Windows Notepad_11[.]2209[.]6[.]0_x64[.]msix

resource
unpack001/Notepad/Notepad.exe
unpack001/Notepad/NotepadXamlUI.dll
unpack001/Notepad/NotepadXamlUI.winmd
unpack001/NotepadXamlUI.winmd

Windows Notepad_11.2209.6.0_x64.msix

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

.xml

AppxMetadata/CodeIntegrity.cat

AppxSignature.p7x

Assets/NotepadAppList.scale-200.png

.png

Assets/NotepadAppList.targetsize-16.png

.png

Assets/NotepadAppList.targetsize-16_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-16_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-20.png

.png

Assets/NotepadAppList.targetsize-20_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-20_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-24.png

.png

Assets/NotepadAppList.targetsize-24_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-24_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-256.png

.png

Assets/NotepadAppList.targetsize-256_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-256_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-30.png

.png

Assets/NotepadAppList.targetsize-30_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-30_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-32.png

.png

Assets/NotepadAppList.targetsize-32_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-32_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-36.png

.png

Assets/NotepadAppList.targetsize-36_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-36_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-40.png

.png

Assets/NotepadAppList.targetsize-40_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-40_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-48.png

.png

Assets/NotepadAppList.targetsize-48_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-48_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-60.png

.png

Assets/NotepadAppList.targetsize-60_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-60_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-64.png

.png

Assets/NotepadAppList.targetsize-64_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-64_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-72.png

.png

Assets/NotepadAppList.targetsize-72_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-72_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-80.png

.png

Assets/NotepadAppList.targetsize-80_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-80_altform-unplated.png

.png

Assets/NotepadAppList.targetsize-96.png

.png

Assets/NotepadAppList.targetsize-96_altform-lightunplated.png

.png

Assets/NotepadAppList.targetsize-96_altform-unplated.png

.png

Assets/NotepadLargeTile.scale-200.png

.png

Assets/NotepadMedTile.scale-200.png

.png

Assets/NotepadSmallTile.scale-200.png

.png

Assets/NotepadStoreLogo.scale-200.png

.png

Assets/NotepadWideTile.scale-200.png

.png

Assets/contrast-black/NotepadAppList.scale-200.png

.png

Assets/contrast-black/NotepadAppList.targetsize-16.png

.png

Assets/contrast-black/NotepadAppList.targetsize-16_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-16_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-20.png

.png

Assets/contrast-black/NotepadAppList.targetsize-20_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-20_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-24.png

.png

Assets/contrast-black/NotepadAppList.targetsize-24_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-24_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-256.png

.png

Assets/contrast-black/NotepadAppList.targetsize-256_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-256_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-30.png

.png

Assets/contrast-black/NotepadAppList.targetsize-30_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-30_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-32.png

.png

Assets/contrast-black/NotepadAppList.targetsize-32_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-32_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-36.png

.png

Assets/contrast-black/NotepadAppList.targetsize-36_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-36_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-40.png

.png

Assets/contrast-black/NotepadAppList.targetsize-40_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-40_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-48.png

.png

Assets/contrast-black/NotepadAppList.targetsize-48_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-48_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-60.png

.png

Assets/contrast-black/NotepadAppList.targetsize-60_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-60_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-64.png

.png

Assets/contrast-black/NotepadAppList.targetsize-64_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-64_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-72.png

.png

Assets/contrast-black/NotepadAppList.targetsize-72_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-72_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-80.png

.png

Assets/contrast-black/NotepadAppList.targetsize-80_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-80_altform-unplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-96.png

.png

Assets/contrast-black/NotepadAppList.targetsize-96_altform-lightunplated.png

.png

Assets/contrast-black/NotepadAppList.targetsize-96_altform-unplated.png

.png

Assets/contrast-black/NotepadLargeTile.scale-200.png

.png

Assets/contrast-black/NotepadMedTile.scale-200.png

.png

Assets/contrast-black/NotepadSmallTile.scale-200.png

.png

Assets/contrast-black/NotepadStoreLogo.scale-200.png

.png

Assets/contrast-black/NotepadWideTile.scale-200.png

.png

Assets/contrast-white/NotepadAppList.scale-200.png

.png

Assets/contrast-white/NotepadAppList.targetsize-16.png

.png

Assets/contrast-white/NotepadAppList.targetsize-16_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-16_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-20.png

.png

Assets/contrast-white/NotepadAppList.targetsize-20_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-20_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-24.png

.png

Assets/contrast-white/NotepadAppList.targetsize-24_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-24_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-256.png

.png

Assets/contrast-white/NotepadAppList.targetsize-256_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-256_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-30.png

.png

Assets/contrast-white/NotepadAppList.targetsize-30_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-30_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-32.png

.png

Assets/contrast-white/NotepadAppList.targetsize-32_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-32_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-36.png

.png

Assets/contrast-white/NotepadAppList.targetsize-36_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-36_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-40.png

.png

Assets/contrast-white/NotepadAppList.targetsize-40_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-40_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-48.png

.png

Assets/contrast-white/NotepadAppList.targetsize-48_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-48_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-60.png

.png

Assets/contrast-white/NotepadAppList.targetsize-60_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-60_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-64.png

.png

Assets/contrast-white/NotepadAppList.targetsize-64_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-64_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-72.png

.png

Assets/contrast-white/NotepadAppList.targetsize-72_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-72_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-80.png

.png

Assets/contrast-white/NotepadAppList.targetsize-80_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-80_altform-unplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-96.png

.png

Assets/contrast-white/NotepadAppList.targetsize-96_altform-lightunplated.png

.png

Assets/contrast-white/NotepadAppList.targetsize-96_altform-unplated.png

.png

Assets/contrast-white/NotepadLargeTile.scale-200.png

.png

Assets/contrast-white/NotepadMedTile.scale-200.png

.png

Assets/contrast-white/NotepadSmallTile.scale-200.png

.png

Assets/contrast-white/NotepadStoreLogo.scale-200.png

.png

Assets/contrast-white/NotepadWideTile.scale-200.png

.png

Assets/inifile.targetsize-16.png

.png

Assets/inifile.targetsize-20.png

.png

Assets/inifile.targetsize-24.png

.png

Assets/inifile.targetsize-256.png

.png

Assets/inifile.targetsize-32.png

.png

Assets/inifile.targetsize-40.png

.png

Assets/inifile.targetsize-48.png

.png

Assets/inifile.targetsize-64.png

.png

Assets/ps1file.targetsize-16.png

.png

Assets/ps1file.targetsize-24.png

.png

Assets/ps1file.targetsize-256.png

.png

Assets/ps1file.targetsize-32.png

.png

Assets/ps1file.targetsize-48.png

.png

Assets/txtfile.targetsize-16.png

.png

Assets/txtfile.targetsize-20.png

.png

Assets/txtfile.targetsize-24.png

.png

Assets/txtfile.targetsize-256.png

.png

Assets/txtfile.targetsize-32.png

.png

Assets/txtfile.targetsize-40.png

.png

Assets/txtfile.targetsize-48.png

.png

Assets/txtfile.targetsize-64.png

.png

Microsoft.Toolkit.Win32.UI.XamlHost.winmd

.dll windows:6 windows x86 arch:x86

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84
Signer

Actual PE Digest

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Microsoft.UI.Xaml.winmd

.dll windows:6 windows x86 arch:x86

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:33

Not After

01/09/2022, 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

41:69:fd:21:23:64:f7:63:5d:c1:82:32:ba:d2:87:11:51:d9:6b:e2:6d:84:31:e3:22:93:a3:5a:71:4c:45:52
Signer

Actual PE Digest

41:69:fd:21:23:64:f7:63:5d:c1:82:32:ba:d2:87:11:51:d9:6b:e2:6d:84:31:e3:22:93:a3:5a:71:4c:45:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Notepad/Assets/NotepadIcons.ttf

Notepad/Microsoft.Toolkit.Win32.UI.XamlHost.dll

.dll windows:6 windows x64 arch:x64

4372b5e8b06c35af2c3b158d27f120f8

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

1a:d5:48:73:af:54:06:eb:be:82:19:a1:88:41:93:4d:37:14:85:dc:91:d7:11:d1:b9:0e:99:50:38:70:05:65
Signer

Actual PE Digest

1a:d5:48:73:af:54:06:eb:be:82:19:a1:88:41:93:4d:37:14:85:dc:91:d7:11:d1:b9:0e:99:50:38:70:05:65

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\x64\Release\Microsoft.Toolkit.Win32.UI.XamlApplication\Microsoft.Toolkit.Win32.UI.XamlHost.pdb

Imports

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary

DisableThreadLibraryCalls

LoadLibraryExW

user32

DispatchMessageW

PeekMessageW

msvcp140_app

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1_app

__CxxFrameHandler4

vcruntime140_app

__std_exception_copy

__std_exception_destroy

__C_specific_handler

_CxxThrowException

__std_type_info_destroy_list

memmove

memset

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment

_initterm_e

_seh_filter_dll

_cexit

_initterm

_initialize_onexit_table

_invalid_parameter_noinfo_noreturn

_execute_onexit_table

terminate

_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free

malloc

_callnewh

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable

SleepConditionVariableSRW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

InterlockedPushEntrySList

InterlockedFlushSList

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString

WindowsGetStringRawBuffer

WindowsCreateStringReference

WindowsPreallocateStringBuffer

WindowsDeleteStringBuffer

WindowsCreateString

WindowsDeleteString

WindowsPromoteStringBuffer

oleaut32

SysFreeString

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo

SetRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoTaskMemFree

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Notepad/Microsoft.Toolkit.Win32.UI.XamlHost.pri

Notepad/Microsoft.Toolkit.Win32.UI.XamlHost.winmd

.dll windows:6 windows x86 arch:x86

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

28/04/2021, 00:00

Not After

19/07/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Windows Community Toolkit (.NET Foundation),O=Windows Community Toolkit (.NET Foundation),L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84
Signer

Actual PE Digest

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Notepad/Notepad.exe

.exe windows:6 windows x64 arch:x64

0dee72641701ab2de7082d3cc99ed655

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\b\Release\x64\Notepad\Notepad.pdb

Imports

shlwapi

SHStrDupW

PathFindExtensionW

PathIsNetworkPathW

PathIsFileSpecW

PathFileExistsW

kernel32

GetCurrentProcess

HeapFree

SetEvent

CreateEventExW

OpenSemaphoreW

IsProcessorFeaturePresent

GetProcAddress

CreateMutexExW

CompareStringOrdinal

WaitForSingleObjectEx

ReadFile

FindFirstFileW

ReleaseMutex

GetModuleHandleExW

ReleaseSemaphore

CreateSemaphoreExW

GetCurrentProcessId

EnterCriticalSection

MulDiv

GlobalUnlock

LeaveCriticalSection

GlobalLock

GetModuleHandleW

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

ResetEvent

UnmapViewOfFile

GetCurrentPackageFullName

ParseApplicationUserModelId

GetCurrentApplicationUserModelId

MapViewOfFile

CreateFileMappingW

LocalReAlloc

GetCurrentDirectoryW

RegisterApplicationRestart

MultiByteToWideChar

GetDiskFreeSpaceExW

CreateEventW

SetCurrentDirectoryW

GetFileAttributesExW

LocalUnlock

QueryPerformanceCounter

SetEndOfFile

GetACP

HeapAlloc

CreateDirectoryW

GlobalFree

GlobalAlloc

RtlCaptureContext

WriteFile

WideCharToMultiByte

GetSystemTimeAsFileTime

VerSetConditionMask

VerifyVersionInfoW

InitializeSListHead

FindClose

GetFileInformationByHandle

K32GetModuleFileNameExW

GetModuleFileNameW

CloseHandle

GetCommandLineW

HeapSetInformation

GetFileAttributesW

DeleteFileW

LocalAlloc

CreateFileW

__C_specific_handler

DebugBreak

SetLastError

InterlockedPushEntrySList

FreeLibrary

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

GetLastError

IsDebuggerPresent

FormatMessageW

RaiseException

GetCurrentThreadId

OutputDebugStringW

LocalFree

TrySubmitThreadpoolCallback

FindNLSString

GetProcessHeap

GetLocaleInfoW

GetUserDefaultUILanguage

GetLocalTime

GetDateFormatW

GetTimeFormatW

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

LoadLibraryW

TerminateProcess

LocalLock

GetFullPathNameW

GetModuleFileNameA

WaitForSingleObject

user32

SystemParametersInfoW

IsZoomed

CopyRect

SetWindowLongPtrW

SetScrollInfo

CreateWindowExW

GetWindow

GetNextDlgTabItem

GetKeyboardState

SendDlgItemMessageW

SetThreadDpiAwarenessContext

ReleaseDC

GetDC

GetDpiForSystem

GetDesktopWindow

GetKeyboardLayout

DrawTextExW

CreateDialogParamW

DrawIconEx

GetWindowTextW

SetWindowTextW

SetDlgItemTextW

IsDialogMessageW

GetDpiForWindow

PeekMessageW

GetWindowTextLengthW

GetDlgCtrlID

SetFocus

GetDlgItem

EndDialog

LoadImageW

DialogBoxParamW

LoadCursorW

SendMessageW

SetCursor

SetScrollPos

GetSystemMetrics

SendMessageA

GetWindowLongPtrW

SetRectEmpty

MapWindowPoints

LoadIconW

SetProcessDefaultLayout

RegisterWindowMessageW

GetSystemMenu

CharUpperW

SetWindowPlacement

CreateAcceleratorTableW

GetParent

EnableWindow

SetWindowLongW

MoveWindow

IsIconic

InvalidateRect

UpdateWindow

ClientToScreen

GetGUIThreadInfo

ScreenToClient

GetCursorPos

GetActiveWindow

GetDlgItemTextW

SetActiveWindow

DispatchMessageW

TranslateMessage

TranslateAcceleratorW

GetMessageW

HideCaret

CharNextW

PtInRect

DefWindowProcW

GetFocus

IsWindowVisible

GetForegroundWindow

SetWindowPos

SetForegroundWindow

PostQuitMessage

EndPaint

BeginPaint

KillTimer

FillRect

GetSysColorBrush

DestroyWindow

GetSysColor

GetWindowLongW

GetScrollInfo

SetTimer

GetKeyState

IsChild

CloseClipboard

IsClipboardFormatAvailable

OpenClipboard

GetSubMenu

EnableMenuItem

GetMenu

ShowWindow

RedrawWindow

SetWindowRgn

GetSystemMetricsForDpi

MonitorFromWindow

GetClientRect

RegisterClassExW

PostMessageW

GetWindowRect

GetWindowPlacement

ole32

CoCreateGuid

CoTaskMemFree

CoCreateInstance

CoTaskMemAlloc

CoUninitialize

CoInitializeEx

PropVariantClear

CoWaitForMultipleHandles

CoGetApartmentType

CoGetObjectContext

CoCreateFreeThreadedMarshaler

urlmon

FindMimeFromData

shell32

DragAcceptFiles

ShellExecuteW

SHGetKnownFolderPath

DragQueryFileW

SHCreateItemFromParsingName

DragFinish

SHAddToRecentDocs

propsys

PropVariantToStringVectorAlloc

PSGetPropertyDescriptionListFromString

comdlg32

GetFileTitleW

PrintDlgExW

PageSetupDlgW

CommDlgExtendedError

gdi32

AbortDoc

DeleteObject

EndPage

StartDocW

StartPage

EndDoc

SetBkMode

SelectObject

CreateFontIndirectW

CreateSolidBrush

EnumFontsW

GetStockObject

GetTextMetricsW

LPtoDP

SetWindowExtEx

SetViewportExtEx

SetMapMode

GetDeviceCaps

GetTextExtentPoint32W

TextOutW

CreateDCW

CreateRectRgn

BitBlt

SetAbortProc

SetTextColor

SetBkColor

CreateCompatibleDC

DeleteDC

EnumFontFamiliesExW

CreateDIBSection

advapi32

DecryptFileW

RegOpenKeyExW

RegCreateKeyW

RegCloseKey

RegQueryValueExW

DuplicateEncryptionInfoFile

RegCreateKeyExW

RegSetValueExW

RegDeleteKeyExW

RegQueryInfoKeyW

RegEnumValueW

GetTokenInformation

EventWriteTransfer

EventUnregister

EventRegister

EventSetInformation

IsTextUnicode

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

comctl32

ord410

CreateStatusWindowW

ord413

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

WindowsDeleteString

WindowsGetStringRawBuffer

WindowsCreateString

oleaut32

SetErrorInfo

GetErrorInfo

SysStringLen

SysFreeString

SysAllocString

SysAllocStringLen

winspool.drv

ClosePrinter

GetPrinterDriverW

OpenPrinterW

dwmapi

DwmExtendFrameIntoClientArea

DwmGetWindowAttribute

DwmSetWindowAttribute

DwmDefWindowProc

uxtheme

CloseThemeData

DrawThemeTextEx

OpenThemeData

GetThemeSysFont

imm32

ImmReleaseContext

ImmSetCompositionStringW

ImmIsIME

ImmGetProperty

ImmSetCompositionWindow

ImmGetContext

ImmGetCompositionWindow

msvcp140

_Query_perf_counter

_Query_perf_frequency

?ignore@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_JG@Z

?_Xout_of_range@std@@YAXPEBD@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

_Thrd_yield

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

?_Xlength_error@std@@YAXPEBD@Z

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z

??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception

wcschr

__std_terminate

_CxxThrowException

__current_exception_context

_purecall

__std_exception_destroy

__std_exception_copy

memset

memcmp

memcpy

memmove

api-ms-win-crt-runtime-l1-1-0

_c_exit

_register_thread_local_exe_atexit_callback

_exit

exit

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_initterm_e

_initterm

abort

_get_narrow_winmain_command_line

_set_app_type

_seh_filter_exe

_cexit

_register_onexit_function

_crt_atexit

terminate

_invalid_parameter_noinfo

_errno

_invalid_parameter_noinfo_noreturn

api-ms-win-crt-string-l1-1-0

wcscpy_s

wcsnlen

_wcsicmp

iswspace

iswdigit

api-ms-win-crt-stdio-l1-1-0

_set_fmode

__stdio_common_vswprintf

__p__commode

__stdio_common_vsnprintf_s

api-ms-win-crt-convert-l1-1-0

wcstol

api-ms-win-crt-heap-l1-1-0

_callnewh

free

_set_new_mode

malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Notepad/NotepadXamlUI.dll

.dll windows:6 windows x64 arch:x64

cbb3d17ec5dd8024e05bca91972c58e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\b\Release\x64\NotepadXamlUI\NotepadXamlUI.pdb

Imports

api-ms-win-core-winrt-string-l1-1-0

WindowsPreallocateStringBuffer

WindowsPromoteStringBuffer

api-ms-win-core-localization-l1-2-0

FormatMessageW

ResolveLocaleName

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc

CoUninitialize

CoInitializeEx

CoCreateFreeThreadedMarshaler

CoCreateInstance

CoTaskMemFree

CoGetApartmentType

CoGetObjectContext

dwrite

DWriteCreateFactory

msvcp140_app

?_Xbad_function_call@std@@YAXXZ

?_Xinvalid_argument@std@@YAXPEBD@Z

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

?_Xlength_error@std@@YAXPEBD@Z

?_Xout_of_range@std@@YAXPEBD@Z

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

?_Incref@facet@locale@std@@UEAAXXZ

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

?is@?$ctype@_W@std@@QEBA_NF_W@Z

??1_Locinfo@std@@QEAA@XZ

??1_Lockit@std@@QEAA@XZ

??0_Locinfo@std@@QEAA@PEBD@Z

??0_Lockit@std@@QEAA@H@Z

??1facet@locale@std@@MEAA@XZ

??0facet@locale@std@@IEAA@_K@Z

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

?id@?$ctype@_W@std@@2V0locale@2@A

??Bid@locale@std@@QEAA_KXZ

?id@?$collate@_W@std@@2V0locale@2@A

_Wcsxfrm

_Wcscoll

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

?_Xbad_alloc@std@@YAXXZ

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

?__ExceptionPtrCreate@@YAXPEAX@Z

?__ExceptionPtrDestroy@@YAXPEAX@Z

_Thrd_yield

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

?__ExceptionPtrCurrentException@@YAXPEAX@Z

?__ExceptionPtrRethrow@@YAXPEBX@Z

vcruntime140_1_app

__CxxFrameHandler4

vcruntime140_app

memmove

__std_terminate

__std_exception_copy

__std_exception_destroy

_purecall

strchr

wcsrchr

__current_exception

__current_exception_context

__C_specific_handler

_CxxThrowException

__std_type_info_destroy_list

memchr

memcmp

memcpy

memset

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_register_onexit_function

_initialize_onexit_table

_initialize_narrow_environment

_configure_narrow_argv

_cexit

_initterm

_initterm_e

terminate

_crt_atexit

abort

_invalid_parameter_noinfo

_invalid_parameter_noinfo_noreturn

_errno

_seh_filter_dll

api-ms-win-crt-string-l1-1-0

tolower

iswspace

api-ms-win-crt-heap-l1-1-0

realloc

free

_callnewh

malloc

api-ms-win-crt-convert-l1-1-0

wcstol

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

WakeAllConditionVariable

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary

GetProcAddress

DisableThreadLibraryCalls

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

InitializeSListHead

InterlockedPushEntrySList

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapFree

oleaut32

SysFreeString

GetErrorInfo

SetErrorInfo

SysStringLen

SysAllocString

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

WideCharToMultiByte

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-errorhandling-l1-1-0

GetLastError

api-ms-win-core-threadpool-l1-2-0

TrySubmitThreadpoolCallback

Exports

DllCanUnloadNow

DllGetActivationFactory

VSDesignerCanUnloadNow

VSDesignerDllMain

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 857KB - Virtual size: 857KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 885KB - Virtual size: 889KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Notepad/NotepadXamlUI.pri

Notepad/NotepadXamlUI.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

Notepad/NotepadXamlUI/App.xaml

Notepad/NotepadXamlUI/BlankView.xaml

Notepad/NotepadXamlUI/CompatibleSettingSection.xaml

Notepad/NotepadXamlUI/ContextMenu.xaml

Notepad/NotepadXamlUI/ExpanderExStyles.xaml

Notepad/NotepadXamlUI/FindReplaceDialog.xaml

Notepad/NotepadXamlUI/FindReplaceDialogResourceDictionary.xaml

Notepad/NotepadXamlUI/FontSettingSection.xaml

Notepad/NotepadXamlUI/GlobalStyles.xaml

Notepad/NotepadXamlUI/GotoDialogContent.xaml

Notepad/NotepadXamlUI/MainMenuBar.xaml

Notepad/NotepadXamlUI/ModalDialog.xaml

Notepad/NotepadXamlUI/NotepadSettingsPage.xaml

Notepad/NotepadXamlUI/OverwriteStyles.xaml

Notepad/NotepadXamlUI/ScrollBar.xaml

Notepad/NotepadXamlUI/StatusBar.xaml

Notepad/NotepadXamlUI/StatusBarItem.xaml

Notepad/NotepadXamlUI/ThemeSettingSection.xaml

Notepad/NotepadXamlUI/TitleBarBackIconControl.xaml

NotepadXamlUI.winmd

.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_READ

NotepadXamlUI/App.xbf

NotepadXamlUI/Assets/NotepadIcons.ttf

NotepadXamlUI/BlankView.xbf

NotepadXamlUI/CompatibleSettingSection.xbf

NotepadXamlUI/ContextMenu.xbf

NotepadXamlUI/ExpanderExStyles.xbf

NotepadXamlUI/FindReplaceDialog.xbf

NotepadXamlUI/FindReplaceDialogResourceDictionary.xbf

NotepadXamlUI/FontSettingSection.xbf

NotepadXamlUI/GlobalStyles.xbf

NotepadXamlUI/GotoDialogContent.xbf

NotepadXamlUI/MainMenuBar.xbf

NotepadXamlUI/ModalDialog.xbf

NotepadXamlUI/NotepadSettingsPage.xbf

NotepadXamlUI/OverwriteStyles.xbf

NotepadXamlUI/ScrollBar.xbf

NotepadXamlUI/StatusBar.xbf

NotepadXamlUI/StatusBarItem.xbf

NotepadXamlUI/ThemeSettingSection.xbf

NotepadXamlUI/TitleBarBackIconControl.xbf

[Content_Types].xml

.xml

msptls.dll

.dll windows:6 windows x64 arch:x64

71bb80379b07ce206fbf78060b98ebcb

Code Sign

33:00:00:04:90:0e:61:14:98:12:78:23:70:00:00:00:00:04:90
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:47

Not After

11/05/2023, 20:47

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:02:cf:a0:25:90:e3:13:04:ef:15:00:00:00:00:02:cf
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e8:50:f9:cf:84:bb:f2:5f:5c:96:a8:8f:12:c8:a3:6b:30:36:8c:db:a2:ba:ac:e1:94:16:5c:2b:ba:a3:a9:43
Signer

Actual PE Digest

e8:50:f9:cf:84:bb:f2:5f:5c:96:a8:8f:12:c8:a3:6b:30:36:8c:db:a2:ba:ac:e1:94:16:5c:2b:ba:a3:a9:43

Digest Algorithm

sha256

PE Digest Matches

true

e8:50:f9:cf:84:bb:f2:5f:5c:96:a8:8f:12:c8:a3:6b:30:36:8c:db:a2:ba:ac:e1:94:16:5c:2b:ba:a3:a9:43
Signer

Actual PE Digest

e8:50:f9:cf:84:bb:f2:5f:5c:96:a8:8f:12:c8:a3:6b:30:36:8c:db:a2:ba:ac:e1:94:16:5c:2b:ba:a3:a9:43

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

d:\dbs\el\omr\target\x64\ship\ptls\x-none\msptls.pdb

Imports

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall

memcmp

memset

__std_type_info_destroy_list

__std_terminate

__C_specific_handler

memcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table

_cexit

_initialize_narrow_environment

_configure_narrow_argv

_seh_filter_dll

_initterm_e

_initterm

_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

free

kernel32

IsProcessorFeaturePresent

GetCurrentProcessId

QueryPerformanceCounter

GetSystemTimeAsFileTime

InitializeSListHead

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

Exports

?FsAddFigureObstacle@Ptls6@@YAJPEAUfspagefmtstate@1@KPEBUfsfigobstinfo@1@W4fskfiguretype@1@PEAH@Z

?FsAdjustPelPadding@Ptls6@@YAJPEAUfscontext@1@PEAUfspara@1@KJJJPEAH@Z

?FsAllocMemory@Ptls6@@YAJPEAUfscontext@1@JPEAPEAX@Z

?FsCollectShrinkDataSubtrack@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubtrack@1@KPEBUtagFSSHAFT@1@JJJJHW4_fskshrinkalignoverride@1@PEAUfsshrink@1@PEAH@Z

?FsCombineReuse@Ptls6@@YAXPEAU_fsreuse@1@00@Z

?FsCommitFilledRectangle@Ptls6@@YAJPEAUfspagefmtstate@1@KPEBUfsfillinfo@1@@Z

?FsConductCensusPel@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfspara@1@PEAUfscensor@1@KPEAUtagFSPOINT@1@@Z

?FsConductCensusSubpage@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubpage@1@KPEBUtagFSSHAFT@1@PEAUfscensor@1@@Z

?FsConductCensusSubtrack@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubtrack@1@KPEBUtagFSSHAFT@1@PEAUfscensor@1@@Z

?FsCreateContext@Ptls6@@YAJPEBUfscontextinfo@1@PEAPEAUfscontext@1@@Z

?FsCreateDummyFootnoteRejector@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@@Z

?FsCreatePageBottomless@Ptls6@@YAJPEAUfscontext@1@PEAUfsnameclient@1@HJPEAW4_fsfmtrbl@1@PEAPEAUfspage@1@@Z

?FsCreatePageFinite@Ptls6@@YAJPEAUfscontext@1@PEBUfsbreakrecpage@1@PEAUfsnameclient@1@PEAU_fsfmtr@1@PEAPEAUfspage@1@PEAPEAU31@@Z

?FsCreateSubpage@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfsbreakrecsubpage@1@HPEBUfsfmtsubpagein@1@PEAPEAUfssubpage@1@PEAUfsfmtout@1@PEAU_fsfmtr@1@PEAPEAU41@PEAPEAUfsmcsclient@1@@Z

?FsDebugViewTrack@Ptls6@@YAXPEAUfstrack@1@JQEAUfsdebugviewpara@1@@Z

?FsDestroyContext@Ptls6@@YAJPEAUfscontext@1@@Z

?FsDestroyDummyFootnoteRejector@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@@Z

?FsDestroyMemory@Ptls6@@YAXPEAUfscontext@1@PEAX@Z

?FsDestroyPage@Ptls6@@YAJPEAUfscontext@1@PEAUfspage@1@@Z

?FsDestroyPageBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEAUfsbreakrecpage@1@@Z

?FsDestroyPel@Ptls6@@YAJPEAUfscontext@1@PEAUfspara@1@@Z

?FsDestroyPelBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEAUfsbreakrecpel@1@@Z

?FsDestroySubpage@Ptls6@@YAJPEAUfscontext@1@PEAUfssubpage@1@@Z

?FsDestroySubpageBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEAUfsbreakrecsubpage@1@@Z

?FsDestroySubtrack@Ptls6@@YAJPEAUfscontext@1@PEAUfssubtrack@1@@Z

?FsDestroySubtrackBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEAUfsbreakrecsubtrack@1@@Z

?FsDestroyTableClean@Ptls6@@YAJPEAUfstablecleancontext@1@PEAUfstableclean@1@@Z

?FsDestroyTableCleanBreakRecord@Ptls6@@YAJPEAUfstablecleancontext@1@PEAUfsbreakrectable@1@@Z

?FsDuplicatePageBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEBUfsbreakrecpage@1@PEAPEAU31@@Z

?FsDuplicatePelBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEAUfsbreakrecpel@1@PEAPEAU31@@Z

?FsDuplicateSubpageBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEBUfsbreakrecsubpage@1@PEAPEAU31@@Z

?FsDuplicateSubtrackBreakRecord@Ptls6@@YAJPEAUfscontext@1@PEBUfsbreakrecsubtrack@1@PEAPEAU31@@Z

?FsDuplicateTableCleanBreakRecord@Ptls6@@YAJPEAUfstablecleancontext@1@PEBUfsbreakrectable@1@PEAPEAU31@@Z

?FsFAllFootnotesAllowed@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAH@Z

?FsFFootnoteAllowed@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfsnameclient@1@PEAH@Z

?FsFObstacleAllowed@Ptls6@@YAJPEAUfspagefmtstate@1@PEAUfsnameclient@1@PEAH@Z

?FsFormatInlineObject@Ptls6@@YAJPEAUfscontext@1@PEAUfstextparahandle@1@PEAUfsnameclient@1@JHKPEAJ33@Z

?FsFormatPel@Ptls6@@YAJPEAUfscontext@1@PEAUfsparaclient@1@PEAUfspagefmtstate@1@PEBUfsbreakrecpel@1@HPEAUfsnameclient@1@HHHHKJJW4_fsksuppresshardbreakbeforefirstpara@1@HHHJPEAU_fsfmtr@1@PEAPEAUfspara@1@PEAPEAU51@PEAJ9PEAUfsbaselineinfo@1@PEAU_fsreuse@1@@Z

?FsFormatSubtrack@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfsbreakrecsubtrack@1@HPEAUfsnameclient@1@PEBUfsmcsclient@1@PEBUtagFSRECT@1@PEBUfsfmtin@1@PEAU_fsfmtr@1@PEAPEAUfssubtrack@1@PEAPEAU41@PEAPEAU61@PEAUfsfmtout@1@@Z

?FsFormatTableClean@Ptls6@@YAJPEAUfstablecleancontext@1@PEAUfsparaclient@1@PEAUfssizeclient@1@PEBUfsbreakrectable@1@HPEAUfsnameclient@1@HHHW4_fsksuppresshardbreakbeforefirstpara@1@HKJJHHJPEAPEAUfstableclean@1@PEAU_fsfmtr@1@PEAH8PEAPEAU51@PEAJPEAUfsbaselineinfo@1@PEAU_fsreuse@1@@Z

?FsGetClientHandle@Ptls6@@YAJPEAUfspagefmtstate@1@PEAPEAUfsgeomclient@1@@Z

?FsGetColumnDimension@Ptls6@@YAJPEAUfspagefmtstate@1@KPEAUtagFSSHAFT@1@@Z

?FsGetEmptySpaces@Ptls6@@YAJPEAUfspagefmtstate@1@KPEBUtagFSRECT@1@JHJPEAHPEAJ33PEAUfsemptyspace@1@3222@Z

?FsGetFNewFormatFromFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@PEAH@Z

?FsGetFigureObstacleData@Ptls6@@YAJPEAUfspagefmtstate@1@PEAUfsnameclient@1@KPEAHPEAUfsflowaround@1@PEAUfsoverlap@1@PEAUtagFSPOINT@1@222@Z

?FsGetIntervals@Ptls6@@YAJPEAUfspagefmtstate@1@KPEBUtagFSRECT@1@JPEAUfsinterval@1@PEAJ@Z

?FsGetMaxNumberEmptySpaces@Ptls6@@YAJPEAUfspagefmtstate@1@KPEAJ@Z

?FsGetMaxNumberIntervals@Ptls6@@YAJPEAUfspagefmtstate@1@KPEAJ@Z

?FsGetMinMaxWidthSubpage@Ptls6@@YAJPEAUfscontext@1@PEAUfsautofithandle@1@PEAUfsnameclient@1@JKJPEBUfscolumninfo@1@HJPEAPEAU41@PEAJJ5555@Z

?FsGetMinMaxWidthSubpageCore@Ptls6@@YAJPEAUfscontext@1@PEAUfsautofithandle@1@PEAUfsnameclient@1@JKJPEBUfscolumninfo@1@HJPEAPEAU41@PEAJJ5555@Z

?FsGetNewParaToReuseFromFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@PEAPEAUfspara@1@@Z

?FsGetNextTick@Ptls6@@YAJPEAUfspagefmtstate@1@KJPEAHPEAJ@Z

?FsGetNumberSubpageFootnotes@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubpage@1@PEAJ@Z

?FsGetNumberSubtrackFootnotes@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubtrack@1@PEAJ@Z

?FsGetOldCellToReuseFromFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@PEAPEAUfstablecell@1@@Z

?FsGetOldParaToReuseFromFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@PEAPEAUfspara@1@@Z

?FsGetOutOfFlowDvrSubpage@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@PEAKPEAJ@Z

?FsGetPageRectangle@Ptls6@@YAJPEAUfspagefmtstate@1@KPEAUtagFSRECT@1@1@Z

?FsGetPelColumnBalancingInfo@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfspara@1@KPEAJ33@Z

?FsGetPelFootnoteInfo@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfspara@1@KJJPEAUfsftninfo@1@PEAJ@Z

?FsGetPelNumberFootnotes@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfspara@1@PEAJ@Z

?FsGetPelVisibleRectangle@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfspara@1@KPEAUtagFSRECT@1@@Z

?FsGetShiftOffset@Ptls6@@YAJPEAUfscontext@1@PEBUfsshift@1@KPEBUtagFSPOINT@1@PEAJ@Z

?FsGetSubpageColumnBalancingInfo@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubpage@1@PEAKPEAJ44@Z

?FsGetSubpageFootnoteInfo@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubpage@1@JJPEAKPEAUfsftninfo@1@PEAJ@Z

?FsGetSubpageFootnoteInfoWord@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubpage@1@JJPEAKPEAUfsftninfoword@1@PEAJ@Z

?FsGetSubtrackColumnBalancingInfo@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubtrack@1@KPEAJ33@Z

?FsGetSubtrackFootnoteInfo@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubtrack@1@JJKPEBUtagFSSHAFT@1@PEAUfsftninfo@1@PEAJ@Z

?FsGetVisibleRectangleSubpage@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubpage@1@PEAKPEAUtagFSRECT@1@@Z

?FsGetVisibleRectangleSubtrack@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEBUfssubtrack@1@KPEAUtagFSRECT@1@@Z

?FsJustifySubpage@Ptls6@@YAJPEAUfscontext@1@PEAUfssubpage@1@JHW4fskalignpage@1@H@Z

?FsQueryAttachedObjectList@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@JPEAUfsattachedobjectdescription@1@PEAJ@Z

?FsQueryCompositeColumnDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfscompositecolumn@1@PEAUfscompositecolumndetails@1@@Z

?FsQueryCompositeColumnFootnoteList@Ptls6@@YAJPEAUfscontext@1@PEBUfscompositecolumn@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQueryDcpLineVariantsFromCachedTextPara@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@JPEAJ2@Z

?FsQueryEndnoteColumnDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfsendnotecolumn@1@PEAUfsendnotecolumndetails@1@@Z

?FsQueryEquationDetails@Ptls6@@YAJPEAUfscontext@1@PEAUfsequation@1@PEAUfsequationdetails@1@@Z

?FsQueryFigureObjectDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfsfiguredetails@1@@Z

?FsQueryFloaterDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfsfloaterdetails@1@@Z

?FsQueryFootnoteColumnDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfsfootnotecolumn@1@PEAUfsfootnotecolumndetails@1@@Z

?FsQueryFootnoteColumnTrackList@Ptls6@@YAJPEAUfscontext@1@PEBUfsfootnotecolumn@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQueryHeightDefinedColumnSpanAreaList@Ptls6@@YAJPEAUfscontext@1@PEBUfssection@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQueryLineCompositeElementList@Ptls6@@YAJPEAUfscontext@1@PEBUfsline@1@JPEAUfslineelement@1@PEAJ@Z

?FsQueryLineListComposite@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@JPEAUfslinedescriptioncomposite@1@PEAJ@Z

?FsQueryLineListSingle@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@JPEAUfslinedescriptionsingle@1@PEAJ@Z

?FsQueryMathLineList@Ptls6@@YAJPEAUfscontext@1@PEAUfsequation@1@JPEAUfsmathlinedescription@1@PEAJ@Z

?FsQueryMathParaDetails@Ptls6@@YAJPEAUfscontext@1@PEAUfspara@1@PEAUfsmathparadetails@1@@Z

?FsQueryMathParaEquationList@Ptls6@@YAJPEAUfscontext@1@PEAUfspara@1@JPEAUfsequationdescription@1@PEAJ@Z

?FsQueryMathParaEquationNumberList@Ptls6@@YAJPEAUfscontext@1@PEAUfspara@1@JPEAUfsequationnumberdescription@1@PEAJ@Z

?FsQueryNextLine@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfsline@1@PEAHPEAUfslinedescriptionsingle@1@PEAUfslinedescriptioncomposite@1@PEAPEAU41@@Z

?FsQueryPageApeList@Ptls6@@YAJPEAUfscontext@1@PEBUfspage@1@JPEAUfsapedescription@1@PEAJ@Z

?FsQueryPageDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspage@1@PEAUfspagedetails@1@@Z

?FsQueryPageDvrMainContent@Ptls6@@YAJPEAUfscontext@1@PEBUfspage@1@PEAJ@Z

?FsQueryPageFootnoteColumnList@Ptls6@@YAJPEAUfscontext@1@PEBUfspage@1@JPEAUfsfootnotecolumndescription@1@PEAJ@Z

?FsQueryPageSectionList@Ptls6@@YAJPEAUfscontext@1@PEBUfspage@1@JPEAUfssectiondescription@1@PEAJ@Z

?FsQueryPelDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfspeldetails@1@@Z

?FsQueryPelTableCellList@Ptls6@@YAJPEAUfscontext@1@PEBUfstablerow@1@JPEAW4_fskupdate@1@PEAPEAUfstablecell@1@PEAW4fstablekcellmerge@1@PEAJ@Z

?FsQueryPelTableDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfstable@1@PEAUfstabledetails@1@@Z

?FsQueryPelTableRowDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfstablerow@1@PEAUfstablerowdetails@1@@Z

?FsQueryPelTableRowList@Ptls6@@YAJPEAUfscontext@1@PEBUfstable@1@JPEAUfstablerowdescription@1@PEAJ@Z

?FsQuerySectionBasicColumnList@Ptls6@@YAJPEAUfscontext@1@PEBUfssection@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQuerySectionCompositeColumnList@Ptls6@@YAJPEAUfscontext@1@PEBUfssection@1@JPEAUfscompositecolumndescription@1@PEAJ@Z

?FsQuerySectionDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfssection@1@PEAUfssectiondetails@1@@Z

?FsQuerySectionEndnoteColumnList@Ptls6@@YAJPEAUfscontext@1@PEBUfssection@1@JPEAUfsendnotecolumndescription@1@PEAJ@Z

?FsQuerySegmentDefinedColumnSpanAreaList@Ptls6@@YAJPEAUfscontext@1@PEBUfssection@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQuerySubpageApeList@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@JPEAUfsapedescription@1@PEAJ@Z

?FsQuerySubpageBasicColumnList@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQuerySubpageDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@PEAUfssubpagedetails@1@@Z

?FsQuerySubpageHeightDefinedColumnSpanAreaList@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQuerySubpagePrepositionElements@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@PEAUfstrackdescription@1@@Z

?FsQuerySubpageSegmentDefinedColumnSpanAreaList@Ptls6@@YAJPEAUfscontext@1@PEBUfssubpage@1@JPEAUfstrackdescription@1@PEAJ@Z

?FsQuerySubtrackDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfssubtrack@1@PEAUfssubtrackdetails@1@@Z

?FsQuerySubtrackParaList@Ptls6@@YAJPEAUfscontext@1@PEBUfssubtrack@1@JPEAUfsparadescription@1@PEAJ@Z

?FsQueryTableCleanCellList@Ptls6@@YAJPEAUfstablecleancontext@1@PEBUfstablerow@1@JPEAW4_fskupdate@1@PEAPEAUfstablecell@1@PEAW4fstablekcellmerge@1@PEAJ@Z

?FsQueryTableCleanRowDetails@Ptls6@@YAJPEAUfstablecleancontext@1@PEBUfstablerow@1@PEAUfstablerowdetails@1@@Z

?FsQueryTableCleanRowList@Ptls6@@YAJPEAUfstablecleancontext@1@PEBUfstableclean@1@JPEAUfstablerowdescription@1@PEAJ@Z

?FsQueryTableCleanTableDetails@Ptls6@@YAJPEAUfstablecleancontext@1@PEBUfstableclean@1@PEAUfstabledetails@1@@Z

?FsQueryTableObjCellList@Ptls6@@YAJPEAUfscontext@1@PEBUfstablerow@1@JPEAW4_fskupdate@1@PEAPEAUfstablecell@1@PEAW4fstablekcellmerge@1@PEAJ@Z

?FsQueryTableObjDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfstableobjdetails@1@@Z

?FsQueryTableObjFigureCountWord@Ptls6@@YAJPEBUfspara@1@PEAJ@Z

?FsQueryTableObjFigureListWord@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@JPEAUfstablefiguredescription@1@PEAJ@Z

?FsQueryTableObjRowDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfstablerow@1@PEAUfstablerowdetails@1@@Z

?FsQueryTableObjRowList@Ptls6@@YAJPEAUfscontext@1@PEBUfstable@1@JPEAUfstablerowdescription@1@PEAJ@Z

?FsQueryTableObjTableProperDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfstable@1@PEAUfstabledetails@1@@Z

?FsQueryTextDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfstextdetails@1@@Z

?FsQueryTrackDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfstrack@1@PEAUfstrackdetails@1@@Z

?FsQueryTrackNextChangedPara@Ptls6@@YAJPEAUfscontext@1@PEAUfstrack@1@PEAUfsparalink@1@PEAHPEAU_fschangedparadescr@1@PEAPEAU41@@Z

?FsQueryTrackPara@Ptls6@@YAJPEAUfscontext@1@PEBUfstrack@1@PEAUfsparalink@1@PEAUfsparadescription@1@PEAPEAU41@@Z

?FsQueryTrackParaList@Ptls6@@YAJPEAUfscontext@1@PEBUfstrack@1@JPEAUfsparadescription@1@PEAJ@Z

?FsQueryTrelDetails@Ptls6@@YAJPEAUfscontext@1@PEBUfspara@1@PEAUfstreldetails@1@@Z

?FsReallocMemory@Ptls6@@YAJPEAUfscontext@1@JPEAPEAX@Z

?FsRegisterFloatObstacle@Ptls6@@YAJPEAUfspagefmtstate@1@KPEBUfsfltobstinfo@1@@Z

?FsRegisterShrinkData@Ptls6@@YAJPEAUfscontext@1@PEAUfsshrink@1@KPEBUtagFSRECT@1@JJJJW4_fskshrinkalignoverride@1@@Z

?FsRegisterShrinkMinWidth@Ptls6@@YAJPEAUfscontext@1@PEAUfsshrink@1@KJ@Z

?FsResolveOverlap@Ptls6@@YAJPEAUfspagefmtstate@1@KPEBUtagFSRECT@1@PEAUfsnameclient@1@PEAUfsparaclient@1@PEBUfsoverlap@1@HPEAUtagFSVECTOR@1@@Z

?FsSetDebugFlags@Ptls6@@YAJPEAUfscontext@1@K@Z

?FsSetFNewFormatIntoFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@H@Z

?FsSetNewParaToReuseIntoFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@PEAUfspara@1@@Z

?FsSetOldParaToReuseIntoFmtState@Ptls6@@YAJPEAUfspagefmtstate@1@PEAUfspara@1@@Z

?FsShiftReuse@Ptls6@@YAXPEAU_fsreuse@1@J@Z

?FsShiftSubtrackVertical@Ptls6@@YAJPEAUfscontext@1@PEAUfspagefmtstate@1@PEAUfssubtrack@1@PEBUfsshift@1@KPEBUtagFSSHAFT@1@@Z

?FsTransformDrc@Ptls6@@YAJKPEBUtagFSDRECT@1@KPEAU21@@Z

?FsTransformPoint@Ptls6@@YAJKPEBUtagFSRECT@1@PEBUtagFSPOINT@1@KPEAU31@@Z

?FsTransformRectangle@Ptls6@@YAJKPEBUtagFSRECT@1@0KPEAU21@@Z

?FsTransformVector@Ptls6@@YAJKPEBUtagFSVECTOR@1@KPEAU21@@Z

?FsUpdateBottomlessPage@Ptls6@@YAJPEAUfscontext@1@PEAUfspage@1@PEAUfsupdclient@1@PEAUfsnameclient@1@HJPEAW4_fsfmtrbl@1@@Z

?FsUpdateBottomlessPageWithHint@Ptls6@@YAJPEAUfscontext@1@PEAUfspage@1@PEAUfsupdclient@1@PEAUfsnameclient@1@PEAUfspara@1@PEAUfsparaclient@1@PEAW4_fsfmtrbl@1@PEAH@Z

?FsUpdateFinitePage@Ptls6@@YAJPEAUfscontext@1@PEAUfspage@1@PEAUfsupdclient@1@PEBUfsbreakrecpage@1@PEAUfsnameclient@1@PEAU_fsfmtr@1@PEAPEAU51@@Z

?FsUpdateTableClean@Ptls6@@YAJPEAUfstablecleancontext@1@PEAPEAUfstableclean@1@PEAUfsparaclient@1@PEAUfssizeclient@1@PEBUfsbreakrectable@1@HPEAUfsnameclient@1@HHHW4_fsksuppresshardbreakbeforefirstpara@1@HKJJHHJPEAU_fsfmtr@1@PEAH8PEAPEAU61@PEAJPEAUfsbaselineinfo@1@PEAU_fsreuse@1@@Z

?FsValidateReuse@Ptls6@@YAJPEAU_fsreuse@1@@Z

?LsAllocMemory@Ptls6@@YAJPEAUlscontext@1@JPEAPEAX@Z

?LsAssert@Ptls6@@YAXH@Z

?LsCompressSubline@Ptls6@@YAJPEAVCLsSubline@1@J@Z

?LsCreateContext@Ptls6@@YAJPEBUlscontextinfo@1@PEAPEAUlscontext@1@@Z

?LsCreateLine@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z

?LsCreateLineGivenBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@JPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@@Z

?LsCreateParaBreakingSession@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlsbreakrecline@1@PEAPEAUlsparabrksession@1@@Z

?LsDebugViewLine@Ptls6@@YAXPEAVCLsLine@1@JQEAUlsdebugdnodeinfo@1@@Z

?LsDebugViewSubline@Ptls6@@YAXPEAVILsSubline@1@JQEAUlsdebugdnodeinfo@1@@Z

?LsDestroyBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@@Z

?LsDestroyContext@Ptls6@@YAJPEAUlscontext@1@@Z

?LsDestroyLine@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@@Z

?LsDestroyMemory@Ptls6@@YAXPEAUlscontext@1@PEAX@Z

?LsDestroyParaBreakingSession@Ptls6@@YAJPEAUlsparabrksession@1@@Z

?LsDestroySublineIteratorBidi@Ptls6@@YAJPEAUsublineiteratorbidi@1@@Z

?LsDisplayLine@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z

?LsDisplaySubline@Ptls6@@YAJPEAVILsSubline@1@HPEBUtagLSPOINT@1@IPEBUtagLSRECT@1@@Z

?LsDuplicateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEBUlsbreakrecline@1@PEAPEAU31@@Z

?LsEnumLine@Ptls6@@YAJPEAVCLsLine@1@HHPEBUtagLSPOINT@1@@Z

?LsEnumSubline@Ptls6@@YAJPEBVILsSubline@1@HHPEBUtagLSPOINT@1@@Z

?LsExpandSubline@Ptls6@@YAJPEAVCLsSubline@1@J@Z

?LsFindMasterSubline@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSPOINTUV@1@PEAPEAVILsSubline@1@@Z

?LsFinishCurrentSubline@Ptls6@@YAJPEAVCLsDnode@1@PEAPEAVCLsSubline@1@PEAKPEAUOBJDIM@1@PEAH@Z

?LsGetHihLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetInlineBlockLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetLineBreaks@Ptls6@@YAJPEAUlsparabrksession@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@PEAUtslinevariantrestriction@1@JPEAPEAU41@PEAUlslinfo@1@PEAPEAUtslinepenaltyinfo@1@PEAJ7@Z

?LsGetMathLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetMinMaxDurUntilHardBreak@Ptls6@@YAJPEAUlscontext@1@PEAUlsparaclient@1@PEBUlspap@1@JPEBUlslinerestr@1@PEBUlsbreakrecline@1@HPEAPEAU61@PEAUlslinfo@1@PEAPEAVCLsLine@1@PEAJ888@Z

?LsGetNextDnodeInSublineBidi@Ptls6@@YAJPEAUsublineiteratorbidi@1@PEAHPEAPEBVCLsDnode@1@@Z

?LsGetNextSpanSubline@Ptls6@@YAJPEAVILsSubline@1@Ulsspan_struct@1@KPEAHPEAU31@PEAK@Z

?LsGetObjectName@Ptls6@@YA?AVLSNAMEEXP@1@PEBVCLsDnode@1@@Z

?LsGetPenaltyModule@Ptls6@@YAJPEAUlscontext@1@PEAPEAUtspenaltymodule@1@@Z

?LsGetReverseLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetRubyLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetStretchabilityForLine@Ptls6@@YAJPEAVCLsLine@1@PEAJ1@Z

?LsGetTatenakayokoLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetVRubyLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsGetWarichuLsimethods@Ptls6@@YAJPEAUlsimethods@1@@Z

?LsLwMultDivR@Ptls6@@YAJJJJ@Z

?LsMatchPresSubline@Ptls6@@YAJPEAVCLsSubline@1@@Z

?LsModifyLineHeight@Ptls6@@YAJPEAUlscontext@1@PEAVCLsLine@1@JJJJ@Z

?LsNewSublineIteratorBidi@Ptls6@@YAJPEAVILsSubline@1@HHPEAPEAUsublineiteratorbidi@1@@Z

?LsNotReached@Ptls6@@YAXXZ

?LsPointUV2FromPointUV1@Ptls6@@YAJKPEBUtagLSPOINTUV@1@0KPEAU21@@Z

?LsPointXYFromPointUV@Ptls6@@YAJPEBUtagLSPOINT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z

?LsQueryCpPpointSubline@Ptls6@@YAJPEAVILsSubline@1@JJPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQueryEnumAutonum@Ptls6@@YAJPEAVCLsObject@1@PEAPEAVILsSubline@1@@Z

?LsQueryEnumBorderDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeborderinfo@1@@Z

?LsQueryEnumCharRunArrays@Ptls6@@YAJPEAVCLsObject@1@JPEAJPEA_W11@Z

?LsQueryEnumDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodeinfo@1@@Z

?LsQueryEnumFrontierDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodefrontierinfo@1@@Z

?LsQueryEnumGlyphRunArrays@Ptls6@@YAJPEAVCLsObject@1@JJPEA_WPEAG2PEAJPEAUtagLSOFFSET@1@32PEAKPEAE@Z

?LsQueryEnumHih@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryhihinfo@1@@Z

?LsQueryEnumInlineBlock@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryinlineblockinfo@1@@Z

?LsQueryEnumLine@Ptls6@@YAJPEAVCLsLine@1@PEAUlsqelineinfo@1@@Z

?LsQueryEnumMathAccent@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathaccentinfo@1@@Z

?LsQueryEnumMathBox@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathboxinfo@1@@Z

?LsQueryEnumMathBoxedFormula@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathboxedformulainfo@1@@Z

?LsQueryEnumMathDelimiters@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathdelimsinfo@1@@Z

?LsQueryEnumMathDelimitersWithSeparators@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathdelimsepinfo@1@@Z

?LsQueryEnumMathDelimitersWithSeparatorsPart@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathdelimseppartinfo@1@@Z

?LsQueryEnumMathEquation@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathequationinfo@1@@Z

?LsQueryEnumMathEquationArray@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqematheqarrayinfo@1@@Z

?LsQueryEnumMathFraction@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathfractioninfo@1@@Z

?LsQueryEnumMathFunctionApply@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathfunctionapplyinfo@1@@Z

?LsQueryEnumMathGeneral@Ptls6@@YAJPEAUlsmathgeneral@1@PEAUlsqemathgeneralinfo@1@@Z

?LsQueryEnumMathLeftSubSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathleftsubsuperscriptinfo@1@@Z

?LsQueryEnumMathList@Ptls6@@YAJPEAUlsmathlist@1@PEAUlsqemathlistinfo@1@@Z

?LsQueryEnumMathLowerLimit@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathlowerliminfo@1@@Z

?LsQueryEnumMathMarshal@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqemathmarshalinfo@1@@Z

?LsQueryEnumMathMatrix@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathmatrixinfo@1@@Z

?LsQueryEnumMathMatrixCell@Ptls6@@YAJPEAUlsmathfunction@1@JJPEAUlsqemathmatrixcellinfo@1@@Z

?LsQueryEnumMathMatrixColumn@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathmatrixcolumninfo@1@@Z

?LsQueryEnumMathMatrixRow@Ptls6@@YAJPEAUlsmathfunction@1@JPEAUlsqemathmatrixrowinfo@1@@Z

?LsQueryEnumMathNaryOperator@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathnaryoperatorinfo@1@@Z

?LsQueryEnumMathOperatorCharacter@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathopcharinfo@1@@Z

?LsQueryEnumMathOverBar@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathoverbarinfo@1@@Z

?LsQueryEnumMathPhantom@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathphantominfo@1@@Z

?LsQueryEnumMathRadical@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathradicalinfo@1@@Z

?LsQueryEnumMathSlashedFraction@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathslashedfractioninfo@1@@Z

?LsQueryEnumMathStack@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathstackinfo@1@@Z

?LsQueryEnumMathStretchStack@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathstretchstackinfo@1@@Z

?LsQueryEnumMathSubScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsubscriptinfo@1@@Z

?LsQueryEnumMathSubSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsubsuperscriptinfo@1@@Z

?LsQueryEnumMathSuperScript@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathsuperscriptinfo@1@@Z

?LsQueryEnumMathUnderBar@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathunderbarinfo@1@@Z

?LsQueryEnumMathUpperLimit@Ptls6@@YAJPEAUlsmathfunction@1@PEAUlsqemathupperliminfo@1@@Z

?LsQueryEnumMathZone@Ptls6@@YAJPEAUlsmathzone@1@PEAUlsqemathzoneinfo@1@@Z

?LsQueryEnumPenDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednodepeninfo@1@@Z

?LsQueryEnumRealDnode@Ptls6@@YAJPEAVCLsDnode@1@PEAUlsqednoderealinfo@1@@Z

?LsQueryEnumReverse@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqeryreverseinfo@1@@Z

?LsQueryEnumRuby@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqerubyinfo@1@@Z

?LsQueryEnumSubline@Ptls6@@YAJPEAVILsSubline@1@PEAUlsqesublineinfo@1@@Z

?LsQueryEnumTab@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqetabinfo@1@@Z

?LsQueryEnumTatenakayoko@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqetatenakinfo@1@@Z

?LsQueryEnumText@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqetextinfo@1@@Z

?LsQueryEnumVRuby@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqevrubyinfo@1@@Z

?LsQueryEnumWarichu@Ptls6@@YAJPEAVCLsObject@1@PEAUlsqerywarichuinfo@1@@Z

?LsQueryLineCpPpoint@Ptls6@@YAJPEAVCLsLine@1@JJPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQueryLineDown@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQueryLineDup@Ptls6@@YAJPEAVCLsLine@1@PEAUlslinearea@1@@Z

?LsQueryLineMaxDepth@Ptls6@@YAJPEAVCLsLine@1@PEAJ@Z

?LsQueryLinePointPcp@Ptls6@@YAJPEAVCLsLine@1@PEBUtagLSPOINTUV@1@JPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQueryLineUp@Ptls6@@YAJPEAVCLsLine@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQueryLineVisibilityWord@Ptls6@@YAJPEAVCLsLine@1@PEAJPEAH@Z

?LsQueryLineVisibleRectangle@Ptls6@@YAJPEAVCLsLine@1@PEAKPEAUtagLSRECT@1@@Z

?LsQueryPointPcpSubline@Ptls6@@YAJPEAVILsSubline@1@PEBUtagLSPOINTUV@1@JPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQuerySpanInfo@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@HJPEAUtagLSPOINTUV@1@PEAKPEAJ44444444444444444PEAUtagLSRECT@1@@Z

?LsQuerySpanTotalRelativeOffset@Ptls6@@YAJPEAVCLsLine@1@Ulsspan_struct@1@PEAUtagLSOFFSET@1@@Z

?LsQuerySublineDown@Ptls6@@YAJPEAVILsSubline@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQuerySublineUp@Ptls6@@YAJPEAVILsSubline@1@JHJJPEAHPEAUlsqsubinfo@1@PEAJPEAUlstextcell@1@@Z

?LsQueryTextCellDetails@Ptls6@@YAJPEAVCLsLine@1@PEAUlscelldetails@1@JJJPEA_WPEAG3PEAJPEAUtagLSOFFSET@1@PEAK@Z

?LsReallocMemory@Ptls6@@YAJPEAUlscontext@1@JPEAPEAX@Z

?LsSetDebugFlags@Ptls6@@YAJPEAUlscontext@1@K@Z

?LsSqueezeSubline@Ptls6@@YAJPEAVCLsSubline@1@JPEAHPEAJ@Z

?LsTransformRectangle@Ptls6@@YAXKPEBUtagLSRECT@1@KPEBUtagLSPOINTUV@1@PEAU21@@Z

?LsUpdateBreakRecord@Ptls6@@YAJPEAUlscontext@1@PEAUlsbreakrecline@1@JJJJPEAH@Z

?LsdnDistribute@Ptls6@@YAJPEAVCLsDnode@1@0J@Z

?LsdnFinishByCurrentPosition@Ptls6@@YAJPEAVCLsDnode@1@PEAVILsObjectFormattingSession@1@PEAVCLsObject@1@AEBUOBJDIM@1@H@Z

?LsdnFinishSimple@Ptls6@@YAJPEAVCLsDnode@1@JPEAVCLsObject@1@PEBUOBJDIM@1@H@Z

?LsdnFinishWordRegular@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@HHH@Z

?LsdnFinishWordRegularAddAdvancePen@Ptls6@@YAJPEAVCLsDnode@1@JPEAUlsrun@1@PEBUlschp@1@PEAVCLsObject@1@PEBUOBJDIM@1@JJJHHH@Z

?LsdnGetDup@Ptls6@@YAJPEAVCLsDnode@1@PEAJ@Z

?LsdnModifyParaEnding@Ptls6@@YAJPEAVCLsDnode@1@W4_lskeop@1@@Z

?LsdnQueryPenNode@Ptls6@@YAJPEAVCLsDnode@1@PEAJ11@Z

?LsdnResetObjDim@Ptls6@@YAJPEAVCLsDnode@1@PEBUOBJDIM@1@@Z

?LsdnResetPenNode@Ptls6@@YAJPEAVCLsDnode@1@JJJ@Z

?LsdnSetAbsBaseLine@Ptls6@@YAJPEAVCLsDnode@1@J@Z

?LsdnSetRigidDup@Ptls6@@YAJPEAVCLsDnode@1@J@Z

?LsmsrvFIsOperator@Ptls6@@YAJ_WPEAHPEAW4_lsmathbehavior@1@@Z

?LsmsrvGetBreakingQualityForOperatorCharacter@Ptls6@@YAJ_WW4_lsmathbehavior@1@PEAHPEAW4_lsmathbreakquality@1@@Z

?LsmsrvGetBuildupClass@Ptls6@@YAJ_WPEAHPEAW4_lsmathservbuildupclass@1@@Z

?LsmsrvGetSpacing@Ptls6@@YAJJJPEBUlsmathstyle@1@PEAJ@Z

?LsmsrvGetSpacingClassAsDifferential@Ptls6@@YAJPEAJ@Z

?LsmsrvGetSpacingClassAsMathOp@Ptls6@@YAJPEAJ@Z

?LsmsrvGetSpacingClassAsSubformula@Ptls6@@YAJPEAJ@Z

?LsmsrvGetSpacingClassAsText@Ptls6@@YAJPEAJ@Z

?LsmsrvGetSpacingClassForOperatorCharacter@Ptls6@@YAJ_WW4_lsmathbehavior@1@PEAJ2@Z

?LsmsrvGetSpacingClassForRegularFunction@Ptls6@@YAJW4_lsmathfunctionname@1@W4_lsmathbehavior@1@PEAJ2@Z

?LssbDistributeInSubline@Ptls6@@YAJPEAVILsSubline@1@J@Z

?LssbFDoneDisplay@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z

?LssbFDonePresSubline@Ptls6@@YAJPEAVILsSubline@1@PEAH@Z

?LssbGetDupSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAJ@Z

?LssbGetDurTrailInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z

?LssbGetDurTrailWithPensInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z

?LssbGetNumberDnodesInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z

?LssbGetObjDimSubline@Ptls6@@YAJPEBVILsSubline@1@PEAKPEAUOBJDIM@1@@Z

?LssbGetPlsrunsFromSubline@Ptls6@@YAJPEAVILsSubline@1@JPEAPEAUlsrun@1@@Z

?LssbGetVisibleDcpInSubline@Ptls6@@YAJPEAVILsSubline@1@PEAJ@Z

?LsusrvCanBreakAfterChar@Ptls6@@YAJJPEAW4BRKCOND@1@@Z

?LsusrvCanBreakBeforeChar@Ptls6@@YAJJPEAW4BRKCOND@1@@Z

?LsusrvCompOnRun@Ptls6@@YAJW4_lsmwopt@1@_W01PEAUlspract@1@@Z

?LsusrvCompSpace@Ptls6@@YAJHW4_lsmwopt@1@_WH01PEAUlspract@1@@Z

?LsusrvExpOnRun@Ptls6@@YAJW4_lsmwopt@1@_W01PEAU_lsact@1@@Z

?LsusrvExpSpace@Ptls6@@YAJHW4_lsmwopt@1@_WH01PEAU_lsact@1@@Z

?LsusrvGetBreakingClass@Ptls6@@YAJ_WW4_lsbrkopt@1@PEAHPEAJ3@Z

?LsusrvGetBreakingClassForDictionary@Ptls6@@YAJPEAJ00000@Z

?LsusrvGetBreakingInfo@Ptls6@@YAJJJW4_lsbreakmode@1@PEAUlsbrk@1@PEAE@Z

?LsusrvGetCharCompInfoFullMixed@Ptls6@@YAJPEBUlsusdems@1@HPEBUlsusrvcharruninfo@1@PEBUlsusrvneighborinfo@1@2JPEAPEAJ3@Z

?LsusrvGetCharExpansionInfoFullMixed@Ptls6@@YAJPEBUlsusdems@1@JHHPEBUlsusrvcharruninfo@1@PEBUlsusrvneighborinfo@1@2JPEAPEAJ3@Z

?LsusrvGetCompressionInfo@Ptls6@@YAJJJPEAUlspract@1@PEAE@Z

?LsusrvGetExpanInfo@Ptls6@@YAJJJPEAUlsexpan@1@PEAE@Z

?LsusrvGetGlyphCompInfoFullMixed@Ptls6@@YAJPEBUlsusdems@1@HPEBUlsusrvglyphruninfo@1@PEBUlsusrvneighborinfo@1@2JPEAPEAJ3@Z

?LsusrvGetGlyphExpansionInfoFullMixed@Ptls6@@YAJPEBUlsusdems@1@JHHPEBUlsusrvglyphruninfo@1@PEBUlsusrvneighborinfo@1@2JPEAPEAJ3PEAEPEAJ@Z

?LsusrvGetModWidthClassWarichuCloseParen@Ptls6@@YAJPEAE@Z

?LsusrvGetModWidthClassWarichuOpenParen@Ptls6@@YAJPEAE@Z

?LsusrvGetModWidthClasses@Ptls6@@YAJW4_lsmwopt@1@JPEB_WPEAE@Z

?LsusrvGetModWidthPairsInfo@Ptls6@@YAJJJHPEAUlspairact@1@PEAE@Z

?LsusrvGetNumberBreakingUnitsClasses@Ptls6@@YAJPEAJ0@Z

?LsusrvGetNumberCompUnits@Ptls6@@YAJPEAJ@Z

?LsusrvGetNumberExpanUnits@Ptls6@@YAJPEAJ@Z

?LsusrvGetNumberModPairUnits@Ptls6@@YAJPEAJ@Z

?LsusrvGetNumberModWidthClasses@Ptls6@@YAJPEAJ@Z

?LsusrvGetNumberOfPriorities@Ptls6@@YAJHHPEAJ00@Z

?LsusrvModWidthOnRun@Ptls6@@YAJW4_lsmwopt@1@_W01PEAU_lsact@1@@Z

?LsusrvModWidthSpace@Ptls6@@YAJHW4_lsmwopt@1@_WH01PEAU_lsact@1@@Z

?dvl@Ptls6@@YAPEAY0BAA@Ulsdebugdnodeinfo@1@PEAVCLsLine@1@@Z

?dvs@Ptls6@@YAPEAY0BAA@Ulsdebugdnodeinfo@1@PEAVCLsSubline@1@@Z

?dvsq@Ptls6@@YAPEAUlsdvsubline@1@PEAVILsSubline@1@@Z

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

resources.pri

riched20.dll

.dll windows:6 windows x64 arch:x64

5bb1f183b564039d1c8753c50b29f675

Code Sign

33:00:00:04:ec:ca:c1:3d:7b:3d:bd:4e:e5:00:01:00:00:04:ec
Certificate

Issuer

CN=Microsoft Testing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/09/2021, 20:04

Not After

30/12/2022, 20:04

Subject

O=Microsoft Corporation

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:2d:35:7a:46:88:c9:07:71:d8:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Testing Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10/12/2020, 20:43

Not After

17/06/2035, 21:04

Subject

CN=Microsoft Testing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

86:bc:dc:8d:44:d0:10:88:95:39:a5:ca:5d:1a:68:42:73:76:b4:4e:07:2d:a3:7c:34:27:a1:59:4a:69:61:e4
Signer

Actual PE Digest

86:bc:dc:8d:44:d0:10:88:95:39:a5:ca:5d:1a:68:42:73:76:b4:4e:07:2d:a3:7c:34:27:a1:59:4a:69:61:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\dbs\el\omr\Target\x64\ship\richedit\x-none\riched20.pdb

Imports

oleaut32

SysStringByteLen

VariantClear

VariantInit

SafeArrayPutElement

SafeArrayDestroy

SafeArrayCreateVector

SysStringLen

SysFreeString

SysAllocStringByteLen

kernel32

CreateEventW

WaitForSingleObjectEx

ResetEvent

SetEvent

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

GetSystemInfo

CloseThreadpoolWork

WaitForThreadpoolWorkCallbacks

SubmitThreadpoolWork

CreateThreadpoolWork

QueueUserWorkItem

LocalFree

FormatMessageW

GetTickCount

RaiseException

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

InitializeSRWLock

LCMapStringEx

FreeLibrary

GetProcAddress

VerifyVersionInfoW

VerSetConditionMask

GetModuleFileNameW

GetSystemDefaultLangID

GetUserDefaultLCID

GetSystemDefaultLCID

GlobalUnlock

GlobalHandle

GlobalLock

GlobalSize

GlobalReAlloc

GlobalFlags

VirtualProtect

GlobalFree

GlobalAlloc

SetFilePointer

GetFileType

CreateFileW

GetModuleHandleA

LoadResource

FindResourceW

DisableThreadLibraryCalls

GetThreadLocale

GetModuleHandleW

GetLocaleInfoW

GetTickCount64

CompareStringW

GetStringTypeExW

GetCurrentProcess

LoadLibraryExW

lstrcmpiA

GetCurrentProcessId

IsValidCodePage

WriteFile

GetLastError

ReadFile

CloseHandle

FindAtomA

CompareStringEx

CompareStringOrdinal

GetCurrentThreadId

LocaleNameToLCID

ResolveLocaleName

GetLocaleInfoEx

LCIDToLocaleName

WideCharToMultiByte

MultiByteToWideChar

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

QueryPerformanceCounter

LeaveCriticalSection

EnterCriticalSection

IsProcessorFeaturePresent

ole32

CoReleaseMarshalData

CoInitializeEx

CoUninitialize

CoTaskMemFree

PropVariantClear

CoGetInterfaceAndReleaseStream

CoMarshalInterThreadInterfaceInStream

advapi32

RegOpenKeyExW

RegQueryValueExW

RegCloseKey

RegEnumKeyExW

RegOpenKeyExA

RegQueryValueExA

gdi32

DPtoLP

GetBkMode

RoundRect

CreateDIBSection

ExtTextOutA

GetCharWidth32A

GetCharABCWidthsW

GetGlyphIndicesW

GetBkColor

Rectangle

GetGlyphOutlineW

GetOutlineTextMetricsW

GetCharWidthW

GetFontData

GetCurrentObject

CreatePen

SetTextAlign

GetTextFaceW

CreateFontIndirectW

CreateICW

GetTextMetricsW

GetStockObject

EnumFontFamiliesExW

GetObjectType

SetTextColor

CreatePatternBrush

CreateMetaFileA

CloseMetaFile

CreateMetaFileW

EnumMetaFile

StretchDIBits

CreateBitmap

SetEnhMetaFileBits

SetMetaFileBitsEx

GdiFlush

GetEnhMetaFileBits

GetEnhMetaFileHeader

GetMetaFileBitsEx

DeleteMetaFile

CombineRgn

CreateRectRgnIndirect

GetWindowOrgEx

StretchBlt

Polyline

SelectClipRgn

SetBkColor

SetBkMode

PatBlt

CreateSolidBrush

CreateCompatibleBitmap

GdiAlphaBlend

SetWorldTransform

SetGraphicsMode

GetWorldTransform

BitBlt

GetObjectW

GetDeviceCaps

GetPixel

OffsetViewportOrgEx

GetViewportOrgEx

SetWindowExtEx

SetWindowOrgEx

CreateCompatibleDC

ExtTextOutW

DeleteDC

DeleteObject

GetTextCharsetInfo

TranslateCharsetInfo

SelectObject

DeleteEnhMetaFile

IntersectClipRect

SaveDC

RestoreDC

CreateDCW

CreatePalette

GetKerningPairsA

SelectPalette

RealizePalette

GetWinMetaFileBits

vcruntime140_1

__CxxFrameHandler4

vcruntime140

wcschr

memcpy

_CxxThrowException

memset

__std_type_info_destroy_list

__current_exception_context

memmove

memcmp

__C_specific_handler_noexcept

__current_exception

wcsstr

__std_terminate

__std_exception_copy

__C_specific_handler

__std_exception_destroy

msvcp140

?_Throw_C_error@std@@YAXH@Z

_Mtx_lock

_Mtx_init_in_situ

_Mtx_destroy_in_situ

?_Xout_of_range@std@@YAXPEBD@Z

?_Xbad_function_call@std@@YAXXZ

?_Xlength_error@std@@YAXPEBD@Z

?_Xbad_alloc@std@@YAXXZ

_Mtx_unlock

_Thrd_id

api-ms-win-crt-heap-l1-1-0

malloc

realloc

free

_callnewh

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function

_execute_onexit_table

_crt_atexit

_cexit

terminate

_initialize_onexit_table

_initialize_narrow_environment

_invalid_parameter_noinfo_noreturn

_seh_filter_dll

_configure_narrow_argv

_initterm

_initterm_e

api-ms-win-crt-string-l1-1-0

strnlen

strncmp

wmemcpy_s

wcscpy_s

wcscmp

wcsnlen

_wcsicmp

strncpy_s

wcsncpy_s

wcsncmp

_wcsnicmp

iswspace

api-ms-win-crt-utility-l1-1-0

qsort

rand

api-ms-win-crt-convert-l1-1-0

wcstod

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s

__stdio_common_vsnprintf_s

api-ms-win-crt-math-l1-1-0

ceilf

pow

Exports

ConvertEquationFromOleStream

ConvertEquationFromStdVector

ConvertEquationFromStorage

ConvertEquationFromStorageEx

CreateFormattedTextRichEdit

CreateMathXmlHandler

CreateTextBoxLayout

CreateTextServices

DisableOleinitCheck

DllCanUnloadNow

DllGetVersion

GetLanguageTag

GetLcidFromLang

GetMathAlphanumeric

GetMathAlphanumericCode

GetMathAutoComplete

GetMathAutoCompleteHwnd

GetMathContextMenu

GetMathContextMenuItems

GetMathSpeechText

GetOleMathSpeechText

IID_IRichEditOle

IID_IRichEditOleCallback

IID_IRicheditUiaNotificationOverrides

IID_IRicheditUiaOverrides

IID_IRicheditWindowlessAccessibility

IID_ITextDocument2

IID_ITextHost

IID_ITextHost2

IID_ITextHostEx

IID_ITextServices

IID_ITextServices2

IsFontTemporary

MathBuildDown

MathBuildUp

MathTranslate

Navigate

ProcessMathMenuID

REExtendedRegisterClass

REMSOHInst

RegisterLanguageTag

RemoveFontFromCache

RichComboBoxWndProc

RichEdit10ANSIWndProc

RichEditANSIWndProc

RichEditWndProc

RichListBoxWndProc

SetCustomTextOutHandlerEx

SetEdpPermissionMode

SetTextServicesDpiCalculationOverride

ShutdownTextServices

SyncRangeToBrailleCp

TurnOffMathAutoCompleteList

TurnOnMathAutoCompleteList

WriteMathPrSax

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate

Extended Key Usages

Key Usages

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 3KB - Virtual size: 2KB

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

41:69:fd:21:23:64:f7:63:5d:c1:82:32:ba:d2:87:11:51:d9:6b:e2:6d:84:31:e3:22:93:a3:5a:71:4c:45:52Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 278KB - Virtual size: 278KB

4372b5e8b06c35af2c3b158d27f120f8

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23Certificate

Extended Key Usages

Key Usages

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

1a:d5:48:73:af:54:06:eb:be:82:19:a1:88:41:93:4d:37:14:85:dc:91:d7:11:d1:b9:0e:99:50:38:70:05:65Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-core-libraryloader-l1-2-0

user32

msvcp140_app

vcruntime140_1_app

vcruntime140_app

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

oleaut32

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-com-l1-1-0

api-ms-win-core-string-l1-1-0

Exports

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84
Signer

.text
Size: 3KB - Virtual size: 2KB

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

41:69:fd:21:23:64:f7:63:5d:c1:82:32:ba:d2:87:11:51:d9:6b:e2:6d:84:31:e3:22:93:a3:5a:71:4c:45:52
Signer

.text
Size: 278KB - Virtual size: 278KB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

1a:d5:48:73:af:54:06:eb:be:82:19:a1:88:41:93:4d:37:14:85:dc:91:d7:11:d1:b9:0e:99:50:38:70:05:65
Signer

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 28KB - Virtual size: 29KB

.pdata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 896B

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

0b:a6:99:c3:81:1b:a1:6a:ba:92:38:65:ba:32:f7:14
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

bd:2d:98:c4:bd:9d:ee:07:b0:a9:5c:00:bf:79:19:2b:99:74:6a:a9:05:82:a7:4a:83:8b:59:75:94:ac:61:84
Signer

.text
Size: 3KB - Virtual size: 2KB

.text
Size: 295KB - Virtual size: 294KB

.rdata
Size: 102KB - Virtual size: 101KB

.data
Size: 44KB - Virtual size: 51KB