fa4f7c416c6edea1c5581f4230014426_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

fa4f7c416c6edea1c5581f4230014426_JaffaCakes118
Size

31.6MB
MD5

fa4f7c416c6edea1c5581f4230014426
SHA1

44f1e93949bb4616c496f5cedcf78a6f432226ee
SHA256

534e2e970a796b95e19b9d231f0ce63fc316cf1f1f67dda9797300da7040bb20
SHA512

521ca565ed5ac1cf3155a530666c3d2938f02b2fd52dfc71d17af23b5af531e71820c6fc66d50db2b21d2dce78591f269ef161e598b461cf3c32857712c05ce8
SSDEEP

786432:Jfro1LutXcxhr3okc2B3HwhIwqm6Z3akhAf3rUNHg:JTG65gNYCB3QhIw16Z23rOg

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Required to be able to access the camera device.	android.permission.CAMERA

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/WDJSetupWindow.dll

Files

fa4f7c416c6edea1c5581f4230014426_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:9e:18:f5:a6:2b:45:63:89:e5:fb:d2:dc:27:c4:bd:1d:fe:4c:f4
Signer

Actual PE Digest

72:9e:18:f5:a6:2b:45:63:89:e5:fb:d2:dc:27:c4:bd:1d:fe:4c:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/WDJSetupWindow.dll
.dll regsvr32 windows:5 windows x86 arch:x86

cea3c8580830e439523e63ac83c16ffb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\wdj\wandoujia2.1\tools\setup\WDJSetupWindow\WDJSetupWindow\Release\WDJSetupWindow.pdb

Imports

gdiplus

GdipDrawString
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCloneImage
GdipDeleteBrush
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipDeleteGraphics
GdipDrawImageRectI
GdipResetImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromFile
GdipCreateImageAttributes
GdipCloneBrush
GdipCreateFont
GdipDrawImageRectRectI
GdipMeasureString
GdiplusStartup
GdipFillRectangleI
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateSolidFill
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName

kernel32

QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
FindClose
FindNextFileW
FindFirstFileW
GetPrivateProfileStringW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetProcAddress
GetModuleHandleW
lstrcmpiW
FlushInstructionCache
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThreadId
SetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
SetThreadLocale
GetThreadLocale
GlobalAlloc
GetTickCount
LockResource
FindResourceExW
GetVersionExW
GetFileAttributesW
GetDiskFreeSpaceW
lstrcmpW
GetCurrentProcessId
GlobalUnlock
GlobalLock
lstrlenA
GetPrivateProfileIntW
WideCharToMultiByte
WriteConsoleA
GetUserDefaultUILanguage
CloseHandle
ReadFile
GetFileSize
CreateFileW
SetFilePointer
GetFileType
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
GetCurrentDirectoryW
SetFileTime
WriteFile
GlobalFree
lstrcpynW
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
DebugBreak
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
TlsFree
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualQuery
MulDiv
SetStdHandle
Sleep
ExitProcess
HeapCreate
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
SetHandleCount
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetLocaleInfoW

user32

wsprintfW
UnregisterClassA
EnableWindow
GetWindowTextW
SetWindowTextW
GetDlgItem
SetFocus
EndPaint
BeginPaint
PtInRect
ReleaseCapture
FindWindowExW
SendMessageW
GetCapture
SystemParametersInfoW
IsWindow
GetDlgCtrlID
SetCapture
KillTimer
SetTimer
InvalidateRect
UpdateWindow
ClientToScreen
DestroyWindow
IsWindowVisible
RegisterWindowMessageW
SetParent
CreateAcceleratorTableW
GetWindowTextLengthW
GetFocus
GetWindow
DestroyAcceleratorTable
GetDesktopWindow
FillRect
GetClassNameW
IsChild
RedrawWindow
InvalidateRgn
GetSysColor
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
GetDC
ReleaseDC
AdjustWindowRectEx
GetParent
IsWindowEnabled
ScreenToClient
GetClientRect
GetWindowRect
MoveWindow
GetMenu
SetCursor
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
CreateDialogParamW
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
EnumChildWindows
GetWindowLongW
SetWindowPos
PostMessageW
SetWindowLongW
wvsprintfW
CharNextW
EndDialog

advapi32

RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleUninitialize

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

oleaut32

DispCallFunc
LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
VariantClear
VariantInit
VarBstrCmp
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString

comctl32

ImageList_Destroy
ImageList_GetIconSize
_TrackMouseEvent

gdi32

CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
DeleteDC
DeleteObject
GetDeviceCaps
CreateSolidBrush
GetObjectW
GetStockObject
SetBkColor
SetTextColor
GetCurrentObject
CreateFontW
ExtTextOutW
SelectObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
OnInstallComplete
QueryBundleSoftwareInfo
QuerySetupConfigInfo
SetBundleSoftwareInfo
SetRequirementSpace
SetSetupConfigInfo
ShowFinishPage
ShowInstallPage
ShowWelcomPage

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/nls/en-US/Licence/img/Scrollbar.js
.js
$PLUGINSDIR/nls/en-US/Licence/img/Scrollbar.png
.png
$PLUGINSDIR/nls/en-US/Licence/img/Scroller.js
.js
$PLUGINSDIR/nls/en-US/Licence/img/css1.css
$PLUGINSDIR/nls/en-US/Licence/licence.html
.js
$PLUGINSDIR/nls/en-US/Option.ini
$PLUGINSDIR/nls/en-US/Option_win7.ini
$PLUGINSDIR/nls/en-US/default.zip
.zip
binary.txt
binary/arrow_down.png
.png
binary/arrow_up.png
.png
binary/btn-install.png
.png
binary/btn-start.png
.png
binary/checked.png
.png
binary/edit_left_border.png
.png
binary/edit_middle_border.png
.png
binary/install-choose.png
.png
binary/install-close.png
.png
binary/install-minimize.png
.png
binary/install_background.png
.png
binary/install_foreground.png
.png
binary/processbar-inner-left.png
.png
binary/processbar-inner-mid.png
.png
binary/processbar-inner-right.png
.png
binary/processbar-inner.png
.png
binary/processbar-outer-left.png
.png
binary/processbar-outer-mid.png
.png
binary/processbar-outer-right.png
.png
binary/processbar-outer.png
.png
binary/static_top_border.png
.png
binary/step1-banner.jpg
.jpg
binary/step2-banner.jpg
.jpg
binary/unchecked.png
.png
deploy.txt
string.txt
ui.txt
$PLUGINSDIR/nls/en-US/feature_logo/feature_logo_01.jpg
.jpg
ApkIcon.ico
DriverInstallerX64.exe
.exe windows:5 windows x64 arch:x64

6dda1351a13e10d1369ccf216137b4fe

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ec:77:08:1a:96:90:4d:75:6c:8a:04:ee:db:ab:50:0b:32:fc:66:cf
Signer

Actual PE Digest

ec:77:08:1a:96:90:4d:75:6c:8a:04:ee:db:ab:50:0b:32:fc:66:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\wandoujia2.1\x64\Cef_Release\bin\DriverInstallerX64.pdb

Imports

setupapi

SetupDiGetDeviceInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
CM_Locate_DevNodeW
SetupDiSetClassInstallParamsW
CM_Reenumerate_DevNode_Ex
CM_Get_Sibling
SetupDiCreateDeviceInfoListExW
CM_Get_Child
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
CM_Get_Device_ID_ExW
CM_Locate_DevNode_ExW
CM_Get_Device_IDW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLastError
CreateFileA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeW
LocalFree
GetCommandLineW
GetCurrentProcessId
GetTickCount
CloseHandle
WaitForSingleObject
ReleaseMutex
SetLastError
CreateProcessW
GetModuleFileNameW
CreateMutexW
SetFilePointer
CreateFileW
WriteFile
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
RaiseException
GetCurrentThreadId
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
GetCurrentProcess
TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSection
TerminateProcess
LoadLibraryA
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStartupInfoW
HeapFree
GetConsoleCP
GetConsoleMode
HeapReAlloc
ExitProcess
RtlUnwindEx
HeapAlloc
RtlPcToFileHeader
LCMapStringA
LCMapStringW
GetCPInfo
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapSetInformation
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
UnhandledExceptionFilter

winmm

timeGetTime

user32

MessageBoxW

shell32

CommandLineToArgvW

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DriverInstallerX86.exe
.exe windows:5 windows x86 arch:x86

9f661a69eb92c8cdfc05056c492b0464

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d0:69:8a:b7:41:22:72:63:b9:5c:6f:07:db:d6:88:0e:2a:11:3d:64
Signer

Actual PE Digest

d0:69:8a:b7:41:22:72:63:b9:5c:6f:07:db:d6:88:0e:2a:11:3d:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\DriverInstallerX86.pdb

Imports

setupapi

SetupDiGetDeviceInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
CM_Locate_DevNodeW
SetupDiSetClassInstallParamsW
CM_Reenumerate_DevNode_Ex
CM_Get_Sibling
SetupDiCreateDeviceInfoListExW
CM_Get_Child
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
CM_Get_Device_ID_ExW
CM_Locate_DevNode_ExW
CM_Get_Device_IDW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLastError
CreateFileA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeW
LocalFree
GetCommandLineW
GetCurrentProcessId
GetTickCount
CloseHandle
WaitForSingleObject
ReleaseMutex
SetLastError
CreateProcessW
GetModuleFileNameW
CreateMutexW
SetFilePointer
CreateFileW
WriteFile
OutputDebugStringA
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
RaiseException
GetCurrentThreadId
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
GetCurrentProcess
TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualQuery
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
HeapFree
GetConsoleCP
GetConsoleMode
HeapReAlloc
HeapAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
LoadLibraryA

winmm

timeGetTime

user32

MessageBoxW

shell32

CommandLineToArgvW

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FixFtp.reg
Meepo.dll
.dll windows:5 windows x86 arch:x86

5e75b6cc562526516266c022f310a990

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a6:a5:ee:fb:2c:f8:56:54:40:ec:14:e9:ae:85:a6:00:fe:07:fa:d2
Signer

Actual PE Digest

a6:a5:ee:fb:2c:f8:56:54:40:ec:14:e9:ae:85:a6:00:fe:07:fa:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\Meepo.pdb

Imports

kernel32

CreateFileW
GetFileSize
ReadFile
CloseHandle
lstrlenA
MultiByteToWideChar
GetVersionExW
DosDateTimeToFileTime
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
WriteFile
GetCurrentDirectoryW
GetFileType
GlobalSize
GlobalReAlloc
InterlockedIncrement
InterlockedDecrement
CopyFileW
GetProfileIntW
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetModuleHandleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
GlobalFree
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringA
GetStartupInfoA
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RaiseException
GlobalLock
GlobalUnlock
GlobalAlloc
WideCharToMultiByte
lstrlenW
GetLastError
GetModuleHandleW
GetCurrentThreadId
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetPrivateProfileStringW
GetPrivateProfileSectionW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetLocalTime
GetCurrentProcessId
OutputDebugStringW
InitializeCriticalSectionAndSpinCount

user32

DrawIconEx
CreateIconIndirect
SetCaretPos
HideCaret
RedrawWindow
BeginPaint
SetCapture
ReleaseCapture
CopyRect
IsRectEmpty
UpdateLayeredWindow
PtInRect
ClientToScreen
DestroyWindow
CreateWindowExW
SendMessageW
IsWindowVisible
MonitorFromPoint
GetMonitorInfoW
IsWindow
SetWindowLongW
RegisterClipboardFormatW
IntersectRect
EndPaint
ShowCaret
GetCaretBlinkTime
GetActiveWindow
InflateRect
GetWindowRect
PeekMessageW
GetKeyState
GetCursorPos
SetClassLongW
LoadCursorW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
SetRectEmpty
DefWindowProcW
ShowWindow
GetClientRect
IsZoomed
MonitorFromWindow
SetWindowPos
DestroyIcon
GetWindow
EnableWindow
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
PostQuitMessage
SystemParametersInfoW
LoadImageW
GetSystemMetrics
RegisterClassW
GetClassInfoExW
RegisterClassExW
GetWindowLongW
CallWindowProcW
SetPropW
GetPropW
PostMessageW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetCapture
ScreenToClient
CreateCaret
SetRect
FillRect
KillTimer
IsIconic
EqualRect
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
OffsetRect
SetTimer
RegisterWindowMessageW
GetSysColor
SetCursor
InvalidateRect

gdi32

DeleteDC
DeleteObject
CreateSolidBrush
SetTextColor
CreateDIBSection
BitBlt
OffsetViewportOrgEx
GetObjectW
SelectObject
CreateFontIndirectW
CreateDIBitmap
SelectClipRgn
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
RectInRegion
CopyMetaFileW
GetDeviceCaps
StretchBlt
CreateCompatibleDC

shell32

Shell_NotifyIconW

ole32

CreateStreamOnHGlobal
CoTaskMemAlloc
OleDuplicateData
CoTaskMemFree
DoDragDrop
OleInitialize
ReleaseStgMedium
CoCreateInstance
RegisterDragDrop

shlwapi

ord12

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipDrawString
GdipSetStringFormatTrimming
GdipSetStringFormatFlags
GdipDeleteBrush
GdipCreateSolidFill
GdipDrawImageRectRectI
GdipSetCompositingQuality
GdipSetCompositingMode
GdipSetImageAttributesWrapMode
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageRawFormat
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipDeleteFontFamily
GdipDeleteFont
GdipMeasureString
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipGetLogFontW
GdipGetFontHeight
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateFont
GdipCreateFontFamilyFromName
GdipFree
GdipAlloc
GdiplusStartup

winmm

timeGetTime

riched20

ord4

imm32

ImmReleaseContext

Exports

Exports

GetServiceMgr
MeepoInit
MeepoUninit

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Roboto-Thin.ttf
WDJDriverInstaller.exe
.exe windows:5 windows x86 arch:x86

c793d7d70623a0cb9fef779a28d35441

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

31:03:94:68:df:e0:a6:f3:6d:d1:16:99:0d:16:9c:ec:61:49:38:76
Signer

Actual PE Digest

31:03:94:68:df:e0:a6:f3:6d:d1:16:99:0d:16:9c:ec:61:49:38:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\WDJDriverInstaller.pdb

Imports

shlwapi

PathRemoveFileSpecW

kernel32

LoadLibraryExW
GetModuleFileNameW
GetCurrentDirectoryW
GetProcAddress
SetCurrentDirectoryW
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WDPlatform.exe
.exe windows:5 windows x86 arch:x86

307f7415a57b820077c0b79be90848cb

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3e:f3:09:00:77:b1:64:28:8a:fd:25:19:1b:10:cf:2b:3d:73:fa:24
Signer

Actual PE Digest

3e:f3:09:00:77:b1:64:28:8a:fd:25:19:1b:10:cf:2b:3d:73:fa:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\WDPlatform.pdb

Imports

wininet

InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
HttpSendRequestW
InternetSetOptionW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetReadFileExA
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetSetOptionA
InternetOpenA
InternetCloseHandle
InternetSetStatusCallbackA

ws2_32

WSACleanup
WSAStartup

kernel32

GetModuleHandleW
GetModuleFileNameW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
ExpandEnvironmentStringsW
WaitForSingleObject
GetLastError
CreateMutexA
FindClose
SetEnvironmentVariableA
FindNextFileW
CompareStringA
GetProcAddress
CreateFileA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
FindFirstFileW
GetLocalTime
GetFileAttributesExW
WriteFile
ReadFile
CloseHandle
GetFileSize
CreateFileW
MoveFileExW
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
GetVersionExW
VirtualQuery
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
SetStdHandle
WriteConsoleW
GetTempPathW
DeleteFileW
GetCommandLineW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
CompareStringW
SetHandleCount
HeapSize
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW
RemoveDirectoryW
SetLastError
GetCurrentProcess
GetCurrentProcessId
ReleaseMutex
CreateProcessW
CreateMutexW
SetFilePointer
OutputDebugStringA
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetEndOfFile
FlushFileBuffers
IsDebuggerPresent
RaiseException
CreateThread
GetCurrentThreadId
Sleep
TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
InterlockedIncrement
ReleaseSemaphore
InterlockedDecrement
TerminateThread
SetUnhandledExceptionFilter
FreeLibrary
LoadLibraryW
CreateSemaphoreW
InitializeCriticalSection
WaitNamedPipeW
WaitForMultipleObjects
SetEvent
ResetEvent
TransactNamedPipe
SetNamedPipeHandleState
GetSystemTime
InterlockedExchange
HeapFree
TerminateProcess
UnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
GetConsoleCP
GetConsoleMode
HeapReAlloc
HeapAlloc
GetProcessHeap
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA

user32

DefWindowProcW
GetWindowLongW
wsprintfW
MessageBoxW
KillTimer
SetTimer
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
SetWindowLongW
CreateWindowExW
PostQuitMessage
DestroyWindow
RegisterClassExW

advapi32

CryptAcquireContextW
CryptImportKey
CryptReleaseContext
CryptDuplicateKey
CryptSetKeyParam
CryptDestroyKey
CryptEncrypt
CryptGetKeyParam
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW

shell32

SHFileOperationW
ord165
SHGetSpecialFolderPathW

iphlpapi

GetAdaptersInfo

shlwapi

PathRemoveFileSpecW
ord12
PathAddBackslashW
PathAppendW

winmm

timeGetTime

Sections

.text
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
aapt.exe
.exe windows:4 windows x86 arch:x86

6cae795410282b03a8c84b120ba75b69

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7d:d2:54:7d:b9:b3:28:5c:66:3e:98:71:2a:7f:dc:4e:e2:98:10:8b
Signer

Actual PE Digest

7d:d2:54:7d:b9:b3:28:5c:66:3e:98:71:2a:7f:dc:4e:e2:98:10:8b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
CreateFileMappingA
CreateMutexA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
ReleaseMutex
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
WaitForSingleObject
WideCharToMultiByte

msvcrt

_access
_close
_dup
_fdopen
_fstat
_getpid
_lseek
_open
_read
_stat
_strdup
_unlink
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_chsize
_errno
_filbuf
_findclose
_findfirst
_findnext
_fullpath
_get_osfhandle
_iob
_isctype
_lseeki64
_mkdir
_onexit
_pctype
_setjmp
_setmode
_stricmp
_strnicmp
abort
atexit
atoi
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
gmtime
localeconv
localtime
longjmp
malloc
memchr
memcpy
memmove
memset
mktime
pow
printf
putchar
puts
qsort
rand
realloc
remove
rewind
signal
sprintf
srand
strcat
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
strtok
strtol
time
tolower
toupper
wcslen

Sections

.text
Size: 682KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adb_dev.dll
.dll windows:5 windows x86 arch:x86

21bb2ce98e01455e247cf9c01acf9e23

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:44:4b:0c:0e:9b:bc:66:53:e9:34:f9:41:24:52:08:c4:f5:fc:c3
Signer

Actual PE Digest

e3:44:4b:0c:0e:9b:bc:66:53:e9:34:f9:41:24:52:08:c4:f5:fc:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\adb_dev\Release\adb_dev.pdb

Imports

ws2_32

WSASendTo
WSACleanup
WSAStartup
WSARecvFrom
WSAIoctl
inet_ntoa
getsockname
freeaddrinfo
WSASocketA
getaddrinfo
setsockopt
ntohs
getpeername
listen
htonl
WSARecv
WSASend
connect
WSAGetLastError
htons
inet_addr
bind
WSASocketW
closesocket
shutdown

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

psapi

GetModuleFileNameExW

kernel32

WideCharToMultiByte
ReadFile
WriteFile
GetOverlappedResult
Sleep
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryW
GetFileAttributesW
CreateEventW
CreateFileA
GetFileSize
CancelIo
GetTickCount
CreatePipe
SetHandleInformation
GetStdHandle
CreateProcessW
OpenProcess
lstrcmpiA
GetModuleHandleA
LoadLibraryA
GetProcAddress
CloseHandle
HeapFree
MultiByteToWideChar
GetCurrentThreadId
GetVersion
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
FreeLibrary
GetVersionExA
FlushConsoleInputBuffer
WriteConsoleA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
GetCurrentDirectoryA
PeekNamedPipe
GetFullPathNameA
HeapSize
HeapDestroy
HeapCreate
DeviceIoControl
CreateFileW
GetLastError
SetLastError
GetConsoleOutputCP
WriteConsoleW
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
CompareStringA
VirtualAlloc
VirtualFree
GetModuleFileNameA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
SetStdHandle
GetFullPathNameW
GetConsoleCP
GetConsoleMode
SetConsoleMode
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
ReadConsoleInputA
SetConsoleCtrlHandler
ExitProcess
WaitForSingleObject
ReleaseMutex
DeleteFileW
GetModuleFileNameW
CreateMutexW
SetFilePointer
OutputDebugStringA
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExW
FindClose
CreateDirectoryW
FindFirstFileW
GetTempPathW
GetCurrentDirectoryW
GetCurrentProcess
HeapReAlloc
InterlockedExchangeAdd
InterlockedCompareExchange
LocalFree
GetCommandLineW
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
RaiseException
CreateThread
GetModuleHandleW
GetNativeSystemInfo
GetVersionExW
GetSystemTimeAsFileTime
QueryPerformanceFrequency
SetEndOfFile
FlushFileBuffers
GetFileInformationByHandle
TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
InterlockedExchange
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetWindowsDirectoryW
SetEvent
TerminateProcess
GetEnvironmentVariableA
LocalAlloc
UnhandledExceptionFilter
HeapAlloc
GetDriveTypeA
FindFirstFileA
GetDriveTypeW
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
ReleaseDC
MsgWaitForMultipleObjectsEx
GetDC
PostMessageW
DestroyWindow
SetWindowLongW
CreateWindowExW
UnregisterClassW
RegisterClassExW
DefWindowProcW
GetWindowLongW
GetQueueStatus
PeekMessageW
PostQuitMessage
DispatchMessageW
TranslateMessage
CallMsgFilterW
GetDesktopWindow
WaitMessage
SetTimer
KillTimer
MessageBoxW

gdi32

CreateDIBSection

advapi32

RegisterEventSourceA
ReportEventA
DeregisterEventSource

shell32

SHGetFolderPathW
CommandLineToArgvW
SHGetFolderPathA

shlwapi

PathAppendW

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

Exports

Exports

?ADBDevCreate32BPPBitmap@@YAPAUHBITMAP__@@PBUADBFrameBufferInfo@@PBE@Z
?ADBDevGet@@YAPAVADBDev@@XZ
?ADBDevGetDeviceCount@@YAHXZ
?ADBDevGetDeviceInfo@@YAPBUADBDevDeviceInfo@@H@Z
?ADBDevGetPidByPort@@YAKG@Z
?ADBDevInit@@YA_NPAVADBDevListener@@PBX@Z
?ADBDevUninit@@YAXXZ
?CreateAsyncTcpSocket@@YAPAVAsyncTcpSocket@@IPAVAsyncTcpClient@@@Z
?CreateAsyncTcpSocket@@YAPAVAsyncTcpSocket@@PBD0PAVAsyncTcpClient@@@Z
?CreateAsyncTcpSocketServer@@YAPAVAsyncTcpSocketServer@@PBD0PAVAsyncTcpSocketServerListener@@@Z
?CreateAsyncUdpSocket@@YAPAVAsyncUdpSocket@@GPAVAsyncUdpClient@@@Z
?CreateHTTPServer@@YAPAVHTTPServer@@PBD0PAVHTTPServerListener@@@Z
?DestroyAsyncTcpSocket@@YAXPAVAsyncTcpSocket@@@Z
?DestroyAsyncTcpSocketServer@@YAXPAVAsyncTcpSocketServer@@@Z
?DestroyAsyncUdpSocket@@YAXPAVAsyncUdpSocket@@@Z
?DestroyHTTPServer@@YAXPAVHTTPServer@@@Z
?kADBDevStateString@@3QBQBDB

Sections

.text
Size: 834KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
app_list.db
core.dll
.dll windows:6 windows x86 arch:x86

1a5319b10bf9654e70a5cefdd45bdd7d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:cf:a8:50:f7:32:41:5e:0d:4f:48:89:03:61:72:53:4c:94:8e:03
Signer

Actual PE Digest

66:cf:a8:50:f7:32:41:5e:0d:4f:48:89:03:61:72:53:4c:94:8e:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\blink\core\build\Release\core.dll.pdb

Imports

shlwapi

PathRemoveFileSpecW
PathFileExistsA
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsUNCA
PathIsUNCW
PathRemoveExtensionW
UrlCreateFromPathA
PathGetCharTypeW
SHGetValueA
UrlCreateFromPathW

user32

MessageBoxW
CharUpperW
OpenWindowStationA
CloseWindowStation
SetProcessWindowStation
GetProcessWindowStation
PostThreadMessageW
CharNextW
IsHungAppWindow
RegisterWindowMessageW
SendNotifyMessageW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetWindowRgn
GetDesktopWindow
EnumChildWindows
GetWindowThreadProcessId
TrackMouseEvent
GetMessageTime
CallWindowProcW
GetClassInfoExW
IsChild
IsWindowVisible
IsZoomed
SetFocus
GetFocus
GetCapture
SetCapture
ReleaseCapture
GetForegroundWindow
BeginPaint
EndPaint
GetUpdateRect
GetUpdateRgn
InvalidateRect
ScrollWindowEx
ShowCursor
SetCursorPos
SetCursor
GetCursorPos
wsprintfW
GetClipCursor
ScreenToClient
MapWindowPoints
WindowFromPoint
FillRect
EnumThreadWindows
GetWindow
EnumDisplaySettingsW
NotifyWinEvent
RealChildWindowFromPoint
GetWindowTextW
GetAsyncKeyState
SetWindowTextW
SetScrollInfo
GetDC
ReleaseDC
ScrollDC
GetDoubleClickTime
AttachThreadInput
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetCursorInfo
PrintWindow
IsIconic
GetWindowDC
EnumWindows
GetClassNameW
GetIconInfo
SetThreadDesktop
GetThreadDesktop
GetUserObjectInformationW
GetMessageExtraInfo
MonitorFromRect
WaitForInputIdle
TranslateMessage
CloseDesktop
DispatchMessageW
PeekMessageW
PostMessageW
WaitMessage
PostQuitMessage
UnregisterClassW
CallMsgFilterW
GetQueueStatus
MsgWaitForMultipleObjectsEx
SetTimer
KillTimer
GetKeyState
GetSystemMetrics
GetWindowRect
SystemParametersInfoW
OpenInputDesktop
ClipCursor
MonitorFromPoint
EnumDisplayMonitors
GetSysColor
RegisterClassW
LoadIconW
EnumDisplayDevicesW
MessageBoxA
GetRawInputData
RegisterRawInputDevices
DefRawInputProc
DrawEdge
DrawFrameControl
RedrawWindow
SetWindowLongW
GetSysColorBrush
DrawFocusRect
FrameRect
InvertRect
InflateRect
CreateDesktopW
CreateWindowStationW
GetWindowInfo
EnableWindow
GetGuiResources
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardState
CreateCaret
DestroyCaret
SetCaretPos
OpenClipboard
CloseClipboard
GetClipboardSequenceNumber
SetClipboardData
GetClipboardData
DefWindowProcA
SendInput
RemovePropW
GetCursor
SetWindowLongA
RealGetWindowClassW
GetShellWindow
CreateIconIndirect
GetWindowLongW
GetWindowTextLengthW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
CreateDialogParamW
ClientToScreen
InsertMenuItemW
TrackPopupMenu
AppendMenuW
DestroyMenu
CreatePopupMenu
CreateMenu
GetAncestor
GetMonitorInfoW
MonitorFromWindow
LoadCursorW
GetParent
GetClientRect
GetPropW
SetPropW
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
SendMessageW
SetParent
IsWindow
RegisterClipboardFormatW
EmptyClipboard
IsClipboardFormatAvailable
SetRect
GetCaretBlinkTime
DestroyIcon

kernel32

LocalFree
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryA
SetErrorMode
LoadLibraryExA
SetPriorityClass
AttachConsole
AllocConsole
GetProcessTimes
GetOverlappedResult
lstrcmpiA
FindCloseChangeNotification
FindFirstChangeNotificationW
GetUserDefaultUILanguage
GetSystemPowerStatus
VerSetConditionMask
VerifyVersionInfoW
GlobalDeleteAtom
GlobalAddAtomW
SetFileAttributesW
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetTempFileNameA
GetPrivateProfileStringW
GlobalSize
GlobalAlloc
GetLocalTime
UnlockFileEx
LockFileEx
GetFileSize
GetFileAttributesA
GetDiskFreeSpaceW
ReadProcessMemory
ProcessIdToSessionId
SearchPathW
CreateJobObjectW
VirtualFreeEx
SignalObjectAndWait
GetProcessHandleCount
AssignProcessToJobObject
GetThreadContext
TerminateJobObject
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
VirtualAllocEx
GlobalUnlock
GlobalLock
GetTempPathA
GetComputerNameA
GetVolumeInformationA
GlobalMemoryStatus
GetLogicalDrives
GetDiskFreeSpaceA
GetComputerNameExW
GlobalFree
FormatMessageW
GetFileSizeEx
RegisterWaitForSingleObject
UnregisterWaitEx
GetSystemDirectoryA
OpenThread
CreateWaitableTimerW
OutputDebugStringW
GetFullPathNameA
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetDriveTypeW
ReadConsoleW
GetStringTypeW
WriteConsoleW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetCPInfo
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
CreateSemaphoreW
GetStartupInfoW
UnhandledExceptionFilter
RtlUnwind
PeekNamedPipe
FileTimeToLocalFileTime
ExitThread
SetConsoleCtrlHandler
GetFileType
SetStdHandle
AreFileApisANSI
GetProcessHeap
GetFullPathNameW
GetConsoleMode
GetConsoleCP
GetCommandLineA
IsProcessorFeaturePresent
EncodePointer
GetNamedPipeInfo
CancelIo
GetLastError
SetLastError
HeapCreate
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapSetInformation
TlsGetValue
FindClose
InterlockedExchange
InterlockedCompareExchange
SwitchToThread
TlsAlloc
TlsSetValue
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
GetEnvironmentVariableA
CloseHandle
GetCurrentProcessId
GetVersionExW
CreateToolhelp32Snapshot
Module32First
Module32Next
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CreateFileA
SetEndOfFile
WriteFile
Sleep
CreateFileW
DeleteFileW
SetFilePointer
OutputDebugStringA
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateProcessW
GetTickCount
FormatMessageA
TryEnterCriticalSection
DeleteCriticalSection
InterlockedExchangeAdd
GetCommandLineW
SetUnhandledExceptionFilter
SetEvent
ResetEvent
CreateEventW
WaitForMultipleObjects
IsDebuggerPresent
DuplicateHandle
RaiseException
GetCurrentProcess
CreateThread
GetCurrentThread
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
GetNativeSystemInfo
FindFirstFileW
FindFirstFileExW
FindNextFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
GetLongPathNameW
GetTempFileNameW
GetVolumeInformationW
GetVolumePathNameW
QueryDosDeviceW
ReadFile
RemoveDirectoryW
GetTempPathW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CopyFileW
MoveFileW
MoveFileExW
ReplaceFileW
lstrlenW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetInformationJobObject
TlsFree
GetModuleHandleExW
ExpandEnvironmentStringsW
FlushFileBuffers
GetFileInformationByHandle
LockFile
SetFilePointerEx
SetFileTime
UnlockFile
GetProcessId
OpenProcess
QueueUserWorkItem
GetEnvironmentVariableW
InterlockedIncrement
GetModuleHandleExA
RtlCaptureStackBackTrace
DecodePointer
InterlockedDecrement
FreeLibrary
LoadResource
SizeofResource
lstrcmpiW
FindResourceW
MultiByteToWideChar
FlushInstructionCache
GlobalGetAtomNameW
ExitProcess
SetThreadExecutionState
DefineDosDeviceW
DeviceIoControl
GetStdHandle
ResumeThread
IsProcessInJob
QueryInformationJobObject
GetThreadTimes
LoadLibraryW
GetUserDefaultLangID
GetUserDefaultLCID
DebugBreak
WideCharToMultiByte
TerminateProcess
GetExitCodeProcess
GetSystemTime
CreateFileMappingA
SuspendThread
GetProcessAffinityMask
SetThreadAffinityMask
CreateSemaphoreA
DeleteFileA
SetHandleInformation
ReleaseSemaphore
MoveFileA
GetLocaleInfoW
GetLocaleInfoA
GetNumberFormatW
GetCurrencyFormatW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
GetACP
GetThreadLocale
InitializeCriticalSection
ConnectNamedPipe
CreateNamedPipeW

advapi32

RegNotifyChangeKeyValue
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptGetHashParam
CryptSetHashParam
CryptAcquireContextW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
OpenProcessToken
GetTokenInformation
SystemFunction036
TraceEvent
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegDeleteKeyW
CopySid
GetLengthSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclW
RegOpenKeyExA
RegQueryValueExA
CryptReleaseContext
CryptGenKey
CryptDestroyKey
RevertToSelf
RegDisablePredefinedCache
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
LookupPrivilegeValueW
EqualSid
DuplicateTokenEx
DuplicateToken
CreateRestrictedToken
CreateWellKnownSid
GetSecurityInfo
SetTokenInformation
SetThreadToken
CreateProcessAsUserW
ConvertStringSidToSidW
RegCreateKeyExW

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

rpcrt4

RpcStringFreeW
UuidCreateSequential
UuidToStringW

usp10

ScriptShape
ScriptFreeCache
ScriptItemize

psapi

EnumProcessModules
GetProcessMemoryInfo
QueryWorkingSet

winmm

midiOutReset
midiInGetNumDevs
midiInGetDevCapsW
midiInOpen
midiInClose
midiInPrepareHeader
midiInUnprepareHeader
midiOutLongMsg
midiInStart
midiInStop
midiInReset
waveOutGetNumDevs
midiOutShortMsg
waveInMessage
waveOutGetDevCapsW
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInReset
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutPause
waveOutRestart
waveOutReset
timeSetEvent
timeKillEvent
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutClose
midiOutOpen
midiOutGetDevCapsW
midiOutGetNumDevs
timeEndPeriod
timeBeginPeriod
timeGetTime
waveInGetNumDevs
midiInAddBuffer

gdi32

SetRectRgn
SetGraphicsMode
GetICMProfileW
StretchDIBits
ModifyWorldTransform
CombineRgn
GetDIBits
GetTextFaceW
GetObjectType
GetFontData
CreateFontW
Rectangle
GetObjectW
GetTextMetricsW
EnumFontFamiliesExW
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
ExtTextOutW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
CreateFontIndirectW
SetICMMode
GetStockObject
GetRegionData
DeleteObject
CreateRectRgn
DeleteDC
BitBlt
SetDIBits
SetDIBitsToDevice
PatBlt
SetTextAlign
RemoveFontMemResourceEx
AddFontMemResourceEx
GetTextExtentPointI
GetGlyphIndicesW
GetFontUnicodeRanges
GetOutlineTextMetricsW
GetGlyphOutlineW
GetCharABCWidthsW
SetBrushOrgEx
PolyBezier
SetArcDirection
PathToRegion
EndPath
BeginPath
SetROP2
SetPolyFillMode
SetDCPenColor
SetDCBrushColor
SelectClipRgn
CreateRectRgnIndirect
AbortPath
SetStretchBltMode
SetBkMode
GdiFlush
GdiAlphaBlend
SetAbortProc
EndDoc
StartDocW
CreateDCW
CancelDC
SetWorldTransform
GetWorldTransform
SetTextColor
StretchBlt
SetBkColor
CreateSolidBrush
CreateCompatibleBitmap
CreateBitmap
SwapBuffers
SetPixelFormat
ChoosePixelFormat

ole32

OleDuplicateData
OleUninitialize
OleInitialize
CoCreateGuid
StringFromGUID2
CLSIDFromString
ReleaseStgMedium
CoUninitialize
DoDragDrop
RevokeDragDrop
CoTaskMemRealloc
CoTaskMemAlloc
PropVariantClear
CoTaskMemFree
CoCreateInstance
RegisterDragDrop
CoInitializeEx

oleaut32

SysFreeString
VarUI4FromStr
SysStringLen
LoadTypeLi
LoadRegTypeLi
VariantClear
SysAllocString
VariantInit

comctl32

InitCommonControlsEx

secur32

FreeCredentialsHandle
QuerySecurityPackageInfoW
FreeContextBuffer
InitializeSecurityContextW
AcquireCredentialsHandleA
AcquireCredentialsHandleW
DeleteSecurityContext
CompleteAuthToken
InitializeSecurityContextA

oleacc

LresultFromObject
CreateStdAccessibleObject

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Exports

Exports

??0CoreService@@QAE@ABV0@@Z
??0CoreService@@QAE@XZ
??0CoreServiceImpl@core@@QAE@XZ
??0NotificationService@@QAE@ABV0@@Z
??0NotificationService@@QAE@XZ
??0WebPage@@QAE@ABV0@@Z
??0WebPage@@QAE@XZ
??1CoreServiceImpl@core@@UAE@XZ
??1NotificationService@@UAE@XZ
??1WebPage@@UAE@XZ
??4CoreService@@QAEAAV0@ABV0@@Z
??4NotificationService@@QAEAAV0@ABV0@@Z
??4WebPage@@QAEAAV0@ABV0@@Z
??_7CoreService@@6B@
??_7CoreServiceImpl@core@@6B@
??_7NotificationService@@6B@
??_7WebPage@@6B@
?AllowCreateNewProcessHost@CoreServiceImpl@core@@QAE_NXZ
?BrowserContext@CoreServiceImpl@core@@UBEPAV0content@@XZ
?CorePostTask@CoreServiceImpl@core@@UAEXPAVCoreTask@@@Z
?CreateWebPage@CoreServiceImpl@core@@UAEXPAPAVWebPage@@@Z
?Delegate@CoreServiceImpl@core@@UBEPAVCoreServiceDelegate@@XZ
?DestroyCore@CoreServiceImpl@core@@UAEXXZ
?DestroyWebPage@CoreServiceImpl@core@@UAEXPAVWebPage@@@Z
?GetDeviceId@CoreServiceImpl@core@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH@Z
?GetInstance@CoreServiceImpl@core@@SAPAVCoreService@@XZ
?LaunchCore@CoreServiceImpl@core@@UAEXPAUHINSTANCE__@@PBUSandboxInterfaceInfo@sandbox@@_N@Z
?RegisteDeviceId@CoreServiceImpl@core@@QAEXHHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetAllowCreateNewProcessHost@CoreServiceImpl@core@@QAEX_N@Z
?SetBrowserContext@CoreServiceImpl@core@@UAEXPAVBrowserContext@content@@@Z
?SetDelegate@CoreServiceImpl@core@@UAEXPAVCoreServiceDelegate@@@Z
?UnRegisteDeviceId@CoreServiceImpl@core@@QAEXHH@Z
GetCoreService

Sections

.text
Size: 29.6MB - Virtual size: 29.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.unwante
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dcompiler_46.dll
.dll windows:6 windows x86 arch:x86

876b48ac5a1cad7160b32c8df9ab9938

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

00:bf:f3:77:a1:cf:86:bb:d7:f7:e4:00:aa:6f:4e:f1:bd:58:13:65
Signer

Actual PE Digest

00:bf:f3:77:a1:cf:86:bb:d7:f7:e4:00:aa:6f:4e:f1:bd:58:13:65

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_46.pdb

Imports

msvcrt

_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_vsnprintf
_strtoui64
sscanf
_isnan
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
ceil
modf
strrchr
isalnum
_finite
_clearfp
_controlfp
malloc
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
strchr
free
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
??2@YAPAXI@Z
getenv
??3@YAXPAX@Z
_except_handler4_common
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcpy_s
strcat_s
bsearch
_CxxThrowException
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
strncpy_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPAXI@Z
??_V@YAXPAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wmakepath_s
time
_wfullpath
_wcsdup
_wgetenv
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
sprintf_s
_mbscmp
_memicmp
wcsncmp
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
floor

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

SetLastError
LeaveCriticalSection
EnterCriticalSection
LocalFree
LocalAlloc
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
LCMapStringW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlCaptureContext
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
GetSystemInfo
VirtualAlloc
VirtualFree
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetCurrentProcessId
GetModuleFileNameA
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
Sleep
TlsAlloc
InterlockedExchange
TlsSetValue
TlsGetValue
TlsFree
GetFullPathNameW
GetFullPathNameA
GetEnvironmentVariableA
LoadLibraryExW
GetProcAddress

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ffmpegsumo.dll
.dll windows:6 windows x86 arch:x86

4c917661641c27b24fcc26d8ead3daf6

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a9:4b:d3:1f:f3:c6:90:94:ce:ec:54:a7:eb:6c:ef:b9:6f:a5:71:8e
Signer

Actual PE Digest

a9:4b:d3:1f:f3:c6:90:94:ce:ec:54:a7:eb:6c:ef:b9:6f:a5:71:8e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\blink\Chromium\src\out\Release\ffmpegsumo.dll.pdb

Imports

kernel32

LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
GetModuleHandleW
GetProcAddress
EnterCriticalSection
InterlockedExchangeAdd
GetCurrentProcess
GetProcessAffinityMask
MultiByteToWideChar
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
Sleep
GetSystemTimeAsFileTime
InitializeCriticalSection
CloseHandle
CreateSemaphoreW
InterlockedCompareExchange
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
WideCharToMultiByte
EncodePointer
DecodePointer
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
CreateFileW
GetCommandLineA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
ExitProcess
HeapFree
OutputDebugStringW
WriteFile
SetStdHandle
GetConsoleCP
GetConsoleMode
HeapAlloc
GetProcessHeap
ReadFile
ReadConsoleW
SetFilePointerEx
HeapReAlloc
HeapSize
HeapQueryInformation
GetTimeZoneInformation
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
RtlUnwind
FlushFileBuffers
SetEnvironmentVariableA

advapi32

CryptReleaseContext
CryptAcquireContextW
CryptGenRandom

Exports

Exports

av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_buffer_create
av_buffer_get_opaque
av_destruct_packet
av_dict_get
av_dict_set
av_dup_packet
av_frame_alloc
av_frame_free
av_frame_unref
av_free
av_free_packet
av_get_bytes_per_sample
av_image_check_size
av_image_fill_linesizes
av_index_search_timestamp
av_init_packet
av_lockmgr_register
av_log_set_level
av_malloc
av_new_packet
av_packet_get_side_data
av_packet_split_side_data
av_rdft_calc
av_rdft_end
av_rdft_init
av_read_frame
av_register_all
av_register_bitstream_filter
av_rescale_q
av_samples_get_buffer_size
av_seek_frame
avcodec_align_dimensions
avcodec_alloc_context3
avcodec_close
avcodec_decode_audio4
avcodec_decode_video2
avcodec_fill_audio_frame
avcodec_find_decoder
avcodec_flush_buffers
avcodec_free_frame
avcodec_get_frame_defaults
avcodec_open2
avformat_alloc_context
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_open_input
avio_alloc_context
avio_close
avpriv_ac3_channel_layout_tab
avpriv_mpa_bitrate_tab
avpriv_mpa_freq_tab
avpriv_mpeg4audio_sample_rates
ff_raw_pix_fmt_tags

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
icudt.dll
.dll windows:5 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:d7:88:21:1f:dd:a5:9a:0b:dc:8f:76:bf:1b:0b:5f:df:db:53:f5
Signer

Actual PE Digest

58:d7:88:21:1f:dd:a5:9a:0b:dc:8f:76:bf:1b:0b:5f:df:db:53:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

icudt46_dat

Sections

.rdata
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
libEGL.dll
.dll windows:6 windows x86 arch:x86

94e8cf47ff9eb581e50ee26db2ff5dad

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4a:73:75:a7:e8:b1:36:54:58:ea:a2:bc:4d:36:26:3b:b6:bd:2c:a1
Signer

Actual PE Digest

4a:73:75:a7:e8:b1:36:54:58:ea:a2:bc:4d:36:26:3b:b6:bd:2c:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\blink\Chromium\src\out\Release\libEGL.dll.pdb

Imports

libglesv2

ord158
ord148
ord147
ord146
ord178
ord177
ord145
ord144

d3d9

D3DPERF_GetStatus
D3DPERF_SetMarker
D3DPERF_EndEvent
D3DPERF_BeginEvent

kernel32

GetProcAddress
CreateFileW
FlushFileBuffers
OutputDebugStringW
GetStringTypeW
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalAlloc
LocalFree
GetLastError
SetLastError
GetCurrentProcessId
GetCurrentThreadId
LCMapStringW
GetCPInfo
GetOEMCP
GetACP
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
GetStartupInfoW
CloseHandle
HeapAlloc
RaiseException
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage

user32

GetWindowThreadProcessId
SetWindowLongW
GetClientRect
RemovePropW
GetPropW
SetPropW
IsIconic
CallWindowProcW
IsWindow

Exports

Exports

eglBindAPI
eglBindTexImage
eglChooseConfig
eglCopyBuffers
eglCreateContext
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreateWindowSurface
eglDestroyContext
eglDestroySurface
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetProcAddress
eglInitialize
eglMakeCurrent
eglQueryAPI
eglQueryContext
eglQueryString
eglQuerySurface
eglReleaseTexImage
eglReleaseThread
eglSurfaceAttrib
eglSwapBuffers
eglSwapInterval
eglTerminate
eglWaitClient
eglWaitGL
eglWaitNative

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libGLESv2.dll
.dll windows:6 windows x86 arch:x86

51ef0dd19588960556171af363784fea

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:49:ce:fc:46:e8:85:f8:a5:00:6d:88:87:b1:8e:73:53:6e:c3:38
Signer

Actual PE Digest

7e:49:ce:fc:46:e8:85:f8:a5:00:6d:88:87:b1:8e:73:53:6e:c3:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\workspace\blink\Chromium\src\out\Release\libGLESv2.dll.pdb

Imports

d3d9

Direct3DCreate9
D3DPERF_GetStatus
D3DPERF_SetMarker
D3DPERF_EndEvent
D3DPERF_BeginEvent

kernel32

SetEndOfFile
CreateFileW
ReadConsoleW
ReadFile
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalAlloc
LocalFree
Sleep
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryW
GetVersion
GetModuleHandleW
GetCurrentProcessId
GetTempPathA
GetTempFileNameA
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetStringTypeW
OutputDebugStringW
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetLastError
HeapFree
RtlUnwind
HeapAlloc
WideCharToMultiByte
GetCommandLineA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
ExitProcess
AreFileApisANSI
MultiByteToWideChar
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
GetStartupInfoW
RaiseException
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
CloseHandle
GetConsoleCP
GetConsoleMode
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
SetFilePointerEx
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW

user32

GetWindowThreadProcessId
InvalidateRect
DestroyWindow
CreateWindowExW

Exports

Exports

SetTraceFunctionPointers
glActiveTexture
glAttachShader
glBeginQueryEXT
glBindAttribLocation
glBindBuffer
glBindFramebuffer
glBindRenderbuffer
glBindTexture
glBlendColor
glBlendEquation
glBlendEquationSeparate
glBlendFunc
glBlendFuncSeparate
glBlitFramebufferANGLE
glBufferData
glBufferSubData
glCheckFramebufferStatus
glClear
glClearColor
glClearDepthf
glClearStencil
glColorMask
glCompileShader
glCompressedTexImage2D
glCompressedTexSubImage2D
glCopyTexImage2D
glCopyTexSubImage2D
glCreateProgram
glCreateShader
glCullFace
glDeleteBuffers
glDeleteFencesNV
glDeleteFramebuffers
glDeleteProgram
glDeleteQueriesEXT
glDeleteRenderbuffers
glDeleteShader
glDeleteTextures
glDepthFunc
glDepthMask
glDepthRangef
glDetachShader
glDisable
glDisableVertexAttribArray
glDrawArrays
glDrawArraysInstancedANGLE
glDrawBuffersEXT
glDrawElements
glDrawElementsInstancedANGLE
glEnable
glEnableVertexAttribArray
glEndQueryEXT
glFinish
glFinishFenceNV
glFlush
glFramebufferRenderbuffer
glFramebufferTexture2D
glFrontFace
glGenBuffers
glGenFencesNV
glGenFramebuffers
glGenQueriesEXT
glGenRenderbuffers
glGenTextures
glGenerateMipmap
glGetActiveAttrib
glGetActiveUniform
glGetAttachedShaders
glGetAttribLocation
glGetBooleanv
glGetBufferParameteriv
glGetError
glGetFenceivNV
glGetFloatv
glGetFramebufferAttachmentParameteriv
glGetGraphicsResetStatusEXT
glGetIntegerv
glGetProgramBinaryOES
glGetProgramInfoLog
glGetProgramiv
glGetQueryObjectuivEXT
glGetQueryivEXT
glGetRenderbufferParameteriv
glGetShaderInfoLog
glGetShaderPrecisionFormat
glGetShaderSource
glGetShaderiv
glGetString
glGetTexParameterfv
glGetTexParameteriv
glGetTranslatedShaderSourceANGLE
glGetUniformLocation
glGetUniformfv
glGetUniformiv
glGetVertexAttribPointerv
glGetVertexAttribfv
glGetVertexAttribiv
glGetnUniformfvEXT
glGetnUniformivEXT
glHint
glIsBuffer
glIsEnabled
glIsFenceNV
glIsFramebuffer
glIsProgram
glIsQueryEXT
glIsRenderbuffer
glIsShader
glIsTexture
glLineWidth
glLinkProgram
glPixelStorei
glPolygonOffset
glProgramBinaryOES
glReadPixels
glReadnPixelsEXT
glReleaseShaderCompiler
glRenderbufferStorage
glRenderbufferStorageMultisampleANGLE
glSampleCoverage
glScissor
glSetFenceNV
glShaderBinary
glShaderSource
glStencilFunc
glStencilFuncSeparate
glStencilMask
glStencilMaskSeparate
glStencilOp
glStencilOpSeparate
glTestFenceNV
glTexImage2D
glTexImage3DOES
glTexParameterf
glTexParameterfv
glTexParameteri
glTexParameteriv
glTexStorage2DEXT
glTexSubImage2D
glUniform1f
glUniform1fv
glUniform1i
glUniform1iv
glUniform2f
glUniform2fv
glUniform2i
glUniform2iv
glUniform3f
glUniform3fv
glUniform3i
glUniform3iv
glUniform4f
glUniform4fv
glUniform4i
glUniform4iv
glUniformMatrix2fv
glUniformMatrix3fv
glUniformMatrix4fv
glUseProgram
glValidateProgram
glVertexAttrib1f
glVertexAttrib1fv
glVertexAttrib2f
glVertexAttrib2fv
glVertexAttrib3f
glVertexAttrib3fv
glVertexAttrib4f
glVertexAttrib4fv
glVertexAttribDivisorANGLE
glVertexAttribPointer
glViewport

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libcurl.dll
.dll windows:4 windows x86 arch:x86

bec4e6f3e375d0a9877b6cb8144774f7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

08:7e:51:37:ef:bd:3b:d1:3c:89:04:7d:e5:40:96:ce:1d:0a:c4:e8
Signer

Actual PE Digest

08:7e:51:37:ef:bd:3b:d1:3c:89:04:7d:e5:40:96:ce:1d:0a:c4:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libeay32

ord1
ord2431
ord1015
ord979
ord544
ord542
ord1180
ord18
ord1958
ord1216
ord579
ord578
ord566
ord1951
ord2442
ord181
ord2023
ord188
ord2075
ord657
ord656
ord653
ord95
ord78
ord421
ord52
ord66
ord7
ord151
ord120
ord391
ord2454
ord680
ord254
ord2492
ord2504
ord2490
ord2516
ord2493
ord2478
ord2475
ord2502
ord224
ord298
ord2604
ord2708
ord3212
ord466
ord467
ord2254
ord248
ord2481
ord2900
ord1309
ord1301
ord1304
ord556
ord625
ord958
ord654
ord280
ord2947
ord2498
ord1291
ord2596
ord1653
ord1654
ord281
ord641
ord223
ord222
ord227
ord2291
ord341
ord342
ord340
ord2437
ord2436
ord2435
ord809
ord808
ord784
ord464

ssleay32

ord77
ord61
ord60
ord157
ord108
ord78
ord96
ord76
ord74
ord183
ord110
ord8
ord12
ord235
ord17
ord222
ord24
ord172
ord116
ord113
ord15
ord141
ord243
ord28
ord30
ord49
ord126
ord22
ord21
ord48
ord75
ord86
ord90
ord87
ord5
ord6
ord3
ord45
ord43
ord58
ord127
ord130
ord242
ord31

kernel32

AddAtomA
CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
FindAtomA
FormatMessageA
FreeLibrary
GetAtomNameA
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
PeekNamedPipe
ReadFile
SetLastError
Sleep
SleepEx
TlsGetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject

msvcrt

_close
_open
_read
_strdup
_stricmp
_strnicmp
__dllonexit
__mb_cur_max
_assert
_beginthreadex
_errno
_fstati64
_iob
_isctype
_lseeki64
_pctype
_stati64
_sys_nerr
_winmajor
abort
calloc
fclose
fflush
fgets
fopen
fputc
fread
free
fseek
fwrite
getenv
gmtime
malloc
memchr
memcpy
memmove
qsort
realloc
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strncmp
strncpy
strrchr
strstr
strtol
strtoul
time
tolower
vfprintf

wldap32

ber_free
ldap_err2stringA
ldap_first_attributeA
ldap_first_entry
ldap_get_dnA
ldap_get_values_lenA
ldap_initA
ldap_memfreeA
ldap_msgfree
ldap_next_attributeA
ldap_next_entry
ldap_search_sA
ldap_set_optionA
ldap_simple_bind_sA
ldap_unbind_s
ldap_value_free_len

ws2_32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyname
gethostname
getpeername
getsockname
getsockopt
htons
ioctlsocket
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 632B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libeay32.dll
.dll windows:4 windows x86 arch:x86

4df87f510b02928c902201c28885ce6b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e2:d9:b9:ea:46:bd:c8:51:43:7f:bf:c6:d2:15:ee:92:dd:f5:f1:69
Signer

Actual PE Digest

e2:d9:b9:ea:46:bd:c8:51:43:7f:bf:c6:d2:15:ee:92:dd:f5:f1:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

recvfrom
sendto
bind
listen
accept
ntohl
inet_ntoa
WSACancelBlockingCall
WSACleanup
WSAStartup
gethostbyname
getsockopt
getservbyname
ntohs
htons
htonl
socket
setsockopt
connect
send
WSASetLastError
recv
WSAGetLastError
shutdown
closesocket

gdi32

CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA

advapi32

ReportEventA
DeregisterEventSource
RegisterEventSourceA

user32

MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW

kernel32

FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
CreateFileA
InitializeCriticalSection
GetEnvironmentStringsW
LCMapStringA
GetCurrentDirectoryA
GetFullPathNameA
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
LCMapStringW
GetSystemTimeAsFileTime
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
GetLastError
GetVersion
GetFileType
GetStdHandle
GetCurrentThread
GetThreadTimes
FindNextFileA
FindFirstFileA
FindClose
FreeLibrary
LoadLibraryA
SetLastError
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
CloseHandle
GetVersionExA
FlushConsoleInputBuffer
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapReAlloc
HeapAlloc
MultiByteToWideChar
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
SetFileAttributesA
GetFileAttributesA
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetCommandLineA
GetProcessHeap
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
DeleteCriticalSection
SetHandleCount
GetStartupInfoA
Sleep
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
GetTimeZoneInformation
SetFilePointer

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_cfbr_encrypt_block
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_asn1_meth
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_HEADER_free
ASN1_HEADER_new
ASN1_IA5STRING_asn1_meth
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_encode
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_sign
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_memdup
BUF_strdup
BUF_strlcat
BUF_strlcpy
BUF_strndup
CAST_cbc_encrypt
CAST_cfb64_encrypt
CAST_decrypt
CAST_ecb_encrypt
CAST_encrypt
CAST_ofb64_encrypt
CAST_set_key
CBIGNUM_it
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
COMP_CTX_free
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_rle
COMP_zlib
COMP_zlib_cleanup
CONF_dump_bio
CONF_dump_fp
CONF_free
CONF_get1_default_config_file
CONF_get_number

Sections

.text
Size: 720KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
locales/en-US.pak
locales/zh-CN.pak
manage_phone.ico
meepo_resource/base_ui.mp
.zip
common/button.png
.png
common/scrollbar_v_bkg.png
.png
common/scrollbar_v_thumb.png
.png
common/sys_btn_close.png
.png
common/sys_btn_min.png
.png
font.xml
language_select/bkg.png
.png
language_select/list_bkg.png
.png
language_select/main_ui.xml
language_select/title_bkg.png
.png
style.xml
.html
meepo_resource/conn_wizard_ui.mp
.zip
Common/Menu/menu_arrow.png
.png
Common/Menu/menu_bkg.png
.png
Common/Menu/menu_item_check.png
.png
Common/button1.png
.png
Common/button_green.png
.png
Common/checkbox.png
.png
Common/connection_bg.png
.png
Common/edit_bkg.png
.png
Common/gray_button.png
.png
Common/list_head_column.png
.png
Common/list_head_sequence.png
.png
Common/list_row.png
.png
Common/progress_bar_bkg.png
.png
Common/progress_bar_in.png
.png
Common/progress_bar_mask.png
.png
Common/scrollbar_h_bkg.png
.png
Common/scrollbar_h_thumb.png
.png
Common/scrollbar_v_bkg.png
.png
Common/scrollbar_v_thumb.png
.png
Common/shadow_h.png
.png
Common/sys_btn_close.png
.png
Common/sys_btn_max.png
.png
Common/sys_btn_min.png
.png
Common/tree_expand.png
.png
Common/tree_image_list.png
.png
Common/view.ico
Common/window_bkg.png
.png
conn_wizard_ui.xml
font.xml
loading.png
.png
style.xml
.html
usb-error.png
.png
usb.png
.png
meepo_resource/floating.mp
.zip
Common/Menu/menu_arrow.png
.png
Common/Menu/menu_bkg.png
.png
Common/Menu/menu_item_bkg.png
.png
Common/Menu/menu_item_check.png
.png
Common/btn_close.png
.png
Common/btn_min.png
.png
Common/bubble/bkg_bottom.png
.png
Common/bubble/bkg_top.png
.png
Common/button_gray.png
.png
Common/button_green.png
.png
Common/error.png
.png
Common/icons.png
.png
Common/ok.png
.png
Common/scrollbar_v_bkg.png
.png
Common/scrollbar_v_thumb.png
.png
Common/shadow-bottom.png
.png
Common/shadow-top.png
.png
bubbles/edit_bkg.png
.png
bubbles/edit_bkg_card.png
.png
bubbles/sms-send-now.png
.png
bubbles/sms_bubble.xml
bubbles/task_status.xml
bubbles/text_bubble.xml
card_win/bkg.png
.png
card_win/blank_bkg.png
.png
card_win/card_download.xml
card_win/card_sms.xml
card_win/card_update.xml
card_win/card_upload.xml
card_win/card_win.xml
card_win/close_btn.png
.png
card_win/digit.png
.png
card_win/dl-game.png
.png
card_win/dl-home.png
.png
card_win/dl-music.png
.png
card_win/dl-software.png
.png
card_win/dl-video.png
.png
card_win/ellipsis.png
.png
card_win/icon.png
.png
card_win/sender_icon.png
.png
card_win/shadow-bottom.png
.png
card_win/shadow-top.png
.png
card_win/sms-send-now.png
.png
card_win/unread.png
.png
card_win/update_text.png
.png
floating_bar/badges.png
.png
floating_bar/bar.xml
floating_bar/battery_empty.png
.png
floating_bar/battery_full.png
.png
floating_bar/battery_green.png
.png
floating_bar/battery_red.png
.png
floating_bar/battery_static.png
.png
floating_bar/battery_yellow.png
.png
floating_bar/bkg.png
.png
floating_bar/charge.png
.png
floating_bar/menu.xml
floating_bar/upload.xml
floating_bar/upload_arrow.png
.png
floating_bar/upload_bkg.png
.png
floating_bar/usb_icon.png
.png
font.xml
style.xml
.html
test/test_win.xml
meepo_resource/sdcard.mp
.zip
Common/Menu/menu_arrow.png
.png
Common/Menu/menu_bkg.png
.png
Common/Menu/menu_item_bkg.png
.png
Common/Menu/menu_item_check.png
.png
Common/button.png
.png
Common/checkbox.png
.png
Common/dialog_close.png
.png
Common/dkg_bkg.png
.png
Common/drag.png
.png
Common/dropdown.png
.png
Common/edit_bkg.png
.png
Common/gray_button.png
.png
Common/list_head_column.png
.png
Common/list_head_sequence.png
.png
Common/report_item.png
.png
Common/scrollbar_v_bkg.png
.png
Common/scrollbar_v_thumb.png
.png
Common/statebar_process_bkg.png
.png
Common/statebar_process_green.png
.png
Common/statebar_process_red.png
.png
Common/sys_btn_close.png
.png
Common/sys_btn_max.png
.png
Common/sys_btn_min.png
.png
Common/tree_expand.png
.png
Common/tree_image_list.png
.png
font.xml
guide/arrow.png
.png
guide/banner_1.png
.png
guide/banner_2.png
.png
guide/banner_3.png
.png
guide/bkg.png
.png
guide/close.png
.png
guide/guide.xml
main_ui/addnew.png
.png
main_ui/back.png
.png
main_ui/bkg.png
.png
main_ui/copy.png
.png
main_ui/corner.png
.png
main_ui/delete.png
.png
main_ui/disconnect.png
.png
main_ui/export.png
.png
main_ui/fold-error.png
.png
main_ui/folder.png
.png
main_ui/forward.png
.png
main_ui/guide.png
.png
main_ui/icon.png
.png
main_ui/icon_view.png
.png
main_ui/input_dialog.xml
main_ui/list_menu_1.xml
main_ui/list_menu_2.xml
main_ui/list_view.png
.png
main_ui/loading.png
.png
main_ui/main_ui.xml
main_ui/msg_box.xml
main_ui/newfolder.png
.png
main_ui/paste.png
.png
main_ui/progress_dialog.xml
main_ui/refresh.png
.png
main_ui/search_bkg.png
.png
main_ui/title_bkg.png
.png
main_ui/tree_menu.xml
main_ui/upload_menu.xml
main_ui/upward.png
.png
style.xml
.html
nls/base.zip
.zip
binary.txt
binary/0.png
.png
binary/1.png
.png
binary/2.png
.png
binary/3.png
.png
binary/3g.png
.png
binary/4.png
.png
binary/4_2_2_offline.png
.png
binary/5.png
.png
binary/6.png
.png
binary/7.png
.png
binary/8.png
.png
binary/9.png
.png
binary/GS_SMS_normal.png
.png
binary/GS_SMS_press.png
.png
binary/GS_app_normal.png
.png
binary/GS_app_press.png
.png
binary/GS_contacts_normal.png
.png
binary/GS_contacts_press.png
.png
binary/GS_video_normal.png
.png
binary/GS_video_press.png
.png
binary/about_logo.png
.png
binary/adb_server_conflict.png
.png
binary/app_top_center.png
.png
binary/app_top_left.png
.png
binary/app_top_right.png
.png
binary/avatar.png
.png
binary/back-active.png
.png
binary/back-disabled.png
.png
binary/back-hover.png
.png
binary/back.png
.png
binary/beta.png
.png
binary/bubble_b.png
.png
binary/bubble_bl.png
.png
binary/bubble_br.png
.png
binary/bubble_l.png
.png
binary/bubble_pointer_b.png
.png
binary/bubble_pointer_l.png
.png
binary/bubble_pointer_r.png
.png
binary/bubble_pointer_t.png
.png
binary/bubble_r.png
.png
binary/bubble_t.png
.png
binary/bubble_tl.png
.png
binary/bubble_tr.png
.png
binary/button_background.png
.png
binary/button_background_h.png
.png
binary/call_hover.png
.png
binary/call_normal.png
.png
binary/call_press.png
.png
binary/checkbox_disabled.png
.png
binary/checkbox_hover.png
.png
binary/checkbox_normal.png
.png
binary/checkbox_selected.png
.png
binary/close.png
.png
binary/close_h.png
.png
binary/close_p.png
.png
binary/close_sa.png
.png
binary/close_sa_h.png
.png
binary/close_sa_p.png
.png
binary/content_bottom_center.png
.png
binary/content_bottom_left_corner.png
.png
binary/content_bottom_right_corner.png
.png
binary/content_left_side.png
.png
binary/content_right_side.png
.png
binary/content_top_center.png
.png
binary/content_top_left_corner.png
.png
binary/content_top_left_corner_mask.png
.png
binary/content_top_right_corner.png
.png
binary/content_top_right_corner_mask.png
.png
binary/data_saved.png
.png
binary/default_device_large.png
.png
binary/default_search_app.png
.png
binary/default_search_contact.png
.png
binary/delete_hover.png
.png
binary/delete_normal.png
.png
binary/delete_press.png
.png
binary/dialog_group.png
.png
binary/dialog_point_hide.png
.png
binary/dialog_point_show.png
.png
binary/dialog_spliter.png
.png
binary/disconnected.png
.png
binary/dl_read_me.txt
binary/download_hover.png
.png
binary/download_normal.png
.png
binary/download_press.png
.png
binary/edge.png
.png
binary/empty_app.png
.png
binary/empty_contacts.png
.png
binary/empty_video.png
.png
binary/feedback_hover.png
.png
binary/feedback_normal.png
.png
binary/forward-active.png
.png
binary/forward-disabled.png
.png
binary/forward-hover.png
.png
binary/forward.png
.png
binary/frame_default.png
.png
binary/frame_default_inactive.png
.png
binary/frame_shadow_b.png
.png
binary/frame_shadow_bl.png
.png
binary/frame_shadow_br.png
.png
binary/frame_shadow_l.png
.png
binary/frame_shadow_r.png
.png
binary/frame_shadow_t.png
.png
binary/frame_shadow_tl.png
.png
binary/frame_shadow_tr.png
.png
binary/fullscreen_close.png
.png
binary/fullscreen_pause.png
.png
binary/fullscreen_play.png
.png
binary/gprs.png
.png
binary/hint_background.png
.png
binary/icon_connect.png
.png
binary/icon_search_clear.png
.png
binary/icons_setting_dark.png
.png
binary/icons_setting_dark_p.png
.png
binary/input_good.png
.png
binary/install_driver_guide.png
.png
binary/installapk.png
.png
binary/left_tip_arrow.png
.png
binary/load_driver_guide_win7.png
.png
binary/load_driver_guide_xp.png
.png
binary/loading.png
.png
binary/loading_background.png
.png
binary/loading_small.png
.png
binary/maximize.png
.png
binary/maximize_h.png
.png
binary/maximize_p.png
.png
binary/menu_background.png
.png
binary/menu_check.png
.png
binary/menu_droparrow_disable.png
.png
binary/menu_droparrow_disabled_dark.png
.png
binary/menu_droparrow_hover.png
.png
binary/menu_droparrow_hover_dark.png
.png
binary/menu_droparrow_normal.png
.png
binary/menu_droparrow_normal_dark.png
.png
binary/menu_item_check.png
.png
binary/menu_item_check_hov.png
.png
binary/menu_item_hov.png
.png
binary/menu_item_separator.png
.png
binary/minimize.png
.png
binary/minimize_h.png
.png
binary/minimize_p.png
.png
binary/navigate_left.png
.png
binary/navigate_right.png
.png
binary/new_search.png
.png
binary/new_search_background.png
.png
binary/new_search_background_h.png
.png
binary/no_device_connected.png
.png
binary/no_device_found.png
.png
binary/open_debug_guide.png
.png
binary/open_debug_guide_4.1.png
.png
binary/open_debug_guide_4.2.png
.png
binary/open_debug_guide_miui_v5.png
.png
binary/or.png
.png
binary/phoniex_install_guid_0.png
.png
binary/phoniex_install_guid_1.png
.png
binary/phoniex_install_guid_2.png
.png
binary/please_stop_usb_storage.png
.png
binary/qr_connect_helper.png
.png
binary/radiobutton_normal.png
.png
binary/radiobutton_selected.png
.png
binary/reddot.png
.png
binary/reddot_2.png
.png
binary/reddot_99.png
.png
binary/refresh-active.png
.png
binary/refresh-disabled.png
.png
binary/refresh-hover.png
.png
binary/refresh.png
.png
binary/replay_hover.png
.png
binary/replay_normal.png
.png
binary/replay_press.png
.png
binary/restore.png
.png
binary/restore_h.png
.png
binary/restore_p.png
.png
binary/right_tip_arrow.png
.png
binary/search.png
.png
binary/search_background.png
.png
binary/search_background_h.png
.png
binary/search_btn_default.png
.png
binary/search_btn_hover.png
.png
binary/search_btn_press.png
.png
binary/search_h.png
.png
binary/search_p.png
.png
binary/separator.png
.png
binary/setting_hover.png
.png
binary/setting_minimize_sp.png
.png
binary/setting_normal.png
.png
binary/skin_button_gray.png
.png
binary/skin_button_gray_hover.png
.png
binary/skin_button_gray_pushed.png
.png
binary/skin_button_gray_small.png
.png
binary/skin_button_gray_small_hover.png
.png
binary/skin_button_green.png
.png
binary/skin_button_green_hover.png
.png
binary/skin_button_green_pushed.png
.png
binary/sms_hover.png
.png
binary/sms_normal.png
.png
binary/sms_press.png
.png
binary/statusbar_battery_c.png
.png
binary/statusbar_battery_empty.png
.png
binary/statusbar_battery_empty_c.png
.png
binary/statusbar_battery_full.png
.png
binary/statusbar_battery_full_c.png
.png
binary/statusbar_battery_used.png
.png
binary/statusbar_battery_used_c.png
.png
binary/statusbar_signal_1.png
.png
binary/statusbar_signal_2.png
.png
binary/statusbar_signal_3.png
.png
binary/statusbar_signal_4.png
.png
binary/statusbar_signal_5.png
.png
binary/statusbar_wifi_connected.png
.png
binary/statusbar_wifi_disconnected.png
.png
binary/sync_device.png
.png
binary/textbutton_b_h.png
.png
binary/textbutton_b_p.png
.png
binary/textbutton_bl_h.png
.png
binary/textbutton_bl_p.png
.png
binary/textbutton_br_h.png
.png
binary/textbutton_br_p.png
.png
binary/textbutton_c_h.png
.png
binary/textbutton_c_p.png
.png
binary/textbutton_l_h.png
.png
binary/textbutton_l_p.png
.png
binary/textbutton_r_h.png
.png
binary/textbutton_r_p.png
.png
binary/textbutton_t_h.png
.png
binary/textbutton_t_p.png
.png
binary/textbutton_tl_h.png
.png
binary/textbutton_tl_p.png
.png
binary/textbutton_tr_h.png
.png
binary/textbutton_tr_p.png
.png
binary/theme_frame_default.png
.png
binary/theme_frame_default_inactive.png
.png
binary/theme_setting_hover.png
.png
binary/theme_setting_normal.png
.png
binary/themes_thumbnail.png
.png
binary/throbber.png
.png
binary/tip_frame.png
.png
binary/usb_connected.png
.png
binary/use_frame.png
.png
binary/use_usb.png
.png
binary/use_usb_h.png
.png
binary/use_usb_p.png
.png
binary/use_wifi.png
.png
binary/use_wifi_h.png
.png
binary/use_wifi_p.png
.png
binary/v3/battery-10.png
.png
binary/v3/battery-100.png
.png
binary/v3/battery-20.png
.png
binary/v3/battery-30.png
.png
binary/v3/battery-40.png
.png
binary/v3/battery-60.png
.png
binary/v3/battery-80.png
.png
binary/v3/battery-charged.png
.png
binary/v3/battery-charging-low.png
.png
binary/v3/battery-charging.png
.png
binary/v3/connected-3g.png
.png
binary/v3/connected-internet.png
.png
binary/v3/connected-usb.png
.png
binary/v3/connected-wifi.png
.png
binary/v3/connecting.png
.png
binary/v3/no-connection-hover.png
.png
binary/v3/no-connection.png
.png
binary/v3/reconnect-hover.png
.png
binary/v3/reconnect.png
.png
binary/versiontab.png
.png
binary/viewall_hover.png
.png
binary/viewall_normal.png
.png
binary/viewall_press.png
.png
binary/wallpaper-left.png
.png
binary/wallpaper-right.png
.png
binary/wandoujia256_256.png
.png
binary/wandoujia_surport_logo.png
.png
binary/wariness.png
.png
binary/watermark.png
.png
binary/wifi-connect_guide.png
.png
binary/wifi.png
.png
binary/wifi_code_helper_1.png
.png
binary/wifi_code_helper_2.png
.png
binary/wifi_code_helper_3.png
.png
binary/wifi_connectable_big.png
.png
binary/wifi_connected_big.png
.png
binary/window_bottom_center.png
.png
binary/window_bottom_left_corner.png
.png
binary/window_bottom_right_corner.png
.png
binary/window_left_side.png
.png
binary/window_right_fill.png
.png
binary/window_right_side.png
.png
binary/window_top_center.png
.png
binary/window_top_left_corner.png
.png
binary/window_top_right_corner.png
.png
deploy.txt
ui.txt
nls/en-US.zip
.zip
string.txt
nls/language_list.ini
npWandoujiaHelper.dll
.dll windows:5 windows x86 arch:x86

ede50dfb61609c916ca7d23d886589ce

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:1d:e4:f7:02:62:ab:70:d1:87:d8:de:08:aa:3b:f4:4a:11:b5:5b
Signer

Actual PE Digest

59:1d:e4:f7:02:62:ab:70:d1:87:d8:de:08:aa:3b:f4:4a:11:b5:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\npWandoujiaHelper.pdb

Imports

kernel32

CloseHandle
CreateFileA
GetLocaleInfoA
lstrcpynA
FlushFileBuffers
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

EndPaint
FillRect
DrawTextA
GetClientRect
BeginPaint
SetWindowLongA
InvalidateRect
GetWindowLongA
DefWindowProcA
FrameRect

gdi32

GetStockObject

advapi32

GetUserNameA

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
p2sp_kernel.dll
.dll windows:5 windows x86 arch:x86

8072fab66a604690505fdc782e827fe2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:4e:3d:d0:89:40:d9:c5:5a:e5:b0:aa:3e:e4:df:86:ac:86:95:20
Signer

Actual PE Digest

71:4e:3d:d0:89:40:d9:c5:5a:e5:b0:aa:3e:e4:df:86:ac:86:95:20

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\alex\work\p2sp\p2sp_kernel\jni\vsproject\Release\p2sp_kernel.pdb

Imports

kernel32

GetQueuedCompletionStatus
InterlockedCompareExchange
TlsSetValue
TerminateThread
InitializeCriticalSectionAndSpinCount
Sleep
SetLastError
GetProcAddress
QueueUserAPC
WaitForMultipleObjects
CreateIoCompletionPort
GetModuleHandleA
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
GetTickCount
GetCurrentProcess
GetVersionExW
GetCurrentProcessId
CreateProcessW
GetProcessHeap
CreateWaitableTimerW
HeapFree
RaiseException
IsDebuggerPresent
OpenMutexA
CreateMutexA
InitializeCriticalSection
CreateEventW
GetSystemTimeAsFileTime
SleepEx
SetWaitableTimer
TlsGetValue
WaitForSingleObject
TlsFree
CloseHandle
TlsAlloc
OutputDebugStringA
PostQueuedCompletionStatus
InterlockedExchangeAdd
GetLocalTime
EnterCriticalSection
GetLastError
InterlockedExchange
LeaveCriticalSection
SetEvent
CreateEventA
InterlockedDecrement
InterlockedIncrement
GetFileType
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
CreateFileA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeA
LoadLibraryA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetHandleCount
GetModuleFileNameA
VirtualAlloc
HeapAlloc
GetModuleHandleExA
GetTimeZoneInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
HeapSize
FlushFileBuffers
GetModuleFileNameW
CreateThread
LocalFree
ReleaseMutex
DeleteFileW
CreateMutexW
SetFilePointer
CreateFileW
WriteFile
FormatMessageA
SetUnhandledExceptionFilter
TryEnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
SystemTimeToFileTime
GetCurrentThreadId
ResetEvent
VirtualFree
DuplicateHandle
TerminateProcess
ResumeThread
ReadFile
GetStdHandle
GetNativeSystemInfo
ConnectNamedPipe
CancelIo
CreateNamedPipeW
GetNamedPipeInfo
ReleaseSemaphore
OpenEventA
CreateWaitableTimerA
SetEndOfFile
RemoveDirectoryW
DeviceIoControl
GetFileAttributesW
MoveFileExW
CreateDirectoryW
AreFileApisANSI
MoveFileA
UnhandledExceptionFilter
ExitThread
GetCommandLineA
RtlUnwind
GetConsoleCP
GetConsoleMode
HeapReAlloc
ExitProcess
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeW
HeapCreate
HeapDestroy
GetStartupInfoA

user32

PostMessageW
UnregisterClassW
GetSystemMetrics
GetLastInputInfo
PostQuitMessage
SystemParametersInfoW
CloseDesktop
WindowFromPoint
OpenInputDesktop
FindWindowW
WaitForInputIdle
DestroyWindow
CallMsgFilterW
MsgWaitForMultipleObjectsEx
GetQueueStatus
WaitMessage
SetTimer
KillTimer
PeekMessageW
MessageBoxW
DispatchMessageW
DefWindowProcW
CreateWindowExW
SendMessageTimeoutW
SetWindowLongW
GetWindowLongW
RegisterClassExW
TranslateMessage
GetMessageW

ws2_32

bind
setsockopt
getsockname
select
WSASend
WSASocketW
WSARecv
getsockopt
listen
accept
WSAStringToAddressA
ntohl
htonl
getservbyname
htons
ntohs
WSASetLastError
WSAAddressToStringA
WSAStartup
WSACleanup
inet_addr
connect
ioctlsocket
WSASendTo
WSARecvFrom
__WSAFDIsSet
closesocket
WSAGetLastError
gethostbyname

iphlpapi

GetIpAddrTable

shlwapi

PathRemoveFileSpecW
PathAppendW

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

ole32

CoUninitialize
CoInitializeEx

Exports

Exports

p2sp_config
p2sp_delete_file
p2sp_init
p2sp_ipc_client_config
p2sp_ipc_client_create_task
p2sp_ipc_client_delete_file
p2sp_ipc_client_init
p2sp_ipc_client_task_clear
p2sp_ipc_client_task_pause
p2sp_ipc_client_task_resume
p2sp_ipc_client_task_start
p2sp_ipc_client_task_stop
p2sp_ipc_client_uninit
p2sp_ipc_server_run
p2sp_task_clear
p2sp_task_create
p2sp_task_pause
p2sp_task_resume
p2sp_task_start
p2sp_task_stop
p2sp_task_urgent
p2sp_test
p2sp_uninit

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
phoenix2-wandoujia.apk
.apk android arch:x86 arch:arm

com.snappea.premium

com.wandoujia.p4.activity.ExploreActivity

Activities

com.wandoujia.p4.activity.ExploreActivity

android.intent.action.MAIN
android.intent.action.SET_WALLPAPER
phoenix.intent.action.EXPLORE_NAVIGATE
android.intent.action.MAIN
android.intent.action.VIEW

com.wandoujia.p4.activity.MyThingsActivity

phoenix.intent.action.MY_THINGS_NAVIGATE

com.wandoujia.p4.connection.ui.WelcomeActivity

android.intent.action.MAIN

com.wandoujia.p4.app.detail.activity.NewAppDetailActivity

android.intent.action.VIEW
android.intent.action.MAIN
android.intent.action.VIEW

com.wandoujia.p4.connection.ui.ConnectionActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.wandoujia.p4.app.activity.SpecialAppListActivity

android.intent.action.MAIN
android.intent.action.VIEW

com.wandoujia.message.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

com.wandoujia.p4.activity.DispatchActivity

android.intent.action.VIEW

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.SET_WALLPAPER
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.WRITE_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_PACKAGE_SIZE
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.android.browser.permission.WRITE_HISTORY_BOOKMARKS
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.CREATE_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
com.sec.android.app.twlauncher.settings.READ_SETTINGS
com.sec.android.app.twlauncher.settings.WRITE_SETTINGS
android.permission.BROADCAST_STICKY
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.ACCESS_DRM
android.permission.INSTALL_DRM
android.permission.GET_TASKS
android.permission.CAMERA
android.permission.FLASHLIGHT
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.SET_WALLPAPER

Receivers

com.wandoujia.message.SmsReceivedReceiver

android.provider.Telephony.SMS_RECEIVED
phoenix.intent.action.SMS_SENT
phoenix.intent.action.SMS_STATUS_RECEIVED

com.wandoujia.p4.download.notification.DownloadReceiver

android.net.conn.CONNECTIVITY_CHANGE
phoenix.intent.action.DOWNLOAD_OPEN
phoenix.intent.action.DOWNLOAD_LIST
phoenix.intent.action.DOWNLOAD_HIDE

com.wandoujia.p4.receiver.AppChangedReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE

com.wandoujia.p4.receiver.ConnectivityChangedReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.net.wifi.supplicant.CONNECTION_CHANGE
android.intent.action.MEDIA_MOUNTED

com.wandoujia.p4.view.SearchWidget

android.appwidget.action.APPWIDGET_UPDATE

com.wandoujia.p4.selfupgrade.CheckSelfUpgradeReceiver

check_self_upgrade

com.wandoujia.message.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.wandoujia.message.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

com.wandoujia.p4.xibaibai.WashReceiver

phoenix.intent.action.CANCEL_NOTIFICATION
phoenix.intent.action.GEN_NOTIFY_CARD

com.wandoujia.p4.onlineconfig.OnlineConfigScheduleReceiver

phoenix.intent.action.CHECK_ONLINE_CONFIG

com.wandoujia.p4.app.upgrade.UpgradeReceiver

phoenix.intent.action.APP_CHECK_UPGRADE
phoenix.intent.action.UPGRADE_APP
phoenix.intent.action.UPGRADE_ALL
phoenix.intent.action.UPGRADE_NOTIFICATION_DELETED
phoenix.intent.action.NETWORK_DISCONNECT

com.wandoujia.p4.background.BackgroundServiceSettingReceiver

phoenix.intent.action.BACKGROUND_SERVICE_SETTING_CHANGED

com.wandoujia.p4.receiver.NotificationReceiver

phoenix.intent.action.VIDEO_PUSH_NOTIFICATION
phoenix.intent.action.VIDEO_TIME_SHARD_NOTIFICATION
phoenix.intent.action.FREE_TRAFFIC_RETRY_RETURN
phoenix.intent.action.VIDEO_PUSH_NOTIFICATION_DELETE
phoenix.intent.action.VIDEO_TIME_SHARD_NOTIFICATION_DELETE
phoenix.intent.action.STORAGE_WARNING_NOTIFICATION
phoenix.intent.action.STORAGE_WARNING_NOTIFICATION_DELETE
phoenix.intent.action.STORAGE_NOT_ENOUGH_BY_SUBSCRIBE_NOTIFICATION
phoenix.intent.action.STORAGE_NOT_ENOUGH_BY_SUBSCRIBE_NOTIFICATION_DELETE

Services

com.wandoujia.message.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE
conn.apk
.apk android arch:arm arch:x86

com.wandoujia.phoenix2.usbproxy

com.wandoujia.phoenix2.ui.WelcomeActivity

Activities

com.wandoujia.phoenix2.ui.WelcomeActivity

android.intent.action.MAIN

com.wandoujia.message.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.SET_WALLPAPER
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.WRITE_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_PACKAGE_SIZE
android.permission.BROADCAST_STICKY
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.FLASHLIGHT
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS

Receivers

com.wandoujia.message.SmsReceivedReceiver

android.provider.Telephony.SMS_RECEIVED
phoenix.intent.action.SMS_SENT
phoenix.intent.action.SMS_STATUS_RECEIVED

com.wandoujia.pmp.receivers.AppChangedReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE

com.wandoujia.message.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.wandoujia.message.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.wandoujia.phoenix2.UsbProxyService

com.wandoujia.phoenix2.usbproxy

com.wandoujia.message.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE
ssleay32.dll
.dll windows:4 windows x86 arch:x86

8ee9775c09ca9c2cce350b2a0161b9d8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:17:ec:46:e9:c8:03:4a:5a:b0:f3:b7:d5:a3:d4:72:5d:89:ea:82
Signer

Actual PE Digest

61:17:ec:46:e9:c8:03:4a:5a:b0:f3:b7:d5:a3:d4:72:5d:89:ea:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libeay32

ord2572
ord3315
ord2927
ord2747
ord3724
ord313
ord495
ord3883
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3489
ord3719
ord216
ord206
ord497
ord4046
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord170
ord481
ord3729
ord333
ord2915
ord1096
ord1097
ord3816
ord3888
ord3896
ord2589
ord1145
ord1144
ord1081
ord2292
ord3823
ord3846
ord622
ord627
ord657
ord653
ord623
ord3922
ord2898
ord3124
ord3925
ord2702
ord264
ord266
ord3288
ord3704
ord3758
ord3767
ord3647
ord3766
ord3365
ord3857
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3826
ord3559
ord3399
ord636
ord914
ord3899
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord541
ord316
ord629
ord892
ord74
ord3866
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord679
ord2524
ord3595
ord1023
ord3505
ord401
ord93
ord3396
ord3657
ord4045
ord2475
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3513
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord2426
ord86
ord88
ord1101
ord293
ord322
ord2996
ord3155
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord225
ord276
ord274
ord256
ord964
ord965
ord2784
ord909
ord912
ord635
ord285
ord498
ord219
ord3666
ord118
ord201
ord123
ord3663
ord3575
ord3608
ord3512
ord3459
ord2924
ord3480
ord3010
ord111
ord2578
ord3570
ord3644
ord2929
ord3422
ord110
ord866
ord3239
ord202
ord3879
ord109
ord89
ord3841
ord3874
ord961
ord2894
ord3067
ord323
ord3844
ord3244
ord2936
ord354
ord3245
ord3836
ord464
ord911
ord493
ord289
ord2201
ord167
ord52
ord85
ord169
ord168
ord3873
ord222
ord490
ord754
ord2411
ord910
ord2630
ord3109
ord269
ord188
ord181
ord654
ord290
ord281
ord2821
ord641
ord176
ord857
ord2206
ord252
ord903
ord1654
ord1653
ord904
ord901
ord2478
ord905

kernel32

CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
HeapSize
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LoadLibraryA
WriteFile
VirtualAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
Sleep
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
GetLastError
SetLastError

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_info_callback
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
templates/app/bower_components/backbone/backbone.js
.js
templates/app/bower_components/doT/doT.js
.js
templates/app/bower_components/jquery/jquery.js
.js
templates/app/bower_components/qrcode.js/qrcode.js
.js
templates/app/bower_components/requirejs-doT/doT.js
.js
templates/app/bower_components/requirejs-i18n/i18n.js
.js
templates/app/bower_components/requirejs-text/text.js
.js
templates/app/bower_components/requirejs/require.js
.js
templates/app/bower_components/underscore/underscore.js
.js
templates/app/bower_components/wookmark-jquery/jquery.wookmark.js
.js
templates/app/i18n/en-us/images/en-us-s4bb141adfc.png
.png
templates/app/i18n/en-us/nls/app.js
templates/app/i18n/en-us/nls/browser.js
templates/app/i18n/en-us/nls/contact.js
templates/app/i18n/en-us/nls/doraemon.js
templates/app/i18n/en-us/nls/message.js
templates/app/i18n/en-us/nls/misc.js
templates/app/i18n/en-us/nls/music.js
templates/app/i18n/en-us/nls/new_backuprestore.js
templates/app/i18n/en-us/nls/optimize.js
templates/app/i18n/en-us/nls/photo.js
templates/app/i18n/en-us/nls/sync.js
templates/app/i18n/en-us/nls/taskManager.js
templates/app/i18n/en-us/nls/ui.js
templates/app/i18n/en-us/nls/video.js
templates/app/i18n/en-us/nls/welcome.js
templates/app/i18n/en-us/stylesheets/Roboto-Light.ttf
templates/app/i18n/en-us/stylesheets/Roboto-Thin.ttf
templates/app/i18n/en-us/stylesheets/guide.css
templates/app/i18n/en-us/stylesheets/icomoon.ttf
templates/app/i18n/en-us/stylesheets/main.css
templates/app/i18n/en-us/stylesheets/photo.css
templates/app/i18n/images/blank.png
.png
templates/app/i18n/images/common/backuprestore-sfb655f2afe.png
.png
templates/app/i18n/images/common/button-s2269250b6b.png
.png
templates/app/i18n/images/common/guide-s9af9670d4d.png
.png
templates/app/i18n/images/common/ios-s487834a52d.png
.png
templates/app/i18n/images/common/misc-sfa80e07f54.png
.png
templates/app/i18n/images/common/nav-sf51375da3a.png
.png
templates/app/i18n/images/common/sprite-s081ea74c49.png
.png
templates/app/i18n/images/common/wanxiaodou-s30942e7e7d.png
.png
templates/app/i18n/images/connection-guide-bg-300X300-suning.png
.png
templates/app/i18n/images/connection-guide-bg-300X300.png
.png
templates/app/i18n/images/contact-default-batch.png
.png
templates/app/i18n/images/contact-default-large.png
.png
templates/app/i18n/images/contact-default-small.png
.png
templates/app/i18n/images/default-30X30.png
.png
templates/app/i18n/images/default-42X42.png
.png
templates/app/i18n/images/default-app-100X100.png
.png
templates/app/i18n/images/down-anima-bg-16X32.png
.png
templates/app/i18n/images/icon_default_app_36X36.png
.png
templates/app/i18n/images/icon_default_ebook_36X36.png
.png
templates/app/i18n/images/icon_default_extention.png
.png
templates/app/i18n/images/icon_default_file_36X36.png
.png
templates/app/i18n/images/icon_default_music_36X36.png
.png
templates/app/i18n/images/icon_default_pic_36X36.png
.png
templates/app/i18n/images/icon_default_video_36X36.png
.png
templates/app/i18n/images/loading_16.png
.png
templates/app/i18n/images/loading_16X16.gif
.gif
templates/app/i18n/images/playing_11X11.gif
.gif
templates/app/i18n/images/process.png
.png
templates/app/i18n/images/progress_bar_lighter.png
.png
templates/app/i18n/images/progress_bg_18X6.png
.png
templates/app/i18n/images/right_panel_bg_377X180.png
.png
templates/app/i18n/images/shadow.png
.png
templates/app/i18n/images/texture-grey-bg-80X80.png
.png
templates/app/i18n/images/wash-bg.png
.png
templates/app/i18n/images/welcome-gradient-bg.png
.png
templates/app/i18n/images/welcome_bg_100X100.png
.png
templates/app/i18n/images/zh-cn-s3fcacda7f4.png
.png
templates/app/i18n/images/zh-cn/scanning.gif
.gif
templates/app/index.html
.html
templates/app/javascripts/Account.js
.js
templates/app/javascripts/BackendSocket.js
.js
templates/app/javascripts/Configuration.js
.js
templates/app/javascripts/DB.js
.js
templates/app/javascripts/Device.js
.js
templates/app/javascripts/Distributor.js
.js
templates/app/javascripts/Environment.js
.js
templates/app/javascripts/FunctionSwitch.js
.js
templates/app/javascripts/GuideLoader.js
templates/app/javascripts/IO.js
.js
templates/app/javascripts/IOBackendDevice.js
.js
templates/app/javascripts/IframeMessageListener.js
.js
templates/app/javascripts/IframeMessageWorker.js
.js
templates/app/javascripts/Internationalization.js
.js
templates/app/javascripts/Log.js
.js
templates/app/javascripts/MessageRouterMixin.js
.js
templates/app/javascripts/ParserFactory.js
.js
templates/app/javascripts/PerformanceTracker.js
.js
templates/app/javascripts/PhotoModuleLoader.js
templates/app/javascripts/ProjectConfig.js
.js
templates/app/javascripts/RequireConfig.js
.js
templates/app/javascripts/Settings.js
.js
templates/app/javascripts/SnapPea.js
.js
templates/app/javascripts/SnapPeaLoader.js
.js
templates/app/javascripts/Strategy.js
.js
templates/app/javascripts/ThemeManager.js
.js
templates/app/javascripts/WindowController.js
.js
templates/app/javascripts/WorkerPoll.js
.js
templates/app/javascripts/build.txt
templates/app/javascripts/modules/app/AppService.js
.js
templates/app/javascripts/modules/app/app.tpl
.js
templates/app/javascripts/modules/app/app_notification_update.html
.html .js polyglot
templates/app/javascripts/modules/app/collections/AppsCollection.js
.js
templates/app/javascripts/modules/app/collections/RecommendAppsCollection.js
.js
templates/app/javascripts/modules/app/collections/WebAppsCollection.js
.js
templates/app/javascripts/modules/app/models/AppBaseModel.js
.js
templates/app/javascripts/modules/app/models/AppModel.js
.js
templates/app/javascripts/modules/app/models/RecommendAppModel.js
.js
templates/app/javascripts/modules/app/views/AppContextMenu.js
.js
templates/app/javascripts/modules/app/views/AppItemView.js
.js
templates/app/javascripts/modules/app/views/AppListView.js
.js
templates/app/javascripts/modules/app/views/AppModuleToolbarView.js
.js
templates/app/javascripts/modules/app/views/AppModuleView.js
.js
templates/app/javascripts/modules/app/views/AppPanelView.js
.js
templates/app/javascripts/modules/app/views/BatchAppsView.js
.js
templates/app/javascripts/modules/app/views/ChangeLogView.js
.js
templates/app/javascripts/modules/app/views/CommentaryView.js
.js
templates/app/javascripts/modules/app/views/DefaultPanelView.js
.js
templates/app/javascripts/modules/app/views/DetailPanelView.js
.js
templates/app/javascripts/modules/app/views/HotCateView.js
.js
templates/app/javascripts/modules/app/views/IgnoredAppsWindowView.js
.js
templates/app/javascripts/modules/app/views/LocalInstallWindowView.js
.js
templates/app/javascripts/modules/app/views/OneKeyMoveWindowView.js
.js
templates/app/javascripts/modules/app/views/OneKeyUpdateWindowView.js
.js
templates/app/javascripts/modules/app/views/RecommendView.js
.js
templates/app/javascripts/modules/app/views/RetryWindowView.js
.js
templates/app/javascripts/modules/app/views/SortMenu.js
.js
templates/app/javascripts/modules/app/views/UpdateNotificationView.js
.js
templates/app/javascripts/modules/app/wash/XibaibaiService.js
.js
templates/app/javascripts/modules/app/wash/collections/AppsQueryResultCollection.js
.js
templates/app/javascripts/modules/app/wash/views/AppWashModuleView.js
.js
templates/app/javascripts/modules/app/wash/views/ErrorView.js
.js
templates/app/javascripts/modules/app/wash/views/FeedbackCardView.js
.js
templates/app/javascripts/modules/app/wash/views/FeedbackWindowView.js
.js
templates/app/javascripts/modules/app/wash/views/IntroView.js
.js
templates/app/javascripts/modules/app/wash/views/NotificationView.js
.js
templates/app/javascripts/modules/app/wash/views/ResultItemView.js
.js
templates/app/javascripts/modules/app/wash/views/ScanFinishView.js
.js
templates/app/javascripts/modules/app/wash/views/ScanResultView.js
.js
templates/app/javascripts/modules/app/wash/views/ScanningView.js
.js
templates/app/javascripts/modules/app/wash/wash.tpl
.js
templates/app/javascripts/modules/app/xibaibai.html
.html .js polyglot
templates/app/javascripts/modules/browser/extension-error-dns.html
.html .js polyglot
templates/app/javascripts/modules/browser/extension-error.html
.html .js polyglot
templates/app/javascripts/modules/browser/views/AppDependencyView.js
.js
templates/app/javascripts/modules/browser/views/BrowserMenuView.js
.js
templates/app/javascripts/modules/browser/views/BrowserModuleView.js
.js
templates/app/javascripts/modules/browser/views/BrowserToolbarView.js
.js
templates/app/javascripts/modules/browser/views/BrowserView.js
.js
templates/app/javascripts/modules/browser/views/InfoPanelView.js
.js
templates/app/javascripts/modules/contact/ContactService.js
.js
templates/app/javascripts/modules/contact/EditorConfig.js
.js
templates/app/javascripts/modules/contact/ExportController.js
.js
templates/app/javascripts/modules/contact/ImportController.js
.js
templates/app/javascripts/modules/contact/collections/AccountCollection.js
.js
templates/app/javascripts/modules/contact/collections/ContactMultiNumbersCollection.js
.js
templates/app/javascripts/modules/contact/collections/ContactsCollection.js
.js
templates/app/javascripts/modules/contact/contact.tpl
.js
templates/app/javascripts/modules/contact/models/AccountModel.js
.js
templates/app/javascripts/modules/contact/models/ContactModel.js
.js
templates/app/javascripts/modules/contact/models/ExportContextModel.js
.js
templates/app/javascripts/modules/contact/models/GroupManagerContextModel.js
.js
templates/app/javascripts/modules/contact/models/ImportContextModel.js
.js
templates/app/javascripts/modules/contact/views/AccountSelectorView.js
.js
templates/app/javascripts/modules/contact/views/AddGroupWindowView.js
.js
templates/app/javascripts/modules/contact/views/AvatarEditorView.js
.js
templates/app/javascripts/modules/contact/views/AvatarEditorWindowView.js
.js
templates/app/javascripts/modules/contact/views/AvatarGalleryView.js
.js
templates/app/javascripts/modules/contact/views/BatchContactsView.js
.js
templates/app/javascripts/modules/contact/views/CategoryMenuView.js
.js
templates/app/javascripts/modules/contact/views/ContactContextMenu.js
.js
templates/app/javascripts/modules/contact/views/ContactItemView.js
.js
templates/app/javascripts/modules/contact/views/ContactModuleToolbarView.js
.js
templates/app/javascripts/modules/contact/views/ContactModuleView.js
.js
templates/app/javascripts/modules/contact/views/ContactPanelView.js
.js
templates/app/javascripts/modules/contact/views/ContactsListView.js
.js
templates/app/javascripts/modules/contact/views/CustomInfoWindowView.js
.js
templates/app/javascripts/modules/contact/views/DetailPanelView.js
.js
templates/app/javascripts/modules/contact/views/ExportProgressView.js
.js
templates/app/javascripts/modules/contact/views/ExportSelectNumberView.js
.js
templates/app/javascripts/modules/contact/views/ExportSelectTypeView.js
.js
templates/app/javascripts/modules/contact/views/ExportTipWindowView.js
.js
templates/app/javascripts/modules/contact/views/GroupListView.js
.js
templates/app/javascripts/modules/contact/views/GroupManagerItemView.js
.js
templates/app/javascripts/modules/contact/views/GroupManagerView.js
.js
templates/app/javascripts/modules/contact/views/GroupSelectorView.js
.js
templates/app/javascripts/modules/contact/views/ImportAutoBackupView.js
.js
templates/app/javascripts/modules/contact/views/ImportProgressView.js
.js
templates/app/javascripts/modules/contact/views/ImportSelectAccountView.js
.js
templates/app/javascripts/modules/contact/views/ImportSelectFileView.js
.js
templates/app/javascripts/modules/contact/views/QuickAddPanelView.js
.js
templates/app/javascripts/modules/doraemon/collections/ExtensionsCollection.js
.js
templates/app/javascripts/modules/doraemon/doraemon.tpl
templates/app/javascripts/modules/doraemon/models/ExtensionModel.js
.js
templates/app/javascripts/modules/doraemon/views/DoraemonContextMenu.js
.js
templates/app/javascripts/modules/doraemon/views/DoraemonMenuView.js
.js
templates/app/javascripts/modules/doraemon/views/DoraemonModuleView.js
.js
templates/app/javascripts/modules/doraemon/views/DoraemonToolbarView.js
.js
templates/app/javascripts/modules/doraemon/views/ExtensionItemView.js
.js
templates/app/javascripts/modules/doraemon/views/ExtensionListView.js
.js
templates/app/javascripts/modules/doraemon/views/GallerySwitchView.js
.js
templates/app/javascripts/modules/doraemon/views/GalleryView.js
.js
templates/app/javascripts/modules/doraemon/views/MenuItemView.js
.js
templates/app/javascripts/modules/doraemon/views/ReportWindowView.js
.js
templates/app/javascripts/modules/main/HistoryManager.js
.js
templates/app/javascripts/modules/main/collections/PIMCollection.js
.js
templates/app/javascripts/modules/main/views/AgentNotifiPopup.js
.js
templates/app/javascripts/modules/main/views/BatchErrorView.js
.js
templates/app/javascripts/modules/main/views/BindingDeviceWindowView.js
.js
templates/app/javascripts/modules/main/views/FastUSBNotificationView.js
.js
templates/app/javascripts/modules/main/views/MainView.js
.js
templates/app/javascripts/modules/main/views/MenuItemView.js
.js
templates/app/javascripts/modules/main/views/NavView.js
.js
templates/app/javascripts/modules/main/views/PIMMenuView.js
.js
templates/app/javascripts/modules/message/ExportController.js
.js
templates/app/javascripts/modules/message/ImportController.js
.js
templates/app/javascripts/modules/message/MessageService.js
.js
templates/app/javascripts/modules/message/collections/ConversationsCollection.js
.js
templates/app/javascripts/modules/message/collections/MessageCollection.js
.js
templates/app/javascripts/modules/message/collections/Threads4ContactCollection.js
.js
templates/app/javascripts/modules/message/collections/ThreadsCollection.js
.js
templates/app/javascripts/modules/message/message.tpl
templates/app/javascripts/modules/message/message_notification_receive.html
.html .js polyglot
templates/app/javascripts/modules/message/models/ConversationModel.js
.js
templates/app/javascripts/modules/message/models/ExportContextModel.js
.js
templates/app/javascripts/modules/message/models/ImportContextModel.js
.js
templates/app/javascripts/modules/message/models/MessageModel.js
.js
templates/app/javascripts/modules/message/models/ThreadModel.js
.js
templates/app/javascripts/modules/message/views/BatchContactsSelectorView.js
.js
templates/app/javascripts/modules/message/views/BatchConversationsView.js
.js
templates/app/javascripts/modules/message/views/ContactSuggestionView.js
.js
templates/app/javascripts/modules/message/views/ConversationContextMenu.js
.js
templates/app/javascripts/modules/message/views/ConversationItemView.js
.js
templates/app/javascripts/modules/message/views/ConversationsListView.js
.js
templates/app/javascripts/modules/message/views/ExportProgressView.js
.js
templates/app/javascripts/modules/message/views/ExportSelectView.js
.js
templates/app/javascripts/modules/message/views/ImportAutoBackupView.js
.js
templates/app/javascripts/modules/message/views/ImportProgressView.js
.js
templates/app/javascripts/modules/message/views/ImportSelectFileView.js
.js
templates/app/javascripts/modules/message/views/MessageModuleToolbarView.js
.js
templates/app/javascripts/modules/message/views/MessageModuleView.js
.js
templates/app/javascripts/modules/message/views/MessagePanelView.js
.js
templates/app/javascripts/modules/message/views/MessageSender4NotificationView.js
.js
templates/app/javascripts/modules/message/views/MessageSender4ThreadsPanelView.js
.js
templates/app/javascripts/modules/message/views/MessageSenderView.js
.js
templates/app/javascripts/modules/message/views/MonitorItemView.js
.js
templates/app/javascripts/modules/message/views/NewMessageNotificationView.js
.js
templates/app/javascripts/modules/message/views/QuickSenderView.js
.js
templates/app/javascripts/modules/message/views/ThreadsHeaderView.js
.js
templates/app/javascripts/modules/message/views/ThreadsItemView.js
.js
templates/app/javascripts/modules/message/views/ThreadsMessageItemView.js
.js
templates/app/javascripts/modules/message/views/ThreadsPanel4ContactView.js
.js
templates/app/javascripts/modules/message/views/ThreadsPanelView.js
.js
templates/app/javascripts/modules/misc.tpl
.js
templates/app/javascripts/modules/music/MusicService.js
.js
templates/app/javascripts/modules/music/collections/MusicsCollection.js
.js
templates/app/javascripts/modules/music/iTunes/ITunesController.js
.js
templates/app/javascripts/modules/music/iTunes/ITunesService.js
.js
templates/app/javascripts/modules/music/iTunes/collections/ITunesCollection.js
.js
templates/app/javascripts/modules/music/iTunes/collections/ITunesListCollection.js
.js
templates/app/javascripts/modules/music/iTunes/iTunes.tpl
templates/app/javascripts/modules/music/iTunes/models/ITunesListModel.js
.js
templates/app/javascripts/modules/music/iTunes/models/ITunesModel.js
.js
templates/app/javascripts/modules/music/iTunes/models/ListContextModel.js
.js
templates/app/javascripts/modules/music/iTunes/views/AudioListItemView.js
.js
templates/app/javascripts/modules/music/iTunes/views/AudioListView.js
.js
templates/app/javascripts/modules/music/iTunes/views/ImportView.js
.js
templates/app/javascripts/modules/music/iTunes/views/PlayListItemView.js
.js
templates/app/javascripts/modules/music/iTunes/views/SelectLibraryView.js
.js
templates/app/javascripts/modules/music/iTunes/views/SelectSourceView.js
.js
templates/app/javascripts/modules/music/models/MusicModel.js
.js
templates/app/javascripts/modules/music/music.tpl
templates/app/javascripts/modules/music/views/ImportMusicView.js
.js
templates/app/javascripts/modules/music/views/MusicContextMenu.js
.js
templates/app/javascripts/modules/music/views/MusicItemView.js
.js
templates/app/javascripts/modules/music/views/MusicModuleToolbarView.js
.js
templates/app/javascripts/modules/music/views/MusicModuleView.js
.js
templates/app/javascripts/modules/music/views/MusicsListView.js
.js
templates/app/javascripts/modules/music/views/SetRingWindowView.js
.js
templates/app/javascripts/modules/new_backuprestore/BackupRestoreService.js
.js
templates/app/javascripts/modules/new_backuprestore/backuprestore.tpl
templates/app/javascripts/modules/new_backuprestore/collections/RestoreLocalFileCollection.js
.js
templates/app/javascripts/modules/new_backuprestore/collections/RestoreRemoteFileCollection.js
.js
templates/app/javascripts/modules/new_backuprestore/models/BackupContextModel.js
.js
templates/app/javascripts/modules/new_backuprestore/models/RestoreContextModel.js
.js
templates/app/javascripts/modules/new_backuprestore/views/AlertWindowView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BackupAppDataTipView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BackupAutoTipView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BackupFooterView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BackupRemoteErrorView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BackupRestoreModuleView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BackupRestoreProgressView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/BaseView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/ConfirmWindowView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/ErrorItemListView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/ErrorRetryView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/FileItemView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/LocalBackupAdvanceView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/LocalBackupView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/LocalFileListView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/LocalRestoreAdvanceView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RemoteBackupAdvanceView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RemoteBackupView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RemoteFileItemView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RemoteFileListView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RemoteRestoreAdvanceView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RestoreChooseAccountView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RestoreFooterView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/RestoreView.js
.js
templates/app/javascripts/modules/new_backuprestore/views/StartView.js
.js
templates/app/javascripts/modules/optimize/OptimizeService.js
.js
templates/app/javascripts/modules/optimize/optimize.tpl
templates/app/javascripts/modules/optimize/views/InstallProgressView.js
.js
templates/app/javascripts/modules/optimize/views/OptimizeModuleView.js
.js
templates/app/javascripts/modules/optimize/views/ScanView.js
.js
templates/app/javascripts/modules/photo/IframeMessageListener.js
.js
templates/app/javascripts/modules/photo/PhotoModule.js
.js
templates/app/javascripts/modules/photo/PhotoService.js
.js
templates/app/javascripts/modules/photo/collections/CloudPhotoCollection.js
.js
templates/app/javascripts/modules/photo/collections/LibraryPhotoCollection.js
.js
templates/app/javascripts/modules/photo/collections/PhonePhotoCollection.js
.js
templates/app/javascripts/modules/photo/collections/PhotoCollection.js
.js
templates/app/javascripts/modules/photo/models/PhotoModel.js
.js
templates/app/javascripts/modules/photo/photo.html
.html
templates/app/javascripts/modules/photo/photo.tpl
templates/app/javascripts/modules/photo/views/ImportPhotoView.js
.js
templates/app/javascripts/modules/photo/views/PhotoGalleryView.js
.js
templates/app/javascripts/modules/photo/views/PhotoIosView.js
.js
templates/app/javascripts/modules/photo/views/PhotoItemView.js
.js
templates/app/javascripts/modules/photo/views/PhotoListItemView.js
.js
templates/app/javascripts/modules/photo/views/PhotoListView.js
.js
templates/app/javascripts/modules/photo/views/PhotoModuleToolbarView.js
.js
templates/app/javascripts/modules/photo/views/PhotoModuleView.js
.js
templates/app/javascripts/modules/photo/views/PhotoSyncSwitchView.js
.js
templates/app/javascripts/modules/photo/views/PhotoThreadView.js
.js
templates/app/javascripts/modules/photo/views/SlideShowView.js
.js
templates/app/javascripts/modules/social/SocialData.js
.js
templates/app/javascripts/modules/social/SocialService.js
.js
templates/app/javascripts/modules/social/social.tpl
templates/app/javascripts/modules/social/views/FacebookOauthView.js
.js
templates/app/javascripts/modules/social/views/FacebookShareView.js
.js
templates/app/javascripts/modules/social/views/QuickShareView.js
.js
templates/app/javascripts/modules/social/views/ShareView.js
.js
templates/app/javascripts/modules/social/views/SocialPlatformSelectorView.js
.js
templates/app/javascripts/modules/sync/SyncModule.js
.js
templates/app/javascripts/modules/sync/SyncService.js
.js
templates/app/javascripts/modules/sync/auto_backup_complete.html
.html .js polyglot
templates/app/javascripts/modules/sync/backup_guide.html
.html .js polyglot
templates/app/javascripts/modules/sync/download_photo_notify.html
.html .js polyglot
templates/app/javascripts/modules/sync/ios_advertisement.html
.html .js polyglot
templates/app/javascripts/modules/sync/open_sync.html
.html .js polyglot
templates/app/javascripts/modules/sync/server_notify.html
.html .js polyglot
templates/app/javascripts/modules/sync/sync.tpl
templates/app/javascripts/modules/sync/sync_photo_remote.html
.html .js polyglot
templates/app/javascripts/modules/sync/views/AccountGuideView.js
.js
templates/app/javascripts/modules/sync/views/AutoBackupCompleteNotifyView.js
.js
templates/app/javascripts/modules/sync/views/BackupGuideView.js
.js
templates/app/javascripts/modules/sync/views/DownloadPhotoNotifyView.js
.js
templates/app/javascripts/modules/sync/views/OpenSyncNotifyView.js
.js
templates/app/javascripts/modules/sync/views/PhotoSyncAlertView.js
.js
templates/app/javascripts/modules/sync/views/ServerNotifyView.js
.js
templates/app/javascripts/modules/sync/views/SyncIosSmsView.js
.js
templates/app/javascripts/modules/taskmanager/EventProcessor.js
.js
templates/app/javascripts/modules/taskmanager/TaskService.js
.js
templates/app/javascripts/modules/taskmanager/collections/TasksCollection.js
.js
templates/app/javascripts/modules/taskmanager/models/TaskModel.js
.js
templates/app/javascripts/modules/taskmanager/taskmanager.tpl
.js
templates/app/javascripts/modules/taskmanager/views/CapacityTipsView.js
.js
templates/app/javascripts/modules/taskmanager/views/DeleteConfirmWindowView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskActionView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskChangeStoragePathView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskContextMenu.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskDashboardView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskListItemView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskListView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskModuleCapacityView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskModuleToolbarView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskModuleView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskMonitorView.js
.js
templates/app/javascripts/modules/taskmanager/views/TaskNotifierPanelView.js
.js
templates/app/javascripts/modules/video/VideoService.js
.js
templates/app/javascripts/modules/video/collections/VideosCollection.js
.js
templates/app/javascripts/modules/video/models/VideoModel.js
.js
templates/app/javascripts/modules/video/video.tpl
templates/app/javascripts/modules/video/views/ImportVideoView.js
.js
templates/app/javascripts/modules/video/views/VideoItemView.js
.js
templates/app/javascripts/modules/video/views/VideoListItemView.js
.js
templates/app/javascripts/modules/video/views/VideoListView.js
.js
templates/app/javascripts/modules/video/views/VideoModuleToolbarView.js
.js
templates/app/javascripts/modules/video/views/VideoModuleView.js
.js
templates/app/javascripts/modules/video/views/VideoThreadView.js
.js
templates/app/javascripts/modules/welcome/WelcomeService.js
.js
templates/app/javascripts/modules/welcome/collections/FeedsCollection.js
.js
templates/app/javascripts/modules/welcome/guide/guide.html
.html
templates/app/javascripts/modules/welcome/guide/guide.tpl
templates/app/javascripts/modules/welcome/guide/views/BindView.js
.js
templates/app/javascripts/modules/welcome/guide/views/CardView.js
.js
templates/app/javascripts/modules/welcome/guide/views/CloudBackupView.js
.js
templates/app/javascripts/modules/welcome/guide/views/GuideView.js
.js
templates/app/javascripts/modules/welcome/guide/views/StarterView.js
.js
templates/app/javascripts/modules/welcome/guide/views/TipsView.js
.js
templates/app/javascripts/modules/welcome/guide/views/XibaibaiView.js
.js
templates/app/javascripts/modules/welcome/views/AccountView.js
.js
templates/app/javascripts/modules/welcome/views/AppCardView.js
.js
templates/app/javascripts/modules/welcome/views/BackupCardView.js
.js
templates/app/javascripts/modules/welcome/views/BackupView.js
.js
templates/app/javascripts/modules/welcome/views/BannerCardView.js
.js
templates/app/javascripts/modules/welcome/views/BillboardView.js
.js
templates/app/javascripts/modules/welcome/views/CapacityBarView.js
.js
templates/app/javascripts/modules/welcome/views/ChangelogCardView.js
.js
templates/app/javascripts/modules/welcome/views/ClockView.js
.js
templates/app/javascripts/modules/welcome/views/CloudPhotoCardView.js
.js
templates/app/javascripts/modules/welcome/views/ConnectionGuideView.js
.js
templates/app/javascripts/modules/welcome/views/DeviceView.js
.js
templates/app/javascripts/modules/welcome/views/EBookCardView.js
.js
templates/app/javascripts/modules/welcome/views/FacebookCardView.js
.js
templates/app/javascripts/modules/welcome/views/FeedCardView.js
.js
templates/app/javascripts/modules/welcome/views/FeedListView.js
.js
templates/app/javascripts/modules/welcome/views/GuideView.js
.js
templates/app/javascripts/modules/welcome/views/ITunesMoviesCardView.js
.js
templates/app/javascripts/modules/welcome/views/InfoView.js
.js
templates/app/javascripts/modules/welcome/views/P2pCardView.js
.js
templates/app/javascripts/modules/welcome/views/ScreenControlView.js
.js
templates/app/javascripts/modules/welcome/views/SnapPeaFeedbackCardView.js
.js
templates/app/javascripts/modules/welcome/views/SnapPeaPhotosCardView.js
.js
templates/app/javascripts/modules/welcome/views/SnapPeaWebCardView.js
.js
templates/app/javascripts/modules/welcome/views/TiebaCardView.js
.js
templates/app/javascripts/modules/welcome/views/TipsCardView.js
.js
templates/app/javascripts/modules/welcome/views/ToolbarView.js
.js
templates/app/javascripts/modules/welcome/views/UpdateCardView.js
.js
templates/app/javascripts/modules/welcome/views/VideoCardView.js
.js
templates/app/javascripts/modules/welcome/views/WeiboCardView.js
.js
templates/app/javascripts/modules/welcome/views/WelcomeModuleView.js
.js
templates/app/javascripts/modules/welcome/views/WelcomeView.js
.js
templates/app/javascripts/modules/welcome/views/XibaibaiCardView.js
.js
templates/app/javascripts/modules/welcome/views/YouTubeCardView.js
.js
templates/app/javascripts/modules/welcome/welcome.tpl
.js
templates/app/javascripts/ui/AlertWindow.js
.js
templates/app/javascripts/ui/BaseListItem.js
.js
templates/app/javascripts/ui/BatchActionWindow.js
.js
templates/app/javascripts/ui/Button.js
.js
templates/app/javascripts/ui/ClipImage.js
.js
templates/app/javascripts/ui/EventsMapping.js
.js
templates/app/javascripts/ui/ImageLoader.js
.js
templates/app/javascripts/ui/KeyMapping.js
.js
templates/app/javascripts/ui/KeyboardHelper.js
.js
templates/app/javascripts/ui/MediaInfoPanelView.js
.js
templates/app/javascripts/ui/Menu.js
.js
templates/app/javascripts/ui/MenuButton.js
.js
templates/app/javascripts/ui/MouseState.js
.js
templates/app/javascripts/ui/Notification.js
.js
templates/app/javascripts/ui/Panel.js
.js
templates/app/javascripts/ui/PhotoCutter.js
.js
templates/app/javascripts/ui/PopupPanel.js
.js
templates/app/javascripts/ui/PopupTip.js
.js
templates/app/javascripts/ui/SmartList.js
.js
templates/app/javascripts/ui/TemplateFactory.js
.js
templates/app/javascripts/ui/TipPanel.js
.js
templates/app/javascripts/ui/ToastBox.js
.js
templates/app/javascripts/ui/Toolbar.js
.js
templates/app/javascripts/ui/UI.js
.js
templates/app/javascripts/ui/UIHelper.js
.js
templates/app/javascripts/ui/WindowState.js
.js
templates/app/javascripts/ui/behavior/AutoCloseMixin.js
.js
templates/app/javascripts/ui/behavior/Behaviors.js
.js
templates/app/javascripts/ui/behavior/BlurToHideMixin.js
.js
templates/app/javascripts/ui/behavior/ButtonSetMixin.js
.js
templates/app/javascripts/ui/behavior/ClickToHideMixin.js
.js
templates/app/javascripts/ui/behavior/DataSetMixin.js
.js
templates/app/javascripts/ui/behavior/DisposableMixin.js
.js
templates/app/javascripts/ui/behavior/DraggableMixin.js
.js
templates/app/javascripts/ui/behavior/HeaderMixin.js
.js
templates/app/javascripts/ui/behavior/LimitInWindowMixin.js
.js
templates/app/javascripts/ui/behavior/ModalMixin.js
.js
templates/app/javascripts/ui/behavior/ObserverMixin.js
.js
templates/app/javascripts/ui/behavior/SelectDelegateMixin.js
.js
templates/app/javascripts/ui/behavior/WanXiaoDouMixin.js
.js
templates/app/javascripts/ui/ui.tpl
templates/app/javascripts/utilities/BrowserSniffer.js
.js
templates/app/javascripts/utilities/CompressHTML.js
.js
templates/app/javascripts/utilities/ConditionalEscape.js
.js
templates/app/javascripts/utilities/EventsHelper.js
.js
templates/app/javascripts/utilities/FilterFunction.js
.js
templates/app/javascripts/utilities/FlashDetector.js
.js
templates/app/javascripts/utilities/FormatDate.js
.js
templates/app/javascripts/utilities/FormatDuration.js
.js
templates/app/javascripts/utilities/FormatString.js
.js
templates/app/javascripts/utilities/JSONParser.js
.js
templates/app/javascripts/utilities/MD5.js
.js
templates/app/javascripts/utilities/QueryString.js
.js
templates/app/javascripts/utilities/ReadableSize.js
.js
templates/app/javascripts/utilities/SetImmediate.js
.js
templates/app/javascripts/utilities/ShortenQuantity.js
.js
templates/app/javascripts/utilities/SmartDate.js
.js
templates/app/javascripts/utilities/StringUtil.js
.js
templates/app/javascripts/utilities/ValidateEmail.js
.js
templates/app/javascripts/utilities/ValidateURL.js
.js
templates/app/javascripts/workers/jsonparser.js
.js
templates/app/qrcode-connect.html
.html .js polyglot
templates/app/usb-debug-en.html
.html .js polyglot
templates/conn/en-us/images/en-us-s4feee5e05a.png
.png
templates/conn/en-us/index.html
.html .js polyglot
templates/conn/images/common-sd7dbc16a7f.png
.png
templates/conn/images/connecting.png
.png
templates/conn/images/loading.gif
.gif
templates/conn/images/progress.png
.png
usb_proxy.apk
.apk android arch:arm arch:x86

com.wandoujia.phoenix2.usbproxy

com.wandoujia.phoenix2.ui.WelcomeActivity

Activities

com.wandoujia.phoenix2.ui.WelcomeActivity

android.intent.action.MAIN

com.wandoujia.message.ComposeSmsActivity

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.INTERNET
android.permission.GET_ACCOUNTS
android.permission.READ_CONTACTS
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.RECEIVE_SMS
android.permission.SEND_SMS
android.permission.SET_WALLPAPER
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.DISABLE_KEYGUARD
android.permission.WRITE_CONTACTS
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SETTINGS
android.permission.WRITE_SMS
android.permission.CHANGE_WIFI_STATE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_PACKAGE_SIZE
android.permission.BROADCAST_STICKY
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.FLASHLIGHT
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.MANAGE_ACCOUNTS

Receivers

com.wandoujia.message.SmsReceivedReceiver

android.provider.Telephony.SMS_RECEIVED
phoenix.intent.action.SMS_SENT
phoenix.intent.action.SMS_STATUS_RECEIVED

com.wandoujia.pmp.receivers.AppChangedReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_CHANGED
android.intent.action.EXTERNAL_APPLICATIONS_AVAILABLE

com.wandoujia.message.SmsReceiver

android.provider.Telephony.SMS_DELIVER

com.wandoujia.message.MmsReceiver

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.wandoujia.phoenix2.UsbProxyService

com.wandoujia.phoenix2.usbproxy

com.wandoujia.message.HeadlessSmsSendService

android.intent.action.RESPOND_VIA_MESSAGE
usb_win7_x64.inf
usb_win7_x86.inf
usb_xp.inf
wandoujia2.exe
.exe windows:5 windows x86 arch:x86

b868236acb414ab734ef0cd6e04b3058

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b3:f7:07:21:ad:96:16:4f:ca:56:24:f6:b8:38:a6:2a:5f:33:c5:7f
Signer

Actual PE Digest

b3:f7:07:21:ad:96:16:4f:ca:56:24:f6:b8:38:a6:2a:5f:33:c5:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia2.pdb

Imports

shell32

SHGetFolderPathW
CommandLineToArgvW

shlwapi

PathRemoveFileSpecW

kernel32

SetCurrentDirectoryW
GetProcAddress
GetModuleFileNameW
CloseHandle
ExpandEnvironmentStringsW
WaitForSingleObject
LocalFree
GetCommandLineW
GetCurrentProcessId
GetTickCount
ReleaseMutex
GetLastError
SetLastError
CreateProcessW
CreateMutexW
SetFilePointer
CreateFileW
WriteFile
OutputDebugStringA
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
IsDebuggerPresent
RaiseException
GetCurrentThreadId
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
GetCurrentProcess
TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
HeapFree
GetConsoleCP
GetConsoleMode
ExitProcess
HeapReAlloc
HeapAlloc
GetCPInfo
LCMapStringA
LCMapStringW
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
VirtualAlloc
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
VirtualQuery
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA

winmm

timeGetTime

user32

MessageBoxW

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia2.xml
wandoujia_bho.dll
.dll regsvr32 windows:5 windows x86 arch:x86

3cb09b7d50631cd380de8256e413da3a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:5d:56:e9:b4:cf:a4:7a:2f:f4:0e:e2:e0:73:6e:7a:2b:51:b2:11
Signer

Actual PE Digest

23:5d:56:e9:b4:cf:a4:7a:2f:f4:0e:e2:e0:73:6e:7a:2b:51:b2:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_bho32.pdb

Imports

kernel32

GetModuleHandleW
lstrcmpiW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
GetProcAddress
LoadLibraryExW
LoadLibraryW
GetPrivateProfileIntW
SetThreadLocale
GetThreadLocale
GetLastError
lstrlenW
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
RaiseException
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
RtlUnwind
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId

user32

CharNextW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

shell32

SHGetFolderPathW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree
CoCreateInstance

oleaut32

SysFreeString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_bho32.dll
.dll regsvr32 windows:5 windows x86 arch:x86

3cb09b7d50631cd380de8256e413da3a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:5d:56:e9:b4:cf:a4:7a:2f:f4:0e:e2:e0:73:6e:7a:2b:51:b2:11
Signer

Actual PE Digest

23:5d:56:e9:b4:cf:a4:7a:2f:f4:0e:e2:e0:73:6e:7a:2b:51:b2:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_bho32.pdb

Imports

kernel32

GetModuleHandleW
lstrcmpiW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
GetProcAddress
LoadLibraryExW
LoadLibraryW
GetPrivateProfileIntW
SetThreadLocale
GetThreadLocale
GetLastError
lstrlenW
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
RaiseException
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
RtlUnwind
HeapAlloc
GetCurrentThreadId
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId

user32

CharNextW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

shell32

SHGetFolderPathW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree
CoCreateInstance

oleaut32

SysFreeString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_bho64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

040838fd84d906a7f9a6f5393484f295

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2c:9d:76:a8:9a:54:e2:cd:8e:8d:53:75:21:37:3e:8c:db:fb:a9:8e
Signer

Actual PE Digest

2c:9d:76:a8:9a:54:e2:cd:8e:8d:53:75:21:37:3e:8c:db:fb:a9:8e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_bho64.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
lstrcmpiW
LoadLibraryW
GetPrivateProfileIntW
SetThreadLocale
GetThreadLocale
FlushFileBuffers
GetModuleHandleW
GetProcAddress
GetLastError
lstrlenW
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryExW
RaiseException
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCurrentProcessId
RtlUnwindEx
GetSystemTimeAsFileTime
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount

user32

CharNextW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

shell32

SHGetFolderPathW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree
CoCreateInstance

oleaut32

SysFreeString
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_bho_dll32.dll
.dll windows:5 windows x86 arch:x86

8ce69635e83cb1707cd998dc383430a3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:f7:fb:c1:c6:22:de:0d:7e:d8:8e:27:ac:42:fb:99:b7:58:30:76
Signer

Actual PE Digest

e3:f7:fb:c1:c6:22:de:0d:7e:d8:8e:27:ac:42:fb:99:b7:58:30:76

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_bho_dll32.pdb

Imports

kernel32

CreateThread
InitializeCriticalSection
InterlockedCompareExchange
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
WriteFile
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InterlockedExchange
LoadLibraryA
GetModuleHandleA

user32

DialogBoxParamW
FindWindowW
SendMessageW
EndDialog
GetDesktopWindow

shell32

ShellExecuteW

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpReadData
WinHttpOpen
WinHttpQueryDataAvailable

Exports

Exports

real_Download
real_Invoke
real_SetSite

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_bho_dll64.dll
.dll windows:5 windows x64 arch:x64

f9a247e18b1bb405f04af11bed06ef8b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c1:12:fd:a1:bf:f3:60:93:99:20:9a:c8:6e:e1:01:e2:8b:82:99:7a
Signer

Actual PE Digest

c1:12:fd:a1:bf:f3:60:93:99:20:9a:c8:6e:e1:01:e2:8b:82:99:7a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_bho_dll64.pdb

Imports

kernel32

CreateThread
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapSetInformation
HeapCreate
HeapDestroy
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RaiseException
RtlPcToFileHeader
Sleep
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
RtlUnwindEx
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapReAlloc
InitializeCriticalSection

user32

DialogBoxParamW
FindWindowW
SendMessageW
EndDialog
GetDesktopWindow

shell32

ShellExecuteW

winhttp

WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpReadData
WinHttpOpen
WinHttpQueryDataAvailable

Exports

Exports

real_Download
real_Invoke
real_SetSite

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_dll.dll
.dll windows:5 windows x86 arch:x86

06548f55fc8bebbc7707f43be18d945e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:c8:fd:21:75:fa:0c:d4:ee:e3:4c:9c:7d:1a:f4:d6:e6:db:4c:5f
Signer

Actual PE Digest

05:c8:fd:21:75:fa:0c:d4:ee:e3:4c:9c:7d:1a:f4:d6:e6:db:4c:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_dll.pdb

Imports

dbghelp

MakeSureDirectoryPathExists

ws2_32

shutdown
ntohs
select
inet_ntoa
connect
ioctlsocket
setsockopt
sendto
freeaddrinfo
getaddrinfo
WSAGetLastError
socket
bind
WSAStartup
WSACleanup
recv
htonl
ntohl
inet_addr
htons
accept
listen
send
closesocket
__WSAFDIsSet
getsockname

shell32

SHAppBarMessage
SHFileOperationW
ord155
SHOpenFolderAndSelectItems
ord190
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetFolderPathW
ShellExecuteW
ord727
SHGetFileInfoW
DragQueryFileW
DragFinish
Shell_NotifyIconW
SHChangeNotify
SHGetPathFromIDListW
CommandLineToArgvW
SHBrowseForFolderW
SHGetDesktopFolder

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
mciSendCommandW

adb_dev

?DestroyAsyncUdpSocket@@YAXPAVAsyncUdpSocket@@@Z
?ADBDevInit@@YA_NPAVADBDevListener@@PBX@Z
?ADBDevUninit@@YAXXZ
?ADBDevGet@@YAPAVADBDev@@XZ
?DestroyAsyncTcpSocket@@YAXPAVAsyncTcpSocket@@@Z
?CreateAsyncTcpSocket@@YAPAVAsyncTcpSocket@@PBD0PAVAsyncTcpClient@@@Z
?ADBDevGetPidByPort@@YAKG@Z
?ADBDevGetDeviceCount@@YAHXZ
?CreateAsyncUdpSocket@@YAPAVAsyncUdpSocket@@GPAVAsyncUdpClient@@@Z
?ADBDevGetDeviceInfo@@YAPBUADBDevDeviceInfo@@H@Z

kernel32

GetPrivateProfileStringW
OutputDebugStringW
FindResourceExW
WideCharToMultiByte
GetLocalTime
SetLastError
FlushInstructionCache
LoadLibraryW
CreateMutexW
GetVersion
GetCurrentProcess
GetTickCount
lstrlenA
GetStartupInfoW
GlobalFree
GlobalUnlock
CreateFileW
GlobalAlloc
WriteFile
GlobalLock
GetCurrentThreadId
MulDiv
TlsSetValue
TlsGetValue
DeleteCriticalSection
lstrcmpiW
LockResource
GetProcAddress
RaiseException
lstrlenW
lstrcpyW
GetModuleFileNameW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
GetModuleHandleW
LoadLibraryExW
LoadResource
FreeLibrary
FindResourceW
TlsFree
CloseHandle
TlsAlloc
InterlockedExchangeAdd
GetLastError
InterlockedExchange
SetEvent
CreateEventA
InterlockedDecrement
InterlockedIncrement
FindNextFileA
FindFirstFileA
GetLogicalDriveStringsA
GetCurrentProcessId
EnterCriticalSection
GetPrivateProfileSectionW
FindFirstFileW
InterlockedCompareExchange
MultiByteToWideChar
GetEnvironmentVariableA
RemoveDirectoryA
CreateDirectoryA
GetTempPathW
CreateWaitableTimerA
OpenEventA
IsProcessorFeaturePresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
GetStartupInfoA
SetHandleCount
VirtualFree
HeapDestroy
HeapCreate
GetModuleFileNameA
HeapSize
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
GetDateFormatA
GetTimeFormatA
VirtualQuery
VirtualAlloc
VirtualProtect
ExitThread
HeapReAlloc
ExitProcess
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
CancelIo
ReadDirectoryChangesW
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
CreateSemaphoreW
Module32FirstW
GetSystemPowerStatus
GlobalSize
CreateFileMappingA
CreateFileA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetFullPathNameW
FormatMessageW
GetTempPathA
GetSystemTime
DeleteFileA
GetFileAttributesA
UnlockFileEx
LockFileEx
LockFile
UnlockFile
AreFileApisANSI
GetVersionExA
CreateProcessA
GetFullPathNameA
LocalFileTimeToFileTime
CreateWaitableTimerW
QueueUserAPC
CreateSemaphoreA
HeapFree
HeapAlloc
ReleaseSemaphore
GetProcessHeap
TerminateThread
SleepEx
SetWaitableTimer
GetTimeZoneInformation
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentThread
WaitForMultipleObjects
ResetEvent
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
SetThreadPriority
CreateThread
IsDebuggerPresent
FlushFileBuffers
SetEndOfFile
GetUserDefaultLangID
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
AssignProcessToJobObject
ResumeThread
TerminateProcess
GetSystemInfo
GetProcessId
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
OpenProcess
GetCommandLineW
LocalFree
CreateEventW
SetUnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
QueryPerformanceFrequency
GetSystemTimeAsFileTime
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
FormatMessageA
OutputDebugStringA
ReleaseMutex
RemoveDirectoryW
DeleteFileW
MapViewOfFile
GetTempFileNameW
GetLongPathNameW
FindNextFileW
FindClose
SetCurrentDirectoryW
GetFileAttributesExW
GetFileAttributesW
CopyFileW
MoveFileW
ReplaceFileW
MoveFileExW
UnmapViewOfFile
GetFileTime
GetDriveTypeW
GetLogicalDriveStringsW
DeviceIoControl
LoadLibraryA
WaitForSingleObject
Sleep
GetExitCodeProcess
ExpandEnvironmentStringsW
GetComputerNameW
CreateProcessW
SetHandleInformation
ReadFile
GetStdHandle
CreatePipe
WritePrivateProfileStringW
GetPrivateProfileIntW
GetNativeSystemInfo
GetVersionExW
GetLocaleInfoW
GetUserDefaultUILanguage
GetFileSize
DosDateTimeToFileTime
SetFilePointer
SystemTimeToFileTime
CreateDirectoryW
SetFileTime
GetCurrentDirectoryW
GetFileType
DuplicateHandle
FileTimeToSystemTime

user32

ShowCursor
GetWindowLongW
DestroyWindow
CopyRect
SetWindowTextW
IsRectEmpty
SetClipboardViewer
ReleaseCapture
ShowWindow
GetKeyState
IsIconic
ClientToScreen
CharNextW
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
GetClipboardData
CharLowerBuffW
IsZoomed
CloseClipboard
SendMessageW
IsWindow
ReleaseDC
CallWindowProcW
GetClassInfoExW
RegisterClassExW
SetWindowLongW
SendMessageTimeoutW
CreateWindowExW
DefWindowProcW
SetForegroundWindow
UnregisterClassA
GetMessageW
CharUpperA
IntersectRect
PtInRect
EqualRect
BringWindowToTop
MoveWindow
DrawTextW
LoadCursorW
FindWindowW
GetWindow
DrawIconEx
CreateIconIndirect
GetIconInfo
GetSysColorBrush
InflateRect
EndPaint
BeginPaint
GetScrollInfo
MonitorFromWindow
GetDesktopWindow
IsWindowVisible
DestroyIcon
GetMonitorInfoW
GetSystemMetrics
UpdateWindow
CharLowerA
GetWindowRect
MonitorFromPoint
PostMessageW
GetParent
GetWindowInfo
GetAncestor
SetWindowPos
EnableWindow
GetClientRect
ChildWindowFromPoint
GetActiveWindow
SetClipboardData
GetDC
FindWindowExW
CharUpperW
MessageBoxW
SystemParametersInfoW
WaitForInputIdle
KillTimer
SetTimer
WaitMessage
PeekMessageW
GetQueueStatus
MsgWaitForMultipleObjectsEx
DispatchMessageW
TranslateMessage
CallMsgFilterW
PostQuitMessage
UnregisterClassW
CharLowerBuffA
GetGuiResources
WindowFromPoint
EnumChildWindows
RedrawWindow
InvalidateRect
GetCapture
GetUpdateRect
SetFocus
IsWindowEnabled
TrackMouseEvent
SetCapture
NotifyWinEvent
IsChild
RegisterWindowMessageW
SetWindowRgn
UpdateLayeredWindow
SetCursor
GetCursorPos
ScreenToClient
MonitorFromRect
SetScrollInfo
GetPropW
MapWindowPoints
SetLayeredWindowAttributes
GetWindowRgn
EnableMenuItem
OffsetRect
GetWindowPlacement
GetForegroundWindow
SetPropW
TrackPopupMenu
GetSystemMenu
LoadImageW
AdjustWindowRectEx
GetClassNameW
IsClipboardFormatAvailable
SetRectEmpty
GetFocus
GetWindowThreadProcessId
ActivateKeyboardLayout
GetCaretPos
GetSysColor
GetWindowTextW
GetKeyboardLayout
GetDoubleClickTime
FillRect
GetWindowDC
VkKeyScanW
GetWindowTextLengthW
SetMenuItemInfoW
DestroyMenu
EndMenu
UnhookWindowsHookEx
SetWindowsHookExW
GetMenuInfo
GetMenuItemCount
SetMenuInfo
CreatePopupMenu
GetMenuState
TrackPopupMenuEx
InsertMenuItemW
GetMenuItemInfoW
DrawEdge
DrawTextExW
CallNextHookEx
GetSubMenu
GetMessagePos
SetParent
MapVirtualKeyW

gdi32

SelectPalette
GetObjectW
GetStockObject
DeleteObject
SetBrushOrgEx
AbortPath
BeginPath
EqualRgn
EnumFontFamiliesW
PtInRegion
CreateSolidBrush
SetMapMode
RealizePalette
ExcludeClipRect
GetBkColor
CreateBitmap
StretchBlt
CreatePolygonRgn
CreateFontW
GetTextExtentPoint32W
GetDIBits
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
GetTextMetricsW
SetDCBrushColor
SetBkColor
SetArcDirection
SelectClipRgn
CreateRectRgnIndirect
EndPath
SetDCPenColor
SetPolyFillMode
SetStretchBltMode
CreateRectRgn
PolyBezier
SetROP2
PathToRegion
SetGraphicsMode
SetTextColor
CreateFontIndirectW
GdiFlush
SetBkMode
ExtTextOutW
GetOutlineTextMetricsW
SetWorldTransform
GetGlyphOutlineW
SetTextAlign
GetFontData
GetGlyphIndicesW
CreateDIBSection
GetDeviceCaps

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

advapi32

CryptDuplicateKey
CryptDecrypt
CryptReleaseContext
CryptImportKey
CryptAcquireContextW
CreateProcessAsUserW
CloseServiceHandle
OpenSCManagerW
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
OpenServiceW
StartServiceW
QueryServiceStatus
ChangeServiceConfigW
CryptDestroyKey
CryptEncrypt
CryptGetKeyParam
RegQueryValueExW
CryptSetKeyParam

ole32

ReleaseStgMedium
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
RegisterDragDrop
OleDuplicateData
DoDragDrop
RevokeDragDrop
PropVariantClear
CoCreateGuid
CoInitializeEx
CoTaskMemFree

oleaut32

VariantClear
VarUI4FromStr
SysFreeString
SysStringLen
LoadTypeLi
SysAllocString
LoadRegTypeLi

iphlpapi

GetExtendedTcpTable
GetAdaptersInfo

imm32

ImmReleaseContext
ImmGetContext
ImmAssociateContextEx
ImmGetCompositionStringW

shlwapi

SHGetValueW
PathStripPathW
PathCommonPrefixW
PathAppendW
PathIsPrefixW
StrCmpLogicalW
StrFormatByteSizeW
ord12
PathRemoveFileSpecW
wnsprintfW
UrlCreateFromPathA
PathIsUNCA
PathFileExistsW
StrCmpW
PathFileExistsA
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
StrCmpIW
PathCreateFromUrlW
UrlCreateFromPathW
PathIsUNCW
SHStrDupW
PathGetCharTypeW
SHCreateStreamOnFileEx
PathIsDirectoryW
PathFindSuffixArrayW
StrCpyW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

msimg32

AlphaBlend

usp10

ScriptShape
ScriptFreeCache
ScriptItemize

oleacc

ObjectFromLresult
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipFree
GdipAddPathEllipseI
GdipSetSmoothingMode
GdipAlloc
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipDisposeImage
GdipDrawPath
GdipDrawImageRectRectI
GdipGetImageHeight
GdipSetClipRegion
GdipFillRectangleI
GdipGetImageWidth
GdipCreatePath
GdipSetClipPath
GdipCloneImage
GdipSetInterpolationMode
GdipCreateRegion
GdipDeleteRegion
GdipDeletePath
GdipCreateBitmapFromFile
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawRectangleI
GdipGetClip

libcurl

curl_slist_append
curl_easy_setopt
curl_easy_perform
curl_easy_strerror
curl_easy_cleanup
curl_easy_getinfo
curl_formadd
curl_slist_free_all
curl_easy_init

psapi

GetProcessMemoryInfo

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Parent
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
CM_Locate_DevNodeW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
CM_Get_Device_IDW
CMP_WaitNoPendingInstallEvents
SetupCopyOEMInfW
SetupDiCancelDriverInfoSearch

wininet

InternetCloseHandle
InternetQueryDataAvailable
HttpQueryInfoW
HttpSendRequestW
InternetConnectA
InternetSetStatusCallbackA
InternetCrackUrlW
InternetGetConnectedState
InternetSetOptionW
InternetReadFileExA
InternetCrackUrlA
InternetReadFile
InternetOpenA
HttpSendRequestA
InternetOpenW
InternetConnectW
HttpOpenRequestW
InternetSetOptionA
HttpAddRequestHeadersA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersW

winhttp

WinHttpReadData
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpConnect
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpenRequest

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Exports

Exports

??0?$List@VByteVector@TagLib@@@TagLib@@QAE@ABV01@@Z
??0?$List@VByteVector@TagLib@@@TagLib@@QAE@XZ
??0?$List@VString@TagLib@@@TagLib@@QAE@ABV01@@Z
??0?$List@VString@TagLib@@@TagLib@@QAE@XZ
??0?$Map@VString@TagLib@@VStringList@2@@TagLib@@QAE@ABV01@@Z
??0?$Map@VString@TagLib@@VStringList@2@@TagLib@@QAE@XZ
??0AttachedPictureFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0AttachedPictureFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0AttachedPictureFrame@ID3v2@TagLib@@QAE@XZ
??0AttachedPictureFrameV22@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0Attribute@ASF@TagLib@@QAE@ABV012@@Z
??0Attribute@ASF@TagLib@@QAE@ABVByteVector@2@@Z
??0Attribute@ASF@TagLib@@QAE@ABVPicture@12@@Z
??0Attribute@ASF@TagLib@@QAE@ABVString@2@@Z
??0Attribute@ASF@TagLib@@QAE@G@Z
??0Attribute@ASF@TagLib@@QAE@I@Z
??0Attribute@ASF@TagLib@@QAE@XZ
??0Attribute@ASF@TagLib@@QAE@_K@Z
??0Attribute@ASF@TagLib@@QAE@_N@Z
??0AudioProperties@TagLib@@IAE@W4ReadStyle@01@@Z
??0ByteVector@TagLib@@QAE@ABV01@@Z
??0ByteVector@TagLib@@QAE@ABV01@II@Z
??0ByteVector@TagLib@@QAE@D@Z
??0ByteVector@TagLib@@QAE@ID@Z
??0ByteVector@TagLib@@QAE@PBD@Z
??0ByteVector@TagLib@@QAE@PBDI@Z
??0ByteVector@TagLib@@QAE@XZ
??0ByteVectorList@TagLib@@QAE@ABV01@@Z
??0ByteVectorList@TagLib@@QAE@XZ
??0CommentsFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0CommentsFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0CommentsFrame@ID3v2@TagLib@@QAE@W4Type@String@2@@Z
??0CoverArt@MP4@TagLib@@QAE@ABV012@@Z
??0CoverArt@MP4@TagLib@@QAE@W4Format@012@ABVByteVector@2@@Z
??0ExtendedHeader@ID3v2@TagLib@@QAE@XZ
??0File@AIFF@RIFF@TagLib@@QAE@PAVIOStream@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@AIFF@RIFF@TagLib@@QAE@VFileName@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@APE@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@APE@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@ASF@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@ASF@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@FLAC@Ogg@TagLib@@QAE@PAVIOStream@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@FLAC@Ogg@TagLib@@QAE@VFileName@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@FLAC@TagLib@@QAE@PAVIOStream@2@PAVFrameFactory@ID3v2@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@FLAC@TagLib@@QAE@VFileName@2@PAVFrameFactory@ID3v2@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@FLAC@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@IT@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@IT@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MP4@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MP4@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MPC@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MPC@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MPEG@TagLib@@QAE@PAVIOStream@2@PAVFrameFactory@ID3v2@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MPEG@TagLib@@QAE@VFileName@2@PAVFrameFactory@ID3v2@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@MPEG@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@Mod@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@Mod@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@Ogg@TagLib@@IAE@PAVIOStream@2@@Z
??0File@Ogg@TagLib@@IAE@VFileName@2@@Z
??0File@Opus@Ogg@TagLib@@QAE@PAVIOStream@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@Opus@Ogg@TagLib@@QAE@VFileName@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@RIFF@TagLib@@IAE@PAVIOStream@2@W4Endianness@012@@Z
??0File@RIFF@TagLib@@IAE@VFileName@2@W4Endianness@012@@Z
??0File@S3M@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@S3M@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@Speex@Ogg@TagLib@@QAE@PAVIOStream@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@Speex@Ogg@TagLib@@QAE@VFileName@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@TagLib@@IAE@PAVIOStream@1@@Z
??0File@TagLib@@IAE@VFileName@1@@Z
??0File@TrueAudio@TagLib@@QAE@PAVIOStream@2@PAVFrameFactory@ID3v2@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@TrueAudio@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@TrueAudio@TagLib@@QAE@VFileName@2@PAVFrameFactory@ID3v2@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@TrueAudio@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@Vorbis@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@Vorbis@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@WAV@RIFF@TagLib@@QAE@PAVIOStream@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@WAV@RIFF@TagLib@@QAE@VFileName@3@_NW4ReadStyle@AudioProperties@3@@Z
??0File@WavPack@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@WavPack@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@XM@TagLib@@QAE@PAVIOStream@2@_NW4ReadStyle@AudioProperties@2@@Z
??0File@XM@TagLib@@QAE@VFileName@2@_NW4ReadStyle@AudioProperties@2@@Z
??0FileBase@Mod@TagLib@@IAE@PAVIOStream@2@@Z
??0FileBase@Mod@TagLib@@IAE@VFileName@2@@Z
??0FileName@TagLib@@QAE@ABV01@@Z
??0FileName@TagLib@@QAE@PBD@Z
??0FileName@TagLib@@QAE@PB_W@Z
??0FileRef@TagLib@@QAE@ABV01@@Z
??0FileRef@TagLib@@QAE@PAVFile@1@@Z
??0FileRef@TagLib@@QAE@VFileName@1@_NW4ReadStyle@AudioProperties@1@@Z
??0FileRef@TagLib@@QAE@XZ
??0FileStream@TagLib@@QAE@VFileName@1@_N@Z
??0FileTypeResolver@FileRef@TagLib@@QAE@ABV012@@Z
??0FileTypeResolver@FileRef@TagLib@@QAE@XZ
??0Footer@APE@TagLib@@QAE@ABVByteVector@2@@Z
??0Footer@APE@TagLib@@QAE@XZ
??0Footer@ID3v2@TagLib@@QAE@XZ
??0Frame@ID3v2@TagLib@@IAE@ABVByteVector@2@@Z
??0Frame@ID3v2@TagLib@@IAE@PAVHeader@012@@Z
??0FrameFactory@ID3v2@TagLib@@IAE@XZ
??0GeneralEncapsulatedObjectFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0GeneralEncapsulatedObjectFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0GeneralEncapsulatedObjectFrame@ID3v2@TagLib@@QAE@XZ
??0Header@Frame@ID3v2@TagLib@@QAE@ABVByteVector@3@I@Z
??0Header@Frame@ID3v2@TagLib@@QAE@ABVByteVector@3@_N@Z
??0Header@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0Header@ID3v2@TagLib@@QAE@XZ
??0Header@MPEG@TagLib@@QAE@ABV012@@Z
??0Header@MPEG@TagLib@@QAE@ABVByteVector@2@@Z
??0IOStream@TagLib@@QAE@XZ
??0Item@APE@TagLib@@QAE@ABV012@@Z
??0Item@APE@TagLib@@QAE@ABVString@2@0@Z
??0Item@APE@TagLib@@QAE@ABVString@2@ABVByteVector@2@_N@Z
??0Item@APE@TagLib@@QAE@ABVString@2@ABVStringList@2@@Z
??0Item@APE@TagLib@@QAE@XZ
??0Item@MP4@TagLib@@QAE@ABV012@@Z
??0Item@MP4@TagLib@@QAE@ABV?$List@VCoverArt@MP4@TagLib@@@2@@Z
??0Item@MP4@TagLib@@QAE@ABVByteVectorList@2@@Z
??0Item@MP4@TagLib@@QAE@ABVStringList@2@@Z
??0Item@MP4@TagLib@@QAE@E@Z
??0Item@MP4@TagLib@@QAE@H@Z
??0Item@MP4@TagLib@@QAE@HH@Z
??0Item@MP4@TagLib@@QAE@I@Z
??0Item@MP4@TagLib@@QAE@XZ
??0Item@MP4@TagLib@@QAE@_J@Z
??0Item@MP4@TagLib@@QAE@_N@Z
??0Latin1StringHandler@ID3v2@TagLib@@QAE@ABV012@@Z
??0Latin1StringHandler@ID3v2@TagLib@@QAE@XZ
??0MetadataBlock@FLAC@TagLib@@QAE@XZ
??0OwnershipFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0OwnershipFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0OwnershipFrame@ID3v2@TagLib@@QAE@W4Type@String@2@@Z
??0Page@Ogg@TagLib@@IAE@ABVByteVectorList@2@IH_N11@Z
??0Page@Ogg@TagLib@@QAE@PAVFile@12@J@Z
??0PageHeader@Ogg@TagLib@@QAE@PAVFile@12@J@Z
??0Picture@ASF@TagLib@@QAE@ABV012@@Z
??0Picture@ASF@TagLib@@QAE@XZ
??0Picture@FLAC@TagLib@@QAE@ABVByteVector@2@@Z
??0Picture@FLAC@TagLib@@QAE@XZ
??0PopularimeterFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0PopularimeterFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0PopularimeterFrame@ID3v2@TagLib@@QAE@XZ
??0PrivateFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0PrivateFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0PrivateFrame@ID3v2@TagLib@@QAE@XZ
??0Properties@AIFF@RIFF@TagLib@@QAE@ABVByteVector@3@W4ReadStyle@AudioProperties@3@@Z
??0Properties@APE@TagLib@@QAE@PAVFile@12@W4ReadStyle@AudioProperties@2@@Z
??0Properties@ASF@TagLib@@QAE@XZ
??0Properties@FLAC@TagLib@@QAE@PAVFile@12@W4ReadStyle@AudioProperties@2@@Z
??0Properties@FLAC@TagLib@@QAE@VByteVector@2@JW4ReadStyle@AudioProperties@2@@Z
??0Properties@IT@TagLib@@QAE@W4ReadStyle@AudioProperties@2@@Z
??0Properties@MP4@TagLib@@QAE@PAVFile@12@PAVAtoms@12@W4ReadStyle@AudioProperties@2@@Z
??0Properties@MPC@TagLib@@QAE@ABVByteVector@2@JW4ReadStyle@AudioProperties@2@@Z
??0Properties@MPC@TagLib@@QAE@PAVFile@12@JW4ReadStyle@AudioProperties@2@@Z
??0Properties@MPEG@TagLib@@QAE@PAVFile@12@W4ReadStyle@AudioProperties@2@@Z
??0Properties@Mod@TagLib@@QAE@W4ReadStyle@AudioProperties@2@@Z
??0Properties@Opus@Ogg@TagLib@@QAE@PAVFile@123@W4ReadStyle@AudioProperties@3@@Z
??0Properties@S3M@TagLib@@QAE@W4ReadStyle@AudioProperties@2@@Z
??0Properties@Speex@Ogg@TagLib@@QAE@PAVFile@123@W4ReadStyle@AudioProperties@3@@Z
??0Properties@TrueAudio@TagLib@@QAE@ABVByteVector@2@JW4ReadStyle@AudioProperties@2@@Z
??0Properties@Vorbis@TagLib@@QAE@PAVFile@12@W4ReadStyle@AudioProperties@2@@Z
??0Properties@WAV@RIFF@TagLib@@QAE@ABVByteVector@3@IW4ReadStyle@AudioProperties@3@@Z
??0Properties@WAV@RIFF@TagLib@@QAE@ABVByteVector@3@W4ReadStyle@AudioProperties@3@@Z
??0Properties@WavPack@TagLib@@QAE@ABVByteVector@2@JW4ReadStyle@AudioProperties@2@@Z
??0Properties@WavPack@TagLib@@QAE@PAVFile@12@JW4ReadStyle@AudioProperties@2@@Z
??0PropertyMap@TagLib@@QAE@ABV01@@Z
??0PropertyMap@TagLib@@QAE@ABV?$Map@VString@TagLib@@VStringList@2@@1@@Z
??0PropertyMap@TagLib@@QAE@XZ
??0RefCounter@TagLib@@QAE@ABV01@@Z
??0RefCounter@TagLib@@QAE@XZ
??0RelativeVolumeFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0RelativeVolumeFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0RelativeVolumeFrame@ID3v2@TagLib@@QAE@XZ
??0String@TagLib@@QAE@ABV01@@Z
??0String@TagLib@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@01@@Z
??0String@TagLib@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4Type@01@@Z
??0String@TagLib@@QAE@ABVByteVector@1@W4Type@01@@Z
??0String@TagLib@@QAE@DW4Type@01@@Z
??0String@TagLib@@QAE@PBDW4Type@01@@Z
??0String@TagLib@@QAE@PB_WW4Type@01@@Z
??0String@TagLib@@QAE@XZ
??0String@TagLib@@QAE@_WW4Type@01@@Z
??0StringHandler@ID3v1@TagLib@@QAE@ABV012@@Z
??0StringHandler@ID3v1@TagLib@@QAE@XZ
??0StringHandler@Info@RIFF@TagLib@@QAE@ABV0123@@Z
??0StringHandler@Info@RIFF@TagLib@@QAE@XZ
??0StringList@TagLib@@QAE@ABV01@@Z
??0StringList@TagLib@@QAE@ABVByteVectorList@1@W4Type@String@1@@Z
??0StringList@TagLib@@QAE@ABVString@1@@Z
??0StringList@TagLib@@QAE@XZ
??0Tag@APE@TagLib@@QAE@PAVFile@2@J@Z
??0Tag@APE@TagLib@@QAE@XZ
??0Tag@ASF@TagLib@@QAE@XZ
??0Tag@ID3v1@TagLib@@QAE@PAVFile@2@J@Z
??0Tag@ID3v1@TagLib@@QAE@XZ
??0Tag@ID3v2@TagLib@@QAE@PAVFile@2@JPBVFrameFactory@12@@Z
??0Tag@ID3v2@TagLib@@QAE@XZ
??0Tag@Info@RIFF@TagLib@@QAE@ABVByteVector@3@@Z
??0Tag@Info@RIFF@TagLib@@QAE@XZ
??0Tag@MP4@TagLib@@QAE@PAVFile@2@PAVAtoms@12@@Z
??0Tag@MP4@TagLib@@QAE@XZ
??0Tag@Mod@TagLib@@QAE@XZ
??0Tag@TagLib@@IAE@XZ
??0TextIdentificationFrame@ID3v2@TagLib@@IAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0TextIdentificationFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0TextIdentificationFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@W4Type@String@2@@Z
??0UniqueFileIdentifierFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0UniqueFileIdentifierFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0UniqueFileIdentifierFrame@ID3v2@TagLib@@QAE@ABVString@2@ABVByteVector@2@@Z
??0UnknownFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0UnknownFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0UnknownMetadataBlock@FLAC@TagLib@@QAE@HABVByteVector@2@@Z
??0UnsynchronizedLyricsFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0UnsynchronizedLyricsFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0UnsynchronizedLyricsFrame@ID3v2@TagLib@@QAE@W4Type@String@2@@Z
??0UrlLinkFrame@ID3v2@TagLib@@IAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0UrlLinkFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0UserTextIdentificationFrame@ID3v2@TagLib@@AAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0UserTextIdentificationFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0UserTextIdentificationFrame@ID3v2@TagLib@@QAE@ABVString@2@ABVStringList@2@W4Type@32@@Z
??0UserTextIdentificationFrame@ID3v2@TagLib@@QAE@W4Type@String@2@@Z
??0UserUrlLinkFrame@ID3v2@TagLib@@IAE@ABVByteVector@2@PAVHeader@Frame@12@@Z
??0UserUrlLinkFrame@ID3v2@TagLib@@QAE@ABVByteVector@2@@Z
??0UserUrlLinkFrame@ID3v2@TagLib@@QAE@W4Type@String@2@@Z
??0XingHeader@MPEG@TagLib@@QAE@ABVByteVector@2@@Z
??0XiphComment@Ogg@TagLib@@QAE@ABVByteVector@2@@Z
??0XiphComment@Ogg@TagLib@@QAE@XZ
??1?$List@VByteVector@TagLib@@@TagLib@@UAE@XZ
??1?$List@VString@TagLib@@@TagLib@@UAE@XZ
??1?$Map@VString@TagLib@@VStringList@2@@TagLib@@UAE@XZ
??1AttachedPictureFrame@ID3v2@TagLib@@UAE@XZ
??1AttachedPictureFrameV22@ID3v2@TagLib@@UAE@XZ
??1Attribute@ASF@TagLib@@UAE@XZ
??1AudioProperties@TagLib@@UAE@XZ
??1ByteVector@TagLib@@UAE@XZ
??1ByteVectorList@TagLib@@UAE@XZ
??1CommentsFrame@ID3v2@TagLib@@UAE@XZ
??1CoverArt@MP4@TagLib@@QAE@XZ
??1ExtendedHeader@ID3v2@TagLib@@UAE@XZ
??1File@AIFF@RIFF@TagLib@@UAE@XZ
??1File@APE@TagLib@@UAE@XZ
??1File@ASF@TagLib@@UAE@XZ
??1File@FLAC@Ogg@TagLib@@UAE@XZ
??1File@FLAC@TagLib@@UAE@XZ
??1File@IT@TagLib@@UAE@XZ
??1File@MP4@TagLib@@UAE@XZ
??1File@MPC@TagLib@@UAE@XZ
??1File@MPEG@TagLib@@UAE@XZ
??1File@Mod@TagLib@@UAE@XZ
??1File@Ogg@TagLib@@UAE@XZ
??1File@Opus@Ogg@TagLib@@UAE@XZ
??1File@RIFF@TagLib@@UAE@XZ
??1File@S3M@TagLib@@UAE@XZ
??1File@Speex@Ogg@TagLib@@UAE@XZ
??1File@TagLib@@UAE@XZ
??1File@TrueAudio@TagLib@@UAE@XZ
??1File@Vorbis@TagLib@@UAE@XZ
??1File@WAV@RIFF@TagLib@@UAE@XZ
??1File@WavPack@TagLib@@UAE@XZ
??1File@XM@TagLib@@UAE@XZ
??1FileBase@Mod@TagLib@@UAE@XZ
??1FileRef@TagLib@@UAE@XZ
??1FileStream@TagLib@@UAE@XZ
??1Footer@APE@TagLib@@UAE@XZ
??1Footer@ID3v2@TagLib@@UAE@XZ
??1Frame@ID3v2@TagLib@@UAE@XZ
??1FrameFactory@ID3v2@TagLib@@MAE@XZ
??1GeneralEncapsulatedObjectFrame@ID3v2@TagLib@@UAE@XZ
??1Header@Frame@ID3v2@TagLib@@UAE@XZ
??1Header@ID3v2@TagLib@@UAE@XZ
??1Header@MPEG@TagLib@@UAE@XZ
??1IOStream@TagLib@@UAE@XZ
??1Item@APE@TagLib@@UAE@XZ
??1Item@MP4@TagLib@@QAE@XZ
??1Latin1StringHandler@ID3v2@TagLib@@UAE@XZ
??1MetadataBlock@FLAC@TagLib@@UAE@XZ
??1OwnershipFrame@ID3v2@TagLib@@UAE@XZ
??1Page@Ogg@TagLib@@UAE@XZ
??1PageHeader@Ogg@TagLib@@UAE@XZ
??1Picture@ASF@TagLib@@UAE@XZ
??1Picture@FLAC@TagLib@@UAE@XZ
??1PopularimeterFrame@ID3v2@TagLib@@UAE@XZ
??1PrivateFrame@ID3v2@TagLib@@UAE@XZ
??1Properties@AIFF@RIFF@TagLib@@UAE@XZ
??1Properties@APE@TagLib@@UAE@XZ
??1Properties@ASF@TagLib@@UAE@XZ
??1Properties@FLAC@TagLib@@UAE@XZ
??1Properties@IT@TagLib@@UAE@XZ
??1Properties@MP4@TagLib@@UAE@XZ
??1Properties@MPC@TagLib@@UAE@XZ
??1Properties@MPEG@TagLib@@UAE@XZ
??1Properties@Mod@TagLib@@UAE@XZ
??1Properties@Opus@Ogg@TagLib@@UAE@XZ
??1Properties@S3M@TagLib@@UAE@XZ
??1Properties@Speex@Ogg@TagLib@@UAE@XZ
??1Properties@TrueAudio@TagLib@@UAE@XZ
??1Properties@Vorbis@TagLib@@UAE@XZ
??1Properties@WAV@RIFF@TagLib@@UAE@XZ
??1Properties@WavPack@TagLib@@UAE@XZ
??1PropertyMap@TagLib@@UAE@XZ
??1RefCounter@TagLib@@UAE@XZ
??1RelativeVolumeFrame@ID3v2@TagLib@@UAE@XZ
??1String@TagLib@@UAE@XZ
??1StringHandler@Info@RIFF@TagLib@@QAE@XZ
??1StringList@TagLib@@UAE@XZ
??1Tag@APE@TagLib@@UAE@XZ
??1Tag@ASF@TagLib@@UAE@XZ
??1Tag@ID3v1@TagLib@@UAE@XZ
??1Tag@ID3v2@TagLib@@UAE@XZ
??1Tag@Info@RIFF@TagLib@@UAE@XZ
??1Tag@MP4@TagLib@@UAE@XZ
??1Tag@Mod@TagLib@@UAE@XZ
??1Tag@TagLib@@UAE@XZ
??1TextIdentificationFrame@ID3v2@TagLib@@UAE@XZ
??1UniqueFileIdentifierFrame@ID3v2@TagLib@@UAE@XZ
??1UnknownFrame@ID3v2@TagLib@@UAE@XZ
??1UnknownMetadataBlock@FLAC@TagLib@@UAE@XZ
??1UnsynchronizedLyricsFrame@ID3v2@TagLib@@UAE@XZ
??1UrlLinkFrame@ID3v2@TagLib@@UAE@XZ
??1UserTextIdentificationFrame@ID3v2@TagLib@@UAE@XZ
??1UserUrlLinkFrame@ID3v2@TagLib@@UAE@XZ
??1XingHeader@MPEG@TagLib@@UAE@XZ
??1XiphComment@Ogg@TagLib@@UAE@XZ
??4?$List@VByteVector@TagLib@@@TagLib@@QAEAAV01@ABV01@@Z
??4?$List@VString@TagLib@@@TagLib@@QAEAAV01@ABV01@@Z
??4?$Map@VString@TagLib@@VStringList@2@@TagLib@@QAEAAV01@ABV01@@Z
??4Attribute@ASF@TagLib@@QAEAAV012@ABV012@@Z
??4ByteVector@TagLib@@QAEAAV01@ABV01@@Z
??4ByteVector@TagLib@@QAEAAV01@D@Z
??4ByteVector@TagLib@@QAEAAV01@PBD@Z
??4ByteVectorList@TagLib@@QAEAAV01@ABV01@@Z
??4CoverArt@MP4@TagLib@@QAEAAV012@ABV012@@Z
??4FileRef@TagLib@@QAEAAV01@ABV01@@Z
??4FileTypeResolver@FileRef@TagLib@@QAEAAV012@ABV012@@Z
??4Header@MPEG@TagLib@@QAEAAV012@ABV012@@Z
??4Item@APE@TagLib@@QAEAAV012@ABV012@@Z
??4Item@MP4@TagLib@@QAEAAV012@ABV012@@Z
??4Latin1StringHandler@ID3v2@TagLib@@QAEAAV012@ABV012@@Z
??4Picture@ASF@TagLib@@QAEAAV012@ABV012@@Z
??4PropertyMap@TagLib@@QAEAAV01@ABV01@@Z
??4RefCounter@TagLib@@QAEAAV01@ABV01@@Z
??4String@TagLib@@QAEAAV01@ABV01@@Z
??4String@TagLib@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4String@TagLib@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4String@TagLib@@QAEAAV01@ABVByteVector@1@@Z
??4String@TagLib@@QAEAAV01@D@Z
??4String@TagLib@@QAEAAV01@PBD@Z
??4String@TagLib@@QAEAAV01@PB_W@Z
??4String@TagLib@@QAEAAV01@_W@Z
??4StringHandler@ID3v1@TagLib@@QAEAAV012@ABV012@@Z
??4StringHandler@Info@RIFF@TagLib@@QAEAAV0123@ABV0123@@Z
??4StringList@TagLib@@QAEAAV01@ABV01@@Z
??6@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV01@ABVByteVector@TagLib@@@Z
??6@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV01@ABVString@TagLib@@@Z
??8?$List@VByteVector@TagLib@@@TagLib@@QBE_NABV01@@Z
??8?$List@VString@TagLib@@@TagLib@@QBE_NABV01@@Z
??8ByteVector@TagLib@@QBE_NABV01@@Z
??8ByteVector@TagLib@@QBE_NPBD@Z
??8FileRef@TagLib@@QBE_NABV01@@Z
??8PropertyMap@TagLib@@QBE_NABV01@@Z
??8String@TagLib@@QBE_NABV01@@Z
??9?$List@VByteVector@TagLib@@@TagLib@@QBE_NABV01@@Z
??9?$List@VString@TagLib@@@TagLib@@QBE_NABV01@@Z
??9ByteVector@TagLib@@QBE_NABV01@@Z
??9ByteVector@TagLib@@QBE_NPBD@Z
??9FileRef@TagLib@@QBE_NABV01@@Z
??9PropertyMap@TagLib@@QBE_NABV01@@Z
??9String@TagLib@@QBE_NABV01@@Z
??A?$List@VByteVector@TagLib@@@TagLib@@QAEAAVByteVector@1@I@Z
??A?$List@VByteVector@TagLib@@@TagLib@@QBEABVByteVector@1@I@Z
??A?$List@VString@TagLib@@@TagLib@@QAEAAVString@1@I@Z
??A?$List@VString@TagLib@@@TagLib@@QBEABVString@1@I@Z
??A?$Map@VString@TagLib@@VStringList@2@@TagLib@@QAEAAVStringList@1@ABVString@1@@Z
??A?$Map@VString@TagLib@@VStringList@2@@TagLib@@QBEABVStringList@1@ABVString@1@@Z
??AByteVector@TagLib@@QAEAADH@Z
??AByteVector@TagLib@@QBEABDH@Z
??APropertyMap@TagLib@@QAEAAVStringList@1@ABVString@1@@Z
??APropertyMap@TagLib@@QBEABVStringList@1@ABVString@1@@Z
??AString@TagLib@@QAEAA_WH@Z
??AString@TagLib@@QBEAB_WH@Z
??BFileName@TagLib@@QBEPBDXZ
??BFileName@TagLib@@QBEPB_WXZ
??H@YA?BVString@TagLib@@ABV01@0@Z
??H@YA?BVString@TagLib@@ABV01@PBD@Z
??H@YA?BVString@TagLib@@PBDABV01@@Z
??HByteVector@TagLib@@QBE?AV01@ABV01@@Z
??MByteVector@TagLib@@QBE_NABV01@@Z
??MString@TagLib@@QBE_NABV01@@Z
??OByteVector@TagLib@@QBE_NABV01@@Z
??YString@TagLib@@QAEAAV01@ABV01@@Z
??YString@TagLib@@QAEAAV01@D@Z
??YString@TagLib@@QAEAAV01@PBD@Z
??YString@TagLib@@QAEAAV01@PB_W@Z
??YString@TagLib@@QAEAAV01@_W@Z
??_7?$List@VByteVector@TagLib@@@TagLib@@6B@
??_7?$List@VString@TagLib@@@TagLib@@6B@
??_7?$Map@VString@TagLib@@VStringList@2@@TagLib@@6B@
??_7AttachedPictureFrame@ID3v2@TagLib@@6B@
??_7AttachedPictureFrameV22@ID3v2@TagLib@@6B@
??_7Attribute@ASF@TagLib@@6B@
??_7AudioProperties@TagLib@@6B@
??_7ByteVector@TagLib@@6B@
??_7ByteVectorList@TagLib@@6B@
??_7CommentsFrame@ID3v2@TagLib@@6B@
??_7ExtendedHeader@ID3v2@TagLib@@6B@
??_7File@AIFF@RIFF@TagLib@@6B@
??_7File@APE@TagLib@@6B@
??_7File@ASF@TagLib@@6B@
??_7File@FLAC@Ogg@TagLib@@6B@
??_7File@FLAC@TagLib@@6B@
??_7File@IT@TagLib@@6B@
??_7File@MP4@TagLib@@6B@
??_7File@MPC@TagLib@@6B@
??_7File@MPEG@TagLib@@6B@
??_7File@Mod@TagLib@@6B@
??_7File@Ogg@TagLib@@6B@
??_7File@Opus@Ogg@TagLib@@6B@
??_7File@RIFF@TagLib@@6B@
??_7File@S3M@TagLib@@6B@
??_7File@Speex@Ogg@TagLib@@6B@
??_7File@TagLib@@6B@
??_7File@TrueAudio@TagLib@@6B@
??_7File@Vorbis@TagLib@@6B@
??_7File@WAV@RIFF@TagLib@@6B@
??_7File@WavPack@TagLib@@6B@
??_7File@XM@TagLib@@6B@
??_7FileBase@Mod@TagLib@@6B@
??_7FileRef@TagLib@@6B@
??_7FileStream@TagLib@@6B@
??_7FileTypeResolver@FileRef@TagLib@@6B@
??_7Footer@APE@TagLib@@6B@
??_7Footer@ID3v2@TagLib@@6B@
??_7Frame@ID3v2@TagLib@@6B@
??_7FrameFactory@ID3v2@TagLib@@6B@
??_7GeneralEncapsulatedObjectFrame@ID3v2@TagLib@@6B@
??_7Header@Frame@ID3v2@TagLib@@6B@
??_7Header@ID3v2@TagLib@@6B@
??_7Header@MPEG@TagLib@@6B@
??_7IOStream@TagLib@@6B@
??_7Item@APE@TagLib@@6B@
??_7Latin1StringHandler@ID3v2@TagLib@@6B@
??_7MetadataBlock@FLAC@TagLib@@6B@
??_7OwnershipFrame@ID3v2@TagLib@@6B@
??_7Page@Ogg@TagLib@@6B@
??_7PageHeader@Ogg@TagLib@@6B@
??_7Picture@ASF@TagLib@@6B@
??_7Picture@FLAC@TagLib@@6B@
??_7PopularimeterFrame@ID3v2@TagLib@@6B@
??_7PrivateFrame@ID3v2@TagLib@@6B@
??_7Properties@AIFF@RIFF@TagLib@@6B@
??_7Properties@APE@TagLib@@6B@
??_7Properties@ASF@TagLib@@6B@
??_7Properties@FLAC@TagLib@@6B@
??_7Properties@IT@TagLib@@6B@
??_7Properties@MP4@TagLib@@6B@
??_7Properties@MPC@TagLib@@6B@
??_7Properties@MPEG@TagLib@@6B@
??_7Properties@Mod@TagLib@@6B@
??_7Properties@Opus@Ogg@TagLib@@6B@
??_7Properties@S3M@TagLib@@6B@
??_7Properties@Speex@Ogg@TagLib@@6B@
??_7Properties@TrueAudio@TagLib@@6B@
??_7Properties@Vorbis@TagLib@@6B@
??_7Properties@WAV@RIFF@TagLib@@6B@
??_7Properties@WavPack@TagLib@@6B@
??_7PropertyMap@TagLib@@6B@
??_7RefCounter@TagLib@@6B@
??_7RelativeVolumeFrame@ID3v2@TagLib@@6B@
??_7String@TagLib@@6B@
??_7StringHandler@ID3v1@TagLib@@6B@
??_7StringHandler@Info@RIFF@TagLib@@6B@
??_7StringList@TagLib@@6B@
??_7Tag@APE@TagLib@@6B@
??_7Tag@ASF@TagLib@@6B@
??_7Tag@ID3v1@TagLib@@6B@
??_7Tag@ID3v2@TagLib@@6B@
??_7Tag@Info@RIFF@TagLib@@6B@
??_7Tag@MP4@TagLib@@6B@
??_7Tag@Mod@TagLib@@6B@
??_7Tag@TagLib@@6B@
??_7TextIdentificationFrame@ID3v2@TagLib@@6B@
??_7UniqueFileIdentifierFrame@ID3v2@TagLib@@6B@
??_7UnknownFrame@ID3v2@TagLib@@6B@
??_7UnknownMetadataBlock@FLAC@TagLib@@6B@
??_7UnsynchronizedLyricsFrame@ID3v2@TagLib@@6B@
??_7UrlLinkFrame@ID3v2@TagLib@@6B@
??_7UserTextIdentificationFrame@ID3v2@TagLib@@6B@
??_7UserUrlLinkFrame@ID3v2@TagLib@@6B@
??_7XingHeader@MPEG@TagLib@@6B@
??_7XiphComment@Ogg@TagLib@@6B@
??_FCommentsFrame@ID3v2@TagLib@@QAEXXZ
??_FOwnershipFrame@ID3v2@TagLib@@QAEXXZ
??_FPageHeader@Ogg@TagLib@@QAEXXZ
??_FUnsynchronizedLyricsFrame@ID3v2@TagLib@@QAEXXZ
??_FUserTextIdentificationFrame@ID3v2@TagLib@@QAEXXZ
??_FUserUrlLinkFrame@ID3v2@TagLib@@QAEXXZ
?APETag@File@APE@TagLib@@QAEPAVTag@23@_N@Z
?APETag@File@MPC@TagLib@@QAEPAVTag@APE@3@_N@Z
?APETag@File@MPEG@TagLib@@QAEPAVTag@APE@3@_N@Z
?APETag@File@WavPack@TagLib@@QAEPAVTag@APE@3@_N@Z
?ID3v1Tag@File@APE@TagLib@@QAEPAVTag@ID3v1@3@_N@Z

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 318KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 734KB - Virtual size: 733KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_helper.exe
.exe windows:5 windows x86 arch:x86

8a35568f444b78ff95c1c69970ffe2c1

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:75:67:d3:93:68:b8:42:32:0e:bc:95:3d:86:b4:4a:b5:7c:6e:bd
Signer

Actual PE Digest

3a:75:67:d3:93:68:b8:42:32:0e:bc:95:3d:86:b4:4a:b5:7c:6e:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_helper.pdb

Imports

shell32

SHGetFolderPathW
CommandLineToArgvW

kernel32

GetModuleFileNameW
MultiByteToWideChar
lstrlenW
RaiseException
GetLastError
LeaveCriticalSection
EnterCriticalSection
SetCurrentDirectoryW
lstrcmpiW
DeleteCriticalSection
SizeofResource
SetEnvironmentVariableA
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadResource
FreeLibrary
FindResourceW
GetProcAddress
CompareStringW
CompareStringA
GetLocaleInfoW
CreateFileA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
VirtualQuery
LoadLibraryA
IsValidCodePage
CloseHandle
ExpandEnvironmentStringsW
WaitForSingleObject
LocalFree
GetCommandLineW
GetCurrentProcessId
GetTickCount
ReleaseMutex
SetLastError
CreateProcessW
CreateMutexW
SetFilePointer
CreateFileW
WriteFile
OutputDebugStringA
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
InterlockedExchangeAdd
IsDebuggerPresent
GetCurrentThreadId
Sleep
WideCharToMultiByte
GetCurrentProcess
TlsGetValue
TlsFree
TlsSetValue
TlsAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
InterlockedExchange
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
GetConsoleCP
GetConsoleMode
ExitProcess
HeapReAlloc
GetCPInfo
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP

user32

MessageBoxW
CharNextW

advapi32

RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueExW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc

oleaut32

VarUI4FromStr

shlwapi

PathRemoveFileSpecW

winmm

timeGetTime

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_installer.exe
.exe windows:5 windows x86 arch:x86

0d0ad7a4b0d798072363b08f823411a0

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

60:80:6f:29:8a:6c:ed:fa:92:2d:ba:d5:54:6e:43:71:a7:65:b4:0e
Signer

Actual PE Digest

60:80:6f:29:8a:6c:ed:fa:92:2d:ba:d5:54:6e:43:71:a7:65:b4:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_installer.pdb

Imports

kernel32

LeaveCriticalSection
GetModuleFileNameW
MultiByteToWideChar
lstrlenW
RaiseException
GetLastError
SizeofResource
EnterCriticalSection
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadResource
FreeLibrary
GetProcAddress
FindResourceW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapFree
HeapAlloc
GetStartupInfoW
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WideCharToMultiByte
VirtualQuery

user32

CharNextW

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegSetValueExW

ole32

CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VarUI4FromStr

shlwapi

PathRemoveFileSpecW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_res.dll
.dll windows:5 windows x86 arch:x86

d0b0ab81bf0e4cd20070f6525db9fd67

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0f:01:4c:6c:a2:06:1c:ea:06:ea:59:38:dc:66:2f:3b:df:63:cc:0a
Signer

Actual PE Digest

0f:01:4c:6c:a2:06:1c:ea:06:ea:59:38:dc:66:2f:3b:df:63:cc:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_res.pdb

Imports

kernel32

GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_shlext.dll
.dll regsvr32 windows:5 windows x64 arch:x64

685168accf469e9d34ec3e008b6536fd

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b5:17:ac:95:29:f8:45:28:81:be:30:61:92:f1:2e:f6:cf:22:06:b3
Signer

Actual PE Digest

b5:17:ac:95:29:f8:45:28:81:be:30:61:92:f1:2e:f6:cf:22:06:b3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_shlext64.pdb

Imports

kernel32

GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
GetThreadLocale
WideCharToMultiByte
lstrcpynA
lstrcpynW
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
SetThreadLocale
RaiseException
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwindEx
HeapAlloc
HeapFree
RtlPcToFileHeader
RtlLookupFunctionEntry
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
HeapDestroy
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

CharNextW

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

shell32

SHGetFolderPathW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2

oleaut32

VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wandoujia_shlext_dll.dll
.dll windows:5 windows x64 arch:x64

880736cc3e46c89ea2d6d748583d1786

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b6:b6:a3:78:76:33:d6:85:03:76:b5:a2:2a:59:80:3d:63:a1:a2:5f
Signer

Actual PE Digest

b6:b6:a3:78:76:33:d6:85:03:76:b5:a2:2a:59:80:3d:63:a1:a2:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wandoujia_shlext_dll64.pdb

Imports

kernel32

FlushFileBuffers
OutputDebugStringW
CloseHandle
CreateThread
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapSetInformation
HeapCreate
HeapDestroy
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RaiseException
RtlPcToFileHeader
Sleep
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
RtlUnwindEx
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
InitializeCriticalSection

user32

SetMenuItemBitmaps
LoadBitmapW
InsertMenuW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

DragQueryFileW
ShellExecuteW

ole32

ReleaseStgMedium

winhttp

WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen

Exports

Exports

real_Initialize
real_InvokeCommand
real_QueryContextMenu

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wdj_core_resource.pak
.js
wdj_tool.exe
.exe windows:5 windows x86 arch:x86

ee944b49607d172ba122f38727f221da

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

03/04/2013, 00:00

Not After

02/06/2015, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ef:98:9a:94:84:0f:ec:78:a1:ad:81:fc:9e:07:7d:6f:5c:d6:82:92
Signer

Actual PE Digest

ef:98:9a:94:84:0f:ec:78:a1:ad:81:fc:9e:07:7d:6f:5c:d6:82:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\wandoujia2.1\Cef_Release\bin\wdj_tool.pdb

Imports

shell32

SHFileOperationW
SHGetSpecialFolderLocation
SHChangeNotify

ole32

CoInitialize
CoUninitialize
CoCreateInstance
PropVariantClear

shlwapi

SHDeleteKeyW
SHStrDupW

winmm

timeGetTime

kernel32

CloseHandle
WaitForSingleObject
InterlockedCompareExchange
GetProcAddress
GetModuleHandleW
GetNativeSystemInfo
GetVersionExW
GetCurrentProcess
CreateFileW
GetFileAttributesExW
DeleteFileW
RemoveDirectoryW
GetLastError
lstrlenW
SetLastError
WriteFile
GetCurrentProcessId
GetTickCount
ReleaseMutex
CreateProcessW
GetModuleFileNameW
CreateMutexW
SetFilePointer
OutputDebugStringA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetSystemTimeAsFileTime
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
RaiseException
GetCurrentThreadId
Sleep
GetCommandLineW
TlsGetValue
TlsFree
GetEnvironmentStrings
TlsAlloc
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
HeapFree
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetFileAttributesA
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
VirtualAlloc
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
VirtualQuery
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetExitCodeProcess
CreateProcessA
CreateFileA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsA
TlsSetValue

user32

MessageBoxW

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wdjconx64.exe
wdjconx86.exe
.exe windows:5 windows x86 arch:x86

4a8b1b3af5ed6b972156a2972693a918

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:01:5b:12:73:ae:a3:25:80:0a:a3:d5:36:cc:b1:3d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25/04/2011, 00:00

Not After

24/04/2013, 23:59

Subject

CN=Wandou Technology Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Wandou Technology Ltd,O=Wandou Technology Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:32:a9:b6:bc:ff:ee:65:9b:b0:12:c5:5f:79:50:25:94:1b:f0:55
Signer

Actual PE Digest

4d:32:a9:b6:bc:ff:ee:65:9b:b0:12:c5:5f:79:50:25:94:1b:f0:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryW
GetFileAttributesW
GetFullPathNameW
TerminateProcess
GetModuleHandleA
FreeLibrary
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcpynW
FileTimeToSystemTime
GetDateFormatW
lstrcpyW
lstrlenW
GetLastError
GetCurrentProcess
CloseHandle
LocalFree
FormatMessageW
QueryPerformanceCounter

msvcrt

fputws
fputs
_iob
??3@YAXPAX@Z
??2@YAPAXI@Z
wcschr
towlower
towupper
iswalpha
_wcsnicmp
_wcsicmp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcscmp
wprintf
wcsrchr

advapi32

OpenProcessToken
LookupPrivilegeValueW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges

setupapi

SetupDiClassGuidsFromNameExW
CM_Free_Log_Conf_Handle
CM_Get_Next_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Size_Ex
CM_Connect_MachineW
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
CM_Disconnect_Machine
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiBuildClassInfoListExW
SetupDiClassNameFromGuidExW
SetupDiGetClassDescriptionExW
SetupDiOpenClassRegKeyExW
SetupDiGetDriverInstallParamsW
SetupDiSetSelectedDriverW
SetupOpenFileQueue
SetupDiCallClassInstaller
SetupScanFileQueueW
SetupCloseFileQueue
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupDiDestroyDriverInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Device_ID_ExW
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiGetClassDevsExW
SetupDiCreateDeviceInfoListExW
CM_Get_Res_Des_Data_Ex
CM_Get_DevNode_Status_Ex
CM_Get_First_Log_Conf_Ex

user32

ExitWindowsEx
CharNextW
LoadStringW
CharPrevW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

72:9e:18:f5:a6:2b:45:63:89:e5:fb:d2:dc:27:c4:bd:1d:fe:4c:f4Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 409KB

.ndata Size: - Virtual size: 1.1MB

.rsrc Size: 45KB - Virtual size: 44KB

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 963B

.data Size: 512B - Virtual size: 64B

.reloc Size: 1024B - Virtual size: 588B

cea3c8580830e439523e63ac83c16ffb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

kernel32

user32

advapi32

ole32

shell32

oleaut32

comctl32

gdi32

Exports

Exports

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 13KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 17KB - Virtual size: 17KB

6dda1351a13e10d1369ccf216137b4fe

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

72:9e:18:f5:a6:2b:45:63:89:e5:fb:d2:dc:27:c4:bd:1d:fe:4c:f4
Signer

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 409KB

.ndata
Size: - Virtual size: 1.1MB

.rsrc
Size: 45KB - Virtual size: 44KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 1024B - Virtual size: 588B

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 13KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 17KB - Virtual size: 17KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

ec:77:08:1a:96:90:4d:75:6c:8a:04:ee:db:ab:50:0b:32:fc:66:cf
Signer

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 7KB - Virtual size: 19KB

.pdata
Size: 9KB - Virtual size: 8KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 2KB - Virtual size: 1KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

74:10:00:f6:01:81:2e:b3:6c:c3:65:9e:15:d6:16:89
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

d0:69:8a:b7:41:22:72:63:b9:5c:6f:07:db:d6:88:0e:2a:11:3d:64
Signer

.text
Size: 138KB - Virtual size: 137KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 6KB - Virtual size: 17KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 16KB - Virtual size: 15KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate