABV0@@Z
??0TiXmlUnknown@@QAE@XZ
??1TiXmlAttribute@@UAE@XZ
??1TiXmlAttributeSet@@QAE@XZ
??1TiXmlBase@@UAE@XZ
??1TiXmlComment@@UAE@XZ
??1TiXmlDeclaration@@UAE@XZ
??1TiXmlDocument@@UAE@XZ
??1TiXmlElement@@UAE@XZ
??1TiXmlNode@@UAE@XZ
??1TiXmlPrinter@@UAE@XZ
??1TiXmlText@@UAE@XZ
??1TiXmlUnknown@@UAE@XZ
??4TiXmlComment@@QAEXABV0@@Z
??4TiXmlDeclaration@@QAEXABV0@@Z
??4TiXmlDocument@@QAEXABV0@@Z
??4TiXmlElement@@QAEXABV0@@Z
??4TiXmlPrinter@@QAEAAV0@ABV0@@Z
??4TiXmlText@@QAEXABV0@@Z
??4TiXmlUnknown@@QAEXABV0@@Z
??8TiXmlAttribute@@QBE_NABV0@@Z
??MTiXmlAttribute@@QBE_NABV0@@Z
??OTiXmlAttribute@@QBE_NABV0@@Z
??_7TiXmlAttribute@@6B@
??_7TiXmlBase@@6B@
??_7TiXmlComment@@6B@
??_7TiXmlDeclaration@@6B@
??_7TiXmlDocument@@6B@
??_7TiXmlElement@@6B@
??_7TiXmlNode@@6B@
??_7TiXmlPrinter@@6B@
??_7TiXmlText@@6B@
??_7TiXmlUnknown@@6B@
?Accept@TiXmlComment@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlDeclaration@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z
?Accept@TiXmlUnknown@@UBE_NPAVTiXmlVisitor@@@Z
?Add@TiXmlAttributeSet@@QAEXPAVTiXmlAttribute@@@Z
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?Attribute@TiXmlElement@@QBEPBDPBDPAH@Z
?Attribute@TiXmlElement@@QBEPBDPBDPAN@Z
?Blank@TiXmlText@@IBE_NXZ
?CDATA@TiXmlText@@QBE_NXZ
?CStr@TiXmlPrinter@@QAEPBDXZ
?Clear@TiXmlNode@@QAEXXZ
?ClearError@TiXmlDocument@@QAEXXZ
?ClearThis@TiXmlElement@@IAEXXZ
?Clone@TiXmlComment@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlDeclaration@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ
?Clone@TiXmlUnknown@@UBEPAVTiXmlNode@@XZ
?Column@TiXmlBase@@QBEHXZ
?ConvertUTF32ToUTF8@TiXmlBase@@KAXKPADPAH@Z
?CopyTo@TiXmlComment@@IBEXPAV1@@Z
?CopyTo@TiXmlDeclaration@@IBEXPAV1@@Z
?CopyTo@TiXmlDocument@@ABEXPAV1@@Z
?CopyTo@TiXmlElement@@IBEXPAV1@@Z
?CopyTo@TiXmlNode@@IBEXPAV1@@Z
?CopyTo@TiXmlText@@IBEXPAV1@@Z
?CopyTo@TiXmlUnknown@@IBEXPAV1@@Z
?DoIndent@TiXmlPrinter@@AAEXXZ
?DoLineBreak@TiXmlPrinter@@AAEXXZ
?DoubleValue@TiXmlAttribute@@QBENXZ
?EncodeString@TiXmlBase@@SAXABVTiXmlString@@PAV2@@Z
?Encoding@TiXmlDeclaration@@QBEPBDXZ
?Error@TiXmlDocument@@QBE_NXZ
?ErrorCol@TiXmlDocument@@QBEHXZ
?ErrorDesc@TiXmlDocument@@QBEPBDXZ
?ErrorId@TiXmlDocument@@QBEHXZ
?ErrorRow@TiXmlDocument@@QBEHXZ
?Find@TiXmlAttributeSet@@QAEPAVTiXmlAttribute@@PBD@Z
?Find@TiXmlAttributeSet@@QBEPBVTiXmlAttribute@@PBD@Z
?First@TiXmlAttributeSet@@QAEPAVTiXmlAttribute@@XZ
?First@TiXmlAttributeSet@@QBEPBVTiXmlAttribute@@XZ
?FirstAttribute@TiXmlElement@@QAEPAVTiXmlAttribute@@XZ
?FirstAttribute@TiXmlElement@@QBEPBVTiXmlAttribute@@XZ
?FirstChild@TiXmlNode@@QAEPAV1@PBD@Z
?FirstChild@TiXmlNode@@QAEPAV1@XZ
?FirstChild@TiXmlNode@@QBEPBV1@PBD@Z
?FirstChild@TiXmlNode@@QBEPBV1@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?FirstChildElement@TiXmlNode@@QBEPBVTiXmlElement@@PBD@Z
?FirstChildElement@TiXmlNode@@QBEPBVTiXmlElement@@XZ
?GetChar@TiXmlBase@@KAPBDPBDPADPAHW4TiXmlEncoding@@@Z
?GetDocument@TiXmlNode@@QAEPAVTiXmlDocument@@XZ
?GetDocument@TiXmlNode@@QBEPBVTiXmlDocument@@XZ
?GetEntity@TiXmlBase@@KAPBDPBDPADPAHW4TiXmlEncoding@@@Z
?GetText@TiXmlElement@@QBEPBDXZ
?GetUserData@TiXmlBase@@QAEPAXXZ
?GetUserData@TiXmlBase@@QBEPBXXZ
?Identify@TiXmlNode@@IAEPAV1@PBDW4TiXmlEncoding@@@Z
?Indent@TiXmlPrinter@@QAEPBDXZ
?InsertAfterChild@TiXmlNode@@QAEPAV1@PAV1@ABV1@@Z
?InsertBeforeChild@TiXmlNode@@QAEPAV1@PAV1@ABV1@@Z
?InsertEndChild@TiXmlNode@@QAEPAV1@ABV1@@Z
?IntValue@TiXmlAttribute@@QBEHXZ
?IsAlpha@TiXmlBase@@KAHEW4TiXmlEncoding@@@Z
?IsAlphaNum@TiXmlBase@@KAHEW4TiXmlEncoding@@@Z
?IsWhiteSpace@TiXmlBase@@KA_ND@Z
?IsWhiteSpace@TiXmlBase@@KA_NH@Z
?IsWhiteSpaceCondensed@TiXmlBase@@SA_NXZ
?IterateChildren@TiXmlNode@@QAEPAV1@PBDPBV1@@Z
?IterateChildren@TiXmlNode@@QAEPAV1@PBV1@@Z
?IterateChildren@TiXmlNode@@QBEPBV1@PBDPBV1@@Z
?IterateChildren@TiXmlNode@@QBEPBV1@PBV1@@Z
?Last@TiXmlAttributeSet@@QAEPAVTiXmlAttribute@@XZ
?Last@TiXmlAttributeSet@@QBEPBVTiXmlAttribute@@XZ
?LastAttribute@TiXmlElement@@QAEPAVTiXmlAttribute@@XZ
?LastAttribute@TiXmlElement@@QBEPBVTiXmlAttribute@@XZ
?LastChild@TiXmlNode@@QAEPAV1@PBD@Z
?LastChild@TiXmlNode@@QAEPAV1@XZ
?LastChild@TiXmlNode@@QBEPBV1@PBD@Z
?LastChild@TiXmlNode@@QBEPBV1@XZ
?LineBreak@TiXmlPrinter@@QAEPBDXZ
?LinkEndChild@TiXmlNode@@QAEPAV1@PAV1@@Z
?LoadFile@TiXmlDocument@@QAE_NPAU_iobuf@@W4TiXmlEncoding@@@Z
?LoadFile@TiXmlDocument@@QAE_NPB_WW4TiXmlEncoding@@@Z
?LoadXML@TiXmlDocument@@QAE_NPADHW4TiXmlEncoding@@@Z
?Name@TiXmlAttribute@@QBEPBDXZ
?NameTStr@TiXmlAttribute@@QBEABVTiXmlString@@XZ
?Next@TiXmlAttribute@@QAEPAV1@XZ
?Next@TiXmlAttribute@@QBEPBV1@XZ
?NextSibling@TiXmlNode@@QAEPAV1@PBD@Z
?NextSibling@TiXmlNode@@QAEPAV1@XZ
?NextSibling@TiXmlNode@@QBEPBV1@PBD@Z
?NextSibling@TiXmlNode@@QBEPBV1@XZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?NextSiblingElement@TiXmlNode@@QBEPBVTiXmlElement@@PBD@Z
?NextSiblingElement@TiXmlNode@@QBEPBVTiXmlElement@@XZ
?NoChildren@TiXmlNode@@QBE_NXZ
?Parent@TiXmlNode@@QAEPAV1@XZ
?Parent@TiXmlNode@@QBEPBV1@XZ
?Parse@TiXmlAttribute@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Parse@TiXmlComment@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Parse@TiXmlDeclaration@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Parse@TiXmlDocument@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Parse@TiXmlElement@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Parse@TiXmlText@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Parse@TiXmlUnknown@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Previous@TiXmlAttribute@@QAEPAV1@XZ
?Previous@TiXmlAttribute@@QBEPBV1@XZ
?PreviousSibling@TiXmlNode@@QAEPAV1@PBD@Z
?PreviousSibling@TiXmlNode@@QAEPAV1@XZ
?PreviousSibling@TiXmlNode@@QBEPBV1@PBD@Z
?PreviousSibling@TiXmlNode@@QBEPBV1@XZ
?Print@TiXmlAttribute@@QBEXPAU_iobuf@@HPAVTiXmlString@@@Z
?Print@TiXmlAttribute@@UBEXPAU_iobuf@@H@Z
?Print@TiXmlComment@@UBEXPAU_iobuf@@H@Z
?Print@TiXmlDeclaration@@UBEXPAU_iobuf@@H@Z
?Print@TiXmlDeclaration@@UBEXPAU_iobuf@@HPAVTiXmlString@@@Z
?Print@TiXmlDocument@@QBEXXZ
?Print@TiXmlDocument@@UBEXPAU_iobuf@@H@Z
?Print@TiXmlElement@@UBEXPAU_iobuf@@H@Z
?Print@TiXmlText@@UBEXPAU_iobuf@@H@Z
?Print@TiXmlUnknown@@UBEXPAU_iobuf@@H@Z
?QueryDoubleAttribute@TiXmlElement@@QBEHPBDPAN@Z
?QueryDoubleValue@TiXmlAttribute@@QBEHPAN@Z
?QueryFloatAttribute@TiXmlElement@@QBEHPBDPAM@Z
?QueryIntAttribute@TiXmlElement@@QBEHPBDPAH@Z
?QueryIntValue@TiXmlAttribute@@QBEHPAH@Z
?ReadName@TiXmlBase@@KAPBDPBDPAVTiXmlString@@W4TiXmlEncoding@@@Z
?ReadText@TiXmlBase@@KAPBDPBDPAVTiXmlString@@_N02W4TiXmlEncoding@@@Z
?ReadValue@TiXmlElement@@IAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Remove@TiXmlAttributeSet@@QAEXPAVTiXmlAttribute@@@Z
?RemoveAttribute@TiXmlElement@@QAEXPBD@Z
?RemoveChild@TiXmlNode@@QAE_NPAV1@@Z
?ReplaceChild@TiXmlNode@@QAEPAV1@PAV1@ABV1@@Z
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
?RootElement@TiXmlDocument@@QBEPBVTiXmlElement@@XZ
?Row@TiXmlBase@@QBEHXZ
?SaveFile@TiXmlDocument@@QBE_NPAU_iobuf@@@Z
?SaveFile@TiXmlDocument@@QBE_NPB_W@Z
?SetAttribute@TiXmlElement@@QAEXPBD0@Z
?SetAttribute@TiXmlElement@@QAEXPBDH@Z
?SetCDATA@TiXmlText@@QAEX_N@Z
?SetCondenseWhiteSpace@TiXmlBase@@SAX_N@Z
?SetDocument@TiXmlAttribute@@QAEXPAVTiXmlDocument@@@Z
?SetDoubleAttribute@TiXmlElement@@QAEXPBDN@Z
?SetDoubleValue@TiXmlAttribute@@QAEXN@Z
?SetError@TiXmlDocument@@QAEXHPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?SetIndent@TiXmlPrinter@@QAEXPBD@Z
?SetIntValue@TiXmlAttribute@@QAEXH@Z
?SetLineBreak@TiXmlPrinter@@QAEXPBD@Z
?SetName@TiXmlAttribute@@QAEXPBD@Z
?SetStreamPrinting@TiXmlPrinter@@QAEXXZ
?SetTabSize@TiXmlDocument@@QAEXH@Z
?SetUserData@TiXmlBase@@QAEXPAX@Z
?SetValue@TiXmlAttribute@@QAEXPBD@Z
?SetValue@TiXmlNode@@QAEXPBD@Z
?Size@TiXmlPrinter@@QAEIXZ
?SkipWhiteSpace@TiXmlBase@@KAPBDPBDW4TiXmlEncoding@@@Z
?Standalone@TiXmlDeclaration@@QBEPBDXZ
?StringEqual@TiXmlBase@@KA_NPBD0_NW4TiXmlEncoding@@@Z
?TabSize@TiXmlDocument@@QBEHXZ
?ToComment@TiXmlComment@@UAEPAV1@XZ
?ToComment@TiXmlComment@@UBEPBV1@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToDeclaration@TiXmlDeclaration@@UAEPAV1@XZ
?ToDeclaration@TiXmlDeclaration@@UBEPBV1@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?ToDocument@TiXmlDocument@@UAEPAV1@XZ
?ToDocument@TiXmlDocument@@UBEPBV1@XZ
?ToDocument@TiXmlNode@@UAEPAVTiXmlDocument@@XZ
?ToDocument@TiXmlNode@@UBEPBVTiXmlDocument@@XZ
?ToElement@TiXmlElement@@UAEPAV1@XZ
?ToElement@TiXmlElement@@UBEPBV1@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?ToLower@TiXmlBase@@KAHHW4TiXmlEncoding@@@Z
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToText@TiXmlText@@UAEPAV1@XZ
?ToText@TiXmlText@@UBEPBV1@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToUnknown@TiXmlUnknown@@UAEPAV1@XZ
?ToUnknown@TiXmlUnknown@@UBEPBV1@XZ
?Type@TiXmlNode@@QBEHXZ
?Value@TiXmlAttribute@@QBEPBDXZ
?Value@TiXmlNode@@QBEPBDXZ
?ValueTStr@TiXmlNode@@QBEABVTiXmlString@@XZ
?Version@TiXmlDeclaration@@QBEPBDXZ
?Visit@TiXmlPrinter@@UAE_NABVTiXmlComment@@@Z
?Visit@TiXmlPrinter@@UAE_NABVTiXmlDeclaration@@@Z
?Visit@TiXmlPrinter@@UAE_NABVTiXmlText@@@Z
?Visit@TiXmlPrinter@@UAE_NABVTiXmlUnknown@@@Z
?VisitEnter@TiXmlPrinter@@UAE_NABVTiXmlDocument@@@Z
?VisitEnter@TiXmlPrinter@@UAE_NABVTiXmlElement@@PBVTiXmlAttribute@@@Z
?VisitExit@TiXmlPrinter@@UAE_NABVTiXmlDocument@@@Z
?VisitExit@TiXmlPrinter@@UAE_NABVTiXmlElement@@@Z
?condenseWhiteSpace@TiXmlBase@@0_NA
?entity@TiXmlBase@@0PAUEntity@1@A
?errorString@TiXmlBase@@1PAPBDA
?utf8ByteTable@TiXmlBase@@2QBHB

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xGraphic32.dll
.dll windows:5 windows x86 arch:x86

6a1d53f834049c9b03948cee02176051

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fc:bc:15:73:67:1e:79:96:80:39:45:a4:88:9c:d0:3c:6f:49:86:09:2a:3a:17:77:e5:3f:8f:92:02:d5:42:c7
Signer

Actual PE Digest

fc:bc:15:73:67:1e:79:96:80:39:45:a4:88:9c:d0:3c:6f:49:86:09:2a:3a:17:77:e5:3f:8f:92:02:d5:42:c7

Digest Algorithm

sha256

PE Digest Matches

true

34:54:85:fe:3f:cf:5c:c4:08:9c:c3:0a:49:bc:97:d0:d7:64:95:a3
Signer

Actual PE Digest

34:54:85:fe:3f:cf:5c:c4:08:9c:c3:0a:49:bc:97:d0:d7:64:95:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

R:\Code\HummerSDK_QQ6.3\Output\PdbFinal\xGraphic32.pdb

Imports

arkgraphic

arkCanvasSetDashPattern
arkCanvasSetGradient
arkGradientAddColorStop
arkCanvasDrawRoundRect
arkPathArcTo
arkPathBezierCurveTo
arkPathAddCircle
arkCanvasSetStrokeJoin
arkPathBegin
arkPathLineTo
arkPathMoveTo
arkCanvasSetBlendValue
arkPathCreate
arkCanvasTranslate
arkCanvasSetSmooth
arkCanvasDrawCircle
arkPathDestroy
arkPathClose
arkPathAddArc
arkCanvasDrawPoint
arkPathAddEllipse
arkCanvasSave
arkCanvasGetStrokeWidth
arkPathGetBounds
arkCanvasSetBlendMode
arkCanvasSetDrawStyle
arkGradientCreateRadial
arkCanvasDrawColor
arkCanvasClipRect
arkCanvasRestore
arkCanvasDrawEllipse
arkPathQuadraticCurveTo
arkCanvasSetColor
arkGradientDestroy
arkCanvasSetStrokeCap
arkCanvasSetDashStyle
arkPathAddRectangle
arkCanvasGetBlendValue
arkCanvasDrawPath
arkCanvasSetStrokeWidth
arkCanvasDrawRectangle
arkBitmapDestroy
arkCanvasDestroy
arkCanvasSetBitmap
arkCanvasCreate
arkGradientCreateLinear
arkCanvasGetBlendMode
arkCanvasDrawLine
arkBitmapCreateFromData

kernel32

DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
EncodePointer
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection

user32

OffsetRect
WindowFromDC
ReleaseDC
GetDC
IsRectEmpty
EqualRect
IntersectRect
SetRect
InflateRect
CopyRect

gdi32

SelectObject
DeleteDC
SetViewportOrgEx
GetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
GetClipBox
GetObjectW
GetCurrentObject
SetDIBitsToDevice
BitBlt
DeleteObject
CreateDIBSection
ExtCreateRegion
CombineRgn
GetStockObject
CreateRectRgn
StretchBlt
ExtCreatePen
Rectangle
CreateCompatibleDC

msimg32

AlphaBlend

msvcp100

?_Xlength_error@std@@YAXPBD@Z

msvcr100

_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__clean_type_info_names_internal
_unlock
memmove
malloc
free
??_V@YAXPAX@Z
??2@YAPAXI@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memcpy
_CxxThrowException
memset
__CxxFrameHandler3
__dllonexit

Exports

Exports

?DrawTexture9Grid@@YAHTHGCANVAS@@PBUtagRECT@@THGTEXTURE@@11KHE@Z
?DrawTextureCenter@@YAHTHGCANVAS@@PBUtagRECT@@THGTEXTURE@@1KE@Z
?DrawTextureTile@@YAHTHGCANVAS@@PBUtagRECT@@THGTEXTURE@@1KE@Z
?DrawTextureTopTile@@YAHTHGCANVAS@@PBUtagRECT@@THGTEXTURE@@11KE@Z
AHSLColorize
AHSLtoARGB
ARGBColorize
ARGBtoAHSL
BlendCanvas
BlurBitmap
BlurTexture
CanvasScroll
CanvasToTexture
ColorizeTexture
CopyBitmap
CopyTexture
CreateCanvas
CreateCanvasFromDC
CreateMemBitmap
CreateSystemBitmap
CreateTexture
CreateTextureRgn
DeleteBitmap
DeleteCanvas
DeleteTexture
DrawBezier
DrawBitmap
DrawBitmapEx
DrawCircle
DrawColor
DrawEllipse
DrawLine
DrawModulation
DrawPath
DrawPoint
DrawPolygon
DrawQuadrangle3D
DrawRectangle
DrawRoundRect
DrawTexture
DrawTextureEx
FillGradualRect
FillPreMulColorRectEx
FillSolidRect
FillSolidRectEx
FlipBitmap
FlipTexture
GdiTransCanvas
GeoRectFocusEx
GeoRectangle
GeoRectangleEx
GeoRoundRect
GeoRoundRectEx
GetBitmap
GetBitmapFilter
GetBitmapHandle
GetBitmapSize
GetBlendMode
GetBlendValue
GetCanvasBkColor
GetCanvasFilter
GetCanvasHandle
GetCanvasSize
GetCanvasWindow
GetStretchKernelMode
GetStrokeWidth
GetTexture
GetTextureCurSlice
GetTextureFilter
GetTextureHandle
GetTextureMode
GetTextureSize
GetTextureSliceCount
GetViewportOrg
GetWindowOrg
GradientAddColorStop
GradientCreateLinear
GradientCreateRadial
GradientDestroy
GrayTexture
InvertBitmap
InvertTexture
LightBitmap
LightTexture
LockBitmapBits
LockTextureBits
MixCanvas
MixCanvasWithColor
NormalizeTexture
PathAddArc
PathAddCircle
PathAddEllipse
PathAddRectangle
PathArcTo
PathBegin
PathBezierCurveTo
PathClose
PathCreate
PathDestroy
PathGetBounds
PathLineTo
PathMoveTo
PathQuadraticCurveTo
ReleaseBitmap
ReleaseTexture
ResizeBitmap
ResizeTexture
Restore
RotateBitmap
RotateTexture
Save
SetBitmapFilter
SetBlendMode
SetBlendValue
SetCanvasBkColor
SetCanvasFilter
SetCanvasWindow
SetColor
SetDashPattern
SetDashStyle
SetDrawStyle
SetGradient
SetSmooth
SetStretchKernelMode
SetStrokeCap
SetStrokeJoin
SetStrokeWidth
SetTextureCurSlice
SetTextureFilter
SetTextureMode
SetTextureSlice
SetViewportOrg
SetWindowOrg
ShuffleBitmap
ShuffleBitmapEx
ShuffleTexture
ShuffleTextureEx
TransformBitmap
TransformTexture
TranslateTexture
UnlockBitmapBits
UnlockTextureBits

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zlib.dll
.dll windows:5 windows x86 arch:x86

2b0bde2fba423c5ef1884272ac5f118f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/02/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/03/2019, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=研发管理部,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9b:b3:1d:7f:ec:32:67:b0:fe:b0:82:93:2d:32:75:9a:88:5b:dc:90:fa:e3:91:e7:d5:47:e8:55:b9:ea:90:d5
Signer

Actual PE Digest

9b:b3:1d:7f:ec:32:67:b0:fe:b0:82:93:2d:32:75:9a:88:5b:dc:90:fa:e3:91:e7:d5:47:e8:55:b9:ea:90:d5

Digest Algorithm

sha256

PE Digest Matches

true

ce:71:b0:a0:ea:f5:cf:e8:74:43:b7:b1:61:f2:6a:52:08:10:5a:68
Signer

Actual PE Digest

ce:71:b0:a0:ea:f5:cf:e8:74:43:b7:b1:61:f2:6a:52:08:10:5a:68

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Code\ThirdParty\pdb\release\zlib.pdb

Imports

msvcr100

__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_amsg_exit
__dllonexit
_lock
_onexit
_except_handler4_common
_initterm_e
_initterm
_encoded_null
_malloc_crt
_vsnprintf
memchr
_errno
strerror
wcstombs
_wopen
free
malloc
_snprintf
_lseeki64
memset
_unlock
memcpy
_open
_read
_close
_write

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

Exports

Exports

adler32
adler32_combine
adler32_combine64
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine64
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d020c4546d113bebaafe27d8278d1cbd

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fdCertificate

Extended Key Usages

Key Usages

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fdCertificate

Extended Key Usages

Key Usages

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

30:03:ad:e7:1e:90:01:0f:a4:5d:36:a4:8c:1c:fd:37:ba:5f:f9:2f:e2:10:d1:ab:60:28:5a:97:b3:39:3e:faSigner

35:47:ab:55:c3:fe:f0:8f:5b:9b:53:42:b4:d8:1b:0f:eb:e4:91:a8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

log4cplus

kernel32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcp100

msvcr100

rpcrt4

winhttp

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 133KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

3af03421daeb123c4d8f4d7e4c77c3b5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fdCertificate

Extended Key Usages

Key Usages

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

30:03:ad:e7:1e:90:01:0f:a4:5d:36:a4:8c:1c:fd:37:ba:5f:f9:2f:e2:10:d1:ab:60:28:5a:97:b3:39:3e:fa
Signer

35:47:ab:55:c3:fe:f0:8f:5b:9b:53:42:b4:d8:1b:0f:eb:e4:91:a8
Signer

.text
Size: 133KB - Virtual size: 133KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

68:3b:99:52:87:e7:75:a5:62:2a:0a:43:4c:fb:31:d3:a0:cf:7d:8b:11:59:0d:df:85:b1:16:0c:d1:39:57:d2
Signer

92:35:94:a1:62:39:ae:78:eb:b4:f3:84:37:fd:09:25:9a:1b:ba:3a
Signer

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

52:04:8b:9c:8a:67:e2:8f:0c:c8:cc:75:81:3d:dc:5a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

0b:d5:15:37:03:d8:d5:f8:1f:ef:76:19:69:00:9a:14
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate