e9f37b2fc84946f34d78544532546e37_JaffaCakes118

resource	yara_rule
static1/unpack001/QQMusic/tssafeedit.dat	acprotect

resource	yara_rule
static1/unpack001/QQMusic/tssafeedit.dat	upx

resource
unpack001/QQMusic/@绿化工具.exe
unpack002/$PLUGINSDIR/ButtonEvent.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/linker.dll
unpack002/$SYSDIR/vbscript.dll
unpack001/QQMusic/ExceptCatch.dll
unpack001/QQMusic/Plugins/DFX/Apps/CABARC.EXE
unpack001/QQMusic/Plugins/DFX/Apps/dfxwsettings.exe
unpack001/QQMusic/Plugins/dsp_dfx.dll
unpack001/QQMusic/QQMusicAddin/QMP_MatrixMixer.dll
unpack001/QQMusic/QQMusicAddin/atl80.dll
unpack001/QQMusic/QQMusicAddin/mfc80u.dll
unpack001/QQMusic/QQMusicAddin/qmp_7zip.dll
unpack001/QQMusic/QQMusicAddin/qmp_aac.dll
unpack001/QQMusic/QQMusicAddin/qmp_ape.dll
unpack001/QQMusic/QQMusicAddin/qmp_asf.dll
unpack001/QQMusic/QQMusicAddin/qmp_dts.dll
unpack001/QQMusic/QQMusicAddin/qmp_flac.dll
unpack001/QQMusic/QQMusicAddin/qmp_mp3.dll
unpack001/QQMusic/QQMusicAddin/qmp_st.dll
unpack001/QQMusic/QQMusicAddin/qmp_unrar.dll
unpack001/QQMusic/QQMusicAddin/qmpplugin_ogg.dll
unpack001/QQMusic/QQMusicAddin/qmpulgin_wav.dll
unpack001/QQMusic/QQMusicCvtData.dll
unpack001/QQMusic/atl80.dll
unpack001/QQMusic/auzip.dll
unpack001/QQMusic/mfc80u.dll
unpack001/QQMusic/msdmo.dll
unpack001/QQMusic/p2papi.dll
unpack001/QQMusic/p2papp.dll
unpack001/QQMusic/p2pcore.dll
unpack001/QQMusic/p2pdata.dll
unpack001/QQMusic/p2phttp.dll
unpack003/out.upx
unpack001/QQMusic/vbscript.dll

resource	yara_rule
static1/unpack001/QQMusic/@绿化工具.exe	nsis_installer_1
static1/unpack001/QQMusic/@绿化工具.exe	nsis_installer_2

.rar

QQMusic/@绿化工具.exe

.exe windows:4 windows x86 arch:x86

1c042238f43557c055fca8642de8a074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime

SearchPathA

GetShortPathNameA

GetFullPathNameA

MoveFileA

SetCurrentDirectoryA

GetFileAttributesA

GetLastError

CreateDirectoryA

SetFileAttributesA

Sleep

GetTickCount

GetFileSize

GetModuleFileNameA

GetCurrentProcess

CopyFileA

ExitProcess

GetWindowsDirectoryA

SetFileTime

GetCommandLineA

SetErrorMode

LoadLibraryA

lstrcpynA

GetDiskFreeSpaceA

GlobalUnlock

GlobalLock

CreateThread

CreateProcessA

RemoveDirectoryA

CreateFileA

GetTempFileNameA

lstrlenA

lstrcatA

GetSystemDirectoryA

GetVersion

CloseHandle

lstrcmpiA

lstrcmpA

ExpandEnvironmentStringsA

GlobalFree

GlobalAlloc

WaitForSingleObject

GetExitCodeProcess

GetModuleHandleA

LoadLibraryExA

GetProcAddress

FreeLibrary

MultiByteToWideChar

WritePrivateProfileStringA

GetPrivateProfileStringA

WriteFile

ReadFile

SetFilePointer

MulDiv

FindClose

FindNextFileA

FindFirstFileA

DeleteFileA

GetTempPathA

user32

EndDialog

ScreenToClient

GetWindowRect

EnableMenuItem

GetSystemMenu

SetClassLongA

IsWindowEnabled

SetWindowPos

GetSysColor

GetWindowLongA

SetCursor

LoadCursorA

CheckDlgButton

GetAsyncKeyState

IsDlgButtonChecked

GetMessagePos

LoadBitmapA

CallWindowProcA

IsWindowVisible

CloseClipboard

SetClipboardData

RegisterClassA

OpenClipboard

TrackPopupMenu

AppendMenuA

CreatePopupMenu

GetSystemMetrics

SetDlgItemTextA

GetDlgItemTextA

MessageBoxIndirectA

CharPrevA

wvsprintfA

DispatchMessageA

PeekMessageA

DestroyWindow

CreateDialogParamA

SetTimer

SetWindowTextA

PostQuitMessage

ShowWindow

wsprintfA

SendMessageTimeoutA

FindWindowExA

SystemParametersInfoA

CreateWindowExA

GetClassInfoA

DialogBoxParamA

CharNextA

EmptyClipboard

ExitWindowsEx

IsWindow

GetDlgItem

SetWindowLongA

LoadImageA

GetDC

EnableWindow

InvalidateRect

SendMessageA

DefWindowProcA

BeginPaint

GetClientRect

FillRect

DrawTextA

EndPaint

SetForegroundWindow

gdi32

SetBkColor

GetDeviceCaps

DeleteObject

CreateBrushIndirect

CreateFontIndirectA

SetBkMode

SetTextColor

SelectObject

shell32

SHGetPathFromIDListA

SHBrowseForFolderA

SHGetFileInfoA

ShellExecuteA

SHFileOperationA

SHGetSpecialFolderLocation

advapi32

RegQueryValueExA

RegSetValueExA

RegEnumKeyA

RegEnumValueA

RegOpenKeyExA

RegDeleteKeyA

RegDeleteValueA

RegCloseKey

RegCreateKeyExA

comctl32

ImageList_AddMasked

ImageList_Destroy

ord17

ImageList_Create

ole32

CoTaskMemFree

OleInitialize

OleUninitialize

CoCreateInstance

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/ButtonEvent.dll

.dll windows:4 windows x86 arch:x86

0ece15e7d9bb35972aec701f46192460

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA

GlobalAlloc

lstrcpyA

lstrcpynA

GlobalFree

user32

PostMessageA

CallWindowProcA

GetDlgItem

FindWindowExA

SetWindowLongA

wsprintfA

Exports

AddEventHandler

Unload

UnsetEventHandler

WhichButtonId

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/InstallOptions.dll

.dll windows:4 windows x86 arch:x86

0b51ce6ce6bf8d5c68b3ea9f3ac1bf2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA

GetCurrentDirectoryA

MultiByteToWideChar

GetPrivateProfileIntA

GlobalLock

GetModuleHandleA

lstrcmpiA

GetPrivateProfileStringA

lstrcatA

lstrcpynA

WritePrivateProfileStringA

lstrlenA

lstrcpyA

GlobalFree

GlobalUnlock

GlobalAlloc

user32

MapWindowPoints

GetDlgCtrlID

CloseClipboard

GetClipboardData

OpenClipboard

PtInRect

SetWindowRgn

LoadIconA

LoadImageA

SetWindowLongA

CreateWindowExA

MapDialogRect

SetWindowPos

GetWindowRect

CreateDialogParamA

ShowWindow

EnableMenuItem

GetSystemMenu

EnableWindow

GetDlgItem

DestroyIcon

DestroyWindow

DispatchMessageA

TranslateMessage

GetMessageA

IsDialogMessageA

LoadCursorA

SetCursor

DrawTextA

GetWindowLongA

DrawFocusRect

MessageBoxA

CallWindowProcA

PostMessageA

CharNextA

wsprintfA

GetWindowTextA

SetWindowTextA

SendMessageA

GetClientRect

gdi32

SetTextColor

CreateCompatibleDC

GetObjectA

GetDIBits

CreateRectRgn

CombineRgn

DeleteObject

SelectObject

shell32

SHBrowseForFolderA

SHGetDesktopFolder

SHGetPathFromIDListA

ShellExecuteA

comdlg32

GetOpenFileNameA

GetSaveFileNameA

CommDlgExtendedError

ole32

CoTaskMemFree

Exports

dialog

initDialog

show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/KillProcDLL.dll

.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA

TerminateProcess

OpenProcess

LoadLibraryA

CloseHandle

GetProcAddress

FreeLibrary

GlobalFree

lstrcpyA

DisableThreadLibraryCalls

msvcrt

strcmp

_strupr

toupper

strlen

free

_initterm

malloc

_adjust_fdiv

strcpy

_itoa

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

GlobalFree

GlobalSize

lstrcpyA

lstrcpynA

FreeLibrary

lstrcatA

GetProcAddress

LoadLibraryA

GetModuleHandleA

MultiByteToWideChar

lstrlenA

WideCharToMultiByte

GetLastError

VirtualAlloc

VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2

CLSIDFromString

Exports

Alloc

Call

Copy

Free

Get

Int64Op

Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/linker.dll

.dll windows:4 windows x86 arch:x86

5b9be84907034b8f0152e51177ceafc3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

GetModuleHandleA

lstrcpynA

lstrcpyA

GlobalFree

user32

UpdateWindow

InvalidateRect

SetCapture

SetFocus

PtInRect

GetWindowRect

GetDC

ReleaseCapture

EndPaint

BeginPaint

SetCursor

LoadCursorA

CallWindowProcA

DestroyCursor

SetWindowLongA

CreateCursor

IsWindow

ReleaseDC

SetWindowPos

GetWindowLongA

SendMessageA

GetClientRect

FillRect

GetFocus

DrawFocusRect

DrawTextA

ClientToScreen

gdi32

SetBkMode

SetTextColor

CreateFontIndirectA

GetObjectA

GetStockObject

DeleteObject

SelectObject

shell32

ShellExecuteA

Exports

Link

Unload

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/www.greendown.cn.ini

$SYSDIR/vbscript.dll

.dll regsvr32 windows:4 windows x86 arch:x86

fb0d686bec70e50106c5a13d0760ef32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

advapi32

RegSetValueExA

RegOpenKeyExA

RegSetValueA

RegCreateKeyA

RegCloseKey

RegDeleteKeyA

RegOpenKeyA

RegQueryValueExA

kernel32

GetUserDefaultLCID

DeleteCriticalSection

LeaveCriticalSection

EnterCriticalSection

GetACP

GetCurrentThreadId

IsValidLocale

TlsGetValue

IsValidCodePage

GetLocaleInfoA

GetSystemDefaultLCID

lstrlenA

WideCharToMultiByte

MultiByteToWideChar

GetComputerNameA

GetProcAddress

TlsSetValue

VirtualQuery

GetSystemInfo

GetTickCount

GetCurrentProcessId

QueryPerformanceCounter

TlsAlloc

GetModuleHandleA

InitializeCriticalSection

FreeResource

LockResource

LoadResource

FindResourceA

LoadLibraryExA

GetVersionExA

LoadLibraryA

Sleep

GetLocalTime

GetVersion

SetLastError

LCMapStringA

LCMapStringW

CompareStringA

CompareStringW

GetLocaleInfoW

GetDateFormatA

GetDateFormatW

GetLastError

MulDiv

IsBadReadPtr

InterlockedExchange

GetModuleFileNameA

InterlockedDecrement

TlsFree

FreeLibrary

InterlockedIncrement

user32

GetDesktopWindow

GetClientRect

DialogBoxParamW

DialogBoxParamA

GetDC

SetWindowLongA

EndDialog

GetDlgItemTextA

GetDlgItemTextW

GetWindowLongA

GetDlgItem

SendDlgItemMessageA

WinHelpA

WinHelpW

MessageBoxIndirectW

MessageBoxIndirectA

ReleaseDC

ShowWindow

EnableWindow

GetWindowRect

SendMessageA

SetWindowPos

GetWindowTextA

DrawTextA

GetWindowTextW

DrawTextW

MapWindowPoints

MoveWindow

SetForegroundWindow

SetWindowTextA

SetWindowTextW

gdi32

GetDeviceCaps

DeleteObject

CreateFontA

SelectObject

ole32

CoCreateInstance

CoTaskMemFree

CoGetClassObject

CLSIDFromProgID

BindMoniker

MkParseDisplayName

StgOpenStorage

StgCreateDocfile

StgIsStorageFile

CLSIDFromString

StringFromCLSID

CreateBindCtx

oleaut32

VariantCopyInd

GetActiveObject

GetErrorInfo

CreateTypeLib2

SysStringLen

SafeArrayUnlock

VarDateFromStr

VarR8FromStr

SafeArrayLock

SysAllocString

LoadRegTypeLi

RegisterTypeLi

LoadTypeLi

SafeArrayDestroyDescriptor

SafeArrayDestroyData

OleLoadPicture

VarBstrFromDate

LoadTypeLibEx

SysReAllocString

VarBstrFromR8

VarBstrFromR4

VarBstrFromUI4

VarBstrFromI4

CreateTypeLi

SafeArrayCreate

SafeArrayRedim

SafeArrayDestroy

VariantCopy

SysAllocStringByteLen

SysStringByteLen

VariantClear

VariantChangeType

VariantChangeTypeEx

SysFreeString

VarDateFromUdate

SysAllocStringLen

VariantInit

VarUdateFromDate

msvcrt

malloc

_initterm

_onexit

__dllonexit

ldiv

div

iswspace

_wtoi

memchr

_ismbblead

sqrt

exp

atan

cos

sin

atoi

bsearch

modf

wcstol

_ltow

_seh_longjmp_unwind

_errno

pow

floor

fabs

_statusfp

toupper

_wcsnicmp

wcscspn

_setjmp3

longjmp

strrchr

wcscpy

__CxxFrameHandler

realloc

_clearfp

_control87

wcschr

swprintf

_adjust_fdiv

_ultow

towlower

wcscmp

??2@YAPAXI@Z

strtoul

memmove

log

_ftol

_except_handler3

_wcsicmp

wcslen

_purecall

sprintf

_wcsdup

free

wcsncpy

??3@YAXPAX@Z

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 348KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

QQMusic/AutoPowerOff.exe

.exe windows:4 windows x86 arch:x86

38b8acf1371ac42bd752364095e9aeae

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

26-01-2010 00:00

Not After

25-01-2013 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

26:57:07:97:ca:b7:be:75:83:a1:07:4c:6f:49:af:38:38:d4:09:53
Signer

Actual PE Digest

26:57:07:97:ca:b7:be:75:83:a1:07:4c:6f:49:af:38:38:d4:09:53

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Test\AutoPowerOff\release\AutoPowerOff.pdb

Imports

kernel32

Sleep

GetCurrentThreadId

SetSystemPowerState

GetLastError

GetCurrentProcessId

GetCurrentProcess

GetTickCount

QueryPerformanceCounter

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

TerminateProcess

InterlockedCompareExchange

InterlockedExchange

GetSystemTimeAsFileTime

user32

ExitWindowsEx

advapi32

LookupPrivilegeValueW

OpenProcessToken

AdjustTokenPrivileges

msvcr80

_exit

_XcptFilter

exit

__initenv

_initterm

_initterm_e

_configthreadlocale

_cexit

_adjust_fdiv

__p__commode

__p__fmode

_encode_pointer

__set_app_type

_crt_debugger_hook

_except_handler4_common

_unlock

__dllonexit

_lock

_onexit

_decode_pointer

_invoke_watson

_controlfp_s

__getmainargs

_amsg_exit

_wcsicmp

??3@YAXPAX@Z

__setusermatherr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

QQMusic/CMInternet.dll

.dll windows:4 windows x86 arch:x86

0dff7b6aa5a39c916a89aa01de075cba

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

26-01-2010 00:00

Not After

25-01-2013 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

75:3b:ac:6b:20:bd:d4:a9:4d:18:00:81:06:68:10:b5:18:97:06:c3
Signer

Actual PE Digest

75:3b:ac:6b:20:bd:d4:a9:4d:18:00:81:06:68:10:b5:18:97:06:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

e:\svn\QQMusicCli2008_proj\trunk\pdb\CMInternet.pdb

Imports

kernel32

DisableThreadLibraryCalls

InitializeCriticalSection

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

FreeLibrary

GetProcAddress

LoadLibraryW

GetModuleFileNameW

CreateEventW

TerminateThread

ResetEvent

WaitForSingleObject

SetEvent

WaitForMultipleObjects

CloseHandle

CreateFileW

WriteFile

SetFilePointer

GetLastError

CreateDirectoryW

GetCurrentProcessId

GetCurrentThreadId

GetTickCount

QueryPerformanceCounter

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

InterlockedCompareExchange

Sleep

GetVersionExA

GetThreadLocale

GetLocaleInfoA

GetACP

InterlockedExchange

GetSystemTimeAsFileTime

user32

PostMessageW

oleaut32

SysFreeString

SysAllocString

msvcp80

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ

?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z

?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ

?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB

?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z

wininet

HttpSendRequestW

InternetReadFileExA

HttpOpenRequestW

InternetConnectW

HttpQueryInfoW

InternetQueryOptionW

InternetCloseHandle

InternetSetStatusCallbackW

InternetOpenW

HttpAddRequestHeadersW

InternetCanonicalizeUrlW

InternetSetOptionW

InternetCrackUrlW

msvcr80

__clean_type_info_names_internal

?_type_info_dtor_internal_method@type_info@@QAEXXZ

??3@YAXPAX@Z

__CxxFrameHandler3

_purecall

_invalid_parameter_noinfo

??0exception@std@@QAE@ABQBD@Z

?what@exception@std@@UBEPBDXZ

??1exception@std@@UAE@XZ

??0exception@std@@QAE@XZ

??_V@YAXPAX@Z

??2@YAPAXI@Z

_CxxThrowException

??0exception@std@@QAE@ABV01@@Z

memset

_wcsicmp

_waccess

_beginthreadex

_wtoi

_vsnwprintf_s

wcslen

_unlock

__dllonexit

_encode_pointer

_lock

_onexit

_decode_pointer

_malloc_crt

free

_encoded_null

_initterm

_initterm_e

_amsg_exit

_adjust_fdiv

__CppXcptFilter

_except_handler4_common

_crt_debugger_hook

?terminate@@YAXXZ

Exports

CMInternet_GetInterface

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

QQMusic/Common.dll

.dll regsvr32 windows:4 windows x86 arch:x86

14ccdf5fc43a7df8388cbd3d96d7a9d0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

26-01-2010 00:00

Not After

25-01-2013 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:e3:ca:3a:a9:44:77:bf:44:2f:e2:e1:f1:f2:83:54:3d:f6:10:99
Signer

Actual PE Digest

30:e3:ca:3a:a9:44:77:bf:44:2f:e2:e1:f1:f2:83:54:3d:f6:10:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

h:\Hummer\platform_QQMusic\Basic_HummerPlatform_VOB\Platform_fr\Output\bin\Common.pdb

Imports

version

VerQueryValueW

GetFileVersionInfoSizeW

GetFileVersionInfoW

kernel32

SetEndOfFile

GetDiskFreeSpaceW

FreeLibrary

GetFullPathNameW

Sleep

lstrcmpW

CopyFileW

MoveFileExW

UnmapViewOfFile

MapViewOfFile

CreateFileMappingW

MoveFileW

GetSystemTimeAsFileTime

GetProcessTimes

GetCurrentProcess

GetModuleHandleA

GetPrivateProfileStringA

GetFileAttributesA

GetModuleFileNameA

GetCurrentProcessId

VirtualQuery

QueryPerformanceFrequency

SetProcessAffinityMask

GetProcessAffinityMask

GetLocaleInfoW

GetUserDefaultLCID

GetSystemDefaultLCID

IsValidLocale

GetUserDefaultUILanguage

GetSystemDefaultUILanguage

GetSystemDefaultLangID

GetUserDefaultLangID

SetLocaleInfoW

GetDateFormatW

GetTimeFormatW

GetCalendarInfoW

GetCurrencyFormatW

GetNumberFormatW

GetTimeZoneInformation

FileTimeToSystemTime

FileTimeToLocalFileTime

lstrcmpiA

lstrcmpiW

GetCPInfoExW

SetEvent

SetThreadPriority

ResetEvent

TerminateThread

WaitForSingleObject

WaitForMultipleObjects

CreateEventW

IsBadReadPtr

GetACP

FlushFileBuffers

LoadLibraryA

GetWindowsDirectoryA

GetSystemDirectoryA

LoadLibraryW

GetWindowsDirectoryW

GetSystemDirectoryW

GetVersionExW

HeapFree

HeapAlloc

GetProcessHeap

OpenProcess

lstrcpynW

SetProcessWorkingSetSize

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetProcAddress

GetModuleHandleW

EnterCriticalSection

LeaveCriticalSection

QueryPerformanceCounter

GetTickCount

GetCurrentThreadId

GetLastError

HeapReAlloc

GetVersion

HeapSize

InterlockedCompareExchange

TerminateProcess

MultiByteToWideChar

WideCharToMultiByte

CloseHandle

CreateFileW

OutputDebugStringA

InitializeCriticalSection

HeapDestroy

DeleteCriticalSection

InterlockedIncrement

InterlockedDecrement

SetThreadLocale

GetThreadLocale

RaiseException

SetFilePointerEx

GetFileSize

GetCommandLineW

GetTempPathW

WriteFile

SetFilePointer

FindResourceExW

FindResourceW

FindFirstFileW

SetFileAttributesW

DeleteFileW

FindNextFileW

LocalAlloc

InterlockedExchange

GetVersionExA

GetLocaleInfoA

FindClose

RemoveDirectoryW

GetFileType

CreateDirectoryW

GetFileAttributesW

GlobalSize

GlobalAlloc

GlobalLock

GlobalUnlock

SizeofResource

LoadResource

LockResource

GetFileSizeEx

ReadFile

GetModuleFileNameW

lstrlenW

user32

FindWindowW

GetWindowThreadProcessId

CharLowerW

CharUpperW

CharNextW

CharLowerA

CharUpperA

CharNextA

SetWindowLongW

PostMessageW

SetTimer

KillTimer

DestroyWindow

CreateWindowExW

ShowWindow

DefWindowProcW

GetFocus

IsWindowEnabled

UnregisterClassA

IsWindow

SetFocus

SetPropW

RemovePropW

SendMessageW

GetPropW

GetWindowLongW

GetParent

GetWindow

GetWindowRect

GetDesktopWindow

MonitorFromWindow

GetMonitorInfoW

GetClientRect

MapWindowPoints

SetWindowPos

DrawTextW

GetIconInfo

GetDC

ReleaseDC

RegisterClassExW

GetClassInfoExW

EnableWindow

gdi32

CreateBitmap

StretchDIBits

BitBlt

StretchBlt

GetObjectW

SelectObject

RealizePalette

CreateCompatibleBitmap

CreateCompatibleDC

CreateDIBSection

DeleteDC

CreateDIBitmap

DeleteObject

ExtCreateRegion

CreateRectRgn

GetDIBits

RectVisible

SetStretchBltMode

SetBkMode

SetTextColor

GetStockObject

ExtTextOutW

SetDIBitsToDevice

ExtSelectClipRgn

CreateRectRgnIndirect

GetClipBox

SetBkColor

CreateFontIndirectW

comdlg32

GetSaveFileNameW

CommDlgExtendedError

GetOpenFileNameW

advapi32

RegOpenKeyW

RegOpenKeyExW

RegQueryValueExW

RegCloseKey

DuplicateTokenEx

OpenProcessToken

GetTokenInformation

GetSidSubAuthorityCount

GetSidSubAuthority

LookupPrivilegeValueW

AdjustTokenPrivileges

shell32

ShellExecuteExW

SHGetMalloc

SHGetPathFromIDListW

ShellExecuteW

SHGetFolderLocation

SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc

CoCreateGuid

CoCreateInstance

CLSIDFromString

CoFreeLibrary

CoTaskMemFree

StgOpenStorageOnILockBytes

StringFromGUID2

StgCreateDocfile

CoLoadLibrary

CoGetMalloc

StgOpenStorage

oleaut32

VariantChangeType

SysReAllocStringLen

VariantInit

SafeArrayCreate

SafeArrayAccessData

SafeArrayUnaccessData

SysAllocStringByteLen

SysStringByteLen

BstrFromVector

VectorFromBstr

VarBstrCmp

VarDateFromStr

VariantTimeToSystemTime

VariantClear

SysAllocString

SysAllocStringLen

LoadTypeLi

LoadRegTypeLi

SysFreeString

SysStringLen

atl80

ord31

ord58

ord32

ord30

ord61

ord23

ord64

ord22

ord18

ord15

shlwapi

StrCmpW

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ

??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z

?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z

?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z

?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB

?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z

??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z

?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z

msvcr80

_gmtime64_s

_mktime64

_wtol

wcstoul

iswalpha

wcsstr

iswalnum

_adjust_fdiv

_localtime64_s

wcsftime

strstr

_vscprintf

vsprintf_s

_mbspbrk

_mbsinc

__clean_type_info_names_internal

?_type_info_dtor_internal_method@type_info@@QAEXXZ

_crt_debugger_hook

__CppXcptFilter

strrchr

_vscwprintf

strchr

toupper

memcpy_s

wcsrchr

_wcsicmp

_wtof

wcsncmp

memmove

_msize

strtod

abort

_snprintf

getenv

sscanf

sprintf

fprintf

exit

realloc

_strrev

_ismbcspace

vswprintf_s

wcscoll

_wcsicoll

wcspbrk

_wcsrev

wcscspn

wcsspn

wcsnlen

_vsnwprintf

_snwprintf

sscanf_s

atoi

_vsnprintf_s

tolower

isalpha

isalnum

_beginthreadex

_heapmin

_endthread

_beginthread

_unlock

__dllonexit

_encode_pointer

_lock

_onexit

_decode_pointer

_except_handler4_common

?terminate@@YAXXZ

_malloc_crt

_encoded_null

_initterm

_initterm_e

_amsg_exit

atof

??3@YAXPAX@Z

__CxxFrameHandler3

_CxxThrowException

_time64

isspace

iswspace

_invalid_parameter_noinfo

??0exception@std@@QAE@ABQBD@Z

?what@exception@std@@UBEPBDXZ

??1exception@std@@UAE@XZ

??0exception@std@@QAE@XZ

??0exception@std@@QAE@ABV01@@Z

??2@YAPAXI@Z

??_V@YAXPAX@Z

isxdigit

wcschr

memset

memmove_s

setlocale

free

_purecall

_wtoi

__iob_func

qsort

malloc

_CIsqrt

_CIsin

_CIcos

floor

_CIpow

_cabs

_CIatan

_CIlog

ceil

_CIexp

strncpy

fclose

fread

fwrite

fseek

ftell

fflush

feof

ferror

fputc

getc

isprint

printf

memcpy

strncmp

calloc

longjmp

_setjmp3

__CxxLongjmpUnwind

_wfopen

_CIfmod

div

_CIacos

_CIatan2

wcsncpy

iswdigit

wintrust

WTHelperGetProvCertFromChain

CryptCATAdminReleaseCatalogContext

WTHelperGetProvSignerFromChain

WTHelperProvDataFromStateData

WinVerifyTrust

CryptCATCatalogInfoFromContext

CryptCATAdminEnumCatalogFromHash

CryptCATAdminCalcHashFromFileHandle

CryptCATAdminReleaseContext

CryptCATAdminAcquireContext

crypt32

CertGetNameStringW

Exports

??0CCmdCodecBase@@QAE@XZ

??0CExpatDataCompat@@QAE@XZ

??0CExpatFileReader@@QAE@XZ

??0CExpatMemReader@@QAE@XZ

??0CFmtString@@QAE@XZ

??0CRootStorage@@QAE@ABV0@@Z

??0CRootStorage@@QAE@PAVCCompoundDocument@@@Z

??0CScopeToggler@@QAE@PA_N_N@Z

??0CShortStreamContainer@@QAE@XZ

??0CStorage@@QAE@ABV0@@Z

??0CStorage@@QAE@PAVCCompoundDocument@@H@Z

??0CStorageIterator@@QAE@ABV0@@Z

??0CStorageIterator@@QAE@XZ

??0CStream@@QAE@ABV0@@Z

??0CStream@@QAE@PAVCCompoundDocument@@H@Z

??0CTXBSTR@@QAE@ABU_GUID@@@Z

??0CTXBSTR@@QAE@ABV0@@Z

??0CTXBSTR@@QAE@ABVCTXStringW@@@Z

??0CTXBSTR@@QAE@H@Z

??0CTXBSTR@@QAE@HPB_W@Z

??0CTXBSTR@@QAE@PB_W@Z

??0CTXBSTR@@QAE@XZ

??0CTXCommPack@@QAE@ABV0@@Z

??0CTXCommPack@@QAE@XZ

??0CTXFileDialog@@IAE@XZ

??0CTXFileDialog@@QAE@ABV0@@Z

??0CTXFileDialog@@QAE@HPB_W00K0PAUHWND__@@HPAVVFileDialgCallback@@@Z

??0CTXStringA@@QAE@ABV0@@Z

??0CTXStringA@@QAE@DH@Z

??0CTXStringA@@QAE@PBD@Z

??0CTXStringA@@QAE@PBDH@Z

??0CTXStringA@@QAE@UtagEN@@PB_WH@Z

??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z

??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z

??0CTXStringA@@QAE@XZ

??0CTXStringW@@QAE@ABU_GUID@@@Z

??0CTXStringW@@QAE@ABUtagVARIANT@@@Z

??0CTXStringW@@QAE@ABV0@@Z

??0CTXStringW@@QAE@ABVCTXBSTR@@@Z

??0CTXStringW@@QAE@H@Z

??0CTXStringW@@QAE@PA_W@Z

??0CTXStringW@@QAE@PB_W@Z

??0CTXStringW@@QAE@PB_WH@Z

??0CTXStringW@@QAE@UtagEN@@PBDH@Z

??0CTXStringW@@QAE@UtagGBK@@PBDH@Z

??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z

??0CTXStringW@@QAE@XZ

??0CTXStringW@@QAE@_WH@Z

??0CTXTLVCodecBase@@QAE@XZ

??0CTXThreadModel@@IAE@XZ

??0CTXTime@@QAE@AAVCTime@ATL@@@Z

??0CTXTime@@QAE@ABU_FILETIME@@H@Z

??0CTXTime@@QAE@ABU_SYSTEMTIME@@H@Z

??0CTXTime@@QAE@GGH@Z

??0CTXTime@@QAE@HHHHHHH@Z

??0CTXTime@@QAE@XZ

??0CTXTime@@QAE@_J@Z

??0CTXVariant@@QAE@ABVCTXBuffer@@@Z

??0CxExifInfo@CxImageJPG@@QAE@PAUtag_ExifInfo@1@@Z

??0CxFile@@QAE@ABV0@@Z

??0CxFile@@QAE@PB_WK@Z

??0CxFile@@QAE@XZ

??0CxImage@@QAE@ABV0@_N11@Z

??0CxImage@@QAE@K@Z

??0CxImage@@QAE@KKKK@Z

??0CxImage@@QAE@PAEKK@Z

??0CxImage@@QAE@PAU_iobuf@@K@Z

??0CxImage@@QAE@PAVCxFile@@K@Z

??0CxImage@@QAE@PB_WK@Z

??0CxImageGIF@@QAE@ABV0@@Z

??0CxImageGIF@@QAE@XZ

??0CxImageJPG@@QAE@ABV0@@Z

??0CxImageJPG@@QAE@XZ

??0CxMemFile@@QAE@ABV0@@Z

??0CxMemFile@@QAE@KPAE@Z

??0CxPoint2@@QAE@ABV0@@Z

??0CxPoint2@@QAE@MM@Z

??0CxPoint2@@QAE@XZ

??0CxRect2@@QAE@ABV0@@Z

??0CxRect2@@QAE@MMMM@Z

??0CxRect2@@QAE@XZ

??0TiXmlAttribute@@QAE@PBD0@Z

??0TiXmlAttribute@@QAE@XZ

??0TiXmlAttributeSet@@QAE@XZ

??0TiXmlComment@@QAE@ABV0@@Z

??0TiXmlComment@@QAE@PBD@Z

??0TiXmlComment@@QAE@XZ

??0TiXmlDeclaration@@QAE@ABV0@@Z

??0TiXmlDeclaration@@QAE@PBD00@Z

??0TiXmlDeclaration@@QAE@XZ

??0TiXmlDocument@@IAE@PBD@Z

??0TiXmlDocument@@QAE@ABV0@@Z

??0TiXmlDocument@@QAE@XZ

??0TiXmlElement@@QAE@ABV0@@Z

??0TiXmlElement@@QAE@PBD@Z

??0TiXmlNode@@IAE@W4NodeType@0@@Z

??0TiXmlText@@QAE@ABV0@@Z

??0TiXmlText@@QAE@PBD@Z

??0TiXmlUnknown@@QAE@ABV0@@Z

??0TiXmlUnknown@@QAE@XZ

??1CCmdCodecBase@@UAE@XZ

??1CExpatDataCompat@@QAE@XZ

??1CExpatFileReader@@UAE@XZ

??1CExpatMemReader@@UAE@XZ

??1CFmtString@@QAE@XZ

??1CRootStorage@@QAE@XZ

??1CScopeToggler@@QAE@XZ

??1CShortStreamContainer@@QAE@XZ

??1CStorage@@QAE@XZ

??1CStorageIterator@@QAE@XZ

??1CStream@@QAE@XZ

??1CTXBSTR@@QAE@XZ

??1CTXCommPack@@UAE@XZ

??1CTXFileDialog@@QAE@XZ

??1CTXStringA@@QAE@XZ

??1CTXStringW@@QAE@XZ

??1CTXTLVCodecBase@@UAE@XZ

??1CTXThreadModel@@MAE@XZ

??1CxExifInfo@CxImageJPG@@QAE@XZ

??1CxFile@@UAE@XZ

??1CxImage@@UAE@XZ

??1CxImageGIF@@UAE@XZ

??1CxImageJPG@@UAE@XZ

??1CxMemFile@@UAE@XZ

??1TiXmlAttribute@@UAE@XZ

??1TiXmlAttributeSet@@QAE@XZ

??1TiXmlComment@@UAE@XZ

??1TiXmlDeclaration@@UAE@XZ

??1TiXmlDocument@@UAE@XZ

??1TiXmlElement@@UAE@XZ

??1TiXmlNode@@UAE@XZ

??1TiXmlText@@UAE@XZ

??1TiXmlUnknown@@UAE@XZ

??4CRootStorage@@QAEAAV0@ABV0@@Z

??4CScopeToggler@@QAEAAV0@ABV0@@Z

??4CShortStreamContainer@@QAEAAV0@ABV0@@Z

??4CStorage@@QAEAAV0@ABV0@@Z

??4CStorageIterator@@QAEAAV0@ABV0@@Z

??4CStream@@QAEAAV0@ABV0@@Z

??4CTXBSTR@@QAEAAV0@ABV0@@Z

??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z

??4CTXBSTR@@QAEAAV0@PB_W@Z

??4CTXFileDialog@@QAEAAV0@ABV0@@Z

??4CTXStringA@@QAEAAV0@ABV0@@Z

??4CTXStringA@@QAEAAV0@D@Z

??4CTXStringA@@QAEAAV0@PBD@Z

??4CTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z

??4CTXStringW@@QAEAAV0@ABV0@@Z

??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z

??4CTXStringW@@QAEAAV0@PA_W@Z

??4CTXStringW@@QAEAAV0@PB_W@Z

??4CTXStringW@@QAEAAV0@_W@Z

??4CTXTime@@QAEAAV0@_J@Z

??4CxExifInfo@CxImageJPG@@QAEAAV01@ABV01@@Z

??4CxFile@@QAEAAV0@ABV0@@Z

??4CxImage@@QAEAAV0@ABV0@@Z

??4CxImageGIF@@QAEAAV0@ABV0@@Z

??4CxImageJPG@@QAEAAV0@ABV0@@Z

??4CxMemFile@@QAEAAV0@ABV0@@Z

??4CxPoint2@@QAEAAV0@ABV0@@Z

??4CxRect2@@QAEAAV0@ABV0@@Z

??4TiXmlComment@@QAEXABV0@@Z

??4TiXmlDeclaration@@QAEXABV0@@Z

??4TiXmlDocument@@QAEXABV0@@Z

??4TiXmlElement@@QAEXABV0@@Z

??4TiXmlText@@QAEXABV0@@Z

??4TiXmlUnknown@@QAEXABV0@@Z

??7CTXStringA@@QBE_NXZ

??7CTXStringW@@QBE_NXZ

??8@YA_NABVCTXStringA@@0@Z

??8@YA_NABVCTXStringA@@D@Z

??8@YA_NABVCTXStringA@@PBD@Z

??8@YA_NABVCTXStringW@@0@Z

??8@YA_NABVCTXStringW@@PB_W@Z

??8@YA_NABVCTXStringW@@_W@Z

??8@YA_NDABVCTXStringA@@@Z

??8@YA_NPA_WABVCTXBSTR@@@Z

??8@YA_NPA_WABVCTXStringW@@@Z

??8@YA_NPBDABVCTXStringA@@@Z

??8@YA_NPB_WABVCTXBSTR@@@Z

??8@YA_NPB_WABVCTXStringW@@@Z

??8@YA_N_WABVCTXStringW@@@Z

??8CTXBSTR@@QBE_NABV0@@Z

??8CTXBSTR@@QBE_NPA_W@Z

??8CTXBSTR@@QBE_NPB_W@Z

??8CTXTime@@QBE_NV0@@Z

??8TiXmlAttribute@@QBE_NABV0@@Z

??9@YA_NABVCTXStringA@@0@Z

??9@YA_NABVCTXStringA@@D@Z

??9@YA_NABVCTXStringA@@PBD@Z

??9@YA_NABVCTXStringW@@0@Z

??9@YA_NABVCTXStringW@@PB_W@Z

??9@YA_NABVCTXStringW@@_W@Z

??9@YA_NDABVCTXStringA@@@Z

??9@YA_NPA_WABVCTXBSTR@@@Z

??9@YA_NPBDABVCTXStringA@@@Z

??9@YA_NPB_WABVCTXBSTR@@@Z

??9@YA_NPB_WABVCTXStringW@@@Z

??9@YA_N_WABVCTXStringW@@@Z

??9CTXBSTR@@QBE_NABV0@@Z

??9CTXBSTR@@QBE_NPA_W@Z

??9CTXBSTR@@QBE_NPB_W@Z

??9CTXTime@@QBE_NV0@@Z

??ACTXStringA@@QBEDH@Z

??ACTXStringW@@QBE_WH@Z

??BCTXBSTR@@QBEPA_WXZ

??BCTXStringA@@QBEPBDXZ

??BCTXStringW@@QBEPB_WXZ

??GCTXTime@@QBE?AV0@VCTimeSpan@ATL@@@Z

??GCTXTime@@QBE?AVCTimeSpan@ATL@@V0@@Z

??H@YA?AVCTXStringA@@ABV0@0@Z

??H@YA?AVCTXStringA@@ABV0@D@Z

??H@YA?AVCTXStringA@@ABV0@PBD@Z

??H@YA?AVCTXStringA@@DABV0@@Z

??H@YA?AVCTXStringA@@PBDABV0@@Z

??H@YA?AVCTXStringW@@ABV0@0@Z

??H@YA?AVCTXStringW@@ABV0@PB_W@Z

??H@YA?AVCTXStringW@@ABV0@_W@Z

??H@YA?AVCTXStringW@@PB_WABV0@@Z

??H@YA?AVCTXStringW@@_WABV0@@Z

??HCTXTime@@QBE?AV0@VCTimeSpan@ATL@@@Z

??ICTXBSTR@@QAEPAPA_WXZ

??M@YA_NABVCTXStringA@@0@Z

??M@YA_NABVCTXStringA@@PBD@Z

??M@YA_NABVCTXStringW@@0@Z

??M@YA_NABVCTXStringW@@PB_W@Z

??M@YA_NPBDABVCTXStringA@@@Z

??M@YA_NPB_WABVCTXStringW@@@Z

??MCTXBSTR@@QBE_NABV0@@Z

??MCTXBSTR@@QBE_NPA_W@Z

??MCTXBSTR@@QBE_NPB_W@Z

??MCTXTime@@QBE_NV0@@Z

??MTiXmlAttribute@@QBE_NABV0@@Z

??N@YA_NABVCTXStringA@@0@Z

??N@YA_NABVCTXStringA@@PBD@Z

??N@YA_NABVCTXStringW@@0@Z

??N@YA_NABVCTXStringW@@PB_W@Z

??N@YA_NPBDABVCTXStringA@@@Z

??N@YA_NPB_WABVCTXStringW@@@Z

??NCTXTime@@QBE_NV0@@Z

??O@YA_NABVCTXStringA@@0@Z

??O@YA_NABVCTXStringA@@PBD@Z

??O@YA_NABVCTXStringW@@0@Z

??O@YA_NABVCTXStringW@@PB_W@Z

??O@YA_NPBDABVCTXStringA@@@Z

??O@YA_NPB_WABVCTXStringW@@@Z

??OCTXBSTR@@QBE_NABV0@@Z

??OCTXBSTR@@QBE_NPA_W@Z

??OCTXBSTR@@QBE_NPB_W@Z

??OCTXTime@@QBE_NV0@@Z

??OTiXmlAttribute@@QBE_NABV0@@Z

??P@YA_NABVCTXStringA@@0@Z

??P@YA_NABVCTXStringA@@PBD@Z

??P@YA_NABVCTXStringW@@0@Z

??P@YA_NABVCTXStringW@@PB_W@Z

??P@YA_NPBDABVCTXStringA@@@Z

??P@YA_NPB_WABVCTXStringW@@@Z

??PCTXTime@@QBE_NV0@@Z

??YCTXBSTR@@QAEAAV0@ABV0@@Z

??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z

??YCTXBSTR@@QAEAAV0@PB_W@Z

??YCTXStringA@@QAEAAV0@ABV0@@Z

??YCTXStringA@@QAEAAV0@D@Z

??YCTXStringA@@QAEAAV0@PBD@Z

??YCTXStringW@@QAEAAV0@ABUtagVARIANT@@@Z

??YCTXStringW@@QAEAAV0@ABV0@@Z

??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z

??YCTXStringW@@QAEAAV0@PB_W@Z

??YCTXStringW@@QAEAAV0@_W@Z

??YCTXTime@@QAEAAV0@VCTimeSpan@ATL@@@Z

??ZCTXTime@@QAEAAV0@VCTimeSpan@ATL@@@Z

??_7CRootStorage@@6B@

??_7CStorage@@6B@

??_7CStream@@6B@

??_7CTXCommPack@@6B@

??_7CxFile@@6B@

??_7CxImage@@6B@

??_7CxImageGIF@@6B@

??_7CxImageJPG@@6B@

??_7CxMemFile@@6B@

??_7TiXmlAttribute@@6B@

??_7TiXmlComment@@6B@

??_7TiXmlDeclaration@@6B@

??_7TiXmlDocument@@6B@

??_7TiXmlElement@@6B@

??_7TiXmlNode@@6B@

??_7TiXmlText@@6B@

??_7TiXmlUnknown@@6B@

??_FCxExifInfo@CxImageJPG@@QAEXXZ

??_FCxImage@@QAEXXZ

??_FCxMemFile@@QAEXXZ

??_OCxImage@@QAEXAAV0@@Z

?Accept@TiXmlComment@@UBE_NPAVTiXmlVisitor@@@Z

?Accept@TiXmlDeclaration@@UBE_NPAVTiXmlVisitor@@@Z

?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z

?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z

?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z

?Accept@TiXmlUnknown@@UBE_NPAVTiXmlVisitor@@@Z

?Add@TiXmlAttributeSet@@QAEXPAVTiXmlAttribute@@@Z

?AddAveragingCont@CxImage@@IAEXABUtagRGBQUAD@@MAAM111@Z

?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z

?AddBuf@CTXCommPack@@QAEHPBEI@Z

?AddBufLenByte@CTXCommPack@@QAEHABVCTXBuffer@@@Z

?AddBufLenDWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z

?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z

?AddBundleFile@TXStringBundle@@YAXPB_W0@Z

?AddByte@CTXCommPack@@QAEHE@Z

?AddConfigData@ModuleConfig@@YAJPB_W0@Z

?AddDWord@CTXCommPack@@QAEHKH@Z

?AddEncryptInfo@TXEncryptMgr@@YAJU_GUID@@PAUITXDataStorage@@PAUITXSvrSealCrypto@@PAUITXEncUIGetPass@@PAUITXCallback@@H@Z

?AddErrorSink@FS@@YAHPAUITXFileSystemErrorSink@@@Z

?AddEvent@CTXThreadModel@@IAEXPAX@Z

?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z

?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z

?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z

?AddPack@CTXCommPack@@QAEHABV1@@Z

?AddPlugin@CoreCenter@Util@@YAHPA_WPAUITXData@@@Z

?AddRef@CCmdCodecBase@@MAGKXZ

?AddRelativeFileSystem@FS@@YAJPB_W00HH@Z

?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z

?AddStrAEndChar@CTXCommPack@@QAEHABVCTXStringA@@E@Z

?AddStrALenByte@CTXCommPack@@QAEHABVCTXStringA@@@Z

?AddStrALenDWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z

?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z

?AddStrW@CTXCommPack@@QAEHABVCTXStringW@@@Z

?AddStrWEndChar@CTXCommPack@@QAEHABVCTXStringW@@E@Z

?AddStrWLenByte@CTXCommPack@@QAEHABVCTXStringW@@@Z

?AddStrWLenDWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z

?AddStrWLenWord@CTXCommPack@@QAEHABVCTXStringW@@H@Z

?AddTLV@CTXCommPack@@QAEHEABVCTXBuffer@@W4TXCommPackDataType@@@Z

?AddTLV@CTXCommPack@@QAEHGABVCTXBuffer@@W4TXCommPackDataType@@@Z

?AddTLV@CTXCommPack@@QAEHKABVCTXBuffer@@W4TXCommPackDataType@@@Z

?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z

?AddUInt64@CTXCommPack@@QAEH_KH@Z

?AddVBuf@CTXCommPack@@IAEHABVCTXBuffer@@W4TXCommPackDataType@@@Z

?AddWord@CTXCommPack@@QAEHGH@Z

?Alloc@CxMemFile@@IAEXK@Z

?AllocSysString@CTXStringW@@QBEPA_WXZ

?AlphaClear@CxImage@@QAEXXZ

?AlphaCopy@CxImage@@QAE_NAAV1@@Z

?AlphaCreate@CxImage@@QAEXXZ

?AlphaDelete@CxImage@@QAEXXZ

?AlphaFlip@CxImage@@QAE_NXZ

?AlphaGet@CxImage@@QAEEJJ@Z

?AlphaGetMax@CxImage@@QBEEXZ

?AlphaGetPointer@CxImage@@QAEPAEJJ@Z

?AlphaInvert@CxImage@@QAEXXZ

?AlphaIsValid@CxImage@@QAE_NXZ

?AlphaMirror@CxImage@@QAE_NXZ

?AlphaPaletteClear@CxImage@@QAEXXZ

?AlphaPaletteEnable@CxImage@@QAEX_N@Z

?AlphaPaletteIsEnabled@CxImage@@QAE_NXZ

?AlphaPaletteIsValid@CxImage@@QAE_NXZ

?AlphaPaletteSplit@CxImage@@QAE_NPAV1@@Z

?AlphaSet@CxImage@@QAEXE@Z

?AlphaSet@CxImage@@QAEXJJE@Z

?AlphaSet@CxImage@@QAE_NAAV1@@Z

?AlphaSetMax@CxImage@@QAEXE@Z

?AlphaSplit@CxImage@@QAE_NPAV1@@Z

?AlphaStrip@CxImage@@QAEXXZ

?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z

?Append@CTXBSTR@@QAEJABV1@@Z

?Append@CTXBSTR@@QAEJD@Z

?Append@CTXBSTR@@QAEJPB_W@Z

?Append@CTXBSTR@@QAEJPB_WH@Z

?Append@CTXBSTR@@QAEJ_W@Z

?Append@CTXStringA@@QAEXABV1@@Z

?Append@CTXStringA@@QAEXPBD@Z

?Append@CTXStringA@@QAEXPBDH@Z

?Append@CTXStringW@@QAEXABV1@@Z

?Append@CTXStringW@@QAEXPB_W@Z

?Append@CTXStringW@@QAEXPB_WH@Z

?AppendBSTR@CTXBSTR@@QAEJPA_W@Z

?AppendBSTR@CTXStringW@@QAEXPA_W@Z

?AppendBytes@CTXBSTR@@QAEJPBDH@Z

?AppendChar@CTXStringA@@QAEXD@Z

?AppendChar@CTXStringW@@QAEX_W@Z

?AppendFormat@CTXStringW@@QAAXPB_WZZ

?ArrayToBSTR@CTXBSTR@@QAEJPBUtagSAFEARRAY@@@Z

?AssignBSTR@CTXBSTR@@QAEJQA_W@Z

?Attach@CTXBSTR@@QAEXPA_W@Z

?Attribute@TiXmlElement@@QBEPBDPBD@Z

?Attribute@TiXmlElement@@QBEPBDPBDPAH@Z

?Attribute@TiXmlElement@@QBEPBDPBDPAN@Z

?BIG5ToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z

?BSTRToArray@CTXBSTR@@QAEJPAPAUtagSAFEARRAY@@@Z

?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z

?Bitfield2RGB@CxImage@@IAEXPAEGGGE@Z

?Blank@TiXmlText@@IBE_NXZ

?BlendPalette@CxImage@@QAEXKJ@Z

?BlendPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@M_N@Z

?BlindAlphaGet@CxImage@@IAEEJJ@Z

?BlindGetPixelColor@CxImage@@IAE?AUtagRGBQUAD@@JJ@Z

?BlindGetPixelIndex@CxImage@@IAEEJJ@Z

?BlindGetPixelPointer@CxImage@@IAEPAXJJ@Z

?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z

?ByteLength@CTXBSTR@@QBEIXZ

?CDATA@TiXmlText@@QBE_NXZ

?CPConvert@Encoding@XmlText@@YAHHPBD@Z

?CRC32@Encode@Util@@YAKKPBEH@Z

?Center@CxRect2@@QBE?AVCxPoint2@@XZ

?ChangeConfig@CCmdCodecBase@@IAEXHH@Z

?ChangeConfig@CTXTLVCodecBase@@IAEX_N@Z

?CheckBufEndChar@CTXCommPack@@QAEHE@Z

?CheckBuffer@CTXCommPack@@IAEHI@Z

?CheckOutOverflow@CTXCommPack@@IAEHI@Z

?CheckRunMode@CTXCommPack@@IAEHW4RunMode@1@@Z

?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ

?CircleTransform@CxImage@@QAE_NHJM@Z

?Clear@CxImage@@QAEXE@Z

?Clear@CxImageGIF@@IAEXEAAUtag_image@1@@Z

?Clear@TiXmlNode@@QAEXXZ

?ClearCommitFlag@CStorage@@UAEXXZ

?ClearCommitFlag@CStream@@UAEXXZ

?ClearError@TiXmlDocument@@QAEXXZ

?ClearThis@TiXmlElement@@IAEXXZ

?Clone@TiXmlComment@@UBEPAVTiXmlNode@@XZ

?Clone@TiXmlDeclaration@@UBEPAVTiXmlNode@@XZ

?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ

?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ

?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ

?Clone@TiXmlUnknown@@UBEPAVTiXmlNode@@XZ

?Close@CStream@@QAEXXZ

?Close@CxMemFile@@UAE_NXZ

?CloseDocument@CRootStorage@@QAEJXZ

?CodeAddBuffer@CTXTLVCodecBase@@IAEXEPAUITXBuffer@@@Z

?CodeArrayBuffer@CCmdCodecBase@@IAEXXZ

?CodeArrayBufferLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z

?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z

?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z

?CodeArrayString@CCmdCodecBase@@IAEXI@Z

?CodeArrayStringEndChar@CCmdCodecBase@@IAEXD@Z

?CodeArrayStringLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z

?CodeArrayTXDataBuffer@CCmdCodecBase@@IAEXPB_W@Z

?CodeArrayTXDataBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z

?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z

?CodeArrayTXDataString@CCmdCodecBase@@IAEXPB_WI@Z

?CodeArrayTXDataStringEndChar@CCmdCodecBase@@IAEXPB_WD@Z

?CodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z

?CodeArrayToEnd@CCmdCodecBase@@IAEXPB_WH@Z

?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z

?CodeBuffer@CTXTLVCodecBase@@IAEXEPB_WK@Z

?CodeBufferEndChar@CCmdCodecBase@@IAEXPB_WD@Z

?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z

?CodeByte@CTXTLVCodecBase@@IAEXEPB_W@Z

?CodeByteEx@CTXTLVCodecBase@@IAEXEPB_WE_N1@Z

?CodeChar@CTXTLVCodecBase@@IAEXEPB_W@Z

?CodeCharEx@CTXTLVCodecBase@@IAEXEPB_WD_N1@Z

?CodeDWord@CTXTLVCodecBase@@IAEXEPB_W@Z

?CodeDWordEx@CTXTLVCodecBase@@IAEXEPB_WK_N1@Z

?CodeEndArray@CCmdCodecBase@@IAEXXZ

?CodeInt@CTXTLVCodecBase@@IAEXEPB_W@Z

?CodeIntEx@CTXTLVCodecBase@@IAEXEPB_WH_N1@Z

?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z

?CodeShort@CTXTLVCodecBase@@IAEXEPB_W@Z

?CodeShortEx@CTXTLVCodecBase@@IAEXEPB_WF_N1@Z

?CodeString@CCmdCodecBase@@IAEXPB_WI@Z

?CodeStringEndChar@CCmdCodecBase@@IAEXPB_WD@Z

?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z

?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z

?CodeWord@CTXTLVCodecBase@@IAEXEPB_W@Z

?CodeWordEx@CTXTLVCodecBase@@IAEXEPB_WG_N1@Z

?CodecTLV@CTXTLVCodecBase@@UAGJKPAUITXData@@PAPAUITXBuffer@@@Z

?Collate@CTXStringW@@QBEHPB_W@Z

?CollateNoCase@CTXStringW@@QBEHPB_W@Z

?Colorize@CxImage@@QAE_NEEM@Z

?Colorize@CxImage@@QAE_NNNN@Z

?Combine@CxImage@@QAE_NPAV1@000J@Z

?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z

?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z

?CommitChange@FS@@YAHPB_W@Z

?CommitEntry@CStream@@AAEJXZ

?Compare@CTXStringA@@QBEHPBD@Z

?Compare@CTXStringW@@QBEHPB_W@Z

?CompareColors@CxImage@@KAHPBX0@Z

?CompareNoCase@CTXStringA@@QBEHPBD@Z

?CompareNoCase@CTXStringW@@QBEHPB_W@Z

?Contour@CxImage@@QAE_NXZ

?ConvertAnyFormat@CxExifInfo@CxImageJPG@@IAENPAXH@Z

?ConvertTXArraySpecialLabel@Convert@Util@@YAHPAUITXArray@@PA_W@Z

?ConvertTXArrayStringBundle@Convert@Util@@YAHPAUITXArray@@@Z

?ConvertTXDataSpecialLabel@Convert@Util@@YAHPAUITXData@@PA_W@Z

?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z

?ConvertTXDataToXML@Convert@Util@@YAHPA_WPAUITXDataRead@@0@Z

?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z

?ConvertXMLSpecialLabel@Convert@Util@@YAHPA_W0PAPA_W@Z

?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z

?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z

?Copy@CStorageIterator@@AAEXPAUTXSTATSTG@@PBU2@@Z

?Copy@CTXBSTR@@QBEPA_WXZ

?Copy@CxImage@@QAEXABV1@_N11@Z

?CopyBufferOut@CTXCommPack@@QBEHAAVCTXBuffer@@@Z

?CopyBufferOut@CTXCommPack@@QBEHPAEAAI@Z

?CopyDecodeBufferOut@CTXCommPack@@QBEHAAVCTXBuffer@@@Z

?CopyDecodeBufferOut@CTXCommPack@@QBEHPAEAAI@Z

?CopyDirectory@FS@@YAHPB_W0PAUITXCopyDirProgress@@@Z

?CopyElementTo@CStorage@@QAEJPB_WPAV1@0@Z

?CopyFileInMem@FS@@YAHPB_W0PAUITXBuffer@@H@Z

?CopyFileW@FS@@YAHPB_W0H@Z

?CopyInfo@CxImage@@IAEXABV1@@Z

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

QQMusic/ExceptCatch.dll

.dll windows:4 windows x86 arch:x86

3bdcb3461e36cb2c19dc8ef16d6f158e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

e:\svn\QQMusicCli2008_proj\trunk\pdb\ExceptCatch.pdb

Imports

mfc80u

ord1271

ord1058

ord4119

ord1894

ord760

ord572

ord3189

ord4255

ord4480

ord3943

ord2638

ord3703

ord3713

ord3712

ord2985

ord2527

ord2640

ord2534

ord2856

ord2708

ord4301

ord2829

ord2725

ord2531

ord5196

ord1590

ord1646

ord1647

ord1955

ord5171

ord1353

ord4961

ord3339

ord6275

ord3796

ord6273

ord1513

ord2163

ord2169

ord2399

ord2381

ord2379

ord2397

ord2409

ord2386

ord2402

ord2407

ord2390

ord2392

ord2394

ord2388

ord3155

ord2384

ord931

ord927

ord929

ord925

ord920

ord5229

ord5231

ord5956

ord1591

ord4276

ord4716

ord3397

ord5210

ord4179

ord6271

ord5067

ord1899

ord5148

ord4238

ord1393

ord3940

ord1608

ord1611

ord5911

ord6721

ord416

ord354

ord3176

ord4256

ord5199

ord1392

ord5908

ord6720

ord1542

ord1661

ord1662

ord4884

ord4729

ord4206

ord5178

ord1785

ord709

ord501

ord2651

ord1555

ord5803

ord4574

ord6086

ord3635

ord1925

ord1118

ord3204

ord6749

ord6751

ord3390

ord1472

ord280

ord384

ord5083

ord2897

ord2460

ord5319

ord5398

ord1430

ord6284

ord2011

ord629

ord777

ord370

ord2260

ord3927

ord2261

ord5558

ord4074

ord618

ord2310

ord4026

ord776

ord5416

ord1908

ord3990

ord386

ord2271

ord2279

ord2745

ord774

ord631

ord1079

ord6111

ord6700

ord282

ord2895

ord1479

ord899

ord5524

ord4101

ord870

ord651

ord620

ord605

ord2121

ord900

ord896

ord265

ord266

ord1093

ord371

ord1168

ord293

ord2311

ord762

ord5708

ord1176

ord283

ord577

ord1178

ord1182

ord2404

ord764

msvcr80

_unlock

wcsncpy_s

wcscat_s

_wsplitpath_s

vswprintf_s

wcsncmp

wcsrchr

memmove_s

_invalid_parameter_noinfo

??0exception@std@@QAE@ABV01@@Z

_CxxThrowException

memcpy_s

srand

rand

__dllonexit

??1exception@std@@UAE@XZ

wprintf

_set_invalid_parameter_handler

_recalloc

calloc

free

_vsnprintf_s

_i64tow_s

memset

memcpy

__CxxFrameHandler3

wcsftime

_localtime64_s

_time64

strchr

_encode_pointer

_lock

_onexit

_decode_pointer

_except_handler4_common

_malloc_crt

_encoded_null

_initterm

_initterm_e

_amsg_exit

_adjust_fdiv

__CppXcptFilter

?terminate@@YAXXZ

_crt_debugger_hook

?_type_info_dtor_internal_method@type_info@@QAEXXZ

??0exception@std@@QAE@XZ

__clean_type_info_names_internal

kernel32

OutputDebugStringW

GetCurrentProcess

lstrlenA

MultiByteToWideChar

GetModuleHandleW

GetProcAddress

WritePrivateProfileStringW

VirtualQueryEx

GetModuleFileNameA

CreateFileA

CloseHandle

GetVersionExW

GetModuleFileNameW

IsBadReadPtr

VirtualProtect

GetLastError

GetCurrentProcessId

LoadLibraryW

GetCurrentThreadId

CreateFileW

SetUnhandledExceptionFilter

WideCharToMultiByte

lstrlenW

SetLastError

SizeofResource

LockResource

LoadResource

TerminateProcess

FindResourceExW

GetUserDefaultLCID

GetSystemDefaultLCID

GetUserDefaultUILanguage

GetUserDefaultLangID

GetSystemDefaultUILanguage

GetSystemDefaultLangID

GetOEMCP

GetACP

InterlockedExchange

InterlockedCompareExchange

UnhandledExceptionFilter

IsDebuggerPresent

QueryPerformanceCounter

GetTickCount

GetSystemTimeAsFileTime

GetProcessHeap

HeapSize

HeapReAlloc

HeapFree

HeapAlloc

HeapDestroy

DeleteCriticalSection

InitializeCriticalSection

LeaveCriticalSection

EnterCriticalSection

OpenProcess

DeleteFileW

SetFileAttributesW

FindResourceW

WriteFile

RaiseException

GetVersionExA

GetThreadLocale

GetLocaleInfoA

Sleep

user32

KillTimer

EnableWindow

SendMessageW

GetSystemMetrics

GetClientRect

GetWindowRect

LoadBitmapW

MessageBeep

UnregisterClassA

SetTimer

advapi32

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

RegOpenKeyW

shell32

SHGetSpecialFolderPathW

SHGetFolderPathW

ole32

CoCreateInstance

oleaut32

SysAllocString

SysAllocStringLen

SysFreeString

SysStringLen

SystemTimeToVariantTime

VariantTimeToSystemTime

msvcp80

?deallocate@?$allocator@D@std@@QAEXPADI@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ

?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z

?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z

?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

?allocate@?$allocator@D@std@@QAEPADI@Z

imagehlp

SymGetSymFromAddr

SymSetOptions

SymInitialize

SymFunctionTableAccess

StackWalk

SymGetModuleInfo

SymLoadModule

psapi

EnumProcessModules

version

GetFileVersionInfoW

GetFileVersionInfoSizeW

VerQueryValueW

wininet

InternetOpenA

InternetCloseHandle

InternetConnectA

HttpOpenRequestA

HttpSendRequestA

Exports

?SetExceptionCatcher@@YAXPB_WH@Z

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

QQMusic/GF.dll

.dll regsvr32 windows:4 windows x86 arch:x86

2d38eb46903181a84f166b62c32a7bda

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

5d:06:88:f9:04:0a:d5:22:87:fc:32:ad:ec:eb:85:b0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

26-01-2010 00:00

Not After

25-01-2013 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Tencent Technology(Shenzhen) Company Limited,L=shenzhen,ST=guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

fd:f2:d6:fb:65:eb:25:40:c0:4b:d2:cc:29:5b:50:b6:54:cb:ee:5b
Signer

Actual PE Digest

fd:f2:d6:fb:65:eb:25:40:c0:4b:d2:cc:29:5b:50:b6:54:cb:ee:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

h:\Hummer\platform_QQMusic\Basic_HummerPlatform_VOB\Platform_fr\Output\bin\GF.pdb

Imports

xgraphic32

CreateTextureRgn

SetTextureSlice

SetTextureMode

GetTextureFilter

GeoRectangle

GeoRoundRect

FillGradualRect

GetTextureSize

DrawTexture

GrayTexture

NormalizeTexture

TranslateTexture

GetCanvasBkColor

CanvasToTexture

SetViewportOrg

GeoRectFocusEx

SetCanvasBkColor

FillSolidRect

SetCanvasWindow

CreateCanvasFromDC

InvertTexture

SetWindowOrg

GdiTransCanvas

CanvasScroll

DrawTextureEx

GetCanvasFilter

GetCanvasHandle

CopyTexture

LightTexture

DrawModulation

DeleteTexture

CreateTexture

LockTextureBits

UnlockTextureBits

GetTextureHandle

ShuffleTexture

SetTextureFilter

FillSolidRectEx

CreateCanvas

SetCanvasFilter

MixCanvasWithColor

BlendCanvas

DeleteCanvas

MixCanvas

GetCanvasWindow

GetWindowOrg

common

?SetCreateObjectFactory@CoreCenter@Util@@YAXP6AJABU_GUID@@0PAPAX@Z@Z

?SetGetServiceFactory@CoreCenter@Util@@YAXP6AJABU_GUID@@PA_WPAPAX@Z@Z

ord27

?AppendFormat@CTXStringW@@QAAXPB_WZZ

??0CTXBSTR@@QAE@H@Z

??OCTXBSTR@@QBE_NABV0@@Z

?Append@CTXBSTR@@QAEJPB_WH@Z

?GetCurrentCallStack@Sys@Util@@YA?AVCTXStringW@@V3@HH@Z

ord25

?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z

??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z

?Delete@CTXStringW@@QAEHHH@Z

??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z

??0CFmtString@@QAE@XZ

?PropertyStr@CFmtString@@QAEHPB_W0@Z

?DoFormat@CFmtString@@QAEPB_WPB_W@Z

??1CFmtString@@QAE@XZ

?CompareNoCase@CTXStringW@@QBEHPB_W@Z

??0CTXStringA@@QAE@PBD@Z

?CompareNoCase@CTXStringA@@QBEHPBD@Z

??1CTXBSTR@@QAE@XZ

??0CTXBSTR@@QAE@ABV0@@Z

??MCTXBSTR@@QBE_NABV0@@Z

??0CTXBSTR@@QAE@PB_W@Z

?Copy@CTXBSTR@@QBEPA_WXZ

??0CTXBSTR@@QAE@XZ

??4CTXBSTR@@QAEAAV0@PB_W@Z

?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z

?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z

?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z

??ICTXBSTR@@QAEPAPA_WXZ

??BCTXBSTR@@QBEPA_WXZ

?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z

?Length@CTXBSTR@@QBEIXZ

??0CTXStringW@@QAE@ABV0@@Z

??8CTXBSTR@@QBE_NPB_W@Z

??1CTXStringW@@QAE@XZ

??H@YA?AVCTXStringW@@ABV0@0@Z

??0CTXStringW@@QAE@PA_W@Z

??0CTXStringW@@QAE@ABVCTXBSTR@@@Z

??0CTXBSTR@@QAE@ABVCTXStringW@@@Z

??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z

??0CTXStringW@@QAE@XZ

?IsEmpty@CTXBSTR@@QAEHXZ

?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z

??0CTXBSTR@@QAE@HPB_W@Z

?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z

?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z

?Format@CTXStringW@@QAAXPB_WZZ

??0CTXStringW@@QAE@PB_W@Z

??M@YA_NABVCTXStringW@@0@Z

??BCTXStringW@@QBEPB_WXZ

?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z

??4CTXStringW@@QAEAAV0@PA_W@Z

?GetLength@CTXStringW@@QBEHXZ

?Detach@CTXBSTR@@QAEPA_WXZ

?IsEmpty@CTXStringW@@QBE_NXZ

?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z

??4CTXStringW@@QAEAAV0@ABV0@@Z

??4CTXStringW@@QAEAAV0@PB_W@Z

??1CxImage@@UAE@XZ

??0CxImage@@QAE@K@Z

?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z

?GetFrameDelay@CxImage@@QBEKXZ

?GetTransColor@CxImage@@QAE?AUtagRGBQUAD@@XZ

?GetTransIndex@CxImage@@QBEJXZ

?Load@CxImage@@QAE_NPAVCxFile@@K@Z

?LoadGif@CxImageHelper@@YAPAVCxImage@@PAVCxFile@@AAH@Z

?FindFormat@CxImageHelper@@YAKPAVCxFile@@PAH@Z

?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ

?GetBpp@CxImage@@QBEGXZ

?GetColorType@CxImage@@QAEEXZ

?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z

?GetAlpha@CxImage@@QBEPAEXZ

?GetHeight@CxImage@@QBEKXZ

?GetWidth@CxImage@@QBEKXZ

?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z

??0CxImage@@QAE@PAEKK@Z

??ACTXStringW@@QBE_WH@Z

??9@YA_NABVCTXStringW@@PB_W@Z

?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z

??9@YA_NABVCTXStringW@@0@Z

??8@YA_NABVCTXStringW@@PB_W@Z

wcslcpy

??0CTXStringW@@QAE@PB_WH@Z

?Mid@CTXStringW@@QBE?AV1@H@Z

?ReverseFind@CTXStringW@@QBEH_W@Z

?ReleaseBuffer@CTXStringW@@QAEXH@Z

?GetBuffer@CTXStringW@@QAEPA_WH@Z

?Compare@CTXStringW@@QBEHPB_W@Z

?GetLCID@TXI18N@@YAKXZ

?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z

??H@YA?AVCTXStringW@@ABV0@PB_W@Z

?IsFileSystemFile@FS@@YAHPB_W@Z

??1CxFile@@UAE@XZ

??_7CxFile@@6B@

?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z

??H@YA?AVCTXStringW@@PB_WABV0@@Z

?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z

?Thumbnail@CxImage@@QAE_NJJUtagRGBQUAD@@PAV1@@Z

?Find@CTXStringW@@QBEHPB_WH@Z

?SetCommitFlag@CxFile@@UAE_N_N@Z

?bFileOpenSuc@CxFile@@UAE_NXZ

?SetTransColor@CxImage@@QAEXUtagRGBQUAD@@@Z

?SetTransIndex@CxImage@@QAEXJ@Z

?SetPalette@CxImage@@QAEXPAUtagRGBQUAD@@K@Z

?Resample@CxImage@@QAE_NJJHPAV1@@Z

?Copy@CxImage@@QAEXABV1@_N11@Z

?GetPaletteColor@CxImage@@QAE?AUtagRGBQUAD@@E@Z

?GetNearestIndex@CxImage@@QAEEUtagRGBQUAD@@@Z

?IsIndexed@CxImage@@QBE_NXZ

?SetPixelColor@CxImage@@QAEXJJUtagRGBQUAD@@_N@Z

?Save@CxImage@@QAE_NPAVCxFile@@K@Z

?SetPaletteColor@CxImage@@QAEXEK@Z

?SetFrame@CxImage@@QAEXJ@Z

?Encode@CxImageGIF@@QAE_NPAVCxFile@@PAPAVCxImage@@H_N@Z

?SetDisposalMethod@CxImageGIF@@QAEXH@Z

?SetLoops@CxImageGIF@@QAEXH@Z

??0CxImageGIF@@QAE@XZ

?DecreaseBpp@CxImage@@QAE_NK_NPAUtagRGBQUAD@@K@Z

?Crop@CxImage@@QAE_NJJJJPAV1@@Z

?GetNumFrames@CxImage@@QBEJXZ

?GetType@CxImage@@QBEKXZ

??1CxImageGIF@@UAE@XZ

?SetFrameDelay@CxImage@@QAEXK@Z

?MixFrom@CxImage@@QAEXAAV1@JJ@Z

?Save@CxImage@@QAE_NPAVCxTXFile@@K@Z

?Create@CxImage@@QAEPAXKKKK@Z

?MakeLower@CTXStringW@@QAEAAV1@XZ

?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z

?IsFileExist@FS@@YAHPB_W@Z

?Left@CTXStringW@@QBE?AV1@H@Z

?ConvertXMLSpecialLabel@Convert@Util@@YAHPA_W0PAPA_W@Z

?Trim@CTXStringW@@QAEAAV1@XZ

?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z

?GetAt@CTXStringW@@QBE_WH@Z

??9CTXBSTR@@QBE_NPB_W@Z

?IsStopped@CoreCenter@Util@@YAHXZ

??0CTXStringW@@QAE@_WH@Z

?Find@CTXStringW@@QBEH_WH@Z

?GetBuffer@CTXStringW@@QAEPA_WXZ

??9CTXBSTR@@QBE_NABV0@@Z

??4CTXBSTR@@QAEAAV0@ABV0@@Z

?Empty@CTXBSTR@@QAEXXZ

??YCTXStringW@@QAEAAV0@PB_W@Z

??YCTXStringW@@QAEAAV0@ABV0@@Z

?Mid@CTXStringW@@QBE?AV1@HH@Z

?Remove@CTXStringW@@QAEH_W@Z

??8@YA_NABVCTXStringW@@0@Z

?NotifyIdle@Window@Util@@YAJXZ

?Right@CTXStringW@@QBE?AV1@H@Z

?ToLower@CTXBSTR@@QAEJXZ

?AllocSysString@CTXStringW@@QBEPA_WXZ

?CopyTo@CTXBSTR@@QBEJPAPA_W@Z

?Replace@CTXStringW@@QAEHPB_W0@Z

?OpenUrlWithDefBrowser@UrlBase@Util@@YAXABVCTXStringW@@@Z

??8CTXBSTR@@QBE_NABV0@@Z

??8CTXBSTR@@QBE_NPA_W@Z

?MakeUpper@CTXStringW@@QAEAAV1@XZ

??1CTXStringA@@QAE@XZ

?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z

imm32

ImmGetContext

ImmAssociateContext

ImmReleaseContext

rpcrt4

RpcStringFreeW

UuidToStringW

version

VerQueryValueW

GetFileVersionInfoW

GetFileVersionInfoSizeW

kernel32

GetProcessHeap

HeapFree

ExpandEnvironmentStringsW

OutputDebugStringW

FlushInstructionCache

GetCurrentProcess

SetLastError

GlobalUnlock

GlobalLock

GlobalAlloc

GlobalSize

GlobalFree

WideCharToMultiByte

MultiByteToWideChar

lstrcpynW

Sleep

MulDiv

GetProcAddress

FreeLibrary

VirtualProtect

HeapAlloc

GetThreadLocale

LocalAlloc

GetSystemTimeAsFileTime

LoadLibraryA

GetCurrentProcessId

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

TerminateProcess

VirtualAlloc

VirtualFree

IsProcessorFeaturePresent

InterlockedCompareExchange

HeapSize

HeapReAlloc

HeapDestroy

GetVersionExA

GetLocaleInfoA

GetACP

GetVersion

GetVersionExW

SetThreadLocale

GetTickCount

RaiseException

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSection

DeleteCriticalSection

SizeofResource

LockResource

LoadResource

FindResourceW

FindResourceExW

GetLastError

lstrlenW

lstrcmpiW

GetModuleHandleW

GetModuleFileNameW

InterlockedIncrement

QueryPerformanceCounter

GetCurrentThreadId

InterlockedDecrement

InterlockedExchange

user32

ShowScrollBar

SetScrollRange

SetScrollPos

SetScrollInfo

GetScrollRange

GetScrollPos

GetScrollInfo

EnableScrollBar

IsIconic

GetCaretBlinkTime

GetSysColor

SetCapture

ReleaseCapture

WindowFromPoint

MonitorFromPoint

GetAsyncKeyState

PeekMessageW

GetCursor

DestroyIcon

SetRect

GetKeyState

GetWindowTextW

IsWindowEnabled

GetWindowTextLengthW

RegisterClipboardFormatW

CallWindowProcW

EndPaint

RedrawWindow

IsZoomed

MonitorFromWindow

GetMonitorInfoW

AnimateWindow

UpdateWindow

GetDesktopWindow

GetClientRect

MapWindowPoints

SetWindowRgn

SetWindowTextW

BeginPaint

ValidateRgn

ValidateRect

GetUpdateRect

SetWindowLongW

SystemParametersInfoW

GetMessageW

TranslateMessage

DispatchMessageW

PostQuitMessage

GetWindow

GetFocus

PostMessageW

GetPropW

RemovePropW

SetPropW

GetSysColorBrush

SetParent

SetCursor

GetCursorPos

EnableWindow

ShowWindow

ClientToScreen

GetWindowRect

UnionRect

IntersectRect

DrawFrameControl

DrawEdge

SetTimer

KillTimer

GetMessagePos

UpdateLayeredWindow

GetDoubleClickTime

GetSubMenu

GetDlgItem

DestroyWindow

CreateWindowExW

EqualRect

GetForegroundWindow

IsChild

PtInRect

SetFocus

LoadImageW

EnumThreadWindows

GetClassNameW

IsWindowVisible

GetClassLongW

GetWindowRgn

FillRect

ScreenToClient

BringWindowToTop

SetForegroundWindow

CreateIconFromResourceEx

CreateIconFromResource

SetLayeredWindowAttributes

SetWindowsHookExW

CallNextHookEx

UnhookWindowsHookEx

GetWindowDC

SetRectEmpty

GetSystemMetrics

InflateRect

IsRectEmpty

SetWindowPos

DefWindowProcW

InvalidateRgn

ReleaseDC

GetDC

LoadCursorFromFileW

DestroyCursor

IsWindow

CopyRect

OffsetRect

FindWindowExW

GetWindowLongW

GetParent

InvalidateRect

SendMessageW

GetActiveWindow

RegisterClassExW

CharNextW

LoadCursorW

GetClassInfoExW

UnregisterClassA

SubtractRect

IsMenu

TrackMouseEvent

GetCapture

gdi32

CreateEnhMetaFileW

TextOutW

CloseEnhMetaFile

Polygon

MoveToEx

LineTo

CreateRectRgn

SelectClipRgn

CreateFontW

BitBlt

SetBkColor

ExtTextOutW

CreateCompatibleBitmap

SetPixel

GetPixel

GetRgnBox

GetTextExtentExPointW

GetClipBox

SetWindowOrgEx

SaveDC

GetViewportOrgEx

GetWindowOrgEx

ExtSelectClipRgn

GetStockObject

StretchBlt

UnrealizeObject

CreateBitmap

PatBlt

SetBrushOrgEx

CreatePatternBrush

RestoreDC

GetObjectW

EnumFontFamiliesExW

DPtoLP

CreateFontIndirectW

GetTextMetricsW

OffsetRgn

CombineRgn

CreateRectRgnIndirect

GetRegionData

ExtCreateRegion

CreateRoundRectRgn

CreatePen

CreateCompatibleDC

SetViewportOrgEx

SetTextColor

SetBkMode

SelectObject

DeleteDC

GetDeviceCaps

DeleteObject

CreateBrushIndirect

PlayEnhMetaFile

advapi32

RegDeleteKeyW

RegCreateKeyExW

RegOpenKeyExW

RegSetValueExW

RegEnumKeyExW

RegQueryValueExW

RegQueryValueW

RegOpenKeyExA

RegCloseKey

shell32

DragQueryFileW

DragFinish

SHGetFileInfoW

ole32

CoFileTimeNow

CoTaskMemFree

StringFromCLSID

CoCreateInstance

CLSIDFromProgID

DoDragDrop

RevokeDragDrop

RegisterDragDrop

oleaut32

VarUI4FromStr

SysStringLen

LoadRegTypeLi

SysAllocStringLen

DispCallFunc

VariantClear

VariantInit

SysAllocString

LoadTypeLi

SysFreeString

atl80

ord58

ord31

ord30

ord11

ord10

ord43

ord44